Privacy policy

We take data protection seriously. The protection and security of your personal data, that is, all data about you (hereinafter "personal data"), is our top priority.

Therefore, the data entrusted to us will be processed with the utmost care and in accordance with the applicable data protection rules, i.e. the EU General Data Protection Regulation ("GDPR") and the applicable national data protection law, i.e. Act CXII of 2011 on the Right to Informational Self-Determination and Freedom of Information ("Information Act").

Below you can find out what data we collect about you, how we collect it, on what legal basis, for what purposes we use it, how we protect it and what rights you have in relation to the processing of your data.

I. MANAGER

With respect to your personal data, we are a "data controller" under the GDPR when you use our www.westwing.hu website or app, including for the sale of goods and provision of services we offer, and your use of your Westwing accounts, including on social media platforms such as "Facebook", "Instagram", "TikTok" and "Pinterest":

Westwing GmbH, Moosacher Straße 88, 80809 Munich, Germany, e-mail: service@westwing.hu, (hereinafter "Westwing" or "we").

In certain cases, Westwing GmbH and Westwing Group SE, Moosacher Straße 88, 80809 Munich, are jointly responsible for the processing. In this context, Westwing and Westwing Group SE have contractually defined their data protection obligations in accordance with Article 26 of the GDPR.

II. DATA PROTECTION OFFICER

You can also contact our Data Protection Officer at any time if you have any questions about the processing of your personal data or the exercise of your rights. You can contact him or her using the contact details below:

Christian Volkmer Projekt 29 GmbH & Co. KG, Ostengasse 14, 93047 Regensburg, Germany, e-mail: anfrage@projekt29.de, website: www.projekt29.de.

III. CATEGORIES OF PERSONAL DATA PROCESSED

The personal data collected when you use our website, app or social media accounts can be classified into the following categories:

Information collected when you browse our website or our application, depending on which cookies you have consented to our setting (e.g. login information, i.e. the date and time you logged in to our website, language preferences, products in your shopping cart or information about your preferences, e.g. in relation to product categories),
Data collected when you create your account (e.g. your name, address, email address, preferred address (if you have provided it), telephone number (if you have provided it), encrypted password for your account),
Data processed in connection with your order (e.g. data relating to the products you have purchased or services you have used, and payment data you have provided),
Your information that we collect when you contact us (e.g. your name, email address, telephone number, customer, order and item numbers, and any other information you provide),
Information about you, which in some cases we transfer to third party service providers in order to communicate with you on our website or app and to personalise the communication (e.g. your name, email address or products of interest to you based on your browsing habits),
Information that we collect when you opt-in to receive newsletters, customer satisfaction surveys, product reminders, and your habits regarding the content of our promotional emails (e.g., opening a newsletter or clicking on a link in a newsletter),
Information about you that we may in some cases receive from our cooperating partners (e.g. credit intermediaries, technical service providers, debt collection or payment service providers),
The data processed to enter prize draws (e.g. your name and email address),
Statistical or aggregated information about your usage of our social media accounts,
Information about you that we receive from a friend or other acquaintance who would like to invite you to use our website or app (e.g. your email address).

IV. THE PURPOSES FOR WHICH WE PROCESS YOUR PERSONAL DATA

We use your personal data for various purposes, such as:

to provide certain technical functions on our website and app (such as storing your goods in the shopping cart) and to protect our website and app,
to analyse your behaviour on the website in order to optimise our offer and the benefits we provide to you and make them more interesting,
to create a user account,
fulfilling and processing orders for goods and services sent to us (e.g. sending goods),
to contact you (e.g. to answer your questions, send you order confirmations and order-related notifications, or to inform you about changes that are important to you, such as the applicable Terms and Conditions or this Privacy Notice),
for advertising and marketing purposes (e.g., sending you our newsletter, notifying you of vouchers or special promotions, reminding you of your shopping cart history, sending you product reviews and market research, or other similar promotional activities),
the processing of payments made by us or our collaborating partners, the investigation of fraud by us or our collaborating partners and the enforcement of claims made by our collaborating partners;
participation in prize draws,
statistical analysis of your behaviour on our social media accounts to optimise our offer and the benefits we provide to you,
for the purpose of inviting a friend or other acquaintance to use our website or app.

We will never process special categories of personal data within the meaning of Article 9 of the GDPR (e.g. health data or data relating to your religion) unless you provide the relevant information without being asked to do so when communicating with our customer service.

If we wish to collect and process additional personal data about you, we will inform you separately and, if necessary, ask for your consent.

V. THE LEGAL BASIS FOR PROCESSING YOUR PERSONAL DATA

We will only process your data on one of the following legal grounds: if you have given your consent to the processing of your data (Article 6(1)(a) of the GDPR), if we have a legitimate interest in processing your data (Article 6(1)(f) of the GDPR), if we need your data to take steps prior to entering into a contract with you or to perform a contract (Article 6(1)(c) of the GDPR). If the processing is necessary for the purposes of the legitimate interests pursued by Westwing or any third party, Westwing will carry out an assessment of the underlying legitimate interests, which assessment is available upon request to Westwing via the contact details listed above.

VI. THE RECIPIENTS OF YOUR PERSONAL DATA

Westwing is at all times responsible for the processing of your personal data collected through our website or app.

We will only transfer your data to third parties in the following cases, according to the legal bases listed in each case:

where the transfer of your data is necessary for the steps we take prior to entering into a contract with you or for the performance of your contract (as defined in Article 6(1)(b) of the GDPR); this includes, for example, sharing data with payment and logistics service providers, carriers and suppliers if they deliver directly to you); or
where your data is necessary for compliance with a legal obligation (under Article 6(1)(c) of the GDPR; this includes, for example, transferring data to public authorities and law enforcement authorities in order to comply with our legal obligations to provide information, disclosure or redress); or
on the basis of our legitimate interests (as defined in Article 6(1)(f) of the GDPR); this includes, for example, the transfer of data in the context of the transfer of claims or for administrative purposes within a group of companies);
when we process your personal data using external service providers, known as data processors, who are obliged to handle your data with care and who act only on our behalf and in accordance with our instructions (as defined in Article 28 of the GDPR; this includes, for example, data processors in the fields of IT, logistics, telecommunications, sales and marketing).

VII. TRANSFERS OF DATA TO THIRD COUNTRIES

When we transfer your personal data to third countries, i.e. to external bodies outside the European Union ("EU") and the European Economic Area ("EEA"), we ensure that the external bodies concerned treat your personal data with the same care as we do.

In addition, we will only transfer your personal data to third countries for which the European Commission has confirmed an adequate level of data protection or where a level of data protection comparable to that of the EU or EEA can be ensured by contractual agreements or other appropriate safeguards (as defined in Article 45 et seq. of the GDPR).

VIII. ERASURE OF YOUR PERSONAL DATA

Unless there are legal retention periods to the contrary (e.g. commercial and tax laws), we will only retain your personal data for as long as necessary for the purposes for which it is processed or until you inform us that your personal data needs to be deleted.

For example, such retention periods under tax or commercial law apply to data relating to your orders, such as invoices. For example, the latter are stored for ten years.

Accounts of customers who have not actively used their account for more than six years will be deleted.

For the purposes of online security and abuse prevention, so-called log files collected when you browse our website or use our application are usually stored for 20 days, or in individual cases for 180 days if longer storage is necessary to investigate possible cyber attacks, fraud or abuse. After this period, your data will be deleted or anonymised so that it can no longer be linked to an individual.

IX. DETAILS OF THE PROCESSING OF YOUR DATA ON OUR WEBSITE

1. PROCESSING OF DATA WHEN USING OUR WEBSITE

When you visit our website, the following information is automatically collected and stored in so-called "server log files". Your browser automatically transmits this information to us so that our website can be displayed in your browser and so that you can use our website:

the IP address of your internet service provider,
the website from which you visit us and the websites you visit from our website,
the date and time of access and details of any errors,
information about the browser and operating system used,
where applicable, the email address you use to register on our website,
identification numbers, called cookies or eTags, stored on your terminal equipment, which allow us to recognise your terminal equipment on the website,
location data,
visits or clicks on pages and products.

The processing or storage of your access data or IP address mentioned above is necessary for technical reasons to ensure the security of the system on our website.

In addition, we use server log files only to customise and optimise our online offer, whereby we assign you a unique user ID when you visit our website, which is only merged or linked with your email address in the event of an error on the website.

If you visit our website to find out more about or use our range of products and services, the temporary storage and processing of access data is based on Article 6(1)(b) of the GDPR, which allows the processing of personal data for the performance of a contract or the execution of pre-contractual measures.

In addition, the processing or temporary storage of your technical access data is necessary for our legitimate interest under Article 6(1)(f) of the GDPR. In particular, our legitimate interest is to provide you with a technically functional, simple and secure website.

Access data collected during the use of our website will only be stored for as long as necessary to fulfil the above purposes. Server log files are stored for up to 180 days and then deleted.

2. DATA PROCESSING DURING REGISTRATION OR ACCOUNT CREATION

To register and create your account, we need your email address and the password of your choice. In addition, we collect and process your contact details, i.e. your name, address, email address, the method of communication through which you would like us to contact you (if you have provided it) and your telephone number (if you have provided it). The email address is used as an access code to your account. After successful registration, you will automatically receive a confirmation email. You can also store your personal data in your user account and use it to make convenient purchases on our website, while your billing and shipping address data will be automatically stored in your account as described in section 3 below. You may update your information at any time in the personal area of your user account ("My Account"). We use this information to, among other things, process orders, offer payment options, and process payments and returns.

We want to make your visit to our website as pleasant as possible by using the "stay logged in" feature. This feature allows you to use our services without having to log in each time. Technically, the cookie is stored on your device, so you do not have to log in again on subsequent visits to our website. This functionality is not available to you if you have disabled this cookie through your cookie settings or if you have deleted it from your browser settings after logging out of our website.

The legal basis for the related processing is Article 6(1)(b) of the GDPR, which allows the processing of personal data for the performance of a contract or the execution of pre-contractual measures.

The data collected when you create or register a user account will only be stored for as long as it is necessary to achieve the above purposes or for as long as you maintain an active user account with Westwing.

3. DATA PROCESSING FOR THE PURPOSE OF PROCESSING YOUR ORDER

When you place an order with us, we process your data for the purposes of concluding and fulfilling the contract and processing the order, including payment and delivery. The billing details and (possibly different) delivery addresses you provide will be stored in your customer account so that you do not have to re-enter them the next time you make a purchase. You can change this information at any time for future reference.

The legal basis for the related processing is Article 6(1)(b) of the GDPR, which allows the processing of personal data for the performance of a contract or the execution of pre-contractual measures.

Personal data processed as part of orders will be deleted at the latest after legal obligations to retain data for tax and accounting purposes have been fulfilled.

3.1. CHOOSING THE PAYMENT METHOD

Depending on the payment method you have chosen, the system will ask you for the information necessary to use that payment service provider. These payment details are transmitted directly to the payment service provider and are not stored by us. The respective payment service provider is responsible for the processing of your payment data. You can find information on this on the website of the relevant payment service provider.

If you do not agree with the payment methods offered, you can inform us in writing at service@westwing.hu. We will then review our decision in the light of your views.

3.1.1. PAYMENT BY CREDIT CARD

When you pay by credit card, we receive a so-called payment identifier and the last four digits of the credit card number from the payment service provider, Stripe Payments Europe Ltd (1 Grand Canal Street Lower, Grand Canal Dock, Dublin, D02 H210, Ireland).

This data is used to authenticate and identify your order and is therefore transmitted for your security. The personal data required to process your payment is collected directly by the above-mentioned payment service provider.

The legal basis for the processing mentioned above is Article 6(1)(b) of the GDPR, which allows processing for the performance of a contract.

For more information about Stripe Payments Europe Ltd.'s privacy practices, please visit the Stripe website at https://stripe.com/en-de/privacy.

3.1.2. APPLE PAY

If you choose Apple Pay to pay for your purchases directly through your bank account, the relevant account information will be provided by your payment provider, Stripe Payments Europe, 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, D02 H210, Ireland. The personal data required to process the payment will be collected directly by the above mentioned payment service provider.

The legal basis for the processing mentioned above is Article 6(1)(b) of the GDPR, which allows processing for the performance of a contract.

For more information about Apple Pay privacy, please visit the Apple Pay website at https://www.apple.com/legal/privacy/data/hu/apple-pay/.

3.1.3. GOOGLE PAY

If you choose Google Pay to pay for your purchases directly through your bank account, the relevant account information will be provided to you by the payment service provider, Stripe Payments Europe (1 Grand Canal Street Lower, Grand Canal Dock, Dublin, D02 H210, Ireland). The personal data necessary for processing and making payments is collected directly by the above-mentioned payment service provider.

The legal basis for the processing mentioned above is Article 6(1)(b) of the GDPR, which allows processing for the performance of a contract.

For more information about Google Pay privacy, please visit the Google Pay website at https://payments.google.com/payments/apis-secure/get_legal_document?ldo=0&ldt=buyertos&ldr=hu .

3.1.4. PAYPAL

If you choose to pay via PayPal, your personal data (i.e. your first and last name, delivery address, e-mail address, telephone number, amount to be paid and IP address) will be transmitted to PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, 2449 Luxembourg, so that you can authorise us to accept payments via PayPal. To do this you will need a PayPal account.

The legal basis for the processing referred to above is Article 6(1)(b) of the GDPR, which allows the processing of personal data for the performance of a contract or the execution of pre-contractual measures.

For more information about PayPal privacy, please visit the PayPal website at https://www.paypal.com/hu/legalhub/paypal/privacy-full

4. FRAUD PREVENTION

We check for common fraud patterns and anomalies to prevent fraud and non-payment. For this purpose, we process order and payment data (e.g. address, item, payment method) and device data (e.g. device, browser). The legal basis for processing is Article 6(1)(f) GDPR - our legitimate interest in protecting against abuse.

For more information on the payment methods offered, please see our General Terms and Conditions (GTC).

5. PROCESSING WHEN YOU CONTACT US

5.1. CONTACT CHANNELS

You have several options to contact us. You can contact our customer service through the following communication channels:

Phone
Fax,
Mail to
E-mail,
You can also use the contact form.

In order to process your request, we collect your name, email address, telephone number, customer, order and item numbers, and any other information you provide, depending on the communication channel you use to contact us.

The legal basis is Article 6(1)(b) of the GDPR, which states that the processing of data is necessary for the performance of a contract.

5.2. OUR ZENDESK CUSTOMER SUPPORT SYSTEM

We use the Zendesk customer support system to process enquiries for contact purposes. The service provider is Zendesk, Inc, 1019 Market Street, San Francisco, CA 94103 USA.

We also use Zendesk to process enquiries quickly and efficiently. As a reminder, you can simply enter your email address instead of your name.

We have a data processing contract with Zendesk. This contract ensures that your personal data is processed only in accordance with our instructions and in compliance with the GDPR and other applicable laws.

Your data may be transferred to and stored on Zendesk servers located in the United States. This is based on the European Commission's Compliance Decision of 10 July 2023 (which approved the Data Privacy Framework) in accordance with Article 45 of the GDPR and your consent.

6. PROCESSING FOR ADVERTISING PURPOSES

6.1. SENDING ADVERTISING E-MAILS

If you have consented to this, Westwing will send you the Westwing Newsletter by e-mail on a regular basis to inform you about the latest trends in Home & Living, "must-have" Home & Living styles, special features in Westwing's online and retail stores, as well as special offers or "Specials of the Day" and "Specials of the Week" ("Newsletter"). For details, please see section 6.1.1.

Depending on your consent, you may also receive email notifications from us about personalised benefits such as vouchers or special promotions, reminders about products in your shopping cart, reviews of Westwing products you have purchased, and surveys about Westwing or Westwing services ("Notifications"). Details about this are also set out in section 6.1.1.

6.1. SENDING ADVERTISING EMAILS BASED ON YOUR CONSENT

If you have given your consent by ticking the box on our website, we will send you newsletters and/or email notifications.

Please note, however, that we will only send you newsletters and/or e-mail notifications if you have expressly confirmed to us in advance by clicking on the button that you wish to receive the relevant e-mails. Following your consent to the email address you have provided, we will send you a corresponding button in the notification email (the so-called "double opt-in procedure"). This is to prevent abuse by third parties who may use your email address to subscribe to Westwing newsletters or Westwing notifications without your consent. The legal basis for the double opt-in procedure is Article 6(1)(f) GDPR, as we have an overriding legitimate interest in preventing such abuse and documenting your consent.

The legal basis for the processing of personal data relating to the sending of the above mentioned promotional emails is your consent in accordance with Article 6(1)(a) of the GDPR.

You may withdraw your consent at any time in the future as follows:

Click on the unsubscribe link at the end of our promotional emails to be redirected (depending on whether you wish to unsubscribe from newsletters or email notifications) to the newsletter or notification management section of your account (collectively, "Promotional Email Management"). There, you can easily uncheck the boxes for any newsletters or notifications you no longer wish to receive.

Optionally, you can log in to your user account and click on the "My Newsletters" or "My Notifications" tab (depending on the type of email you wish to unsubscribe from), then unsubscribe from the newsletters or notifications you no longer wish to receive by unchecking the appropriate box in the newsletter management or notification management above.

You may withdraw your consent to receive newsletters and/or notifications and unsubscribe from receiving relevant promotional emails by sending an email to service@westwing.hu.

Through our advertising email management interface mentioned above, we allow you to give and withdraw your consent to receive our newsletters and/or notifications in a number of ways. By checking or unchecking the box, you can individually decide whether you would like to receive newsletters or email notifications, and if so, when or how often, depending on which newsletter or notification you find useful and how often you would like to receive that newsletter or notification.

Please note that we use standard market technologies in our promotional emails to measure the number of times emails and/or links you click on are opened. We use this data for general statistical evaluation and to optimise and improve our content and customer communications. This is done using small graphics (so-called pixels) embedded in the newsletter. The legal basis for this is our legitimate interest in optimising and improving our content and customer communications (Article 6(1)(f) GDPR). If you do not wish to have your usage patterns analysed in this way, you can opt out of receiving promotional emails at any time or you can turn off the graphics in your mail client by default.

Our newsletters and notifications are sent via the mailing service of Mapp Digital Germany GmbH, Dachauer Straße 63, 80335 Munich, Germany ("Mapp"). We have concluded a data processing agreement with Mapp for the processing of personal data in accordance with Article 28 of the GDPR. For more information, please see Mapp's privacy policy https://mapp.com/de/privacy/.

6.2. SENDING NEWSLETTERS VIA WHATSAPP

We also allow you to receive our newsletter via "WhatsApp". We use the WhatsApp Business app to send you newsletters via WhatsApp.

For this purpose, we cooperate with our data processors: charles GmbH, Gartenstraße 86-87, 10115 Berlin, Germany and Braze, Inc., 318 West 39th Street, 5th Floor, New York, New York 10018, USA ("Braze").

Your use of WhatsApp is governed by the WhatsApp Ireland Limited (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland) Privacy Policy. Among other things, they specify that each WhatsApp message is encrypted end-to-end and thus protected from access by third parties.

The legal basis for the processing of your data by Westwing is the following: point 6 (1) (a) of the GDPR, as you have given your consent to receive newsletters on our website and confirmed in your WhatsApp message that you would like to receive newsletters through this channel, i.e. news about new products and interior design trends. You can withdraw your consent at any time with effect for the future by sending a "Stop" message.

Westwing is committed to complying with the WhatsApp Business Privacy Policy, which can be found here: https://business.whatsapp.com/privacy-protections.

7. THE PROCESSING OF YOUR DATA FOR THE PURPOSES OF COMMUNICATING WITH YOU THROUGH OUR WEBSITE AND APP

We also use Braze to communicate on our website and in our app. For this purpose, for example, we present you with so-called "layers" with the possibility of interaction.

We also use Braze to send push notifications in our app.

Braze processes, among others, the following personal data for this purpose: your IP address, device-related data such as device type, model, operating system, browser type and version, usage data such as time of use, name, email hash, data related to interaction with Braze SDK and messages, installation ID, device ID.

The legal basis for processing your personal data is Article 6(1)(a) of the GDPR. You may withdraw your consent at any time for the future. The easiest way to withdraw your consent is through our Cookie Consent Manager.

More information about Braze's data protection compliance can be found here: https:www.braze.com/privacy/.

8. PROCESSING OF DATA RELATING TO PARTICIPATION IN PRIZE DRAWS

If you participate in prize draws, we will only process the data necessary for the organisation of the prize draw (Article 6(1)(b) GDPR). Please also take note of the data protection information in the relevant prize draw terms and conditions.

9. PROCESSING IN THE CASE OF FORMAL PROCEEDINGS

In addition, in individual cases, we may also process your personal data for the purposes of pursuing any legal claims or defending against legal claims, or for the purposes of defending against or prosecuting criminal offences.

The legal basis for this is the protection of our legitimate interests pursuant to Article 6(1)(f) of the GDPR.

10. PROCESSING OF DATA WHEN USING FAN PAGES ON SOCIAL NETWORKS

Westwing is active and present on social networks and social platforms to communicate with interested parties and users and to inform them about other Westwing offers. Below is an overview of how we process and use your personal data and how we use the social media platforms listed below:

10.1. FACEBOOK AND INSTAGRAM

We operate social media "fan pages" on Facebook and Instagram in conjunction with Meta Platforms Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland ("Meta") to communicate with our fans (such as our customers and other interested parties) and inform them about our products, competitions and other promotions.

You can view the contract used by Meta here: https://www.facebook.com/legal/terms/page_controller_addendum

We use meta-statistics about the use of our Fan Sites (e.g., number, name, interactions, including in particular "likes" and comments, and aggregate demographic and other information or statistics; "Insights") to learn about how our Fan Site is used, what interests visitors to our Fan Sites, and which topics and content are particularly popular, so that we can optimize and tailor the content of our Fan Site to our users. Insights data contains only statistical and anonymised information about visitors to the fan page and therefore cannot be attributed to a specific individual. For more information about the type and scope of statistics, please see the Facebook Page Statistics Information. For more information on the relevant responsibilities and how Facebook processes your data, please refer to the so-called "Supplementary Information on Facebook Pages": https:www.facebook.com/legal/terms/information_about_page_insights_data.

Please note that we are not able to control the processing of your data, which Meta carries out at its own risk in accordance with Meta's terms of use. However, we would like to point out that when you visit the "Fan Pages", Facebook and the "Fan Pages" transmit data about your usage patterns to Facebook. Facebook itself processes your personal data to compile the above statistics and for its own market research and advertising purposes. We do not have access to this data.

If we receive personal information from you in the course of operating the Fan Sites, you have the rights set out in this Privacy Notice. If you wish to exercise your rights against Facebook beyond this, you can contact Facebook directly. We will be happy to assist you as much as possible in exercising your rights and will direct your enquiries to Facebook.

The legal basis for the processing is Article 6(1)(f) GDPR, based on our legitimate interest mentioned above to offer you our Facebook fan pages for marketing and advertising purposes.

For more information on this, please see Meta's privacy policy: https://www.facebook.com/privacy/policy/?entry_point=data_policy_redirect&entry=0.

10.2. YOUTUBE

On YouTube.com, we use so-called "plugins" to embed our own videos and make them available to the public. YouTube is a service provided by a third party, YouTube LLC, operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"), which is not affiliated with us.

Once you enter our YouTube channel, your browser will connect to YouTube and transmit information. YouTube content is only integrated in the so-called "extended data protection mode". This is provided by YouTube itself, and YouTube informs you that it ensures that YouTube user data (e.g. cookies) are only stored on your device when the video is played. When you access the videos in question on this site, your IP address, unique identifiers, browser type and settings, device type and settings, operating system, mobile network information such as mobile operator name and phone number, and application version number are transmitted to YouTube. YouTube also collects information about how YouTube's applications, browsers and devices interact with its own services. The transfer of data to YouTube's partners does not necessarily preclude "extended privacy mode". YouTube will connect to Google's DoubleClick network whether or not you watch the video. The data transmitted includes your IP address, any error reports, system activity, and the date and time of your request and the referring URL. In addition, YouTube collects information about your activities (e.g. the terms you search for, the videos you watch, etc.) All data collected about you through our YouTube channel is processed by YouTube. According to YouTube, this information is used to, among other things, compile video statistics, facilitate use and prevent abuse. YouTube also uses cookies to collect information about user behaviour. The storage of these cookies can be blocked through appropriate settings and browser extensions. By logging into your YouTube account, you allow YouTube to associate your browsing behaviour directly with your personal profile. You can avoid this by logging out of your YouTube account before activating the play button.

In addition, we occasionally integrate YouTube videos directly into our website using so-called "plug-ins". With this integration, content from the YouTube website is displayed in parts of the browser window. However, YouTube videos can only be accessed with a single click. This technique is also called "framing". When you access a (sub)page of our website where YouTube videos are framed in this way, a connection is established with YouTube's servers and the content is displayed on the website with a notification to your browser. We have no influence on the scope and content of the data transmitted to YouTube and possibly other YouTube partners by activating the plug-in. Among other things, the YouTube server receives information about which of our pages you have visited.

For more information about what data YouTube receives and how it uses it, please see YouTube's privacy notice: https://policies.google.com/privacy.

10.3. TIKTOK

We publish short video clips on the TikTok platform and TikTok app to promote our products and sales. When you visit the TikTok website or app, TikTok Inc (10100 Venice Blvd, Culver City, CA 90232, USA) ("TikTok") collects and processes your personal information.

TikTok makes some of this data available to TikTok profile owners in an anonymised and aggregated form. This data includes the number of new followers, demographic data such as gender and country, without reference to identifiable individuals. Therefore, Westwing cannot identify visitors to TikTok profiles. Westwing as the profile owner receives anonymised statistical data (so-called "Insights Data") from TikTok. This data cannot be used to draw any conclusions about a particular visitor. We use the data contained in the statistics only to analyse user behaviour in order to better tailor our TikTok profile and offer to the needs and interests of our visitors.

For more information about TikTok's data processing, please see TikTok's privacy notice: https://www.tiktok.com/legal/page/eea/privacy-policy/en.

10.4. PINTEREST

We have a Westwing account on Pinterest and the Pinterest app, where we post home and lifestyle inspiration and promote our products. Pinterest Inc. (808 Brannan Street, San Francisco, CA 94103, USA) ("Pinterest") is responsible for the operation of Pinterest.

When you register an account, Pinterest processes the information you provide, such as your name, email address, phone number, photos, pins and comments. In addition, Pinterest collects and processes your IP address, which is used to approximate your location if you choose to share your exact location and other online and web activity (including "pins" you click on, "boards" you create, and text in your comment or description).

The legal basis for this processing is Article 6(1)(f) of the GDPR, which is our legitimate interest in offering you our Pinterest platform for marketing and advertising purposes.

For more information, visit https://policy.pinterest.com/en/privacy-policy.

11. DATA PROCESSING BY SHOPIFY

We work with Shopify International Limited (Victoria Buildings 1-2, Haddington Road, Dublin 4, D04 XN32, Ireland) ("Shopify") to provide our online store and process your payments. Shopify allows us to manage our online store through Shopify's cloud computing infrastructure and also processes your payment for us.

Your data may be transferred to and stored on Shopify servers located in the United States. The US does not provide an adequate level of data protection as defined by the GDPR. With respect to the collection, transfer and processing of personal data in the US, Shopify ensures the protection of personal data by participating in the Data Privacy Framework approved by the European Commission's Compliance Decision of 10 July 2023 in accordance with Article 45 of the GDPR and by using the EU Standard Contractual Clauses.

We use Shopify to secure our online store and process payments. The legal basis for the processing is therefore the performance of your contract under Article 6(1)(b) of the GDPR.

Shopify acts as either a data processor or a data controller, depending on the processing activity.

For more information about Shopify's privacy practices and privacy notices, please visit https://www.shopify.com/legal/privacy.

X. COOKIES AND SIMILAR TECHNOLOGIES

Our website uses so-called "cookies" and similar technologies (e.g. so-called "web beacons", "pixels", "tags"). Web beacons are small GIF files that can be embedded in other graphics, emails or the like. Web beacons can be used to identify your computer and evaluate your user behaviour, such as your response to advertising campaigns. The information collected by web beacons cannot be used to identify you. Cookies are small text files that are sent from a web server to your browser and stored on your hard drive. There are so-called "session cookies", which are deleted as soon as you close your browser, and so-called "persistent cookies", which are stored on your terminal equipment for a longer period or indefinitely. A cookie contains a distinctive sequence of characters that allows your browser to uniquely identify you when you return to the website. This helps us to personalise our offer, make it easier to use, more efficient and safer, and allow us to provide certain features.

Under the "Cookie settings" button, you can choose which cookies you want to allow at any time. The cookies that are necessary to provide the essential functions of the website cannot be disabled.

There are basically four different categories of cookies:

1. ESSENTIAL COOKIES

These cookies enable essential functions and are essential for the proper functioning of the website. They are used, for example, to process orders or to ensure that you, as a registered user, can remain logged in whenever you access different sub-pages of our website. In addition, thanks to these cookies, you do not have to re-enter your login details each time you access a new website.

The legal basis for the use of strictly necessary cookies on our website is our legitimate interest in ensuring that our website is technically sound and easy to use (Article 6(1)(f) GDPR). The use of strictly necessary cookies is possible and legally permitted without your prior consent.

2. FUNCTIONAL COOKIES

These cookies allow us to store information you have already provided (such as your registered name) and to offer you enhanced and more personalised features.

The processing is based on your consent in accordance with Article 6(1)(a) of the GDPR. You can withdraw your consent at any time in the future, most easily by using the Cookie Consent Manager.

You can also refuse the use of cookies by changing your browser settings to "Refuse cookies", for example, if you do not want your computer to be recognised on your next visit. You will find instructions on how to do this in your browser's user guide.

You will be informed about the setting of cookies through the appropriate browser settings, and you can choose to allow cookies only in specific cases, or to exclude the acceptance of cookies in certain cases or in general. It is also possible to activate the automatic deletion of cookies when you close the browser. If you refuse the use of certain cookies, you may be restricted from using certain areas of our website.

3. POWER COOKIES

These cookies allow us to count visits and traffic sources so that we can measure and improve the performance of our website. The information collected by cookies allows us, among other things, to understand which pages are the most popular, which are the least used and how visitors move around our website. All data collected by these cookies is aggregated and cannot be easily attributed to you.

The processing is based on your consent in accordance with Article 6(1)(a) of the GDPR. You can withdraw your consent at any time in the future, most easily by using the Cookie Consent Manager.

4. COOKIES AND MARKETING PIXELS

These cookies and similar technologies (e.g. pixels) allow us to present you with personalised and therefore relevant advertising content and to measure the effectiveness of our advertising measures. Therefore, it is not possible to draw direct conclusions about an individual. These cookies may be set not only on our website, but also on other (advertising) partner websites ("third-party cookies"). So-called "retargeting" is used to place relevant advertisements on other websites and to analyse target groups relevant to our products.

The processing is based on your consent in accordance with Article 6(1)(a) of the GDPR. You can withdraw your consent at any time in the future, most easily by using the Cookie Consent Manager. If you do not allow these cookies, you will see less relevant ads.

5. DETAILS OF THE COOKIES WE USE

5.1. COOKIES REQUIRED

5.1.1. GOOGLE RECAPTCHA

We use the reCAPTCHA service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google") to individuals in the European Economic Area and Switzerland.

This service allows us to distinguish between data input by a natural person and malicious, automated and automated processing.

By using this service, your IP address and other data required by Google for the reCAPTCHA service will be transmitted to Google.

The processing of this data is based on our legitimate interest in exercising personal responsibility online and preventing abuse and spam (as per Article 6(1)(f) of the GDPR). Storage of and access to the information on your terminal equipment is strictly necessary.

The data in question may be transferred to and stored on Google servers in the U.S. The U.S. does not provide an adequate level of data protection as defined by the GDPR. With regard to the collection, transfer and processing of personal data in the US, Google ensures the protection of personal data by participating in the Data Privacy Framework approved by the European Commission's adequacy decision of 10 July 2023.

For more information about Google reCAPTCHA and Google's privacy policy, please visit https://policies.google.com/privacy?hl=hu.

5.1.2. ONE TRUST

We work with OneTrust, LLC (1350 Spring St NW, Atlanta, GA 30309) ("OneTrust") to obtain and process your consent. This is done through the "cookie banner" that appears when you first visit our website or in our app, which informs you about the processing of your data, and in particular about the cookies and other technologies on our website, and allows you to opt-out or accept the setting of certain cookies and other technologies. However, you can request the cookie banner again and change your choice. In addition, the cookie banner will appear when you visit our website even if you have turned off cookie storage or if OneTrust has deleted or expired cookies.

In particular, your consents or opt-outs, your IP address, information about your browser and the terminal device you were using at the time of your visit are transmitted to OneTrust and stored on your terminal device.

The relevant legal basis is Article 6(1)(f) of the GDPR, as we have a legitimate interest in documenting the consent and information about the use of cookies as required by law.

The data in question may be transferred to and stored on OneTrust servers located in the U.S. The U.S. does not provide an adequate level of data protection as defined by the GDPR. With regard to the collection, transfer and processing of personal data in the US, OneTrust ensures the protection of personal data by participating in the Data Privacy Framework approved by the European Commission's adequacy decision of 10 July 2023.

5.2. FUNCTIONAL COOKIES

5.2.1. VIMEO PLUGINS

For video integration, we use, among others, Vimeo LLC (555 West 18th Street, New York 10011, USA) ("Vimeo").

To do this, Vimeo uses so-called add-ons. When you visit websites with these add-ons, a connection is established with Vimeo's servers and information is transmitted about which of our websites you have visited: If you are logged in to Vimeo, Vimeo will associate this information with your personal user account. When you use the extension, for example by clicking on the button to start a video, this data is also assigned to your user account.

The relevant data may be transferred to and stored on Vimeo's servers located in the U.S. The U.S. does not provide an adequate level of data protection as defined by the GDPR. With respect to the collection, transfer and processing of personal data in the US, Vimeo ensures the protection of personal data by participating in the Data Privacy Framework approved by the European Commission's adequacy decision of 10 July 2023.

The legal basis for the processing of your data is your consent, pursuant to Article 6(1), 1st sentence, point (a) of the General Data Protection Regulation. This means that we will not use this service if you have not consented to its use. You can withdraw your consent at any time in the future, most easily by using the Cookie Consent Manager.

For more information about Vimeo's privacy practices and privacy notices, please visit https://vimeo.com/privacy.

5.2.2. ALGOLIA

We use Algolia SAS (55 Rue d'Amsterdam, 75008 Paris, France) ("Algolia") to search and index content on our website and in our app. To do this, we transmit your IP address and search queries to Algolia's server.

Algolia also generates reports for us by properly evaluating and analysing search queries.

In this sense, Algolia helps us to improve the searchability of our offers and to enhance the search experience and customer satisfaction.

For more information, please see Algolia's privacy notice: https://algolia.com/policies/privacy.

5.3. POWER COOKIES

5.3.1. GOOGLE ANALYTICS WITH CONVERSION TRACKING

We use Google Analytics, a web analytics service provided by Google that, among other things, installs pixels and performance cookies to store data on your end device.

This allows us to associate data, sessions and interactions between devices with a pseudonymous user ID to analyse your usage behaviour across devices, improve our website and make it more interesting for you. To this end, we also receive statistics from Google about your use of our website.

Google Analytics 4 also uses artificial intelligence to automatically analyse and enrich data. It uses this primarily to make predictions about the future behaviour of website visitors based on structured event data (e.g. sales forecast, likelihood to buy and likelihood to cancel). These forecast values can also be used to predict target groups. More information: https://support.google.com/analytics/answer/9846734?hl=en

Google Analytics 4 models conversions even when there is insufficient data to optimise data analysis. For more information, please visit https://support.google.com/analytics/answer/10710245?hl=en.

Google Analytics 4 does not record or store individual IP addresses. However, Google Analytics 4 does provide approximate geolocation data by deriving the following metadata from IP addresses: city (and derived latitude and longitude of the city), continent, country, region, subcontinent (and ID-based duplicates). For traffic within the EU, IP address data is only used to obtain geolocation data before it is immediately deleted. The data is not recorded, not available and not used for any other purpose.

The data in question may be transferred to and stored on Google servers in the U.S. The U.S. does not ensure an adequate level of data protection as defined by the GDPR. With regard to the collection, transfer and processing of personal data in the US, Google ensures the protection of personal data by participating in the Data Privacy Framework approved by the European Commission's adequacy decision of 10 July 2023. Due to the activation of IP anonymisation on this website, your IP address will be abbreviated before transmission to the USA or EU member states or EEA contracting states. Only in exceptional cases will your full IP address be transmitted to a Google server in the USA and shortened there. The IP address transmitted by your browser as part of Google Analytics will not be combined with other Google data.

The legal basis for the processing of your data is your consent, in accordance with Article 6(1)(a) of the General Data Protection Regulation. This means that we will only use this service if you have given your consent to the use of Google Analytics with conversion tracking. You can withdraw your consent at any time in the future, most easily by using the Cookie Consent Manager.

You can opt out of the collection and processing of your data (including your IP address) by Google by downloading and installing the browser add-on available at the following link: https://tools.google.com/dlpage/gaoptout?hl=hu. Setting an opt-out cookie will prevent the future collection of your data when you visit this website. The opt-out cookie is valid only in this browser and only on our website and is stored on your device. If you delete cookies from this browser, you will need to reinstall the opt-out cookie.

For more information about data processing using conversion tracking by Google Analytics, please visit https://marketingplatform.google.com/about/analytics/terms/hu/, https://marketingplatform.google.com/about/, https://policies.google.com/privacy?hl=hu&gl=es.

5.4. COOKIES AND MARKETING PIXELS

5.4.1. FACEBOOK CUSTOME AUDIENCE / META PIXEL

Our website uses a Facebook Custom Audiences pixel feature ("Meta Pixel") and a server-side conversion API operated by Meta Platforms Ireland Limited (4 Grand Canal Square, Grand Canal Harbour, Grand Canal Harbour, Dublin 2, Ireland) ("Meta") for visitors from outside the USA and Canada.

This allows us to show you interest-based ads when you use Facebook, Instagram or other Meta apps and websites, and to track the effectiveness of our ads. Through the meta pixels embedded in our website, your browser automatically connects to Meta's servers for enhanced synchronization of the embedded meta pixel. This provides information to Meta, for example, that you have clicked on a particular advertisement or product on our website, which in turn allows us to display interest-based ads to you on our website or other websites.

If you are registered with Meta, Meta may associate your visit to the website with your account, as your personal information is transmitted to Meta in the form of email and IP address in a hashed form via pixels, partially supplemented by existing tracking data. Data relating to your country will also be transmitted. Even if you are not registered on Facebook or Instagram, or are not logged in, Meta may learn about your personal data above and use it to create a profile.

The data in question may be transferred to and stored on Meta's servers located in the U.S. The U.S. does not provide an adequate level of data protection as required by the GDPR. With regard to the collection, transfer and processing of personal data in the USA, Meta ensures the protection of personal data by participating in the so-called Data Privacy Framework approved by the European Commission's adequacy decision of 10 July 2023.

The legal basis for the processing of your data is your consent, in accordance with Article 6(1)(a) of the General Data Protection Regulation. This means that we will only use these services if you have given your consent to personalised targeting or to the use of the Facebook pixel . You can withdraw your consent at any time in the future, most easily via our Consent Manager. In addition, if you are logged in to your Facebook account, you can object to the processing of your data via the following link: https:www.facebook.com/adpreferences/ad_settings/?entry_product=account_settings_menu.

For more information, in particular about our joint liability with Meta, the purpose and scope of Meta's processing and the options available to you to protect your data, please see Meta's privacy notice: https:www.facebook.com/about/privacy/.

5.4.2. PINTEREST TAG

To further optimise our Pinterest campaigns and measure their success, we use the social network's "Pinterest Tag" service, which is offered in the European Economic Area by Pinterest Europe Ltd, Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland ("Pinterest").

We use the "Pinterest tag" in combination with the server-side conversion API to display our Pinterest ads only to Pinterest users who have shown interest in our offer. At the same time, we ensure that the content of our ads has a high probability of matching the interests of the relevant user. We can also track the behaviour of Pinterest users who click on one of our ads. To do this, Pinterest uses cookies, web beacons and similar storage technologies to process the data collected by the service on our websites.

When using the service, the following data is processed: device data (e.g. type, brand), operating system used (e.g. iOS 11), IP address of the device used, time of access to our offer, type and content of the campaign and the reaction to the corresponding campaign (e.g. button click), as well as device identifiers consisting of unique characteristics of your terminal device. We may also use these device identifiers to identify your device on the website. The information collected in this way is anonymous to us and does not allow us to draw any conclusions about your identity. If you log in to your Pinterest account after visiting our website, or if you visit our website while logged in, Pinterest may store and process this information, which we would like to inform you about. Pinterest may link this information to your Pinterest account and use it for its own advertising purposes.

The relevant data may be transferred to and stored on Pinterest's servers located in the U.S. The U.S. does not provide an adequate level of data protection as defined by the GDPR. With regard to the collection, transfer and processing of personal data in the US, Pinterest ensures the protection of personal data by participating in the Data Privacy Framework approved by the European Commission's adequacy decision of 10 July 2023.

The legal basis for the processing of your data is your consent, in accordance with Article 6(1)(a) of the General Data Protection Regulation. This means that we only use this service if you have given your consent to the use of the Pinterest Tag. You can withdraw your consent at any time in the future, most easily via the Consent Manager.

For more information about the purpose and scope of data processing and privacy settings, please see the Pinterest Privacy Notice, which can be found at https://policy.pinterest.com/hu/privacy-policy.

5.4.3. MICROSOFT BING ADS

Our website uses Bing conversion tracking provided by Microsoft Corporation (One Microsoft Way, Redmond, WA 98052-6399, USA).

Microsoft Bing Ads places a cookie on your computer when you visit our website through Microsoft Bing Ads. This allows us to recognise that you have clicked on an ad and have been redirected to our website. This helps us to understand the effectiveness of an ad. We only receive information on the total number of users who clicked on a Bing ad and were redirected to our website. There is no information about the identity of the user.

The data in question may be transferred to and stored on Microsoft servers located in the U.S. The U.S. does not provide an adequate level of data protection as defined by the GDPR. With respect to the collection, transfer and processing of personal data in the US, Microsoft ensures the protection of personal data by participating in the Data Privacy Framework approved by the European Commission's adequacy decision of 10 July 2023.

For more information about Bing Ads' data management and cookies, please visit https://www.microsoft.com/hu-hu/privacy/privacystatement.

5.4.4. GOOGLE ADS (FORMERLY ADWORDS) AND CONVERSION TRACKING

We use Google Adwords and Google Conversion Tracking, which is provided to persons in the European Economic Area and Switzerland by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google").

This allows us to place Google Adwords ads based on your interests and location.

When you click on a Google ad, a cookie is temporarily sent to your computer, which allows us to recognise that you have clicked on the ad and that you have been redirected to this page.

The resulting conversion statistics show how many people clicked on the ad and were redirected to the page with the conversion tracking tag. However, we do not receive any personal data about the users.

If you use a Google Account, Google may link your web and app browsing history to your Google Account and use information from your Google Account to personalise your ads based on your Google Account preferences. If you do not want this link to your Google Account, please sign out of Google before visiting our website. You can also opt out of the setting of cookies by changing the settings in your browser software or on the Google website.

For more information about Google Ads and conversion tracking and Google's privacy policy, please visit https://policies.google.com/technologies/ads and https://www.policies.google.com/privacy.

5.4.5. GOOGLE DYNAMIC REMARKETING

We also use the remarketing feature of Google Ads. We use this service to display interest-based ads on other websites after you have visited our website. The ads are based on the products and services that you clicked on during your last visit to our website. To do this, Google sets cookies which are temporarily stored on your browser. The data received will not be used to identify you. Google only stores data such as your web query, IP address, browser type, browser language, date and time of the query.

If you use a Google Account, Google may link your web and app browsing history to your Google Account and use information from your Google Account to personalise your ads based on your Google Account preferences. If you do not want this link to your Google Account, please sign out of Google before visiting our website. You can also opt out of the relevant cookies being set by changing the settings in your browser software or on the Google website.

For more information about Google dynamic retargeting and Google's privacy policy, please visit https:www.google.com/privacy/ads and https://policies.google.com/privacy.

5.4.6. GOOGLE AD MANAGER (FORMERLY DOUBLECLICK)

We also use Google Ad Manager (formerly Doubleclick). This service uses cookies, pixels and other technologies to serve ads based on your interests and previous visits to our website or other websites. It also allows us to track the success of our advertising campaigns. Google also processes data to optimise its own products and services.

If you use a Google Account, Google may link your web and app browsing history to your Google Account and use the information stored in your Google Account to personalise your ads based on the settings in your Google Account. If you do not want this link to your Google Account, you will need to sign out of Google before visiting our website. You can also opt out of the setting of cookies by changing the settings in your browser software or on the Google website.

For more information about Google Ad Manager and Google's privacy policy, please visit https://policies.google.com/technologies/ads and https://policies.google.com/privacy.

5.4.7. YOUTUBE IN EXTENDED PRIVACY MODE

We use, among others, YouTube LLC (901 Cherry Ave, San Bruno, CA 94066, USA) ("YouTube") to embed videos on our website. When you visit our website containing embedded YouTube videos, your browser will connect directly to YouTube's servers to display the content. Your browser may record the content you access. If you are logged in to your YouTube account, YouTube may associate information about your usage patterns with your personal profile. You can avoid this by logging out of your YouTube account before visiting our website.

The relevant data may be transferred to and stored on YouTube servers located in the U.S. The U.S. does not provide an adequate level of data protection as defined by the GDPR. With regard to the collection, transfer and processing of personal data in the US, YouTube ensures the protection of personal data by participating in the so-called Data Privacy Framework approved by the European Commission's adequacy decision of 10 July 2023.

For more information about YouTube's data processing, please see YouTube's privacy notice at https://policies.google.com/privacy?hl.

5.4.8. SEGMENT

We also use the Segment Service provided by Segment Inc (101 15th St San Francisco, CA 94103, USA) ("Segment").

The segment collects and stores information about you that can be used to create usage profiles using pseudonyms. We use these usage profiles to analyse your usage patterns and evaluate them in order to improve our offer to you. For this purpose, we may use cookies that allow us to recognise you when you visit our website again. Pseudonymous user profiles are not merged with the personal data of the pseudonym owner.

The relevant data may be transferred to and stored on Segment's servers located in the U.S. The U.S. does not provide an adequate level of data protection as defined by the GDPR. With regard to the collection, transfer and processing of personal data in the US, Segment ensures the protection of personal data by participating in the Data Privacy Framework approved by the European Commission's adequacy decision of 10 July 2023.

More information can be found in Segment's privacy notice: https://segment.com/docs/legal/privacy/.

5.4.9. HOTJAR

We use the Hotjar web analytics service provided by Hotjar Limited (Dragonara Road, Paceville St. Julian's STJ 3141, Malta) ("Hotjar").

Hotjar uses cookies and other technologies to analyze and evaluate user behavior and interactions with our website. This helps us to optimise the user experience on our website by better understanding the user's experience on our website (e.g. clicks, scrolling, mouse movements).

We remove part of your IP address before analysing usage statistics, so that no direct conclusions can be drawn about your identity.

For more information, see the "about Hotjar" section at https://help.hotjar.com/hc/en-us/sections/115003204947.

5.4.10. BRAZES

We use the web analytics services of Braze, Inc.( 318 West 39th Street, 5th Floor, New York, New York 10018, USA) ("Braze") to communicate with you on our website and to understand how our mobile content works on your device and how our mobile content is used on your device. For example, we display pop-ups with interaction options. We also use Braze to send push notifications in our app. We also use Braze to send you personalised promotions and information about our products. We also use Braze to notify you of products you have forgotten in your shopping cart.

The data in question may be transferred to and stored on Braze's servers in the U.S. The U.S. does not provide an adequate level of data protection as defined by the GDPR. With regard to the collection, transfer and processing of personal data in the US, Braze ensures the protection of personal data by participating in the Data Privacy Framework approved by the European Commission's adequacy decision of 10 July 2023.

More information about Braze's data protection compliance can be found here: https:www.braze.com/privacy/.

5.4.11. CRITEO

We also use the remarketing tool of Criteo, SA (32 Rue Blanche, 75009 Paris, France) on our website and in our App to display personalized ads to you on our partners' websites and product Apps that are of interest to you based on the products you click on our website or in our App. To do this, Criteo associates the above information about your browsing history with a unique identifier, such as with an identification cookie or other similar technology (e.g., mobile ad identifier and non-cookie technologies).

Criteo and Westwing act as joint controllers within the meaning of Article 26 of the GDPR.

The legal basis for processing under data protection law is your consent pursuant to Article 6(1)(a) of the General Data Protection Regulation. You can withdraw this consent at any time in the future - the easiest way is to use the Cookie Consent Manager or by visiting https://www.criteo.com/privacy/disable-criteo-services-on-internet-browsers/.

If Criteo transfers personal data to countries outside the EU or EEA, Criteo will do so on the basis of an adequacy decision by the European Commission in accordance with Article 45 of the GDPR or on the basis of appropriate data protection safeguards in accordance with Article 46 of the GDPR, for example by entering into Standard Contractual Clauses (SCCs) in the European Union. Your data will be deleted as soon as it is no longer necessary for the purposes for which it was collected.

For more information about how Criteo processes your data, please visit https://www.criteo.com/privacy/.

5.4.12. CLEAR

We use the Klear influencer marketing service of Meltwater Deutschland GmbH( Jannowitz Centre, Brückenstrasse 6, 10179 Berlin, Germany). This allows us to set up influencer marketing programmes and measure and analyse influencer campaigns. Klear uses cookies to track the success of campaigns on our website. These analytics help us, among other things, to search for social media influencers by region, language, sector, hashtag and previous collaborations, and to make data-driven decisions about our influencer marketing strategy.

For more information on data protection compliance, please visit: https:klear.com/legal/cookies; https://klear.com/legal/privacy-notice-for-influencers.

5.4.13. GOOGLE CUSTOMER MATCH

We also use Google Customer Match, which allows us to serve interest-based ads to visitors to our website based on their browsing history on our website and third-party websites, apps and emails.

The legal basis for the processing of your data is your consent, in accordance with Article 6(1)(a) of the General Data Protection Regulation. This means that we will not use this service if you have not consented to its use. You can withdraw your consent at any time in the future, most easily by using the Cookie Consent Manager. If you do not wish to receive interest-based ads from Google Customer Match, you can also unsubscribe at http:www.networkadvertising.org/choices/; http://www.youronlinechoices.com/.

For more information about Google's privacy compliance, please visit https://support.google.com/google-ads/answer/6334160?sjid=2821624592503930728-EU.

5.4.14. LEAD FORENSICS

This website also uses the Lead Forensics B2B sales and marketing tool provided by Lead Forensics, a company based in the United Kingdom at Communication House, 26 York Street, London, W1U 6PZ, United Kingdom.

Lead Forensics uses tracking code to identify companies visiting our websites based on their commercial IP address. These are not cookies. Lead Forensics tracking code only provides publicly available information. It cannot and will not provide personal data or sensitive information about who has visited our website. Under no circumstances will the data be used to personally identify individual visitors. If IP addresses are collected, they will be anonymised immediately after storage.

Lead Forensics does not provide us with IP addresses. It only provides information about which companies have visited our website, the date and duration of the visit, and the websites visited. This information allows us to analyse the use of our website and possibly contact these companies.

The information generated by Lead Forensics' tracking code is transmitted to Lead Forensics' servers in the UK, where it is processed and stored. This will be done on the basis of the European Commission's adequacy decision on data transfers to the UK of 28 June 2021, in accordance with Article 45 of the GDPR.

The legal basis for the processing of your data is your consent, in accordance with Article 6(1)(a) of the GDPR. This means that we will not use this service if you have not consented to its use. You can withdraw your consent at any time in the future, most easily by using the Cookie Consent Manager. You can also use the following link to unsubscribe from tracking: https:optout.leadforensics.com/?clientID=786109.

5.4.15. TICK ADS

We use TikTok Ads, a service provided by TikTok Inc, 10100 Venice Blvd, Culver City, CA 90232, USA ("TikTok"), which allows us to serve interest-based ads to visitors to our website based on their browsing history on our website and third party websites, apps and email.

When you visit our website, the connection to TikTok's servers is established by the installation of pixels and data such as your IP address, pages visited and interactions may be recorded.

The corresponding data can also be transferred to and stored on TikTok servers in the United States. Although the United States is outside the EU, TikTok ensures the protection of personal data with respect to the collection, transfer and processing of personal data in the United States by participating in the Data Privacy Framework approved by the European Commission's adequacy decision of 10 July 2023.

For more information about TikTok's data protection compliance, please visit https://ads.tiktok.com/help/article/app-retargeting?lang=hu or https://www.tiktok.com/legal/page/eea/privacy-policy/hu.

XI. TECHNICAL AND ORGANISATIONAL MEASURES FOR DATA SECURITY

We have put in place technical and organisational security measures and safeguards to protect your personal information from loss, destruction, unauthorised modification and unauthorised access by third parties, and to provide an adequate level of protection and safeguard your privacy.

In particular, personal data is encrypted before transmission, including sensitive content such as your contact details. All of our employees, as well as service providers and data processors working for us, are required to comply with applicable regulations and data protection laws.

We regularly check that our security measures are adequate and up to date.

XII. YOUR (AS DATA SUBJECT) RIGHTS

In accordance with the legal provisions on data protection, you have the following rights in relation to your personal data at all times:

1. RIGHT OF ACCESS

You have the right to request and receive information about the data we process about you: the purposes of the processing, the categories of personal data, the recipients or categories of recipients to whom we have disclosed or are disclosing personal data, the envisaged data retention periods or the criteria for determining the relevant periods, your rights regarding the protection of your data, automated decision-making, including profiling (where applicable); and the appropriate safeguards for data transfers to third countries. You also have the right to receive a copy of this information.

2. RIGHT TO RECTIFICATION

You have the right to request the rectification of inaccurate data and, taking into account the purposes of the processing, to request the completion of incomplete data.

3. THE RIGHT TO ERASURE ("RIGHT TO BE FORGOTTEN")

You have the right to request the erasure of your data for the following reasons:

the data are no longer necessary for the purposes for which they were collected or otherwise processed,
You withdraw the consent on which the processing is based and there is no other legal basis for the processing,
You object to the processing and there is no compelling legitimate ground for the processing,
the personal data in question were unlawfully processed,
or the erasure of personal data is necessary to comply with a legal obligation under EU or Member State law.

Please note that there may be reasons that prevent immediate deletion, for example in the case of a legal obligation to preserve data. Notwithstanding the exercise of your right to erasure, we will delete your data immediately and in its entirety, provided that storage is no longer necessary for the specific purpose of the processing and there are no conflicting legal or regulatory retention obligations.

4. THE RIGHT TO RESTRICTION OF PROCESSING

You have the right to request restriction of the processing of your data, provided that.

You dispute the accuracy of your personal data for a period of time that allows us to verify the accuracy of your personal data,

the processing is unlawful and you object to the erasure of your personal data and instead request the restriction of the use of your personal data;

we no longer need the personal data for the purposes for which they are processed, but you need them to establish, exercise or defend legal claims; or

You have objected to the processing in accordance with Article 21(1) of the GDPR until it is determined whether our legitimate grounds override your legitimate grounds.

5. THE RIGHT TO DATA PORTABILITY

Where the legal conditions are met, you have the right to receive the data in a structured, commonly used and machine-readable format and to have it transferred to another controller or, where technically feasible, to request its transfer by Westwing.

6. THE RIGHT TO LODGE A COMPLAINT WITH THE COMPETENT DATA PROTECTION AUTHORITY

You also have the right to lodge a complaint with the competent data protection supervisory authority, in particular in the Member State where you have your habitual residence, place of work or place of the alleged infringement. Contact details of supervisory authorities in the EU: https://www.edpb.europa.eu/about-edpb/about-edpb/members_hu.

7. RIGHT TO OBJECT

If the processing of your personal data is based on our legitimate interest within the meaning of Article 6(1)(f) of the GDPR, you also have the right to object to the processing of your personal data on grounds relating to your particular situation, for example by sending an e-mail to service@westwing.hu. In this case, we will no longer process personal data for these purposes, unless our legitimate interest overrides our legitimate interests in individual cases.

8. THE RIGHT TO WITHDRAW YOUR CONSENT

If the processing of your personal data is based on your consent in accordance with Article 6(1)(a) of the GDPR, you have the right to withdraw your consent at any time in the future, for example by sending an email to service@westwing.hu.

If you wish to exercise any of these rights on our behalf, please contact our Data Protection Officer at anfrage@projekt29.de.

XIII. AMENDMENTS TO THIS PRIVACY NOTICE

We reserve the right to modify this privacy notice as necessary, for example, due to the introduction of new technologies.

If there are material changes to this privacy notice, we will post them on our website. We will also check whether there is an obligation to provide additional information in individual cases where there are changes to this privacy notice and, where necessary, we will comply with this obligation accordingly.

Status: May 2025