PRIVACY POLICY

EMAIL: SUPPORT@MIDMOOD.COM

Thank you for your interest in our online shop. Protecting your privacy is of utmost importance to us. Below, we provide detailed information about how we handle your data.

 

1. ACCESS DATA AND HOSTING
You can visit our websites without providing any personal information. When you access a webpage, the web server automatically stores a so-called server log file, which contains details such as the name of the requested file, your IP address, date and time of access, transferred data volume, and the requesting provider (access data). This access data is evaluated solely for the purpose of ensuring the smooth operation of the website and improving our offerings. This is done to safeguard our predominantly legitimate interests, based on a balance of interests, in providing a correct representation of our offerings in accordance with Article 6(1)(f) of the GDPR. All access data is deleted no later than seven days after the end of your website visit.

HOSTING
The services for hosting and displaying the website are partly provided by our service providers as part of data processing on our behalf. Unless otherwise explained in this privacy policy, all access data as well as all data collected through forms on this website will be processed on their servers. For inquiries regarding our service providers and the basis of our cooperation with them, please refer to the contact information described in this privacy policy.

Our service providers are located and/or use servers in the following countries, for which the European Commission has established an adequate level of data protection by decision: Canada.

Our service providers are located and/or use servers in the United States and other countries outside the European Union and the European Economic Area. These countries do not have an adequacy decision from the European Commission. Our collaboration with them is based on the standard data protection clauses of the European Commission.

 

2. DATA PROCESSING FOR CONTRACTUAL PROCESSING AND CONTACT

2.1. Data Processing for Contractual Processing
For the purpose of contract processing (including inquiries about and processing of warranty and performance claims, as well as any legal obligation to update), we collect personal data in accordance with Article 6(1)(b) of the GDPR when you voluntarily provide this data during the course of your order. Mandatory fields are marked as such, as in these cases, we need the data for contract processing and cannot send the order without providing it. The data collected is visible in the respective input forms.

Further information about the processing of your data, especially regarding the disclosure to our service providers for order, payment, and shipping processing purposes, can be found in the following sections of this privacy policy. After the contract has been fully processed, your data will be restricted for further processing and deleted after the expiration of statutory retention periods according to Article 6(1)(c) of the GDPR, unless you have expressly consented to further use of your data in accordance with Article 6(1)(a) of the GDPR or we reserve the right to use your data for other purposes permitted by law and about which we inform you in this statement.

 

2.2 Customer Account
If you have given your consent in accordance with Article 6(1)(a) of the GDPR by deciding to open a customer account, we use your data to create the customer account and store your data for future orders on our website. You can delete your customer account at any time, either by sending a message to the contact information provided in this privacy policy or using a designated function within the customer account. After the customer account is deleted, your data will be erased, unless you have expressly consented to further use of your data in accordance with Article 6(1)(a) of the GDPR or we reserve the right to use your data for other purposes permitted by law and about which we inform you in this statement.

2.3 Contact
For the purpose of processing your inquiries, we collect personal data in accordance with Article 6(1)(b) of the GDPR when you voluntarily provide this data during contact with us (e.g., via contact form or email). Mandatory fields are marked as such, as in these cases, we require the data for processing your inquiry. The data collected is visible in the respective input forms. After your inquiry has been processed, your data will be restricted for further processing and deleted after the expiration of statutory retention periods according to Article 6(1)(c) of the GDPR, unless you have expressly consented to further use of your data in accordance with Article 6(1)(a) of the GDPR or we reserve the right to use your data for other purposes permitted by law and about which we inform you in this statement.

 

3. DATA PROCESSING FOR THE PURPOSE OF SHIPMENT
For the purpose of contract processing, we disclose your data to the shipping provider within the scope required for the delivery of the ordered goods, in accordance with Article 6(1)(b) of the GDPR. Depending on the shipping provider you have selected during the order process, we forward the following data to the shipping provider for this purpose: Name, address, postal code, city, country, email address, if applicable tracking number, telephone number.

 

4. DATA PROCESSING FOR PAYMENT PROCESSING
Depending on the selected payment method, in order to process payments, we pass on the necessary payment data to the credit institution and, if applicable, payment service providers engaged by us, or to the selected payment service. The legal basis for the transfer of the data is Article 6(1)(b) of the GDPR.

For payment processing, if applicable, we disclose your payment data to the authorized credit institution and, if applicable, to the payment service provider commissioned by us or to the selected payment service. The legal basis for the transfer of the data is Article 6(1)(b) of the GDPR.

As needed, we also use external payment providers:

APPLE PAY

Payments via Apple Pay are processed by Apple Inc. (Apple Inc., Infinite Loop, Cupertino, CA 95014, USA). You can find Apple's privacy policy at "https://www.apple.com/legal/privacy/en-ww/".

GOOGLE PAY

Payments via Google Pay are processed by Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA). You can find Google's privacy policy at "https://policies.google.com/privacy".

 

5. NEWSLETTER
With your consent, you can subscribe to our newsletter, with which we inform you about our current interesting offers. The advertised goods and services are named in the declaration of consent.

For the registration for our newsletter, we use the so-called double opt-in procedure. This means that after you have registered, we will send you an email to the email address provided in which we ask you to confirm that you would like the newsletter to be sent. In addition, we store your IP addresses and the time of registration and confirmation. The purpose of the procedure is to be able to prove your registration and, if necessary, to clarify any possible misuse of your personal data.

The only requirement for sending the newsletter is your email address. The specification of additional, separately marked data is voluntary and will be used to address you personally. After your confirmation, we will store your email address for the purpose of sending you the newsletter in accordance with Article 6(1)(a) of the GDPR. The legal basis for this is Article 6(1)(a) of the GDPR.

You can revoke your consent to the sending of the newsletter at any time and unsubscribe from the newsletter. You can declare your revocation by clicking on the link provided in each newsletter email, by sending a message to the contact information described in this privacy policy, or via a designated function in the newsletter subscription.

 

6. COUPON CAMPAIGNS
The data collected in connection with the coupon campaign will be processed by the controller, unless otherwise stated, to carry out the coupon campaign (e.g. to determine the winner) based on the consent you have given, in accordance with Article 6(1)(a) of the GDPR. Mandatory information required for participation in the coupon campaign will be marked as such in the respective input forms.

The data will be stored in the event of your consent to receive further advertising from us and used for this purpose, otherwise it will be deleted after the coupon campaign is completed, unless you have expressly consented to further use of your data in accordance with Article 6(1)(a) of the GDPR.

 

7. USE OF COOKIES
To make visiting our website attractive and to enable the use of certain functions, to display suitable products or for market research, we use so-called cookies on various pages. This is done to safeguard our predominantly legitimate interests, based on a balance of interests, in optimizing the presentation of our offerings in accordance with Article 6(1)(f) of the GDPR. Cookies are small text files that are automatically stored on your end device. Some of the cookies we use are deleted after the end of the browser session, i.e., after you close your browser (so-called session cookies). Other cookies remain on your end device and enable us to recognize your browser the next time you visit (persistent cookies).

The duration of storage can be found in the overview in the cookie settings of your web browser. You can set your browser so that you are informed about the setting of cookies and decide individually whether to accept them, or to generally exclude cookies for certain cases or in general. Each browser differs in the way it manages cookie settings. This is described in the help menu of each browser, which explains how you can change your cookie settings. You will find these for each browser under the following links:

Internet Explorer™: "https://support.microsoft.com/en-gb/help/17442/windows-internet-explorer-delete-manage-cookies"
Safari™: "https://support.apple.com/en-gb/guide/safari/sfri11471/mac"
Chrome™: "https://support.google.com/chrome/answer/95647?hl=en&hlrm=en"
Firefox™: "https://support.mozilla.org/en-US/kb/enable-and-disable-cookies-website-preferences"
Opera™: "https://help.opera.com/en/latest/web-preferences/#cookies"

    Failure to accept cookies may limit the functionality of our website.

     

    8. SOCIAL MEDIA PLUGINS
    We use social media plugins from various social networks on our website based on Article 6(1)(f) of the GDPR in order to make our company better known through these. The advertising purpose behind this is to be regarded as a legitimate interest within the meaning of the GDPR. Responsibility for data protection-compliant operation must be guaranteed by their respective providers. The integration of these plugins by us takes place by means of the so-called two-click method to protect visitors to our website in the best possible way.

    a) Facebook
    Social media plugins from Facebook are used on our website to make their use more personal. We use the "LIKE" or "SHARE" button for this purpose. This is an offer from Facebook.

    If you call up a page on our website that contains such a plugin, your browser will establish a direct connection with the Facebook servers. The content of the plugin is transmitted directly from Facebook to your browser and integrated into it into the website.

    Through the integration of the plugin, Facebook receives the information that your browser has called up the corresponding page of our website, even if you do not have a Facebook account or are not currently logged in to Facebook. This information (including your IP address) is transmitted directly from your browser to a Facebook server in the USA and stored there.

    If you are logged in to Facebook, Facebook can directly assign your visit to our website to your Facebook account. If you interact with the plugins, for example, by clicking the "LIKE" or "SHARE" button, the corresponding information is also transmitted directly to a Facebook server and stored there. The information will also be published on Facebook and displayed to your Facebook friends.

    Facebook may use this information for the purposes of advertising, market research and the design of Facebook pages to meet your needs. For this purpose, Facebook creates usage, interest and relationship profiles, e.g. to evaluate your use of our website with regard to the advertisements displayed to you on Facebook, to inform other Facebook users about your activities on our website and to provide other services associated with the use of Facebook.

    If you do not want Facebook to assign the data collected via our website to your Facebook account, you must log out of Facebook before visiting our website.

    The purpose and scope of the data collection and the further processing and use of the data by Facebook, as well as your rights in this regard and setting options for protecting your privacy, can be found in Facebook's data protection information: "https://www.facebook.com/about/privacy/".

    b) Instagram
    Social media plugins from Instagram are integrated into our website based on Article_6(1)(f) of the GDPR in order to make our company better known on this social media platform. The responsibility for data protection-compliant operation must be guaranteed by Instagram.

    The plugins we use are marked with an Instagram logo, for example in the form of an "Instagram camera". When you access a page on our website that contains such a plugin, your browser establishes a direct connection to Instagram's servers. Instagram directly transfers the content of the plugin to your browser and integrates it into the page. This integration informs Instagram that your browser has accessed the corresponding page of our website, even if you do not have an Instagram profile or are not currently logged in to Instagram.

    This information (including your IP address) is transmitted directly from your browser to an Instagram server in the USA and stored there. If you are logged in to Instagram, Instagram can immediately associate your visit to our website with your Instagram account. If you interact with the plugins, for example by clicking the "Instagram" button, this information is also transmitted directly to an Instagram server and stored there.

    The information is also published on your Instagram account and displayed to your contacts. If you do not want Instagram to associate the information collected through our website with your Instagram account, you must log out of Instagram before visiting our website.

    For the purpose and scope of data collection, further processing and use of data by Instagram, as well as your rights and privacy settings, please refer to Instagram's privacy policy: "https://help.instagram.com/519522125107875".

    c) Pinterest
    We use social media plugins from Pinterest on our website to make our company better known on this social media platform. The responsibility for data protection-compliant operation must be guaranteed by Pinterest.

    The plugins we use are marked with a Pinterest logo. If you access a page on our website that contains such a plugin, your browser establishes a direct connection to Pinterest's servers. The plugin's log data is transmitted from your browser directly to Pinterest's servers in the United States. This log data may include your IP address, the address of the websites visited that also contain Pinterest functions, browser type and settings, the date and time of the request, how you use Pinterest, and cookies.

    For the purpose and scope of data collection, further processing and use of data by Pinterest, as well as your rights and privacy settings, please refer to Pinterest's privacy policy: "https://policy.pinterest.com/privacy-policy"

     

    9. ANALYSIS TOOLS
    For the purpose of website analysis, we use Google Analytics and Google Ads Conversion Tracking based on Article 6(1)(f) of the GDPR. The advertising purpose behind this is to be regarded as a legitimate interest within the meaning of the GDPR. Responsibility for data protection-compliant operation must be guaranteed by Google. In this context, pseudonymous usage profiles are created and cookies (see section 8) are used. The information generated by the cookie about your use of this website, such as

    • browser type/version,
    • operating system used,
    • referrer URL (the previously visited page),
    • host name of the accessing computer (IP address),
    • time of the server request,

    are transmitted to a Google server in the USA and stored there. The information is used to evaluate the use of the website, to compile reports on the website activities, and to provide further services associated with the use of the website and the internet for the purposes of market research and the design of these internet pages according to requirements. This information may also be transferred to third parties if this is required by law or if third parties process this data on behalf of others. Under no circumstances will your IP address be merged with other Google data. IP addresses are anonymized so that assignment is not possible (IP masking).

    You can also prevent the installation of cookies by adjusting your browser software accordingly; however, we would like to point out that in this case you may not be able to use all functions of this website to their full extent.

    You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) and the processing of this data by Google by downloading and installing a browser add-on (https://tools.google.com/dlpage/gaoptout?hl=en).

    As an alternative to the browser add-on, especially for browsers on mobile devices, you can also prevent Google Analytics from collecting data by clicking on this link. An opt-out cookie is set to prevent future collection of your data when you visit this website. The opt-out cookie is only valid in this browser and only for our website and is stored on your device. If you delete the cookies in this browser, you must set the opt-out cookie again.

    You can find further information on data protection in connection with Google Analytics in Google's Analytics Help (https://support.google.com/analytics/answer/6004245?hl=en).

    We also use Google Ads Conversion Tracking to statistically record the use of our website and to evaluate it for the purpose of optimizing our website. Google Ads Conversion Tracking is an analysis service provided by Google. When you click on an ad placed by Google, a cookie for conversion tracking is placed on your computer/device. These cookies have limited validity, do not contain any personal data, and are therefore not used for personal identification.

    If you visit certain pages on our website and the cookie has not yet expired, Google and we can recognize that you clicked on the ad and were redirected to this page. Each Google Ads customer receives a different cookie. Therefore, there is no way that cookies can be tracked across the websites of different Ads customers.

    The information collected using the conversion cookie is used to generate conversion statistics for Ads customers who have opted for conversion tracking. This tells us the total number of users who have clicked on an ad and were redirected to a page with a conversion tracking tag. However, we do not receive any information that personally identifies users.

    If you do not wish to participate in tracking, you can refuse to have a cookie placed as required for this purpose - for example, by setting your browser to generally deactivate the automatic placement of cookies. You can also deactivate cookies for conversion tracking by setting your browser to block cookies from the domain "www.googleadservices.com". You can find Google's data protection information on conversion tracking here: "https://policies.google.com/privacy?hl=en".

     

    10. GOOGLE MAPS
    This website uses Google Maps to display maps and create directions. Google Maps is operated by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

    By using this website, you consent to the collection, processing, and use of data that is automatically collected by Google Inc, its representatives, and third parties. The terms of use for Google Maps can be found in the Google Maps Terms of Service (https://www.google.com/intl/en/help/terms_maps.html).

    You can find detailed information in Google's Data Protection Center: Transparency and Choice (https://policies.google.com/privacy?hl=en). There, you can also change your personal data protection settings in the Data Protection Center.

    You can find instructions on how to manage your own data in connection with Google products here (https://support.google.com/accounts/answer/3024190)

     

    11. INTEGRATION OF YOUTUBE VIDEOS
    We have integrated YouTube videos into our online offerings, which are stored on "http://www.youtube.com" and can be played directly from our website. These are all integrated in "extended data protection mode," which means that no data about you as a user is transferred to YouTube if you do not play the videos. Only when you play the videos is the data mentioned in paragraph 2 transmitted. We have no influence over this data transmission.

    By visiting the website, YouTube receives the information that you have accessed the corresponding subpage of our website. In addition, the data mentioned under section 2 of this declaration is transmitted. This happens regardless of whether YouTube provides a user account through which you are logged in or whether no user account exists. If you are logged in to Google, your data is directly assigned to your account. If you do not want the assignment to your profile on YouTube, you must log out before activating the button. YouTube stores your data as usage profiles and uses them for advertising, market research, and/or needs-based design of its website. Such evaluation is carried out in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact YouTube to exercise this right.

    For further information on the purpose and scope of data collection and processing by YouTube, please refer to its privacy policy. There you will also find further information about your rights and settings to protect your privacy: "https://www.google.com/intl/en/policies/privacy". Google also processes your personal data in the USA and has submitted to the EU-US Privacy Shield, "https://www.privacyshield.gov/EU-US-Framework".

     

    12. DATA SUBJECT RIGHTS
    You have the right:

    • to request information about your personal data processed by us in accordance with Article 15 of the GDPR. In particular, you may request information about the purposes of processing, the categories of personal data concerned, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right to complain, the source of your data, if not collected by us, and the existence of automated decision-making, including profiling, and, if applicable, meaningful information about its details;
    • to immediately request the rectification of incorrect or completion of your personal data stored by us in accordance with Article 16 of the GDPR;
    • to request the erasure of your personal data stored by us in accordance with Article 17 of the GDPR, unless processing is necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defence of legal claims;
    • to request the restriction of the processing of your personal data in accordance with Article 18 of the GDPR if you dispute the accuracy of the data, if the processing is unlawful but you object to its erasure, if we no longer need the data but you need it to establish, exercise or defend legal claims, or if you have lodged an objection to the processing in accordance with Article 21 of the GDPR;
    • to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format or to request its transmission to another controller in accordance with Article 20 of the GDPR;
    • to withdraw your consent given to us at any time in accordance with Article 7(3) of the GDPR. This means that we may no longer continue processing the data based on this consent in the future; and
    • to complain to a supervisory authority in accordance with Article 77 of the GDPR. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or our company headquarters for this purpose.

     

    13. RIGHT TO OBJECT 
    If your personal data is processed on the basis of legitimate interests pursuant to Article 6(1)(f) of the GDPR, you have the right to object to the processing of your personal data pursuant to Article 21 of the GDPR, provided that there are grounds for doing so that arise from your particular situation or the objection is directed against direct advertising. In the latter case, you have a general right to object, which we will implement without specifying a particular situation.

    If you would like to exercise your right of withdrawal or objection, an email to the email address provided in the legal notice is sufficient.

     

    14. DATA SECURITY
    We use the most common SSL (Secure Socket Layer) method in connection with the highest level of encryption supported by your browser when you visit our website. This is usually a 256-bit encryption. If your browser does not support 256-bit encryption, we use 128-bit v3 technology instead. You can tell whether an individual page of our website is transmitted in encrypted form by the closed display of the key or lock symbol in the lower status bar of your browser.

    We also use suitable technical and organizational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction, or against unauthorized access by third parties. Our security measures are continuously improved in line with technological developments.

     

    15. UP-TO-DATENESS AND AMENDMENT OF THIS DATA PROTECTION DECLARATION
    This data protection declaration is currently valid and was last updated in [September 2023].

    Due to the further development of our website and offers on it or due to changed legal or official requirements, it may be necessary to change this data protection declaration. The current data protection declaration can be accessed and printed out by you at any time on the website under "Data Protection".