Privacy policy

UNBINDING CONVENIENCE AUTOMATED ENGLISH TRANSLATION:

We take data protection very seriously. The protection and security of your personal data, that is, all information about you (hereinafter "personal data"), is of paramount importance to us.

We therefore process all information you provide to us with the utmost care and in accordance with the applicable data protection provisions, namely the General Data Protection Regulation (hereinafter "GDPR") and applicable national data protection laws.

Here is what information we collect about you, how we collect it and on what legal basis, what we use it for, how we protect it and what rights you have in relation to its processing.

I. DATA CONTROLLER

The controller of the processing of your personal data when you visit our website www.westwing.lu or our app, including the sale of goods and the provision of services we offer, and our Westwing accounts on the social media platforms "Facebook", "Instagram", "TikTok" and "Pinterest", among others, in accordance with the GDPR, is:

Westwing GmbH, Moosacher Strasse 88, 80809 Munich, Germany E-mail: service@westwing.fi (hereinafter "Westwing" or "we").

Westwing GmbH and Westwing Group SE, with registered offices at Moosacher Straße 88, 80809 Munich, are in some cases also jointly responsible for the processing. In this context, Westwing and Westwing Group SE have determined in an agreement in accordance with Article 26 GDPR who is responsible for which data protection obligations.

II. DATA PROTECTION OFFICER

You can also contact our Data Protection Officer at any time if you have any questions about the processing of your personal data or the exercise of your rights. You can reach our Data Protection Officer via the following contact details:

Christian Volkmer (agent: Wojtek Dragon) Projekt 29 GmbH & Co. KG Eastgasse 14 93047 Regensburg Tel: 0941 2986930 Fax: 0941 29869316 e-mail: anfrage@projekt29.de Website: www.projekt29.de

III. CATEGORIES OF PERSONAL DATA PROCESSED

Personal data collected when you visit our website, app or social media accounts may fall into the following categories:

information collected when you browse our website or our app, depending on the cookies you have consented to (e.g. login information, i.e. date and time, when you logged into our website, language settings, products in your shopping cart or information about your preferences, e.g. for product categories),
information collected when you create your customer account (e.g. your name, address, email address, preferred title (if you provide it), phone number (if you provide it), encrypted password for your customer account),
information processed in connection with your order (e.g. the products you have purchased or services you have used and the payment information you have provided to us),
information collected when you contact us (e.g. your name, email address, telephone number, customer, subscription and article numbers and any other information you provide to us),
information about you that we pass on to our external service providers in certain cases to communicate with you on our website or app and to personalise communications (e.g. your name, email address or products you are interested in based on your browsing behaviour),
information collected when you consent to receive newsletters, customer satisfaction surveys and product reviews, and your behaviour in relation to the content of our promotional emails (e.g. opening a newsletter or clicking on a link in a newsletter),
information about you that we may receive in certain cases from our partners (e.g. credit institutions, technical service providers, collection service providers or payment service providers),
information that we process for the purposes of entering competitions (e.g. your name and email address),
statistical or aggregated information about your use of our social media accounts,
information about you that we receive from a friend or other contact who wants to invite you to use our website or app (e.g. your email address).

IV. PURPOSES OF PROCESSING YOUR PERSONAL DATA

We use your personal data for purposes such as:

to provide certain technical features on our website and app (e.g. to store goods in your shopping cart) and to protect our website and app,
analysing your behaviour on our website so that we can optimise our offers and contributions for you and make them more attractive,
creating a customer account,
fulfilling and processing orders for goods and services placed with us (e.g. dispatching goods),
contact you (e.g. to answer any questions you may have, to send you order confirmations and notifications, or to notify you of changes that are important to you, such as changes to the applicable Terms and Conditions or this Privacy Policy),
for advertising and marketing purposes (e.g. sending you our newsletter, informing you about coupons or special offers, reminding you of your shopping cart history, sending you product evaluation and opinion surveys or other similar promotional activities),
payment processing by us or our partners, fraud prevention by us or our partners and debt collection by our partners,
participation in competitions,
statistical analysis of your behaviour on our social media accounts to optimise our offers and contributions to you,
inviting a friend or other contact to use our website or app.

At no point will we process special categories of personal data in accordance with Article 9 of the GDPR (e.g. health or religious data) unless you provide unsolicited information about them when you contact our customer service.

If we want to collect and process other personal data about you, we will inform you separately in advance and, if necessary, ask for your consent.

V. LEGAL BASIS FOR PROCESSING YOUR PERSONAL DATA

The processing of your personal data is based on a legal ground provided for by law, namely either your consent in accordance with Article 6 (1) (a) of the GDPR, or our legitimate interest in accordance with Article 6 (1) (f) of the GDPR, or the performance of a contract or pre-contractual measures entered into with you in accordance with Article 6 (1) (b) of the GDPR, or Westwing's legal obligation in accordance with Article 6 (1) (c) of the GDPR.

VI. RECIPIENTS OF YOUR PERSONAL DATA

Westwing is always the data controller of your personal data collected on our website, app or social media accounts.

Your personal data will only be transferred to third parties in the following cases, in accordance with the legal basis applicable to each situation:

Where the transfer of personal data is necessary for the performance or execution of your contract (Article 6(1)(b) GDPR); this includes, for example, transferring data to payment and logistics service providers or suppliers if they supply products directly to you); or
where the transfer is necessary to comply with a legal obligation (Article 6(1)(c) GDPR); for example, to transfer data to public authorities or law enforcement agencies in order to comply with our legal obligations to disclose information, make enquiries or submit claims); or
based on a legitimate interest of ours or a third party which is considered to outweigh your interests and rights (Article 6(1)(f) GDPR); this may include, for example, the transfer of data in the context of transfers of claims or for administrative purposes within a group of companies); or
if we use external service providers, so-called processors, who are obliged to process your data with due care and who act solely on our instructions and instructions (Article 28 GDPR; for example, service providers who provide the technical infrastructure).

In addition to these situations, we will only transfer your personal data to third parties if you have given your consent (Article 6(1)(a) GDPR). You can withdraw your consent at any time for future reference.

VII. TRANSFER OF DATA TO THIRD COUNTRIES

When your personal data is transferred to third countries outside the European Union ("EU") and the European Economic Area ("EEA"), we ensure that these third parties treat your personal data with the same level of care as we do.

In addition, we will only transfer your personal data to third countries for which the EU Commission has established an adequate level of data protection or where a level of data protection comparable to that of the EU or EEA can be guaranteed by agreements or other appropriate safeguards (Article 45 et seq. of the GDPR).

VIII. ERASURE OF YOUR PERSONAL DATA

Unless otherwise required by legal retention periods (e.g. retention periods under commercial and tax law), we will only retain your personal data for as long as necessary for the purposes for which it is processed or until you notify us that your personal data needs to be deleted.

Such retention periods under tax or commercial law apply, for example, to data relating to orders, such as invoices. The latter, for example, are kept for ten years.

We delete accounts of customers who have not actively used their account for more than six years.

The log data that we collect for network security and abuse prevention purposes when you visit our website is generally kept for 20 days. In individual cases, if longer retention is necessary to investigate potential cyber-attacks, fraud or abuse, data may be retained for up to 180 days. After this period, your data will be deleted or anonymised so that it can no longer be linked to you as an individual.

IX. DETAILS OF THE PROCESSING OF YOUR DATA ON OUR WEBSITE

1. PROCESSING OF DATA WHEN YOU VISIT OUR WEBSITE

When you visit our website, the following information is automatically collected and stored in so-called "server logs". Your browser automatically transmits this information to us so that our website can be displayed in your browser and so that you can use our website:

The IP address of your Internet service provider,
the website from which you visit us and the websites you visit from our website,
the time of access (date and time) and information on the crash,
information on the browser and operating system used,
where applicable, the email address you use to register on our website,
identification numbers stored in so-called cookies or eTags on your terminal device, which allow us to identify your terminal device on the website,
location information,
visits or clicks on pages and products.

The processing or storage of your above-mentioned usage data or IP address is necessary for technical reasons in order to guarantee and ensure the system security of our website.

The processing or temporary storage of your technical usage data is based on our overriding legitimate interest, as defined in Article 6(1)(f) of the GDPR, to provide you with a technically functional and secure website.

The usage data collected during your visit to our website will only be kept for as long as it is needed to achieve the purposes mentioned above. Server logs are kept for a maximum of 180 days, after which they are deleted.

2. PROCESSING OF DATA IN CONNECTION WITH THE CREATION OF A CUSTOMER ACCOUNT

To register and create an account, we need your email address and the password of your choice. We also collect and process your contact information, i.e. your name, address, email address, preferred mode of call (if you provide it) and telephone number (if you provide it). The email address will be used as the access code for your customer account. Once you have successfully registered, you will automatically receive a confirmation email. You can also store your personal information in your customer account and use it for convenient shopping on our website. Your information can be updated at any time in your personal area of your customer account ("My Account"). We use this information to process orders, provide payment options and process payments and any returns, among other things.

We want to make your visit to our website as pleasant as possible by using the "Stay logged in" feature. This feature allows you to use our services without having to log in every time. Technically, the cookie is stored on your device so that you do not have to log in again on subsequent visits to our website. This functionality will not be available to you if you have disabled the cookie through your cookie settings or if you have disabled the cookie in your browser settings after logging out of our website.

The legal basis for the processing of data is Article 6 (1) (b) GDPR, which allows the processing of personal data for the performance of a contract or precontractual measures.

Your data collected in connection with the creation or registration of a customer account will be stored only for as long as necessary to achieve the above purposes or for as long as the active Westwing member account exists.

3. PROCESSING OF DATA TO PROCESS YOUR ORDER

When you place an order with us, your data will be processed for the purposes of entering into and fulfilling the contract and processing your order, including payment and delivery. We store the billing and (possibly different) delivery address information you provide in your account so that you do not have to re-enter it the next time you make a purchase. You can change this information at any time for future reference.

The legal basis for the processing of data is Article 6 (1) (b) GDPR, which allows the processing of personal data for the performance of a contract or precontractual measures.

We will delete your personal data processed in connection with orders at the latest after the expiry of the legal storage obligations.

3.1. CHOICE OF PAYMENT METHOD

Depending on the payment method you choose, you will be asked for information necessary to use that payment service provider. This payment information is transmitted directly to the relevant payment service provider and is not stored by us. The relevant payment service provider is responsible for your payment data. Information about this is available on the website of the relevant payment service provider.

If you do not accept the payment methods offered to you, you can notify us in writing by sending an email to service@westwing.fi. We will then reconsider our decision, taking into account your views.

3.1.1. PAYMENT BY CREDIT CARD

When you pay by credit card, we receive the so-called payment ID and the last four digits of your credit card number from our payment service provider, which is Stripe Payments Europe Ltd, 1 Grand Canal Street Lower, Grand Canal Doc, Dublin, D02 H210, Ireland.

This information is used to verify and prove your order and is transmitted for your security. The aforementioned payment service provider directly collects the personal data necessary to process and handle your payment.

The legal basis for the above processing is Article 6(1)(b) GDPR, which allows processing for the performance of a contract, or Article 6(1)(f) GDPR, because our legitimate interest in providing you with a secure credit card payment option takes precedence in the balancing of interests.

3.1.2. APPLE PAY

If you choose Apple Pay to pay for your purchases directly through your bank account, we will obtain the necessary account information from our payment service provider, which is Stripe Payments Europe, 1 Grand Canal Street Lower, Grand Canal Doc, Dublin, D02 H210, Ireland. The aforementioned payment service provider directly collects the personal data necessary to process and process the payment.

The legal basis for the above processing is Article 6(1)(b) GDPR, which allows processing for the performance of a contract, or Article 6(1)(f) GDPR, because our legitimate interest in providing you with a secure payment option through Apple Pay takes precedence in the balancing of interests.

For more information on data protection in connection with Apple Pay, please visit the Apple Pay website:

3.1.3. MOBILE PAYMENTS

If you choose Mobile Pay to pay for purchases directly from your bank account, we will obtain the necessary account details from our payment service provider, which is Stripe Payments Europe, 1 Grand Canal Street Lower, Grand Canal Doc, Dublin, D02 H210, Ireland. The aforementioned payment service provider directly collects the personal data necessary to process and process the payment.

The legal basis for the above processing is Article 6(1)(b) GDPR, which allows processing for the performance of a contract, or Article 6(1)(f) GDPR, because our legitimate interest in providing you with a secure payment option through Google Pay takes precedence in the balancing of interests.

For more information about Google Pay's privacy policy, please visit the Google Pay website: https://www.mobilepay.fi/gdpr.

3.1.4. PAYPAL

If you choose to pay via PayPal, your personal data (i.e. your first and last name, delivery address, email address, telephone number, amount to be paid and IP address) will be transmitted to PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, 2449 Luxembourg, so that you can authorise us to pay via PayPal. For this you will need a PayPal account.

The legal basis for the above processing is Article 6 (1) (b) GDPR, which allows the processing of personal data for the performance of a contract or the execution of pre-contractual measures.

For more information about PayPal's privacy policy, please visit the PayPal website: https:

3.1.5. CLARIFICATION

If you choose the Klarna payment method, where payment is made immediately or within 30 days, payment is made in three interest-free instalments or in the form of interest-bearing financing to Klarna Bank AB (publ), Sveavägen 46, 111 34 Stockholm, Sweden ("Klarna Bank AB"; registered with the Swedish Trade Register under number: 556737-0431), your personal data (i.e. your contact and identification data and your payment details) will be transferred to Klarna Bank AB.

More information is available at the following link: https://cdn.klarna.com/1.0/shared/content/legal/terms/0/fi_fi/privacy

3.1.6. TRUSTLY

If you use Trustly as your payment method, your payment will be processed through the payment service provider Mollie B.V., Keizersgracht 126, 1015 CW Amsterdam, The Netherlands.

As part of the processing of payments, the payment information you provide is transferred to Mollie. The processing takes place in accordance with Article 6 (1) (b) of the GDPR for the purpose of processing the payment transaction and in accordance with Article 6 (1) (f) of the GDPR, on the basis of our legitimate interest in providing secure and efficient payment methods.

More information is available at the following link:

4. THE FIGHT AGAINST FRAUD

To prevent fraud and non-payment, we check for frequent fraud patterns and anomalies. To do this, we process order and payment information (e.g. address, product, payment method) and device information (e.g. device, browser). The legal basis is Article 6 (1) (f) GDPR, based on our legitimate interest to protect against abuse.

You can find more information on the payment methods offered in our General Terms and Conditions (GTC).

5. PROCESSING OF DATA IN CONNECTION WITH CONTACTS

5.1. CONTACT CHANNELS

You have several options to contact us. You can contact our customer service through the following communication channels:

by phone,
by fax,
by post,
by email,
via the contact form or
live chat (Whatsapp). For this we use an external provider ¡Whappodo.com! GmbH.

To process your request, we collect your name, email address, telephone number, customer, order and product number and any other information you provide, depending on the communication channel you used to contact us.

This is based on Article 6(1)(b) of the GDPR, which states that the processing is necessary for the performance of a contract, or Article 6(1)(f) of the GDPR, which is based on our legitimate interest in processing enquiries from visitors to our website.

5.2. OUR ZENDESK CUSTOMER SERVICE SYSTEM

We use the Zendesk customer service system to handle your contact requests. The service provider is Zendesk, Inc, 1019 Market Street San Francisco, CA 94103, USA.

We use Zendesk to process your queries quickly and efficiently. As a reminder, you can also submit your query by simply entering your email address, not your name.

We have an order processing agreement with Zendesk. This is an agreement to ensure that your personal data is processed only in accordance with our instructions and in compliance with the GDPR and other applicable laws.

Your information may be transferred to and stored on Zendesk servers located in the United States. The legal basis for this is the so-called Binding Corporate Rules (BCRs), which have been approved by the Irish Data Protection Authority. These are Binding Corporate Rules which authorise the internal transfer of data to third countries outside the EU and EEA. More information is available here: https://www.zendesk.com/blog/update-privacy-shield-invalidation-european-court-justice/?_gl=1*qciq0l*_ga*NTQ3MjM1ODMzLjE3NDY3ODg5MjU.*_ga_FBP7C61M6Z*czE3NDY3ODg5MjQkbzEkZzAkdDE3NDY3ODg5MzAkajU4JGwwJGgw*_gcl_au*MTMxODc1ODUyNy4xNzQ2Nzg4OTI4.

The legal basis for the processing of data by Zendesk is our legitimate interest in accordance with Article 6 (1) (f) GDPR. Alternatively, if you do not agree to Zendesk processing your query, you can contact us by email or telephone.

For more information, see the Zendesk Privacy Policy: https://www.zendesk.com/company/agreements-and-terms/privacy-notice/?_ga=2.49674086.1594119184.1724952410-1359339100.1724952409

6. PROCESSING OF DATA FOR ADVERTISING PURPOSES

6.1. SENDING PROMOTIONAL E-MAILS

If you have given your consent, Westwing will send you a regular Westwing newsletter by email, informing you about the latest trends in Home & Living, Home & Living styles, highlights of Westwing online and retail stores, special offers or "Sale of the Day" and "Sale of the Week" ("Newsletter"). For details, see section 6.1.1.

Depending on your consent, you may also receive email notifications from us about personalized benefits - such as coupons or special offers - reminders about products in your shopping cart, reviews of Westwing products you have purchased, and surveys about Westwing or Westwing services ("Notifications"). You can also find more information about this in Section 6.1.1.

If you have already purchased a product or service from us and have not objected to receiving it, you will also receive promotional emails from us about similar products and/or services. For more information, see section 6.1.2.

6.1.1. SENDING PROMOTIONAL EMAILS BASED ON YOUR CONSENT

If you have given your consent on our website by ticking the checkbox, we will send you newsletters and/or notifications by email.

Please note, however, that we will only send you newsletters and/or notifications by e-mail if you have previously expressly confirmed to us by clicking on the button that you wish to receive such e-mails. We will send you the relevant button in the notification e-mail after receiving your consent to the e-mail address you have provided (the so-called "double opt-in procedure"). This is to prevent abuse by third parties who could use your email address to register you for the Westwing newsletter or Westwing notifications without your consent. The legal basis for the double opt-in procedure is Article 6 (1) (f) GDPR, as we have a primary legitimate interest in preventing such misuse and documenting your consent.

The appropriate legal basis under data protection law for the processing of your personal data in connection with the sending of the above promotional emails is your consent in accordance with Article 6 (1) (a) GDPR.

You can withdraw your consent at any time for the future by:

Click on the unsubscribe link at the end of our promotional emails and you will be redirected (depending on whether you wish to unsubscribe from the newsletter or email notification) to the newsletter or notification management section of your account (collectively "Promotional Email Management"). There, you can simply uncheck the box for the newsletters or notifications you no longer wish to receive.

Alternatively, you can log in to your account and click on the "My Newsletters" or "Notifications" tab (depending on the type of emails you wish to unsubscribe from) and will then unsubscribe you from those newsletters or notifications you no longer wish to receive by unchecking the corresponding box in the Newsletter Management or Notifications Management section above.

You can also withdraw your consent to receive newsletters and/or notifications and unsubscribe from receiving these promotional emails by sending an email to service@westwing.fi.

Through our above mentioned promotional email management, you can indicate and withdraw your consent to receive our newsletters and/or notifications in a differentiated manner. By ticking or un-ticking the box, you can decide individually whether, when or how often you wish to receive a newsletter or notification by e-mail, depending on which newsletter you are interested in or which notification you find useful and how often you wish to receive that newsletter or notification(s).

Please note that we use standard marketing techniques in our promotional emails to measure the opening of emails and/or the use of links you click on. We use this information for general statistical analysis and to optimise and further develop our content and customer communications. This is done by means of small graphics embedded in the newsletter (so-called pixels). The legal basis for this is our legitimate interest in optimising and further developing our content and customer communications (Article 6 (1) (f) GDPR). If you do not want this analysis of your usage behaviour, you can at any time unsubscribe from receiving promotional emails or deactivate graphics by default in your email client.

Our newsletters and notices are sent via our mailing service provider Mapp Digital Germany GmbH, Dachauer Straße 63, 80335 Munich, Germany, ("Mapp"). A data processing agreement has been concluded with Mapp in accordance with Article 28 of the GDPR. For more information, please see Mapp's Privacy Policy: https://mapp.com/privacy/.

6.1.2. EMAILS ADVERTISING PRODUCTS AND SERVICES THAT MAY BE OF INTEREST TO YOU BASED ON YOUR PAST PURCHASING BEHAVIOUR.

If you have provided your email address when purchasing a product or service from our online store, we will send you offers and information about our range of products and services that may be of interest to you because you have already purchased similar products and services from Westwing. We will also send you product evaluation and feedback surveys asking you about your satisfaction with the products you have purchased or services you have used (e.g. our customer service). However, such promotional emails will only be sent if you have not opted out of receiving them - notwithstanding our notice to that effect below the purchase button.

The appropriate legal ground for processing your personal data under data protection law is our legitimate interest under Article 6 (1) (f) GDPR and national fair competition law.

You can also opt-out of receiving these promotional emails at any time by clicking on the unsubscribe link at the end of our promotional emails. Alternatively, you can log in to your customer account and unsubscribe via the management of promotional emails (see section 6.1.1.). You can also subsequently opt-out of receiving these promotional emails by sending an email to service@westwing.fi.

6.2. SENDING A NEWSLETTER VIA WHATSAPP

We also offer you the possibility to receive our newsletter via WhatsApp. To send the newsletter via WhatsApp, we use the WhatsApp Business app.

For this purpose, we cooperate with our data processors Charles GmbH, Gartenstraße 86-87, 10115 Berlin, Germany, and Braze, Inc, 318 West 39th Street, 5th Floor, New York, New York 10018, USA ("Braze").

Your use of WhatsApp is subject to the Privacy Policy of WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. It states that every WhatsApp message is encrypted end-to-end and thus protected from access by third parties.

The legal basis for the processing of your data by Westwing is Article 6 (1) (a) of the GDPR, as you have given your consent on our website and confirmed via your WhatsApp message that you wish to receive newsletters through this channel, i.e. news about new products and interior design trends. You can withdraw your consent at any time with future effect by sending the message "Stop".

Westwing is committed to the WhatsApp Business Privacy Policy, which can be found here: https://business.whatsapp.com/privacy-protections https://business.whatsap.com/privacy-protections .

7. PROCESSING OF DATA FOR COMMUNICATION ON OUR WEBSITE AND THROUGH OUR APP.

We also use the service provider Braze to communicate with you on our website and app. For this purpose, for example, we will show you so-called "overlay layouts" with the possibility of interaction.

Braze is also used to send push notifications in our app.

Braze processes, among others, the following personal data for this purpose: your IP address, device-related data such as device type, model, operating system, browser type and version, usage-related data such as usage time, name, email address, interaction data with Braze SDK and messages, installation ID, device ID.

The legal basis for processing your personal data is Article 6 (1) (a) GDPR. You can withdraw your consent at any time for the future. The easiest way to withdraw your consent is through the Cookie Consent Manager.

For more information on how to comply with Braze's data protection requirements, click here: https://www.braze.com/privacy/ (in English)

8. PROCESSING OF DATA FOR THE PURPOSES OF PARTICIPATION IN COMPETITIONS

If you participate in a competition, we will only process the data necessary for the organisation of the competition (Article 6 (1) (b) GDPR). Please refer to the data protection information in the terms and conditions of the relevant competition.

9. PROCESSING OF DATA WHEN USING FAN PAGES ON SOCIAL NETWORKS

Westwing is active and present on social media and social platforms to communicate with interested parties and users and to inform them about other Westwing offers. Below we provide you with an overview of the processing and use of your personal data by us or on the social media platforms listed below:

9.1. FACEBOOK AND INSTAGRAM

We use social media "fan pages" on Facebook and Instagram in partnership with Meta Platforms Ireland Ltd (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland) to communicate with our fans (including our customers and stakeholders) and inform them about our products, competitions and other promotions.

You can read the agreement with Meta here: https://www.facebook.com/legal/terms/page_controller_addendum (in English)

Statistics about the use of our Facebook Fan Pages (e.g., information about the number of Fan Pages, names, interactions such as "likes" and comments, and aggregate demographic and other information or statistics; "Insights Data") help us learn about how our Fan Pages are used, what interests our Fan Page visitors have, and which topics and content are particularly popular, so that we can optimize and tailor the content on our Fan Pages for our users. Insights data contains only statistical and non-personal information about fansite visitors and cannot be linked to a specific individual. You can find out more about the type and scope of these statistics in the Facebook page statistics. You can find more information about Facebook's responsibilities and data processing in the so-called "Data Supplement on Facebook Pages" at: https://www.facebook.com/legal/terms/information_about_page_insights_data .

Please note that we have no control over the processing of data carried out by Facebook under its own responsibility in accordance with the Meta Terms of Use. However, we would like to point out that when you visit the "Fan Pages", Facebook and the "Fan Pages" transfer information about your usage behaviour to Meta.

Meta processes your personal data to compile the above-mentioned statistics and for its own market research and advertising purposes. We do not have access to this data.

To the extent that we receive your personal data when we administer the fan pages, you have the rights set out in this Privacy Policy. If you wish to exercise your rights against Meta beyond this, you can also contact Facebook directly. We will be happy to help you exercise your rights where possible and direct your questions to Meta.

The legal basis for this data processing is Article 6 (1) (f) GDPR, based on our legitimate interest mentioned above to provide you with our Facebook Like Pages for marketing and promotional purposes.

For more information on this, please see Meta's privacy policy at: https://fi-fi.facebook.com/privacy/policy/?entry_point=data_policy_redirect&entry=0 .

9.2. YOUTUBE

On YouTube.com, we use so-called plug-ins to embed our own videos and make them available to the public. YouTube is a service provided by a third party not affiliated with us, namely YouTube LLC, operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google").

When you use our YouTube channel, your browser connects to YouTube and sends information. The integration of YouTube content only takes place in a so-called "extended privacy mode". This is provided by YouTube itself and ensures, to the best of its knowledge, that YouTube's user data (e.g. cookies) are only stored on your device when videos are played. When you access these videos, your IP address, unique identifiers, browser type and settings, device type and settings, operating system, mobile network information such as mobile network provider name and phone number, and app version number are transmitted to YouTube. YouTube also collects information about the interaction of its applications, browsers and devices with its own services. Extended privacy does not necessarily preclude the transfer of data to YouTube's partners. YouTube connects to the Google DoubleClick network whether you watch the video or not. The information transferred includes your IP address, crash reports, system activity, and the date, time and URL of the sender of your request. YouTube also collects information about your activities (e.g. search terms, videos you watch, etc.). YouTube processes all information collected about you through our YouTube channel. According to YouTube, this information is used, among other things, to compile video statistics, improve user experience and prevent abuse. YouTube also uses cookies to collect information about user behaviour. The storage of these cookies can be prevented through appropriate browser settings and extensions. If you are logged in to your YouTube account, you allow YouTube to map your browsing behaviour directly to your personal profile. You can prevent this by logging out of your YouTube account before activating the play button.

In addition, we sometimes integrate videos stored on YouTube directly into our website through so-called "plug-ins". This integration allows content from the YouTube site to be displayed in parts of the browser window. However, YouTube videos can only be accessed by clicking on them individually. This technique is also called "framing". If you go to a (sub)page on our website where YouTube videos are embedded in this way, the YouTube servers are connected and the content is displayed on the website by notifying your browser. We have no control over the scope and content of the information that is sent to YouTube and possibly other YouTube partners by activating the add-on. YouTube's server is informed, among other things, which of our pages you have visited.

The legal basis for processing your data is your consent, Article 6 (1) (a) GDPR. This means that we will not use this service unless you have given your consent to its use. You can withdraw your consent at any time with future effect, most easily via the cookies consent management.

For more information about what information YouTube receives and how it is used, please see YouTube's Privacy Policy at: https://policies.google.com/privacy .

9.3. TIKTOK

We publish short video clips on the TikTok platform and TikTok app to promote our products and sales. If you visit the TikTok website or app, TikTok Inc, 10100 Venice Blvd, Culver City, CA 90232, USA ("TikTok") collects and processes your personal information.

TikTok makes a certain amount of this information available to TikTok profile owners in an anonymised and aggregated form. This includes the number of new followers, demographic information such as gender and country, without reference to identifiable individuals. Thus, Westwing cannot identify any visitor to a TikTok profile. As the owner of the profile, Westwing receives anonymised statistical data from TikTok (so-called "Insights data"). This data does not allow conclusions to be drawn about the visitor in question. We use the statistical data solely to analyse user behaviour in order to better tailor our TikTok profile and offerings to the needs and interests of our visitors.

The use of your data provided to us by TikTok is based on our legitimate interest under Article 6 (1) (f) of the GDPR to perform data analysis and statistics on the use of our TikTok profile, to optimize our offer to you, to market our publications and videos on our website, and to continuously improve and manage our offerings and products.

For more information about TikTok's processing of data, please see TikTok's Privacy Policy at: https://www.tiktok.com/legal/page/eea/privacy-policy/fi .

9.4. PINTEREST

We manage the Westwing account on Pinterest and the Pinterest app, where we post home and living inspiration and promote our products. Pinterest Inc, 808 Brannan Street, San Francisco, CA 94103, USA ("Pinterest") is responsible for Pinterest.

When you register an account, Pinterest processes the information you provide, such as your name, email address, phone number, photos, pins and comments. In addition, Pinterest collects and processes your IP address, which is used to estimate your location if you choose to share your exact location, and other internet and web activity (including pins you click, boards you create, and your comment or description text).

The legal basis for this processing is Article 6 (1) (f) GDPR, based on our legitimate interest in providing you with our Pinterest board for marketing and advertising purposes.

For more information, see https://policy.pinterest.com/fi/privacy-policy

10. DATA PROCESSING BY SHOPIFY

In order to provide our online store and process your payments, we work with Shopify International Limited, Victoria Buildings 1-2, Haddington Road, Dublin 4, D04 XN32, Ireland ("Shopify"). Shopify allows us to operate our online store through Shopify's cloud infrastructure and also processes payments on our behalf.

Your information may be transferred to Shopify servers in the United States and stored there. The legal basis for this is the European Commission's adequacy decision of 10 July 2023 (the so-called EU-U.S. Data Protection Framework), which is based on Article 45 of the GDPR. If the adequacy decision is not applicable, the EU standard contractual clauses (Article 46 GDPR) will be used for the transfer of data.

Shopify is used to serve our online store and process payments. The legal basis is therefore either our legitimate interest (Article 6(1)(f) GDPR) or the performance of your contract (Article 6(1)(b) GDPR). Shopify acts as data processor or data controller depending on the processing operation.

For more information on Shopify's data processing: https://www.shopify.com/fi/legal/privacy (in English).

X. COOKIES AND SIMILAR TECHNOLOGIES

We use so-called cookies and similar technologies (such as web beacons, pixels and tags) on our website. Web beacons are small GIF files that can be hidden in other graphics, emails or the like. Web beacons can identify your computer and assess your user behaviour, for example your reactions to advertising campaigns. The information collected by web beacons cannot be used to identify you. Cookies are small text files that are transferred from an Internet server to your browser and stored on your hard drive. There are so-called session cookies, which are deleted as soon as you close your browser, and so-called persistent cookies, which are stored on your terminal for a longer period or indefinitely. A cookie contains a distinctive string of characters that uniquely identifies your browser when you return to a website. This helps us to adapt our offerings, make them more user-friendly, efficient and secure, and to enable us to provide certain features.

The Cookie settings button allows you to specify at any time which cookies you want to allow. Essential cookies, which ensure the essential functionality of the website, are excluded.

In principle, we distinguish between four different categories of cookies:

1. THE COOKIES THAT ARE STRICTLY NECESSARY

These cookies enable basic functions and are necessary for the proper functioning of the website. They are used, for example, to process orders or to ensure that you, as a registered user, can always remain logged in when using the various sub-pages of our website. In addition, these cookies mean that you do not have to re-enter your login details each time you go to a new page.

The legal basis for the use of strictly necessary cookies on our website is to satisfy our legitimate interest in providing a technically accurate and user-friendly website (Article 6 (1) (f) GDPR). The use of strictly necessary cookies is possible and legally permitted without your prior consent.

3. PERFORMANCE COOKIES

Performance cookies allow us to count visits and traffic sources so that we can measure and improve the performance of our website. The information collected by cookies allows us to understand, among other things, which areas are the most popular, which are the least popular and how visitors move around our website. All information collected by cookies is aggregated and cannot be easily linked to you.

The processing is based on your consent in accordance with Article 6 (1) (a) of the GDPR. You can withdraw your consent at any time for the future, most easily through the cookie consent management.

4. MARKETING CLAIMS AND RELATED TECHNOLOGIES

Through marketing interventions and similar technologies (e.g. "pixels"), we can show you personalised and therefore relevant advertising content and measure the effectiveness of our advertising efforts.

Marketing cookies and similar technologies are not only placed on our website, but also on the websites of other (advertising) partners ("third party cookies"). This so-called "retargeting" is used to place relevant advertising on other websites and to analyse the target groups for products and services.

The processing is based on your consent in accordance with Article 6 (1) (a) of the GDPR. You can withdraw your consent at any time for the future, most easily through the consent management. If you do not allow these cookies, you will be shown less relevant advertising.

5. INFORMATION ABOUT THE COOKIES WE USE

5.1. THE NECESSARY COOKIES

5.1.1. GOOGLE RECAPTCHA

We use the reCAPTCHA service provided to people in the European Economic Area and Switzerland by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google").

This service allows us to distinguish whether the entry was made by a natural person or whether it was made incorrectly by a machine and automated processing.

When you use the service, your IP address and other information required by Google for the reCAPTCHA service is transmitted to Google.

This data is processed on the basis of our legitimate interest in exercising personal responsibility on the Internet and preventing abuse and spam (Article 6 (1) (f) GDPR). The storage of data and access to data on your terminal device is strictly necessary.

For more information, see Google's Privacy Policy:

5.1.2. ONETRUS

We work with our service provider OneTrust, LLC, 1350 Spring St NW, Atlanta, GA 30309 ("OneTrust") to obtain and administer your consent. This is done through our "cookie banner" that appears on your first visit to our website or app, explaining our data processing or, more specifically, our website cookies and other technologies, and allowing you to opt-out or consent to the setting of individual cookies and other technologies. However, you can revisit the cookie banner and change your choice. In addition, the cookie banner will appear when you visit our website if you have disabled cookie storage or if OneTrust has removed or expired cookies.

In particular, your consent or revocation, your IP address, information about your browser and your terminal device during your visit are transmitted to OneTrust and stored on your terminal device.

The relevant legal basis is Article 6 (1) (f) GDPR, as we have a legitimate interest in complying with the legal requirements for cookie consent documentation and cookie management.

This information may be transferred to OneTrust servers in the United States and stored there. The legal basis is the adequacy decision of the European Commission of 10 July 2023 (the so-called EU-U.S. Data Protection Framework) pursuant to Article 45 GDPR.

5.2. FUNCTIONAL COOKIES

5.2.1. VIMEO INTERFACES

Among other things, we use Vimeo LLC, 555 West 18th Street, New York 10011, USA ("Vimeo") to integrate videos.

It uses so-called plug-ins for this purpose. When you access websites with such a plug-in, a connection is established with Vimeo's servers and information is transmitted about which of our websites you have visited. If you are logged in to Vimeo, Vimeo will assign this information to your personal user account. When you use the plug-in, for example by clicking on the video start button, this information is also assigned to your user account.

The relevant data may be transferred to Vimeo servers in the United States and stored there. The legal basis is the adequacy decision of the European Commission of 10 July 2023 (the so-called EU-U.S. Data Protection Framework) pursuant to Article 45 GDPR or on the basis of your consent pursuant to Article 49 (1) (a) GDPR.

The legal basis for processing your data is your consent, Article 6 (1) (a) GDPR. This means that we will not use this service unless you have given your consent to its use. You can withdraw your consent at any time for the future, most easily through the cookies consent management.

For more information, see the Vimeo Privacy Policy: https://vimeo.com/privacy (in English).

5.2.2 ALGOLIA

We use Algolia SAS, 55 Rue d'Amsterdam, 75008 Paris, France ("Algolia") to search and index the content of our website and app. For this purpose, your IP address and your search query are transmitted to Algolia's server.

Algolia also generates reports for us with corresponding evaluations and analyses of search queries.

Algolia helps us to improve the searchability of our offers, as well as the search experience and customer satisfaction.

For more information, see Algolia's Privacy Policy: https://www.algolia.com/policies/privacy (in English).

5.3. PERFORMANCE BENCHMARKS

5.3.1. GOOGLE ANALYTICS AND CONVERSION TRACKING

We use Google Analytics, a web analytics service provided by Google that, among other things, installs pixels and performance cookies to store information on your end device.

This allows us to determine data, sessions and interactions across multiple devices using a pseudonymous username to analyse your usage patterns across devices and to improve our website and make it more interesting for you. For this purpose, we also receive statistics from Google about your use of our website.

Google Analytics 4 also uses artificial intelligence to automatically analyse and enrich data. This is primarily used to generate predictions about the future behaviour of website visitors based on structured event data (e.g. sales prediction, likelihood to buy, likelihood to cancel). These predictive values can also be used to predict target audiences. For more information see: https://support.google.com/analytics/answer/9846734?hl=fi

Google Analytics 4 will also model conversions if there is not enough data available to optimise data analysis. For more information, please visit: https://support.google.com/analytics/answer/10710245?hl=fi.

Google Analytics 4 does not record or store individual IP addresses. However, Google Analytics 4 does provide approximate geographic location information by deriving the following metadata from IP addresses: city (and derived latitude and longitude of the city), continent, country, region, subcontinent (and ID-based equivalents). For EU traffic, IP address information is used exclusively to determine geographic location, after which it is immediately deleted. The data is not logged, is not accessible and is not used for any other purpose.

This data may be transferred to Google servers in the United States and stored there. The legal basis is the adequacy decision of the European Commission of 10 July 2023 (the so-called EU-U.S. data protection framework) pursuant to Article 45 GDPR or on the basis of your consent pursuant to Article 49 (1) (a) GDPR. As IP anonymisation is activated on this website, your IP address will be shortened before it is sent to the United States or EU Member States or EEA Contracting States. Only in exceptional cases will your full IP address be transferred to a Google server in the United States and shortened there. The IP address sent by your browser in connection with Google Analytics will not be combined with other Google data.

The legal basis for processing your data is your consent in accordance with Article 6 (1) (a) of the GDPR. This means that we will not use this service unless you have given your consent to the use of Google Analytics through conversion tracking. You can withdraw your consent at any time for the future, most easily via the cookies consent manager.

You can also prevent Google from collecting and processing your data (including your IP address) by downloading and installing the browser add-on available at the following link: http://tools.google.com/dlpage/gaoptout?hl=fi . An opt-out cookie will be set to prevent the collection of your data in the future when you visit this website. The opt-out cookie is only valid in this browser and only on our website and is stored on your device. If you delete cookies from this browser, you will need to reinstall the opt-out cookie.

For more information on how Google Analytics processes data through conversion tracking, please visit: http://www.google.com/analytics/terms/fi.html , http://www.google.com/intl/fi/analytics/learn/privacy.html and

5.4. COOKIES AND MARKETING PIXELS

5.4.1. FACEBOOK CUSTOM AUDIENCE / METAPIXEL

On our Website, we use Facebook Custom Audiences with the so-called pixel function ("Meta Pixel") and the Server-Side Conversion API, which for visitors located outside the United States and Canada is operated by Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Grand Canal Harbour, Dublin 2, Ireland ("Meta").

This allows us to show you interest-based advertising when you visit Facebook and Instagram social networks or other Meta apps and websites, and to track the effectiveness of our advertising. With meta pixels embedded on our websites, your browser automatically connects to Meta's servers for extended synchronization of the embedded meta pixel. This provides Meta with information such as whether you have clicked on a particular advertisement or product on our website, which in turn allows us to show you interest-based advertisements on our website or other websites.

If you are registered with the Meta Service, Meta can link your website visit to your account, as we transmit your personal data in the form of email and IP address to the Meta Service via pixel and partially supplemented with existing tracking data. Your country of location is also transmitted. Even if you are not registered on Facebook or Instagram or are not logged in, Meta can obtain your personal data mentioned above and use it to create a profile.

Such data may be transferred to Meta's servers in the United States and stored there. The legal basis is the adequacy decision of the European Commission of 10 July 2023 (the so-called EU-U.S. Data Protection Framework) pursuant to Article 45 GDPR or your consent pursuant to Article 49 (1) (a) GDPR.

The legal basis for processing your data is your consent, Article 6 (1) (a) GDPR. This means that we will not use these services unless you have given your consent to the use of personalised audiences or Facebook pixels. You can withdraw your consent at any time for the future in the simplest way via our consent management. If you are logged in to your Facebook account, you can also object to the processing of your data via the following link: https://www.facebook.com/adpreferences/ad_settings/?entry_product=account_settings_menu (in English).

For more information, in particular about our joint responsibility with Meta and the purpose and scope of the processing carried out by Meta, as well as the options for setting up a privacy policy to protect your privacy, please consult Meta's Privacy Policy:

5.4.2. PINTEREST TAG

To optimise our Pinterest campaigns and measure their success, we use the social network "Pinterest Tag" service provided to visitors in the EEA by Pinterest Europe Ltd, Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland ("Pinterest").

We use the "Pinterest tag" together with the server-side conversion API to display Pinterest ads only to those Pinterest users who have shown interest in our offer. This ensures that the content of our ad is very likely to match the interests of that user. We can also track the behaviour of Pinterest users who have clicked on one of our ads. To do this, Pinterest processes information that it collects through cookies, web beacons and similar storage technologies on our websites.

When using the Service, the following information is processed: device information (e.g. type, brand), operating system used (e.g. iOS 11), IP address of the device used, the duration of our offer, the type and content of the promotion and the reaction to that promotion (e.g. button click), and device identifiers consisting of unique characteristics of your terminal device. We may also use these device identifiers to identify your device on the website. The information collected in this way is anonymous to us and cannot be used to infer your identity. If you log in to your Pinterest account after visiting our website, or if you visit our website while logged in, Pinterest may store and process this information, which we will inform you about. It is possible that Pinterest will link this information to your Pinterest account and also use it for its own advertising purposes.

This information may be transferred to Pinterest servers in the United States and stored there. The legal basis is the adequacy decision of the European Commission of 10 July 2023 (the so-called EU-U.S. Data Protection Framework) pursuant to Article 45 GDPR or your consent pursuant to Article 49 (1) (a) GDPR.

The legal basis for processing your data is your consent in accordance with Article 6 (1) (a) of the GDPR. This means that we will not use this service unless you have given your consent to the use of the Pinterest Tag. You can withdraw your consent at any time with future effect, most easily via our consent management.

For more information about the purpose and scope of data processing and the options available to protect your privacy, please refer to the Pinterest Privacy Policy, which can be accessed via the following link: https://policy.pinterest.com/fi/privacy-policy

5.4.3. MICROSOFT BING ADS

On our website we use Bing conversion tracking provided by Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA.

Microsoft Bing Ads places a cookie on your computer if you have come to our website through a Microsoft Bing ad. This allows us to recognise that you have clicked on the ad and have been directed to our website. This helps us to understand the effectiveness of a particular ad. However, we only receive information on the total number of users who have clicked on a Bing ad and have been directed to our website. No information about the identity of the user is transmitted.

This data may be transferred to Microsoft servers in the United States and stored there. The legal basis is the adequacy decision of the European Commission of 10 July 2023 (the so-called EU-U.S. Data Protection Framework) pursuant to Article 45 GDPR or your consent pursuant to Article 49 (1) (a) GDPR.

The legal basis for processing your data is your consent, Article 6 (1) (a) GDPR. This means that we will not use this service unless you have given your consent to its use. You can withdraw your consent at any time with prospective effect, most easily through the cookies consent manager.

For more information on data processing and cookies used by Bing Ads, please visit: https://privacy.microsoft.com/fi-fi/privacystatement

5.4.4. GOOGLE ADS (FORMERLY ADWORDS) AND CONVERSION TRACKING

We use Google Adwords and Google Conversion Tracking services provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google") to individuals in the European Economic Area and Switzerland.

This allows us to place Google Adwords ads based on your interests and location.

When you click on a Google ad, a cookie is temporarily placed on your computer, which allows us to recognise that you have clicked on the ad and have been directed to this page.

Using the conversion statistics generated from this, we know the total number of users who clicked on the ad and were redirected to the page with the conversion tracking tag. However, we do not receive any personally identifiable information about users.

If you use your Google Account, Google may link your browsing history and app browsing history to your Google Account and use your Google Account information to personalise ads based on the settings stored in your Google Account. If you do not want this link to your Google Account, you will need to sign out of Google before visiting our website. You can also prevent similar cookies from being set by changing the settings in your browser software or on the Google website.

The legal basis for processing your data is your consent in accordance with Article 6 (1) (a) of the GDPR. This means that we will not use this service unless you have given your consent to its use. You can withdraw your consent at any time with prospective effect, most easily through the cookies consent management.

For more information about Google ads and conversion tracking, and to read Google's privacy policy, please visit https://www.google.com/privacy/ads and https://policies.google.com/privacy?hl=fi .

5.4.5. GOOGLE'S DYNAMIC REMARKETING

We also use the remarketing functionality of Google Ads. This service is used to show you interest-based ads on other websites after you have visited our website. The ads are based on the products and services you clicked on during your most recent visit to our website. For this purpose, Google sets cookies that are temporarily stored in your browser. The information received will not be used to identify you. Google will only store information such as your web browser query, your IP address, browser type, browser language, date and time.

The legal basis for processing your data is your consent in accordance with Article 6 (1) (a) of the GDPR. This means that we will not use this service unless you have given your consent to its use. You can withdraw your consent at any time with prospective effect, most easily via the cookies consent manager.

more information about Google Dynamic Retargeting and Google's Privacy Policy, please visit https://www.google.fi/privacy/ads and https://policies.google.com/privacy?hl=fi

5.4.6. GOOGLE AD MANAGER (FORMERLY DOUBLECLICK)

We also use Google Ad Manager (formerly Doubleclick). This service uses cookies, pixels and other technologies to serve ads based on your interests and previous visits to our website or other websites. It also allows us to track the success of our advertising campaigns. Google also processes this information to optimise its own products and services.

If you use your Google Account, Google may link your browsing history and app browsing history to your Google Account and use the information in your Google Account to personalise ads based on the settings stored in your Google Account. If you do not want this link to your Google Account, you will need to sign out of Google before visiting our website. You can also prevent the installation of similar cookies by changing the settings in your browser software or on the Google website.

The legal basis for processing your data is your consent, in accordance with Article 6 (1) (a) of the GDPR. This means that we will not use this service unless you have given your consent to its use. You can withdraw your consent at any time with prospective effect, most easily through the cookies consent manager.

For more information about Google Ad Manager and Google's privacy policy, please visit https://www.google.fi/privacy/ads and https://policies.google.com/privacy?hl=fi

5.4.7. YOUTUBE IN EXTENDED PRIVACY MODE

We use, among others, YouTube LLC, 901 Cherry Ave, San Bruno, CA 94066, USA ("YouTube") as a service provider to embed videos on our website. When you visit our website with embedded YouTube videos, your browser will connect directly to YouTube's servers to display the content to you. Your browser may store the content you use. If you are logged in to your YouTube account, YouTube may assign your usage behaviour to your personal profile. You can prevent this by logging out of your YouTube account before visiting our website.

Such data may be transferred to YouTube servers in the United States and stored there . The legal basis is the adequacy decision of the European Commission of 10 July 2023 (the so-called EU-U.S. data protection framework) pursuant to Article 45 GDPR or your consent pursuant to Article 49 (1) (a) GDPR.

The legal basis for processing your data is your consent in accordance with Article 6 (1) (a) of the GDPR. This means that we will not use this service unless you have given your consent to its use. You can withdraw your consent at any time for the future, most easily via the Cookie Consent Manager.

For more information about the processing of data by YouTube, please see the YouTube Privacy Policy at: https://policies.google.com/privacy?hl=fi&gl=fi

5.4.8. SEGMENT

We also use the Segment Service provided by Segment Inc., 101 15th St San Francisco, CA 94103, USA ("Segment").

Segment collects and stores information about you that can be used to create user profiles using pseudonyms. These usage profiles are used to analyse your usage patterns and are evaluated to help us improve our offering to you. Cookies may be used for this purpose, which allow us to recognise you when you visit our website again. Usage profiles with a pseudonym are not linked to the personal data of the pseudonym holder.

Such data may be transferred to the Segment's servers in the United States and stored there. The legal basis is the adequacy decision of the European Commission of 10 July 2023 (the so-called EU-U.S. Data Protection Framework) pursuant to Article 45 GDPR or your consent pursuant to Article 49 (1) (a) GDPR.

The legal basis for processing your data is your consent in accordance with Article 6 (1) (a) of the GDPR. This means that we will not use this service unless you have given your consent to its use. You can withdraw your consent at any time for the future, most easily through the consent management system.

For more information, see the Segment Privacy Policy: https://segment.com/docs/legal/privacy/ (in English).

5.4.9. HOTJAR

We use the Hotjar web analytics service provided by Hotjar Limited, Dragonara Road, Paceville St. Julian's STJ 3141, Malta ("Hotjar").

Hotjar uses cookies and other technologies to analyse and evaluate your user behaviour and your interaction with our website. This helps us to optimise the user experience on our website by giving us a better understanding of the user experience on our website (e.g. clicks, scrolling, mouse movements).

Your IP address is shortened before the usage statistics are analysed, so no direct conclusions can be drawn about your identity.

The legal basis for processing your data is your consent in accordance with Article 6 (1) (a) of the GDPR. This means that we will not use this service unless you have given your consent to its use. You can withdraw your consent at any time for the future, most easily through the cookies consent management.

For more information: https://help.hotjar.com/hc/fi/sections/115003204947 (in English).

5.4.10. BRAZES

We use Braze, Inc., 318 West 39th Street, 5th Floor, New York, New York 10018, USA ("Braze") Braze Web analytics service to communicate with you on our website and to understand how our mobile content works and how it is used on your device. For example, we display pop-ups with an interaction option. Braze is also used to send push notifications in our app. We also use Braze to send you personalised promotions and information about our products. We also use Braze to notify you of products you have missed in your shopping cart.

This data may be transferred to and stored on Braze servers in the United States. The legal basis for this is the European Commission's adequacy decision of 10 July 2023 (the so-called "Data Protection Framework"), which was adopted in accordance with Article 10 of the Braze Privacy Policy. Article 45 GDPR or Article 49 (1) (a) GDPR together with your consent.

The legal basis for processing your data is your consent in accordance with Article 6 (1) (a) of the GDPR. This means that we will not use this service unless you have given your consent to its use. You can withdraw your consent at any time with prospective effect, most easily via the cookies consent manager.

For more information: https://www.braze.com/privacy/ (in English).

5.4.11. CRITERIA

We also use the remarketing tool of Criteo, SA, 32 Rue Blanche, 75009 Paris, France, on our website and in our app to show you personalized ads on partner websites and product apps that interest you based on the products you click on our website or app. To do this, Criteo combines the above information about your past browsing behavior with a unique identifier such as an ID cookie or other similar technology (e.g., mobile advertising ID and other non-bookie-based technologies).

Criteo and Westwing act as joint controllers within the meaning of Article 4 of the GDPR. In accordance with Article 26 of the GDPR.

The legal basis for processing your data is your consent in accordance with Article 6 (1) (a) of the GDPR. You can withdraw this consent at any time for the future - the easiest way is to use the cookie consent management system or the following link: https://www.criteo.com/es/privacy/disable-criteo-services-on-internet-browsers/ (in English) - withdraw your consent.

If Criteo transfers personal data to countries outside the EU or EEA, Criteo will do so on the basis of an adequacy decision by the European Commission under Article 45 of the GDPR or on the basis of appropriate safeguards under Article 46 of the GDPR, for example by using EU standard clauses. Your data will be deleted as soon as it is no longer needed for the specified processing purposes.

For more information: http://www.criteo.com/privacy (in English).

5.4.12. CLEAR

We use the Klear influencer marketing service provided by Meltwater Deutschland GmbH, Jannowitz Centre, Brückenstrasse 6, 10179 Berlin. It allows us to set up influencer marketing programmes and measure and analyse influencer campaigns. Klear uses cookies to track the success of campaigns on our website. These analytics help us to, among other things, search for influencers on social media based on region, language, industry, hashtag and past engagement patterns, and make informed decisions about our influencer marketing strategy.

The legal basis for processing your data is your consent in accordance with Article 6 (1) (a) of the GDPR. This means that we will not use this service unless you have given your consent to its use. You can withdraw your consent at any time for the future in the simplest way via our consent management system.

For more information see https://klear.com/legal/cookies and https://klear.com/legal/privacy-notice-for-influencers (in English)

5.4.13. GOOGLE CUSTOMER MATCH

We also use Google's Google Customer Match service, which allows us to show interest-based advertising to our website visitors based on their past browsing behaviour on our website and on third party websites, apps and emails.

The legal basis for processing your data is your consent in accordance with Article 49 (1) (a) GDPR. This means that we will not use this service unless you have given your consent to its use. You can withdraw your consent at any time with prospective effect, most easily through the cookies consent manager. If you do not wish to receive interest-based advertising from Google Customer Match, you can also unsubscribe by visiting the following websites: http://www.networkadvertising.org/choices/ and http://www.youronlinechoices.com/.

For more information, see Google's Privacy Policy:

5.4.14. LEAD

This website also uses Lead Forensics, Lead Forensics, UK Headquarters, Communication House, 26 York Street, 26 York Street, London, W1U 6PZ, United Kingdom, a B2B sales and marketing tool.

Lead Forensics uses tracking code to identify companies visiting our websites based on their commercial IP addresses. These are not cookies. The Lead Forensics tracking code only provides publicly available information. It cannot and does not provide any personal or sensitive information about who has visited our website. Under no circumstances will the information be used to personally identify an individual visitor. If IP addresses are collected, they will be anonymised immediately after storage.

Lead Forensics does not provide us with IP addresses. It only gives us information about which companies have visited our website, the date and duration of their visit and the websites they have visited. This information allows us to analyse the use of our website and possibly contact those companies.

The data generated by the Lead Forensics tracking code is transferred to Lead Forensics servers in the UK, where it is processed and stored. The legal basis is the adequacy decision of the European Commission of 10 July 2023 (the so-called EU-U.K. data protection framework) pursuant to Article 45 GDPR or your consent pursuant to Article 49 (1) (a) GDPR.

The legal basis for processing your data is your consent, in accordance with Article 6 (1) (a) of the GDPR. This means that we will not use this service unless you have given your consent to its use. You can withdraw your consent at any time for the future, most easily through the cookies consent management. If you wish to unsubscribe, you can also use the following link: https://optout.leadforensics.com/?clientID=786109 (in English).

5.4.15. TikTok ads

We use TikTok Ads, a service provided by TikTok Inc, 10100 Venice Blvd, Culver City, CA 90232, USA ("TikTok"), which allows us to show interest-based advertising to our website visitors based on their past browsing behavior on our website and third party websites, apps and emails.

When you visit our website, a connection to TikTok's servers is established by installing a pixel, and information such as your IP address, pages visited and interactions may be stored.

The corresponding data may also be transferred to TikTok's servers in the United States and stored there. The legal basis is the adequacy decision of the European Commission of 10 July 2023 (the so-called EU-U.S. Data Protection Framework) pursuant to Article 45 GDPR or your consent pursuant to Article 49 (1) (a) GDPR.

The legal basis for processing your data is your consent in accordance with Article 6 (1) (a) of the GDPR. This means that we will not use this service unless you have given your consent to its use. You can withdraw your consent at any time with prospective effect, most easily via the cookies consent manager.

For more information about TikTok's privacy policy, please visit: https://ads.tiktok.com/help/article/app-retargeting?lang=fi or our Privacy Policy: https://www.tiktok.com/legal/page/eea/privacy-policy/fi.

XI. TECHNICAL AND ORGANISATIONAL MEASURES FOR DATA SECURITY

We have implemented technical and organisational security measures and safeguards to protect your personal data against loss, destruction, manipulation and unauthorised access by third parties and to ensure an adequate level of protection and safeguard your individual rights.

In particular, we encrypt personal data, including sensitive content such as your contact request, before sending it. All of our employees, as well as service providers and processors who work for us, must comply with applicable data protection rules and laws.

We regularly check that our security measures are adequate and in line with the latest technology.

XII. YOUR RIGHTS AS A REGISTERED USER

In accordance with data protection regulations, you have the following rights concerning your personal data at any time:

1. THE RIGHT TO INFORMATION

You have the right to request information about the data we process about you and a copy of that data.

2. RIGHT OF RECTIFICATION

You have the right to request the rectification of inaccurate data and, taking into account the purposes of the processing, the completion of incomplete data.

3. RIGHT OF WITHDRAWAL

You have the right to request the deletion of your data for the following reasons:

the retention of the data is no longer necessary for the purposes for which they were collected or otherwise processed,

you withdraw the consent on which the processing was based and there is no other legal basis for the processing,

you object to the processing and there are no compelling legal grounds for the processing,

the personal data concerned have been unlawfully processed,

or the erasure of personal data is necessary to comply with a legal obligation under Union or Member State law.

Please note that there may be reasons that prevent immediate deletion, for example due to legal obligations to preserve data. Regardless of whether you exercised your right to erasure, we will delete your data immediately and completely if it is no longer necessary to retain it for the purposes for which it was processed and unless otherwise required by legal retention obligations.

4. RIGHT TO RESTRICTION OF PROCESSING

You have the right to request restriction of the processing of your data, provided that.

you contest the accuracy of your personal data for as long as it takes us to verify the accuracy of your personal data,

the processing is unlawful and you object to the erasure of your personal data and instead request the restriction of the use of your personal data,

we no longer need the personal data for the purposes of the processing, but you need them for the establishment, exercise or defence of legal claims; or

you have objected to processing in accordance with Article 21(1) of the GDPR, pending a review of whether our legal ground outweighs your legal ground.

5. RIGHT TO DATA PORTABILITY

If the legal requirements are met, you have the right to receive the data provided in a structured, commonly used and machine-readable format and the right to have this data transferred to another controller or, if technically feasible, by Westwing.

6. THE RIGHT TO LODGE A COMPLAINT WITH THE COMPETENT DATA PROTECTION AUTHORITY.

You also have the right to lodge a complaint with the competent data protection authority. You can exercise this right by sending an email to service@westwing.fi.

7. THE RIGHT TO OBJECT

To the extent that the processing of your personal data is based on our legitimate interest as defined in Article 6 (1) (a) of the GDPR, you also have the right to object to the processing of your personal data on grounds relating to your particular situation, for example by sending an email to service@westwing.fi. In this case, we will no longer process the personal data for these purposes, unless our legitimate interests in individual cases prevail.

8. RIGHT OF WITHDRAWAL

If the processing of your personal data is based on your consent in accordance with Article 6 (1) (a) of the GDPR, you have the right to withdraw your consent at any time for the future, for example by sending an email to: service@westwing.fi.

If you wish to exercise these rights against us, please contact our Data Protection Officer by email at anfrage@projekt29.de.

XIII. CHANGES TO THIS PRIVACY POLICY

We reserve the right to amend this Privacy Policy as necessary, for example to reflect new technology. We recommend that you review this Privacy Policy from time to time to check for any changes.

If there are material changes to this Privacy Policy, we will post them on our website. We will also check on a case-by-case basis whether we have an obligation to give further notice of changes to this Privacy Statement and, where appropriate, we will comply with this obligation appropriately.

Updated: May 2025