Back to the top

Privacy Statement for vitra.com

Vitra International AG takes the protection of your personal data very seriously. The purpose of this Privacy Statement is to inform you about the type of personal data that will be collected when you use our website, vitra.com, and how we will process, use, and protect such data.

1. Geltungsbereich

1.1
Use of the vitra.com website is subject to the Privacy Statement set out below. The vitra.com website is a service provided by Vitra International AG, Klünenfeldstr. 22, 4127 Birsfelden, Basel-Landschaft, Switzerland (hereinafter, “Vitra”). Where relevant, Vitra is the controller pursuant to Article 4 of the EU General Data Protection Regulation (hereinafter, “GDPR”).

1.2
Protecting your personal data is important to us, in particular, where respecting your personal rights in connection with the processing and use of such data is concerned. The term personal data refers to information regarding the personal and/or factual circumstances of an identified or identifiable natural person including the person’s name, postal address, e-mail address and/or telephone number and user data such as the IP address. We collect, process, and use your personal data in compliance with the relevant laws.

2. Automated Data Collection and Processing by Your Browser

2.1
As with every website, our server automatically collects the following information and temporarily saves it in server log files which are transmitted by your browser unless you have deactivated such function:

- the IP address of the computer transmitting the request;
- the client’s file request;
- the http response code;
- the volume of data transmitted;
- the website from which you access our website (referrer URL);
- the date and time of the server request;
- the type, version and language of your browser; and
- the operating system on the computer transmitting the request.

Our server log files are not evaluated based on personal use. We cannot allocate this data to specific persons at any time. Also, we do not merge this data with data from other sources.

2.2
Our website uses Google Analytics, a web analytics service offered by Google Inc. (hereinafter, “Google”). Google Analytics uses text files called cookies which are saved on your computer to facilitate analysis of your website use. The information collected relates to your operating system, browser and IP address, the website you accessed previously (referrer URL), and the date and time of your visit to our website. The information generated by cookies regarding your use of our website typically is transmitted to and saved on a Google server in the United States. If and when IP anonymization is activated on this website, Google will truncate your IP address for transmission among member states of the European Union or to other member states of the Agreement on the European Economic Area. Only in exceptional cases will your full IP address be transmitted to a Google server in the United States and then truncated. At the request of the operator of this website, Google will use this information to evaluate your use of our website, to compile reports on website activity, and to provide us with other services relating to website activity and Internet use. The IP address transmitted from your browser as part of Google Analytics will not be merged with any other data held by Google.

You may refuse the use of cookies by selecting the appropriate settings on your browser software; however, please note that in this case you may not be able to use the full functionality of our website. In addition, you can object to Google’s collection of data generated by cookies relating to your use of our website (including your IP address) as well as to its dissemination of the data. To do so, download and install the browser plug-in available at http://tools.google.com.

We use Google Analytics to analyze and enhance the use of our website regularly. The resulting statistics allow us to improve our offerings and make them more interesting for you, the user. In exceptional cases in which personal data is transmitted to the United States, Google is bound by the EU-US Privacy Shield. The legal basis for our use of Google Analytics is Article 6 (1) p. 1 f) of the GDPR.

Information regarding the third-party provider is as follows: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001; terms of use; overview of data protection; privacy statement.

2.3
Retargeting: We use retargeting technology on our website to enhance its appeal to you. Retargeting enables us to address Internet users who have shown interest in our shop and/or our products in the past through targeted advertising on our partners’ websites. We believe personalized and interest-oriented advertising tends to be more interesting to Internet users than non-targeted advertising. These targeted ads are displayed on our respective partners’ websites based on cookie technology and an analysis of visitors’ prior use of the Internet. This form of advertising is entirely pseudonymous. No usage profiles will be consolidated with your personal data. By using our website you consent to cookies being used to capture, save, and use your user-related data. Your data will be saved in cookies beyond the end of your browser session so that it can be retrieved, for example, when you return to the website. You can revoke your consent at any time effectively immediately by setting your browser so that cookies no longer are accepted. The legal basis for our use of retargeting technology is Art. 6 (1) p. 1 f) of the GDPR.

2.4
DoubleClick by Google is a service provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, U.S.A. (hereinafter, “Google”). DoubleClick by Google uses cookies to present you with ads that are relevant to you. To this end, your browser is allocated a pseudonymous identification number (ID) which is used to verify which ads were displayed in your browser and which of them were clicked. These cookies do not contain any personal information. Google and its partner websites use DoubleClick cookies only to run ads based on prior visits to our or other websites. Google transmits the information generated by cookies to a server located in the U.S.A. where it is saved and analyzed. Google transmits such data to third parties only if required by law or in the context of contract-related data processing. In any case, your data will not be consolidated with other data captured by Google. By using this website you consent to your personal data being processed by Google and to the aforementioned nature and purpose of data processing. You may refuse the use of cookies by selecting the appropriate settings in your browser software; however, please note that in this case you may not be able to use the full functionality of our website. In addition, you can object to Google’s collection of data generated by cookies as it relates to your use of our website and to Google’s processing of this data. To do so, please open this link and download and install the browser plug-in from the DoubleClick Deactivation Add-On section. Alternatively, you can deactivate DoubleClick cookies on Digital Advertising Alliance’s website. The legal basis for our processing of your personal data is Article 6 (1) p. 1 f) of the GDPR. For more information on DoubleClick by Google, please refer to https://www.google.de/doubleclick and http://support.google.com/adsense.

3. Collection and Processing of Data Provided Voluntarily

3.1
Your provision of personal data to us by e-mail, in our online shop, or via the contact form available on our website is voluntary. We use this data to process our contractual relationship with you and/or your inquiries or orders, to conduct market research or opinion polls, or for mailing our advertisements to you. We only use your data for e-mail advertising purposes with your consent. We will erase the data so generated as soon as it no longer needs to be saved; if statutory retention periods apply, we will restrict the processing of such data. The legal basis is Article 6 (1) b) of the GDPR or Article 6 (1) f) of the GDPR.

3.2
When you register for our online shop and create a customer profile, we save the customer account information you provided (including, but not limited to, your name, billing and delivery addresses, telephone number, payment information and e-mail address) so you will not have to re-enter your data every time you place an order. You can update or delete your customer profile at any time. The legal basis is Article 6 (1) p. 1 b) of the GDPR.

3.3
If you want to subscribe to our newsletter, please provide your valid e-mail address and your country of origin and confirm that you are in agreement with the following (the legal basis is Art. 6 (1) p. 1 a) of the GDPR):

I hereby agree that Vitra International AG and any other company in the Vitra Group (hereinafter, “Vitra Companies”) may process and use the data I have provided for the purpose of sending me e-mail newsletters to inform me about furniture and home accessories as well as about Vitra Companies’ current campaigns and events. A list of Vitra Companies is available here.

I can revoke this agreement at any time by sending written notice to Vitra International AG at Klünenfeldstr. 22, 4127 Birsfelden, Basel-Landschaft, Switzerland or to privacy@vitra.com. As soon as I revoke such agreement, the data I provided will be deleted from all Vitra Companies’ systems and no longer will be used to send me the newsletter.


3.4
Personal data provided to us via our website will be saved only for the time it takes us to meet the purpose for which you provided such data. When your contract has been fulfilled completely, your data will be blocked and then deleted in accordance with the relevant tax and trade regulations unless you have given your express consent to such data being used for other purposes. To the extent mandatory trade and tax retention periods need to be observed, the retention period for some types of data can be up to ten years.

4. Transmission to Third Parties

4.1
We will not transmit any personal data you provide to us to any third parties. Personal data will be transmitted only

- if you have given prior consent;
- to sub-contractors who need to receive and use such data for the purpose of fulfilling specific orders if required to process your inquiries, orders and use of our services;
- to service providers bound by instructions if required to process your order data in accordance with the law; and
- to parties entitled to obtain such data if required to comply with statutory obligations.

4.2
As part of the handling of the payment method you selected in our online shop, your data will be transmitted to third parties as follows:

a) To process payments made by credit card, Electronic Payment Standard (EPS), PayPal, or on account we will transmit your data to our partner Adyen BV, Simon Carmiggelstraat 6 – 50, 1011 DJ Amsterdam, Netherlands. In addition to the data regarding your order and the shipping and payment methods you have requested, we will forward the following categories of personal data to this payment services provider:

- name,
- gender,
- billing address,
- e-mail address,
- IP address, and
- customer ID.

Responsibility regarding your data lies with the payment services provider. The legal basis for such transmission is the fulfillment of the contract (Article 6 (1) p. 1 b) of the GDPR). Please know that this provider will transmit your personal data to other parties as required to process payments including, but not limited to, the credit institutions, banks, and credit card providers involved. These parties also will process your personal data to handle your payments. For customers based in Germany, the payment services provider will request additional information from SCHUFA Holding AG, Kormoranweg 5, 65201 Wiesbaden, Germany (hereinafter, “SCHUFA”) and to this end will provide SCHUFA with information regarding the customer’s name, billing address, and gender. The legal basis is Article 6 (1) f) of the GDPR.

b) If over the course of the ordering process you select payment on account, please note that we use payment processing services provided by RatePAY GmbH, Schlüterstr. 39, 10629 Berlin, Germany.

Payment on account is conditional on RatePAY GmbH’s mathematical-statistical assessment of your credit risk. To enable RatePAY GmbH to conduct this assessment, we transmit the personal data RatePAY GmbH requires to assess your credit rating including your first and last name, postal address, date of birth, gender, e-mail address, IP address, and telephone number as well as the data required to process the payment on account related to your order, for example, the quantity of the products, product numbers, amount of the invoice, and amount of tax as a percentage. RatePAY GmbH uses this data to obtain information from any of the credit agencies listed below for purposes of carrying out identity and credit checks:

Creditreform Boniversum GmbH, Hellersbergstr. 11, 41460 Neuss, Germany;
SCHUFA Holding AG, Kormoranweg 5, 65201 Wiesbaden, Germany;
- Infoscore Consumer Data GmbH, Rheinstr. 99, 76532 Baden-Baden, Germany;
- Bürgel Wirtschaftsinformationen GmbH & Co. KG, Postfach 500166, 22701 Hamburg, Germany;
- CRIF GmbH, Dessauerstr. 9, 80992 Munich, Germany;
- CRIF AG, Hagenholzstr. 81, 8050 Zurich, Switzerland;
- CRIF GmbH, Diefenbachgasse 35, 1150 Vienna, Austria.

you to sign a separate consent form of which you will be informed explicitly over the course of the ordering process (Article 6 (1) p. 1 a) of the GDPR). By signing this consent form you are confirming your approval of RatePAY GmbH’s data protection regulations which you can view at https://www.ratepay.com. Your consent indicates you agree as follows:

- Vitra will transmit your customer data to RatePAY GmbH and RatePAY GmbH will transmit your customer data, to the extent such data concerns your application for, entrance into, and termination of a contract between you and Vitra, to any of the aforementioned credit agencies and will obtain information concerning you from such credit agencies. Such information can include information regarding your credit rating collected based on mathematical-statistical processes that include your address data (hereinafter, “Score Values”).

- Based on the information and other customer data RatePAY GmbH will determine its own Score Values and other parameters (e.g., risk categories) and will use such information and other customer data to make decisions regarding the provision of the payment method you requested for your current and future orders placed in the Händler-Onlineshop (merchant online shop / merchant’s online shop / online shop for merchants / in Vitra’s online shop) and RatePAY GmbH will share such decisions with the merchant and if receivables are assigned, to the respective recipients of such assigned receivables. In addition, the Händler (the merchant / Vitra) will use address data to calculate the risk of payment default in individual cases.

- RatePAY GmbH also will conduct such risk assessments on behalf of operators of other online shops. In this case, your customer data will be processed and used only if you intend to place an order in one of the online shops cooperating with RatePAY GmbH and if you want to use any of the payment methods offered by RatePAY GmbH.

- As part of the assignment of receivables from you, Vitra will transmit your customer data to the respective recipients of such receivables and such recipients and, if applicable, any third parties involved in the factoring process will process and use your customer data to the extent required to assert and enforce the receivables so assigned.

- Vitra and RatePAY GmbH and the service providers contracted to fulfill the contract (e.g., SCHUFA) will process and use your customer data to fulfill the contract. In particular, you agree to the aforementioned parties contacting you at the e-mail address you provided for the purpose of fulfilling the contract (e.g., to send the invoice to you).

- RatePAY GmbH will contact and obtain a risk assessment from Risk.Ident GmbH, which risk assessment shall be based on, among other things, the following information:

(a) whether your device is communicating or has communicated via a proxy connection;
(b) whether your device recently used different Internet service providers to dial in;
(c) whether your device shows or has shown frequently changing geo references;
(d) the number of Internet transactions recently made through your device (however, the nature of such transactions cannot be identified); and
(e) the likelihood of the device saved in Risk.Ident GmbH’s database being the device you used.

You will not be able to pay on account unless you have signed the aforementioned consent form. You can withdraw your consent at any time to be effective going forward by writing to Vitra International AG at Klünenfeldstr. 2, 4127 Birsfelden, Basel-Landschaft, Switzerland or by sending an e-mail to privacy@vitra.com. Please note that RatePAY GmbH still may have the right to process, use, and transmit your personal data if and when such processing, use, and transmission are required for RatePay GmbH to process payments as agreed upon in the contract, are required by law, or have been ordered by a court of law or a government authority.

At any time, you can request information regarding your personal data stored by RatePAY GmbH and you can communicate changes to such data, if any. You can find detailed information on the processing of your personal data by RatePAY GmbH, the assessment of your credit rating, and your rights at https://www.ratepay.com.

c) Please note that we transmit to SCHUFA all data regarding extrajudicial and judicial collection measures as it relates to past-due and uncontested receivables (Article 6 (1) p. 1 f) of the GDPR). If SCHUFA is provided with similar data relating to other contractual relationships after we have transmitted such information, we may be informed as well. SCHUFA’s contracting partners primarily include credit institutions, credit card providers and leasing companies. Moreover, SCHUFA releases information to retail, telecommunication and other companies that offer services and deliveries on credit. Data is transmitted as specified above only if permitted after weighing the interests of all parties involved. Along with the aforementioned information, SCHUFA can provide its contracting partners with a probability value for credit risk assessment calculated based on data saved in SCHUFA’s systems (score procedure). You have the right to obtain information from SCHUFA regarding the saved data relating to you. SCHUFA’s address is SCHUFA Holding AG, Verbraucherservicezentrum Hannover, Postfach 56 40, 30056 Hannover, Germany. For more information about SCHUFA, data processing by SCHUFA, and your right to obtain information please go to www.schufa.de.

5. Cookies

5.1
To learn about your individual preferences and adjust our offerings optimally to best meet your needs, our website uses cookies – small text files saved on your computer or mobile device that your computer or mobile device can retrieve when you access our website at a later time. Cookies do not contain any personal data and we do not merge the data in cookies with data from other sources.

5.2
Cookies do not harm your computer or mobile device and do not contain any viruses. If you do not want cookies saved on your computer, please adjust your browser settings so saving cookies is impossible or you are asked for express consent before any cookies are saved. Please note that you may have to change the settings in each browser you use to access this website and that not all functions of this website may be available to you if you object to the use of cookies.

6. Your Rights

6.1
At any time, at no cost to you and without providing any reason you can request information regarding the data relating to you which is saved in our systems as well as information regarding the origin, recipients or categories of recipients to whom such data has been transmitted and why such data has been saved.

6.2
In addition, legally you are entitled to have your personal data rectified, blocked or erased. Also, you can withdraw your consent to the use of your data at any time and without having to provide a reason. If we process your personal data to pursue our legitimate interests pursuant to Article 6 (1) f) of the GDPR, pursuant to Article 21 of the GDPR you have the right to object. In addition, you have the right to portability of your data and the right to lodge a complaint with a data protection supervisory authority if you are not satisfied with our processing of your personal data.

6.3
Please address any requests for information, inquiries, objections to the processing of your data, and any questions you may have to Vitra International AG, Klünenfeldstr.22, 4127 Birsfelden, Basel-Landschaft, Switzerland or to privacy@vitra.com.

6.4
If you have any questions concerning data protection, please feel free to contact our Data Protection Officer, Mr. Simon Brandmeier, at Kirschmatt 37, 79576 Weil am Rhein, Germany or at info@sbmconsulting.de.