We use cookies in order to improve our web presence and to optimise use for you, but also for advertising purposes. Cookies are small text files that are stored on your computer when you call up our website and enable a renewed identification of your browser. Cookies store information, such as, for example, your language setting, the length of visit to our website or the entries you made there. This avoids the need to re-input all the required data afresh at every session. Moreover, cookies enable us to detect your preferences and to tailor our website to your areas of interest.

Most browsers accept cookies automatically. If you would like to prevent the acceptance of cookies, you can select the setting “accept no cookies” in the browser settings. How this works in detail can be found in the instructions of your browser manufacturer. Cookies already stored on your computer can be deleted at any time. However, we would like to point out this may restrict the functionality of our web presence.

1 FIRST-PARTY COOKIES
This type of cookie is set by the website that the user visits. Only this website is permitted to read the cookie information.

1.1 Cookies used

We use cookies in order to design our website in a user-friendly fashion. Some elements of our internet site require the calling browser to be identified also after a page change.

The following data is stored and transmitted in the cookies:

There follows a list of the stored data. Examples can be:

Language settings
Articles in a shopping cart
Log-In information
We also use cookies on our website to enable analysis of the user’s surfing behaviour.

In this way the following data can be transferred:

There follows a list of the collected data. This can be for example:

Search terms entered
Frequency of page views
Utilisation of website functions
Device or browser information
Products and categories viewed
Call up of wish list and the shopping cart as well as the adding of new products
Number of products in the shopping cart
Point of origin of the page visitor
Abbreviated IP address
Email hash
The user data collected in this manner is pseudonymised by technical precautions. Therefore, the data can no longer be traced to a visiting user. When calling up our website the user is informed about the use of cookies for analysis purposes. In this connection a reference is also made to this data protection declaration.

Legal basis for the data processing

The legal basis for the processing of personal data by the means of cookies is Art. 6 paragraph 1 sentence1 lit. f GDPR.

Purpose of data processing

The reason why technically necessary cookies are employed is to simplify use of websites for the users. Some functions of our internet site cannot be offered without the use of cookies. It is essential for these functions that the browser is also recognised again after a page change.

We require cookies for the following functions:

Shopping cart
To protect the website from attacks
Marking of sessions – settings
The user data collected by the technically necessary cookies is not used to generate user profiles.

We use analysis cookies to improve the quality of our website and its contents. The analysis cookies enable us to find out how the website is being used and therefore allow us to ensure an ongoing improvement of our web presence. In addition, they enable us to maintain quality assurance and constantly improve the user experience.

These purposes are also our legitimate interest in processing personal data pursuant to Art. 6 paragraph 1 sentence1 lit. f GDPR.

Duration of storage, right to object and removal

Cookies are stored on the computer of the user and are transferred from it to our site. Therefore, you as the user also have full control over the use of cookies. By altering the settings in your internet browser you can disable or restrict the transfer of cookies. Cookies already stored can be deleted at any time. This can also be effected automatically. Disabling cookies for our website may mean that not all functions of the website can be used to their full extent.

Our website uses transient cookies. These are automatically deleted when you close your browser. These are typically so-called session cookies. These store a so-called session ID with which various queries form your browser can be assigned to a common session. It means that your computer can be recognised again when you return to our website. These cookies are deleted when you log out or close the browser.

Our website also uses persistent cookies. These are automatically deleted after a predetermined period that can vary depending on the cookie. These cookies, too, can be deleted at any time.

Our website likewise uses flash cookies. The flash cookies used are not recorded by your browser, but by your flash plug-in. Furthermore, we use HTML5 storage objects, which are stored on your end device. These objects store the required data irrespective of the browser you are using and have no automatic expiry date. If you no longer wish flash cookie processing, you must install a corresponding add-on, e.g. “Better Privacy” for Mozilla Firefox (https://addons.mozilla.org/de/firefox/addon/betterprivacy/) or the Adobe flash killer cookie for Google Chrome. You can also partially prevent the use of flash cookies by changing the settings of your flash player. You can prevent the use of HTML5 storage objects by employing the private mode in your browser. Additionally, we recommend manually deleting your cookies and the browser history on a regular basis.

2 THIRD-PARTY COOKIES
Third-party cookies are set by organisations that are not the operators of the website the user visits. These cookies are used by marketing companies, for example.

2.1 Criteo GmbH

We employ technology of Criteo GmbH (Criteo GmbH, Gewürzmühlenstr. 11, 80538 Munich) on our site to create and deliver personalised advertising. Our website mytheresa.com uses cookies/advertising IDs for the purpose of advertising. This enables us to show our advertisements to visitors who are interested in our products on partner websites, apps and emails. Re-targeting technologies use your cookies or advertising IDs and display advertisements based on your past browsing behavior. You can opt-out of interest based advertising by visiting the following websites:
http://www.networkadvertising.org/choices/
http://www.youronlinechoices.com/

We may share data, such as technical identifiers derived from your registration information on our mytheresa.com website or our CRM system with our trusted advertising partners. This allows them to link your devices and/or environments and provide you a seamless experience across the different devices and environments that you use. To read more about their linking capabilities, please refer to their privacy policy listed in the above-mentioned platforms or listed below.

You can find more information concerning Criteo data protection here: https://www.criteo.com/privacy/

Should you no longer wish to be shown any personalised advertising material, you can unsubscribe from Criteo advertising here.

2.2 Adobe Tracker

We use the following technology of Adobe Systems Software Ireland Limited (4-6 Riverwalk, Citywest Business Campus, Dublin 24,Republic of Ireland):

10.2.1 Adobe Advertising Cloud

Everest Tech (AdobeSystem Ireland Ltd.) is an advertising solution that enables companies to optimise their online advertising in search engines. Therefore, Adobe sets a cookie as soon as you have bought something on mytheresa.com after clicking in the Google search engine or have placed something in the shopping cart.

Only information such as keyword, orderID, productID and turnover is transmitted to Adobe.

According to Adobe no additional personal data is collected. Personal data is not forwarded to the USA.

Guarantees pursuant to Art. 44ff GDPR exist as Adobe is subject to the Privacy Shield, which you can find here

Legal basis for the processing of the data is Art. 6 paragraph 1 sentence 1 lit. f GDPR.

We use the service provider Adobe in order to optimise our search engine campaigns on Google and thus to improve our advertising efficiency. These purposes are also our legitimate interest in the sense of Art. 6 paragraph 1 sentence 1 lit. f GDPR.

We hand over no personal data. If you would not like Adobe to receive anonymised data, you can unsubscribe here https://www.adobe.com/uk/privacy/opt-out.html. If you would like to find out more information on Adobe, you can find all data protection topics here: https://www.adobe.com/uk/privacy/opt-out.html.

2.3 Google Tracker

We use the following technology of Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, which is a part of Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google“.

2.3.1 Google AdWords and Conversion Tracking

In order to attract attention to our services, we place Google Adwords adverts and use as part of this the Google conversion tracking for the purpose of providing personalised online advertising that takes into consideration interest and location. The option to anonymise the IP addresses is regulated at Google Tag Manager via an internal setting that is not visible in the source of this page. This internal setting is set so that the anonymisation of the IP address required by the Federal Data Protection Act is achieved.

The adverts are displayed after search queries on websites of the Google Advertising Network. We have the ability to combine our adverts with certain search terms. We can use cookies to place adverts based on the previous visits of the user to our website.

A cookie is set by Google when an advert is clicked on the computer of the user. For more information on the cookie technology used, please consult the information provided by Google on Website Statistics and in the Data Protection Provisions.
With the aid of this technology Google and we as a customer receive information on when a user has clicked on an advert and which websites he or she was forwarded to. The information obtained by this is solely used for a statistical evaluation for advertising optimisation purposes. We receive no information with which visitors can be personally identified. The statistics made available to us by Google contain the total number of users that have clicked on our adverts, and, if applicable, whether they were forwarded to a webpage of our web content furnished with a conversion tag. We can use these statistics to track which search terms occur particularly frequently when our advert is clicked and which adverts lead the user to establishing contact via the contact form.

If you would not like this, you can prevent the storage of the cookies required for this technology, for example, via your browser settings. In this case your visit does not flow into the user statistics.

You can prevent your participation in this tracking process in a variety of ways:
a) by a corresponding setting in your browser software, in particular the suppression of third-party cookies means that you receive no adverts from third-party providers;
b) by disabling the cookies for conversion tracking by setting your browser so that cookies from the domain “www.googleadservices.com” are blocked, https://www.google.de/settings/ads, this setting being deleted when you delete your cookies;
c) by disabling the interest-related adverts of providers that are part of the self regulating campaign “About Ads” via the link http://www.aboutads.info/choices, this setting being deleted when you delete your cookies;
d) by permanent disabling in your browsers Firefox, Internetexplorer or Google Chrome under the link http://www.google.com/settings/ads/plugin. We point out that in this case you may not be able to use all the functions of this content to its full extent.

Legal basis for the processing of your data is Art. 6 paragraph 1 sentence 1 lit. f GDPR. Our legitimate interest are the evaluation of the statistics obtained from the findings on user behaviour and the efficacy of our advertising. This in turn serves to continually improve our web content and our web presence.

You can find more information concerning Google data protection here: http://www.google.com/intl/de/policies/privacy and https://services.google.com/sitestats/de.html.

Alternatively, you can visit the website of the Network Advertising Initiative (NAI) on http://www.networkadvertising.org. Google has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

Nevertheless, we and Google continue to receive the statistical information regarding how many users visited the site and when they did this. If you would not like to be included in these statistics, you can prevent this with the aid of additional programs for your browser (for example with the Add-on Ghostery).

2.3.2 Google AdWords and Google Analytics Remarketing Lists for Search Ads (RLSA)

mytheresa.com uses Google AdWords and Google Analytics Remarketing Lists for Search Ads (RLSA) Users that visit mytheresa.com via are collected via a Google tag and the behaviour recorded. You appear on the list for a standard period of 30 days and for a maximum period of 540 days.

The information generated by the cookie about your use of the website like:

Browser type / version,
Operating system used,
Referrer-URL (the site visited previously),
Hostname of the calling computer (IP address),
Time of the server query
is as a rule transmitted to a Google server in the USA and stored there.

The recorded behaviour pattern such as, for example, the dwell time on the site, concluded or aborted shopping cart operations, direct abort of the visit (bounce) can be used to adapt the advertising to the Google search results page.

For those exceptional cases in which personal data is transferred to the USA, Google has submitted to the EU-US Privacy Shield which you can find here.

Legal basis for the processing of the data is Art. 6 paragraph 1 sentence 1 lit. f GDPR. Our legitimate interest resides in the analysis of the efficacy of our advertising and the constant improvement of our advertising efficiency that goes hand in hand with this.

If you want to object to the use of the data, please click here.

2.3.3 Google Shopping Reviews

Mytheresa.com uses Google Shopping Reviews, which allows shoppers to write a review of mytheresa.com after they have placed an order. These reviews are visible to potential future customers.

Should a buyer agree, the following data will be collected:

Order ID
Email address (for sending the survey)
Shipping country
Estimated delivery time (time the survey was submitted)

For those exceptional cases in which personal data is transferred to the USA, Google has submitted to the EU-US Privacy Shield.

Legal basis for the processing of the data is Art. 6 paragraph 1 sentence 1 lit. f GDPR.

Our legitimate interest lies in your consent to participate in the survey. This data must be collected so that Google Shopping Reviews, the third party commissioned by us, can provide you with an independent survey if you have consented to the delivery of your order.

Your data will be stored for a 12-month period.

2.4 Microsoft Bing Tracker

We use the following technology of Microsoft Corporation (One Microsoft Way, Redmond, WA 98052-6399, USA):

2.4.1 Bing Conversion Tracking

We also use Bing Ads Conversion Tracking. A Bing Ads cookie is set on your computer as soon as you visit our website via a Bing search ad. Using Bing Conversion Tracking, campaigns for search machine advertising are directed to Bing on a frequency basis, i.e. ads are placed more frequently for search queries that often lead to a purchase, whereas search queries that are less relevant see fewer ads.

The following data is collected:

• Browser type / version,

• Operating system used,

• Hostname of the calling computer (IP address),

• Time of the server query

If you would not like this, you can unsubscribe at any time on https://account.microsoft.com/privacy/ad-settings . For more information on Bing Ads Conversion Data Protection, please consult https://privacy.microsoft.com/de-de/privacystatement.

For the exceptional cases in which personal data is transferred to the USA, Microsoft has submitted to the EU-US Privacy Shield which you can find hier.

Legal basis for the processing of the data is Art. 6 paragraph 1 sentence 1 lit. f GDPR. We use Bing Conversion Tracking in order to optimise our search engine campaigns on Bing and thus to improve our advertising efficiency. These purposes are also our legitimate interest in the sense of Art. 6 paragraph 1 sentence 1 lit. f GDPR.

2.4.2 Bing Ads Remarketing Lists for Search Ads (RLSA)

We also use Microsoft Bing Ads Remarketing Lists for Search Ads. Here, the users that visit our website are detected by means of a general website tag and optional event snippets and their behaviour recorded. The recorded behaviour pattern such as, for example, the dwell time on the site, concluded or aborted shopping cart operations, direct abort of the visit (bounce) can be used to adapt the advertising to the Bing search results page. This means that users that have a great interest in our website see more ads in a higher position, while visitors that have less interest in our website see fewer ads in the search engine or even none at all. For more information on Bing Ads Remarkting Lists for Search Ads data protection, please consult https://advertise.bingads.microsoft.com/de-de/ressourcen/richtlinien/richtlinien-zur-datensicherheit-und-datnschutzerklaerung.

The following data is collected by means of cookies:

Browser type / version,
Operating system used,
Hostname of the calling computer (IP address),
Time of the server query
For the exceptional cases in which personal data is transferred to the USA, Microsoft has submitted to the EU-US Privacy Shield which you can find hier.

Legal basis for the processing of the data is Art. 6 paragraph 1 sentence 1 lit. f GDPR. Our legitimate interest are the evaluation of the statistics obtained from the findings on user behaviour and the efficacy of our advertising. This in turn serves to continually improve our web content and our web presence.

If you would not like this, you can unsubscribe at any time on https://account.microsoft.com/privacy/ad-settings. For more information on Bing Ads Conversion Data Protection, please consult https://privacy.microsoft.com/de-de/privacystatement.

2.5 Facebook Custom Audiences

(1) This website uses Facebook Custom Audience with the so-called pixel function (“Facebook Pixel”) provided by Facebook Ireland Ltd. (“Facebook”). This allows users of the site to view interest-based advertisements (“Facebook Ads”) when visiting the Facebook social network or other sites that also use the process. Our interest in pursuing this route is to show you advertisements which are of interest to you in order to make our website more interesting for you.

(2) We do not actively transmit personally identifiable information to Facebook. However, due to the use of Facebook Pixel, your browser automatically establishes a direct connection to the Facebook server. We have no influence on the extent and further use of the data collected through the use of this tool by Facebook and therefore inform you according to our state of knowledge: Through the integration of Facebook Custom Audiences, Facebook receives the information that you have accessed the corresponding website of our website or clicked on an advertisement from us. If you are registered with a Facebook service, Facebook can assign the visit to your account. Even if you are not registered on Facebook or have not logged in, the provider may collect and store your IP address and other identifiers.

(3) The legal basis for the processing of personal data using cookies is Article 6(1) sentence 1f GDPR.

(4) Using Facebook Pixel, Facebook can on the one hand determine the visitors to our online offering as a target group for the presentation of ads (so-called “Facebook ads”). Accordingly, we use Facebook Pixel to display Facebook ads placed by us only to Facebook users who have shown an interest in our online offering or who have certain features (for example, interests in certain topics or products that are determined on the basis of the websites visited) that we transmit to Facebook (so-called “custom audiences”). Using Facebook Pixel, we also want to ensure that our Facebook ads correspond to the potential interest of users and do not have an annoying effect. Facebook Pixel also enables us to track the effectiveness of Facebook ads for statistical and market research purposes by seeing if users were referred to our site after clicking on a Facebook ad (known as “conversion”). These purposes also constitute our legitimate interest within the meaning of Article 6(1) sentence 1f GDPR.

(5) In the event that Facebook transmits data to the USA, Facebook is certified under the Privacy Shield Agreement and thus guarantees a level of data protection comparable to European law (Articles 44 et seq. GDPR). (https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active).

(6) Information about the third-party provider: Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland; Board of Directors: Gareth Lambe, Shane Crehan; registered with the Companies Registration Office of the Republic of Ireland; company number 462932.

For more information about Facebook data processing, please visit https://www.facebook.com/about/privacy.

(7) You may opt out of data collection via Facebook Pixel and the use of your information to display Facebook ads by using the opt-out below. To set what types of ads you see within Facebook, you can go to the following page set up by Facebook and follow the instructions there about the settings for usage-based ads: https://www.facebook.com/settings?tab=ads. The settings are platform-independent, that is, they are adopted for all devices, such as desktop computers or mobile devices.

Note: If you use opt-out, an opt-out cookie is stored on your device. If you delete the cookies in this browser, then you must make the selection again. Furthermore, the opt-out only applies within the browser you are using, and only within our web domain where the box was unchecked.

2.6 Pinterest

On our site we use Pinterest (Pinterest Inc., 808 Brannan Street San Francisco, CA 94103-490, USA). Due to our legitimate interests in the analysis and optimisation of our online services and the requirements-appropriate use of our Pinterest campaigns, the so-called “Pinterest Tag” (custom code snippet) is integrated into our website by Pinterest on the basis of Article 6(1)(f) GDPR. If a Pinterest user looks at or clicks on the advertisement, further actions and target groups that have shown interest will be tracked. Using this allows us to ensure that Pinterest advertisements are only displayed to Pinterest users who have already shown an interest in our offering and if they correspond to the potential interest of the user. This data helps us measure the conversion of each campaign. It is used for statistical and market research-related purposes and help optimise the campaigns.

All collected data is anonymous for us and does not provide any conclusions about the identity of the respective user. Data is collected on the device information (e.g. type, brand), the operating system used, the IP address of the device used, the time of the retrieval, the type and content of the campaign, the reaction to the respective campaign (e.g. conclusion of purchase, newsletter registration) and device IDs consisting of individual characteristics of the terminal device. This allows us to recognise your device on our website.

If you do not want Pinterest to use the information collected through our web site to assign you to your profile on Pinterest, then before visiting our website you must log out of Pinterest.

Further information on the purpose, scope and further processing and use of the data by Pinterest as well as your rights and possibilities to protect your privacy in this regard can be found in the Pinterest data protection information: https://about.pinterest.com/en/privacy-policy.

You may opt out of data collection via Pinterest Pixel and the use of your information to display Pinterest ads by using the opt-out below. The settings are platform-independent, that is, they are adopted for all devices, such as desktop computers or mobile devices.

Note: If you use opt-out, an opt-out cookie is stored on your device. If you delete the cookies in this browser, then you must make the selection again. Furthermore, the opt-out only applies within the browser you are using, and only within our web domain where the box was unchecked.