Privacy policy
HAKRO GmbH is engaged in the product design, product development and marketing of clothing under the brands HELLO AGAIN closed loop wear®, HAKRO ACTIVEWEAR® and Harry Kroll® THE PREMIUM LEAGUE OF SHIRTS AND JACKETS. The two brands are positioned in the mid-range to upper mid-range segment of the market.
Our company's aim is to offer first-class clothing in classic shapes and colours, characterised by an excellent fit, perfect workmanship, high-quality materials, outstanding durability and a long service life. The collection includes T-shirts, polo shirts, shirts, blouses, sweatshirts and jackets for women, men and children. The garments are sold exclusively through retailers authorised by us. In addition, HAKRO GmbH manufactures garments for the private labels of other retail companies.
HAKRO GmbH takes the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the applicable data protection regulations and this Privacy Policy.
This Privacy Policy informs you about the nature, scope and purpose of the processing of personal data. The terms used correspond to the definitions set out in Article 4 of the General Data Protection Regulation (GDPR).
Controller
HAKRO GmbH
Oberstettener Straße 41
74575 Schrozberg
Germany
Telephone: +49 (0) 7935 / 9118 100
Email: info@hakro.com
Website: www.hakro.com
Types of data processed
- Contact data (such as first name/surname, telephone number)
- Contract and payment data (such as address, payment methods)
- User data (such as login name, password)
- Usage data (such as websites accessed, interest in content, access times, email)
- Communication data (such as IP address, browser version)
Categories of data subjects
Users of this website, such as customers, prospective customers, employees or suppliers.
Purposes of processing
- Provision of a shopping platform
- Provision of company information
- Provision of contact options
- Security measures to protect the website
- Marketing, advertising and analysis of user behaviour
Terminology used
Personal data means any information relating to an identified or identifiable natural person (hereinafter referred to as the “data subject”). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
Processing means any operation or set of operations which is performed on personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
The controller is the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of processing personal data.
Relevant legal bases
The basis of data protection law is the individual's right to informational self-determination. In accordance with Article 13 GDPR, we inform you about the legal bases for our data processing activities.
The legal basis for obtaining consent is Article 6(1)(a) and Article 7 GDPR; the legal basis for processing for the performance of our services, the implementation of contractual measures and responding to enquiries is Article 6(1)(b) GDPR; the legal basis for processing in order to comply with our legal obligations is Article 6(1)(c) GDPR; and the legal basis for processing for the purposes of our legitimate interests is Article 6(1)(f) GDPR. Where processing of personal data is necessary in order to protect the vital interests of the data subject or another natural person, Article 6(1)(d) GDPR serves as the legal basis.
Cooperation with third parties
Where, as part of our processing activities, we disclose data to other persons and companies (third parties), transmit data to them or otherwise grant them access to the data, this is done only on the basis of legal permission, where you have given your consent, where a legal obligation requires this, or on the basis of our legitimate interests.
Cooperation with processors
On the basis of Article 28 GDPR, we may engage service providers to process data on our behalf.
Rights of data subjects
Right of access (Article 15 GDPR)
The data subject has the right to obtain confirmation as to whether personal data concerning them is being processed. Where this is the case, they have the right to access such data as well as information including the purposes of processing, its origin and recipients, the period for which it will be stored and their rights.
Right to rectification (Article 16 GDPR)
The data subject has the right to request the rectification or completion of inaccurate personal data.
Right to erasure (Article 17 GDPR)
Data subjects have the right to request the erasure of their data, for example if the data is no longer necessary for the purpose for which it was originally collected or processed, or if the consent on which the processing was based has been withdrawn. A specific form of the right to erasure is the “right to be forgotten”. Where the controller has made the personal data public, it must take reasonable steps to inform other controllers processing the data that the data subject has requested the erasure of any links to, or copies or replications of, that personal data.
Restriction of processing (Article 18 GDPR)
In certain cases, the data subject may also request restriction of processing. For example, where the data subject has objected to processing and it has not yet been determined whether the legitimate grounds of the controller override those of the data subject.
Right to data portability (Article 20 GDPR)
Under certain conditions, the right to data portability entitles data subjects to receive a copy of the personal data concerning them in a commonly used and machine-readable format.
Right to lodge a complaint (Article 77 GDPR)
Data subjects have the right to lodge a complaint with the competent supervisory authority.
Right to withdraw consent (Article 7(3) GDPR)
Data subjects have the right to withdraw consent previously given with effect for the future.
Right to object (Article 21 GDPR)
Data subjects may object at any time to the future processing of their data. In particular, an objection may be made to processing for direct marketing purposes.
Erasure of data
The data processed by us will be erased or its processing restricted in accordance with Articles 17 and 18 GDPR. Unless expressly stated otherwise in this Privacy Policy, data stored by us will be erased as soon as it is no longer required for its intended purpose and provided that no statutory retention obligations prevent its erasure.
Where data is not erased because it is required for other legally permissible purposes, its processing will be restricted. This applies, for example, to data that must be retained for commercial or tax law reasons.
Collection of access and log data
On the basis of our legitimate interest, we store data relating to each access to the web server in order to ensure availability. Access data includes the name of the website accessed, file, date and time of access, amount of data transferred, status messages, browser type and version, the user's operating system, IP address and, where applicable, other technical information.
Log files are stored for security reasons for a period of one week and are subsequently deleted. Data required for evidentiary purposes is excluded from deletion until the respective incident has been fully clarified.
Contacting us
When contacting us, for example by email or telephone, the information provided by the user is processed for the purpose of handling the enquiry. The user's information may be stored in an appropriate customer management system or within comparable organisational processes.
We delete data stored as a result of enquiries when it is no longer required, provided that statutory retention periods do not prevent deletion.
Cookies
Cookies are small files that are stored on users' devices. Cookies can contain various types of information. A cookie may be used to store information about a user, such as browser version or user interests, during or after their visit to a website. Cookies may be stored temporarily or permanently.
We use cookies to store your consent or refusal and to operate the shop system.
Shopify shop system
This website uses Shopify's shop system, which is provided as Software-as-a-Service (SaaS). Shopify provides functions for displaying products, processing orders, returns and payments, tracking processes and marketing.
By providing your consent, you agree that personal data required to process your order may be stored and processed on the systems of Shopify, which is based in Canada (Article 6(1)(a), (b) and (f) GDPR).
Shopify Inc.
151 O’Connor Street
Ottawa, Ontario, K2P 2L8
Canada
You can view Shopify's privacy information in its Privacy Policy.
We may improve your shopping experience by allowing Shopify to match your account with other Shopify services that you may wish to use. In this case, Shopify processes your data in accordance with its Privacy Policy and Consumer Privacy Policy.
Google Tag Manager
We use Google Tag Manager on our website, a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Google Tag Manager is used for the central management and control of website tags. In particular, it enables analytics and marketing services to be technically integrated and managed. Google Tag Manager itself does not create user profiles and does not independently analyse user behaviour. Services integrated via Google Tag Manager are described separately in this Privacy Policy.
Where services requiring consent are integrated via Google Tag Manager, these services are activated only after the relevant consent has been provided.
Google Advertising / Conversion Tracking & Remarketing
We use Google Ads to advertise our products and services via Google's advertising services. We use conversion tracking to measure and optimise our advertising activities. We also use Google Ads for remarketing. Google Ads is an online advertising service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
As part of Google Ads, we use conversion tracking and remarketing. Conversion tracking enables us to determine whether users perform certain actions on our website after clicking on an advertisement placed by us on Google, such as submitting an enquiry or making a purchase. This enables us to measure the effectiveness of our advertising activities and optimise our campaigns accordingly.
Remarketing enables users of our website to be assigned to specific target groups and subsequently addressed again with relevant advertising within Google's advertising services.
Processing takes place only with your consent in accordance with Article 6(1)(a) GDPR and Section 25(1) TDDDG. Consent that has been given may be withdrawn at any time with effect for the future via the settings of our consent management tool.
As part of the use of these services, data may be transmitted to Google. Processing of data by Google outside the European Union or European Economic Area cannot be excluded. Further information about data processing by Google can be found in Google's privacy information.
HubSpot – CRM & Email
We use HubSpot services on our website. The provider for users within the European Union is HubSpot Ireland Limited, 2nd Floor, 30 North Wall Quay, Dublin 1, Ireland.
HubSpot supports us in particular in providing contact forms and landing pages, processing and managing enquiries, as well as in the areas of customer relationship management (CRM) and marketing.
If you contact us via a form provided using HubSpot, we process the data you provide in order to handle your enquiry and communicate with you further. The applicable legal basis depends on the purpose of the enquiry and may in particular be Article 6(1)(b) or (f) GDPR.
Where we additionally use HubSpot to analyse usage behaviour and attribute website visits to marketing activities, this is done only with your consent in accordance with Article 6(1)(a) GDPR and Section 25(1) TDDDG. Consent that has been given may be withdrawn at any time with effect for the future via the settings of our consent management tool.
When using HubSpot, processing of data outside the European Union or European Economic Area cannot be completely excluded. Further information about data processing can be found in HubSpot's privacy information.
Brevo – Newsletter and Email Marketing
We use Brevo, a service provided by Sendinblue GmbH, Köpenicker Straße 126, 10179 Berlin, Germany, to send and manage our newsletter and other email communications.
When you subscribe to our newsletter, the data you provide, in particular your email address, is stored and processed in Brevo. We use this data to send you the newsletter you have requested.
Brevo also enables us to statistically analyse our newsletters. In particular, we can determine whether an email has been delivered and opened and whether links contained in the email have been clicked. This information helps us analyse the use of our newsletters and optimise their content and delivery accordingly.
The processing of your data for the purpose of sending the newsletter is based on your consent in accordance with Article 6(1)(a) GDPR. You may withdraw your consent at any time with effect for the future, in particular by using the unsubscribe link at the end of each newsletter.
Data stored as part of your newsletter subscription is generally processed for as long as the newsletter subscription remains active. After unsubscribing, the data will no longer be used to send the newsletter. Statutory retention obligations and the storage of information for the purpose of demonstrating previously granted consent remain unaffected.
Further information about Brevo's processing of personal data can be found in Brevo's privacy information.
META Advertising / Pixel / Conversion Tracking & Retargeting
We use the advertising services of Meta Platforms Ireland Limited to advertise our products and services on Facebook and Instagram. To measure and optimise these advertising activities and for retargeting purposes, we use the Meta Pixel provided by Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland, on our website.
The Meta Pixel enables us to measure and optimise the effectiveness of our advertisements on Facebook and Instagram. In particular, it can be used to determine whether users perform certain actions on our website after interacting with an advertisement.
We also use the Meta Pixel for retargeting. This enables users of our website to be assigned to relevant target groups and subsequently addressed again with relevant advertising on Facebook and Instagram. Meta may also use the information collected to optimise and personalise advertisements.
The Meta Pixel is used only with your consent in accordance with Article 6(1)(a) GDPR and Section 25(1) TDDDG. Consent that has been given may be withdrawn at any time with effect for the future via the settings of our consent management tool.
When using these services, data may be transmitted to Meta and may also be processed outside the European Union or European Economic Area. Further information about the processing of personal data can be found in Meta's privacy information.
LinkedIn Advertising / Insight Tag / Conversion Tracking & Retargeting
We use the advertising services of LinkedIn Ireland Unlimited Company to advertise our products and services on LinkedIn. To measure and optimise these advertising activities and for retargeting purposes, we use the LinkedIn Insight Tag provided by LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland, on our website.
The LinkedIn Insight Tag enables us to measure and optimise the effectiveness of our advertising activities on LinkedIn. In particular, we can determine whether users perform certain actions on our website after interacting with a LinkedIn advertisement.
We also use the LinkedIn Insight Tag for retargeting. This enables users of our website to be assigned to relevant target groups and subsequently addressed again with relevant advertising on LinkedIn.
The service is used only with your consent in accordance with Article 6(1)(a) GDPR and Section 25(1) TDDDG. Consent that has been given may be withdrawn at any time with effect for the future via the settings of our consent management tool.
When using these services, data may be transmitted to LinkedIn and may also be processed outside the European Union or European Economic Area. Further information can be found in LinkedIn's privacy information.
Payment Service Provider PayPal
We offer the option of processing payments via the payment service provider PayPal. This corresponds to our legitimate interest in offering an efficient and secure payment method (Article 6(1)(f) GDPR). In this context, we transmit the data necessary for processing the order to PayPal insofar as this is required for the performance of the contract (Article 6(1)(b) GDPR).
PayPal (Europe) S.à.r.l. et Cie, S.C.A.
22–24 Boulevard Royal
L-2449 Luxembourg
The provider's privacy information can be found in PayPal's Privacy Hub.
OpenStreetMap Privacy Policy
We use the OpenStreetMap online mapping tool to support our retailer search. The tool makes it easier for you to find sources from which you can purchase our products.
By providing your consent, you agree that the following personal data may be transmitted to OpenStreetMap: IP address, information about your browser, device type, operating system and access times (Article 6(1)(b) and (f) GDPR).
OpenStreetMap Foundation
Cowley Road
Cambridge, CB4 0WS
United Kingdom
The provider's privacy information can be found in the OpenStreetMap Foundation Privacy Policy.
Marketing and Advertising
We may use your personal data for marketing and advertising purposes, for example to send marketing and promotional communications by email, SMS or post and to display advertisements for products or services to you. This may include using your personal data to better tailor services and advertising on our website and other websites.
If you are located in the EEA, the legal basis for these data processing activities is our legitimate interest in selling our products pursuant to Article 6(1)(f) GDPR.
Security and Fraud Prevention
We use your personal data to detect, investigate and take appropriate action regarding possible fraudulent, illegal or malicious activities. If you choose to use the services and register an account, you are responsible for keeping your account credentials secure.
We strongly recommend that you do not disclose your username, password or other login credentials to third parties. If you believe that your account has been compromised, please contact us immediately.
If you are located in the EEA, the legal basis for these data processing activities is our legitimate interest in ensuring the security of our website for you and other customers pursuant to Article 6(1)(f) GDPR.
Communicating with You and Improving Services
We use your personal data to provide customer support and improve our services. This is in our legitimate interest in being able to respond to you, provide effective services and maintain our business relationship with you pursuant to Article 6(1)(f) GDPR.
Disclosure of Personal Data
Under certain circumstances, we may disclose your personal data to third parties for the performance of a contract, for legitimate purposes and for other reasons subject to this Privacy Policy. Examples include:
- vendors or other third parties who perform services on our behalf, such as IT management, payment processing, data analytics, customer support, cloud storage, order fulfilment and shipping;
- business and marketing partners in order to provide services to you and advertise to you. Our business and marketing partners use your information in accordance with their own privacy policies;
- where you instruct, request or otherwise consent to our disclosure of certain information to third parties, for example to ship products to you or through your use of social media widgets or login integrations, with your consent;
- our subsidiaries or otherwise within our corporate group, in our legitimate interest in operating a successful business;
- in connection with a business transaction such as a merger or bankruptcy, in order to comply with applicable legal obligations, including responding to subpoenas, search warrants and similar requests, to enforce applicable terms of service and to protect or defend the services, our rights and the rights of our users or others.
Without your consent or for the purpose of inferring your personal data, we do not use or disclose such data. With your consent, we disclose personal data for the purpose of carrying out advertising and marketing activities.