Data Privacy Statement

Welcome to Tchibo GmbH’s Qbo Website. Protecting your privacy is a top priority for us. We collect and use your personal data solely within the scope of the valid data protection regulations. 
Our employees and contractors are obliged to comply with the provisions of data protection regulations in accordance with the law.

In the following, we would like to tell you about how, why and to what extent we collect and use personal data. You can call up this information at any time on our website. This information relates to the use of the service using a PC, smartphone, tablet and all other internet-capable terminal devices, the associated processing of your personal data and your rights. The statements can be accessed at any time online at https://www.qbo.coffee/datenschutz.
 

Provision of website 


The following data is processed when you call up our website.
 

Data

Legal foundation for processing

Purpose of processing

Browser data (date and time of access, URL (address) of referring website, file accessed, volume of data sent, browser type and version, operating system, IP address)

Art. 6 Para. 1 lit. f GDPR

Creation of connection to website (= justified interest)

Web analysis data*

Art. 6 Para. 1 lit. f GDPR

Range measurement, website optimization, interest-based advertising (justified interest)

Google reCAPTCHA data

Art. 6 Para. 1 lit. f GDPR

Protection of internet forms (= justified interest)

 

Web analysis*

To allow us to constantly improve and optimize our website and its user-friendliness, we use analysis technologies provided by Matomo (formerly Piwik). In this, the session and interaction data of the website visitors is collected and statistically evaluated. Cookies are used for this purpose. At no point is the session and interaction data processed in personal form; this is always done anonymously.

 

The length of function of the cookies used is limited to max. 1 year, unless otherwise stated in the following. A cookie is a tiny text file that allows a website to recognize a browser again. Cookies are placed in a text file on the computer and called up and read again the next time the web server is called up. As a user, you can decide for yourself, via your browser settings, if you want to allow, block or delete cookies, and if so, which ones.  

 

If you do not agree to the storage and evaluation of your data from your visit, using Matomo, you can cancel storage and use at any time just by clicking with the mouse afterwards. In this case, an opt-out cookie will be set in your browser, which means that Matomo will not collect any session data at all any more.

Warning:  If you delete your cookies, this means that the opt-out cookie is also deleted and may thus need to be reactivated by you. Independently of traffic analysis, the website processes the following system information:

•    Anonymized IP address

•    Opt-In/Opt-Out status (local)

However, you can also cancel data collection and storage for the purposes of website optimization at any time with effect for the future using the following opt-out link http://www.youronlinechoices.com/de/praferenzmanagement/ . Using this link, you can manage your preferences relating to use-based online advertising. If you submit an objection to a particular provider to use-based online advertising using the preference manager, this only applies for the particular business data collection via the web browser just used. Preference management is cookie-based. Deleting all your browser cookies means that the preferences that you set up using the preference manager will also be deleted.  


Use of Google Maps
To display map material, this website uses "Google Maps API" provided by Google Inc. (Google). When Google Maps is used, Google also collects, processes and uses data about the use of the Maps functions by users of the web pages. The conditions of use for Google Maps can be accessed at Conditions of use for Google Maps. You will find further information about Google’s data protection guidelines at: https://www.google.com/intl/de/policies/privacy/.


Vimeo
Our website uses the Vimeo interface, which is operated by Vimeo, Inc., 555 West 18th Street, New York, New York 10011 (“Vimeo”). We try to protect our users by measures on the website so that your browser does not automatically call up a direct connection with the Vimeo servers. Only actively clicking on the video button installed by us creates a connection to Vimeo and loads the video. We have no influence on the extent of the data that Vimeo collects with the button, but we assume that your IP address is captured. We do not actively forward any data to Vimeo. You can find out the purpose and extent of data collection by Vimeo and how Vimeo further processes and uses the data, along with your rights in this respect and settings options for protecting your privacy from Vimeo’s data protection statements: https://vimeo.com/privacy


Google reCAPTCHA
On our contact forms, we use the reCaptcha service of Google Inc. (“Google”), 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA to protect ourselves against spam and misuse. This service allows us to distinguish whether an entry has been made by a person or improperly through automated machine processing.

To determine this, Goggle places a cookie in your browser when you use the reCaptcha service and collects and processes the following data:

Referrer URL (address of the page on which Captcha is used)

Browser, browser size and resolution, browser plug-ins, date, language setting

Mouse or touch events within the reCaptcha box

Allocation to a Google account (if you are logged in with Google when you use the reCaptcha service, this is recognized and allocated)

Your input behavior (e.g. Answering the reCAPTCHA question, speed of entry in the form boxes, sequence of selection of input fields by the user) is processes in order to improve sample recognition at Google.

In addition, Google reads out the cookies from other Google services such as Gmail, Search and Analytics. All the data listed is encrypted and sent to Google. Google’s subsequent appraisal decides in which form the Captcha is shown on the page – in the form of a checkbox or as a text entry. No personal data from the input fields of the form in question is read or saved. Further information about Google’s privacy policy is available at www.google.com/policies/privacy/.

 

Qbo Newsletter
 

Our site offers you the chance to register for our Newsletter free of charge. The following data is processed within the Newsletter registration:

Data

Legal foundation for processing

Purpose of processing

Newsletter data (e-mail address, consent data)

Art. 6 Para. 1 lit. a GDPR

Sending of an e-mail newsletter*, prevention of abuse of the service and the e-mail address

 

*Data is only used for this purpose if you have given your consent for this. In this case, we also log the consent granted by you.
 

Competitions


You can register to take part in competitions on our website. The following data is processed when you register to take part in competitions:

Data

Legal foundation for processing

Purpose of processing

Competition data (e-mail address, consent data)

Art. 6 Para. 1 lit. a GDPR

Information about the competition according to the Conditions of Entry

 

*Data is only used for this purpose if you have given your consent for this. In this case, we also log the consent granted by you.

Contact form and e-mail contact


Our website provides a contact form which can be used to make contact electronically. Alternatively, you can contact us using the e-mail address provided. If you make use of this possibility to contact us, the following data is processed.  

Data

Legal foundation for processing

Purpose of processing

Contact form data (first name, surname, e-mail address)

Art. 6 Para. 1 lit. a GDPR

Communication relating to contact

 

*Data is only used for this purpose if you have given your consent for this. In this case, we also log the consent granted by you.
 

 

Forwarding personal data


Within the scope of our website services, we forward personal data to the following recipients or categories of recipients:

Recipient or categories of recipients:

Non-EU country

Forwarding to public offices or upon instruction by the courts

Upon instruction by the competent office we must provide information in individual cases about personal data (inventory data) if this is necessary for the purpose of criminal prosecution, protection against danger, to comply with the statutory provisions of the constitution protection authorities or the military counter-intelligence services or to enforce rights to intellectual property.

 

 

Social plug-ins

We do not integrate social plug-ins into our website so that we can protect your privacy when you visit our website. We have only included graphic links to social network providers (e.g. www.facebook.com) in our website. This means that it is not possible for your browser initially to create a direct connection with the server of the social network provider. Tchibo GmbH does not accept any liability for the data protection guidelines and procedures on linked websites.

 

 

Google reCAPTCHA
To protect our internet forms, we also use the reCAPTCHA service provided by Google LLC , 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). This service includes providing Google with your IP address and if applicable further data need for the reCAPTCHA service. Such data is covered by Google’s various privacy policies. You will find further information about Google Captcha privacy policies here: https://www.google.com/intl/de/policies/privacy/. Google is covered by the EU-US Privacy Shield.

USA

Tchibo (Schweiz) AG, Birkenweg 4, 8304 Wallisellen

Switzerland

 

Eduscho (Austria) GmbH, Wien, Österreich

 

Atlassian Jira / Confluence, 1098 Harrison St, San Francisco, CA 94103, USA

USA

Vimeo Inc., 555 West 18th Street, New York, New York 10011

USA

Bornholdt Lee GmbH, Ludwig-Erhard-Strasse 18, 22459 Hamburg

 

Atlantis media GmbH, Haferweg 26, 22769 Hamburg

 

Episerver  GmbH, Wallstrasse 16, 10179 Berlin

 

Plusserver, Hohenzollernring 72, 50672 Köln

 

Amazon Web Services, 410 Terry Avenue North, Seattle WA 98109, USA

USA

Amazon Europe Core S.à r.l. (Société à responsabilité limitée), 5 Rue Plaetis, L-2338 Luxemburg

 

walter services GmbH, Am Turm 42, 53721 Siegburg

 

LogMeIn Ireland Limited, Bloodstone Building Block C, 70 Sir John Rogerson`s Quay, Dublin 2, Ireland

 

Micorsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA

USA

Apple Distribution International, Internet Software & Services, Hollyhill Industrial Estate, Hollyhill, Cork, Republic of Ireland

 

Crashlytics & Google Play Developer, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA

USA

 

Your data will only be forwarded to associated companies and service partners if they are operating on our behalf and supporting Tchibo GmbH in the provision of its services. The above-mentioned service-providers are only given access to such personal information as is necessary for the fulfillment of the activity in question, such as providing advice on the Service Hotline to do with your machine or your Qbo Profile that you can set up using the Qbo App. These service-providers are not allowed to use your personal information for any other purposes, particularly for their own advertising purposes. If necessary under the law, contractual agreements have been concluded with these service-providers to protect your personal information. Unless otherwise expressly stated, these are mainly service-providers within the European Economic Area (EEA).

 

Forwarding personal data to non-EU countries

In this context, we forward personal data to the following non-EU countries:
 

 
  • Switzerland
  • USA

To ensure an appropriate level of data protection in these non-EU countries, adequacy decisions have been granted by the EU Commission or appropriate, suitable guarantees have been given in the form of:
 

  • EU standard contract clauses (we can provide a copy on request);
  • EU-US Privacy Shield certifications (with Implementing Decision (EU) 2016/1250 of the EU Commission of 12 July 2016, the level of protection of the EU-US Privacy Shield is recognized as the equivalent of the level of protection of the EU in this respect);

The adequacy of the data protection level provided in Switzerland was determined with the Adequacy Decision of the EU Commission (2000/518/EC). You can find further information about the recognition of secure non-EU countries on the EU Commission website. 

 

Obligation to provide personal data and automated decision-making


You are not obliged by law or contract to provide personal data. The provision of personal data is not necessary in order to conclude a contract.
There is no automated decision-making including checking accord to Art. 22 GDPR. 

 

 

Storage duration

 

We process and save your personal data where necessary for the duration of our business relationship, which also includes, for example, setting up and processing a contract and the regular expiration period of three years to defend against or to submit any legal claims.

In addition, we are governed by various retention and documentation obligations arising, for example, from the German Commercial Code (HGB) or the German Tax Code (AO). The periods given there for the retention of data are between six and ten years. During this time, the processing of data is limited. The retention period starts with the end of the calendar year in which the offer was given or the contract fulfilled. For example, accounting records required under commercial or tax legislation must be kept for ten years, and documents relevant for contracts and taxation must be kept for at least six years.

In legal matters being handled by lawyers, the associated data is kept for at least six years, and with enforcement orders, the storage duration may be up to thirty years because of the expiration regulations.

IP addresses are generally stored temporarily to make the connection; if we use these beyond this for website optimization or for advertising purposes, these are made anonymous immediately and only further processed anonymously. The length of function of cookies is limited to one year.

If you have given us consent for data processing, the data associated with the granting of the consent will be kept for the duration of the processing and, after this has been completed, for a further three years within the expiration term.

 

Your rights

You have the following rights:

 
  • Under Art. 15 GDPR, to request information about your personal data processed by us;
  • Under Art. 16 GDPR, to request immediately the correction or completion of any incorrect or incomplete personal data about you held by us;
  • Under Art. 17 GDPR, to request the deletion of personal data about you held by us;
  • Under Art. 18 GDPR, to request the restriction of the processing of personal data about you held by us;
  • Under Art. 20 GDPR, to be sent your personal data which you have provided to us, in a structured, standard, machine-readable format or to request that they are forwarded to another responsible party;
  • • Under Art. 21, to submit an objection (i) under certain conditions to the processing of your personal data which is being carried out on the basis of Art. 6 Para. 1 lit. e GDPR (in the public interest) or on the basis of Art. 6 Para. 1 lit. f GDPR (to safeguard a justified interest), or (ii) against the processing of data for the purposes of direct marketing;
     

  • Under Art. 7 Para. 3 GDPR, to cancel the consent given to us at any time. This also applies for the cancellation of declarations of consent given to us before the introduction of the General Data Protection Regulation, i.e. before 25 May 2018. The consequence of this is that we are no longer allowed to continue data processing on the basis of this consent for the future, without affecting the legal validity of the processing carried out on the basis of this consent until its cancellation;
  • ​Under Art. 77 GDPR, to complain to a supervisory authority.



 

Contact data of responsible party and data protection officer


If you have any further questions about data protection, please contact us. If you have any questions about the processing of your personal data or about applying your statutory rights as a party affected, please contact:

Responsible party:


Tchibo GmbH 
Überseering 18
22297 Hamburg 
Germany
Telefon: +49 40 6387 0
e-Mail: service@tchibo.de
Website: www.tchibo.de

Statutory representative:


Chair of the Supervisory Board: 
Michael Herz 
Directors: 
Thomas Linemayr (Chair), 
Erwin Hinteregger, 
Ines von Jagemann, 
Dr. Jens Köppen, 
Carsten Wehrmann

Data protection officer:


Tchibo Data Protection Team
datenschutz@tchibo.de 


 

 

Links


The website provides links to other websites which might be of interest to you. With links to other websites, no personal information is forwarded to the third-party providers of the website. Tchibo GmbH is not responsible for the privacy practices of other websites or their content. It may be, therefore, that the privacy statements on the Tchibo GmbH website differ from the privacy policies of other websites. We recommend that you also read the other privacy policies.
 

Google Webfonts


To display fonts in the integrated services Google Maps and Google ReCaptcha this page uses script libraries and font libraries known as webfonts. These are provided by Google (http://www.google.com/webfonts/). For this, when you access the services in question, your browser downloads the required webfonts to your browser cache to avoid multiple downloads. This is also necessary in order for your browser to be able to display a visually optimized representation of these texts. If your browser does not support this function, your computer will use a standard front for the display.
Calling up these script libraries or font libraries automatically triggers a connection between the user's computer and the Google server, with the consequence that the IP address is also transmitted. You will find further information about Google webfonts at https://developers.google.com/fonts/faq?hl=de-DE&csw=1 You will find general information about data protection at Google at http://www.google.com/intl/de-DE/policies/privacy/

 

 

Changes to the Privacy Policy

 

We reserve the right to change or adapt this Privacy Policy at any time in consideration of the valid data protection regulations.

If you have any queries, please contact datenschutz@tchibo.de.

arrow_down

We use cookies to enhance your experience and improve our service. By using our website, you agree to the storage of cookies. You can find out more about cookies and how to deactivate them here

OK