We welcome you to our website and appreciate your interest in our company. We take the protection of your personal data very seriously. Our data protection provisions comply with applicable statutory regulations on the protection of personal data, in particular with the provisions of the EU General Data Protection Regulation (EU-GDPR), and are in line with the country-specific data protection provisions that apply to Zapf Creation AG. Therefore, please take a moment to familiarise yourself with our data protection information. It explains which data we collect on our website, what we use it for and what options are available to you.
Responsibility in terms of data protection law lies with Zapf Creation AG, postal address:
Mönchrödener Str. 13, 96472 Rödental, Germany.
Subject of data protection
Subject of data protection is personal data. In accordance with Art. 4 Para. 1 GDPR, personal data encompasses any information relating to an identified or identifiable natural person; an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
This includes information such as name, postal address, email address or telephone number, but also usage data such as your IP address.
In general, we do not ask for any personal data when you visit our websites. We only take note of information about the name of your internet service provider and the websites you access from us. Because we only use this information for statistical purposes (e.g. the number of times individual websites are accessed), you, the internet user, remain anonymous.
Any additional information, such as your name, postal address, telephone number and email address which you provide via email as part of a contact request or job application are only processed by us for these specific purposes.
The personal data transmitted to the person responsible for processing depends on the entry fields on the contact form or is limited to the data you share yourself in the email.
Contact form / Contacting us via email (Art. 6 Para. 1 lit. a, b GDPR)
Our website contains a contact form that can be used to contact us electronically. When you use the contact form to write us, we shall process your data provided in the contact form in order to contact you and respond to your questions and wishes.
In doing so, we observe the principle of data economy and data avoidance by requiring you to provide only the data we require for contacting you. This includes your title, full name, email address and the message field and subject themselves. Your IP address will also be processed, as this is a technical necessity and required for legal protection. We also record the country in which you live in order to forward your enquiry to the relevant local partner. All other data submitted is optional (e.g. for a more individual response to your questions).
Should you contact us by email, we will use the personal data communicated in the email solely for the purpose of processing your request.
These cookies enable us to analyse how users use our websites, so that we can design the website content to meet the users’ needs. The cookies also give us the opportunity to measure the effectiveness of a particular advertisement and to position it depending on the topics a user is interested in, for example. The legal basis for this is Art. 6 Para. 1 lit. a EU-GDPR.
You can revoke your consent at any time here:
We use the following cookies:
This type of cookie is controlled directly by Zapf Creation AG. Depending on their purpose, they remain permanently saved, even after the end of the session (persistent cookies, e.g. implementation of opt-out), or are deleted when the browser is closed (session cookies, only valid for a single browser session).
Most web browsers accept cookies automatically. Of course, you can also deactivate, limit or delete cookies on your end device manually using the settings in your browser or specific software.
Please note: If you deactivate the placement of cookies, you may not be able to use all functions of our website in their full scope.
This website uses Google Analytics, a web analysis service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Google Analytics uses “cookies”, which are text files placed on your computer to help the website to analyse how visitors use the site. The information generated by the cookie about your use of the website will be transmitted to and stored by Google on servers in the United States. However, if IP anonymisation is activated on this website, Google will shorten your IP address before transmitting it within EU Member States or in other member states of the European Economic Area. Your full IP address will only be transmitted to a Google server in the USA and shortened there in exceptional cases. Google will not associate the IP address transmitted by your browser in relation to Google Analytics with any other data held by Google.
We have also deactivated Universal Analytics so that no user ID is created that would enable cross-device tracking.
Google will use this information on behalf of the website operator for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage. The legal basis for this is your consent under Art. 6 Para. 1 lit. a EU-GDPR. As we have also deactivated the Google Analytics audiences function, no target groups will be compiled that would enable website visitors to be classified and therefore allow certain targeted advertisements to be shown for the respective target group.
Google is certified under the Privacy Shield agreement, which guarantees adherence to European data protection law (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active).
The personal data of the users is erased or anonymised after 14 months.
Furthermore, you can prevent the collection of data generated by the cookie about your use of the website (including your IP address) and its processing by Google by downloading and installing the browser plug-in provided under this link [https://tools.google.com/dlpage/gaoptout?hl=en-gb].
Alternatively to the browser add-on or in browsers on mobile devices, please click this link to prevent the collection of data by Google Analytics within this website in the future:
This saves an opt-out cookie on your device. If you delete your cookies, you need to click on this link again.
We use the reCAPTCHA function from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, on this website. This function is predominantly used to determine whether an entry has been made by a natural person or improperly through automated machine processing.
The legal basis for this processing is Art. 6 Para. 1 lit. f EU-GDPR, based on our vital interest in the security of our website and in preventing misuse and spam.
The query includes transmission of the IP address and, if applicable, further data needed by Google for the reCAPTCHA service to Google. Your entry is transmitted to Google and used there for this purpose.
Google LLC, based in the USA, is certified for the US-EU Privacy Shield, which guarantees adherence to the level of data protection applicable in the EU (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active).
Social media links
On our website, you will find links to social media services from Facebook and YouTube. You can recognise links to the websites of social media services by the company logos. Following these links will take you to the Zapf Creation AG corporate page on the respective social media service. Clicking on a link to a social media service creates a connection to the servers of the social media service. The fact that you have visited our website is transmitted to the servers of the social media service. Further data is also transmitted to the social media service provider. This may include the following:
- Address of the website on which the link used was found
- Date and time at which the website was accessed or the link activated
- Information on the browser and operating system used
- IP address
If you are already logged in to the relevant social media service when the link is activated, the provider of the social media service may be able to determine your user name and perhaps even your real name from the data transmitted and to match this information to your personal account on the social media service. You can rule out the possibility of this matching to your personal user account by logging out of your account first.
The servers of the social media services are located in the USA and other countries outside the European Union. The data can therefore be processed by the provider of the social media service in countries outside the European Union. Please note that companies in these countries are subject to data protection laws that generally do not protect personal data to the same level as those in the member states of the European Union do.
Facebook fan page
Zapf Creation AG maintains a Facebook fan page for BABY born to communicate with registered customers, interested parties and users and to inform them of our latest offers.
Please note that the use of these platforms and their functions is solely your responsibility. This applies particularly to the use of interactive functions (e.g. commenting, sharing, reviewing).
Please also note that your data may be processed outside the borders of the European Union in this context. With regard to US providers certified under the “Privacy Shield”, please note that these providers have undertaken to comply with the EU’s data protection standards.
Your data may also be processed for market research and advertising purposes. For example, your usage behaviour and the resulting interests may be used to create usage profiles. This may result in advertisements thought to correspond to your interests appearing both on and outside the platforms. Generally, cookies are stored on your computer for this purpose. Irrespective of this, data which is not immediately collected on your end device can also be stored in the usage profiles (in particular when you are a member of the respective platforms and are logged in).
As the provider of this information service, we only collect and process the data needed in order to respond to the messages you can send us. We do not use your data for any other purposes.
The processing of users’ personal data is based on our legitimate interest in effective information for and communication with users in accordance with Art. 6 Para. 1 lit. f. GDPR. If you are prompted by Facebook to provide consent for data processing (i.e. declaring your consent for example by clicking a checkbox or confirming it via a corresponding button), the legal basis for the processing is Art. 6 Para. 1 lit. a., Art. 7 GDPR.
Right to object
If you are a member of Facebook and do not want the network to collect your personal data via our website and link it to your membership data stored with the respective network, you must
- log out of the respective network before visiting our website,
- delete the cookies stored on your device and
- close and restart your browser.
However, after logging in again, you can again be identified by the network as a specific user.
Please see the links to information from Facebook below for detailed information on the types of processing and right to object (opt-out).
Please also note that information requests and assertion of user rights are most effectively directed to the respective provider. Only the providers have access to the user data and can initiate corresponding measures directly and provide related information. However, please contact us if you should nonetheless require assistance.
Commerce Connector (“Buy Now” button)
We offer a selection of online retailers on our website, which you can access via a link on our website. They are linked via a “Buy Now” button or via the logo of the respective online shop. If you click on the link, our partner – Commerce Connector GmbH – will save a cookie on your end device for a limited period of time (usually 7 days). Should you make a purchase from the retailer during this period, Commerce Connector can access the cookie in order to obtain information about your purchase from the retailer as soon as you go to the order confirmation page of the retailer.
Commerce Connector receives no personal information that would allow you to be identified, but rather a unique cookie number. Commerce Connector uses the purchasing information thus collected in order to generate anonymised sales statistics for our products that were purchased via the link, and subsequently provides these statistics to us.
Use and disclosure of personal data/earmarking
We will only collect, process and use all the personal data we receive from you during your use of the Zapf Creation AG website for the stated purpose. In doing so, we ensure that this only happens in accordance with the relevant legal provisions and/or only with your permission.
We will not publish, sell or provide the collected personal data to third parties by any other means. This data will not be used for advertising purposes.
Recipients of the data / Categories of recipients
Within our company, we make sure that only individuals that require your data to fulfil contractual and statutory obligations are given access to your data.
In many cases, service providers support our departments in performing their tasks. All service providers have signed the required data protection contracts. This concerns the following categories of service providers:
- Credit rating check
- Payment services
Transfer to third countries / Intended transfer to third countries
We only transfer data to third countries (outside the European Union or the European Economic Area) if this is required to fulfil our obligations, it is prescribed by law, or you have provided us with consent to do so.
Rights of persons affected
You have the right to gain information about the personal data affecting you, as well as the right to correction or erasure, where this would not violate any statutory storage periods. You are also entitled to demand the restriction of processing from Zapf Creation AG and to assert a right of objection against the processing and the right of data portability. In addition, you have the right to submit a complaint to the supervisory authority.
To assert these rights, please contact: Datenschutz@zapf-creation.de or write to Zapf Creation AG, subject “data protection”, Mönchrödener Str. 13, 96472 Rödental, Germany.
Routine erasure and blocking of personal data
Zapf Creation AG processes and saves personal data on the affected person only for the period required in order to achieve the purpose of the storage or for the duration of a statutory storage period. Once the purpose has been fulfilled or the period has expired, the relevant data is routinely erased, unless it is still required for contract fulfilment or prior to concluding a contract.
Data protection for applications and in application processes
Zapf Creation AG collects and processes the personal data of applicants for the purpose of conducting the application process. Electronic processing is also possible. This is the case when an applicant transmits relevant application documents to Zapf Creation AG electronically, via email. We offer PGP encryption for the secure transmission of application documents via email. To do this, we provide you with our public PGP key. Should Zapf Creation AG conclude an employment contract with an applicant, the data transmitted will be saved for the purpose of conducting the employment relationship, in line with the statutory provisions. Where Zapf Creation AG does not conclude an employment contract with the applicant, the application documents are erased following announcement of the rejection in accordance with the statutory regulations, as long as such erasure does not violate any other legitimate interests of the company. Other vital interests in this context include a duty of evidence in proceedings under the German General Act on Equal Treatment (AGG).
We have taken appropriate technical and organizational measures in order to protect the data we store on our staff/customers/suppliers against accidental or deliberate manipulation, loss, destruction or access by unauthorized persons. The security levels are constantly reassessed and adapted to new security standards in collaboration with security experts.
The exchange of data from and to our website is encrypted. We provide a HTTPS transfer protocol for our website, always using the latest encryption protocol. We also offer our users PGP encryption for applications. We are the only ones who can decrypt your data. There is also the option of using alternative communication channels (e.g. by post).
Our website offers the chance to create a birth certificate for your BABY born. To do this, the name, date of birth and place of birth selected for your BABY born and the name of the child (doll mummy/daddy) can be entered on the entry screen. The birth certificate with the data entered is then generated as a PDF, which you can save locally on your device. We do not save the data entered in our database. It is merely saved briefly in order to create the PDF. The data is deleted again after one hour.
Our website offers the chance to create a wish list. This involves saving the name entered, the time the list is created, and the products added to the wish list. You also have the option of adding various comments to the individual products. If you use this option, the data entered there is also saved. This data is saved in our database and as a PDF with us. The purpose of this data processing is to enable you to generate the wish list as a PDF file that you can save locally. All data is deleted after 180 days at the latest.
Online services for children
Persons under the age of 16 may not provide any personal data to us without the consent of parents or legal guardians, nor may they submit a declaration of consent. We encourage parents and legal guardians to play an active role in the online activities and interests of their children.
Automated case-by-case decisions
We do not use any purely automated processing procedures to reach decisions.
Questions on data protection?
In case you have any question on data protection, please contact Datenschutz@zapf-creation.de or write to Zapf Creation AG, subject “Data protection”, Mönchrödener Str. 13, 96472 Rödental, Germany.