Please enter your search term

Close
Password reset

Enter your email address and we'll send you a link to reset your password.

Close
Choose Country & Language: GB (£)
Close
Are you based in the US?

We have a new Carhartt WIP website for customers in the US and Canada. Now offering domestic shipping and returns. Check it out.

Close
Your cart is empty

Privacy Statement for www.carhartt-wip.com

This Privacy Statement informs you about the processing of your data in the course of your visit and use of the website www.carhartt-wip.com (hereinafter also referred to “our Website”).

1. Controller, data protection officer of the controller

We, Work in Progress Textilhandels GmbH, are the controller pursuant to Article 4 Subsection (7) of the EU Data Protection Regulation (hereinafter referred to as “GDPR”) with respect to personal data processed on / via www.carhartt-wip.com. Our contact details are:

WORK IN PROGRESS TEXTILHANDELS GMBH
Hegenheimer Strasse 16
79576 Weil am Rhein
Germany
phone: +49 (0)7621 966 6
e-mail: onlineshop@carhartt-wip.com

The data protection officer of Work in Progress Textilhandels GmbH pursuant to Article 37 GDPR, § 38 German Federal Data Protection Act (such act hereinafter referred to as “FDPA”) is:

Reinhard M. Novak
Dorfstrasse 15
79249 Merzhausen
Germany
phone: +49 (0)761 58539335
e-mail: kontakt@dsb-ext.com

2. Collection and processing of personal data as well as scope and purpose of such data’s use

2.1 When visiting our Website

If you visit our Website, the web browser of your client device (computer, laptop, tablet, smartphone etc.) will send automatically certain information to the web server of our Website. This information is temporarily stored in electronic protocols, so-called log files. The following information is gathered thereby and stored until it is automatically deleted:

  • IP address of the accessing client device,

  • date and time of the access,

  • time zone gap in relation to the Greenwich Mean Time (GMT),

  • name and URL of the accessed pages / files,

  • access status / HTTP status,

  • transferred data amount,

  • the website from which the access occurs (referrer URL),

  • type and version of the web browser used, including its language,

  • type and version of the operating system of your client device.

This data will be stored for a period of 31 days and thereafter automatically deleted.

We will process this data for the following purposes:

  • Enabling a smooth connection to our Website,

  • enabling a comfortable use of our Website,

  • analyzing the system stability and system safety as well as

  • for further administrative purposes

The legal basis for the processing of the data listed above is Article 6 Subsection 1 Sentence 1 (f) GDPR. Our legitimate interest for this processing consists of the purposes of the data processing as specified above.

Furthermore, our Website uses cookies and web analysis tools. For further details thereon, please refer to Sections 3 and 4 of this Privacy Statement.

2.2 E-mail newsletter

Newsletter subscription

By giving your consent, you can subscribe to our e-mail newsletter (hereinafter referred to as “Newsletter”) by which we will inform you about our products, sales and events.

The subscription procedure with respect to our Newsletter consists of the so-called double opt-in procedure. This procedure consists of the following steps: after your completion of the subscription form, we will send you an e-mail to the e-mail address you entered into the subscription form, in which we will ask you to confirm your subscription by activating a link contained in this e-mail. If you do not activate this link within a period of 14 days, your data provided in the course of the subscription will be deleted automatically. Furthermore, we will store the following information: the IP addresses provided by your client device at the time of subscription and confirmation of your subscription as well as those times themselves. The purpose of the double opt-in procedure is to enable us to prove your subscription and to analyze potential abuse of your personal data.

When subscribing to our Newsletter, you only need to provide us with your e-mail address. You can voluntarily provide us with further information which we would use to address you personally. After your confirmation of your subscription, we will store your e-mail address in order to be able to send you our Newsletters.

The legal basis for the data processing in the course of a Newsletter subscription is the consent of the subscriber pursuant to Article 6 Subsection 1 Sentence 1 (a) GDPR.

You may at any time withdraw your consent to receiving our Newsletter by unsubscribing from our Newsletter. You may affect this un-subscription by activating the un-subscription link included in any of our Newsletter e-mails or by sending a message to our contact details specified in Section 2.1 of this Privacy Statement.


Newsletter emailing after purchase

If you have bought products in our Webshop, we will probably send you Newsletters also in case you have not subscribed to it, provided however that such Newsletters advertise products similar to those you have bought in our Webshop. In this case, the Newsletters will be sent to the e-mail address you provided in the course of the purchase.

For this type of Newsletter emailing, we store this e-mail address in our Newsletter address database. To be able to prove the legitimateness of the Newsletter emailing, we also store the IP addresses provided by your client device at the time of the purchase as well as this time itself.

The legal basis for the data processing in the course of the Newsletter emailing after a purchase is Article 6 Subsection 1 Sentence 1 (f) GDPR. Our legitimate interest in the data processing is the direct marketing of our products towards our clients.

You may at any time object to receiving our Newsletter by activating the un-subscription link included in any of our Newsletter e-mails or by sending a message to our contact details specified in Section 2.1 of this Privacy Statement.


Newsletter tracking

Please note that we analyze the user behavior of the recipients of our Newsletters. For this purpose, our Newsletters contain so-called web beacons/tracking pixels each of which consists of a one-pixel graphics file. For this analysis, we link the information specified in Section 2.1 of this Privacy Statement or parts thereof and the web beacons to your e-mail address and an individual ID. Also, the hyperlinks included in our Newsletters contain this ID. By the data gathered thereby, we generate a user profile in order to be able to match the interests of our clients by the contents of our Newsletters. For this purpose, we analyze your interests by collecting the following data: the time when you open a Newsletter and the hyperlinks you activate in a Newsletter. In some circumstances, we will link this information with actions you rendered on our Website.

The legal basis for the data processing in the course of the tracking specified above is, in case of Newsletter subscription, the consent of the subscriber pursuant to Article 6 Subsection 1 Sentence 1 (a) GDPR. In case of Newsletter emailing after a purchase, the legal basis for the data processing in the course of the tracking specified above is Article 6 Subsection 1 Sentence 1 (f) GDPR. Our legitimate interest in the data processing is our need to match our Newsletter with the interests of our clients.

You may object to the tracking specified above by unsubscribing from our Newsletter; you may effect this unsubscription by activating the unsubscription link included in any of our Newsletters or by sending a message to our contact details as specified in Section 2.1 of this Privacy Statement. The information we have gathered by the before mentioned tracking will be stored as long as you are a subscriber of our Newsletter. As soon as you unsubscribe from our Newsletter, we will anonymize your data gathered by the tracking and only use the so anonymized data for statistical purposes.

You may also prevent the before mentioned tracking if you disable the display of pictures within your e-mail client software. In this case, no graphics/pictures of our Newsletters will be shown and it may be that you cannot use all functions of our Newsletters. If you (re-)enable the display of pictures in e-mails manually, the before mentioned tracking will (again) occur.


Newsletter service provider

The processing of our Newsletters will be affected by using services and IT-systems of the following service provider which we have contracted as our processor pursuant to Article 4 Subsection (8) GDPR:

Emarsys eMarketing Systems AG
Hans-Fischer-Str. 10
80339 München
Germany

2.3 Contact form

Our website contains a contact form via which you may address inquiries to us. To do so, you have to enter a valid e-mail address. You may voluntarily provide other information via the contact form.

We will use the information you provide us via the contact form to answer your inquiries. We will delete this information as soon as it is no longer necessary for answering your inquiry; alternatively, we will restrict the processing of this information in case we have to maintain this information for statutory reasons.

You may at any time object to the further processing of the information you provided us via the contact form, for example via e-mail to onlineshop@carhartt-wip.com, however, such objection will not affect the data processing occurred before your objection. The legal basis for the processing of your information provided to us via the contact form is Article 6 Subsection 1 Sentence 1 (a) GDPR.


2.4 When using our webshop

If you place orders in our webshop, it is necessary for the completion of the contract with you that you provide us with such personal data which we need for the processing of your order. We have expressly indicated in our webshop which information we need mandatorily; you may provide us with further information voluntarily. We will process the information you provide us within the webshop for the processing of your order.

Payments will we be processed by an external service provider. For this purpose, you will be directed temporarily to the website of the respective service provider upon placing your order (check out). We ourselves do principally not collect or store data on payments. Only in case you provide us with payment information separately in the course of returns or complaints, we will store and process this information, however only for the purpose to process the respective returns or complaints.

You may voluntarily create a personal customer account by which we can store your data for further orders. If you do so, we will store the data you provide us within the customer account until you object to such storage. You may effect such objection at any time by deleting your customer account.

Due to statutory provisions on accounting and taxes, we are obliged to store your order and payment data for a period of ten years.

The legal basis for the processing of your order and payment data is Article 6 Subsection 1 Sentence 1 (b) GDPR. The legal basis for the storage of this data due to statutory provisions on accounting and taxes is Article 6 Subsection 1 Sentence 1 (c) GDPR.

3. Cookies

Our website uses cookies. Cookies are small text files which are created by your web browser automatically and which are stored on your client device (computer, laptop, tablet, smartphone etc.) if you visit our Website.

The cookies used by our Website do not cause any harm to your client device, they do in particular not contain computer viruses, trojans or other malware.

Our website uses the following categories of cookies the scope and function of which we explain in the following:


  • Technically necessary cookies
    Technically necessary cookies enable the use of our Website by enabling basic functions like menu navigation and access to secured areas of our Website. The use of our Website will not operate properly without these cookies.

  • Preference cookies
    Preference cookies enable our Website to remember certain information which influences the way our Website behaves or looks like, for example by remembering the language you use or the region from which you access our Website.

  • Statistical cookies
    Statistical cookies help us to understand how the visitors of our Website interact with our Website’s contents by anonymously gathering information on the user behavior. We use and analyze this information anonymously for statistical purposes.

  • Marketing cookies
    Our Website uses marketing cookies to track the visits of the users of our Website. This tracking helps us to understand the preferences and interests of the visitors of our Website and enables us to show to the visitors of our Websites advertising on our Website or on third party websites which is relevant for and appealing to them.

With respect to the duration of the storage of the cookies on your client device, the following applies:



  • Transient cookies
    Transient cookies will be deleted automatically as soon as you close your web browser. One of the main categories of transient cookies are session cookies. Session cookies store a so called session ID with which our Website can allocate various access events of your web browser to a common session. Our Website can thereby recognize your client device when you return to our Website. Session cookies will be deleted when you log out from our Website or close your web browser.

  • Persistent cookies Persistent cookies will be deleted automatically after a preset period of time; this period may be different from cookie to cookie. You may at any time delete cookies in the safety / privacy settings of your web browser.

The legal basis for the use of cookies by our Website is Article 6 Subsection 1 Sentence 1 (f) GDPR. Our legitimate interest in the data processing results from the purposes for the use of cookies as specified above.

At the beginning of your visit of our Website, our Website will inform you on the cookies which are used by our Website and specify to which cookie category each cookie belongs (technically necessary cookies, preference cookies, statistical cookies or marketing cookies). Thereby, you will be notified on the name, the provider, the purpose and the time of deletion of each such cookie. You will be able to deactivate each cookie category except for technically necessary cookies. These deactivations remain until you delete all cookies within the security / privacy settings of your web browser. You can at any time modify your settings made upon the beginning of the visit of our Website with respect to any category of cookies (however except for technically necessary cookies) by closing our Website in your web browser, deleting all cookies within the security / privacy settings of your web browser and revisiting our Website thereafter. By this procedure, our Website will again show you the categories of cookies as specified above and enable you to modify your deactivation preferences. Please refer to the user menu of your web browser for further details on deleting cookies within the security/privacy settings of your web browser.

Most web browsers allow you to particularly block cookies which are not set by our Website itself but by third-party providers (hereinafter referred to as “Third Party Cookies”). Please refer to the user menu of your web browser for further details thereon.

In the security/privacy settings of your web browser, you can generally block any types or categories of cookies and thereby prevent the storage of cookies on your client device. Please refer to the user menu of your web browser for further details thereon. Please note that after this general blocking you will probably not be able to use all functions of our Website.

4. Web analysis tools

4.1 Google Analytics

We use Google Analytics on our Website in order to meet the demands of the visitors of our Website and to optimize our Website, both on an ongoing basis. Furthermore, we use Google Analytics to statistically analyze the use of our Website, also in order to meet the demands of the visitors by our online presence.

Google Analytics is a web analyses service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter referred to as “Google”), cf. https://www.google.com/intl/en/contact/.

Google Analytics creates pseudonymized user profiles and uses cookies (cf. Section 3 of this Privacy Statement with respect to cookies in general).

The information generated by the cookies set by Google Analytics during your visit to our Website, such as


  • IP address of the accessing client device,

  • date and time of the access,

  • time zone gap in relation to the Greenwich Mean Time (GMT),

  • name and URL of the accessed pages / files,

  • the website from which the access occurs (referrer URL),>
  • type and version of the web browser used, including its language,

  • type and version of the operating system of your client device,

will be transferred to a server of Google located in the U.S. and stored on this server. Google will use this information in order to analyze our Website, to create reports on the website activities and to render additional services in connection with the use of our Website and the use of the internet for market research and for statistical services which enable a needs-based design of our Website. This information will probably be transferred to third parties in case the statutory laws so provide or in case third parties act as data processor.

Your IP address will in no case be linked to other data of Google. Your IP address will be anonymized so that it may not be linked to other information of you or of other persons (IP masking).

Google LLC is certified under the EU U.S. Privacy Shield, cf. https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active. Therefore, the data transfer to Google is subject to an adequacy decision pursuant to Article 45 Subsection 9 GDPR.

Data which is linked on our Website by Google Analytics to cookies, will be deleted after a period of 14 months.

Our use of Google Analytics with the functions specified above is based on Article 6 Subsection 1 Sentence 1 (f) GDPR. Our legitimate interest in this use and the above specified data processing by Google Analytics results from the purposes specified above in Section 4.1 of this Privacy Statement.

You may prevent the storage of the cookies Google Analytics uses by the following measures:


  • By disabling marketing cookies at the beginning of your visit of our Website (cf. Section 3 of this Privacy Statement).

  • By blocking Third Party Cookies or all cookies by choosing the respective setting within the security / privacy settings of your web browser (cf. Section 3 of this Privacy Statement). Please note that, after such blocking, you may probably not use all functions of our Website.>
  • By downloading and installing the browser add-on provided by Google under https://tools.google.com/dlpage/gaoptout?hl=en

    .

You can find further information with respect to data protection in connection with Google Analytics within the Google Analytics Help under https://support.google.com/analytics/answer/6004245?hl=en as well as with respect to data protection applying at Google generally under https://policies.google.com/privacy?hl=en&gl=de.

4.2 Google AdWords Conversion

We use the Google AdWords services which enable us to call attention to our offers on websites of third parties by using certain marketing measures (so called Google AdWords).

Google AdWords Conversion is a service of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter referred to as “Google”), cf. https://www.google.com/intl/en/contact/.

By using Google AdWords we can determine in relation to the marketing campaigns how successful each marketing campaign is. We thereby pursue the target to present advertising to you which is relevant for you, to design our Website more interesting and to reach a fair calculation of marketing costs.

The above-mentioned marketing measures are distributed by Google via so-called “Ad Servers”. Therefore, we use Ad Server cookies (cf. Section 3 above with respect to cookies generally) by which certain parameters may be measured in order to evaluate the success of the marketing campaign, such as the display of Google advertisements or clicks effected by the users. If you are directed to our Website via a Google advertisement, Google AdWords will store a cookie on your client device. These cookies will expire after 30 days and shall not be used to identify you personally. This cookie is usually linked to the following analysis information: unique cookie ID, number of ad impressions per campaign (frequency), last impression (relevant for post view conversions) as well as opt-out information (i.e. a mark indicating that the user does not want to be addressed anymore).

The Ad Server cookies enable Google to recall your web browser. In case a user visits certain pages of a website of an AdWord client and the cookie on such user’s client device has not yet expired, Google and the AdWord client may recognize that the user has clicked on the advertisement and has been forwarded to the respective page/website. Google assigns a separate cookie to each AdWord client. The AdWord cookies may therefore not be tracked across the websites of the AdWord clients. We ourselves do not process personal data in the marketing campaigns mentioned above. Google only provides us with accrued statistical data and interpretations. Theses statistical interpretations allow us to recognize which of our marketing campaigns is particularly effective. We do not receive any further data from the use of advertisements, in particular, we cannot identify users.

Due to our use of the marketing tools as specified above, your web browser will automatically establish a link to the servers of Google. Since we do not have any influence on the scope and further use of data which is gathered by Google by these tools, we hereby inform you in accordance to our level of knowledge: by the implementation of AdWords Conversion within our Website, Google obtains the information that you have accessed the respective part of our Website or clicked on one of our Google advertisements. If you are personally registered with Google, Google may link these activities to your Google account. Even if you are not personally registered with Google or not logged in to your personal Google account, Google may probably obtain knowledge of your IP address and store your IP address.

Google LLC is certified under the EU U.S. Privacy Shield, cf. https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active. Therefore, the data transfer to Google is subject to an adequacy decision pursuant to Article 45 Subsection 9 GDPR.

Our use of Google AdWords Conversion with the functions specified above is based on Article 6 Subsection 1 Sentence 1 (f) GDPR. Our legitimate interest in this use and the above-specified data processing by Google AdWords Conversion results from the purposes specified above in Section 4.2 of this Privacy Statement.

You may prevent the storage of the cookies Google AdWords Conversion uses by the following measures:


  • By disabling marketing cookies at the beginning of your visit of our Website (cf. Section 3 of this Privacy Statement).

  • By blocking Third Party Cookies or all cookies by choosing the respective setting within the security/privacy settings of your web browser (cf. Section 3 of this Privacy Statement). Please note that, after such blocking, you may probably not use all functions of our Website.

  • By deactivating the conversion tracking cookies; this may be effected via the blocking of cookies from the internet domain „www.googleadservices.com“ in your internet browser by using the functionality of the webpage https://www.google.de/settings/ads; please note that this blocking will be disabled if you delete Third Party Cookies or all cookies within your web browser.

  • If you use the web browsers Firefox, Internet Explorer or Google Chrome: by downloading and installing the browser plugin which can be found under http://www.google.com/settings/ads/plugin.

  • If you have a personal Google account: by logging in to your Google account in such internet browser which you intend to use when visiting our Website and deactivating personalized advertisements in the privacy settings of your Google account.

You can find further information with respect to data protection in connection with Google AdWords Conversion within the Google AdWords Conversion Help under https://services.google.com/sitestats/en.html as well as with respect to data protection applying at Google generally under https://policies.google.com/privacy?hl=en&gl=de.


4.3 Google Remarketing

Besides Google AdWords Conversion (cf. Section 4.2 of this Privacy Statement), we use Google Remarketing.

Google Remarketing is a service of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter referred to as “Google”), cf. https://www.google.com/intl/en/contact/.

Google Remarketing represents a procedure by which we want to address you again in the future. Google Remarketing enables us to display our advertisements on those websites that you access after the visit to our Website. This is effected by cookies stored on your client device by which your user behavior is tracked and analyzed by Google during your visits of websites (cf. Section 3 above with respect to cookies in general). Google recognizes your prior visit to our Website. Google states that it will not link the data gathered by Google Remarketing with your personal data which is probably stored by Google otherwise. In particular, Google states that it uses pseudonymization techniques within Google Remarketing.

Google LLC is certified under the EU U.S. Privacy Shield, cf. https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active. Therefore, the data transfer to Google is subject to an adequacy decision pursuant to Article 45 Subsection 9 GDPR.

Our use of Google Remarketing with the functions specified above is based on Article 6 Subsection 1 Sentence 1 (f) GDPR. Our legitimate interest in this use and the above-specified data processing by Google Remarketing results from the purposes specified above in Section 4.3 of this Privacy Statement.

You may prevent the storage of the cookies Google Remarketing uses by the following measures:


  • By disabling marketing cookies at the beginning of your visit of our Website (cf. Section 3 of this Privacy Statement).

  • By blocking Third Party Cookies or all cookies by choosing the respective setting within the security / privacy settings of your web browser (cf. Section 3 of this Privacy Statement). Please note that, after such blocking, you may probably not use all functions of our Website.

  • By deactivating the conversion tracking cookies; this may be effected via the blocking of cookies from the internet domain „www.googleadservices.com“ in your internet browser by using the functionality of the webpage https://www.google.de/settings/ads; please note that this blocking will be disabled if you delete Third Party Cookies or all cookies within your web browser.

  • If you use the web browsers Firefox, Internet Explorer or Google Chrome: by downloading and installing the browser plugin which can be found under http://www.google.com/settings/ads/plugin.

  • If you have a personal Google account: by logging in to your Google account in such internet browser which you intend to use when visiting our Website and deactivating personalized advertisements in the privacy settings of your Google account.

You can find further information with respect to data protection in connection with Google Remarketing within the Google Remarketing Help under https://services.google.com/sitestats/en.html as well as with respect to data protection applying at Google generally under https://policies.google.com/privacy?hl=en&gl=en.

4.4 DoubleClick by Google

This website also uses the online marketing tool DoubleClick by Google (hereinafter referred to as “DoubleClick”).

DoubleClick is a service of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter referred to as “Google”), cf. https://www.google.com/intl/en/contact/.

DoubleClick uses Cookies in order to display to users relevant advertisements, to improve the reports on campaign performance and/or to prevent that an advertisement is displayed to a user more than once. Google recognizes via a cookie ID which advertisements have been displayed in which web browser; Google can thereby prevent that the advertisements are displayed more than once. Furthermore, DoubleClick may gather the so-called conversions, which refer to advertisement requests, by cookie IDs. This is, for example, the case if a DoubleClick advertisement is displayed to a user and the user thereafter visits with the same web browser the website of the advertising Google client and buys something on this website. Google states that DoubleClick cookies do not gather personal information. Cf. Section 3 of this Privacy Statement with respect to cookies in general.

Due to the use of DoubleClick, your web browser automatically establishes a direct connection to the servers of Google. Since we do not have any influence on the scope and the use of the data which is gathered by Google in the course of the use of DoubleClick, we hereby inform you pursuant to our state of knowledge: the implementation of DoubleClick in our Website enables Google to obtain the information that you have accessed within the relevant part of our Website or clicked on one of our advertisements. If you are personally registered with Google, Google may link your visit to your personal Google account. Even if you are not personally registered with Google or not logged in to your personal Google account, Google may probably obtain knowledge of your IP address and store your IP address.

Google LLC is certified under the EU U.S. Privacy Shield, cf. https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active. Therefore, the data transfer to Google is subject to an adequacy decision pursuant to Article 45 Subsection 9 GDPR. Our use of Double Click with the functions specified above is based on Article 6 Subsection 1 Sentence 1 (f) GDPR. Our legitimate interest in this use and the above-specified data processing by Double Click results from the purposes specified above in Section 4.4 of this Privacy Statement.

You may prevent the storage of the cookies DoubleClick uses by the following measures:


  • By disabling marketing cookies at the beginning of your visit of our Website (cf. Section 3 of this Privacy Statement).

  • By blocking Third Party Cookies or all cookies by choosing the respective setting within the security / privacy settings of your web browser (cf. Section 3 of this Privacy Statement). Please note that, after such blocking, you may probably not use all functions of our Website.

  • By deactivating the conversion tracking cookies; this may be effected via the blocking of cookies from the internet domain „www.googleadservices.com“ in your internet browser by using the functionality of the webpage https://www.google.de/settings/ads; please note that this blocking will be disabled if you delete Third Party Cookies or all cookies within your web browser.

  • If you use the web browsers Firefox, Internet Explorer or Google Chrome: by downloading and installing the browser plugin which can be found under http://www.google.com/settings/ads/plugin.

  • If you have a personal Google account: by logging in to your Google account in such internet browser which you intend to use when visiting our Website and deactivating personalized advertisements in the privacy settings of your Google account.

You can find further information with respect to Double Click under https://www.doubleclickbygoogle.com as well as with respect to data protection applying at Google generally under https://policies.google.com/privacy?hl=en&gl=en.

4.5 econda

In order to design our Website based on the needs of the visitors of our Website and in order to optimize our Website otherwise, we use services of econda GmbH, Zimmerstr. 6, 76137 Karlsruhe, Germany (hereinafter referred to “econda“). These services gather and store data on an anonymized basis and produce user profiles from this data by using pseudonyms.

In order to enable these purposes, the econda services may use cookies which are able to recall web browsers (cf. Section 3 above with respect to cookies in general). However, the econda services do not link user profiles to data related to a visitor represented by a pseudonym without such visitors prior consent. In particular, econda anonymizes IP addresses immediately upon receipt; after such anonymization, the link of user profiles to IP addresses is no longer possible.

The above-specified analysis of user behavior is based on Article 6 Subsection 1 Sentence 1 (f) GDPR. Our legitimate interest in this anonymized analysis of user behavior consists of our intent to design our Website pursuant to the needs of its visitors and to optimize it otherwise.

You may prevent the storage of the cookies which are used by the econda services by the following measures:


  • By disabling marketing cookies at the beginning of your visit of our Website (cf. Section 3 of this Privacy Statement).

  • By blocking Third Party Cookies or all cookies by choosing the respective setting within the security/privacy settings of your web browser (cf. Section 3 of this Privacy Statement). Please note that, after such blocking, you may probably not use all functions of our Website.

4.6 epoq

We use services of epoq internet services GmbH, Am Rüppurrer Schloß 1, 76199 Karlsruhe, Germany (hereinafter referred to as “epoq”) in order to be able to display to the visitors of our Website and our webshop needs-based product proposals and contents, and to analyze the success of these proposals. We hereby gather the following information: the products you have viewed, clicked or bought on our Website / in our webshop.

For this purpose, the IP address of your client device will be transferred to servers used by epoq which are located within Germany. This IP address will not be linked to other data. Your IP address will be anonymized so that a link of the IP address to other data is not possible (IP masking).

Furthermore, the services provided by epoq use cookies which are stored on your client device in order to display to you needs-based product proposals and contents and to enable the above-mentioned success analysis (cf. Section 3 with respect to cookies in general). The information gathered by these cookies on your use of our Website will be transferred to servers used by epoq which are located in Germany and Ireland.

The legal basis for the data processing caused by the services of epoq is Article 6 Subsection 1 Sentence 1 (f) GDPR. Our legitimate interest in this data processing consist of the purposes of the data processing a specified above in Section 4.6 of this Privacy Statement.

You may prevent the storage of the cookies which are used by the epoq services by the following measures:

  • By disabling marketing cookies at the beginning of your visit of our Website (cf. Section 3 of this Privacy Statement).

  • By blocking Third Party Cookies or all cookies by choosing the respective setting within the security/privacy settings of your web browser (cf. Section 3 of this Privacy Statement). Please note that, after such blocking, you may probably not use all functions of our Website.

4.7 Google Tag Manager

For the administration and control of the web analysis tools as specified in Section 4 of this Privacy Statement above, we use Google Tag Manager.

Google Tag Manager is a service of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter referred to as “Google”), cf. https://www.google.com/intl/en/contact/. Google LLC is certified under the EU U.S. Privacy Shield, cf. https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active. Therefore, the data transfer to Google is subject to an adequacy decision pursuant to Article 45 Subsection 9 GDPR.

Google Tag Manager enables us to administrate and control those HTML commands of our Website via which the web analysis tools as specified in Section 4 above of this Privacy Statement (so-called “tags”) via a graphical user interface. Google Tag Manager implements these tags on our Website. Google Tag Manager does not use any cookies and does not gather any personal information. Only the web analysis tools itself which are specified in Section 4 above of this Privacy Statement and which we administrate by using Google Tag Manager gather data (cf. Sections 4.1 to 4.6 of this Privacy Statement). Google Tag Manager does not have access to this data.

5. YouTube Videos

We may include YouTube videos on our Website which are stored on https://www.youtube.com and may be run directly from our Website.

The website https://www.youtube.com is operated by YouTube, LLC., 901 Cherry Ave, San Bruno, CA 94066, USA (hereinafter referred to as “YouTube”). YouTube is a subsidiary of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter referred to as “Google”), cf. https://www.google.com/intl/en/contact/.

We implement YouTube videos only by using the so-called “extended data protection mode”. That means: no data with respect to you will be transferred to YouTube unless you start one of the YouTube videos on our Website. Only if you do so, the data as specified in the following paragraph will be transferred to YouTube. We do not have any influence on this data transfer.

By starting a YouTube video which is included in our Website, YouTube obtains the information that you have visited the respective subpage of our Website. Furthermore, the data as listed in Section 2.1 of this Privacy Statement above or parts thereof will be transferred to YouTube. This occurs regardless of whether you have created a personal user account with Google in which you are logged in. If you are logged in in such an account, the before mentioned data will be directly linked to your Google account. If you want to prevent this link of data with your personal Google account, you have to log out from your Google account before starting the respective YouTube video. YouTube stores your data within user profiles and uses it for marketing, market research and/or needs-based design of its website. This use occurs in particular (also for visitors not logged in to Google accounts) for the purpose of needs-based advertisement and in order to inform other users of YouTube on your activities on our Website. You may object to the creation of user profiles by directly contacting YouTube / Google.

By the implementation of YouTube videos on our Website, you will be enabled to start these videos and to probably use other functionalities of YouTube. We implement YouTube videos in order to improve our Website.

The legal basis for this data processing is Article 6 Subsection 1 Sentence 1 (f) GDPR. Our legitimate interest in the implementation of YouTube videos on our Website is justified by the purposes specified above.

Google LLC and YouTube, LLC., as subsidiary of Google LLC, are certified under the EU U.S. Privacy Shield, cf. https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active#other-covered-entities. Therefore, the data transfer to YouTube / Google is subject to an adequacy decision pursuant to Article 45 Subsection 9 GDPR.

For further information with respect to the purposes and the scope of data collection and data processing by YouTube, please refer to the privacy policy of Google; in this privacy policy, you will also obtain information to your rights and adjustment possibilities with respect to the protection of your privacy: https://policies.google.com/privacy?hl=en&gl=de.

6. Hosting of our Website

Our website is hosted at the following service provider as our processor pursuant to Section 4 Subsection (8) GDPR:

commercetools GmbH
Adams-Lehmann-Str. 44
80797 München
Germany

Any data processing specified in this Privacy Statement regarding your personal data will, therefore, occur via this services provider.

7. Your Rights

You have towards us the following rights with respect to your personal data:


  • The right of access / information pursuant to Article 15 GDPR;

  • the right to rectification pursuant to Article 16 GDPR;

  • the right to erasure pursuant to Article 17 GDPR;

  • the right to restriction of processing pursuant to Article 18 GDPR;

  • In case we process your personal data on the basis of legitimate interests pursuant to Article 6 Subsection 1 Sentence 1 (f) GDPR: the right pursuant to Article 21 GDPR to object to the processing of your personal data either on grounds relating to your particular situation or in case of direct marketing; in Sections 3 and 4 above of this Privacy Statement, we have specified the ways and means by which you can exercise your right to object to data processing we render based on Article 6 Subsection 1 Sentence 1 (f) GDPR; in other cases you can exercise your right to object by sending an e-mail to onlineshop@carhartt-wip.com;

  • the right to data portability pursuant to Article 20 GDPR;

  • the right pursuant to Article 7 Subsection 3 GDPR to withdraw any consent you have given to us with respect to data processing at any time; you may render this right for example by sending an e-mail to onlineshop@carhartt-wip.com or by sending a message to our other contact details specified in Section 1 of this Privacy Statement; such a withdraw effects that we have to discontinue the data processing which is based on your withdrawn consent for the future; however, the withdrawal of your consent will not affect the lawfulness of processing based on the respective consent before its withdrawal;

  • the right pursuant to Article 77 GDPR to lodge a complaint with a supervisory authority; usually, you can, therefore, address the supervisory authority competent for your main residence or for the registered seat of Work in Progress Textilhandels GmbH.

8. Data security

Our website uses for the communication with your web browser the common SSL encryption standard (Secure Socket Layer) in connection with a level of encryption of 256 bit. In case your web browser does not support encryption with 256 bit, our Website will rather use 128-bit v3 technology. Whether a particular page of our Website communicates with your web browser by using these encryption technologies is indicated in the address or status bar of your web browser by a padlock symbol.


We further use appropriate technical and organizational measures to protect your data against accidental or intended manipulations, loss, destruction and against unauthorized access by third parties. We improve these safety measures according to the general technological developments on an ongoing basis.

9. Validity of this Privacy Statement

This Privacy Statement is currently valid and has been created in June 2018.