Privacy policy
1. Scope
1.1 Use of the vitra.com website is subject to the Privacy Policy set out below. This website is a service provided by Vitra Design Museum GmbH, Charles-Eames-Str. 2, 79576 Weil am Rhein, Deutschland (hereinafter „Vitra Design Museum“). Where relevant, Vitra Design Museum is the controller.
1.2 Protecting your personal data is important to us, in particular, with regard to respecting your personal rights in connection with the processing and use of such data. The term “personal data” refers to information regarding the personal and/or factual circumstances of an identified or identifiable natural person. This includes, for example, the person’s name, postal address, email address and/or telephone number, as well as user data such as the IP address. We collect, process, and use your personal data in compliance with the relevant laws.
2. Automated data collection and processing by your browser
2.1 General
As with every website, our server automatically collects the following information and temporarily saves it in server log files, which are transmitted by your browser – unless you have deactivated such function:
- the client’s file request
- the http response code
- the volume of data transmitted
- the website from which you access our website (referrer URL)
- the date and time of the server request
- the type, version and language of your browser
- the operating system on the computer transmitting the request
Our server log files are not evaluated based on personal use. At no time can the provider allocate this data to specific persons. This data is not combined with other data sources.
2.2 Use of Cookies
3. Collection and processing of data provided voluntarily
3.1 Contact form
When you provide us with personal data by email, in our online shop or via the contact form available on our website, this is voluntary. This data is used to fulfil our contractual relationship, to process your inquiries and orders, for our own market or opinion research and for our own advertising by postal mail. Your data will be used for our own advertising by email only if you have given us consent to do so. We delete the data that arises in this context after its storage is no longer required, or we limit processing if there are statutory retention requirements.
Legal basis for processing is Art. 6 Abs. 1 lit. b) GDPR or Art. 6 Abs. 1 lit. f) GDPR.
3.2 Online shop
If you register in our online shop and create a customer profile, we will save the account information you have entered (in particular your name, billing and delivery address, telephone number, payment information and e-mail address) so that you do not have to re-enter your details each time you place an order. You can update or delete your profile at any time. The legal basis for this is Art. 6 para. 1 sentence 1 lit. b GDPR.
3.3 Newsletter
If you would like to subscribe to our newsletter, please provide your valid email address and your country of origin, and confirm that you are in agreement with the following (therefore, legal basis for such processing is your consent):
I agree that Vitra Design Stiftung gGmbH and the companies linked below may process and use the data I have entered to send me an email newsletter to inform me about furniture and home accessories, as well as ongoing company promotions and events. I also agree that Vitra Design Stiftung and the companies linked below may transmit my email address to selected social networks (Facebook, Instagram, LinkedIn, Twitter, Pinterest and Google AdWords) in order to show me personalised advertising. I can find a list of the companies in question here. I can revoke this agreement at any time by sending written notification to Vitra Design Stiftung gGmbH, Charles-Eames-Str. 2, 79576 Weil am Rhein, Germany or to privacy@vitra.com. In the event that I revoke consent, the data I have entered will be deleted at all the companies in question and will no longer be used for sending the newsletter.
(Legal basis: Art. 6 Abs. 1 S. 1 lit a GDPR)
3.4 Storage time
Personal data provided to us via our website will only be stored until the purpose for which it was entrusted to us has been fulfilled. Once the contract has been fully processed, your data will be blocked and deleted after expiry of the tax and commercial law regulations, unless you have expressly consented to any further use of your data. Insofar as mandatory retention periods under commercial and tax law must be observed, certain data may be stored for up to ten years.
4. Transmission to third parties
4.1 General
If you have given us personal data, this will not be passed on to third parties. Any transfer that takes place will only be
- with your consent
- as part of processing your inquiries, your orders and the use of our services to commissioned subcontractors, who only receive the necessary data for the execution of this order and use it for a specific purpose
- as part of order data processing in accordance with the statutory provisions to service providers bound by instructions
- as part of the fulfilment of legal obligations to entities entitled to receive information.
4.2 Newsletter
Newsletter2Go is used as the newsletter software. Your data will be transmitted to Newsletter2Go GmbH. Newsletter2Go is prohibited from selling your data and using it for purposes other than sending newsletters. Newsletter2Go is a German, certified provider that has been selected in accordance with the requirements of the GDPR
Further information can be found here: https://www.newsletter2go.de/informationen-newsletter-empfaenger/
4.3 Payment
As part of the payment processing you have selected in our online shop, your data will be transmitted to third parties as follows:
To process payments by credit card (VISA or Mastercard), we pass on your data to our partner PAYONE GmbH, Fraunhoferstraße 2-4, 24118 Kiel, Germany. In addition to the data relating to your order, dispatch and the desired payment method, we pass on the following categories of personal data to the payment service provider:
- Your name
- Your gender
- Your company name
- Your billing and delivery address
- Your email address
- Your IP address
- Your customer ID
The payment service provider is responsible for your payment data. The legal basis for the transmission is the fulfilment of the contract (Art. 6 para. 1 sentence 1 b) GDPR). We would like to point out that your personal data will be transmitted to other parties necessary for payment processing, in particular to the credit institutions, banks and credit card institutions involved. Your personal data will also be processed there in order to process the payment. For customers from Germany, the payment service provider will also obtain additional information from SCHUFA Holding AG, Kormoranweg 5, 65201 Wiesbaden, Germany ("SCHUFA") and transmit the customer's name, billing address and gender to SCHUFA for this purpose. The legal basis is Art. 6 para. 1 f) GDPR.
4.5 Social Media
On our website you will find links to the social networks Facebook, Twitter, Instagram and YouTube. These are merely links, not social plugins. There is no data transfer.
5. Your rights
5.1 You may receive information about the data we have stored about you and about its origin, recipients or categories of recipients to whom this data is passed on and the purpose of storage – free of charge, at any time without giving reasons.
5.2 In addition, you have the right to correct, block and delete your personal data in accordance with the statutory provisions. If you have given your consent to the use of data, you can revoke this at any time and without giving reasons. If your data is processed on the basis of legitimate interests in accordance, you have the right to object in accordance. You also have the right to data portability. You furthermore have the right to complain to a data protection supervisory authority about our processing of your personal data.
5.3 Please send your requests for information, objections to data processing and other inquiries to Vitra Design Museum GmbH, Charles-Eames-Str. 2, 79576 Weil am Rhein, Germany or by e-mail at privacy@design-museum.de.
5.4 For any questions in connection with data protection, you can also contact our data protection officer who can be reached at dsb@design-museum.de.
Last update: 29.06.2023