Open Nav

Data Protection Information

Data protection information
of About You GmbH, Domstrasse 10, 20095 Hamburg, Germany
Last update: 25.05.2018

Since 25 May 2018, the uniform requirements of the EU General Data Protection Regulation (GDPR) apply throughout Europe in the area of data protection. In the following data protection information we will inform you about the processing of personal data carried out by About You GmbH, Domstraße 10, 20095 Hamburg ("ABOUT YOU" and/or "we" and/or "Controller") in accordance with the GDPR and the German Federal Data Protection Act (BDSG 2018).

Please read our data protection information carefully. If you have any questions or comments about our privacy information, please contact us at

  1. Name and contact details of the Controller
  2. Contact details of the Data Protection Officer
  3. Purposes of data processing, legal bases, and legitimate interests pursued by the Controller or a third party, and categories of recipients
    1. Accessing our websites/applications
      1. Log files
      2. Cookies, Tracking
      3. Use of data for fraud prevention purposes
    2. Data processing for advertising purposes
      1. Mail advertising
      2. Newsletter
      3. Sweepstakes
    3. Online presence and website optimization
      1. Cookies - General Information
      2. Google Analytics
      3. Google Adwords
      4. Google Conversion Tracking
      5. Targeting
        1. Onsite Targeting
        2. Re-targeting
      6. Advertising Partner / Third-Party-Cookies
    4. Establishing contact
  4. Recipients outside the EU
  5. Your rights
    1. Overview
    2. Right to object
    3. Right of withdrawal

1. Name and contact details of the Controller

This data protection information applies to data processing by the

About You GmbH
Domstraße 10
20095 Hamburg
Phone: 0800 / 30 15 085
Email address:

Represented by:

Tarek Müller (Managing Director)
Sebastian Betz (Managing Director)
Hannes Wiese (Managing Director)


for the following websites:

2. Contact details of the Data Protection Officer

The company Data Protection Officer(s) of the Controller can be contacted at

Jentzsch IT
Alsterarkaden 13
20354 Hamburg Germany


3. Purposes of data processing, legal bases, and legitimate interests pursued by the Controller or a third party, and categories of recipients

3.1. Accessing our websites/applications

3.1.1. Log files

Whenever websites/applications are accessed, information is sent to the server of our website/application through the respective Internet browser of your respective terminal device and is temporarily stored in log files. The data records stored in this way contain the following data, which is stored until automatic deletion: Date and time of access, name of the page accessed, IP address of the requesting device, referrer URL (source URL from which you accessed our website), the amount of data transferred, loading time, as well as product and version information of the browser used and the name of your access provider.

The legal basis for processing the IP address is Article 6 (1)(f) GDPR. Our legitimate interest arises from

  • ensuring a smooth connection setup,
  • ensuring a comfortable use of our website/application,
  • analyzing system security and stability.

A direct conclusion as to your identity is not possible on the basis of the information and will not be drawn by us either. The data will be stored and automatically deleted once the aforementioned purposes have been achieved. The standard periods for deletion are based on the criterion of necessity.

3.1.2. Cookies, Tracking

We use so-called cookies, tracking tools and targeting procedures for our website/application. The exact procedures involved and how your data is used for this purpose are explained in detail below.

3.1.3. Use of data for fraud prevention purposes

The data collected when you visit our website may be used to check whether atypical and/or security-related use of our website exists. There is generally a legitimate interest for us in carrying out such a review. The legal basis for processing is Article 6 (1)(f) GDPR.

3.2. Data processing for advertising purposes

3.2.1. Mail advertising

We generally have a legitimate interest in using your data for marketing purposes. We process the following data for our own marketing purposes and for marketing purposes of third parties: first name, last name, postal address, year of birth.

We are also entitled to store further personal data collected about you in compliance with legal requirements for our own marketing purposes as well as for marketing purposes of third parties. The aim is to provide you with advertising that is solely oriented towards your actual or supposed needs so as not to bother you with unnecessary advertising.

The data stored in addition will not be transmitted to third parties. In addition, OTTO pseudonymizes/anonymizes personal data collected about you for the purpose of using the pseudonymized/anonymized data for its own marketing purposes and for marketing purposes of third parties (advertisers).

The pseudonymized/anonymized data can also be used for individualized online advertising, whereby the advertising can be outsourced to third-party service providers and/or agencies. The legal basis for the use of personal data for marketing purposes is Art. 6 (1)(f) GDPR.

Notice of the right to object

You can object to the use of your personal data for the aforementioned marketing purposes at any time free of charge with effect for the future at

If you file an objection, your data will be blocked for any further commercial data processing. We would like to point out that in exceptional cases advertising material may still be sent even after receipt of your objection. This is caused by technical reasons due to the necessary lead time within the selection process and does not mean that we have not implemented your objection.

3.2.2. Newsletter

On our websites/ applications we offer you the possibility to register for our newsletter. In order to ensure that no errors have occurred when entering the e-mail address, we use the so-called double opt-in procedure (DOI procedure): After you have entered your email address in the registration field and given your consent to receive our newsletter, we will send you a confirmation link to the address provided. Only when you click on this confirmation link will your email address be added to our mailing list for sending out our newsletters. The legal basis for this data processing is Article 6 (1)(a) GDPR.

Notice of right to withdraw consent

You may withdraw your consent at any time with effect for the future by sending a message to or by using the unsubscribe option at the end of each newsletter.

3.2.3. Sweepstakes

If you register for sweepstakes organized by ABOUT YOU, we use the data provided during the respective registration for the purpose of performing the participation agreement, in particular to notify you about the prize and, if applicable, to advertise our offers and/or offers of our sweepstake partners. Detailed information can be found in the respective terms and conditions of participation for the respective competition. The legal basis for this data processing is Article 6 (1)(a) GDPR, Article 6 (1)(b) GDPR and Article 6 (1)(f) GDPR.

3.3. Online presence and website optimization

3.3.1. Cookies - General Information

We use cookies on various pages to make your visit to our website attractive, to enable the use of certain functions and to record the use of our website statistically. Cookies are small text files that your browser automatically creates and which are stored on your terminal device (laptop, tablet, smartphone, etc.) when you visit our site. Cookies do no cause damage to your terminal device, do not contain viruses, Trojans or other malware. Information is stored in the cookie that results in each case in connection with the specifically used terminal device. However, this does not mean that we become immediately aware of your identity.

Most of the cookies we use are deleted after the end of the browser session (so-called session cookies). With these we can offer you, for example, the cross-page shopping cart display, where you can read how many articles are currently in your shopping cart and what your current shopping value is. Other cookies remain on your computer and enable us to recognize your computer on your next visit (so-called permanent or cross-session cookies). These cookies in particular serve to make our website user-friendly, more effective and safer. Thanks to these files, it is possible, for example, to display information on the site that is specifically tailored to your interests.

Of course, you can set your browser so that it does not place our cookies on your terminal device. The help function in the menu bar of most web browsers explains how to prevent your browser from accepting new cookies, how to have your browser notify you when you receive a new cookie or how to delete all cookies already received and block them for all others.

To do this, please proceed as follows:

In Internet Explorer:
  1. Select "Internet Options" from the "Tools" menu.
  2. Click on the tab "Privacy".
  3. Now you can make the security settings for the Internet zone. Here you can set if and which cookies should be accepted or rejected.
  4. Confirm your setting with "OK".
In Firefox:
  1. Select Settings from the "Extras" menu.
  2. Click on "Privacy".
  3. Select "Create according to user-defined settings" from the drop-down menu.
  4. Now you can adjust the setting if cookies should be accepted, how long you want to keep these cookies and add exceptions as to which websites you always or never want to allow cookies to be used.
  5. Confirm your setting with "OK".
In Google Chrome:
  1. Click the Chrome menu on the browser toolbar.
  2. Now select "Settings".
  3. Click on "Show advanced settings".
  4. Click on "Content settings" under "Privacy".
  5. Under "Cookies" you can make the following settings for cookies:
    1. Delete cookies
    2. Block cookies by default
    3. Delete cookies and website data by default after exiting the browser
    4. Allow exceptions for cookies from certain websites or domains

However, we would like to point out that in this case you may not be able to use all functions of this website to their full extent.

If these cookies and/or the information contained therein are personal data, the legal basis for data processing is Art. 6 (1)(f) GDPR. Our interest in optimizing our website is to be regarded as justified within the meaning of the aforementioned regulation.

3.3.2. Google Analytics

For the purpose of demand-oriented design and continuous optimization of our pages, we use Google Analytics, a web analysis service provided by Google Inc. ("Google"). Google Analytics uses so-called "cookies", which are text files placed on your computer, to help the website analyze how users use the site. In this context, pseudonymized user profiles are created and cookies are used. The information generated by the cookie about your use of this website such as

  • Browser type/version,
  • Operating system used,
  • Referrer URL (the previously visited page),
  • Host name of the accessing computer (IP address),
  • Time of the server request

On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide the website operator with other services relating to website and Internet use. The IP address transmitted by your browser in the context of Google Analytics is not aggregated with other Google data. You may refuse the use of cookies by selecting the appropriate settings on your browser. However, please note that if you do this you may not be able to use the full functionality of this website. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available under the following link:

As an alternative to the browser add-on, especially for browsers on mobile terminal devices, you can also prevent Google Analytics from collecting data by clicking on this link. An opt-out cookie is set to prevent future collection of your data when you visit this website. The opt-out cookie is only valid in this browser and only for our website and is stored on your device. If you delete the cookies in this browser, you must place the opt-out cookie again. Further information on data protection in connection with Google Analytics can be found on the Google Analytics website.

3.3.3. Google Adwords

Our website uses the Google Adwords service. Google AdWords is an online advertising program from Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google").

We use the remarketing function within the Google AdWords service. The remarketing function enables us to present advertisements based on users' interests to users of our website on other websites within the Google display network (on Google itself, so-called "Google ads" or on other websites). For this purpose, the interaction of users on our website is analyzed, for example which offers the user was interested in, in order to be able to display targeted advertising to users also on other pages, even after visiting our website. To do this, Google stores a number in the browsers of users who visit certain Google services or websites on the Google Display Network. This number, known as a "cookie", is used to record the visits of these users. This number is used to uniquely identify a web browser on a particular computer and not to identify a person; personal data is not stored. The legal basis for this data processing is Article 6 (1)(f) GDPR.

3.3.4. Google Conversion Tracking

Furthermore, we use the so-called Conversion Tracking when using the Google AdWords service. When you click on an ad served by Google, a conversion tracking cookie is placed on your computer/terminal device. These cookies lose their validity after 30 days, do not contain any personal data and are therefore not used for personal identification. The information collected using the conversion cookie is used to generate conversion statistics for AdWords customers who have opted for conversion tracking.

The legal basis for this data processing is Article 6 (1)(f) GDPR.

You may prevent the storage of cookies by adjusting your browser software accordingly; however, we would like to point out that in this case you may not be able to use all functions of this website to their full extent. In addition, you can disable interest-based ads on Google and interest-based Google ads on the web (within the Google display network) in your browser by clicking the "Off" button at or by disabling them at For more information about your choices and privacy at Google, please visit

3.3.5. Targeting

The so-called targeting measures listed below and used by us are carried out on the basis of Article 6 (1)(f) GDPR. We use the targeting measures that are used to ensure that only advertising that is oriented towards your actual or supposed interests is displayed on your terminal devices and that you are not disturbed by advertisements that are not of any interest to you. Onsite Targeting

Our website uses cookies to collect and evaluate information for the optimization of advertisements. This information includes, for example, information about which products you have viewed on our websites/applications. The collection and evaluation is exclusively pseudonymous and does not enable us to identify you. In particular, the information is not aggregated with personal data about you. On the basis of this information, we can show you offers on our page that are specifically geared to your interests, as they result from your previous user behavior. Re-targeting

We also use re-targeting technologies from external service providers, such as the Pixel of Facebook Ireland Limited. Re-targeting enables us to make our online offer more interesting for you by tailoring it to your needs. This enables us to target on the websites of our partners those users with online advertising who are already interested in our shop and our products.

From studies we know that the insertion of personalized, interest-related advertising is more interesting for the Internet user than advertising that has no such personal reference.

For this purpose, a cookie is set with which interest data is collected using pseudonyms. This information is used to display interest-related advertisements for our offers on our partners' websites. No directly personal data will be stored and no user profiles with personal data will be aggregated to you.

You have the option of deactivating the collection of data for the purpose of personalized advertising. A cookie is then set which permanently prevents the collection of data, unless you delete this cookie in your browser specifically or via the "Delete all cookies" function. You can repeat the objection at any time.

3.3.6. Advertising Partner / Third-Party-Cookies

We work together with advertising partners to make the online offer on our site even more interesting for you. For this purpose, cookies are also set by our advertising partners when you visit our site (so-called third party cookies). The cookies of our advertising partners also store, by using pseudonyms, information about your user behavior and your interests when you visit our site. In some cases, information is also collected that arose on other sites before visiting our site. This information is used to display interest-related advertisements from our advertising partners. No personal data will be stored and no user profiles will be aggregated with personal data.


Doubleclick by Google is a service of Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA ("Google"). Doubleclick by Google uses cookies to show you relevant advertisements. Your browser will be assigned a pseudonymous identification number (ID) to check which ads have appeared in your browser and which ads have been viewed. The cookies do not contain any personal information. Using the DoubleClick cookie allows Google and its affiliate websites to serve ads based on previous visits to our or other websites on the Internet. The information generated by the cookies is transmitted by Google for evaluation to a server in the USA and stored there. A transfer of the data by Google to third parties takes place only due to legal regulations or in the context of order data processing. In no case will Google match its data with other data collected by Google.

You may prevent the collection by Google of the data generated by the cookies and related to your use of the Website and the processing of such data by Google by downloading and installing the browser plug-in available under the DoubleClick Deactivation Extension link below.

The legal basis for data processing is Art. 6 (1)(a) and (f) GDPR.

You can also prevent the interest-based advertising insertion of our advertising partners by means of a corresponding cookie setting in your browser or by clicking here.

The legal basis for data processing is Art. 6 (1)(a) and (f) GDPR.

3.4. Establishing contact

You have the possibility to contact us in several ways. By e-mail, by phone or by mail. When you contact us, we use the personal data that you voluntarily provide to us in this context solely for the purpose of contacting you and processing your request. The legal basis for this data processing is Article 6 (1)(a), Article 6 (1)(b), Article 6 (1)(c) GDPR and Article 6 (1)(f) GDPR.

4. Recipients outside the EU

With the exception of the processing described above, we will not pass on your data to recipients based outside the European Union or the European Economic Area. The processing mentioned contains a data transmission to the servers of the providers of tracking technologies contracted by us. These servers are located in the USA. Data is transmitted on the basis of so-called standard contractual clauses of the EU Commission and based on the principles of the so-called Privacy Shield.

5. Your rights

5.1. Overview

In addition to the right to withdraw your consent given to us, you have the following further rights if the respective legal requirements are met:

  • the right to obtain information about your personal data stored by us (Art. 15 GDPR), in particular you can request information about the purposes of processing, the category of personal data, the categories of recipients to whom your data was or will be disclosed, the intended storage period, the origin of your data, if this was not collected directly from you;
  • the right to rectify inaccurate data or have correct data completed (Art. 16 GDPR);
  • the right to delete your data stored by us (Art. 17 GDPR), provided that no legal or contractual retention periods or other legal obligations or rights for further storage are to be observed by us;
  • the right to restrict the processing of your data (Art. 18 GDPR) to the extent that the accuracy of the data is disputed by you, the processing is unlawful but you refuse its deletion; the data controller no longer needs the data, but you need them to assert, exercise or defend legal claims or you have lodged an objection against the processing in accordance with Art. 21 GDPR;
  • the right to data transferability in accordance with Art. 20 GDPR, i.e. the right to receive selected data stored by us about you in a common, machine-readable format, or to request transmission to another controller;
  • the right of appeal to a supervisory authority. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or our company headquarters.

You can assert the aforementioned rights to which you are entitled in relation to us at

5.2. Right to object

Under the requirements of Art. 21 (1) GDPR, data processing may be objected to for reasons arising from the particular situation of the data subject.

The foregoing general right to object applies to all processing purposes described in this Data Protection Information which are processed on the basis of Article 6 (1)(f) GDPR. In contrast to the special right to object to data processing for advertising purposes we are obliged under the GDPR to implement such a general objection only if you give us reasons of overriding importance (e.g. a possible danger to life or health).

5.3. Right of withdrawal

Insofar as we process data on the basis of a consent given by you, you have the right to withdraw the consent given at any time. The withdrawal of the consent does not invalidate the data processing carried out on the basis of the consent up to the time of the withdrawal.

Sounds Interesting?

Get in touch
See why Serial Entrepreneur and Online Marketing Mastermind Tarek Müller prefers Backbone
See Interview
Get in touch