Privacy Policy

Date: 09.22.2023
This Privacy Policy (“Policy”) applies to anyone who visits Stylight’s websites and any other platforms Stylight owns or controls and makes available (collectively, the “Sites”). Stylight provides end users (“Users”) with free information relating to online offers for products and services (“Offers” or “Services”) supplied by third parties on the Sites. This Policy describes the information that Stylight collects from the Services and Users, including registered users (“Members”) and visitors (whether Members of not) to the Sites (“Visitors”) (collectively, “you”, “your”, or “Users”). The protection of personal data is a matter of trust, and your trust is extremely important to Stylight. It is therefore Stylight’s priority to protect any personally identifiable information (“Personal Information”) that we obtain from and about you and your person, both online and offline. Stylight observes laws and regulations for handling personal data, as explained further in this Policy.

1. Responsible Party

Any personal data about Users provided to or gathered by the Services is controlled by Stylight Inc., 1900 Market Street, 8th Floor, PA 19103 Philadelphia (“Stylight”, “we”, “our”, or “us”). Exceptions are explained in this Policy.

 

2. Revocation of Consent

You may withdraw your consent to the use of Cookies in any way at any time. You can update your preferences by changing your selection in the Privacy Settings. If you withdraw use of our consent, our use of your personal data prior to your withdrawal remains lawful. 

CHILDREN:  Stylight will not knowingly market its Services to children, and their consent will be deemed revoked or withdrawn. Stylight’s Services are not designed for use by children under 13 years old. Children under 13 are not allowed to register with Stylight or use its Services or submit personal data through its Services. We do not knowingly collect personal data from anyone under the age of 13. If you have any reason to believe that anyone under the age of 13 has provided their Personal Information to us, please contact us as specified below, and we will work to delete that information from our databases as soon as possible.

 

3. Collection, Processing, and Use of Personal Information

3.1. General Information

“Personal Information,” as used in this Policy, is any information relating to an identified or identifiable natural person, including, but not limited to, name, address, telephone number, date of birth, and email address. For purposes of this Policy, Stylight collects, stores, uses, transmits to others, or deletes Personal Information which is reasonably necessary to operate the Sites. Stylight does not collect Personal Information related to race, gender, national origin, or sexual determination, except as otherwise provided on a voluntary basis or as required by applicable law.

You may use Stylight’s Sites without providing Personal Information. However, the use of certain Services, such as registration or participation in competitions, may require you to provide Personal Information. Mandatory information is regularly identified with an (*). If you do not wish to provide Stylight with your Personal Information, you will be unable to use those Services.

3.2. Processing Purposes and Legal Basis for the Processing

We process your Personal Information for the following purposes and legal bases. Generally, protected data is used based on your consent or on a legitimate interest. In the event that the data processing is based on the legal basis of a legitimate interest (“Legitimate Interest”), such information will be provided.

Processing Purpose


Verarbeitungszwecke

Legal Basis and Statement of Legitimate Interest, if Relevant

Rechtsgrundlage der Verarbeitung sowie Darlegung des berechtigten Interesses, soweit relevant

Rechtsgrundlage der Verarbeitung sowie Darlegung des berechtigten Interesses, soweit relevant

Provision of these Offer, according to our Terms of Use

Bereitstellung dieses Online-Angebots gemäß unseren Nutzungsbedingungen/ AGB

Bereitstellung dieses Online-Angebots gemäß unseren Nutzungsbedingungen/ AGB

Contract fulfillment

Vertragserfüllung

Personalization of the Offer

Personalisierung des Angebots

Personalisierung des Angebots

Legitimate Interest: we have a legitimate interest in adapting the Offer to your preferences, to the extent described, in order to provide you with the best possible user experience

Interessenabwägung; wir haben ein berechtigtes Interesse, das Online-Angebot im beschriebenen Umfang an Ihre Präferenzen anzupassen um Ihnen ein bestmögliches Nutzungserlebnis bieten zu können

Interessenabwägung; wir haben ein berechtigtes Interesse, das Online-Angebot im beschriebenen Umfang an Ihre Präferenzen anzupassen um Ihnen ein bestmögliches Nutzungserlebnis bieten zu können

Analysis of the Offer to determine User behavior, including market research and web analysis

Analyse des Angebots zur Ermittlung von Nutzungsverhalten einschließlich Marktforschung und Reichweitenmessung („Web-Analyse“).

Analyse des Angebots zur Ermittlung von Nutzungsverhalten einschließlich Marktforschung und Reichweitenmessung („Web-Analyse“).

Legitimate Interest: we have a legitimate interest in analyzing the usage behavior of our online Services to continuously adapt and improve the Services for our Users

Recording and evaluating usage behavior for interest-based advertising, including for third parties

Analyse des Angebots zur Ermittlung von Nutzungsverhalten einschließlich Marktforschung und Reichweitenmessung („Web-Analyse“).

Analyse des Angebots zur Ermittlung von Nutzungsverhalten einschließlich Marktforschung und Reichweitenmessung („Web-Analyse“).

Legitimate Interest: we and other advertisers have a legitimate interest in utilizing interest-based advertising to provide Users with personalized advertising

Stylight and third-party advertising, to the extent permitted by law and based on content

Eigen- und Fremdwerbung im gesetzlich zulässigen Umfang bzw. einwilligungsbasiert

Eigen- und Fremdwerbung im gesetzlich zulässigen Umfang bzw. einwilligungsbasiert

Consent or Legitimate Interest: we have a legitimate interest in direct marketing done in accordance with data protection and competition laws

Einwilligung oder Interessenabwägung; wir haben ein berechtigtes Interesse an Direktmarketing, solange dies im Einklang mit datenschutz- und wettbewerbsrechtlichen Vorgaben erfolgt.

Conducting competitions in accordance with respective competition conditions

Durchführung von Gewinnspielen gemäß den jeweiligen Gewinnspielbedingungen.

Durchführung von Gewinnspielen gemäß den jeweiligen Gewinnspielbedingungen.

Performance of contractual obligations

Sending email newsletters, without registration, regarding Stylight’s Offers

Versand eines E-Mail-Newsletters zu eigenen Angeboten ohne Anmeldung.

Versand eines E-Mail-Newsletters zu eigenen Angeboten ohne Anmeldung.

Legitimate Interest: we have a legitimate interest in direct marketing to the extent that such marketing and advertisement does not require consent under American, European and German competition law

Integrating social plugins and social media share functions

Einbindung von Social Plugins und Social Share-Funktionen.

Einbindung von Social Plugins und Social Share-Funktionen.

Legitimate Interest: we have a legitimate interest in sharing information with the corresponding social media networks at the request of our Users who have activated a social plugin

Providing a login via social media networks (“Social Networks Registration”)

Bereitstellung eines Logins über soziale Netzwerke (Social Sign In).

Bereitstellung eines Logins über soziale Netzwerke (Social Sign In).

Performance of contractual obligations

Identifying faults and ensuring system security, including detecting, tracking, and addressing unauthorized access and attempted access to our web servers

Ermittlung von Störungen und Gewährleistung der Systemsicherheit einschließlich Aufdeckung und Nachverfolgung unzulässiger Zugriffe und Zugriffsversuche auf unsere Web-Server.

Ermittlung von Störungen und Gewährleistung der Systemsicherheit einschließlich Aufdeckung und Nachverfolgung unzulässiger Zugriffe und Zugriffsversuche auf unsere Web-Server.

Performance of contractual obligations to comply with data security.

Legitimate Interest: we have a legitimate interest in the elimination of faults, the guarantee of system security, and the detection and tracking of unauthorized attempted access or accesses 

Complying with statutory storage obligations and other legal obligations, such as in connection with tax audits

Einhaltung gesetzlicher Aufbewahrungspflichten und sonstiger rechtlicher Verpflichtungen (z. B. im Zusammenhang mit Betriebsprüfungen).

Einhaltung gesetzlicher Aufbewahrungspflichten und sonstiger rechtlicher Verpflichtungen (z. B. im Zusammenhang mit Betriebsprüfungen).

Performance of legal obligations, especially with regard to the retention of certain information and in connection with tax compliance and audits

Protecting and defending our rights

Wahrung und Verteidigung unserer Rechte 

Wahrung und Verteidigung unserer Rechte 

Legitimate Interest: we have a legitimate interest in asserting, protecting, and defending our rights

Upon request, Users may receive further information from Stylight regarding the balancing of interests made within the scope of the legal basis of our Legitimate Interests. Our contact information appears in Section 17 at the end of this Policy. 

Please note your right to object to the processing of Personal Information for the purposes of direct marketing or for personal reasons. For more information, see Section 14 of this Policy.

3.3. Registration

Users who want to take advantage of Services that require a contract will be asked to register. During the registration process, we will collect your Personal Information as required for the conclusion and performance of the contract between you and Stylight, including, but not limited to, first name, last name, date of birth, email address, details of desired payment methods or account holder, if applicable, as well as any other Personal Information provided on a voluntary basis. Mandatory information is marked with a (*).

3.4. Transfer of Personal Information to Third Parties

In general, Users’ Personal Information will only be given to third parties if:

a) Such provision is necessary for the fulfilment of the contract;
b) Stylight or the third party has a Legitimate Interest in the transfer of such information;
c) Stylight receives the User’s consent; or
d) Such transfer is necessary to fulfill a legal obligation.

Stylight may disclose Personal Information to a third party in certain instances, including:

i) If Stylight should be required to do so due to legal requirements, or by an enforceable official or court order in individual cases;
ii) In connection with legal disputes (disclosed to courts or our lawyers) or audits (disclosed to auditors);
iii) In connection with possible criminal acts, disclosed to the competent investigating authorities; and
iv) In the event of a sale of the business, disclosed to the purchaser.

In addition, we share Personal Information with providers of tools for creating and displaying interest-based advertising, and in individual cases, with providers of analytical tools. More information about these providers can be found in the Consent Management Platform (“CMP”) of our Privacy Settings.

Should Personal Information be regularly transferred to other third parties, explanation will be provided in this Policy; however, in the case of a transmission based on User consent, the explanation may also be provided when consent is obtained.

3.5. Transfer of Personal Information to Service Providers

Stylight reserves the right to use service providers (“Service Providers”) for the collection or processing of Personal Information. Service Providers only receive the Personal Information they need for a User’s specific activity. For example, a User’s email address may be transmitted to a Service Provider for the dissemination of a newsletter requested by the User. Service Providers may also be commissioned to provide server capacity. Service Providers are usually integrated as so-called order processors, who may only process the Personal Information of Users of this online service according to Stylight’s instructions. More information about Service Providers may be found in our CMP.

3.6. Transfer of Personal Information to Non-European Economic Area Countries

Stylight also provides personal data to third parties or processors based in non-European Economic Area (“EEA”) countries. In this case, we will ensure, prior to disclosure, that the recipient either has an adequate level of data protection (for example, based on an adequacy decision of the EU Commission for the respective country pursuant to Art. 45 GDPR, the European Union privacy directive, through self-certification of the recipient for the EU-US Privacy Shield in conjunction with the corresponding adequacy decision of the Commission pursuant to Art. 45 GDPR – or a substitute to the Privacy Shield, if available – or the agreement of so-called EU standard contractual clauses of the European Commission with the recipient pursuant to Art. 46 GDPR) or that our Users have given their express consent. 

There are third parties or contract processors in the following countries: United States of America.

Stylight can provide Users with an overview of the third-party recipients in these countries, as well as a copy of the agreed-upon regulations to ensure the appropriate level of data protection.

3.7. Duration of Storage and Retention Periods 

Stylight stores Users’ Personal Information for as long as necessary to provide our Offers and associated Services, unless Stylight has a Legitimate Interest in further storage. In all other cases, Stylight will delete your Personal Information, with the exception of data that we must retain to comply with statutory retention periods, such as invoices governed by tax and commercial law. 

We block any Personal Information that is subject to a retention period (“Retention Period”) until the expiration of the period. The following retention periods apply to the Personal Information processed within the framework of Stylight’s Services:

a) Log files: seven (7) to ten (10) calendar days.

 

4. State Law Data Protection

State law usually protects users, residents, or consumers from a particular state but there can be exceptions. This Section 4 contains specific protections we apply under the state laws discussed below, in addition to the general privacy protections outlined in this Privacy Policy.

Some jurisdictions provide consumers or certain other users with special rights which we respect. In this document, we disclose information about certain state rights and our general privacy policy and your rights. Depending on the particular issue and situation, we protect your Personal Information under California, Colorado, Connecticut, Delaware, Nevada, Virginia, Utah or other state privacy laws, under some aspects of U.S. federal law, and under the generally stricter European data protection law. In the interest of transparency, we state the options you have as well. In the event of conflicts between laws, we strive to implement the stricter rules that protect your privacy and Personal Information.

4.1. California Disclosure

This section of the Privacy Policy applies to California residents only. It sets out certain information about Stylight’s collection, use, and disclosure of Personal Information, and the rights granted to California residents under the California Consumer Privacy Act (“CCPA”) and how Stylight will respond to options you select.

Categories of Personal Information collected by Stylight include:

  • Identifiers, including contact information or other unique personal identifiers such as IP address or Cookies;
  • Internet or other electronic network activity, such as browsing history; and
  • Other inferences derived from Personal Information, including geographic location.

This Personal Information is collected in accordance and with the reasoning provided in Section 3. We collect the Personal Information listed above directly from Users and devices or from third parties, such as social media networks, Partners, and other analytics providers. This Personal Information may be shared with third parties as described in Section 3. We do not sell Personal Information about you to other companies for money. We do allow some third parties, such as advertising partners, to collect information about your website activity via technologies on the Sites, such as Cookies. This is used to provide you with targeted advertising. You may exercise control over the use of these technologies. See Section 6 for more information.

The California Consumer Privacy Act of 2018 as amended (CCPA) gives California consumers more control over the personal information that businesses collect about them and the CCPA regulations provide guidance on how to implement the law. This law secures privacy rights for California consumers, including:

  • The right to know about the personal information a business collects about them, how it is used and shared, and to limit the use and disclosure of sensitive personal information;
  • The right to opt out of, or the sale of, personal information;
  • The right to delete and  correct personal information collected from them (with some exceptions);
  • The right to opt-out of the sale of their personal information; and
  • The right to non-discrimination for exercising their CCPA rights.
  • The right to complain to the California supervisory authority if you believe that your rights are infringed.

These rights overlap with those under the generally stricter rules that we practice and are stated below. In addition, California consumers may ignore provisions of this privacy policy they believe may conflict with the CCPA. They may also take advantage of those CCPA provisions that are not listed below.

As a California resident, you have the following rights in relation to your information:

  1. the right to know, by requesting our disclosure of, Personal Information collected by us about you, from whom it was collected, why it was collected, and, if sold, to whom;
  2. the right to delete Personal Information collected from you;
  3. the right to opt-out of the sale of Personal Information;
  4. the right to opt-in to the sale of Personal Information of visitors under the age of 16 (if we permit such persons to use the Site);
  5. the right to non-discriminatory treatment for exercising any rights;
  6. the right to initiate a private cause of action for data breaches;
  7. the right to correct inaccurate Personal Information;
  8. the right to limit use and disclosure of sensitive Personal Information.

Access and Correct Your information: Twice in any twelve (12)-month period, you have the right to request access to the Personal Information we have collected about you in the past twelve (12) months. We will assemble the Personal Information and send it to you upon receipt of a verifiable request per the instructions below. If you also request the correction of your data, we will respond as required by law and notify you upon deletion.

Shine the Light: You may have the right to request that Stylight provide you with information about the entities with which we have shared certain categories of your Personal Information for the entities’ own direct marketing purposes. Stylight has not shared such information for third parties’ direct marketing purposes.

Deletion: You may request that we delete the Personal Information we have collected about you. We will delete your information as required upon request. We may retain certain Information as required or permitted by applicable law. 

Any inquiries to us for the deletion, correction, revocation of consent, or required release of information to you under the CCPA should be directed to our data protection officer and/or Data Protection Coordinator:

Data protection Officer:                       Stylight Inc.

                                                         1900 Market Street, 8th Floor

                                                         Philadelphia, PA 19103

                                                         Email: epost@datenschutz-agentur.de

 
Date Protection Coordinator:               Stylight Inc.

                                                         1900 Market Street, 8th Floor

                                                         Philadelphia, PA 19103

                                                         Email: dataprivacy@stylight.com

You will need to provide your name, contact information (including your California postal address), and a clear message in English that identifies your request so that the data protection officer can respond to you.  You should disclose the state where you use the Sites as a consumer or resident so that we can abide by the specific rights and options that apply to you. 

Opt-out of Cookies: You have the right to manage Cookies as described in Section 6. When you opt out, we will honor your selection but will not send you a confirmation.

4.2. Colorado Privacy Act

We strive to abide by the Colorado Privacy Law and you enjoy certain rights, including a right to opt out of the processing of Personal Information for targeted advertising, for their sale, for certain profiling; you may authorize another person to exercize your rights. You also have a right to access your Personal Information, to correct it and to delete it. We are required to ensure data portability and to respond to consumer requests. We comply with the requirement of de-identifying your Personal Information and strive to minimize the use of Personal Information.

4.3. Connecticut Data Privacy Law

You have the right to:

  1. Confirm whether or not a controller is processing your Personal Information and access such Personal Information, unless such confirmation or access would require us to reveal a trade secret;
  2. correct inaccuracies in your Personal Information, taking into account the nature of the Personal Information and the purposes of the processing of your Personal Information;
  3. delete Personal Information provided by, or obtained about, you;
  4. obtain a copy of your Personal Information processed by us, in a portable and, to the extent technically feasible, readily usable format that allows you to transmit the Personal Information to another controller without hindrance, where the processing is carried out by automated means, provided we shall not be required to reveal any trade secret; and
  5. opt out of the processing of the Personal Information for purposes of
  • targeted advertising,
  • the sale of Personal Information, except as provided under Connecticut law, or
  • profiling in furtherance of solely automated decisions that produce legal or similarly significant effects concerning the consumer. We also strive to comply promptly with all other requirements, procedural and substantive, of the law as it apply between us and you or your authorized representative.

4.4. Delaware Personal Data Privacy

This section of the Privacy Policy applies to Delaware residents only. It sets out certain information about Stylight’s collection, use, and disclosure of Personal Information, and the rights granted to Delaware residents under the Delaware Online Privacy and Protection Act (“DOPPA”).

Pursuant to DOPPA, Stylight agrees to the following:

  • Users may visit the site anonymously;
  • This Privacy Policy shall be made conspicuously available through a hyperlink on our home page or first significant page after entering the Site;
  • Our Privacy Policy includes the word “Privacy” and may easily be found our home page. Any changes to the Privacy Policy will be made conspicuous on the Privacy Policy page.

Delaware law requires that we identify the Personal Information collected, offer users an opportunity to review and change data, describe the notification process for changes in the Privacy Policy, identifies third parties to the information, and include an effective date. In particular, it also protects your rights with respect any Do Not Track request that you may have. These protections are reflected in our general policy, and to the extent the general terms and conditions of Stylight’s Privacy Policy conflicts with stronger rights that apply to a user under Delaware law, we will abide by its provisions for the enforcement and protection of your rights.

4.5. Nevada Online Data Privacy and Security

We apply our Privacy Policy to comply with the terms of the Nevada online privacy statute and, in the event that the statute applies to you, we will abide by its provisions for the enforcement and protection of your rights.

If you are a Nevada resident, you have the right the right to request the following Personal Information from Stylight regarding the collection and sale of your Personal Information acquired through your visit to the Site or use of Stylight’s Services:

  1. First and last name;
  2. Home or other physical address, which includes the name of a street and the name of a city or town;
  3. Email address;
  4. Telephone number;
  5. Social security number;
  6. Identifiers that allow a specific person to be contacted, either physically or online; and
  7. Any other information concerning a person collected from the person through the Internet or Service and maintained by the operator incombination with an identifier in a form that makes the information personally identifiable.

This Personal Information is collected in accordance with the reasoning provided in Section 3. We collect the Personal Information listed above directly from Users and devices or from third parties, such as social media networks, Partners, and other analytics providers. This Personal Information may be shared with third parties as described in Section 3. We do not sell Personal Information about you to other companies for money. We do allow some third parties, such as advertising partners, to collect information about your website activity via technologies on the Sites, such as Cookies. This is used to provide you with targeted advertising. You may exercise control over the use of these technologies. See Section 6 for more information.

While we generally do not profit from collected above-defined Personal Information, under Nevada law, you have the right to direct Stylight not to sell or license this Personal Information to third parties. If you would like to review, correct, or update your Personal Information, you may make a verifiable request to the following: 

Data protection Officer:                       Stylight Inc.

                                                         1900 Market Street, 8th Floor

                                                         Philadelphia, PA 19103

                                                         Email: epost@datenschutz-agentur.de

 
Date Protection Coordinator:               Stylight Inc.

                                                         1900 Market Street, 8th Floor

                                                         Philadelphia, PA 19103

                                                         Email: dataprivacy@stylight.com

Such request shall include your full name, your email address, and a Nevada postal address. We will respond to your verified request as soon as reasonably practicable, but no later than sixty (60) days after receipt. We will notify you of any delay in our response and will provide a date of our response.

4.6. Virginia Consumer Data Protection Act

Under Virginia law, consumers enjoy special rights to transparency, correction, deletion, requests for data, appeal, opting out of the processing and sale of Personal Information in addition to the terms of our general Privacy Policy. In the event that the statute applies to you, we will abide by its provisions for the enforcement and protection of your rights. In addition, we are required to perform assessments of our practices which we do from time-to-time.

4.7. Utah Consumer Privacy Act

After December 31, 2023, we will also comply with the Utah Consumer Privacy Act. Before then, your Personal Information is protected by the general terms of this Privacy Policy.

4.8. Laws Effective in 2024

We update our Privacy Policy and practices regularly. In 2024, our policy will reflect new laws as they become effective in Florida, California, Washington, Oregon, Texas, Montana, Iowa, Tennessee, and Indiana and as they apply to consumers and other protected persons using our Sites. Before then, your Personal Information is protected by the general terms of this Privacy Policy.

4.9. Federal Law

Please note that we comply with federal law as well. While there presently is no general privacy law at the federal law, the Trade Commission Act  prohibits unfair or deceptive trade practices, including practices that violate consumers' privacy. Similarly, privacy protection is built into the Children’s Online Privacy Protection Act requires websites and online services that target children under the age of 13 to obtain parental consent before collecting personal information from those children. We do not target such children and do not permit their use of our Sites.

Any inquiries to us for the deletion, correction, revocation of consent, or required release of information to you under these laws should be directed to our data protection officer and/or Data Protection Coordinator:

Data protection Officer:                       Stylight Inc.

                                                         1900 Market Street, 8th Floor

                                                         Philadelphia, PA 19103

                                                         Email: epost@datenschutz-agentur.de

 
Date Protection Coordinator:               Stylight Inc.

                                                         1900 Market Street, 8th Floor

                                                         Philadelphia, PA 19103

                                                         Email: dataprivacy@stylight.com

You will need to provide your name, contact information, and a clear message in English that identifies your request so that the data protection officer can respond to you.  You should disclose the state where you use the Sites as a consumer or resident so that we can abide by the specific rights and options that apply to you.

 

5. Log Files

Whenever you use the Internet, your Internet browser automatically transmits certain information. Stylight stores this information for seven (7) to ten (10) calendar days to determine malfunctions and for other related security reasons, such as to clarify attempted attacks. At the end of this period, this information is deleted. However, log files whose further storage is required for evidentiary purposes (“Log Files”) are excluded from deletion until the respective incident has been fully investigated and resolved and can be transmitted to government agencies.

The following information is stored in the Log Files: 

a) Internet Protocol (“IP”) address of the terminal device from which the Offer is accessed;
b) Internet address of the website (“Origin URL” or “Referrer URL”) from which the Services were accessed;
c) Name of the service provider through which the Services are accessed; 
d) Name of the files or information received; 
e) Date, time, and duration of the access; 
f) Volume of data transferred; 
g) Operating system and information on the Internet browser used, including installed add-ons, such as Flash Player; and 
h) Hypertext Transfer Protocol (“HTTP”) status code, such as “request successful” or “requested file not found”. 

Log Files are also used for web-analysis.


6. Cookies and Tracking Technologies

Stylight’s Offers use cookies and comparable tracking technologies (collectively, “Cookies”).

6.1. What are Cookies?

Cookies are small text files sent when a website is visited, and are stored in the User’s browser. If the corresponding website is revisited, the User’s browser returns the contents of the Cookies, enabling the User to be recognized. Certain Cookies are automatically deleted at the end of the browser session (“Session Cookies”), while others are stored in the User’s browser for a specified time, or permanently, and then are deleted automatically (“Temporary Cookies” or “Permanent Cookies”) 

6.2. What Personal Information is Stored in the Cookies?

Generally, no Personal Information, including, but not limited to, names, email-addresses, or IP addresses, is stored in Cookies. Instead, Cookies typically contain a code (“Identifier”) as well as information on the storage period and possibly also certain technically features, such as security functions. However, Cookies may be used to create User profiles.

6.3. How can Users Adjust or Delete Cookies and Their Settings?

With the exception of essential Cookies (“Essential Cookies”), we only use Cookies with Users’ consent. You may grant this consent via our CMP and subsequently revoke it at any time by configuring your Privacy Settings.

Users may also delete stored Cookies in their browser at any time. Please note, however, that the Services may not function properly or only to a limited extent without Cookies. Instructions for Browsers include:

6.4. What Cookies do we Use?

Essential Cookies:
These Cookies, and other such similar information, are essential to the functioning of Stylight’s Services. They guarantee that our Services are secure and work as Users want it to. Therefore, Essential Cookies cannot be deactivated. 

Functional Cookies:
Stylight aims to make its Services as good as possible for its Users and is constantly improving its Services and User experience. Functional Cookies allow us to analyze the use of the Services and evaluate them in their statistical form.

Marketing Cookies:
In order to make the Services even more personal, Stylight uses these cookies and other information to provide personalized recommendations and advertising and to enable interaction with social networks.

Marketing Cookies are set by us and our advertising partners. This enables us and our partners to display personalized advertising to Users of our Services based on a cross-site and cross-device analysis of Users’ usage behaviors. The data collected with the help of the Cookies can be merged by us and our partners with data from other websites. Some of our partners are based in countries outside the European Economic Area, such as the United States and Canada.

If you do not agree to these Cookies or deactivate them subsequently, you will only be shown advertisements that may be less relevant to you.

 

7. Web and App Analysis

7.1. Web-Analysis

Stylight requires statistical information about the use of our Services in order to make them more user-friendly, to measure reach, and to conduct market research. 

Stylight uses analysis tools for this purpose. The usage profiles (“User Profiles”) created by the tools with the hselp of Functional Cookies and by evaluating the Log Files are not combined with Personal Information. The tools either do not use IP addresses of the Users at all, or they shorten them immediately after collection. 

As a rule, the providers of the tools process data only as contact processors in accordance with our instructions and not for their own purposes. 

You may prevent the creation of User Profiles for analysis purposes by not granting consent to the use of Functional Cookies in our Content Management Platform (CMP) or by revoking such consent. Users will find further information on the providers of the tools used in the CMP which is accessible in the Privacy Settings.

7.2. Recording and Evaluation of User Behaviors for Internet-Based Advertising, Including by Third Parties

Stylight would like to present to Users of the Services advertising or special offers tailored to their interests (“Internet-Based Advertising”) and to limit the frequency with which certain advertising is displayed. 

The User Profiles created by the tools using Marketing Cookies are not combined with Personal Information. The tools either do not process IP addresses of Users at all or shorten them immediately after collection. The providers of the tools may also transmit information to third parties for the above-mentioned purposes. 

Users can prevent the creation of User Profiles for Internet-Based Advertising by not granting consent to the use of Marketing Cookies in our Content Management Platform (CMP) or by revoking such consent. This does not disable advertising. If Marketing Cookies are disabled, this only means that no Internet-Based Advertising based on User’s usage behavior may be displayed. More information on the providers of such tools can be found in the CMP, as accessible in the Privacy Settings

Further information regarding Interest-Based Advertising is available on the consumer portal of www.meine-cookies.org. Users may also view the status of activation regarding tools from different providers and to object to the collection or evaluation of your data by these tools at: http://meine-cookies.org/DDOW/dokumente/DDOW_%20OBA-SR_Kodex_1st.pdf.

For more information regarding interest-based advertisement please consult the User Portal at www.meine-cookies.org. The link supplied below  also gives access to the most updated information regarding activation possibilities with relation to various Tools suppliers and on how to opt out from your data being collected and/or evaluated by these Tools: www.youronlinechoices.com/de/praferenzmanagement

A central objection option for various tools, especially those provided by U.S. providers, is also available at the following link: optout.networkadvertising.org

Our partners and we ourselves use Cookies to understand the interests of our visitors and to provide Users with relevant content and advertising.

 

 

7.3. App Analysis

Stylight requires statistical information about the use of our Services in order to make them more user-friendly, to measure reach, and to conduct market research. For this purpose, we use various analysis tools. The usage profiles created by the tools by evaluating the log files are not combined with personal data. The providers of the tools process data only as contract processors according to our instructions and not for their own purposes. The tools either do not use IP addresses of Users at all or shorten them immediately after collection. For each tool, you will find information from the respective provider and how you can object to the collection and processing of data by the tool. 

7.4. Advertising ID (App)

Stylight uses so-called Advertising Identifiers (“Advertising ID”), which are provided by the operating system of your mobile device for advertising purposes. For devices with the Android operating system, this is the so-called Advertising ID; for devices with the iOS operating system this is the so-called Advertising Identifier (IDFA). The Advertising Identifiers are, similar to the online identifiers typically stored in Cookies, unique identifiers that are not permanently preserved. We use the profiles created with the help of these Advertising IDs regarding usage behavior, such as clicked advertising banners, parts of the offer visited, search queries made, to display advertising or offers that are tailored to your interests ("Interest-based Advertising"). The Personal Information collected in this way is not linked to other device-related information.

7.5. How can Users prevent or restrict the use of Advertising IDs?

Users may restrict the use of Advertisement ID for promotional purposes in the device settings of their mobile device. Users may also delete the Advertisement ID. Upon deletion, a new Advertisement ID is created that is not merged with the data collected under the previous identifier.

Technical explanations of how to disable personalized advertising:

Android Operating Systems:
-> Settings -> Google -> Ads and there "Reset ad ID" and/or "Deactivate personalized ads

IOS Operating System (Apple):
-> Settings -> Privacy -> Advertising and there "Reset Ad-ID" and/or "No Ad-Tracking

 

8. Registration for Stylight Club 

Users may register for this Service with username, email and password. Stylight is responsible for the Stylight Club.

You can delete your account at any time via your profile and the settings therein.

 

9. Social Plugins

This Service uses social plugins ("Plugins"). The providers and information on data protection may be found under Cookies & Tracking Technologies and in your data protection settings.

The various providers of Plugins are summarized below under “Plugin Providers”.  

In order to increase the protection of your data when visiting our Services, the Plugins are integrated into the site using the so-called "Shariff Solution". This ensures that no connection to the servers of the respective Plugin Provider is established when a page of this Service is called. 

Once you activate the Plugin, your internet browser establishes a direct connection to the servers of the respective Plugin Provider. This will inform the Plugin Provider that your internet browser has accessed the corresponding page of our website, even if you do not have an account with the provider or are not logged in. Log Files (including the IP address) are transmitted by your internet browser directly to a server of the respective Plugin Provider and may be stored there. This server may be located outside the EU or EEA, such as within the United States.

The Plugins represent independent extensions of the Plugin vendors. We have therefore no influence on the extent of the data collected and stored by the Plugin vendors over the Plugins. If you do not want the Plugin Providers to receive the data collected via this Service and possibly to save or re-use it, you should not use the respective Plugins. 

You can also prevent the loading of the plugins by using add-ons such as script blockers for your browser.

For more information about the purpose and scope of the collection and the further processing and use of your Personal Information by Plugin Providers as well as your rights and settings to protect your Personal Information, please refer to the privacy policies of the respective Providers.

 

10. Social Network Registration

10.1. Registration via Facebook

Stylight enables you to register or login with Stylight via your Facebook Inc. (“Facebook”) account. If you choose to do so, we will receive the data required for registration or login from Facebook, such as name and email address. Facebook is certified under the EU-US Privacy Shield and therefore provides suitable guarantees for the transfer of information in accordance with the user-friendly GDPR rules of the European Union.

We have no influence on the scope of the Personal Information collected by Facebook via the Facebook login. If you do not want Facebook to collect data about you in connection with your use of our Services and use it for its own purposes, you should not use the Facebook login. 

More information about the purpose and scope of the collection and the further processing and use of your data by Facebook, as well as your rights and setting options for the protection of your Personal Information, may be found in Facebook's privacy policy.

10.2. Registration via Google

Stylight enables you to register or login with Stylight via your Google LLC (“Google”) account. If you choose to do so, we will receive the data required for registration or login from Google, such as name and email address. Google is certified under the EU-US Privacy Shield and therefore provides suitable guarantees for the transfer of the information in accordance with the GDPR rules of the European Union.

We have no influence on the scope of the Personal Information collected by Google using the Google login. If you do not want Google to collect data about you in connection with your use of our Services and use it for its own purposes, you should not use the Google login. 

More information about the purpose and scope of the collection and the further processing and use of your data by Google, as well as your rights and settings options for the protection of your Personal Information, in Google's privacy policy.

 

11. Push Notifications

Uses may receive push messages (“Push Notifications”) from us, even when they are not using the App. These may be messages that we send Users in the course of performing the contract between Stylight and you, such as notification of service failure due to maintenance work. Users will only receive promotional information via Push Notifications if you expressly agreed to this.

You can register to receive promotional Push Notifications. The "CleverPush" service used for this purpose is operated by CleverPush GmbH, Nagelsweg 22, 20097 Hamburg, Germany ("CleverPush"). Through these Push Notifications, you will regularly receive information about updates of content on our Online Services.

You can deactivate these Push Notifications at any time in the App’s settings. Alternatively, you can also prevent the receipt of personalized advertising in the device settings of your mobile device.

 

12. Newsletter

We offer you the possibility to order a newsletter to receive news and latest information.
We will save your email address, the time of registration and the IP address used for registration until you unsubscribe from the newsletter. The sole purpose of the storage is to send you the newsletter and to be able to prove your registration.

You can revoke your newsletter subscription at any time. Either conveniently using the link at the bottom of each of our newsletter mailings or by email to newsletter@stylight.com.

 

13. Content Sharing

Your mobile device offers you the possibility to share content from the App with third parties, such as by email, SMS, or the share function of social media networks. Stylight has no influence on the processing of Personal Information associated with this activity. The respective third-party providers are solely responsible for this.

 

14. User Rights

14.1. How Can Users Assert their Rights?

To assert your rights, please use the information in the Contact section. Please make sure that we can clearly identify you. Alternatively, you may also use the settings in your User Account to correct the Personal Information you provided during registration or to object to advertising.

You may also delete your User Account yourself by proceeding as follows:

-> Registration/ Stylight Club -> My Profile -> Delete Account -> Confirmation of account deletion with your password

Please note that your Personal Information will initially only be blocked for use for the original purpose, if deletion conflicts with document retention periods established by law.

14.2. Users’ Right to Information and Correction

You may request that Stylight confirm whether we are processing Personal Information concerning you. You have the right to obtain information regarding the Personal Information we are processing. If your Personal Information is incorrect or incomplete, you may request that your data be corrected or completed. If we have transmitted your data to third parties, we will inform them about the correction, to the extent this is required by law.

14.3. Users’ Right to Deletion

If the legal requirements are met, you may demand that Stylight delete your Personal Information immediately. This is especially the case if:

  • Your personal data is no longer needed for the purposes for which it was collected;

  • The legal basis for the processing was exclusively provided with your consent and you have revoked this consent;

  • You have objected to the processing for advertising purposes ("advertising objection");

  • You objected to processing on the basis of the legitimate interest for personal reasons, and we cannot prove that there are overriding legitimate reasons for processing;

  • Your Personal Information has been processed unlawfully; or

  • Your Personal Information must be deleted to comply with legal requirements.

If we have transmitted your data to third parties, we will inform them about the deletion to the extent required by law.

Please note that your right of deletion is subject to limitations. For example, we do not have to or are not allowed to delete any Personal Information that we are required to retain for legally established retention periods. Also, Personal Information that we need to assert, exercise or defend legal claims are excluded from your right of deletion.

14.4. Users’ Right to Restrict Processing

Users may, if the legal requirements are met, demand that we limit the processing of your data. This applies especially if:

  • The accuracy of your Personal Information is disputed by you, and then until we have had the opportunity to verify the accuracy;

  • The processing is not lawful, and you request a restriction of use instead of deletion (see Section 13.3);

  • We no longer need your Personal Information for the purposes of processing, but you need it to assert, exercise or defend your legal rights; or

  • You have raised objections for personal reasons, and then until it is clear whether your interests outweigh our interest in processing the data.

If a right to limit processing your data is established, we will mark such Personal Information to ensure that it is processed only within the strict limits applicable to such restricted data (namely, in particular, to defend legal claims or with your consent).

14.5. Users’ Right to Data Transferability

Users have the right to receive, in a transferable format, Personal Information given to Stylight for the purpose of performing the contract between you and Stylight or on the basis of your consent. In this case, you may also request that we transfer this data directly to a third party, as far as this is technically feasible.

14.6. Users’ Right to Withdraw Consent

Users who have given Stylight permission to process Personal Information may revoke this permission at any time with effect for the future. The legality of the processing of your Personal Information until revocation remains unaffected.

14.7. Users’ Right to Object to Direct Marketing

Users may also object to the processing of Personal Information for advertising purposes at any time. Please note that for organizational reasons, there may be an overlap between your revocation and the use of your Personal Information within the scope of an ongoing campaign. 

14.8. Users’ Right of objection for Personal Reasons

Users have the right to object to Personal Information processing by Stylight for reasons arising from a particular situation, provided that this is based on the legal basis of a legitimate interest. We will then stop processing your Personal Information unless we can prove, in accordance with the legal requirements, compelling reasons for further processing worthy of protection which outweigh your rights, or the processing serves to assert, exercise or defend legal claims. 

14.9. Users’ Right to Complain to a Supervisory Authority

Users have the right to file a complaint with a data protection authority. In particular, you may contact the data protection authority responsible for your place of residence or your federal state, or the authority responsible for the place where the violation of data protection law took place. Alternatively, you may also contact the data protection authority responsible for Stylight.

15. Contact

For information and suggestions on the subject of data protection, please contact us or our data protection coordinator at the email dataprivacy@stylight.com or our data protection officer at the email epost@datenschutz-agentur.de.

If you wish to contact us, you may reach us at: 

Stylight Inc
1900 Market Street, 8th Floor
PA 19103 Philadelphia