Order now for delivery in time for Christmas 🎁
Spend £50 or more for free delivery.
our-brands_zwilling_cutlery
Introduction
This privacy policy informs you about the type, scope and purpose of the processing of personal data (hereinafter referred to as "data") within our online shop and the websites, functions and content connected to it as well as external online presences, such as our social media presences (hereinafter jointly referred to as "online services").
Table of contents
Section II - Processing operations
Order processing in the online shop
Single sign-on procedure via third-party providers
Operating customer database, responding to enquiries and customer relationship management
Customer reviews and Q&A feature
Business analyses, marketing and market research
ZWILLING Culinary World App - Use of camera function of your mobile device
Links/buttons to social networks and platforms
Embedded content and functions
Newsletter distribution and performance measurement
Promotional communication via mail
Reach measurement (statistical analysis), online marketing and technology partners
Section III - Data subject rights and general information
ZWILLING J.A. Henckels (UK) Ltd. (hereinafter also referred to as "ZWILLING", "we" or "us")
6 Handley Page Way, Colney Street, St Albans, Hertfordshire AL2 2DQ
Phone: 0845 262 1731
Email: compliance@zwilling.co.uk
Complete legal notice: https://www.zwilling.com/uk/terms-conditions/Legal+Notice.html
Section II - Processing operations
The following presentation provides you with an overview of our processing activities. We have subdivided these into different areas of activity. Please note that these are for orientation purposes only and that processing activities may overlap (e.g. the same data may be processed in several contexts).
The server on which this online offer is located collects so-called log files each time the online offer is accessed, in which user data is stored. The data is used to maintain and optimise server operation as well as for security purposes, e.g. to detect potential attempts of unauthorised access.
In this section, you will find information on our core services and tasks in connection with our online services, such as answering enquiries and providing our contractual services as well as ancillary tasks associated with them.
Order processing in the online shop
We process the data of our users to enable them to select and order the selected products and services, as well as to pay for and deliver or execute them.
A user account (including wish list) requires registration. Afterwards, users can track their orders after entering their login data and use further functions of the user account. Users' account information is not searchable or viewable by external entities such as search engines or by other users. Users are responsible for the safekeeping of their access data.
We offer our own single sign-on procedure for the user account. This means that users who register with one of the online services of the companies belonging to the ZWILLING Group can also use the access data with other online services of companies belonging to the ZWILLING Group.
Single sign-on procedure via third-party providers
In addition to our own single sign-on procedure, we also offer single sign-on logins via third-party providers. This allows you to log in to our online offering using the authentication data stored with the third-party provider (e.g. Facebook or Google).
Authentication takes place directly with the respective third-party provider. In the course of such authentication, we receive a user ID that cannot be used by us for any other purpose and the information that the user is logged in to the respective single sign-on provider under this user ID (so-called "user handle"). In addition, the user's name and email address are transmitted to us. Whether additional data is transmitted to us depends on the selected data releases in the context of authentication and your privacy or other settings with the third-party provider. Depending on the single sign-on provider and the user's choice, this can be different data, usually the e-mail address and the user name. The password entered as part of the single sign-on procedure with the third-party provider is neither visible to us nor is it stored by us.
Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, parent company: Facebook, 1 Hacker Way, Menlo Park, CA 94025, USA; Privacy Policy: https://www.facebook.com/about/privacy.
Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; Privacy policy: https://policies.google.com/privacy.
Operating customer database, responding to enquiries and customer relationship management
As part of our customer data management and customer relationship management, we store information about your order history and about product or topic-specific issues (e.g. regarding any product registrations you may have made, your preferences with regard to individual product segments, brands or - if you have provided us with these - preparation methods favoured by you) in our customer relationship management system (CRM system) or in similar applications. The same applies to information that we receive from you via our contact form and in other ways, e.g. via e-mail, enquiries.
Customer reviews and Q&A feature
We collect customer feedback in the form of reviews and questions and answers and make them available on our platform so that other users can find out about our products and services. We also offer our customers the opportunity to ask questions about our products on our website and have them answered by us and other users.
Business analyses, marketing and market research
In order to operate our business economically and to be able to recognise market trends as well as customer and user wishes, we analyse the data we have on business transactions, contracts, enquiries, etc.. For this purpose, we combine the user data from registrations and orders with the behaviour-related data of the users.
ZWILLING Culinary World App - Use of camera function of your mobile device
If you use our ZWILLING Culinary World app, it must access your mobile phone's camera for the following functions:
The photos are only stored locally on your mobile phone. There is no access or other transfer of photo data to ZWILLING or third parties.
Furthermore, your data within social networks and platforms is usually processed by the respective operator for market research and advertising purposes. For example, user profiles can be created based on your usage behaviour and the resulting interests, in order to place interest-based advertisements within and outside of the networks and platforms. For further information on the operator's processing and any opt-out options, please refer to the privacy policies of the respective operators.
Our processing of your data is in each case based on our legitimate interest (Art. 6(1)(f) GDPR) in increasing awareness of our company, in communicating with people who are interested in our company and our products, and in better understanding your wishes and interests. In doing so, the categories of data we may collect are inventory data (e.g. names, addresses), contact data (e.g. e-mail, telephone numbers), content data (e.g. text entries, photographs, videos), usage data (e.g. websites visited, interest in content, access times), meta and connection data (e.g. device information, IP addresses). The deletion of your data is determined by the privacy policies of the respective operator.
Operator: Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (as joint controller - the essence of the agreement can be found at https://www.facebook.com/legal/terms/page_controller_addendum), Parent company: Facebook, 1 Hacker Way, Menlo Park, CA 94025, USA; Operator's privacy policy: https://de-de.facebook.com/policy.php.
Operator: Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (as joint controller - the essence of the agreement can be found at https://www.facebook.com/legal/terms/page_controller_addendum), Parent company: Facebook, 1 Hacker Way, Menlo Park, CA 94025, USA; Operator's privacy policy: https://help.instagram.com/help/instagram/519522125107875/?locale=en_GB
Operator: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, Parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; Operator's privacy policy: https://policies.google.com/privacy.
Operator: Pinterest Europe Ltd; Palmerston House, 2nd Floor; Fenian Street; Dublin 2, Ireland; Parent company: Pinterest, Inc. 505 Brannan Street; San Francisco, CA 94107; Operator's privacy policy: https://policy.pinterest.com/en/privacy-policy.
Operator: Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA; Operator's privacy policy: https://twitter.com/en/privacy, (settings) https://twitter.com/personalization.
Links/buttons to social networks and platforms
The links/buttons to social networks and platforms (e.g. Facebook, Twitter or Pinterest) used within our online offer generally only establish contact between social networks or platforms and the users when users click on the links/buttons. This function corresponds to the mode of action of a regular online link. If you click on a corresponding link/button, this opens a new page that is retrieved from the servers of the respective social network or platform. Through this, the operator of the social network obtains knowledge that our website was accessed via your IP address. At the same time, the provider may place cookies on your end device or read cookies, unless you have prohibited the use of cookies in your browser. For further information on any processing of your personal data by the operators of the social networks or platforms, please refer to the privacy policy of the respective operator.
Embedded content and functions
In this section, we inform you which content, software or functions (in short "content") of other providers we embed within the scope of our online offer (so-called "embedding"). This does not create a copy of the content, as it is called up from the original server. Embedding is done for legal reasons - e.g. for cookie management - to make our online offer more interesting for our users - e.g. to be able to display directions to our shops - or to improve the security of the online offer - e.g. to prevent bot attacks.
In order to display the content, it is necessary for the third-party providers of this content to process the IP address of the users, as without the IP address they would not be able to send the content to their browser. The IP address is thus necessary for the presentation of this content or function. Insofar as the collection of further categories of data is necessary for the presentation of the content, these are listed below under the respective service. ZWILLING's responsibility under data protection law is limited to the collection and transmission of the IP address and any other data required for the presentation of the content to the third-party provider. The responsibility after transmission of the data lies solely with the third party provider. For further information on any processing of your data by the respective third-party provider, please refer to the privacy policies of the respective third-party provider.
When you visit our website, certain information is placed on your terminal device or read if this is absolutely necessary for the operation of our website. This includes information processed by the "Cookiebot" service of our cookie management service provider Cybot A/S ("Cybot") to ensure that only those cookies are set or read that are technically necessary to operate our website or for which you have consented to use. When the code from Cookiebot is loaded, your IP address is transmitted to Cybot, where it is stored anonymously.
Further information on individual cookies, their purposes and deletion periods as well as options for cookie management (consent and revocation of consent) can be found at https://www.zwilling.com/uk/privacy-security/cookie-declaration.html
This section provides you with information on the data processing we carry out for the purposes of optimising our services, marketing and market research.
Newsletter distribution and performance measurement
We send newsletters, e-mails and other electronic notifications with information about our services and our company (hereinafter "newsletter") only with the explicit consent of the recipients or, where applicable (e.g. where you have bought goods from us or entered substantially into the purchase process), implied consent (in which case the relevant legal basis will be legitimate interests, as set out below). Within the scope of such consent or legitimate interests, we use your e-mail address, which we have received from you in connection with the sale of a good or service, for direct advertising for our own similar goods or services (hereinafter "direct advertising"). You can revoke your consent at any time or object to the use of your e-mail address for direct advertising at any time, for example by unsubscribing via a link contained in every newsletter.
The data of newsletter subscribers is logged, as we are obliged to provide evidence of registrations. We also keep track of whether newsletters have been opened and whether links have been clicked. For technical reasons, this information is stored on a per-user basis, but is not used to monitor individual users, but rather to adapt content and offers to users, for example. Information that we should collect in addition to the email address (e.g. name) is used to address users personally or to adapt the content of the newsletter to the users.
Promotional communication via mail
We also send information about our products and notices of current sales promotions by post. You can of course object to receiving direct mailings at any time by e-mail or post.
In the context of sweepstakes and competitions (in short "competitions"), we process the data of the participants for the purpose of conducting the competitions. Users will receive further information on the processing of their data within the framework of the individual competition as well as any consent to the publication of their names or competition entries within the conditions of participation of the respective competition.
In connection with your visit to our online shop, it is possible that you will be invited by us to participate in customer surveys. Depending on the survey, you may be invited to participate directly on our website or we may invite you to participate by e-mail.
In certain situations, it is conceivable that we or third parties may provide you with vouchers for purchases in our online shop, e.g. as a thank you for your participation in a survey or other promotions or in the form of discount vouchers when using third-party affiliate programmes. For further information on the respective vouchers, please refer to the respective voucher terms and conditions.
We are integrated into various affiliate programmes of affiliate network providers (e.g. AWIN) or affiliate platforms (e.g. Unidays). In doing so, so-called affiliate links or other references to our online offer are integrated on third-party websites (collectively referred to as "affiliate links"). If users follow the affiliate links and subsequently purchase products in our online shop, these third-party providers may receive a commission. For this purpose, it is necessary that the respective third-party providers learn that the users have followed an affiliate link and have subsequently made a purchase from us. The assignment of the affiliate links to the respective orders serves the sole purpose of commission settlement.
Reach measurement (statistical analysis), online marketing and technology partners
In this section, we inform you which services of technology partners we use for reach measurement and online marketing purposes. Insofar as no anonymous or anonymised data is processed or we do not obtain your prior consent in the context of the use of cookie management (Art. 6(1)(a) GDPR (Consent), Art. 7 GDPR (Conditions for consent)), their use is based on our legitimate interest (Art. 6(1)(f) GDPR) in increasing user-friendliness and optimising and controlling our offer in a more targeted manner.
If you have given your consent to the processing, you can revoke this at any time via the settings in our cookie management. [LP2] If processing is carried out on the basis of our legitimate interest, you generally have the option to object (opt-out). If no explicit opt-out option of the respective service provider used by us has been specified below, you have the option of switching off cookies in your browser settings. However, this may restrict the functions of our online offer. Alternatively or additionally, you can also use the following general opt-out options: a) Europe: https://www.youronlinechoices.eu. b) Canada: https://www.youradchoices.ca/choices. c) USA: https://www.aboutads.info/choices. d) Cross-territory: https://optout.aboutads.info.
In all cases, the categories of data processed include usage data and metadata. Reach measurement and online marketing are carried out in particular on the basis of cookie and web beacon technology. Special categories of data are not processed. Further explanations can be found in the definitions of terms at the end of this privacy policy.
Unless otherwise stated, the deletion of data is determined in accordance with the privacy policies of the technology partners. Further information on individual cookies, their purposes and deletion periods as well as options for cookie management (consent and revocation of consent) can be found at https://www.zwilling.com/uk/privacy-security/cookie-declaration.html
Further information on data processing can also be found in the privacy policies of the respective providers listed below.
Google Tag Manager is a solution with which we can manage so-called website tags via an interface (and thus, for example, integrate Google Analytics and other Google marketing services into our online offer). The tag manager itself (which implements the tags) does not process any user data. With regard to the processing of users' data, please refer to the following information on Google services.
Service provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; privacy policy of the service provider: https://policies.google.com/privacy. Within the scope of this service, data is transferred to a third country, i.e. a country outside the UK, or such a transfer cannot be ruled out. Guarantee for processing in third countries: EU standard contractual clauses https://privacy.google.com/businesses/processorterms/.
We use Google Analytics for the purposes of range measurement and target group formation. We only use Google Analytics with activated IP anonymisation. This means that we have activated the IP anonymisation function offered by Google on our website, so that the last octet (type IPv4) or the last 80 bits (type IPv6) of your IP address are deleted. In addition to cookie management in our cookie management tool, you also have the option of using the following opt-out options: http://tools.google.com/dlpage/gaoptout?hl=en (browser add-on), https://adssettings.google.com/authenticated (setting for advertisements).
Service provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, Parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; Privacy policy of the service provider: https://www.google.com/policies/privacy ; Within the scope of this service, a data transfer to a third country, i.e. a country outside the UK, takes place or cannot be excluded. Guarantee for processing in third countries (USA): EU standard contractual clauses https://privacy.google.com/businesses/processorterms/.
We use Google Ads to place advertisements on the websites of Google, Google partners and in the display network and to measure their success (conversion measurement). In doing so, we only receive an anonymous overall evaluation, but not information related to individual users. You have the option to use the following opt-out option of the service provider: https://adssettings.google.com/.
Service provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, US A; privacy policy of the service provider: https://www.google.com/policies/privacy. Within the scope of this service, data is transferred to a third country, i.e. a country outside the UK, or such a transfer cannot be ruled out. Guarantee for processing in third countries (USA): EU standard contractual clauses https://privacy.google.com/businesses/processorterms/.
We use Facebook pixels to create target groups and measure the success of the advertisements we place on Facebook. The aim is, on the one hand, to display advertisements placed by us on Facebook as precisely as possible to those users on Facebook and within the services of partners cooperating with Facebook (so-called "Audience Network" https://www.facebook.com/audiencenetwork/) who have also shown an interest in our products by visiting our website. On the other hand, with the help of the Facebook pixel, we can evaluate the effectiveness of the Facebook ads for statistical and market research purposes by determining whether users were redirected to our website after clicking on a Facebook ad. The data collected about you is anonymous to us. However, if you have a Facebook user account, Facebook may link the data to your Facebook user account. You have the option to use the following opt-out option of the service provider: https://www.facebook.com/settings?tab=ads
Service provider: Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, Parent company: Facebook, 1 Hacker Way, Menlo Park, CA 94025, USA; Privacy policy of the service provider: https://www.facebook.com/about/privacy; Within the scope of this service, data is transferred to a third country, i.e. a country outside the UK, or such a transfer cannot be excluded. Guarantee for processing in third countries (USA): EU standard contractual clauses and Facebook EU data transfer addendum https://www.facebook.com/legal/EU_data_transfer_addendum.
We use Microsoft Advertising's conversion and tracking tool to measure the success of the ads we place on Bing. This allows us to track that someone has clicked on an ad, been redirected to our online presence and reached a previously determined website there. We only receive statistical data without any personal reference to the respective user. You have the option of using the following opt-out option of the service provider: https://choice.microsoft.com/en-EN/opt-out.
Service provider Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA; privacy policy of the service provider: https://privacy.microsoft.com/privacystatement. Within the scope of this service, data is transferred to a third country, i.e. a country outside the UK, or such a transfer cannot be ruled out.
We use the service Taboola, which creates user-specific recommendations for content and advertisements based on surfing behaviour. The profiles are created using pseudonyms that are not merged with the data about the bearer of the pseudonym. Thus, they also do not allow any conclusions to be drawn about personal data. You have the possibility to use the following opt-out option of the service provider: https://www.taboola.com/privacy-policy#optout.
Service Provider: Taboola, Inc, Kings Court, 2-16 Goodge Street, 2nd fl. , London W1T 2QA, UK; privacy policy of the service provider: https://www.taboola.com/privacy-policy. Within the scope of this service, data is transferred to a third country, i.e. a country outside the UK, or such a transfer cannot be ruled out.
Section III - Data subject rights and general information
You have the right to request confirmation as to whether data relating to you is being processed and to be informed about this data and to receive further information and a copy of the data in accordance with Art. 15 GDPR.
In accordance with Art. 16 GDPR, you have the right to request that the data concerning you be completed or that the incorrect data concerning you be corrected.
In accordance with Article 17 of the GDPR, you have the right to demand that data relating to you be deleted without delay or, alternatively, to demand restriction of the processing of the data in accordance with Article 18 of the GDPR.
You have the right to obtain the data concerning you that you have provided to us in accordance with Art. 20 of the GDPR and to request that it be transferred to other data controllers.
You also have the right to lodge a complaint with the competent supervisory authority pursuant to Art. 77 GDPR.
You have the right to revoke any consent you have given in accordance with Art. 7(3) GDPR with effect for the future.
Where we are relying on a legitimate interest (or those of a third party) and there is something about your particular situation which makes you want to object to processing on this ground as you feel it impacts on your fundamental rights and freedoms, you may object to the future processing of data concerning you in accordance with Art. 21 GDPR at any time. The objection can be made in particular against processing for direct marketing purposes. In some cases, we may demonstrate that we have compelling legitimate grounds to process your information which override your rights and freedoms.
Unless otherwise stated above in the respective information on the legal basis for processing, you are not obliged to provide data. In the cases of Art. 6(1)(b) GDPR (Performance of a contract)), however, the data is required for the performance or conclusion of a contract. If you do not provide the data concerned, the fulfilment or conclusion of the contract is not possible. In the cases of Art 6(1)(c) GDPR (Legal obligation), we are legally obliged to process the data. If you do not provide us with the data in the cases of Art. 6(1)(a) GDPR (Consent), Art. 6(1)(f) GDPR (Legitimate Interests), the use of the affected parts of our website or services is not possible or only possible to a limited extent.
If, in the course of our processing, we disclose data to other persons and companies (order processors or third parties), grant access to the data or transfer it in any other way, this will only be done on the basis of legal permission (e.g. if a transfer of the data to third parties, such as to shipping and payment service providers, is necessary for the performance of the contract pursuant to Art. 6(1)(b) GDPR (Performance of a contract)), you have consented, a legal obligation pursuant to Art. 6(1)(c) GDPR (Legal obligation) provides for this or on the basis of our legitimate interests pursuant to Art. 6(1)(f) GDPR (Legitimate interests) (e.g. in the case of receivables management).
If we commission third parties with the processing of data on the basis of a so-called "order processing agreement", this is done on the basis of Art. 28 GDPR (e.g. in the processing of complaints or general product advice enquiries by service providers commissioned by us), which sets out the requirements for engaging a processor.
If we pass on data to other companies in our group of companies, grant access to the data or transfer it in any other way, this is done in particular for administrative purposes as a legitimate interest pursuant to Art. 6(1)(f) GDPR (Legitmate interests) or on the basis of commissioned processing. To the extent necessary, we have concluded intra-group data processing agreements for this purpose.
Any transfer of your data to a third country (i.e. to a country outside the UK) will take place in accordance with Art. 44 et seq. GDPR. If a transfer is therefore not already permitted on the basis of the legal permissions there (e.g. to enable the delivery of goods ordered by you to an address given to you in the third country, see Art. 49(1)(b) GDPR), we have provided data protection guarantees to ensure a sufficient level of data protection for your data in these cases as well (e.g. the conclusion of officially recognised special contractual agreements, so-called "standard contractual clauses"). To obtain further information on the guarantees mentioned, please contact our data protection officer.
This section provides you with an overview of the terms used in this privacy policy. Many of the terms are taken from the General Data Protection Regulation (GDPR) and defined primarily in Art. 4 GDPR. The following explanations are primarily intended to help you understand them. The terms are sorted alphabetically.
Changes and updates to the privacy policy
We reserve the right to update this privacy policy from time to time. Updates to this privacy policy will be posted on our website. Changes will apply from the date of their publication on our website. We therefore recommend that you visit this page regularly to check for any updates.
Last updated: October 2021
