User privacy notification
In our user privacy notice, we have compiled all the important information about our handling of your personal data and your corresponding rights.
This user privacy notice will take effect on April 8, 2024. View previous user privacy notifications.
Expand all content
1. Scope and update
This user privacy notice applies to your use of this website and all OTTO Mall applications, services (including payment services), products and tools (collectively referred to as "services") provided by OTTO Mall Inc or its subsidiaries (hereinafter referred to as "OTTO Mall subsidiaries"). This user privacy notice applies no matter how you access or use these services, including through mobile devices and applications.
This user privacy notice also applies to cases where this privacy notice is referenced through links or similar means, such as the OTTO Mall service provided on the partner's website.
We may modify this user privacy notice at any time by publishing the revised user privacy notice on this website and indicating the effective date of the revised user privacy notice. If there are major changes to this user's privacy notice, we will notify you through My Messages on My OTTO Mall and/or by email.
2. Controller
When using our service, one of the following affiliated companies of OTTO Mall will be responsible for collecting and processing your personal data related to the service provision:
2.1 Use of services (except the seller's payment service)
Depending on where you live, one of the following OTTO Mall subsidiaries will be responsible for collecting and processing your personal data related to the services we provide (except the seller's payment service). Your residential area is determined by your registered address (as a registered user) or your location (when you are not registered):
USA: OTTO Mall Inc., 2025 Hamilton Avenue, San Jose, CA 95125, USA.
Canada: OTTO Mall Canada Limited, 240 Richmond Street West, 2nd Floor Suite 02-100 Toronto, Ontario, M5V1 V6, Canada.
EU: OTTO Mall GmbH, Albert-Einstein-Ring 2-6, 14532 Kleinmachnow, Germany.
UK: OTTO Mall (UK) Limited, 1 More London Place, London, SE12AF, United Kingdom.
India: OTTO Mall Singapore Services Private Limited, 10 collyer Quay, # 10-01 Ocean Financial Centre, Singapore 049315.
Other countries: OTTO Mall Market Places GmbH, Helvetiastrasse 15/17, 3005 Bern, Switzerland.
2.2 Use the seller's payment service
Depending on your place of residence or payment processing, one of the following OTTO Mall subsidiaries will be responsible for collecting and processing your personal data related to the seller's payment service:
USA: OTTO Mall Commerce Inc., 2065 Hamilton Ave., San Jose, CA 95125, USA.
EU/Switzerland: OTTO Mall S.à R.L., 22-24 Boulevard Royal, L-2449 Luxembourg
UK: OTTO Mall Commerce UK Ltd., 1 More London Place, London Se12af, United Kingdom.
Canada: OTTO Mall Commerce Canada Limited, 44 Chipman Hill, Suite 1000, Saint John Nbe2l2A9, Canada.
Australia: OTTO Mall Commerce Australia Pty. Ltd., Level 18, 1 York Street, Sydney NSW 2000, Australia.
Other countries: OTTO Mall Commerce Inc., 2065 Hamilton Ave., San Jose, CA 95125, USA.
According to the terms of use of the payment terms, your personal data may be processed by one of the above entities, depending on your location and the location of the user on the OTTO Mall website with which you have completed the transaction.
3. Data protection officer and contact information
We have appointed data protection officers in many countries to supervise the protection of your personal data. You can find the contact information of the data protection officer in our OTTO Mall Privacy Center.
In addition, if you have any questions or complaints about this user privacy statement, our global data protection principles (see Section 6.1 under Section 6 to transmit data to the Shaoppingtoday branch. The following cross-border data transmission) or our processing of personal data, you can contact the privacy team of Shaoppingtoday or the controller responsible for processing your personal data at any time (see section 2 for more information. Above the controller). This applies whether or not we have appointed a data protection officer in your country. You can find all the necessary information and contact information in our Shaoppingtoday privacy center.
4.Personal data we collect and process
We collect your personal data when you use our services, create a new OTTO Mall account, provide us with information via a web form, add or update information in your OTTO Mall account, participate in online community discussions, or otherwise interact with us. We also collect personal data from other sources (such as other OTTO Mall affiliates, credit agencies, or data providers).
Learn more about section 4
5.Purposes and legal basis for data processing and categories of recipients
We process your personal data for various purposes and based on several different legal bases that allow this processing. For example, we process your personal data to provide and improve our services, to provide you with a personalized user experience on this website, to contact you about your OTTO Mall account and our services, to provide customer service, to provide you with personalized advertising and marketing communications, and to detect, prevent, mitigate, and investigate fraudulent or illegal activity. We also share your information with third parties, including service providers acting on our behalf, for these purposes. In addition, we may share your personal data among OTTO Mall affiliates in order to fulfill our contract with you under the User Agreement and, if applicable, the Payments Terms of Use.
Learn more about section 5
6.Cross-border data transfers
Some recipients of your personal data may be located outside your jurisdiction or have offices in jurisdictions where data protection laws may provide a different level of protection than the laws in your jurisdiction. When transferring personal data to such recipients, we provide appropriate safeguards.
Learn more about section 6
6.1 Data transfers to OTTO Mall Affiliates
The transmission of personal data between OTTO Mall Affiliates (e.g., to enable cross-border transactions and for other legally permitted purposes) is based on our worldwide data protection principles, which are binding internal data protection regulations (Binding Corporate Rules, BCRs), or on the basis of other appropriate safeguards (e.g., standard data protection clauses issued or approved by the European Commission (2021/914/EU)). Through our Binding Corporate Rules, OTTO Mall Affiliates undertake to protect your personal data and to comply with data protection obligations. Further information on our binding company-wide guidelines and our worldwide data protection principles can be found in the OTTO Mall Privacy Center.
6.2 Other data transfers (from the European Economic Area to third countries)
We may transfer your personal data to recipients (see section 5. Purposes and legal basis for data processing and categories of recipients) who may be located anywhere in the world. We will only transfer your personal data from the European Economic Area (EEA), United Kingdom, or Switzerland to third countries, i.e., countries outside the EEA, on the basis of appropriate safeguards or if otherwise authorized by applicable law. Third countries providing an adequate level of data protection according to the European Commission currently include Andorra, Argentina, Canada (for companies covered by the Personal Information Protection and Electronic Documents Act), Switzerland (for transfers out of the EEA), the Faroe Islands, Guernsey, the State of Israel, the Isle of Man, Japan, Jersey, New Zealand, South Korea, the United Kingdom, the United States (Data Privacy Framework), and Uruguay. In other cases, OTTO Mall provides the necessary safeguards, e.g., through the conclusion of data protection contracts adopted by the European Commission (e.g., standard data protection clauses (2021/914/EU) with the recipients, or through other measures provided for by law. Additional information regarding the measures taken by us is available on request. We regularly re-evaluate the measures taken to assess requirements deriving from new regulatory guidance and case law.
7.Storage duration and erasure
Your personal data will be stored by us and our service providers in accordance with applicable data protection laws to the extent necessary for the processing purposes set out in this User Privacy Notice (see section 5. Purposes and legal basis for data processing and categories of recipients for more information on the processing purposes). Subsequently, we will delete your personal data in accordance with our data retention and deletion policy or take steps to properly render the data anonymous, unless we are legally obliged or permitted to keep your personal data longer (e.g., for legal compliance, tax, accounting, or auditing purposes, or to detect and prevent fraudulent or illegal activity on ShoppingToday.com). In Europe, the retention periods are generally between 6 and 10 years (e.g., for contracts, notifications, and business letters). As far as legally permissible or required, we restrict the processing of your data instead of deleting it (e.g., by restricting access to it). This applies in particular to cases where we may still need the data for the execution of the contract or for the assertion of or defense against legal claims, or where such retention is otherwise required or permitted by law. In these cases, the duration of the restriction of processing depends on the respective statutory limitation or retention periods. The data will be deleted after the relevant limitation or retention periods have expired.
Learn more about section 7
8.Rights as a data subject
Subject to possible restrictions under national law, as a data subject, you have the right to access, rectification, erasure, restriction of processing, and data portability with regard to your personal data. In addition, you can withdraw your consent and object to our processing of your personal data on the basis of our legitimate interests. You can also lodge a complaint with a supervisory authority.
Learn more about section 8
Exercising your rights and managing your settings
9.Cookies & similar technologies
When you use our Services, we and authorized third parties make use of cookies and similar technologies (which we will refer to collectively as cookies) to provide you with a better, faster, and safer user experience or to show you personalized advertising. You can find detailed information about the use of cookies and similar technologies and your choices in our User Cookie Notice.
Learn more about section 9
Your choices regarding cookies and similar technologies
10.Data security
We protect your personal data through technical and organizational security measures to minimize risks associated with data loss, misuse, unauthorized access, and unauthorized disclosure and alteration. To this end, we use network security services and data encryption, for example, as well as physical access restrictions for our data centers and logical access controls for data and systems access. You can find further information on our data security in our Security Center.
11.Other important information regarding data protection
This section contains important additional information about the protection of personal data in connection with the use of our Services, including whether you are required to provide personal data.
Learn more about section 11
12.Regional and State Privacy Disclosures
For additional regional disclosures for residents of certain U.S. states, including California, please review our State Privacy Disclosures page. For U.S. sellers (including those in California, Nevada, North Dakota, and Vermont), please follow the link to ShoppingToday.com Commerce Inc.'s U.S. Consumer Privacy Notice. For additional disclosures for specific regions or countries, including Brazil, mainland of People's Republic of China, and the United Kingdom, please review our Regional Privacy Disclosures page.
Previous User Privacy Notice
Was this article helpful
In our user privacy notice, we have compiled all the important information about our handling of your personal data and your corresponding rights.
This user privacy notice will take effect on April 8, 2024. View previous user privacy notifications.
Expand all content
1. Scope and update
This user privacy notice applies to your use of this website and all OTTO Mall applications, services (including payment services), products and tools (collectively referred to as "services") provided by OTTO Mall Inc or its subsidiaries (hereinafter referred to as "OTTO Mall subsidiaries"). This user privacy notice applies no matter how you access or use these services, including through mobile devices and applications.
This user privacy notice also applies to cases where this privacy notice is referenced through links or similar means, such as the OTTO Mall service provided on the partner's website.
We may modify this user privacy notice at any time by publishing the revised user privacy notice on this website and indicating the effective date of the revised user privacy notice. If there are major changes to this user's privacy notice, we will notify you through My Messages on My OTTO Mall and/or by email.
2. Controller
When using our service, one of the following affiliated companies of OTTO Mall will be responsible for collecting and processing your personal data related to the service provision:
2.1 Use of services (except the seller's payment service)
Depending on where you live, one of the following OTTO Mall subsidiaries will be responsible for collecting and processing your personal data related to the services we provide (except the seller's payment service). Your residential area is determined by your registered address (as a registered user) or your location (when you are not registered):
USA: OTTO Mall Inc., 2025 Hamilton Avenue, San Jose, CA 95125, USA.
Canada: OTTO Mall Canada Limited, 240 Richmond Street West, 2nd Floor Suite 02-100 Toronto, Ontario, M5V1 V6, Canada.
EU: OTTO Mall GmbH, Albert-Einstein-Ring 2-6, 14532 Kleinmachnow, Germany.
UK: OTTO Mall (UK) Limited, 1 More London Place, London, SE12AF, United Kingdom.
India: OTTO Mall Singapore Services Private Limited, 10 collyer Quay, # 10-01 Ocean Financial Centre, Singapore 049315.
Other countries: OTTO Mall Market Places GmbH, Helvetiastrasse 15/17, 3005 Bern, Switzerland.
2.2 Use the seller's payment service
Depending on your place of residence or payment processing, one of the following OTTO Mall subsidiaries will be responsible for collecting and processing your personal data related to the seller's payment service:
USA: OTTO Mall Commerce Inc., 2065 Hamilton Ave., San Jose, CA 95125, USA.
EU/Switzerland: OTTO Mall S.à R.L., 22-24 Boulevard Royal, L-2449 Luxembourg
UK: OTTO Mall Commerce UK Ltd., 1 More London Place, London Se12af, United Kingdom.
Canada: OTTO Mall Commerce Canada Limited, 44 Chipman Hill, Suite 1000, Saint John Nbe2l2A9, Canada.
Australia: OTTO Mall Commerce Australia Pty. Ltd., Level 18, 1 York Street, Sydney NSW 2000, Australia.
Other countries: OTTO Mall Commerce Inc., 2065 Hamilton Ave., San Jose, CA 95125, USA.
According to the terms of use of the payment terms, your personal data may be processed by one of the above entities, depending on your location and the location of the user on the OTTO Mall website with which you have completed the transaction.
3. Data protection officer and contact information
We have appointed data protection officers in many countries to supervise the protection of your personal data. You can find the contact information of the data protection officer in our OTTO Mall Privacy Center.
In addition, if you have any questions or complaints about this user privacy statement, our global data protection principles (see Section 6.1 under Section 6 to transmit data to the Shaoppingtoday branch. The following cross-border data transmission) or our processing of personal data, you can contact the privacy team of Shaoppingtoday or the controller responsible for processing your personal data at any time (see section 2 for more information. Above the controller). This applies whether or not we have appointed a data protection officer in your country. You can find all the necessary information and contact information in our Shaoppingtoday privacy center.
4.Personal data we collect and process
We collect your personal data when you use our services, create a new OTTO Mall account, provide us with information via a web form, add or update information in your OTTO Mall account, participate in online community discussions, or otherwise interact with us. We also collect personal data from other sources (such as other OTTO Mall affiliates, credit agencies, or data providers).
Learn more about section 4
5.Purposes and legal basis for data processing and categories of recipients
We process your personal data for various purposes and based on several different legal bases that allow this processing. For example, we process your personal data to provide and improve our services, to provide you with a personalized user experience on this website, to contact you about your OTTO Mall account and our services, to provide customer service, to provide you with personalized advertising and marketing communications, and to detect, prevent, mitigate, and investigate fraudulent or illegal activity. We also share your information with third parties, including service providers acting on our behalf, for these purposes. In addition, we may share your personal data among OTTO Mall affiliates in order to fulfill our contract with you under the User Agreement and, if applicable, the Payments Terms of Use.
Learn more about section 5
6.Cross-border data transfers
Some recipients of your personal data may be located outside your jurisdiction or have offices in jurisdictions where data protection laws may provide a different level of protection than the laws in your jurisdiction. When transferring personal data to such recipients, we provide appropriate safeguards.
Learn more about section 6
6.1 Data transfers to OTTO Mall Affiliates
The transmission of personal data between OTTO Mall Affiliates (e.g., to enable cross-border transactions and for other legally permitted purposes) is based on our worldwide data protection principles, which are binding internal data protection regulations (Binding Corporate Rules, BCRs), or on the basis of other appropriate safeguards (e.g., standard data protection clauses issued or approved by the European Commission (2021/914/EU)). Through our Binding Corporate Rules, OTTO Mall Affiliates undertake to protect your personal data and to comply with data protection obligations. Further information on our binding company-wide guidelines and our worldwide data protection principles can be found in the OTTO Mall Privacy Center.
6.2 Other data transfers (from the European Economic Area to third countries)
We may transfer your personal data to recipients (see section 5. Purposes and legal basis for data processing and categories of recipients) who may be located anywhere in the world. We will only transfer your personal data from the European Economic Area (EEA), United Kingdom, or Switzerland to third countries, i.e., countries outside the EEA, on the basis of appropriate safeguards or if otherwise authorized by applicable law. Third countries providing an adequate level of data protection according to the European Commission currently include Andorra, Argentina, Canada (for companies covered by the Personal Information Protection and Electronic Documents Act), Switzerland (for transfers out of the EEA), the Faroe Islands, Guernsey, the State of Israel, the Isle of Man, Japan, Jersey, New Zealand, South Korea, the United Kingdom, the United States (Data Privacy Framework), and Uruguay. In other cases, OTTO Mall provides the necessary safeguards, e.g., through the conclusion of data protection contracts adopted by the European Commission (e.g., standard data protection clauses (2021/914/EU) with the recipients, or through other measures provided for by law. Additional information regarding the measures taken by us is available on request. We regularly re-evaluate the measures taken to assess requirements deriving from new regulatory guidance and case law.
7.Storage duration and erasure
Your personal data will be stored by us and our service providers in accordance with applicable data protection laws to the extent necessary for the processing purposes set out in this User Privacy Notice (see section 5. Purposes and legal basis for data processing and categories of recipients for more information on the processing purposes). Subsequently, we will delete your personal data in accordance with our data retention and deletion policy or take steps to properly render the data anonymous, unless we are legally obliged or permitted to keep your personal data longer (e.g., for legal compliance, tax, accounting, or auditing purposes, or to detect and prevent fraudulent or illegal activity on ShoppingToday.com). In Europe, the retention periods are generally between 6 and 10 years (e.g., for contracts, notifications, and business letters). As far as legally permissible or required, we restrict the processing of your data instead of deleting it (e.g., by restricting access to it). This applies in particular to cases where we may still need the data for the execution of the contract or for the assertion of or defense against legal claims, or where such retention is otherwise required or permitted by law. In these cases, the duration of the restriction of processing depends on the respective statutory limitation or retention periods. The data will be deleted after the relevant limitation or retention periods have expired.
Learn more about section 7
8.Rights as a data subject
Subject to possible restrictions under national law, as a data subject, you have the right to access, rectification, erasure, restriction of processing, and data portability with regard to your personal data. In addition, you can withdraw your consent and object to our processing of your personal data on the basis of our legitimate interests. You can also lodge a complaint with a supervisory authority.
Learn more about section 8
Exercising your rights and managing your settings
9.Cookies & similar technologies
When you use our Services, we and authorized third parties make use of cookies and similar technologies (which we will refer to collectively as cookies) to provide you with a better, faster, and safer user experience or to show you personalized advertising. You can find detailed information about the use of cookies and similar technologies and your choices in our User Cookie Notice.
Learn more about section 9
Your choices regarding cookies and similar technologies
10.Data security
We protect your personal data through technical and organizational security measures to minimize risks associated with data loss, misuse, unauthorized access, and unauthorized disclosure and alteration. To this end, we use network security services and data encryption, for example, as well as physical access restrictions for our data centers and logical access controls for data and systems access. You can find further information on our data security in our Security Center.
11.Other important information regarding data protection
This section contains important additional information about the protection of personal data in connection with the use of our Services, including whether you are required to provide personal data.
Learn more about section 11
12.Regional and State Privacy Disclosures
For additional regional disclosures for residents of certain U.S. states, including California, please review our State Privacy Disclosures page. For U.S. sellers (including those in California, Nevada, North Dakota, and Vermont), please follow the link to ShoppingToday.com Commerce Inc.'s U.S. Consumer Privacy Notice. For additional disclosures for specific regions or countries, including Brazil, mainland of People's Republic of China, and the United Kingdom, please review our Regional Privacy Disclosures page.
Previous User Privacy Notice
Was this article helpful
