Zeotap ID+ service

The Zeotap ID+ service enables us to target you with personalized advertising through Zeotap data product services on third-party platforms using an ID+ token collected when you use the website/app and to share this token with other Zeotap ID+ partners. If you sign up on a partner's website, such as a publisher or an e-commerce platform, using your email address and have previously given your consent, this information will be transmitted to Zeotap in a hashed, i.e., pseudonymized form. Zeotap then converts the hashed email address into an ID+ identifier and returns it. The ID+ is then stored by the site operator in a first-party cookie in the browser's local storage, where it can only be accessed by the publisher itself. Each user receives an ID+ identifier for each of their devices, which are interconnected at Zeotap (referred to as the ID+ token). The outcome of this matching process is information on whether an Ulla Popken user/customer is included in the Zeotap data pool or among other third-party entities or data processors. If a positive result comes back, Zeotap may use this, based on the additional information stored about you by Zeotap, to show you personalized advertising for Ulla Popken products on publishers' websites. Furthermore, Ulla Popken may, if necessary, obtain information stored on your ID+ token from third parties (e.g., related to your areas of interest) and available in the Zeotap data pool to display personalized advertising.
The data matching described above is conducted under joint responsibility with Zeotap GmbH, c/o WeWork, Stresemannstrasse 123, 10963 Berlin, Germany. We have concluded an agreement with Zeotap GmbH on joint responsibility in accordance with Art. 26 GDPR.
If you wish to exercise your data subject rights concerning the data stored about you in the Zeotap data pool, you can do by contacting Zeotap via the following link: https://privacyportal-de.onetrust.com/webform/.
You can exercise your rights regarding information collected and stored by Ulla Popken at any time by using the contact options provided under "General Data Protection Information".
The parties fulfill their data protection obligations in accordance with their respective responsibilities as follows:
Obligations under the GDPRPopken Fashion GmbHZeotap GmbH
Determination of the purpose and means
of data processing
XX
Determination of the type of
personal data
XX
Art. 26 (2): Informing data subjects
about the key contents of this agreement
XX
Art. 13: Obligation to provide informatin
when collecting personal data.
X (in relation to the data stored
at Popken Fashion GmbH)
X (in relation to data stored at Zeotap)
Art. 14: Obligation to provide information if data
has not been collected from the data subject.
X (in relation to the data stored
at Popken Fashion GmbH)
X (in relation to data stored at Zeotap)
Art. 15: Processing of information requests.X (in relation to the data stored
at Popken Fashion GmbH)
X (in relation to data stored at Zeotap)
Art. 16: Processing of rectification requests.X (in relation to the data stored
at Popken Fashion GmbH)
X (in relation to data stored at Zeotap)
Art. 17, 18, 19: Processing of deletion requests,
restriction of processing, notification
of the obligation to delete.
X (in relation to the data stored
at Popken Fashion GmbH)
X (in relation to data stored at Zeotap)
Art. 20: Processing of requests for data portability.X (in relation to the data stored
at Popken Fashion GmbH)
X (in relation to data stored at Zeotap)
Article 21: Processing of objections.X (in relation to the data stored
at Popken Fashion GmbH)
X (in relation to data stored at Zeotap)
Art. 24, 32, 35, 36: Definition/documentation
of technical and organizational measures,
risk assessment, data protection impact assessment if applicable,
and consultation with a supervisory authority
XX
Art. 28: Engagement and monitoring of
data processors or sub-processors.
XX
Art. 30 Maintenance of the register
of processing activities.
XX
Art. 33, 34: Notification of data breaches.X (in relation to the data stored
at Popken Fashion GmbH)
X (in relation to data stored at Zeotap)
To object to the future processing of data within the ID+ network, data subjects can exercise their rights through the Zeotap portal or on any page of companies participating in the ID+ network where they have given their consent.