Data Protection This website is operated by BRISA Entertainment GmbH.

The protection of your personal data is very important to us. Our privacy policy below describes how we collect, use, process and disclose your data in connection with your use of the website www.vw-collection-by-BRISA.de and the payment services. We process your personal data (e.g. name, address, email address, telephone number, etc.) solely in accordance with the provisions of the GDPR. Data is considered personal if it can be uniquely attributed to a specific natural person. The legal basis for data protection can be found in the General Data Protection Regulation (GDPR). The provisions below inform you regarding the nature, scope and purpose of the collection, use and processing of personal data by the data controller: BRISA Entertainment GmbH Hauptstrasse 6 85462 Reisen /Eitting Germany Tel.: +49 - 8122 / 97 27 – 0 Fax: +49 - 8122 / 97 27 – 40 Email: info@brisa.de Data Protection Officer: Kristin Hänsel, datenschutz@brisa.de For security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or enquiries to the data controller), our website uses SSL or TLS encryption. You can recognise an encrypted connection by the ‘https://’ prefix and the padlock symbol in your browser address bar. Please note that internet-based data transmission may nevertheless be subject to security vulnerabilities, meaning that completely watertight protection against access by third parties is virtually impossible. Collection of access data For technical reasons, the following data – amongst other things – which your internet browser transmits to us or to our web hosting provider is recorded (so-called server log files). This includes the name of the webpage accessed, the file, the date and time of access, the amount of data transferred, confirmation of successful access, the browser type and version, the user’s operating system, the referrer URL (the previously visited page), the IP address and the requesting provider. This data is analysed for statistical purposes to enable us to optimise our website and our services. The processing is carried out in accordance with Article 6(1)(f) of the GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data is not disclosed or used for any other purpose. We do, however, reserve the right to review the server log files retrospectively should there be concrete indications of unlawful use. Cookies To make your visit to our website more engaging and to enable the use of certain functions, we use so-called cookies on various pages. These are small text files that are stored on your device. Some of the cookies we use are deleted once the browser session ends, i.e. when you close your browser (so-called session cookies). Information about your visit to our website may be stored in cookies. Thanks to this data, it is possible, for example, for you to be shown information on the site that is specifically tailored to your interests. Other cookies remain on your device and enable us to recognise your browser the next time you visit (persistent cookies). You can configure your browser so that you are notified when cookies are set and can decide on a case-by-case basis whether to accept them, or you can block the acceptance of cookies in specific cases or generally. If you do not accept cookies, the functionality of our website may be limited. Collection, processing and use of personal data We collect and process personal data (e.g. name, address, email address) only if you have provided it to us as part of a registration, when ordering products and services, or in response to enquiries, and only to the extent necessary for the establishment, content or amendment of the legal relationship. Once the contract has been fully processed, your data will be deleted in accordance with statutory retention obligations, unless you have expressly consented to its further use. Without your consent or a corresponding official order, your personal data will not be made available to third parties by us or by persons commissioned by us. When you set up a customer account using the ‘Registration’ function, the data you enter will be stored permanently in our database. You may request the deletion of your data and your profile/account at any time. If, when setting up your profile/account, you have also given your consent to receive promotional information (newsletters), we or service providers commissioned by us will use the data you have provided for advertising purposes. This consent is voluntary and you may withdraw it at any time with future effect. Newsletter We offer you the option on our website to subscribe to our newsletter even without registering a customer account. Through this newsletter, we provide regular updates on our offers. To receive our newsletter, you will need a valid email address. We use the so-called ‘double opt-in’ procedure to send out the newsletter. This means that we will only send you an email newsletter once you have expressly confirmed to us that you consent to receiving it. We will then send you a confirmation email asking you to click on a link to confirm that you wish to receive future newsletters. By activating the confirmation link, you give us your consent to the use of your personal data in accordance with Article 6(1)(a) of the GDPR. When you subscribe to our newsletter, we will store your IP address and the date and time of your subscription. This serves as a safeguard on our part in the event that a third party misuses your email address and subscribes to our newsletter without your knowledge. We do not collect any further data. The data collected in this way is used exclusively for the purpose of receiving our newsletter. It is not passed on to third parties. You can unsubscribe from this newsletter at any time via the link provided in the newsletter or by sending a message to the data controller named above. Once you have unsubscribed, your email address will be deleted immediately from our newsletter mailing list, unless you have expressly consented to the further use of your data or we reserve the right to use your data for other purposes that are permitted by law and about which we inform you in this policy. Contact options We offer you the option on our website to contact us by email and/or via a contact form. In this case, the personal data provided by the user will be stored for the purpose of processing their enquiry. The data collected when using a contact form is specified in the relevant contact form. This data is stored and used exclusively for the purpose of responding to your enquiry or establishing contact, and for the associated technical administration. The legal basis for the processing of this data is our legitimate interest in responding to your enquiry in accordance with Article 6(1)(f) of the GDPR. If your enquiry is aimed at concluding a contract, the additional legal basis for processing is Article 6(1)(b) of the GDPR. Your data will be deleted once your enquiry has been fully processed; this is the case when it is clear from the circumstances that the matter in question has been conclusively resolved and provided that there are no statutory retention obligations to the contrary. No data is disclosed to third parties. Data disclosure in connection with an order and credit checks We store all data that you have provided to us when placing your order and, to the extent necessary for the performance of the contract, pass it on to contractual partners as part of the order processing, e.g. to the freight forwarder or parcel delivery service that usually delivers our consignments to you. Our contractual partners may use the data transmitted in this way solely for the purpose of fulfilling the order. For credit checks, we exchange address and creditworthiness data with credit reference agencies in justified cases (e.g. direct debit procedures). Service providers are only granted access to such personal information as is necessary to carry out the respective task. We pass on your payment details to the appointed credit institution as part of the payment processing, insofar as this is necessary for the payment to be processed. Where payment service providers are used, we will inform you explicitly below. The legal basis for the transfer of data in this context is Article 6(1)(b) of the GDPR. Disclosure of personal data to service providers for order processing and fulfilment – Amazon Order fulfilment is carried out by the service provider ‘Amazon’ (Amazon EU S.à r.l., 5, Rue Plaetis 2338, Luxembourg) as part of the ‘Fulfillment by Amazon’ (FBA) programme. Your personal data is transferred to Amazon solely for the purpose of processing the order. The transfer takes place in accordance with Article 6(1)(b) of the GDPR and only to the extent necessary for order processing. Details regarding data protection at Amazon and Amazon’s privacy policy can be viewed via the following link: https://www.amazon.de/gp/help/customer/display.html?nodeId=201909010& language=de_DE&ref=ag_home_cont_G201190450 Disclosure of personal data to delivery service providers – DHL If the goods are delivered by the transport service provider DHL (Deutsche Post AG, Charles-de-Gaulle-Straße 20, 53113 Bonn), we will pass on your email address to DHL prior to delivery of the goods, in accordance with Article 6(1)(a) of the GDPR, for the purpose of arranging a delivery date or providing a delivery notification. Otherwise, for the purpose of delivery, we will only pass on the recipient’s name and the delivery address to DHL in accordance with Article 6(1)(b) of the GDPR. The data is only disclosed to the extent necessary for the delivery of the goods. Without sufficient contact details (e.g. email address, telephone number), it is not possible to arrange a delivery date with DHL in advance or to provide a delivery notification. Consent may be withdrawn at any time with future effect by contacting the data controller named above or the transport service provider DHL. Disclosure of personal data to delivery service providers – UPS If the goods are delivered by the transport service provider UPS (United Parcel Service Deutschland S.à r.l. & Co. OHG, Görlitzer Straße 1, 41460 Neuss), we will pass on your email address to UPS prior to delivery of the goods in accordance with Article 6(1)(a) of the GDPR for the purpose of arranging a delivery date or providing a delivery notification. Otherwise, for the purpose of delivery in accordance with Article 6(1)(b) of the GDPR, we will only pass on the recipient’s name and the delivery address to UPS. This data is only disclosed to the extent necessary for the delivery of the goods. Without sufficient contact details (e.g. email address, telephone number), it is not possible to arrange a delivery date with UPS in advance or to receive updates on the delivery status. Consent may be withdrawn at any time with future effect by contacting the data controller named above or the transport service provider UPS. Use of social plugins Our website uses so-called social plugins (e.g. a direct link to our Facebook profile) from the social network Facebook, which is operated by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA (“Facebook”). The plugins are identified by a Facebook logo or the words ‘Facebook social plugin’ or ‘Facebook Social Plugin’. You can find an overview of the Facebook plugins and what they look like here: https://developers.facebook.com/docs/plugins When you visit a page on our website that contains such a plugin, your browser establishes a direct connection to Facebook’s servers. The content of the plugin is transmitted directly from Facebook to your browser and integrated into the page. Through this integration, Facebook receives the information that your browser has accessed the relevant page on our website, even if you do not have a Facebook profile or are not currently logged in to Facebook. This information (including your IP address) is transmitted directly from your browser to a Facebook server in the USA and stored there. If you are logged in to Facebook, Facebook can immediately associate your visit to our website with your Facebook profile. If you interact with the plugins – for example, by clicking the ‘Like’ button or posting a comment – this information is also transmitted directly to a Facebook server and stored there. The information is also published on your Facebook profile and displayed to your Facebook friends. For details of the purpose and scope of data collection, as well as the further processing and use of the data by Facebook, and your rights in this regard and the settings available to protect your privacy, please refer to Facebook’s privacy policy: https://de-de.facebook.com/about/privacy/ If you do not wish Facebook to link the data collected via our website directly to your Facebook profile, you must log out of Facebook before visiting our website. You can also completely prevent the Facebook plugins from loading by using browser add-ons, e.g. a ‘Facebook Blocker’. Use of Google AdWords Conversion Tracking: Our website uses the online advertising programme ‘Google AdWords’ and, as part of Google AdWords, conversion tracking provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (‘Google’). We use the Google AdWords service to draw attention to our attractive offers on external websites by means of advertising (so-called Google AdWords). We can determine, based on the data from the advertising campaigns, how successful the individual advertising measures are. Our aim is to show you adverts that are of interest to you, to make our website more engaging for you, and to ensure that advertising costs are calculated fairly. The conversion tracking cookie is set when a user clicks on an AdWords advert placed by Google. Cookies are small text files that are stored on your computer system. These cookies usually expire after 30 days and are not used for personal identification. If the user visits specific pages on this website and the cookie has not yet expired, Google and we can recognise that the user clicked on the advert and was redirected to that page. Each Google AdWords customer receives a different cookie. Cookies cannot therefore be tracked across the websites of AdWords customers. The information collected using the conversion cookie is used to compile conversion statistics for AdWords customers who have opted for conversion tracking. Customers are informed of the total number of users who clicked on their advert and were redirected to a page tagged with a conversion tracking tag. However, they do not receive any information that can be used to personally identify users. If you do not wish to participate in tracking, you can block this functionality by disabling the Google conversion tracking cookie via your web browser’s user settings. You will then not be included in the conversion tracking statistics. We use Google AdWords on the basis of our legitimate interest in targeted advertising in accordance with Article 6(1)(f) of the GDPR. Google LLC, based in the USA, is certified under the US-EU ‘Privacy Shield’ data protection agreement, which ensures compliance with the data protection standards applicable in the EU. You can find further information about Google’s privacy policy at the following web address: https://policies.google.com/privacy/update?gl=de. Please note that certain functions of this website may not be available, or may only be available to a limited extent, if you have disabled the use of cookies. Use of Google (Universal) Analytics – Google Analytics: Our website uses Google Analytics, a web analytics service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (‘Google’). Google Analytics uses so-called ‘cookies’, which are text files stored on your computer that enable an analysis of your use of the website. The information generated by the cookie regarding your use of this website (including the truncated IP address) is usually transmitted to a Google server in the USA and stored there. This website uses Google Analytics exclusively with the ‘_anonymizeIp()’ extension, which ensures that the IP address is anonymised by truncation and precludes direct personal identification. Through this extension, your IP address is truncated by Google beforehand within Member States of the European Union or in other signatory states to the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and truncated there. In these exceptional cases, this processing is carried out in accordance with Article 6(1)(f) of the GDPR on the basis of our legitimate interest in the statistical analysis of user behaviour for optimisation and marketing purposes. On our behalf, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide us with other services relating to website and internet usage. The IP address transmitted by your browser as part of Google Analytics will not be merged with other data held by Google. You can prevent the storage of cookies by adjusting your browser settings accordingly; however, please note that in this case you may not be able to make full use of all the features of this website. You can also prevent the collection of data generated by the cookie and relating to your use of the website (including your IP address) by Google, as well as the processing of this data by Google, by downloading and installing the browser plug-in available via the following link: https://tools.google.com/dlpage/gaoptout?hl=de You can prevent data collection by Google Analytics by clicking on the link. An opt-out cookie will be set to prevent the future collection of your data when you visit this website: Disable Google Analytics. Further information on terms of use and data protection can be found at http://www.google.com/analytics/terms/de.html or at https://www.google.de/intl/de/policies/. Google LLC, based in the USA, is certified under the US-EU ‘Privacy Shield’ data protection agreement, which ensures compliance with the data protection standards applicable in the EU. User and event data is retained for 14 months and is subsequently deleted. Further information on how Google Analytics handles user data can be found in Google’s privacy policy: https://support.google.com/analytics/answer/6004245?hl=de OpenAI Ads Conversion Tracking We use the conversion tracking feature of the OpenAI Ads Manager, provided by OpenAI, L.L.C., on our website to track whether users carry out specific actions on our website – in particular, whether they complete a purchase – after clicking on an advert displayed in ChatGPT. To this end – subject solely to your consent – the OpenAI Measurement Pixel is loaded. As part of conversion tracking, information may be processed relating to visits to our website, the association with a previous ad click, and technical details regarding the conversion event, such as the type of event, order value, currency and a technical event ID. We do not transmit any names, email addresses, postal addresses or telephone numbers to OpenAI via our implementation. We do not use so-called ‘advanced matching’ with personal customer data. OpenAI uses, amongst other things, so-called first-party cookies to attribute ad clicks. These include, in particular, the __oppref cookie, which can store the OpenAI click reference for up to 30 days, and the __obref cookie, which can store a randomly generated browser reference for up to 365 days. The actual storage period can be reduced by adjusting your browser settings or by deleting cookies. Processing takes place exclusively on the basis of your consent in accordance with Article 6(1)(a) of the GDPR and, where necessary, Section 25(1) of the TDDDG. Until you have given your consent, the OpenAI Measurement Pixel will not be loaded and no conversion events will be transmitted to OpenAI. You may withdraw your consent at any time with future effect via the cookie settings on our website. Following withdrawal, no further measurement events will be sent to OpenAI. Further information on the processing of data by OpenAI can be found in OpenAI’s privacy policy. Changes to this privacy policy We reserve the right to amend this privacy policy at any time with future effect. The latest version is always available on the website. Access/Withdrawal/Deletion Under the General Data Protection Regulation, you may contact us free of charge if you have any questions regarding the collection, processing or use of your personal data, or regarding the rectification, restriction, erasure or withdrawal of consent you have given. Please note that you have the right to have incorrect data rectified or personal data erased, provided that this right is not precluded by any statutory retention obligation. Retention period for personal data The period for which personal data is retained is determined by the relevant statutory retention periods (e.g. retention periods under commercial and tax law). Once this period has expired, the relevant data will be routinely deleted, provided that it is no longer required for the performance of a contract or for entering into a contract and/or we no longer have a legitimate interest in continuing to store it. As at: September 2026