Wir nehmen deinen Erfolg persönlich


Privacy and protection of your personal data are particularly important to us. Therefore we ask you to read our privacy policy carefully.

Privacy Policy

Data protection information of Otto (GmbH & Co KG) / OTTO Retail Media as of April 1, 2020

With about 55 employees and headquartered in Hamburg, OTTO Retail Media is part of Otto (GmbH & Co KG).
The unified standards of the EU General Data Protection Regulation (GDPR) (Datenschutzgrundverordnung (DSGVO) with regard to data protection have been in effect throughout Europe since May 25, 2018. The following information on data protection informs you about the processing of personal data by Otto (GmbH & Co KG) / OTTO Retail Media Division in accordance with the GDPR and the German Federal Data Protection Act (Bundesdatenschutzgesetz (BDSG 2018)).

Please read our data protection information carefully. Should you have any questions or comments concerning our data protection information, please feel free to contact us at datenschutzbeauftragter@ottogroup.com.


  1. Name and contact information of the controller for processing
  2. Contact data of the data protection officer
  3. Purposes of data processing, legal bases and legitimate interests pursued by the controller or a third party as well as recipient categories
    3.1 Accessing our websites/log files
    3.2 Newsletter
    3.3 Online presence and website optimization
    3.3.1 Cookies – general information
    3.3.2 Google Analytics
    3.3.3 Hubspot
    3.4 Contact
    3.5 Recipients outside the EU
  4. Your rights
    4.1 Overview
    4.2 Right to object
    4.3 Right of withdrawal

1. Name and contact information of the controller for processing

This data protection information applies to data processing by

OTTO (GmbH & Co KG)
OTTO Retail Media
Werner-Otto-Straße 1-7
22179 Hamburg

Alexander Birken (Chairman), Dr. Marcus Ackermann, Sergio Bucher, Sebastian Klauke, Petra Scharner-Wolff, Kay Schiebur

Phone: 040 – 3603 3603

Info E-Mail Adresse

for the website www.ottoretail.media and all sub-domains

2. Contact data of the data protection officer

You can reach the controller’s company data protection officer(s) under

OTTO (GmbH & Co KG)
– Datenschutzbeauftragte/r – (Data Protection Officer)
Werner-Otto-Straße 1-7
22179 Hamburg

E-mail: datenschutzbeauftragter@ottogroup.com

3. Purposes of data processing

3.1 Accessing our websites/log files

Every time websites/applications are accessed, information is sent to the server of our website/application by the internet browser of your end device and stored temporarily in so-called log files. The data sets stored in this way contain the following data which will be stored until they are erased automatically: date and time of access, name of accessed site, IP address of the requesting device, referrer URL (origin URL from which you accessed our website), the data volume transmitted, loading time as well as product and version information of the browser used and the name of your access provider.

The legal basis for processing the IP address is Article 6(1)(f) GDPR. Our legitimate interest results from

  • ensuring a trouble-free establishment of a connection,
  • ensuring convenient use of our website/application,
  • analyzing system security and stability.

No immediate inference as to your identity is possible from the information, nor do we draw any such inference.

The data is stored and automatically erased when the aforementioned purposes have been achieved. The standard periods for erasure are determined by the criterion of necessity.

3.2 Newsletter

Via our websites/ applications, we offer you the opportunity to sign up for our newsletter. To make sure that no error occurred when the e-mail address was entered, we use the so-called double opt-in method (DOI method): After you entered your e-mail address in the registration field, we will send you a confirmation link to the address you entered.

Your e-mail address will not be included in our distribution list for sending our newsletter until you clicked on this confirmation link. The legal basis for this data processing is Article 6(1)(a) GDPR.

Notice of right of withdrawal

You may withdraw your consent at any time with future effect by sending a message to this e-mail address
or using the cancellation option at the end of each newsletter.

3.3 Online presence and website optimization

3.3.1 Cookies – general information

We use cookies on various sites to make the visit to our website attractive and allow the use of certain functions and collect statistical data about the use of our website. Cookies are small text files which your browser creates automatically and which are stored on your end device (laptop, tablet, smartphone and the like) when you visit our site. Cookies cause no damage to your end device and do not contain viruses, Trojans or other malware. The cookie stores information which is generated in relation to the specific end device used. However, this does not mean that we obtain any direct knowledge about your identity in this way.

Most of the cookies we use are erased again at the end of the browser session (so-called session cookies). Other cookies remain on your computer and allow us to recognize your computer during your next visit (so-called permanent or cross-session cookies). These cookies are used primarily to make our website user-friendly, more effective and more secure.

You can of course set up your browser so that it does not store our cookies on the hard drive. The Help function in the menu bar of most web browsers explains how you prevent your browser from accepting new cookies, how you set your browser to notify you when you receive a new cookie and also how you can erase all cookies already received and block any additional ones.

To do so, please take the following steps:

In Internet Explorer:

In the “Tools” menu, select “Internet options”.
Click the “Privacy” tab.
Now you can select the security settings for the internet zone. Here you can set whether and what cookies should be accepted or blocked.
Confirm your selection by clicking “OK”.

In Firefox:

Click the Menu button and select “Options”.
Click on “Privacy & Security”.
Go to “Cookies and Site Data”.
Here you can select whether to accept cookies, how long you wish to keep these cookies, and add exceptions for websites that should always or never be allowed to use cookies.
Confirm your selection by clicking “OK”.

In Google Chrome:

Click the Chrome button in the top-right corner of the browser.
Select “Settings”.
Click “Show Advanced Settings”.
Under “Privacy”, click “Content settings”.
Under “Cookies”, you can select the following settings for cookies:
Clear cookies
Block cookies by default
Clear cookies and website data by default on exiting the browser
Allow exceptions for cookies from certain websites or domains

However, we would like to point out that in this event, you may not be able to use all functions of this website to their fullest extent.

Insofar as these cookies and/or the information they contain involve personal data, the legal basis for data processing is Art. 6(1)(f). In this context, our interest in optimizing our website is to be regarded as legitimate within the meaning of the aforementioned provision.

3.3.2 Google Analytics

For the purpose of the need-based design and ongoing optimization of our websites, we use – based upon Article 6(1)(f) GDPR – Google Analytics, a web analysis service of Google Inc. (“Google”). Google Analytics uses so-called “cookies”, text files which are stored on your computer and make it possible to analyze your use of the website. In this context, pseudonymized use profiles are created and cookies are used. The information generated by the cookie about your use of this website is:

  • browser type/version,
  • operating system used,
  • referrer URL (the site visited previously),
  • host name of the accessing computer (IP address),
  • time of day of the server request

On behalf of the operator of this website, Google will use this information to analyze your use of the website, to compile reports about website activities and to render additional services related to the website use and the internet use vis-à-vis the website operator. The IP address transmitted by your browser within the framework of Google Analytics will not be merged with other data from Google. Using a corresponding setting of your browser software, you can prevent cookies from being stored; however, we would like to point out that in this event, you may not be able to use all features of this website to their fullest extent. You can also prevent the collection of data generated by the cookie and related to your use of the website (incl. your IP address) for Google as well as the processing of this data by Google by downloading and installing the browser plug-in available under the following link: http://tools.google.com/dlpage/gaoptout?hl=de .

As an alternative to the browser add-on, particularly with browsers on mobile end devices, you can also prevent the collection of data by Google Analytics by clicking on this link . An opt-out cookie is set that prevents the future collection of your data when you visit this website. The opt-out cookie only applies to this browser and only to our website and is stored on your device. If you delete the cookies in this browser, you have to set the opt-out cookie again. You can find additional information about data protection in connection with Google Analytics on the Google Analytics website.

3.3.3. Hubspot

This website uses the HubSpot software of the US software company of the same name with a branch office in Ireland, HubSpot, 2nd Floor 30 North Wall Quay, Dublin 1, Ireland. HubSpot is a software solution for controlling and implementing inbound marketing. The stored information is stored on the HubSpot servers. They can be used by us to contact visitors to our website and to determine which services of our company are of interest to them. We use all collected information exclusively to optimize our marketing. You can find further information in the terms of use and privacy policies of HubSpot Inc. under http://www.hubspot.com/terms-of-service and under http://www.hubspot.com/privacy-policy. HubSpot is also certified under the Privacy Shield Framework and thereby offers an additional guarantee of compliance with European data protection law. (https://www.privacyshield.gov). We need HubSpot for the efficient and fast processing of user requests. Data processing is based on Article 6(1)(f) GDPR which permits the processing of data for the purposes of the legitimate interests pursued by the controller except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject.

3.4 Contact

You may contact us in several ways: via email, by phone, or by mail. When you contact us, we will use the personal data which you make available to us voluntarily within this context exclusively for the purpose of getting in touch with you and being able to process your request.
Article 6(1)(a), Article 6(1)(b), Article 6(1)(c), and Article 6(1)(f) GDPR are the legal basis for this data processing.

3.5 Recipients outside the EU

With the exception of the processing set forth herein, we do not share your data with any recipients based outside the European Union or the European Economic Area. The processing set forth under 3.1 – 3.3. cause a data transfer to the servers of the tracking or targeting technology providers commissioned by us. The data is transferred based on so-called standard contractual clauses of the EU commission or in accordance with the principles of the so-called Privacy Shield.

4. Your rights

4.1 Overview

Besides the right to withdraw the consents you have given us, you are entitled to the following additional rights provided that the respective legal prerequisites have been met:

  • The right of access to your personal data stored by us (Article 15 GDPR), in particular, you can obtain access to information on the purposes of the processing, the category of the personal data concerned, the categories of recipients to whom your data were or are being disclosed, the envisaged period of storage, and the source of your data, insofar as these were not collected directly from you;
  • the right to rectification of incorrect data or completion of correct data (Article 16 GDPR),
  • the right to erasure of your data stored with us (Article 17 GDPR), unless we have to comply with statutory or contractual retention periods or other legal duties or rights concerning further storage,
  • The right to restriction of processing of your data (Article 18 GDPR), to the extent that the accuracy of the data is contested by you, that the processing is unlawful, but you oppose its erasure; the controller no longer needs the data, but you require the data for the establishment, exercise, or defense of legal claims, or have objected to the processing pursuant to Article 21 GDPR,
  • The right to data portability pursuant to Article 20 GDPR, i.e. the right to receive selected data stored with us about you transmitted in a commonly used, machine-readable format, or to request transmission to another controller
  • the right to lodge a complaint with a supervisory authority. For this purpose, you may usually turn to the supervisory authority at your habitual residence or place of work, or where our company seat is located.

You may assert the aforementioned rights to which you are entitled against us under datenschutzauskunft@otto.de.
You may assert your right to data portability under datenschutzauskunft@otto.de.

4.2 Right to object

Under the conditions of Article 21(1) GDPR, it is possible to object to the data processing on grounds relating to the data subject’s particular situation.

The above general right to object applies to all processing purposes described in this data protection information which are processed based on Article 6(1)(f) GDPR.

Unlike the special right to object directed at data processing for promotional purposes, we are obligated under the GDPR to implement such a general right to object only if you give us reasons of overriding importance (e.g. a possible danger to life or health).

4.3 Right of withdrawal

Insofar as we process data based upon a consent given by you, you have the right to withdraw the consent given at any time. The withdrawal of the consent does not result in rendering invalid the data processing which has taken place based on the consent up to the date of the withdrawal.