zLabels Privacy Policy

Last amended: August 2019

Welcome to our Privacy Policy! In this Privacy Policy we inform you about how we collect, process and use your personal data when you visit our website.

1. Who we are

This website is provided by the zLabels GmbH, Neue Bahnhofstraße 11-17, 10245 Berlin (hereinafter referred to as “zLabels” or “we”), a company of the Zalando Group. zLabels is also the controller within the meaning of the EU General Data Protection Regulation (GDPR) for the collection, processing and use of your personal data, when you visit our website. Should you have any questions or suggestions regarding data protection, please do not hesitate to contact us. You are welcome to direct your data protection concerns to our data protection officer.

Contact information of our Group Data Protection Officer:
Data Protection Officer
Zalando SE
Valeska-Gert-Straße 5
10243 Berlin
Telefax: +49 (0)30 2759 46 93
E-Mail: datenschutz@zalando.de

2. How we process your personal data

Visiting the website.

When browsing our website, we automatically process data that is necessary in order to make the website available to you. This includes:

  • date and time of access,
  • name of the file requested,
  • website from which the file was requested,
  • access status (e.g. file transferred, file not found),
  • your web browser and your device’s operating system,
  • the IP address of the requesting device.

We further process this data to guarantee the long-term functionality, availability and security of our systems. The legal basis for this data processing is Article 6 (1) (f) GDPR, based on our and your legitimate interest to make our website available to you.

We also temporarily store data in our internal log files in order to generate statistical data on the use of our website, to further develop our website with regard to the usage habits of our visitors (e.g. if the proportion of mobile devices with which the pages are accessed increases) and for the general administrative maintenance of our website. The legal basis for this data processing is Article 6 (1) (f) GDPR, based on our legitimate interest to appropriately optimise our website.

The information stored in the log files does not allow any conclusions about your person and we only store IP addresses in the log files in a shortened and anonymised form.

Contacting zLabels.

You can contact us at any time via the email addresses provided on this website. In order to process your request, we may share information with other companies in the Zalando Group. If your request is aimed at the initiation or performance of a contract, the legal basis for the processing of your data is Article 6 (1) (b) GDPR. Otherwise all data processing regarding our answer to your request is based on Article 6 (1) (f) GDPR, based on our and your legitimate interest to respond to your request.

We will store this data as long as we process your request and after that within the stipulated retention periods.


In the case of your applications by email, the submitted documents and information will be stored. After six months, your application data will be deleted automatically.

At the invitation of our recruiting team, you have the opportunity to consent to the storage of your data in our talent pool upon completion of your application process. If you make use of this option, your application data will be stored with us for 12 months.

Of course, you can always request the deletion of your data by e-mail to: jobs@zlabels.com at any time.

Use of cookies.

This website places small text files, called cookies, in your web browser’s memory. Cookies contain information that can be used to recognise your device on the internet. Cookies cannot execute any programs or transfer viruses to your computer. We use cookies in order to make using our service as time-saving and user-friendly as possible. We do this to be able to make your use of our website more convenient and personalised. The processing of the respective cookies is based on our aforementioned legitimate interests, meaning the legal basis is Article 6 (1) (f) GDPR.

You can prevent the storage of cookies by adjusting your browser settings to disable the acceptance of cookies from this website. If you do not accept cookies, however, this may in some cases lead to considerable functional restrictions on our website.

Google Analytics.

In addition, we also use cookies and similar technologies from third-party providers for analysis and marketing purposes as part of the statistical recording and analysis of general usage behaviour based on access data. We use the results of such analyses to improve our website and adapt it to the actual needs of our users.

Our website specifically uses the web analytics service Google Analytics, provided – according to Google - by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Google Analytics uses cookies with a validity of 24 months to record your access data when you visit our website. On our behalf, Google combines the access data into pseudonymous user profiles and transmits it to a Google server in the USA. Generally, your IP address is anonymised beforehand. This means that we cannot identify you or determine how you use our website based on the information collected by Google. In exceptional cases where personal data is transferred to servers located in the USA, Google has subjected itself to the EU-US Privacy Shield. Google has thus committed itself to ensuring the European data protection principles and level of data protection even in the context of data processing performed in the USA.

On our behalf, Google uses the information generated by cookies for the purpose of evaluating the usage of our website, compiling reports on website activity, and providing us with other services relating to website usage and internet usage. For further information, please refer to the Google Analytics privacy policy.

The processing of usage data for Google Analytics purposes is based on our legitimate interest in the demand-oriented design and optimisation of our website, and the legal basis in this respect is Article 6 (1) (f) GDPR. You may object to these web analytics activities by Google at any time. There are several ways to do this:

  • You may configure your browser to block cookies from Google Analytics.
  • You may adjust your advertising settings on Google.
  • In the browsers Firefox, Internet Explorer and Chrome, you can install the deactivation plug-in provided by Google using the following link (this option does not work on mobile devices): Browser plug-in link

For further information about Google Analytics, please refer to Google’s privacy policy.

3. Links to other websites and online content

Our website may contain links to websites and online content of other providers not affiliated with us. If you activate these links, we naturally no longer have any influence on which data is collected by the respective providers and which data they record. For more detailed information on data collection and use, please refer to the privacy policies of the respective providers. Since the collection and processing of data by third parties is beyond our control, we cannot assume any responsibility for this.

4. Disclosure of data

In principal, we will only pass on the data we collect if:

  • you have given your express consent to this pursuant to Article 6 (1) (a) GDPR;
  • disclosure is necessary pursuant to Article 6 (1) (f) GDPR in order to assert, exercise or defend legal claims and there is no reason to assume that there is an overriding legitimate interest of the data subject;
  • we are legally obliged to do so under Article 6 (1) (c) GDPR; or
  • this is permitted by law and is required under Article 6 (1) (b) GDPR for the processing of contractual relationships with you or for taking steps at your request prior to entering into a contract.

Part of the data processing described in this Privacy Policy may be carried out by our service providers. This may in particular include data centres that store our website and databases, IT service providers that maintain our systems and consulting firms. If we pass data on to our service providers, they may use the data exclusively for the fulfilment of their tasks. We have carefully selected and commissioned the service providers. They are contractually bound by our instructions, have appropriate technical and organisational measures in place to protect the rights of data subjects, guarantee an appropriate level of data protection and are carefully monitored by us.

In addition, data may be disclosed in connection with official requests, court orders and legal proceedings if this is necessary to pursue or enforce rights.

5. Your rights

You have the right to information about how we process your personal data at any time. When providing this information, we will explain the data processing to you and provide you with an overview of the data stored about you.

If data stored by us is incorrect or no longer up to date, you have the right to have this data corrected.

You may also demand that your data be erased. Should the erasure not be possible in exceptional cases due to other legal regulations, the data will be blocked so that it is only available for that legal purpose.

You are also entitled to have the processing of your data restricted, e.g. if you believe that the data we have stored is incorrect. You also have the right to data portability, which means that on request we will send you a digital copy of the personal data you have provided.

In order to assert your rights described here, you can contact us at any time using the contact details provided above. This also applies if you wish to receive copies of safeguards in order to prove an adequate level of data protection.

In addition, you have the right to object to data processing if it occurs based on Article 6 (1) (e) or (f) GDPR or for direct marketing purposes. Finally, you have the right to lodge a complaint with our competent data protection supervisory authority. You can assert this right by contacting a supervisory authority in the Member State of your habitual residence, your place of work or the place of the alleged infringement. The competent supervisory authority in Berlin is: Berlin Commissioner for Data Protection and Freedom of Information, Friedrichstr. 219, 10969 Berlin.

Right of withdrawal and objection.

If you have consented to a data processing activity, you have the right to withdraw the consent you gave us at any time, pursuant to Article 7 (3) GDPR. As a result of this, we will cease the data processing based on this consent with future effect. This withdrawal of your consent will not affect the lawfulness of the processing carried out on the basis of the consent prior to the withdrawal.

If we process your data on the basis of legitimate interests pursuant to Article 6 (1) (f) GDPR, you have the right under Article 21 GDPR to object to the processing of your data, and to give us reasons which arise from your particular situation which, in your opinion, show that your legitimate interests override ours. If your objection is to data processing for direct marketing purposes, you have a general right of objection, which we will implement without requiring you to give reasons.

If you would like to make use of your right of withdrawal or objection, it is sufficient to simply notify us using the contact details provided above.