Thank you for your interest in our company. Protecting personal data is a particularly important concern for us, which is why we would like to provide you with detailed information about the processing of your personal data. The processing of personal data is always carried out in accordance with legal regulations, in particular the General Data Protection Regulation (GDPR) and the applicable national data protection laws. With this statement, we inform you about the type, scope, and purpose of the data collected, used, and processed, and clarify the rights of those affected by the data processing. As a company and the controller responsible for processing, we have implemented extensive technical and organizational measures to ensure the highest possible protection of the personal data processed.

III. General Information on Data Processing

1. Definitions

We use various terms in our privacy policy that are based on legal foundations and are explained below to make our privacy policy simple and easy to understand. In the context of this privacy policy, the term:

“personal data” refers to all information relating to an identified or identifiable natural person (hereinafter “data subject”); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person;

“processing” means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure, or destruction;

“restriction of processing” means the marking of stored personal data with the aim of limiting their processing in the future;

“profiling” means any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to a natural person, in particular to analyze or predict aspects concerning that natural person's performance at work, economic situation, health, personal preferences, interests, reliability, behavior, location, or movements;

“pseudonymization” means the processing of personal data in such a manner that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organizational measures to ensure that the personal data are not attributed to an identified or identifiable natural person;

“controller” means the natural or legal person, public authority, agency, or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law;

“processor” means a natural or legal person, public authority, agency, or other body which processes personal data on behalf of the controller;

“recipient” means a natural or legal person, public authority, agency, or another body, to which the personal data are disclosed, whether a third party or not. However, public authorities which may receive personal data in the framework of a particular inquiry in accordance with Union or Member State law shall not be regarded as recipients; the processing of those data by those public authorities shall be in compliance with the applicable data protection rules according to the purposes of the processing;

“third party” means a natural or legal person, public authority, agency, or body other than the data subject, controller, processor, and persons who, under the direct authority of the controller or processor, are authorized to process personal data;

“consent” of the data subject means any freely given, specific, informed, and unambiguous indication of the data subject's wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her;

2) Scope of Processing of Personal Data

In principle, it is possible to use our online services without providing personal data. We process personal data of our users only to the extent necessary to provide a functional website as well as our content and services. The processing of our users' personal data is generally carried out only with the user's consent. An exception applies in cases where prior consent cannot be obtained for factual reasons and the processing of the data is permitted by legal regulations.

3) Legal Basis for the Processing of Personal Data

Insofar as we obtain the consent of the data subject for processing operations involving personal data, Article 6(1)(a) of the EU General Data Protection Regulation (GDPR) serves as the legal basis.

4) Repair Form

By filling out the repair form, you agree that your personal data will be processed for the purpose of carrying out the repair order. Your personal data will be passed on to Orthopädie Schuhtechnik Rockstroh in Ludwigsburg. The transfer is made solely for the purpose of fulfilling the agreed contractual purpose. Your data will be deleted 12 months after the repair has been carried out.

5) Registration and Customer Account

When you open a customer account, you consent to the storage of your master data such as name, address, email address, and bank details, as well as your usage data (username, password). This allows you to place orders with us using your email address or customer number and your personal password. In doing so, we obtain the following consent.

6) Data Deletion and Storage Period

The personal data of the data subject will be deleted or blocked as soon as the purpose of storage no longer applies. Storage may also take place if this has been provided for by the European or national legislator in regulations, laws, or other provisions to which the controller is subject. Data will also be blocked or deleted when a storage period prescribed by the aforementioned regulations expires, unless there is a necessity for further storage of the data for the conclusion or fulfillment of a contract.

If the processing of personal data is necessary to fulfill a legal obligation to which our company is subject, Article 6(1)(c) GDPR serves as the legal basis.

If the processing of personal data is necessary to protect the vital interests of the data subject or another natural person, Article 6(1)(d) GDPR serves as the legal basis.

If the processing is necessary for the performance of a contract to which the data subject is a party, Article 6(1)(b) GDPR serves as the legal basis. This also applies to processing operations that are necessary for the implementation of pre-contractual measures.

If processing is necessary to safeguard a legitimate interest of our company or a third party and the interests, fundamental rights, and freedoms of the data subject do not outweigh the former interest, Article 6(1)(f) GDPR serves as the legal basis for processing.

As a responsible company, we refrain from profiling or any other automated decision-making.

IV. Use of Our Services

1. PROVISION OF THE WEBSITE AND CREATION OF LOGFILES

Description and scope of data processing, legal basis, purpose, and storage period
Each time our website is accessed, our system automatically collects data and information from the computer system of the accessing computer.

The following data is collected:

1. Information about the browser type and version used
2. The user's operating system
3. The user's internet service provider
4. The user's IP address
5. Date and time of access
6. Websites from which the user's system accesses our website
7. Websites accessed by the user's system via our website

The data is also stored in the log files of our system. This data is not stored together with other personal data of the user. 

The legal basis for the temporary storage of the data and the log files is Art. 6 (1) lit. f GDPR. The temporary storage of the IP address by the system is necessary to enable the delivery of the website to the user's computer. For this purpose, the user's IP address must be stored for the duration of the session. The storage in log files is carried out to ensure the functionality of the website. In addition, we use the data to optimize the website and to ensure the security of our information technology systems. An evaluation of the data for marketing purposes does not take place in this context. Our legitimate interest in the processing of data in accordance with Art. 6 (1) lit. f GDPR also lies in these purposes. The data will be deleted or anonymized after the purpose of its collection has been achieved, so that it is no longer possible to assign the calling client. The collection of data for the provision of the website and the storage of the data in log files is absolutely necessary for the operation of the website. Consequently, the user has no possibility to object.

2. USE OF COOKIES

Description and scope of data processing, legal basis, purpose, storage duration, right to revoke and remove
Our website uses cookies. Cookies are text files that are stored in the internet browser or by the internet browser on the user's computer system. When a user visits a website, a cookie may be stored on the user's operating system. This cookie contains a characteristic string that allows the browser to be uniquely identified when the website is called up again.

a) We use technically necessary cookies to make our website more user-friendly. Some elements of our website require that the calling browser can be identified even after a page change. The following data is usually stored and transmitted in the cookies:

• Language settings
• Login information
• Session ID

b) If we use (technically non-essential) cookies on our website that allow an analysis of the users' surfing behavior, the following data can usually be transmitted in this way:

• Search terms entered
• Frequency of page views
• Use of website functions
• IP address
• Browser data

When visiting our website, the user is informed about the use of cookies for analysis purposes and their consent to the processing of the personal data used in this context is obtained. In this context, a reference to this privacy policy is also provided. The legal basis for the processing of personal data using technically necessary cookies is Art. 6 (1) lit. f GDPR. The legal basis for the processing of personal data using cookies for analysis purposes is Art. 6 (1) lit. a GDPR if the user has given their consent.

The purpose of using technically necessary cookies is to simplify the use of websites for users. Some functions of our website cannot be offered without the use of cookies. For these, it is necessary that the browser is recognized again after a page change. We need cookies for the following applications:

• Adoption of language settings
• Remembering search terms
• Remembering general cookie settings

The user data collected through technically necessary cookies is not used to create user profiles. The use of analysis cookies is for the purpose of improving the quality of our website and its content. Through the analysis cookies, we learn how the website is used and can thus continuously optimize our offer. Our legitimate interest in the processing of personal data in accordance with Art. 6 (1) lit. f GDPR also lies in these purposes. Cookies are stored on the user's computer and transmitted by it to our site. Therefore, as a user, you also have full control over the use of cookies. By changing the settings in your internet browser, you can disable or restrict the transmission of cookies. Already stored cookies can be deleted at any time. This can also be done automatically. If cookies for our website are deactivated, it may no longer be possible to use all functions of the website to their full extent. The transmission of Flash cookies cannot be prevented via the browser settings, but can be prevented by changing the settings of the Flash Player.

The data stored in our cookies is not linked to your personal data (name, address, etc.).

3. REGISTRATION FUNCTION

We give our visitors the opportunity to register on our site via a contact form. The personal data visible from the input mask is only collected and stored for the use of our offer. In the event that a third party misuses your data, we store the IP address, the time, and the date of registration as a safeguard in order to investigate any misuse that has occurred. The transfer of your data to third parties is generally excluded. The other data collected is not compared with this data. Registered visitors can change or completely delete the personal data they have entered from the database at any time.

4. CONTACT OPTIONS

You can contact us at any time via a contact form or by email to express your wishes and goals. The user's voluntarily provided data in this case is stored in our database for processing and deleted after the purpose of processing has been achieved. Transfer to third parties and comparison with other data is excluded.

5. RECEIVING OUR NEWSLETTER

Our online offer includes the possibility to subscribe to our newsletter. With this, we regularly inform you about offers, news, events, and other significant occurrences. The newsletter can only be received if the required personal data marked as necessary on the registration page (at least the email address) is entered and registration is completed. To ensure consent for newsletter delivery, we use the so-called double opt-in (DOI) procedure. As part of this, the potential recipient is first provisionally added to the distribution list. The potential recipient then receives a confirmation email with the opportunity to legally confirm the registration. Only if the confirmation is made will the address be fully activated in our distribution list, and you declare your consent to receive it. Upon first registration, we store the following information, which is required to document and prove a legally secure registration:

We store the following information, which is required to document and prove a legally secure registration:

• Email address
• If applicable, name
• IP address at the time of confirmation (Double-Opt-In)
• Technical information for delivery (e.g., timestamp)

The data is used exclusively for sending the newsletter. You can unsubscribe from the newsletter at any time and revoke your consent. A corresponding link can be found in every newsletter. You can also unsubscribe from the newsletter on the website. The newsletter may be sent by a shipping service provider. The shipping service provider acts on our behalf under a data processing agreement and may use the data in pseudonymized form to improve its services or for statistical purposes. The data will not be used for direct contact or shared with third parties by the shipping service provider.

Further information about the shipping service providers can be found here.

System: Spotler Mail+, a service of Spotler Group (Spotler Nederland B.V., The Netherlands).
Address: Spotler GmbH, Bertha-Benz-Straße 5, 10557 Berlin

Information on Spotler's data protection can be found in the privacy policy at:
https://spotler.com/en-de/privacy-statement

6. DATA PROTECTION FOR APPLICATIONS AND IN THE APPLICATION PROCESS

For the purpose of processing an application, applicant data is collected, stored, and processed electronically. This is particularly the case if the application is submitted electronically, e.g., by email. If an employment contract is concluded, the data will continue to be stored in your personnel file in compliance with legal regulations for the usual organizational and employment relationships. If no employment contract is concluded with the applicant, the applicant data will be automatically deleted from the database after the rejection is announced, unless special legal conditions apply, such as the obligation to provide evidence under the General Equal Treatment Act, which require longer storage, or if you have explicitly consented to longer storage during the application process.

7. USE OF FACEBOOK, GOOGLE+, INSTAGRAM, LINKEDIN, PINTEREST, TWITTER, XING, YOUTUBE, TIKTOK

If we use plugins from the social networks Facebook, Google+, Instagram, LinkedIn, Pinterest, Twitter, Xing, YouTube, or TikTok on our website, you can recognize the respective plugins by the corresponding company logos. By visiting our website, a connection may be established between your computer and the social media provider via the respective component of the above-mentioned social media plugin, and data may be assigned. If you are logged into one of the above services during your visit to our site, the provider of the respective service may be able to determine and assign your username and real name from the transmitted information.

The Xing Share Button, for example, does not store any personal data. Xing does not evaluate your IP address or user behavior. However, if you are logged into Xing at the time of your visit, your account information may be used to establish a connection to your visit to our site.

If you are logged into Xing at the time of your visit, your account information may be used to establish a connection to your visit to our site.

Please note that we have no influence over the sharing of your data by the providers of the above social networks.
For more information about the privacy policies, please visit the respective pages of the above social networks.
Further information about the individual social media services can be found here:

Facebook
Facebook Ireland Ltd. 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland
https://de-de.facebook.com/about/privacy/
https://developers.facebook.com/docs/plugins

Google+
Google Ireland Ltd, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland
https://developers.google.com/+/web/buttons-policy

Instagram
Facebook Ireland Ltd. 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland
https://help.instagram.com/155833707900388

LinkedIn
LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland
https://www.linkedin.com/legal/privacy-policy?trk=hb_ft_priv

Pinterest
Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland
https://pinterest.com/about/privacy/

Twitter
Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07 IRELAND
https://twitter.com/privacy

XING
XING SE, Dammtorstraße 30, 20354 Hamburg
https://privacy.xing.com/de/datenschutzerklaerung

Youtube
Google Ireland Ltd, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland
https://policies.google.com/privacy?hl=de&gl=de

TikTok
TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland
https://www.tiktok.com/legal/page/eea/privacy-policy/de-DE

8. USE OF OUR ONLINE SHOP

We use the Shopify International Ltd. shop system (Victoria Buildings, 1-2 College Green, Dublin 2, Ireland, "Shopify") for our online shop. When you place an order or visit our shop, your personal data (e.g., name, address, email address, payment data, IP address, and browser information) is processed on Shopify's servers. Shopify provides us with the e-commerce platform for sales. Data may also be transferred to the parent company Shopify Inc. in the USA and other Shopify subsidiaries worldwide. Shopify ensures an adequate level of data protection through the conclusion of EU Commission Standard Contractual Clauses and (if applicable) certification under the EU-US Data Privacy Framework.

The data processing is based on Art. 6 (1) lit. b GDPR (fulfillment of a contract or implementation of pre-contractual measures) if the processing is necessary for the execution of your order. Furthermore, we have a legitimate interest pursuant to Art. 6 (1) lit. f GDPR in the technically flawless, secure, and optimized provision of our online shop. The purpose of the processing is to provide, operate, maintain, and securely process our online shop and handle your orders and payments. If we offer the payment method "Shopify Payments" on our website, the payment data you enter (e.g., credit card number, bank details) will be transmitted to Shopify. For payment processing, Shopify forwards this data to Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland. We have concluded a data processing agreement (Data Processing Addendum) with Shopify International Ltd. under Art. 28 GDPR. Shopify is thereby obligated to process the data of our shop visitors and customers exclusively according to our instructions and in compliance with the GDPR. The data will only be stored for as long as necessary for the execution of the contract or due to legal retention periods (e.g., commercial and tax law obligations). Afterward, the data will be deleted. Further information and details on data protection can be found at https://www.shopify.com/de/legal/privacy/consumers.

9. USE OF GOOGLE ADSENSE

On our site, we use the Google AdSense service provided by Google Ireland Ltd, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland. Google AdSense selects ads that match the content of the website where they are to be displayed. For this purpose, a web crawler examines the respective offer, as is also the case when indexing a website for the Google search engine. For example, it is likely that ads related to photography will be displayed on a website about photography. In addition to the contextual content, AdSense also supports interest-based targeting based on the individual profile of a visitor to the website or ad. Google AdSense uses cookies for this purpose. These are small text files that store information on your computer to enable analysis of surfing behavior. You can prevent the storage of cookies by adjusting your settings. You can also delete set cookies at any time. Additionally, Google AdSense uses counting pixels. This is a thumbnail graphic integrated into websites. The purpose is to use Google AdSense counting pixels to record and analyze log files. Alphabet Inc. can use the counting pixel to recognize when a data subject has opened a website and which links were followed from it. The counting pixel can also be used to evaluate the number of visitors to certain websites. Alphabet Inc. also receives information about individuals and their data, including IP addresses. This data is stored and processed by them. Under certain circumstances, this collected data and information about individuals may be passed on to third parties by Alphabet Inc. Further information and more detailed explanations are provided at the following link: https://www.google.de/intl/de/adsense/start bereitgestellt

10. USE OF GOOGLE ANALYTICS WITH ANONYMIZATION FUNCTION

On our website, we use the Google Analytics service. This is a web analytics service provided by Google Ireland Ltd, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland. Google Analytics uses cookies. These are small text files that store information on your computer to enable analysis of website usage. The information generated by the cookies about your use of the website is usually transmitted to a Google server in the USA and stored there. By activating the anonymization function, your IP address will be truncated by Google within the European Union or other signatory states to the Agreement on the European Economic Area before transmission, so your full IP address is not forwarded. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. Google will use this information on behalf of the operator to evaluate the website, compile reports on website activity, and provide other services related to website and internet usage to the website operator. The IP address transmitted by Google Analytics will not be merged with other Google data. You can prevent the storage of cookies by adjusting your browser settings accordingly. If you do so, we must point out that you may not be able to use all functions of this website to their full extent. You can also prevent the storage of data generated by the cookie (including your IP address) and its processing by Google by using a deactivation browser plugin. Further information and detailed explanations can be found at the
link: https://tools.google.com/dlpage/gaoptout?hl=de

11. USE OF GOOGLE REMARKETING

On our website, we use the Google Remarketing service provided by Google Ireland Ltd, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland. Google Remarketing is used to identify users who have frequently visited our site in the past and to retarget them through targeted advertising. Using the Google advertising network, we can display targeted ads that are relevant to the user. For this purpose, Google uses cookies. Cookies are small text files stored on your computer that enable analysis of website usage and store data for a certain period. This allows us to recognize users when they visit our website within the Google advertising network. Further information and detailed explanations can be found at the link: http://www.google.com/privacy/ads/

12. USE OF GOOGLE ADWORDS

The most important component of Google AdWords is keywords. These allow advertisers to specify in advance that an ad should only be displayed in the results for searches using the specified terms or on thematically relevant pages. This is intended to enable targeted alignment with the interests of visitors and minimize wastage. Negative keywords can also be defined, where the ad will not be displayed. The service is operated by Google Ireland Ltd, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland. Using AdWords, it is possible to present users with search-relevant ads. If a person is directed to our website via a Google ad, a conversion cookie is set on the user's browser. This allows both us and Alphabet Inc. to track whether a sale of specific products has taken place via these AdWords ads or whether a sales process has been abandoned. Conversion cookies do not contain any information about the person and are automatically deleted after 30 days. The information generated by the conversion cookies is used by Google to create visitor statistics. These statistics allow us to determine the number of users who were directed to our website via AdWords ads. Conversion cookies store information about the person who visited the page. This data, including the IP address, is transmitted to Alphabet Inc. in the USA and may be passed on to third parties. You can prevent the storage of cookies by adjusting your browser settings. You can also delete set cookies at any time. Further information and detailed explanations can be found at the link: https://www.google.de/intl/de/policies/privacy/

13. USE OF GOOGLE FONTS

This website uses Google Fonts. Google Fonts is a service provided by Google Ireland Ltd, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland. Web fonts are intended for browser-based digital text, which are typically requested from an external web server rather than the local font collection of a computer when a website is accessed and added to the browser. The use of Google Fonts is not authenticated. The website visitor does not send cookies to the Google Fonts API. Requests to the Google Fonts API are made to resource-specific domains such as fonts.googleapis.com or fonts.gstatic.com, so your font requests are separate from other information you send to google.com and do not contain any other information. Anonymized request information is deleted after 24 hours. Further information and detailed explanations can be found at the link: https://policies.google.com/privacy?hl=de

14. USE OF MICROSOFT BING ADS

On our pages, we use the conversion tracking of Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland. Microsoft Bing Ads sets a cookie on your computer if you reach our website via a Microsoft Bing ad. Microsoft Bing and we can thus recognize that someone clicked on an ad, was redirected to our website, and reached a previously determined target page (conversion page). We only learn the total number of users who clicked on a Bing ad and were then redirected to the conversion page. No personal information about the user's identity is disclosed.

If you do not want Microsoft to use information about your behavior as described above, you can refuse the setting of the required cookie – for example, via a browser setting that generally deactivates the automatic setting of cookies. You can also prevent the collection of data generated by the cookie and related to your use of the website, as well as the processing of this data by Microsoft, by declaring your objection at the following link: https://account.microsoft.com/privacy/ad-settings/signedout?lang=de-DE Further information on data protection and the cookies used by Microsoft and Bing Ads can be found on Microsoft's website at https://privacy.microsoft.com/de-de/privacystatement

15. USE OF PAYPAL AS A PAYMENT METHOD

If you choose to pay using the online payment service provider PayPal, your contact details will be transmitted to PayPal as part of the order you place. PayPal acts as a trustee and guarantees buyer protection services. The personal data transmitted to PayPal includes information such as first name, last name, address, phone number, IP address, your email address, and other data useful for processing the order. We would like to point out that personal data may also be forwarded by PayPal to subcontractors, service providers, or other affiliated companies, insofar as this is necessary to fulfill the contract arising from your order. Further information and detailed explanations can be found at the
link: https://www.paypal.com/de/webapps/mpp/ua/privacy-full

16. USE OF KLARNA AS A PAYMENT METHOD

We use the Klarna Checkout online payment system on our website, provided by the Swedish company Klarna Bank AB. Klarna Bank is headquartered at Sveavägen 46, 111 34 Stockholm, Sweden. If you choose this service, personal data will be sent to, stored, and processed by Klarna. In this privacy policy, we would like to give you an overview of the data processing by Klarna.

Klarna Checkout is a payment system for orders in an online shop. The user selects the payment method, and Klarna Checkout handles the entire payment process. Once a user has made a payment via the Checkout system and provided the relevant data, future online purchases can be made faster and more easily. The Klarna system then recognizes the existing customer after entering the email address and postal code.

As soon as you choose the Klarna payment service and pay via Klarna Checkout, you also transmit personal data to the company. On the Klarna Checkout page, technical data such as browser type, operating system, our internet address, date and time, language settings, time zone settings, and IP address are collected from you and transmitted to Klarna's servers and stored there. This data is also stored if you have not yet completed an order.

When you order a product through our shop, you must enter data about yourself in the provided fields. This data is processed by Klarna for payment processing. For credit and identity checks, the following personal data (as well as general product information) may be stored and processed by Klarna:

Contact information: names, date of birth, national ID number, title, billing and delivery address, email address, phone number, nationality or salary.
Payment information such as credit card details or your account number
Product information such as shipment number, type of item and product price
Klarna processes your data only within the EU or the European Economic Area (EEA). The data is stored for as long as Klarna needs it for the processing purpose.

You can revoke your consent for Klarna to process personal data at any time. You also always have the right to access, correct and delete your personal data. To do so, simply contact the company or its data protection team by email at datenschutz@klarna.de . You can also contact Klarna directly via the "My Data Protection Request" page on the Klarna website. For more information on how your data is handled, we recommend reading Klarna’s privacy policy at https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_at/privacy.

17. USE OF SOVENDUS

To display a currently relevant voucher offer for you, we transmit the hashed value of your email address and your IP address in pseudonymised and encrypted form to Sovendus GmbH, Hermann-Veit-Str. 6, 76135 Karlsruhe (Sovendus) (Art. 6 (1) f GDPR). The pseudonymised hash value of the email address is used to consider any existing objection to advertising from Sovendus (Art. 21 (3), Art. 6 (1) c GDPR). The IP address is used by Sovendus exclusively for data security purposes and is usually anonymised after seven days (Art. 6 (1) f GDPR).

Additionally, for billing purposes, we transmit in pseudonymised form the order number,

order value with currency, session ID, coupon code and timestamp to Sovendus (Art. 6 (1) f GDPR). If you are interested in a voucher offer from Sovendus, there is no advertising objection for your email address, and you click on the voucher banner (which is only displayed in this case), we will transmit in encrypted form your salutation, name, postal code, country and email address to Sovendus to prepare the voucher (Art. 6 (1) b, f GDPR).

For more information on how Sovendus processes your data, please refer to the online privacy notices at www.sovendus.de/datenschutz

18. USE OF EMARSYS

Under § 7 (3) of the German Act Against Unfair Competition (UWG), we are entitled to use the email address provided during a purchase in our shop for direct marketing of our own similar products or services. If you no longer wish to receive our product recommendations, you can unsubscribe at any time without incurring any costs other than the transmission costs according to the basic rates. To unsubscribe, simply click the "Unsubscribe" link in the footer of one of our product recommendations or send an email to onlinemarketing@baer-schuhe.de.

Our website uses third-party cookies that allow us to improve the quality of the content we offer during your visit. These cookies may collect your IP address and non-personal data from your visits. This is done completely anonymously and does not include your name, address, email address or other personal information. For logged-in visitors, we only collect a single encrypted identifier that cannot be used to identify you. Additionally, the cookies are used to collect anonymous, statistical information about your navigation behaviour on our website. These cookies expire after one year.

For logged-in visitors, our website also uses JavaScript commands to collect browsing and purchase data. This data is used to enrich your customer profile and provide you with a personalised experience at all our touchpoints.

If you have subscribed to the newsletter, the personal data you provided during registration will be used to send you personalised newsletters. No data is shared with third-party companies. Our privacy policies comply with the German Federal Data Protection Act (BDSG) and the German Telemedia Act (TMG).

19. USE OF THE TRUSTED SHOPS TRUSTBADGE

To display our Trusted Shops seal of approval and the collected reviews, as well as to offer Trusted Shops products to buyers after an order, this website integrates the Trusted Shops Trustbadge. This serves to safeguard our overriding legitimate interests in the optimal marketing of our offer within the framework of a balancing of interests. The Trustbadge and the services advertised with it are an offer of Trusted Shops GmbH, Subbelrather Str. 15C, 50823 Cologne. When the Trustbadge is called up, the web server automatically stores a so-called server log file, which contains, for example, your IP address, date and time of access, amount of data transferred and the requesting provider (access data), and documents the access. This access data is not evaluated and is automatically overwritten no later than seven days after the end of your page visit. Further personal data is only transmitted to Trusted Shops if you decide to use Trusted Shops products after completing an order or have already registered to use them. In this case, the contractual agreement between you and Trusted Shops applies.

20. USE OF AWIN

On our website, we use the performance advertising network of AWIN AG, Eichhornstraße 3, 10785 Berlin, as an affiliate programme. As part of its tracking services, AWIN stores cookies on users' end devices to document transactions (e.g. leads and sales) when they visit or use websites or other online offers of its customers (e.g. register for a newsletter or place an order in an online shop). These cookies serve solely to correctly assign the success of an advertising medium and the corresponding billing within its advertising network. AWIN does not collect, process or use any personal data. A cookie only stores information about when a specific advertising medium was clicked on from an end device. The AWIN tracking cookies store an individual sequence of numbers that cannot be assigned to a specific user, documenting the affiliate programme of an advertiser (advertiser), the publisher (i.e. on whose internet offer the advertising medium was displayed) and the time of the user's action (click or view). AWIN also collects information about the end device from which a transaction is carried out, e.g. the IP address, the operating system and the calling browser. The legal basis for storage is Art. 6 (1) lit. f GDPR. If you would like more information about AWIN's data processing, you can find it at: https://www.awin.com/de/rechtliches

21. USE OF CRITEO ONE TAG

On our site, we use functions from Criteo, a JavaScript tag that Criteo uses to track user behaviour while browsing your website. The provider is Criteo SA, 32 Rue Blanche, 75009 Paris (hereinafter "Criteo").

Criteo is used to display interest-based advertisements within the Criteo advertising network. Your interests are determined based on your previous usage behaviour. For example, Criteo records which products you have viewed, added to your shopping cart or purchased. Further details on the data collected by Criteo can be found here: How we use your data

To display interest-based advertising, we or other Criteo partners must be able to recognise you. For this purpose, a cookie is stored on your end device or a comparable identifier is used, which links your user behaviour to a pseudonymous user profile. For details, please refer to Criteo's privacy policy at: Privacy Policy

Your personal data and the Criteo cookies stored in your browser are stored for a maximum of 13 months from the date of collection. The use of Criteo is in the interest of targeted advertising measures. This constitutes a legitimate interest within the meaning of Art. 6 (1) lit. f GDPR. If a corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6 (1) lit. a GDPR and 25 (1) TTDSG, insofar as the consent includes the storage of cookies or access to information in the user's end device (e.g. device fingerprinting) within the meaning of the TTDSG. The consent can be revoked at any time.

Criteo and we are joint controllers within the meaning of Art. 26 GDPR. An agreement on joint processing has been concluded between Criteo and us, the essential contents of which Criteo describes at the following link: How we use your data

22. USE OF TRBO

On our site, trbo GmbH, Leopoldstr. 41, 80802 Munich (http://www.trbo.com/) collects and stores data, from which usage profiles are created using pseudonyms to provide you with personalized customer benefits. For this purpose, cookies may be used to enable the recognition of an internet browser. These usage profiles are used to analyze visitor behavior and are evaluated to improve and tailor our offering to your needs. The pseudonymized usage profiles will not be merged with personal data about the pseudonym holder without separate, explicit consent. You can object to this at any time by clicking the following links: Disable trbo

23. USE OF PAQATO

When shipping your goods, the order header data is processed for shipment tracking and problem identification in accordance with Art. 6 (1) (b) (within the framework of contractual/pre-contractual relationships) and Art. 6 (1) (f) (other inquiries) GDPR. User data is stored and processed in the PAQATO shipping analysis system of PAQATO GmbH, Johann-Krane-Weg 6, 48149 Münster, Germany, to enable faster and error-free delivery of goods and ensure smooth communication (legitimate interest under Art. 6 (1) (f) GDPR). We delete the data as soon as it is no longer required. We review the necessity every two years; statutory retention obligations also apply. The data processor's privacy policy can be found at the following link: https://www.paqato.com/datenschutzerklaerung/ and the data processor's cookie policy at: https://www.paqato.com/cookie-richtlinie-eu/.

24. TRANSMISSION OF YOUR DATA FOR CREDIT CHECKING

We transmit your data (name, address, and if applicable, date of birth) for the purpose of credit checking, obtaining information to assess the risk of default based on mathematical-statistical procedures using address data to Experian GmbH, Rheinstr. 99, 76532 Baden-Baden. The legal basis for this transmission is Article 6 (1) (b) and Article 6 (1) (f) of the GDPR. Transmissions based on these provisions may only take place if this is necessary to safeguard the legitimate interests of our company or third parties and does not outweigh the interests, fundamental rights, and freedoms of the data subjects that require the protection of personal data. Detailed information on the ICD under Art. 14 of the European General Data Protection Regulation (EU GDPR), i.e., information on the business purpose, purposes of data storage, data recipients, the right to self-disclosure, the right to deletion or correction, etc., can be found in the appendix or at the following link.

25. USE OF SCAN2FIT:

With your explicit consent, we process your data for the purpose of conducting a free 3D foot scan to determine your shoe size and analyze your foot. We process the personal data required for the scan, including shoe size, name, and contact details. The purpose of processing is to initiate and execute a contract. The legal basis for processing is therefore Art. 6 (1) (a) and (b) GDPR. Your data will be stored until the end of the contract and any existing retention obligations; otherwise, it will be deleted immediately. For processing the foot scan, your data will also be forwarded to 3D Schuhdesign / HMK GmbH, Delaware Avenue 23-25, 66953 Pirmasens, based on a data processing agreement.

The consent can be revoked at any time for the future. The lawfulness of the data processing carried out based on the consent until the revocation is not affected by this.

26. USE OF TABOOLA

We use Taboola on our website. The service stores and processes information about your user behavior on our website. For this purpose, the service uses cookies, among other things—small text files stored locally in your web browser's cache on your device, enabling analysis of your use of our website.

We use the service to analyze the use of our website and continuously improve individual functions, offers, and the user experience. By statistically evaluating user behavior, we can improve our offering and make it more interesting for you as a user. The data will be deleted as soon as it is no longer necessary for the purpose for which it was collected.

The legal basis is Art. 6 (1) (a) GDPR (consent).

Provider:
Taboola, Inc
16 Madison Square West
7th fl.
NY, 10010 New York
https://www.taboola.com

27. USE OF KLAR ATTRIBUTION

We use the services of Klar (Klar Insights GmbH, Marktstr. 18, 80802 Munich, Germany) on our website. Klar collects, processes, and stores data on this website and its subpages for reach measurement and statistical analysis on our behalf. This collection is based on the following legal basis:

• If the user has not given consent, data is collected anonymously (i.e., without collecting personal or personally identifiable data) and in groups (i.e., by randomly assigning the collected data to groups of users). It is therefore not possible to trace the data back to individual users. This anonymous collection is mandatory under § 25 (2) No. 2 TTDSG to optimize business costs and thus ensure the desired service.
• If the user has given consent under Article 6 (1) (a) GDPR and § 25 (1) (1) TTDSG, the data to be processed is collected in a user-related manner.

Different cookies are used for the aforementioned collection methods to ensure the respective collection type.

Cookie - Objection

To object to the use of Klar in general, please use this link. This will set a cookie named "do_not_track" from the domain "https://www.baer-schuhe.de". Please do not delete this, as otherwise it cannot be guaranteed that you will not be tracked by Klar.

Information on data protection and data usage by Klar can be found on the following website: Data Protection

V. Rights of the Data Subject

If we process personal data about you, you are a data subject under the GDPR, and you have the following rights against the controller:

1.) Right to Information

You may request confirmation from the controller as to whether personal data concerning you is being processed by us. If such processing is taking place, you may request the following information from the controller:

1. the purposes for which the personal data is processed;
2. the categories of personal data that are processed;
3. the recipients or categories of recipients to whom the personal data concerning you has been or will be disclosed;
4. the planned duration of the storage of personal data concerning you or, if specific information is not possible, criteria for determining the storage period;
5. the existence of a right to rectification or erasure of personal data concerning you, a right to restriction of processing by the controller, or a right to object to such processing;
6. the existence of a right to lodge a complaint with a supervisory authority;
7. all available information about the origin of the data if the personal data is not collected from the data subject;
8. the existence of automated decision-making, including profiling, under Art. 22 (1) and (4) GDPR and, at least in these cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject.

You have the right to request information on whether personal data concerning you is transferred to a third country or to an international organization. In this context, you may request to be informed about the appropriate safeguards under Art. 46 GDPR in connection with the transfer.

2.) Right to Rectification

You have the right to rectification and/or completion by the controller if the processed personal data concerning you is inaccurate or incomplete. The controller must make the correction without delay.

3.) Right to Restriction of Processing

Under the following conditions, you may request the restriction of the processing of personal data concerning you:

1. if you contest the accuracy of the personal data concerning you for a period that enables the controller to verify the accuracy of the personal data;
2. the processing is unlawful, and you refuse the erasure of the personal data and instead request the restriction of the use of the personal data;
3. the controller no longer needs the personal data for the purposes of processing, but you need it for the establishment, exercise, or defense of legal claims, or
4. if you have objected to the processing under Art. 21 (1) GDPR and it is not yet clear whether the controller's legitimate grounds outweigh your grounds.

If the processing of personal data concerning you has been restricted, this data—apart from its storage—may only be processed with your consent or for the establishment, exercise, or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or a Member State. If the restriction of processing has been restricted under the above conditions, you will be informed by the controller before the restriction is lifted.

4.) Right to Erasure / Obligation to Erase

You may request the controller to erase personal data concerning you without undue delay, and the controller is obliged to erase this data without undue delay if one of the following reasons applies:

1. The personal data concerning you is no longer necessary for the purposes for which it was collected or otherwise processed.
2. You withdraw your consent on which the processing was based pursuant to Art. 6(1)(a) or Art. 9(2)(a) GDPR, and there is no other legal basis for the processing. 
3. You object to the processing pursuant to Art. 21(1) GDPR and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Art. 21(2) GDPR. 
4. The personal data concerning you has been processed unlawfully. 
5. Erasure of the personal data concerning you is necessary to comply with a legal obligation under Union or Member State law to which the controller is subject.
6. The personal data concerning you was collected in relation to information society services offered pursuant to Art. 8(1) GDPR.

Information to third parties
If the controller has made the personal data concerning you public and is obliged to erase it pursuant to Art. 17(1) GDPR, it shall take reasonable measures, including technical ones, taking into account the available technology and the cost of implementation, to inform controllers processing the personal data that you, as the data subject, have requested the erasure of all links to this personal data or copies or replications thereof.
Exceptions
The right to erasure does not apply to the extent that processing is necessary

1. for exercising the right of freedom of expression and information;
2. for compliance with a legal obligation which requires processing under Union or Member State law to which the controller is subject, or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
3. for reasons of public interest in the area of public health in accordance with Art. 9(2)(h) and (i) as well as Art. 9(3) GDPR;
4. for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes in accordance with Art. 89(1) GDPR, in so far as the right referred to in section (a) is likely to render impossible or seriously impair the achievement of the objectives of that processing, or
5. for the establishment, exercise or defence of legal claims.

5.) Right to be informed

If you have asserted the right to rectification, erasure or restriction of processing against the controller, the latter is obliged to communicate this rectification or erasure of data or restriction of processing to all recipients to whom the personal data concerning you has been disclosed, unless this proves impossible or involves disproportionate effort.
You have the right to be informed by the controller about these recipients.

6.) Right to data portability

You have the right to receive the personal data concerning you, which you have provided to the controller, in a structured, commonly used and machine-readable format. You also have the right to transmit this data to another controller without hindrance from the controller to which the personal data was provided, provided that

1. the processing is based on consent pursuant to Art. 6(1)(a) GDPR or Art. 9(2)(a) GDPR or on a contract pursuant to Art. 6(1)(b) GDPR, and
2. the processing is carried out by automated means.

In exercising this right, you also have the right to have the personal data concerning you transmitted directly from one controller to another, where technically feasible. Freedoms and rights of other persons must not be adversely affected.
The right to data portability does not apply to processing of personal data necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

7.) Right to object

You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on Art. 6(1)(e) or (f) GDPR; this also applies to profiling based on these provisions.

The controller shall no longer process the personal data concerning you unless the controller demonstrates compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defence of legal claims.

If the personal data concerning you is processed for direct marketing purposes, you have the right to object at any time to processing of personal data concerning you for such marketing; this includes profiling to the extent that it is related to such direct marketing.

If you object to processing for direct marketing purposes, the personal data concerning you will no longer be processed for these purposes. You have the possibility, in the context of the use of information society services, and notwithstanding Directive 2002/58/EC, to exercise your right to object by automated means using technical specifications.

8.) Right to withdraw the data protection consent declaration

You have the right to withdraw your data protection consent declaration at any time. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.

9.) Right to lodge a complaint with a supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of personal data relating to you infringes the GDPR.

The supervisory authority with which the complaint has been lodged shall inform the complainant on the progress and the outcome of the complaint including the possibility of a judicial remedy pursuant to Art. 78 GDPR.
Information for customers and suppliers pursuant to Art. 13/ Art. 14 GDPR