Privacy policy

Within this privacy policy we would like to inform you about the nature, scope and purpose of the personal data collected, used and processed by us.
Personal data denotes any information which is directly, or indirectly, related to your person. This includes, for example, your name, address, E-mail, online-Identification and user-behaviour, if this information or behaviour enables your identification.
In order to protect your personal data and other confidential content (for example in orders or requests using our contact form) we use an SSL- or TLS encryption for our website.
For any questions about the collection, processing or use of your personal data, the disclosure, correction, blocking or deletion of data, revocation of consents granted, or objection to certain processed data, you should contact the individual listed at the following contact page address or our data protection officer.

I. Name und contact details of the person responsible

The person responsible in accordance with Article 4 no.7 of the data protection regulation (GDPR), other data protection laws of the member states of the European Union as well as other data protection regulations is:

Mechthild Brune GmbH
Kettwigerstraße 27
D-45127 Essen
Tel: 0800 – 0 966377 (free of charge from the UK, from 8 a.m. to 4 p.m.)
E-Mail: info@shoebrandstore.co.uk

You can reach our data privacy representative at l.bechtel@shg.ruhr or at our postal address with the addition of „Die Datenschutzbeauftragte“ to the address.

II. Your rights

1.) In the following, we will inform you of your rights regarding your personal data.

Free of charge, you have the right:

• to request confirmation of whether personal data regarding yourself will be processed by us. (Article 15 GDPR);
• to request information about your personal data, which has been processed by us (Article 15 GDPR). More particularly, you are able to request information about the processing purpose, the category of the personal data, the category of person who received, or will have received, your personal data, the planned storage period, the existence of a right to correction, deletion, restriction of processing or appeal, the existence of the right to appeal, the origin of your data (provided it was gathered by us), as well as the existence of automatic decision-making including profiling and, if applicable, significant information about its details;
• to request immediate correction of incorrect or incomplete personal data processed by us and regarding your person (Article 16 GDPR);
• to request the deletion of your saved personal data, as long as it is not needed to apply the right to free speech and information, to comply with legal obligations, for reasons of public interest or to enforce, exercise or defend legal claims (Article 17 GDPR);
• to request the restriction of the processing of your personal data, as long as you are disputing the accuracy of the data, the processing is illegal, but you reject the deletion and the information is not longer needed by us, however is required for the assertion, application or defence of legal rights, or you have filed an objection against the processing in accordance with Article 21 GDPR (Article 18 GDPR);
• to receive the data that you made available to us in a structured, common and machine-readable form, or to request the transfer of the data to a responsible third party (Article 20 GDPR);
• to retract your once-given consent at any time. The retraction does not effect the legality of the processing up to the point of retraction.

2.) If you have laid claim to the correction, deletion, or restriction of the processing, we are required to inform all recipients to whom the personal data has been disclosed about said correction, deletion or restriction, unless this proves to be impossible or involves a disproportionate amount of effort. You have the right to be informed of these recipients (Article 19 GDPR).

3.) Furthermore, you have the right to complain about our processing of your own personal data to the responsible data protection authority (https://www.ldi.nrw.de) (Article 77 GDPR).

III. The provision of our website and creation of server log files

1.) If you only use our website to find information without registering or conveying any other information, we will only collect the personal data supplied to our sever by your browser. If you visit our website, we will collect the following data, which is a technical necessity for us to display the website and ensure its stability and safety:

• IP-address
• date and time of visit
• timezone difference to Greenwich Mean Time (GMT)
• content of the request (certain page)
• access status /HTTP status code
• the respective data-volume transmitted
• the website from which your request originates
• which website of ours you visit
• Information about the browser-type and the version used
• the operating system and its interface
• Language and version of the browser software

These general details will only be temporarily saved on our server log files and are separate from the personal data that you may have given your consent for us to process. The anonymous data in the log files will only be used statistically, with the goal of increasing data safety and data protection in our company for an ideal level of protection for the processed personal data.

2.) The legal basis for data processing associated to server log files is Article 6. (1) sentence 1 lit. f GDPR. The data will be deleted as soon as it is no longer needed for the attainment of its goal. When acquiring data just in order to provide the website, the data is no longer needed when your session has ended.
It is necessary for us to collect data and save it in log files in order to provide the website. For this reason there is no possibility for you to object.

IV. Use of cookies

1.) In the application of our website we use cookies. Cookies are small text files, which are assigned in or by your browser and saved on the hard drive of your computer system.
Using cookies, we are able to improve the performance and services of our website. Several cookies are crucial for the operation of our website. The cookies, among others, allow us:

• to make it easier for you to use our website and create a more effective and user-friendly service;
• to recognise you when visiting our website for the second time, making it unnecessary to enter your access data a second time;
• to temporarily save the goods you put into the virtual shopping cart;
• to allow entry to protected areas of our website;
• to save text which has already been entered, so that it is not lost when the page is refreshed.
• to save your cookie settings and process delarations of revocation.

2.) We use two different kinds of cookies on our website: session cookies and persistent cookies. Session cookies are temporary cookies which are saved on your computer until you leave our site.
Session cookies save a so-called session-ID, with which various queries from your browser can be assigned to one joint session. The session cookies are deleted when you log out or close the browser.
Persistent cookies are saved on your hard drive until you delete them, they reach their expiry date or you withdraw your consent. These cookies are used to save your preferences on the website and recognise you on following visits.

3.) Apart from our own cookies, we also use third party cookies. These are third parties, such as Google or Microsoft, who also save cookies onto your computer system when visiting our website, in order to be able to provide the services they offer.

4.) The legal basis for the processing of personal data using cookies is Article 6 (1) sentence 1 lit. b GDPR if the processing serves to carry out a contract or pre-contractual measures. In other cases, the processing is based either on your given consent in accordance with Article 6, paragraph 1, sentence 1 lit. a GDPR or according to article 6, paragraph 1, sentence 1 lit. f GDPR to protect our legitimate interests in the optimal functionality of our website and a customer-friendly presentation and evaluation of your visit.

5.) You are able to configure your browser settings for the acceptance or rejection of third party cookies. We advise you that you may not be able to use all of our website’s functions, if you deactivate even the functionally absolutely necessary cookies in your browser system.

6.) We use the cookie consent tool from Usercentrics GmbH, Sendlinger Strasse 7, 80331 Munich, for general management of (third-party) cookies, in particular for storing your cookie preferences and for the technical implementation of your revocation declarations.
You can find further information on data processing through the use of cookies, your consent and revocation options in our cookie policy.

V. Registering to your website (customer account)

1.) Our website offers the opportunity to register and open a customer account, using your personal details. In order to do this, the following customer information is asked of you (mandatory details), transmitted to us (SSL encrypted) and saved:

• titel
• first name, surname
• address (street, postcode, city, country)
• E-Mail address
• password

During your registration we save your IP address and the time and date of your registration. Further data will only be saved if you give us your permission. The personal data you give us will only be used and saved for intern purposes. By using your customer account you can manage your personal data, as well as see past and pending orders.

2.) Your registration is not necessary in order to receive further services from our company, such as concluding a purchase in the shopping cart. You are able to order our products without opening a customer account by entering the data in clause 1.), except for the password.

3.) The legal basis for processing the data is your consent in accordance with Article 6 (1) lit. a GDPR. You are able to have the personal data changed, or completely deleted at any time. Legal retention periods remain unaffected by this.

4.) You can retract your consent to process your details at any time. If the data is necessary to comply with a contract or to complete pre-contractual measures, then it can only be prematurely deleted as long as this does not conflict with contractual or legal obligations. The legality of the processing done up to the time the previous consent was retracted remains unaffected.

VI. Use of our online shop (order function)

1.) If you would like to order in our online shop it is necessary for the conclusion of the contract that you provide your personal data in accordance with Section V. of this data protection declaration. Failure to provide your data would mean that you would not be able to use the order function in our online shop. We process the data you provide to process your order, including our services for revocations, claims for defects and to answer your inquiries.

2.) Third parties commissioned by us, such as shipping partners and payment service providers, only receive personal data if their transmission is necessary for the delivery of your order and for payment processing.

3.) If you decide to pay with "PayPal" as part of your order process your personal data will be automatically transmitted to PayPal. PayPal is an offer from PayPal (Europe) S.à.r.l. & Cie. S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg. PayPal assumes the function of an online payment service provider as well as a trustee and offers buyer protection services.

The personal data transmitted to PayPal are usually first name, last name, address, email address, IP address or other data that are necessary for payment processing. Personal data related to the respective order (such as number of items, item number, invoice amount and taxes and other invoice information) are also required to process the purchase contract.

The transmission of your data is necessary for payment processing via PayPal and the purpose of confirming your identity and administering your payment order.

The personal data transmitted by us to PayPal may be transmitted to credit agencies by PayPal. The purpose of this transmission is to check your identity and creditworthiness.
You can access PayPal's privacy policy at https://www.paypal.com/uk/webapps/mpp/ua/privacy-full.
 
4.) If you choose a payment method from our payment service provider "Mollie" (e.g. credit card, instant transfer, Apple Pay, iDEAL, eps transfer) the payment will be processed by Mollie B.V., Keizersgracht 126, 1015CW Amsterdam, the Netherlands.
Mollie processes your following data for payment processing: payment data (e.g. bank account number or credit card number), IP address, internet browser and device type, in some cases your first and last name, in some cases your address data, in some cases information about the product or service that you have acquired from us and other personal data that you actively provide to Mollie, for example by correspondence or on the phone (https://www.boniversum.de/eu-dsgvo/?lang=en).
 
5.) If you decide to pay with "Amazon Pay" as part of your order process your personal data will be sent to Amazon Payments Europe s.c.a. as well as Amazon EU SARL, Amazon Services Europe SARL and Amazon Media EU SARL, all four companies located at 5 Rue Plaetis L 2338 Luxembourg (Amazon Pay).
Amazon Pay assumes the function of an online payment service provider and trustee.

The transmission of your data is necessary for payment processing via Amazon Pay and the purpose of confirming your identity and administering your payment order. In order to process the purchase contract it is also necessary to transmit personal data related to the respective order (such as the number of items, item number, invoice amount and taxes and other invoice information).
Amazon Pay reserves the right to carry out a credit check. The purpose of the credit check is to avoid payment defaults or fraud. Amazon Pay uses the result of the credit check with regard to the statistical probability of default for the purpose of deciding whether to provide the respective payment method. The credit report can contain probability values ​​(so-called score values). As far as score values ​​are included in the result of the credit report they are based on a scientifically recognized mathematical-statistical procedure. Address data is included in the calculation of the score values.

In addition, Amazon Payments is entitled to transfer your data to third parties (such as banks, service partners, analysis services, credit agencies, marketing partners, cloud service providers, retargeting providers, affiliated companies).
Further data protection information about Amazon Pay can be found here: https://www.mollie.com/uk/privacy
 
6.) The legal basis for the processing of your data in connection with the fulfillment of a contract or pre-contractual measures is Article 6 Paragraph 1 Clause 1 GDPR.
 
7.) Due to commercial and tax law regulations we are obliged to save your address, payment and order data in connection with a purchase contract for a period of up to ten years. However, after two years we will restrict the processing, i.e. your data will only be stored for observance of legal obligations. 

VII. Newsletter registration

1.) On our website it is possible to subscribe to a free newsletter, with which we keep you informed about our present offers. This includes reminder e-mails for abandoned purchases and for items on your personal wish list. To subscribe to the newsletter all you need to enter is your E-mail address. For logging purposes, the following data will be collected with your registration:

• IP-address
• Date and time of registration

2.) For the subscription to our newsletter we use the so-called „Double-opt-in“ process. This means, after your registration, we will send you an E-mail to the address you have entered asking for confirmation of the subscription. If you do not confirm the subscription within 24 hours your information will be disabled, and automatically deleted after one month.
After your confirmation, we save your E-mail address for the purpose of sending you the newsletter. The legal basis is Article 6 (1) sentence 1 lit. a GDPR. Your E-mail address will be saved for as long as your subscription stays active.

3.) You are free to retract your consent to receiving the newsletter and unsubscribe at any time. You can do this by clicking on the unsubscribe link in any of the newsletters, or by sending an E-mail to the contact details given in clause I.

VIII. Product recommendations via E-mail / size alert (notification of availability)

1.) After receiving your E-mail address in connection with an order, we regularly inform you about product recommendations via E-mail, whether you have subscribed to our newsletter or not. In doing so, we would like to supply you with further information for your own, or similar, offers, which may be of interest to you based on previous orders. This includes reminder e-mails for abandoned purchases and for items on your personal wish list.

2.) The legal basis for sending newsletters as a result of a purchase is § 7 Abs. 3 UWG and Article 6 (1) sentence 1 lit. f GDPR. For this reason, your E-mail address will be saved until you object to the sending of the newsletter.

3.) If you do not wish to receive product recommendations, you are free to object to the sending of the newsletter at any time without incurring any costs other than the transmission costs in accordance with the basic tariffs. The revocation is made possible by clicking on the unsubscribe link in any of the newsletters, using the unsubscribe link on our website or by sending an E-mail to the contact details given in clause I.

4.) On our website you have the option of registering for an email notification if the item in your preferred size is currently not available ("size alert"). We will then inform you automatically when the item is available in the selected size.
All you need to do to register for the size alert is submit your email address. For the purpose of protocolling we continue to collect your IP address and the date and time of your registration.

5.) We use the so-called double opt-in procedure for the registration process. This means that after your registration we will send you an email to the email address provided in which we ask you to confirm that you have agreed to the sending of the notification of availability. If you do not confirm your registration within 24 hours your information will be blocked and automatically deleted after one month.
After your confirmation we will save your email address for the purpose of sending you a notification of availability. The legal basis is Article 6 Paragraph 1 Sentence 1 Letter a GDPR. Your email address will be saved as long as your size alert is active.

6.) You can withdraw your consent to the sending of the notification of availability at any time free of charge by clicking on the unsubscribe link provided in each notification of availability or by sending an email to the contact details given in Section I.

IX. Contact form / communication via E-mail

1.) You can contact us at any time using our contact form. At the time of dispatch we will save the following data (compulsory fields):

•  E-Mail address
• Date and time of dispatch

In the context of the dispatch process the privacy policy will be referred to for the processing of the data.
Alternatively, you can contact us at any time using the available E-mail address. In this case we will only save the personal data conveyed with the E-mail.

2.) The legal basis for the processing of data is article 6 (1), paragraph 1, sentence 1 lit. f GDPR and additionally article 6, paragraph 1, sentence 1 lit. b GDPR, if the contact is made in connection with the execution of a contract or pre-contractual measures.

3.) We only use the data to answer your queries. The data collected in this context will be deleted as soon as its storage is no longer needed. If there are legal storage obligations, we will restrict the processing of the data.
You are free to retract your consent to the processing of your personal data through the contact form at any time. In the case of communication via E-mail you can also object to processing at any time. Please direct your objection or retraction to the contact given in clause I. However, the correspondence can then no longer continue.

X. Use of eKomi

1.) eKomi customer evaluations
For the purpose of customer evaluation, product evaluation by our customers and intern quality management we have integrated evaluation software from „eKomi - The Feedback Company“ on our website (eKomi Ltd., Markgrafenstraße 11, 10969 Berlin).
This allows you to evaluate our products after purchasing them. In this respect, after delivering the product we would like to send you an E-mail asking for the evaluation. You are free to object to the use of your E-mail address and the customer evaluation at any time.
eKomi is obliged to handle your personal data in compliance with data protection law and will take all organisational and technical precautions to protect your data. In order to achieve authentic and valuable customer feedback, you will be questioned using a web-based Social Commerce SaaS technology. eKomi will receive your E-mail address via an interface for sending the evaluation mail, as well as a unique ID for identification and to create an evaluation link.
In the case of arbitration proceedings, eKomi, as arbitrator, will also receive your E-mail address as contact information. Your E-mail will then be used for verification and for communication between eKomi, our company and yourself. With your order you give your consent to an electronic evaluation request. You are free to ignore the evaluation request, or to add eKomi to your anti-spam rule, but your evaluation would be very helpful to us and other customers.

2.) Customer evaluation request by eKomi
During or after your order, you may have given your consent to the following:
„I would like to evaluate my purchase later and receive a one-off evaluation reminder from eKomi after delivery. I am free to retract my consent at any time."
As soon as we have received your above-mentioned consent we convey your E-mail to eKomi Ltd., Markgrafenstraße 11, 10969 Berlin for the customer evaluation request using the eKomi customer evaluation system. Within 2 to 5 days of delivery you will be sent an evaluation reminder.

3.) The legal basis for the use of eKomi is Article 6 (1) sentence 1 lit. f GDPR. You are free to object to the sending of an evaluation request at any time. In the case of consenting to the sending of an evaluation reminder from eKomi, the legal basis for the processing of your data is Article 6 (1) sentence 1 lit. a GDPR. You are free to retract your consent at any time.
Please send your retraction or objection to the contact details listed in clause I.

XI. Use of Google Maps

1.) We continue to use the service of Google Ireland Limited based in Gordon House, Barrow Street, Dublin 4, Ireland („Google“) on our website. This allows us to integrate interactive maps directly into the website and makes it possible for you to comfortably use the map function in connection with our services.

2.) Google receives information when you visit one of the pages of our website. The data conveyed can be found in clause III. This happens regardless of whether you are logged in to, or even own a Google account. If you do not wish Google to connect the use of the map to your profile you will need to log out before using the map function. Google saves your data as a user profile and uses this for advertising, market research and to optimise their website. This analysis is especially used for user-relevant advertising and to inform other users about your activity on our website (even with user who aren't logged in). You are free to object to the creation of this user profile by contacting Google directly.

3.) The legal basis for the use of Google Maps is Article 6 Paragraph 1 Clause 1 GDPR. Further information on the purpose and scope of data collection and its processing by Google can be found in Google's data protection declaration: https://policies.google.com/privacy?hl=en-GB&gl=us .
There you will also find further information on your rights and setting options to protect your privacy.

The data transfer is based on standard contractual clauses that have been approved by the EU (https://policies.google.com/privacy/frameworks?hl=en-GB).

XII. Use of Google Analytics

1.)    Our website uses Google Analytics, a web analysis service from Google Ireland Limited based in Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Google Analytics also uses cookies that enable an analysis of the use of our website by you.

2.)    We use Google Analytics with the extension "_anonymizeIp ()" to ensure an anonymous collection of IP addresses. Your IP address will therefore only be transmitted to Google in an abbreviated form within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. It cannot be traced to an individual person. We use Google Analytics including the functions of Universal Analytics. Universal Analytics allows us to analyze the activities on our website across devices (e.g. when accessing with a notebook and later with a tablet). This is made possible by the pseudonymous assignment of a user ID to a user. Such an assignment occurs, for example, when you register for a customer account or log in to your customer account.
The full IP address will only be sent to a Google server in the USA and shortened in exceptional cases. In this case, the IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

On our behalf, Google will use the information to evaluate your use of our website, to compile reports for us on website activity and to provide other services related to website activity.

The data collected using Google Analytics is stored for a period of 24 months.

3.)    You can prevent the storage of cookies by setting up your browser software accordingly or by revoking your consent in our consent management tool.
Further information on Google Analytics can be found under the following links:

• Terms of use for Google Analytics: https://marketingplatform.google.com/intl/en_uk/about/analytics/

• Overview of data protection: https://marketingplatform.google.com/intl/en_uk/about/

• Privacy statement: https://policies.google.com/privacy?hl=en&gl=uk
https://policies.google.com/privacy?hl=fr&gl=fr

4.)    We use Google Analytics to analyze the use of our website and to improve it on a regular basis. We can use the statistics obtained to optimize our offer and make it more interesting for you as a user. The legal basis for the use of Google Analytics is Article 6 Paragraph 1 Sentence 1 GDPR. You can revoke your consent in the consent management tool at any time, with immediate effect for the future.
Google also processes your personal data on servers in the USA. The data transfer is based on standard contractual clauses that have been approved by the EU (Google framework for data transfers).

XIII. Microsoft Advertising

We use Universal Event Tracking (UET) on our website via the Microsoft Advertising service of Microsoft Corporation (USA), One Microsoft Way, Redmond, WA 98052-6399, USA.
Microsoft stores cookies in your browser via UET in order to enable an analysis of the use of our online offer. The prerequisite for this is that you have reached our website via an advertisement from Microsoft Advertising. That way, Microsoft and us, we can recognize that someone clicked on an ad, was redirected to our online offer and reached a predetermined target page (so-called conversion measurement). No IP addresses are saved here. No further personal information about the identity of the user is communicated.
Further information on these processing activities, the technologies used, stored data and the storage period can be found in the settings of our consent management tool.
The legal basis for the use of Microsoft Advertising is Article 6 Paragraph 1 Sentence 1 GDPR. The cookies are stored for a maximum of 1 year and 25 days.
In the case of Microsoft services the transmission of data to the USA cannot be ruled out. Further information on data protection at Microsoft can be found in Microsoft's data privacy statement: https://privacy.microsoft.com/en-us/privacystatement

XIV. Use of Google Ads conversion tracking

We use the Google Ads advertising program (including conversion tracking) by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland.
The purpose of using Google Ads is to place advertisements on external websites in order to advertise our offers in a targeted manner and to statistically evaluate the effectiveness of advertising campaigns.
The conversion tracking cookie is set when a visitor clicks on an advertisement placed by Google. These cookies usually lose their validity after 30 days and do not allow personal identification. If the cookie is still active us and Google can recognize that you clicked on an ad and were redirected to our website.
Using the information stored in the cookie, Google can generate statistics for us, in particular about the number of visitors who clicked on an ad and were forwarded to our website.
Further information on Google Ads Conversion Tracking can be found here: https://policies.google.com/technologies/partner-sites?hl=en

Where legally required we have obtained your consent for the use of Google Ads conversion tracking in accordance with Article 6 Paragraph 1 Sentence 1 GDPR. You can revoke your consent in the consent management tool at any time with immediate effect for the future.

You can find more information about Google's privacy policy here: https://policies.google.com/privacy?gl=uk&hl=en

You can permanently object to the setting of cookies by Google Ads Conversion Tracking by downloading and installing the Google browser plug-in available under the following link:

https://support.google.com/ads/answer/7395996?hl=en

When using Google Ads personal data may also be transferred to the USA. The data transfer is based on standard contractual clauses that have been approved by the EU (Google framework for data transfers).

If you would like to learn more about how Google uses your personal data, please visit https://business.safety.google/privacy/.

XV. Use of the Google remarketing or "similar target groups" function

1.)    We use the remarketing or “similar target groups” function of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”) on our website. With this function we can address you with targeted advertising by showing you personalized, interest-based advertisements when you visit other websites in the Google advertising network.
Google uses cookies for the purpose of analyzing website usage which forms the basis for displaying interest-based advertising. The cookie is used to record visits to the website and anonymised data on the use of our website.
If you subsequently visit another website in the Google advertising network you will be shown advertisements that are highly likely to take into account your previously accessed product and information areas.
A merging of the data collected as part of the remarketing with your personal data, which may be stored by Google, does not take place by Google according to its own information. In particular, according to Google, pseudonymisation is used in remarketing.

2.)    You can prevent participation in this tracking process in various ways:

a.)    by setting your browser software accordingly. In particular by suppressing third-party cookies you will nota receive any advertisements from third-party providers.
b.)    by deactivating the cookies for conversion tracking by adjusting the settings for personalized advertising at https://www.google.de/settings/ads. If you delete your cookies this setting will be deleted, too.
c.)    by deactivating the interest-based advertisements of the providers who are part of the self-regulation campaign “About Ads” via the link https://optout.aboutads.info/?c=2&lang=en . If you delete your cookies this setting will be deleted, too.
d.)    by permanent deactivation in your Firefox, Microsoft Edge or Google Chrome browsers under the link http://www.google.com/settings/ads/plugin.

3.)    The legal basis for processing your data is Article 6 Paragraph 1 Sentence 1 GDPR. You can revoke your consent in the consent management tool at any time with immediate effect for the future.
You can find further information on Google Remarketing or the "similar target groups" function as well as Google's privacy policy at: https://policies.google.com/technologies/ads?hl=en

https://policies.google.com/privacy?hl=en&gl=en

Google also processes your personal data on servers in the USA. The data transfer is based on standard contractual clauses that have been approved by the EU (Google framework for data transfers).

XVI. Job applications and the application procedure

We collect and process your personal data to enable the handling of application procedure. The processing can take place by electronic means when sending the application via E-mail.
The legal basis for the processing of your data is Article 6 (1) sentence 1 lit. f GDPR. You are free to object to the saving of your data when applying for a job by contacting us at the contact details found in clause I.
If you sign an employment contract with us, your data will be saved in order to process the employment according to the legal requirements. If we do not employ you, your application documents will be deleted two months after your notification, as long as deletion does not conflict with any other legitimate interests. This could be the burden of proof in a process according to the general Equality of Treatment Act (AGG).

XVII. Routine deletion and blocking of your personal data

We only process and save your personal data for the amount of time necessary for it to serve its purpose and only if this is in accordance with European guidelines, or the the guidelines of other legislators we are governed by. If there is no longer a purpose to saving the data, or if the legally required storage period elapses, your data will be routinely deleted or blocked according to legal guidelines, unless you have given permission to use the data for a longer period.

XVIII. Right of objection (Article. 21 GDPR)

If we process your personal data for reasons of our overriding legitimate interest on the basis of a balancing of interests according to Article 6 (1) lit. f GDPR, you have the right to object to any future processing at any time, free of charge.
If we process your personal data for direct advertising purposes, you also have the right to object to any future processing for this purpose at any time and free of charge; this is also applicable to profiling, as long as it relates to direct advertising.
Please direct your objection to the contact given in clause I. (for example, via E-mail)

EU Cookie Law (Change cookie-settings here)

Klaviyo Pixel

This is a tracking technology used by Klaviyo
Klaviyo Inc.
225 Franklin St, Floor 10, Boston MA 02110, United States of America

Datenverarbeitungszwecke

• Marketing
• Retargeting
• Tracking
• Analysis
• Advertising

Technologies used

• Cookies

Data collected
This list contains all (personal) data collected by or through the use of this service.

• Klaviyo-ID
• Browser information
• Usage data
• Device information
• Non-sensitive user-defined data
• Location information
• Pixel-specific data
• User behaviour
• Buying activity
• Marketing information
• Respected content
• IP address

Legal basis
The legal basis for the processing of personal data required under Art. 6 para. 1 sentence 1 GDPR is stated below.

• Art. 6 para. 1 sentence 1 lit. a GDPR

Place of processing
United States of America

Retention period
The data is deleted as soon as it is no longer required for the processing purposes.

Data recipient

• Klaviyo Inc.

Transfer to third countriesr
United States of America

Data protection officer of the processing company
Below you will find the e-mail address of the data protection officer of the processing company.

privacy@klaviyo.com

Further information and opt-outt
Click here to read the data processor's privacy policy https://www.klaviyo.com/legal/privacy/privacy-notice

Cookie policy URL https://www.klaviyo.com/legal/privacy/cookie-notice

Google Ads Conversion

This is a Conversion Marketing Service for the success measurement of ad campaigns.

Processing company
Google Ireland Limited
Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland

Data Purposes

• Advertisement
• Conversion Tracking

Technologies Used

• Cookies

Data Collected
This list represents all (personal) data that is collected by or through the use of this service.

• IP Address
• Browser information
• Date and time of visit
• Web request
• Cookie ID
• Device information
• Referrer URL
• Operating system information

Legal Basis
In the following the legal basis for the processing of personal data required by Art. 6 I 1 GDPR is listed.

• Art. 6 para. 1 s. 1 lit. a GDPR

Location of Processing
European Union

Retention Period
The data will be deleted as soon as they are no longer needed for the processing purposes.
Data Recipients

• Alphabet Inc.
• Google LLC
• Google Ireland Limited

Transfer to Third Countries
Worldwide

Data Protection Officer of Processing Company
Below you can find the email address of the data protection officer of the processing company.
https://support.google.com/policies/contact/general_privacy_form

Further Information and Opt-Out
Click here to read the privacy policy of the data processor https://policies.google.com/privacy?hl=en-US
Cookie Policy URL https://policies.google.com/technologies/cookies?hl=en-US

If you would like to learn more about how Google uses your personal data, please visit https://business.safety.google/privacy/.

Google Ads Remarketing

This is a remarketing service.

Processing company
Google Ireland Limited
Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland

Data Purposes

• Remarketing

Technologies Used

• Cookies

Data Collected
This list represents all (personal) data that is collected by or through the use of this service.

• Pages visited
• IP address
• Duration of visit
• Other data on use of websites
• Content user is interested in

Legal Basis
In the following the legal basis for the processing of personal data required by Art. 6 I 1 GDPR is listed.

• Art. 6 para. 1 s. 1 lit. a GDPR

Location of Processing
European Union

Retention Period
The data will be deleted as soon as they are no longer needed for the processing purposes.

Data Recipients

• Google Ireland Limited
• Google LLC
• Alphabet Inc.

Transfer to Third Countries
Worldwide

Data Protection Officer of Processing Company
Below you can find the email address of the data protection officer of the processing company.
https://support.google.com/policies/troubleshooter/7575787?hl=en
Further Information and Opt-Out
Click here to opt out from this processor across all domains https://safety.google/privacy/privacy-controls/
Click here to read the privacy policy of the data processor https://policies.google.com/privacy?hl=en
Cookie Policy URL https://policies.google.com/technologies/cookies?hl=en

If you would like to learn more about how Google uses your personal data, please visit https://business.safety.google/privacy/.

Microsoft Advertising

This is a tracking and advertising service.

Processing company
Microsoft Corporation
One Microsoft Way, Redmond, WA 98052-6399, United States of America

Data Purposes

• Advertising
• Conversion tracking

Technologies Used

• Cookies
• Web beacons

Data Attributes

• Conversions
• Possibly revenues
• Touch points with advertising medium
• Usage data (clicks, views)
• Log File Data (IP-Address, user agent)

Data Collected
This list represents all (personal) data that is collected by or through the use of this service.

• IP address
• UET ID tag
• GUID generated by UET tag
• referrer URL
• URL of the page
• Ad click information
• Microsoft cookie
• Page load time
• Page title
• Browser language setting
• Screen width
• Microsoft Click ID
• Digital signature
• Screen height
• Screen color depth

Legal Basis
In the following the legal basis for the processing of personal data required by Art. 6 I 1 GDPR is listed.

• Art. 6 para. 1 s. 1 lit. a GDPR

Location of Processing
European Union

Retention Period
Data will be deleted as soon as they are no longer needed for the processing purposes.

Data Recipients

• Microsoft Corporation

Transfer to Third Countries
Worldwide

Data Protection Officer of Processing Company
Below you can find the email address of the data protection officer of the processing company.
https://aka.ms/privacyresponse

Further Information and Opt-Out
Click here to opt out from this processor across all domains https://account.microsoft.com/privacy/ad-settings/signedout?ru=https:%2F%2Faccount.microsoft.com%2Fprivacy%2Fad-settings

Click here to read the privacy policy of the data processor https://privacy.microsoft.com/de-de/privacystatement
Cookie Policy URL https://privacy.microsoft.com/de-de/privacystatement

Google Analytics

This is a web analytics service.

Processing company
Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland

Data Purposes

• Analytics

Technologies Used

• Accept Cookies
• Pixel Tags

Data Attributes

• IP address (anonymised)
• Browser information (browser type, referring/exit pages, the files viewed on our site, operating system, date/time stamp, and/or clickstream data)
• Usage Data (views, clicks)

Data Collected
This list represents all (personal) data that is collected by or through the use of this service.

• IP address
• Date and time of visit
• Usage data
• Click path
• App updates
• Browser information
• Device information
• JavaScript support
• Pages visited
• referrer url
• Downloads
• Flash version
• Location information
• Purchase activity
• Widget interactions

Legal Basis

• Art. 6 para. 1 s. 1 lit. f GDPR

Location of Processing
European Union

Retention Period
The Retention Period depends on the type of the saved data. Each client can choose how long Google Analytics retains data before automatically deleting it.

Data Recipients

• Alphabet Inc.
• Google LLC
• Google Ireland Limited

Data Protection Officer of Processing Company
Below you can find the email address of the data protection officer of the processing company.
https://support.google.com/policies/contact/general_privacy_form

Further Information and Opt-Out
https://tools.google.com/dlpage/gaoptout?hl=de
Click here to opt out from this processor across all domains https://safety.google/privacy/privacy-controls/
Click here to read the privacy policy of the data processor https://policies.google.com/privacy?hl=en

Usercentrics Consent Management Platform

This is a consent management service.

Processing company
Usercentrics GmbH
Sendlinger Str. 7, 80331 Munich, Germany

Data Purposes

• Compliance with legal obligations
• Storage of Consent

Technologies Used

• Accept Cookies
• Local storage

Data Attributes

• Consent "Yes" or "No"
• Log file data (IP (anonymised))

Data Collected
This list represents all (personal) data that is collected by or through the use of this service.

• Device information
• Browser Information
• Anonymised IP Address
• Opt-in and opt-out data
• Date and time of visit

Legal Basis
In the following the legal basis for the processing of personal data required by Art. 6 I 1 GDPR is listed.

• Art. 6 para. 1 s. 1 lit. c GDPR

Location of Processing
European Union (Consent database is located in Belgium)

Retention Period
The Consent data (given consent and the consent revocation) will be kept for a period of three years. A data export takes place after termination of the contract.

Data Recipients

• Usercentrics GmbH

Data Protection Officer of Processing Company
Below you can find the email address of the data protection officer of the processing company.
datenschutz@usercentrics.com

Further Information and Opt-Out
Click here to read the privacy policy of the data processor https://usercentrics.com/privacy-policy/

Google Tag Manager

This is a tag management system for managing JavaScript and HTML tags used for the implementation of tracking and analytics tools.

Processing company
Google Ireland Limited 
Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland

Data Purposes

• Managing website tags

Data Collected
This list represents all (personal) data that is collected by or through the use of this service.
No personal data is processed. Tag Manager is a cookie-free domain, and does not register any personal data. Google Tag Manager may however trigger other tags which may record data.

• No data collected

Location of Processing
United States of America

Retention Period
The data will be deleted as soon as they are no longer needed for the processing purposes.

Data Recipients

• Alphabet Inc.
• Google LLC
• Google Ireland Limited

Transfer to Third Countries
Worldwide

Data Protection Officer of Processing Company
Below you can find the email address of the data protection officer of the processing company.
https://support.google.com/policies/troubleshooter/7575787?hl=en

Further Information and Opt-Out
Click here to opt out from this processor across all domains https://safety.google/privacy/privacy-controls/
Click here to read the privacy policy of the data processor https://www.google.com/intl/de/tagmanager/faq.html
Cookie Policy URL https://www.google.com/intl/de/tagmanager/use-policy.html