Data Protection
Data Protection
Data protection
Overview
1. Information about the collection of personal data
2. Collection of personal data when visiting our website
3. Collection of other personal data when visiting our website through cookies
4. Use of our webshop
5. Registration for our newsletter
6. Use of Google Analytics
7. WebFonts
8. Data protection in applications and in the application process
9. Your rights
1. Information about the collection of personal data
1.1 In the following we inform about the collection of personal data when using our website. Personal data is all data that is personally available to you, eg. Name, address, e-mail addresses, user behavior.
Responsible acc. Art. 4 para. 7 EU General Data Protection Regulation (DS-GVO)
HMK GmbH
Delaware Avenue 23-25
66953 Pirmasens
Germany
TEL.: +49 (0)6331/69866-10
FAX.: +49 (0)6331/69866-09
kontakt@3dschuhdesign.de
1.2 When you contact us by e-mail or through a contact form, the information you provide (your e-mail address, name and, if applicable, your telephone number and any other information you provide) will be stored by us to answer your questions to answer. The legal basis for this is Art. 6 para. 1 sentence 1 lit. a DS-GMO. If the information provided serves the fulfillment of a contract of which you are a party or the performance of pre-contractual measures, then additional legal basis for the processing of the data is Art. 6 (1) lit. b DSGVO.
We delete the data that arises in this context after the storage is no longer required, or limit the processing if there are statutory retention requirements.
Please note that data transmission over the Internet (for example, when communicating via e-mail) may have security vulnerabilities. A complete protection of the data from access by third parties is not possible.
1.3 In part, we use external service providers to process your data. These have been carefully selected and commissioned by us, are bound by our instructions and are regularly inspected.
2. Collection of personal data when visiting our website
2.1 In the case of merely informative use of the website, ie if you do not register or otherwise provide us with information, we only collect the personal data that your browser transmits to our server. If you want to view our website, we collect the following data:
- IP address
- Date and time of the request
- Time zone difference to Greenwich Mean Time (GMT)
- Content of the requirement (concrete page)
- Access status / HTTP status code
- each transmitted amount of data
- Website from which the request comes
- Browser type, including language and version used
- Operating system and its interface
- Websites that are accessed by the user's system through our website.
The data is stored in the log files of our system. A storage of this data together with other personal data of the user does not take place.
2.2 The legal basis for the collection and storage of data is Art. 6 para. 1 lit. f DSGVO.
2.3 The data is technically necessary for us to show you our website and to ensure stability and security. Storage in log files is done to ensure the functionality of the website. In addition, the data is used to optimize the website and to ensure the security of our information technology systems.
For these purposes, our legitimate interest in the processing of data according to Art. 6 para. 1 lit. f DSGVO.
2.4 The data will be deleted as soon as it is no longer necessary for the purpose of its collection. In the case of collecting the data for providing the website, this is the case when the respective session is completed. In the case of storing the data in log files, this is the case after no more than seven days. An additional storage is possible. In this case, the IP addresses are deleted or alienated, so that an assignment of the calling client is no longer possible.
2.5 The collection and storage of data described above is required for the operation of the website. Consequently, there is no contradiction for you. If you do not agree, we recommend that you leave the website.
3. Collection of other personal data when visiting our website through cookies.
3. 1 In addition to the aforementioned data provided by your browser to our server, cookies are stored on your computer when you use our website.
Cookies are small text files that are stored on your hard drive assigned to the browser you are using and by which the body that sets the cookie (here through us) receives certain information. Cookies can not run programs or transmit viruses to your computer. They serve to make the website more user-friendly and effective overall, as well as to analyze user behavior on our website.
When you visit our website you will be informed by an information banner about the use of cookies and referred to this privacy policy.
3. 2 There are different types of cookies whose scope and mode of operation are explained below.
There are so-called "session cookies". These are automatically deleted when you close the browser. You save a so-called session ID, with which various requests from your browser can be assigned to the common session. This will allow your computer to be recognized when you return to our website. The session cookies are deleted when you log out or close the browser.
There are also persistent cookies that are automatically deleted after a specified period of time, which may differ depending on the cookie. You can delete the cookies in the security settings of your browser at any time. We do not use persistent cookies!
3. 3 The legal basis for the processing of personal data using cookies is Article 6 (1) lit. f DSGVO. The legal basis for the processing of personal data using cookies for analysis purposes is, if you have given your consent in this regard, Art. 6 para. 1 lit. a GDPR.
3. 4 The purpose of using cookies is to facilitate the use of websites for users. We use on our website both technically necessary cookies as well as those that allow the analysis of the surfing behavior of users. The cookies are used to enable functions of the website, as well as, if necessary, to identify you in subsequent visits or, for example. to be able to enter a language setting or the contents of a shopping cart.
The use of the analysis cookies is for the purpose of improving the quality of our website and its contents.
Through the analysis cookies, we learn how the website is used and so we can constantly optimize our offer. The collected data, which serve the analysis of the surf behavior, are pseudonymized by technical precautions. Therefore, an assignment of the data to the calling user is no longer possible. The data will not be stored together with other personal data of the users.
For these purposes, our legitimate interest in the processing of personal data pursuant to Art. 6 para. 1 lit. f DSGVO.
3. 5 Cookies are stored on your computer and transmitted by this on our side.
Therefore, as a user, you have full control over the use of cookies. By changing the settings in your internet browser, you can disable or restrict the transmission of cookies. Already saved cookies can be deleted at any time. This can also be done automatically. If cookies are disabled for our website, it may not be possible to use all the functions of the website to the full.
4. Use of our webshop
4. 1 If you wish to order in our webshop, it is necessary for the conclusion of the contract that you provide your personal data, which we need for the processing of your order. Obligatory information necessary for the execution of the contracts are made separately recognizable, further details are voluntary. We process the data provided by you to process your order.
For this we can pass on your payment data to our house bank. As far as a shipment of goods is owed, we can pass on the data required for the shipment (name, address) to the logistics company commissioned by us.
The legal basis for this is Art. 6 para. 1 sentence 1 lit. a DS-GMO. If the information provided serves the fulfillment of a contract of which you are a party or the performance of pre-contractual measures, then additional legal basis for the processing of the data is Art. 6 (1) lit. b DSGVO.
4. 2 You can voluntarily create a customer account that allows us to save your data for later purchases. When an account is created, the data you provide, as well as the IP address of the user and the date and time of the registration are revocably stored. All other data, including your user account, you can always delete in the customer area. Reference is made to the information on the legal basis in subsection (1).
4. 3 The purpose of the use is the fulfillment of the contract (including pre-contractual measures).
We may also process the information you provide to notify you of any interesting products (but only through direct mail advertising for your own similar goods or services) via email.
4. 4 We are required by commercial and tax law to save your address, payment and order data for a period of ten years. However, after two years we are restricting processing, ie. H. Your data will only be used to comply with legal obligations or in the event of claims for warranties or warranties.
4. 5 In order to prevent unauthorized access by third parties to your personal data, in particular financial data, the ordering process is encrypted.
5. Sign up for our newsletter
5. 1 With your consent, you can subscribe to our newsletter, which will provide you with information about current interesting offers and developments.
5. 2 To register for our newsletter, we use the so-called double opt-in procedure. This means that after you have registered, we will send you an e-mail to the e-mail address specified in which we ask you to confirm that you wish to receive the newsletter. If you do not confirm your registration, your information will be blocked and automatically deleted after one month. In addition, we store your IP addresses and times of registration and confirmation.
5. 3 The legal basis for the collection, storage and use of the data is Art. 6 para. 1 sentence 1 lit. a DS-GMO.
5. 4 Mandatory information for the transmission of the newsletter is your e-mail address alone. The name and gender are voluntary and will be used to address you personally. After your confirmation, we will store your data for the purpose of sending the (possibly personalized) newsletter.
The purpose of the double-opt-in procedure is to prove your registration and, if necessary, to inform you about possible misuse of your personal data.
5. 5 You can revoke your consent to the sending of the newsletter at any time and unsubscribe from the newsletter. This is possible by using the unsubscribe link provided with each newsletter or by sending a message to webshop@3dschuhdesign.de
5. 6 The data will be deleted as soon as it is no longer necessary to achieve the purpose of its survey. They are therefore stored as long as the subscription to the newsletter is active.
6. Use of Google Analytics
6. 1 This website uses Google Analytics, a web analytics service provided by Google Inc. ("Google"). Google Analytics uses so-called "cookies", text files that are stored on your computer and that allow an analysis of the use of the website by you. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. However, in the event of activation of IP anonymisation on this website, your IP address will be shortened beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be sent to a Google server in the US and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide other services related to website usage and internet usage to the website operator.
The IP address provided by Google Analytics as part of Google Analytics will not be merged with other Google data.
6. 2 You can prevent the storage of cookies by setting your browser software accordingly; however, please note that if you do this, you may not be able to use all the features of this website to the fullest extent possible. You may also prevent the collection by Google of the data generated by the cookie and related to your use of the website (including your IP address) as well as the processing of this data by Google by using the browser plug-in available under the following link. in download and install: http://tools.google.com/dlpage/gaoptout?hl=de.
6. 3 This website uses Google Analytics with the extension "_anonymizeIp ()". As a result, IP addresses are processed shortened, a person-relatedness can be excluded. Insofar as the data collected about you is assigned a personal reference, it will be immediately excluded and the personal data will be deleted immediately.
6. 4 We use Google Analytics to analyze and regularly improve the use of our website. With the statistics we can improve our offer and make it more interesting for you as a user. For the exceptional cases in which Personal Information is transferred to the US, Google has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US Framework.
The legal basis for the use of Google Analytics is Art. 6 para. 1 sentence 1 lit. f DS-GMO.
6. 5 Third-party information: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001. Terms of Use: http://www.google.com/analytics/terms/ en.html, Privacy Policy: http://www.google.com/intl/de/analytics/learn/privacy.html, and the Privacy Policy: http://www.google.com/intl/en/policies/ privacy.
7. WebFonts
7. 1 This site uses so-called web fonts provided by Google Inc. ("Google") for the uniform presentation of fonts. The integration of these web fonts is done by a server call, usually a Google server in the USA. This will be transmitted to the server, which of our websites you have visited. Also, the IP address of the browser of the terminal of the visitor of this website is stored by Google. However Google informs that when loading the fonts no cookies are set or data of the visitor (neither IP address, browser version, nor other personal information) are linked with any other data.
7. 2 When you call up a page, your browser loads the required web fonts into your browser cache to display texts and fonts correctly. You can prevent this by using a java script blocker such as install the browser plugin 'NoScript' (www.noscript.net) or disable JavaScript in your browser. This may result in functional restrictions on websites that you visit. If your browser does not support web fonts, a default font will be used by your computer.
For more information about Google Web Fonts, see
https://developers.google.com/fonts/faq
and in Google's privacy policy:https://www.google.com/policies/privacy/
8. Data protection in applications and in the application process
8. 1 When submitting an application, we collect and process the personal data you provide to applicants for the purpose of processing the application process. The processing can also be done electronically. This is especially the case if you submit suitable application documents by electronic means, for example by e-mail or via a web form located on the website.
8. 2 The legal basis for use is Art. 6 para. 1 sentence 1 lit. a and lit. b DS-GMO.
8.3 If there is a contract of employment with you, we will save the transferred data for the purpose of the employment relationship in compliance with the legal requirements.
If the contract of employment is not concluded, the application documents will be deleted six months after the cancellation has been sent, provided that deletion does not prejudice any other legitimate interests of the controller. Other legitimate interest in this sense, for example, a burden of proof in a procedure under the AGG.
9. Your rights
9. 1 You have opposite us u.a. the following rights regarding your personal data:
- right to information, i. You can request detailed information about the stored data from us. For details please refer to Art. 15 DS-BER.
- right to rectification or erasure, i. You may request a correction or completion of personal data or a cancellation of your personal data. In addition we refer to Art. 16 resp. 17 DS-GVO.
- right to restriction of processing, i. limited processing, e.g. until the correctness of a claim for rectification can be verified, instead of the cancellation claim you are entitled to, if the data are no longer with us, but still needed for certain purposes or if it is not yet certain, despite an objection to the processing (see subsection 4) in individual cases, because of conflicting interests, processing may continue. For details please refer to Art. 18 DS-GVO.
- right to data portability, i. The right to obtain personal data concerning you in a common format, such as a computer file. For details please refer to Art. 20 DS-BER.
9. 2 You also have the right to complain to us about the processing of your personal data by a data protection supervisory authority (for example, the State Commissioner for Data Protection and Freedom of Information Rhineland-Palatinate, "www.datenschutz.rlp.de").
9. 3 If you have given your consent to the processing of your data, you can revoke them at any time, Art. 7 para. 3 DS-GMO. Search revocation affects the admissibility of the processing of your personal data from the time you have given it to us.
Of course, you may object to the processing of your personal data for advertising and data analysis purposes at any time. About your advertising contradiction or other questions about the collection, processing or use of your personal data, information, correction, blocking or deletion of data and revocation of granted consent, please contact the contact details mentioned in point 1.
9. 4 Insofar as we base the processing of your personal data on the balancing of interests, you can object to the processing, Art. 21 DS-GVO. This is the case if, in particular, the processing is not required to fulfill a contract with you, which we describe in each case in the following description of the functions. In the event of such a disagreement, we ask you to explain the reasons why we should not process your personal data as we have done. In the case of your justified objection, we will examine the situation and will either discontinue or adapt the data processing or point out to you our compelling legitimate reasons on which we continue the processing.
10. Order processing of personal data
1 Introduction, scope, definitions
(1) The agreement regulates the rights and obligations of the client and recipient (hereinafter referred to as “parties”) within the scope of processing personal data on behalf of the customer.
(2) This agreement applies to all activities in which employees of the contractor or subcontractors commissioned by him process personal data of the client on his behalf.
(3) Terms used in this agreement are to be understood in accordance with their definition in the EU General Data Protection Regulation. In this sense, the client is the “responsible party” and the contractor is the “processor”. As far as declarations below have to be made “in writing”, the written form is meant in accordance with Section 126 of the German Civil Code (BGB). Furthermore, declarations can also be made in another form, provided that appropriate verifiability is guaranteed.
2 Subject and duration of processing
2.1 Subject
The contractor undertakes the following processing: Processing of personal foot data.
2.2 Duration
Processing begins after the FitMEShoes software has been licensed and ends when the license is terminated.
3 Type, purpose and those affected by data processing:
3.1 Type of processing
The processing is of the following nature: collecting, recording, organizing, classifying, storing, adapting or changing, reading, querying, using, disclosing by transmission, dissemination or any other form of provision, comparing or combining, restricting, deleting or destroying data
3.2 Purpose of processing
The purpose is to determine shoe size and to improve shoe production for the customer.
3.3 Type of data
The following data is processed: salutation, communication data, first and last name, email address, address, behavioral data.
3.4 Categories of data subjects
The following are affected by the processing: customers of the client, interested parties of the client, employees of the client
4 Rights and obligations of the contractor
(1) The contractor processes personal data exclusively as agreed or as instructed by the client, unless the contractor is legally obliged to carry out specific processing. If such obligations exist for him, the contractor will inform the client before processing, unless the notification is prohibited by law.
(2) The contractor confirms that he is aware of the relevant general data protection regulations. He observes the principles of proper data processing.
(3) The contractor undertakes to strictly maintain confidentiality during processing.
(4) Persons who can gain knowledge of the data processed in the order must undertake a written obligation to maintain confidentiality, unless they are already subject to a relevant obligation of confidentiality by law.
(5) In connection with the commissioned processing, the contractor supports the client as necessary in fulfilling his data protection obligations, in particular in creating and updating the list of processing activities, in carrying out the data protection impact assessment and in any necessary consultation with the supervisory authority. The necessary information and documentation must be kept and provided to the client immediately upon request.
(6) If the client is subject to inspections by supervisory authorities or other bodies or if data subjects assert rights against him, the contractor undertakes to support the client to the extent necessary as far as the processing in the order is affected.
(7) The contractor may only provide information to third parties or those affected with the prior consent of the client. He will immediately forward inquiries addressed to him directly to the client.
(8) Order processing generally takes place within the EU or EEA. Any relocation to a third country may only take place with the consent of the Client and under the conditions set out in Chapter V of the General Data Protection Regulation and in compliance with the provisions of this Agreement.
5 Security of processing
(1) The data security measures can be adapted to technical and organizational developments as long as the level agreed here is not fallen below. The contractor must immediately implement any changes necessary to maintain information security. Changes must be communicated to the client immediately. Significant changes must be agreed between the parties.
(2) If the security measures taken do not or no longer meet the requirements of the client, the client will notify us