Privacy Policy

Introduction

We, CAPRICE Schuhproduktion GmbH & Co. KG, as the operator of this online service, are responsible for processing the personal data of the users of the online service. Our contact details can be found in the imprint of the online service, the contact persons for questions regarding the processing of personal data are listed directly in this privacy policy.

We take the protection of your privacy and your private data very seriously. We collect, store and use your personal data only in accordance with the content of this privacy policy and the applicable data protection regulations, in particular the European General Data Protection Regulation (GDPR) and national data protection regulations.

With this privacy policy we would like to inform you to what extent and for what purpose personal data is processed in connection with the use of this online service.

Personal Data

Personal data is information about an identified or identifiable natural person. This includes all information about your identity such as your name, your e-mail address or your postal address. Information that cannot be linked to your identity (such as statistical data, e.g. the number of users of the online service) is not considered personal information.
You can use our online service without disclosing your identity and without providing personal data. We will then only collect general information about the visit to our online service. For some of the services offered, however, personal data is collected from you. These data are then generally only processed by us for the purposes of using this online service, in particular for providing the requested information. When collecting personal data, only those data that are mandatory must be provided. In addition, the input of further information may be possible, in which case this information is voluntary. We point out in each case whether these are mandatory or voluntary fields. We will inform you about the specific details in the corresponding section of this privacy policy.

An automated decision-making process based on your personal data does not take place in connection with the use of our online service.

Processing of Personal Information

Your details are stored by us on specially protected servers within the European Union. These are protected by technical and organisational measures taken to prevent the loss, destruction, access, modification or distribution of your data by unauthorised persons. Access to your data is only possible for a few authorised persons. These are responsible for the technical, commercial or editorial support of the servers. However, despite regular checks, complete protection against all dangers is not possible.

The transmission of our web pages and your entries on our web pages via the Internet is generally not encrypted. It is therefore not excluded that third parties may view and/or access the transmitted data. We recommend that you take this aspect into account when deciding whether and which data you transfer to us via the Internet.

Transfer of Personal Data to Third Parties

We generally only use your personal information to provide the services you have requested. If external service providers are used by us in the course of providing services, their access to the data is also exclusively for the purpose of providing the service. Through technical and organisational measures, we ensure compliance with data protection regulations and oblige our external service providers to do the same.

Furthermore, we will not pass on the data to third parties without your express consent, especially not for advertising purposes. Your personal data will only be passed on if you yourself have consented to the passing on of data or if we are entitled or obliged to do so by law and/or official or court orders. This may include, in particular, the provision of information for the purposes of criminal prosecution, the prevention of danger or the enforcement of intellectual property rights.

Legal Bases of Data Processing

Insofar as we obtain consent for the processing of your personal data, Art. 6 para. 1 lit. a) GDPR serves as the legal basis for data processing.

Insofar as we process your personal data because this is necessary for the performance of a contract or in the context of a contract-like relationship with you, Art. 6 para.1 lit. b) GDPR serves as the legal basis for data processing.

Insofar as we process your personal data for the fulfilment of a legal obligation, Art. 6 para. 1 lit. c) GDPR serves as the legal basis for the data processing.

As a legal basis for data processing, Art. 6 para. 1 lit. f) GDPR is further applicable if the processing of your personal data is necessary to safeguard a legitimate interest of our company or a third party and your interests, fundamental rights and freedoms do not require the protection of personal data.

Within the framework of this privacy policy, we always point out the legal basis on which we base the processing of your personal data.

Data Deletion and Storage Duration

We always delete or block your personal data when the purpose for which it was stored no longer applies. However, storage may also take place if this is required by legal regulations to which we are subject, for example, with regard to legal storage and documentation obligations. In such a case, we will delete or block your personal data after the end of the corresponding specifications.

USE OF OUR ONLINE SERVICE
Information about your Computer

Whenever you access our online service, we collect the following information about your computer regardless of your registration: the IP address of your computer, the request by your browser and the time of this request. In addition, the status and the amount of data transferred in the context of this request are recorded. We also collect product and version information about the browser used and the computer’s operating system. We also record from which website the online service was accessed. The IP address of your computer will only be saved for the time during which you use the online service and then deleted or anonymised by shortening it. The remaining data is stored for a limited period of time.

We use this data for the operation of the online service, in particular to determine and eliminate errors, to determine the utilisation of the online service and to make adjustments or improvements. These purposes also include our legitimate interest in data processing in accordance with Art. 6 para. 1 lit. f) GDPR, which is the legal basis for this processing.

Use of Cookies

For our online service – as on many websites – cookies are used. Cookies are small text files that are stored on your computer and that store certain settings and data for exchange with our online service via your browser. A cookie typically contains the name of the domain from which the cookie file was sent, information about the age of the cookie and an alphanumeric identifier.

Cookies enable us to recognise your computer and make any pre-settings immediately available. Cookies help us to improve our online service and to offer you a better and even more customised service. This is also our legitimate interest in data processing according to Art. 6 para. 1 lit. f) GDPR.
The cookies we use are so-called session cookies, which are automatically deleted after the browser session ends. Occasionally, cookies with a longer storage period may also be used so that your pre-settings and preferences can still be taken into account the next time you visit our online service.

Most browsers are set so that they automatically accept cookies. However, you can deactivate the storage of cookies or set your browser to notify you when cookies are sent. It is also possible to manually delete already stored cookies via the browser settings. Please note that you may only be able to use our online services to a limited extent or not at all if you reject the storage of cookies or delete necessary cookies.

Google Analytics

We use Google Analytics for statistical evaluations. Google Analytics is a web analytics service provided by Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94034, USA (“Google”). Google Analytics uses “cookies”, which are text files placed on your computer to help the website analyse how users use the site. The information generated by the cookies about your use of this website are usually transferred to a Google server in the USA and stored there. However, in the event that IP anonymisation is activated on this website, your IP address will be shortened by Google within member states of the European Union or in other states which are party to the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transferred to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activities and to provide further services to the website operator in connection with website and internet use. The IP address transmitted by your browser as part of Google Analytics is not merged with other data from Google. You may refuse the use of cookies by selecting the appropriate settings on your browser, however, please note that if you do this you may not be able to use the full functionality of this website. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plugin available at the following link http://tools.google.com/dlpage/gaoptout?hl=de. You can find further information about this at http://tools.google.com/dlpage/gaoptout?hl=de or http://www.google.com/intl/de/analytics/privacyoverview.html (general information about Google Analytics and data protection). We would like to point out that on our Internet pages Google Analytics has been extended by the code “ anonymizeIp();” to make the IP addresses anonymous, whereby the last octet is deleted.

We are of the opinion that due to the protective measures taken (anonymisation and option to object) the data processing for the optimisation of our online service is to be regarded as a legitimate interest in data processing according to Art. 6 para. 1 lit. f) GDPR.

REGISTRATION
You can register to use our online service. To do so, you must provide the data requested during registration, for example, your name, address and e-mail address. We also record the date and time of registration and the IP address. As part of the registration process, we obtain your consent for the use of the data. You have the advantage that you do not have to enter this data again for each use or order.

The legal basis for the processing of the data for registration is, as long as consent has been given, Art. 6 para. 1 lit. a) GDPR. If you register with us to fulfil or initiate a contract, the legal basis for the processing of data is additionally Art. 6 para. 1 lit. b) GDPR.

The information requested as a mandatory field during registration is required to fulfil or initiate a contract with us for certain services. However, you are not obliged to register, but can also place an order as a guest. In this case, however, you will have to enter all the data required to process the contract for each order.
With the registration a customer account is created for you. The data in the customer account are stored by us as long as an active customer relationship exists. If no activity can be detected for a period of three years, the status of the customer relationship is set to inactive. You can request the deletion of your customer account at any time.

COMMUNICATION WITH US
You can contact us in various ways, including via the contact form on our website. We would also like to keep you informed regularly with our newsletter via e-mail.

Contact Form

If you wish to use the contact form for our online service, we collect the personal data that you enter in the contact form, in particular your name and e-mail address. We also store the IP address as well as the date and time of the request. We process the data transmitted via the contact form exclusively for the purpose of being able to answer your enquiry or request.

You can decide for yourself what information you send us via the contact form. The legal basis for the processing of your data is your consent according to Art. 6 para. 1 lit. a) GDPR.

After the matter has been processed by us, the data will first be saved in the event of any queries. Deletion of the data can be requested at any time, otherwise the data will be deleted after the matter has been completely settled; legal storage obligations remain unaffected in each case.

Social Media

As part of our online service you will find links to the social network Facebook. You can recognise the links by the respective logo of the providers.

Clicking on the links will open the corresponding social media pages to which this privacy policy does not apply. For details of the provisions applicable there, please refer to the relevant Facebook privacy policy; you can find it at:

Facebook: http://www.facebook.com/policy.php

Before calling up the corresponding links, no personal information is transmitted to the respective providers. Your access to the linked page is also the basis for data processing by the respective providers.

YOUR RIGHTS AND CONTACT
We attach great importance to explaining the processing of your personal data as transparently as possible and also to informing you about the rights you are entitled to. If you would like more information or to exercise your rights, you can always contact us so that we can take care of your request.

Rights of Data Subjects

You are entitled to extensive rights with regard to the processing of your personal data. First of all, you have an extensive right of information and, if necessary, you can demand the correction and/or deletion or blocking of your personal data. You can also request a restriction of the processing and have a right of objection. With regard to the personal data you provide us with, you also have the right to data transferability.

If you wish to assert one of your rights and/or receive more detailed information about this, please contact our customer service. Alternatively, you can also contact our Data Protection Officer.

Revocation of Consent and Objection

Once you have given your consent, it can be freely revoked at any time with effect for the future. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent leading up to the revocation. Contact persons for this are also our customer service department and our Data Protection Officer.

If the processing of your personal data is not based on consent, but on another legal basis, you can object to this data processing. Your objection will lead to a review and, if necessary, termination of the data processing. You will be informed about the result of the review and – if the data processing is to be continued nonetheless – you will receive more detailed information from us as to why the data processing is permitted.

Data Protection Officer and Contact

We have appointed an external Data Protection Officer who supports us with data protection issues and whom you can also contact directly. If you have any questions regarding our handling of personal data or require further information on data protection issues, please contact our Data Protection Officer and his team:

RA Dr. Sebastian Meyer, LL.M.
c/o BRANDI Rechtsanwälte
Adenauerplatz 1, 33602 Bielefeld
Telefon: 0521 / 96535-812
E-Mail: info@caprice.de
If you wish to contact our Data Protection Officer personally by e-mail, you can also reach him at sebastian.meyer@brandi.net.
Complaints

If you believe that we are not processing your personal data in accordance with this privacy policy or the applicable data protection regulations, you can submit a complaint to our Data Protection Officer. The Data Protection Officer will then review the matter and inform you of the result of the review. In addition, you also have the right of appeal to a supervisory authority.

FURTHER INFORMATION AND CHANGES
Links to other Websites

Our online service may contain links to other websites. These links are usually marked as such. We have no influence on the extent to which the linked websites comply with the applicable data protection regulations. We therefore recommend that you also inform yourself about the respective privacy policies of other websites.

Changes to this Privacy Policy

The status of this privacy policy is indicated by the date (below). We reserve the right to change this privacy policy at any time with effect for the future. A change is made in particular in the event of technical adjustments to the online service or changes to data protection regulations. The current version of the privacy policy is always available directly from the online service. We recommend that you inform yourself regularly about changes to this privacy policy.
Status of this privacy policy: May 2018