Privacy Policy

Introduction

We, CAPRICE Schuhproduktion GmbH & Co. KG, as the operator of the online offering, are responsible for processing the personal data of users of the online offering. Our contact details can be found in the imprint of the online offering, and the contacts for questions regarding the processing of personal data are directly named in this privacy policy.

We take the protection of your privacy and your personal data very seriously. We collect, store, and use your personal data only in accordance with the content of this privacy policy and the applicable data protection regulations, particularly the European General Data Protection Regulation (GDPR) and the national data protection regulations.

With this privacy policy, we would like to inform you to what extent and for what purpose personal data is processed in connection with the use of the online offering.

Personal Data

Personal data refers to information about an identified or identifiable natural person. This includes all information related to your identity, such as your name, email address, or postal address. Information that cannot be associated with your identity (such as statistical data, for example, the number of users of the online offering) is not considered personal information. You can use our online service without disclosing your identity and without providing personal data. We will then only collect general information about the visit to our online service. For some of the services offered, however, personal data is collected from you. These data are then generally only processed by us for the purposes of using this online service, in particular for providing the requested information. When collecting personal data, only those data that are mandatory must be provided. In addition, the input of further information may be possible, in which case this information is voluntary. We point out in each case whether these are mandatory or voluntary fields. We will inform you about the specific details in the corresponding section of this privacy policy.

Automated decision-making based on your personal data does not take place in connection with the use of our online offering.

Processing of Personal Information

Your data is stored on specially protected servers within the European Union. These servers are protected against loss, destruction, access, alteration, or distribution of your data by unauthorized persons through technical and organizational measures. Access to your data is only possible for a few authorized individuals responsible for the technical, commercial, or editorial maintenance of the servers. Despite regular checks, complete protection against all risks is not possible.

The transmission of our websites and your inputs on our websites over the Internet generally takes place without encryption. Therefore, it is not excluded that third parties may view and/or access the transmitted data. We recommend that you consider this aspect when deciding whether and what data you transmit to us over the Internet.

Disclosure of Personal Data to Third Parties

We generally use your personal information only to provide the services you requested. If we use external service providers in the course of providing the service, their access to the data will also be limited to the purpose of service delivery. We ensure compliance with data protection regulations through technical and organizational measures and require our external service providers to do the same.

Furthermore, we do not disclose your personal data to third parties without your express con-sent, especially not for advertising purposes. Your personal data will only be disclosed if you have consented to the data transfer or if we are legally permitted or obliged to do so by law and/or official or court orders. This may include providing information for the purpose of criminal prosecution, averting danger, or enforcing intellectual property rights.

Legal Basis for Data Processing

If we obtain your consent for processing your personal data, Art. 6(1)(a) GDPR serves as the legal basis for data processing.

If we process your personal data because it is necessary for the fulfillment of a contract or a contract-like relationship with you, Art. 6(1)(b) GDPR serves as the legal basis for data processing.

Art. 6(1)(f) GDPR also serves as a legal basis for data processing if the processing of your personal data is necessary to protect a legitimate interest of our company or a third party and your interests, fundamental rights, and freedoms do not require the protection of personal data.

In this privacy policy, we always indicate the legal basis on which we base the processing of your personal data.

Data Deletion and Storage Duration

We generally delete or block your personal data as soon as the purpose of storage ceases to apply. However, storage may occur beyond this if it is required by legal obligations to which we are subject, such as legal retention and documentation obligations. In such cases, we de-lete or block your personal data after the relevant legal requirements no longer apply.

Use of our Online Offering

Each time you access our online offering, we collect the following information about your computer, regardless of your registration: the IP address of your computer, the request from your browser, and the time of this request. The status and the amount of data transferred in connection with this request are also recorded. We also collect product and version information about the browser and operating system used. Furthermore, we collect information about the website from which access to the online offering was made. The IP address of your computer is only stored for the duration of your use of the online offering and is then deleted or anonymized by shortening it. The other data is stored for a limited period. We use this data for the operation of the online offering, particularly to identify and fix errors, determine the load on the online offering, and make adjustments or improvements. Our legitimate interest in data processing under Art. 6(1)(f) GDPR lies in these purposes, and this is the legal basis for this processing.

Use of Cookies

We use cookies in our online offering, as do many websites. Cookies are small text files that are stored on your computer and store certain settings and data to exchange with our online offering through your browser. A cookie typically contains the name of the domain from which the cookie file was sent, information about the age of the cookie, and an alphanumeric identifier.

Cookies allow us to recognize your computer and make any default settings immediately available. Cookies help us improve the online offering and provide you with a better and more personalized service. This is also where our legitimate interest in data processing under Art. 6(1)(f) GDPR lies.

The cookies we use are so-called session cookies, which are automatically deleted at the end of the browser session. Occasionally, cookies with a longer storage period may be used so that your preferences and settings are also considered during your next visit to our online offering.

Most browsers are set to automatically accept cookies. However, you can disable cookie storage or set your browser to notify you when cookies are sent. It is also possible to manually delete already stored cookies via the browser settings. Please note that you may only be able to use our online offering to a limited extent or not at all if you refuse the storage of cookies or delete necessary cookies.

Google reCAPTCHA

To secure our forms, including against misuse for sending spam, we use the reCAPTCHA service, provided by Google, in our online offering. The service analyzes whether a manual entry is actually made by a user and is intended to filter out automated access, such as by scripts or bots. To use the service, the IP address and other data required by Google for the reCAPTCHA service (device information, user behavior, and cookie contents) must be transmitted to Google. Further information on data protection at Google, including the reCAPTCHA service, can be found at [https://policies.google.com/privacy?hl=en](https://policies.google.com/privacy?hl=en).

The legal basis for data transmission is our legitimate interest under Art. 6(1)(f) GDPR, whereby our legitimate interest is the protection of our online offering against misuse and the overall security of the online offering.

Registration

You can register to use our online offering. For this purpose, you must provide the data requested during registration, such as name, address, and email address. We also record the date and time of registration and the IP address. During the registration process, we obtain your consent for the use of the data. You benefit from not having to reenter this data for each use or order.

The legal basis for processing the data for registration is your consent under Art. 6(1)(a) GDPR. If you register to fulfill or initiate a contract with us, the legal basis for processing the data is additionally Art. 6(1)(b) GDPR.

The information required during registration is necessary to fulfill or initiate a contract with us for certain services. However, you are not required to register; you can also order as a guest. In this case, however, you will need to reenter all data required to process the contract for each order.

A customer account is created for you upon registration. The data in the customer account is stored by us as long as there is an active customer relationship. If no activity is detected over a period of three years, the status of the customer relationship is set to inactive. You can request the deletion of your customer account at any time.

Communication with us

You can contact us in various ways, including via the contact form on our website.

Contact form

If you wish to use the contact form in our online offering, we collect the personal data you provide in the contact form, particularly your name and email address. We also store the IP address and the date and time of the request. We process the data transmitted via the contact form exclusively for the purpose of responding to your inquiry or concern.

You can decide for yourself what information you provide to us via the contact form. The legal basis for processing your data is your consent under Art. 6(1)(a) GDPR.

After your inquiry has been handled, the data is initially stored for any follow-up questions. You can request the deletion of the data at any time; otherwise, the data

Social Media

In addition to our online offerings, we also use various social media channels for information delivery and communication, which you can find linked on our website or where our website is linked on these platforms. Specifically, we use the social networks Facebook, Pinterest, and Instagram, as well as the video platform YouTube. The links can be identified by the respective logos of the providers.

By clicking on these links, the corresponding social media pages will open, where the specific terms and privacy notices of the respective providers apply. We have summarized an overview of the respective notices from the providers below.

Facebook: [https://www.facebook.com/policy.php](https://www.facebook.com/policy.php)
Pinterest: [https://policy.pinterest.com/en/privacy-policy](https://policy.pinterest.com/en/privacy-policy)
Instagram: [https://help.instagram.com/519522125107875](https://help.instagram.com/519522125107875)
YouTube: [https://www.youtube.com/howyoutubeworks/our-commitments/protecting-user-data/]

Before accessing these links, no personal information is transmitted to the respective providers. Your access to the linked page is the basis for data processing by the respective providers.

We also point out that the Federal Office for Information Security (BSI) provides general in-formation on the safe use of social networks on its website at [https://www.bsi.bund.de/DE/Themen/Verbraucherinnen-und-Verbraucher/Informationen-und-Empfehlungen/Onlinekommunikation/Soziale-Netzwerke/soziale-netzwerke_node.html](https://www.bsi.bund.de/DE/Themen/Verbraucherinnen-und-Verbraucher/Informationen-und-Empfehlungen/Onlinekommunikation/Soziale-Netzwerke/soziale-netzwerke_node.html).

For our use of the social media channels Facebook and Instagram, the following information regarding the processing of your personal data applies.

Facebook Fanpage

In addition to our own online offering, we also operate a fan page on the social network Facebook. Through this fan page, we inform about our activities and provide a channel for communication. The operator of the social network Facebook is Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland (hereinafter: "Meta"). We use Meta's technical platform and services.

Responsibility Delimitation

We point out that you use the fan page and its functions on your own responsibility, especially concerning interactive functions such as commenting, sharing, or rating. Alternatively, you can also access the information provided on the fan page through our website.

As far as possible on Facebook, we try to ensure the protection of your privacy and personal data. To the extent that your personal data is processed by us in connection with your visit to the fan page, the explanations in this privacy policy apply without restriction. Due to the integration of the fan page into Facebook's offering, it should also be noted that personal data is simultaneously processed by Meta. When visiting the fan page, Meta collects, among other things, your IP address and other information that may be stored in cookies on the device you use or in the browser you are using. We have no control over Meta's data processing; Facebook is particularly not acting as a processor for us under our responsibility. According to Meta, the data processing by Facebook is governed by Facebook's policies, available at [https://de-de.facebook.com/policy.php](https://de-de.facebook.com/policy.php). We point out that the data collected by Meta about you may be transferred to countries outside the European Union.

From a data protection perspective, joint responsibility between Meta and us is assumed for the operation of the fan page and the evaluation of user data when visiting the fan page. Following the legal requirements, we have entered into an agreement with Meta to delimit the responsibility internally.

Data Protection Officer and Contact

We have appointed an external Data Protection Officer who supports us with data protection issues and whom you can also contact directly. If you have any questions regarding our handling of personal data or require further information on data protection issues, please contact our Data Protection Officer and his team:

Facebook Insights

Meta offers fan page operators the ability to get an overview of fan page usage and its users through the "Page Insights" function. Page Insights primarily provide statistical data, which we use to make the fan page as attractive and efficient as possible. To this end, Meta provides us with data that it generates. Further information on the functionality and responsibility for the Page Insights function is provided by Facebook at [https://www.facebook.com/legal/terms/page_controller_addendum](https://www.facebook.com/legal/terms/page_controller_addendum).

Messenger

Users registered on Facebook also have the option of direct communication via Facebook Messenger. If you contact us via Messenger, the data transmitted will be stored and used by us solely for answering your inquiry. The legal basis for processing your data is your consent under Art. 6 para. 1 lit. a) GDPR and our legitimate interest under Art. 6 para. 1 lit. f) GDPR. Our legitimate interest lies in the recording and processing of customer inquiries, in the evaluation of customer inquiries, and in the prevention of misuse.

The data will be deleted as soon as it is no longer necessary for the purpose of its collection. For your personal data, this is the case when the respective conversation is concluded. The conversation is concluded when it can be inferred from the circumstances that the relevant matter has been fully clarified. You have the option to withdraw your consent to the processing of your personal data at any time; in this case, the data will be deleted by us immedi-ately unless there is a basis for further storage.

Further Information on Facebook

If you have any questions about the use of personal data by us in connection with the use of the fan page on Facebook, you can always contact us and our data protection officer. The contact details and communication channels are explained in our privacy policy. If you have questions about data protection on Facebook, we kindly ask you to contact Meta directly.

Instagram Account

We also have an account on the social network Instagram. Through this Instagram account, we inform about our activities through our posts and offer another channel for communication with us. The social network Instagram is operated by Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland (hereinafter: "Meta").

Please note that you use Instagram and its functions on your own responsibility, especially regarding interactive functions such as commenting, sharing, or rating.

Data Protection Responsibility

Within the possibilities available on Instagram, we try to ensure the protection of your privacy and personal data. As far as your personal data is processed by us in connection with the visit to the Instagram account, the explanations in this privacy policy apply without restriction. Due to the integration of the account into Meta's offerings, it should also be noted that personal data is simultaneously processed by Meta. When accessing our Instagram content, Meta col-lects, among other things, your IP address and other information that may be stored in cookies on the device you use or in the browser you are using. We have no control over Instagram's data processing; Meta is particularly not acting as a processor for us under our responsibility. According to Meta, the data processing by Instagram is governed by Meta's policies, available at [https://www.facebook.com/help/instagram/155833707900388](https://www.facebook.com/help/instagram/155833707900388). We point out that the data collected by Meta about you may be transferred to countries outside the European Union.

From a data protection perspective, two separate responsibilities are assumed between Meta and us for the operation of the account on Instagram and the associated communication and evaluation options. To the extent that your personal data is processed by us in connection with your visit to our Instagram presence and we alone decide on the purposes and means of this data processing, we are responsible for this data processing. This is generally the case when you communicate directly with us via the "Instagram Direct Messaging" function and provide us with your data. To the extent that your personal data is processed by Meta and Meta alone decides on the purposes and means of data processing, Meta is solely responsible for this data processing. This particularly applies to Meta's evaluation of user behavior for its purposes.

Instagram Insights

Meta offers Instagram account operators the ability to get an overview of account usage and its users through the "Instagram Insights" function. Instagram Insights primarily provide statistical data, which we use to make the Instagram account as attractive and efficient as possible. To this end, Meta provides us with data that it generates under its responsibility. The data we receive from Meta is mostly anonymized data and statistics. As far as we receive personal data in this context, we are responsible for our further processing of this data to evaluate the use of our Instagram account.

Further information on Instagram Insights is provided by Meta at [https://help.instagram.com/1533933820244654](https://help.instagram.com/1533933820244654).

Instagram Direct Messaging

On Instagram, you can communicate directly with us through the "Instagram Direct Messaging" function. If you contact us via Instagram Direct Messaging, the data transmitted will be stored and used by us solely for answering your inquiry. The legal basis for processing your data is your consent under Art. 6 para. 1 lit. a) GDPR and our legitimate interest under Art. 6 para. 1 lit. f) GDPR. Our legitimate interest lies in the recording and processing of customer inquiries, in the evaluation of customer inquiries, and in the prevention of misuse.

Further information on Instagram Insights is provided by Meta at [https://help.instagram.com/1533933820244654](https://help.instagram.com/1533933820244654).

The data will be deleted as soon as it is no longer necessary for the purpose of its collection. For your personal data, this is the case when the respective conversation is concluded. The conversation is concluded when it can be inferred from the circumstances that the relevant matter has been fully clarified. You have the option to withdraw your consent to the processing of your personal data at any time; in this case, the data will be deleted by us immediately unless there is a basis for further storage. Certainly! Here's the translation of the provided text into English:

Further Information on Instagram

If you have any questions about the use of personal data by us in connection with the use of our Instagram account, you are welcome to contact us and our data protection officer at any time. The contact details and communication channels are explained in our privacy policy. If you have any questions about data protection on the social network Instagram offered by Meta, we kindly ask you to contact Meta directly.

In our online offering, you will find links to the social network Facebook. You can recognize these links by the respective logos of the providers.

By clicking on the links, the corresponding social media pages will be opened, for which this privacy policy does not apply. For details on the applicable policies there, please refer to Facebook's privacy policy, which can be found at: Facebook: http://www.facebook.com/policy.php

No transmission of personal information to the respective providers takes place before you click on the relevant links. Your access to the linked page is also the basis for the data processing by the respective providers.

YouTube Channel

In addition to our own online offering, we also operate a channel on the video platform YouTube. Through this channel, we inform about our activities and provide a channel for communication. The video platform YouTube is operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter referred to as "Google").

Please note that you use the video platform and its functions at your own responsibility. This applies in particular to the use of interactive functions (e.g., discussion, comments).

Processing of Personal Data

The data collected about you when using the service is processed by Google and may be transferred to countries outside the European Union. The processed data includes, among other things, the data you voluntarily provide, such as name, username, email address, and telephone number, the content you create, upload, or receive, such as photos and videos, documents and spreadsheets, as well as comments, your IP address, information about the device you use, information on the websites and content you visit, your location, and your mo-bile provider. We have no control over the type and extent of the data processed by Google, the manner of processing and use, or the transfer of this data to third parties. Information about the data processed by Google and the purposes for which it is used can be found in Google's privacy policy at https://policies.google.com/?hl=en&gl=en.

We process the data you enter on YouTube, particularly your username and the content published under your account, insofar as we link to or respond to your posts, or create posts that reference your account. The data you freely publish and disseminate on YouTube is thus included by us in our offering and made accessible to our follower.

You have the option to restrict the processing of your data in the general settings of your Google account. Additionally, on mobile devices, you can limit Google's access to contact and calendar data, photos, location data, etc., in the settings. However, this depends on the operating system used. In addition to these tools, Google also offers specific privacy settings for YouTube. You can learn more about this at: https://policies.google.com/privacy?hl=en&gl=en#infochoices.

YouTube Analytics

Google offers YouTube channel operators the ability to obtain an overview of account usage and its users through the "YouTube Analytics" function. YouTube Analytics primarily allows the retrieval and evaluation of statistical data. We use the data from YouTube Analytics to make the YouTube channel as attractive and efficient as possible. For this purpose, Google provides us with data that it has generated under its own responsibility. The data we receive from Google is usually anonymized data and statistics. If we receive personal data in this context, we are responsible for further processing this data to evaluate the use of our YouTube channel. Google provides further information on YouTube Analytics at https://support.google.com/youtube/answer/9002587?hl=en.

Further Information on YouTube

If you have any questions about the use of personal data by us in connection with the use of the YouTube channel, you are welcome to contact us and our data protection officer at any time. The contact details and communication channels are explained in our privacy policy. If you have any questions about data protection at Google, we kindly ask you to contact Google directly.

Your Rights and Contact

We place great emphasis on explaining the processing of your personal data as transparently as possible and informing you of the rights you are entitled to. If you would like more information or wish to exercise your rights, you can contact us at any time, and we will address your concerns.

Rights of Data Subjects

Regarding the processing of your personal data, you have extensive rights. First, you have a comprehensive right to information and can request the correction and/or deletion or blocking of your personal data if necessary. You can also request a restriction of processing and have the right to object. Concerning the personal data you have provided to us, you also have a right to data portability.

If you wish to exercise any of your rights and/or would like more information about them, please contact our customer service. Alternatively, you can also contact our data protection officer.

Revocation of Consent and Objection

Any consent you have given can be freely revoked at any time with effect for the future. The revocation of consent does not affect the lawfulness of the processing carried out based on the consent until the revocation. The contact persons for this are also our customer service and our data protection officer.

If the processing of your personal data is not based on consent but on another legal basis, you can object to this data processing. Your objection will lead to a review and, if necessary, the termination of data processing. You will be informed of the result of the review and, if data processing is to continue, you will receive more detailed information from us about why data processing is permissible.

Data Protection Officer and Contact

We have appointed an external data protection officer who supports us on data protection issues and whom you can also contact directly. For questions regarding our handling of personal data or further information on data protection issues, our data protection officer and his team are available to assist you:

If the processing of your personal data is not based on consent but on another legal basis, you can object to this data processing. Your objection will lead to a review and, if necessary, the termination of data processing. You will be informed of the result of the review and, if data processing is to continue, you will receive more detailed information from us about why data processing is permissible.

RA Dr. Sebastian Meyer, LL.M.
c/o BRANDI Rechtsanwälte
Adenauerplatz 1, 33602 Bielefeld
Telefon: 0521 / 96535-812
E-Mail: [email protected]
If you wish to contact our Data Protection Officer personally by e-mail, you can also reach him at [email protected]

Complaints

If you believe that the processing of your personal data by us does not comply with this privacy policy or the applicable data protection regulations, you can lodge a complaint with our data protection officer. The data protection officer will then review the matter and inform you of the result of the review. In addition, you also have the right to lodge a complaint with a su-pervisory authority.

Further Information and Changes
Links to other Websites

Our online offering may contain links to other websites. These links are usually identified as such. We have no influence on the extent to which the applicable data protection regulations are observed on the linked websites. We, therefore, recommend that you also inform yourself about the respective privacy policies on other websites.

Changes to this Privacy Policy

The date of this privacy policy is indicated at the bottom. We reserve the right to change this privacy policy at any time with effect for the future. Changes are made in particular in the case of technical adjustments to the online offering or changes to legal data protection requirements. The current version of the privacy policy is always directly accessible via the online offering. We recommend that you regularly inform yourself about changes to this privacy policy.
Date of this privacy policy: August 2024