Source: https://about.puma.com/de-de/privacy
Timestamp: 2019-04-18 15:20:35+00:00

Document:
This Data Protection Information provides information on the processing of your personal data whenever you visit websites of PUMA SE (hereinafter “PUMA”, “we” or “us”) under the domain “about.puma.com” in accordance with the EU General Data Protection Regulation (hereinafter “GDPR”).
This Data Protection Information applies to the use of the websites of PUMA SE under the do-main “about.puma.com”. Data processing on websites of other companies within the PUMA Group are not covered by this Data Protection Information.
GDPR means Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation).
PUMA Group means all enterprises that are affiliated with PUMA SE pursuant to Section 15 Aktiengesetz [German Stock Corporation Act].
Personal data means any information relating to an identified or identifiable natural person (“data subject”); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person. Examples of personal data: Name, contact details, IP addresses.
Controller means the natural person or legal person, public authority, agency, or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law. For the data processing activities described in this Data Protection Information, the Controller is PUMA SE (Section 1.2.).
Processing means any operation or set of operations which is on personal data or on sets of personal data, whether or not by automated means such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
This data processing is necessary for the purpose of our legitimate interest to guarantee IT security (Legal basis: Art. 6 (1) sentence 1, lit. f GDPR).
This data processing is necessary for the purpose of our legitimate interest to carry out analyses in order to improve our website and our products (Legal basis: Art. 6 (1) sentence 1, lit. f GDPR).
In this case a persistent opt-out cookie is set, that prevents your data from being recorded in the future when you visit our websites. Please note that if you delete this cookie (e.g. by deleting all cookies on your browser) you will have to reset this opt-out cookie if you still want to prevent Google Analytics on our websites.
The personal data we process for security purposes according to Sec. 2.1.1 will be deleted after 7 business days. (Personal) data collected in connection with Google Analytics according to Sec. 2.1.2 will be deleted after 14 months).
IT Service providers who prepare the platforms, databases and tools for our products and services (e.g. our website, the sale of goods, the dispatch of newsletters and informative emails), issue analyses on user habits on our websites, carry out marketing campaigns, and process your personal data during the purchasing process on our behalf.
In the case of legal disputes, we transfer your data to the competent court and, if you have engaged a lawyer, to the latter, in order to conduct the legal dispute. This transfer of personal data is necessary for compliance with a legal obligation (Legal basis: Art. 6 (1) sentence 1, lit. c GDPR) and/or for the purpose of our legitimate interest in the establishment and exercise of legal claims (Legal basis: Art. 6 (1) sentence 1, lit. f GDPR).
In addition to this, we only transfer your personal data if we are legally obliged to forward such data (e.g. to the police authorities within the scope of criminal investigations or to the data protection supervisory authorities). This transfer of personal data is necessary for compliance with a legal obligation (Legal basis: Art. 6 (1) sentence 1, lit. c GDPR).
If we process your personal data according to Section 2 of this Data Protection Information on the basis of our legitimate interests (Legal basis: Art. 6 (1) sentence 1, lit. f GDPR), you can – without prejudice to, if applicable, specific unsubscribe / opt-out possibilities provided in Section 2 – object to the respective data processings at any time on grounds relating to your particular situation by sending your request to privacy@puma.com. We will then no longer process your data for this / these purpose(s) unless our legitimate interests in processing overweights or the processing serves to establish, exercise or defend legal claims.
If you object to the processing of your data, we will process any collected personal data in this context in order to respond to your request. This data processing is necessary for compliance with a legal obligation (Legal basis: Art. 6 (1) sentence 1, lit. c GDPR).
Please send your request by email to privacy@puma.com.
If you exercise these rights against us, we will process your personal data in order to respond to your request. This data processing is necessary for compliance with a legal obligation (Legal basis: Art. 6 (1) sentence 1, lit. c GDPR).
Irrespective of your above mentioned rights, you can lodge a complaint with a data protection supervisory authority, if you are of the opinion that the processing of your personal data by PUMA violates the GDPR (Art. 77 GDPR).

References: Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6