Source: https://www.sneak-a-venue.com/legal/data-privacy
Timestamp: 2019-04-26 06:05:12+00:00

Document:
a) Personal data Personal data is all information relating to an identified or identifiable natural person (hereinafter called "data subject"). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
b) Data subject A data subject is any identified or identifiable natural person, whose personal data is processed by a data controller responsible for the processing.
c) Processing Processing is any operation or set of operations that is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, blocking, erasure or destruction.
d) Restriction of processing Restriction of processing is marking stored personal data with the aim with the aim of limiting its processing in future.
f) Pseudonymisation Pseudonymisation is the processing of personal data in such a manner that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organizational measures to ensure that the personal data is not attributed to an identified or identifiable natural person.
g) Controller or controller responsible for the processing Controller means the natural or legal person, public authority, agency or any other body which alone or jointly with others determines the purposes and means of the processing of personal data. Where the purposes and means of processing are determined by European Union law or the law of the Member States, the controller or the specific criteria for its nomination may be designated by European Union law or the law of the Member State.
i) Recipient Recipient is a natural or legal person, public authority, agency or any other body to whom personal data is disclosed, irrespective of whether it is a third party or not. However, public authorities which may receive personal data in the framework of a particular inquiry in accordance with European Union or Member State law shall not be regarded as recipients.
j) Third party Third party is a natural or legal person, public authority, agency or body other than the data subject, controller, processor and persons who, under the direct authority of the controller or processor, are authorized to process personal data.
k) Consent The data subject's consent is any freely given, specific, informed and unambiguous indication of the data subject's wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her.
-	Browser and operating system of the visitor's device, as well as the name of the access provider used by the visitor.
-	Facilitating and improving the administration of the website.
Visitors can submit messages to the company via an online contact form on the website. In order to be able to receive an answer, at least a valid email address is required. All other information can be voluntarily provided to the person making the request. By sending the message via the contact form, the visitor agrees to the processing of the transmitted personal data. The data is processed exclusively for the purpose of processing and responding to requests via the contact form. This will be done on the basis of the voluntarily granted consent pursuant to Art. 6(1), sentence 1, lit a) GDPR. The personal data collected for the use of the contact form is automatically deleted once the request has been completed and there are no grounds for further storage.
By registering for subscription to a newsletter, visitors expressly consent to the processing of the personal data transmitted. If you have agreed to receive our newsletter customised to your individual interests, we will process your email address and your name in particular for the purpose of dispatching the newsletter. With your consent, we will record your user behaviour on our website. This evaluation of user behaviour includes in particular, which areas of the applicable website you visit, and what links you activate there. This creates personalised user profiles assigned to your person and/or email address, to better align any potential advertising campaigns, particularly in the form of newsletters and on-site advertisements, with your personal interests, and to improve the web content.
You have the opportunity to participate in a prize draw for our products via our website. Separate consent will be obtained from you for every prize draw. In order to clearly identify and inform the winners, we collect data such as first name and family name, address and email address. The provision of any further personal information in connection with participation is voluntary. If you are selected as a winner, we will contact you by means of the information provided and may ask for further personal information, such as age. Your data will not be passed on to third parties without your consent and only then if it is necessary for processing the prize. We delete all data after successful transfer or processing of the prize, or within 4 weeks at the latest.
The legal basis for the processing of the personal data of the visitor for participation in the prize draw is your consent pursuant to Art. 6 paragraph 1 sentence 1a GDPR. You can revoke your consent at any time.
In the case of an application, we process only the data belonging to you that we require in the context of the application. This is, for example, contact data as well as all data in connection with your application, such as your C.V., references and qualifications.
The legal basis for saving the data is derived from Section 26 of the Federal Data Protection act (BDSG). The data will be deleted immediately, as soon as retaining it is no longer required. If the applicant is not appointed, the data will generally be deleted six months after conclusion of the application process at the latest.
-	pursuant to Art. 6(1), sentence 1, lit b) GDPR, this is required for the fulfilment of a contractual relationship with the data subject.
We use payment service providers as third parties in order to execute purchase contracts.
The personal data that is transferred during a payment generally includes first and family names, your address, telephone number, IP address, email address and other information that is required for the processing of your order, including the quantity of the ordered article, the article number, the invoice amount and invoice details.
Storing this data is required for the execution of the purchase contract in accordance with Art. 6 paragraph 1b GDPR.
If you want to purchase on account, your purchase will be processed by our partner Billpay GmbH. You will be asked in the ordering process to consent to the transfer to Billpay of the data necessary for the processing of the payment and for an identity and credit rating check. If you provide your consent, your data (first and family names, address, date of birth, telephone number and, for purchase by direct debit, the account details provided) as well as the data associated with your order will be transferred to Billpay.
The transfer of data to Billpay GmbH for the purposes of conducting an identity and credit standing check is based on your consent pursuant to Art. 6 paragraph 1a GDPR.
where applicable, your email address (if the shipping service provider should inform you in advance of the expected delivery date).
So-called cookies are used on the website. These are data packets exchanged between the Sneakers & Co. s.r.o. server and the visitor's browser. These are stored when you visit the website by the devices used (PC, notebook, tablet, smartphone, etc.). Cookies cannot damage the devices used. In particular, they contain no viruses or other malicious software. Cookies store information which is related to the specific terminal used. Sneakers & Co. s.r.o. cannot use them to obtain direct knowledge of the identity of the visitor to the web site.
-	Where applicable, in case of the transmission to recipients in third countries, provided that there is no decision of the EU Commission regarding the adequacy of the level of protection according to Art. 45(3) of the GDPR, information about which appropriate guarantees pursuant to Art. 46(2) GDPR have been provided for the protection of personal data.
If you determine that we may hold inaccurate personal data about you, you can request immediate correction of this incorrect data. In the case of incomplete personal data, you may request completion.
-	The personal data is no longer necessary for the purposes for which it was processed.
-	The basis of the justification for the processing was exclusively your consent, which you have withdrawn.
-	You have objected to the processing of your personal data, which we have made publicly available.
-	You have objected to the processing of personal data not made publicly available by us and there are no overriding legitimate grounds for the processing. -	Your personal data has been processed unlawfully.
-	The erasure of the personal data is required to comply with a legal obligation, to which we are subject.
No claim for erasure exists if, in the event of legitimate non-automated data processing, due to the specific nature of the storage, it is not possible or only with disproportionately high expense and your interest in the erasure is minimal. In this case, limitation of processing shall replace erasure.
-	You dispute the accuracy of the personal data. In this case, the limitation may be required for the time needed for us to check the accuracy of the data.
-	The processing is unlawful and, instead of deletion, you demand limitation of the use of your personal data.
-	Your personal data is no longer needed by us for the purposes of processing, but is still required by you for the assertion, exercise or defence of legal claims.
-	You have presented an objection according to Art. 21(1) of the GDPR.
The limitation of processing may be extended for as long as it remains to be decided whether our legitimate reasons outweigh your reasons. Limitation of processing means the personal data may be processed only with your consent or for the purpose of asserting, exercising or defending legal claims or protecting the rights of another natural or legal person or on the grounds of an important public interest. We have a duty to inform you before we remove the limitation.
You have a right to data portability provided that the processing is based on your consent (Art. 6(1), sentence 1, lit a) or Art. 9(2) lit a) GDPR) or is based on an agreement of which you are a contracting party and the processing is performed using automated procedures. The right to data portability in this case includes the following rights, provided this does not affect the rights and freedoms of others: You can ask us to keep the personal data you have provided to us, in a structured, consistent and machine-readable format. You have the right to transfer this data to another controller without hindrance on our part. As far as is technically feasible, you can demand from us that we transfer your personal data directly to another controller.
If the processing is pursuant to Art. 6(1), sentence 1 lit e) of the GDPR (performance of a task carried out in the public interest) or Art. 6(1), sentence 1 lit f) of the GDPR (legitimate interests pursued by the controller or by a third party), you have the right for reasons related to your specific situation to object at any time to the processing of personal data concerning you. This also applies to profiling pursuant to Art. 6(1), sentence 1 lit e) or lit f) of the GDPR. After you exercise the right of objection, we will stop processing your personal data, unless we can prove there are compelling legitimate reasons for the processing, which outweigh your interests, rights and freedoms, or that the processing serves the purpose of asserting, exercising or defending legal claims.
You can object at any time to the processing of your personal data for direct marketing purposes. This also applies to profiling in connection with such direct marketing. Once this right is exercised, we will no longer use the relevant personal data for direct marketing purposes.
You have the right to withdraw, with future effect, your consent at any time. The withdrawal of consent can be communicated informally by phone, email or to our postal address. The legality of the data processing performed on the basis of consent up to the receipt of the revocation shall not be affected by the withdrawal. Upon receipt of the withdrawal, the data processing, which is based exclusively on your consent, is discontinued.
If you believe the processing of personal data concerning you is illegal, you can file a complaint with a supervisory authority for data protection responsible for your place of residence or workplace or the location of the alleged infringement.

References: Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 45
 Art. 46
 Art. 21
 Art. 9
 Art. 6
 Art. 6
 Art. 6