Source: https://www.fernandoberlinboots.com/us/privacy-policy
Timestamp: 2019-04-22 13:07:55+00:00

Document:
1.1. Data protection is of particular importance to Fernando Berlin GmbH.
3.2. To ensure this, we would like to explain in advance the terminology used. The terms used, such as "Personal data" or their "processing" are defined in Article 4 of the General Data Protection Regulation (GDPR).
Personal data is any information relating to an identified or identifiable natural person (hereinafter the "data subject"). A natural person is considered to be identifiable who, directly or indirectly, in particular by association with an identifier such as a name, an identification number, location data, an online identifier or one or more special features, expresses the physical, physiological, genetic, mental, economic, cultural or social identity of this natural person can be identified. , genetic, mental, economic, cultural or social identity of this natural person can be identified.
4.2.1. Insofar as we obtain the consent of the data subject for processing of personal data, Art. 6 para. 1 lit. a EU General Data Protection Regulation (GDPR) as legal basis.
4.2.2. In the processing of personal data necessary for the performance of a contract to which the data subject is a party, Art. 6 para. 1 lit. b GDPR as legal basis. This also applies to processing operations required to carry out pre-contractual actions.
4.2.3. Insofar as processing of personal data is required to fulfill a legal obligation that is subject to our company, Art. 6 para. 1 lit. c EU GDPR as legal basis.
4.2.4. In the event that vital interests of the data subject or another natural person require the processing of personal data, Art. 6 para. 1 lit. d EU GDPR as legal basis.
4.2.5. If processing is necessary to safeguard the legitimate interests of our company or a third party, and if the interests, fundamental rights and freedoms of the data subject do not prevail over the first interest, Art. 6 para. 1 lit. EU GDPR as legal basis for processing.
4.3.1. The personal data of the data subject will be deleted or blocked as soon as the purpose of the storage is deleted. In addition, such storage may be provided for by the European or national legislator in EU regulations, laws or other regulations to which the controller is subject.
4.3.2. Blocking or deletion of the data also takes place when a storage period prescribed by the standards mentioned expires, unless there is a need for further storage of the data for conclusion of a contract or fulfillment of the contract.
5.1.1. Each time our website is accessed, our system automatically collects data and information from the computer system of the calling computer.
7.1. The temporary storage of the IP address by the system is necessary to allow delivery of the website to the computer of the user. To do this, the user's IP address must be kept for the duration of the session.
7.3. For these purposes, our legitimate interest in the processing of data according to Art. 6 para. 1 lit. f EU GDPR.
8.1. The data will be deleted as soon as it is no longer necessary for the purpose of its collection. In the case of collecting the data for providing the website, this is the case when the respective session is completed.
8.2. In the case of storing the data in log files, this is the case after no more than seven days. An additional storage is possible. In this case, the IP addresses of the users are deleted or alienated, so that an assignment of the calling client is no longer possible.
10.3.6. For these purposes, our legitimate interest in the processing of personal data pursuant to Art. 6 para. 1 lit. f EU GDPR.
11.1.1. On the basis of our legitimate interests in this website, we offer our users the opportunity to subscribe to a free newsletter.
11.1.3. Insofar as the contents of a newsletter are concretely described, they are authoritative for the consent of the users. Incidentally, our newsletters contain information about our products, offers, promotions and our company.
11.1.7. The registration for our newsletter takes place in a so-called double opt-in procedure. That After registration, you will receive an e-mail asking you to confirm your registration. This confirmation is necessary so that nobody can register with external e-mail addresses. The registration for the newsletter will be logged in order to prove the registration process according to the legal requirements. This includes the storage of the login and the confirmation time, as well as the IP address. Likewise, changes to your data stored with the shipping service provider will be logged.
11.1.9. In connection with the processing of data for the sending of newsletters, there is no disclosure of the data to third parties. The data will be used exclusively for sending the newsletter.
11.3.1. To subscribe to the newsletter, it is sufficient to enter your e-mail address. The collection of the user's e-mail address serves to deliver the newsletter. Optionally, we ask you to give a name in the newsletter for personal address.
11.4.1. The data will be deleted as soon as it is no longer necessary for the purpose of its collection. The e-mail address of the user is therefore stored as long as the subscription to the newsletter is active.
11.5.1. Subscription to the newsletter may be terminated at any time by the user concerned. For this purpose, there is a corresponding link in each newsletter.
11.5.4. If the users have only subscribed to the newsletter and terminated this registration, their personal data will be deleted.
12.1.1. On the basis of our legitimate interests in this website, we offer users the opportunity to register by providing personal information. The data is entered into an input mask and transmitted to us and stored. A transfer of data to third parties does not take place.
12.1.4. As part of the registration process, the consent of the user to process this data is obtained.
12.2.1. Legal basis for the processing of the data is in the presence of the consent of the user Art. 6 para. 1 lit. a EU GDPR.
12.4.1. The data will be deleted as soon as it is no longer necessary for the purpose of its collection.
12.4.3. This is the case during the registration process for the performance of a contract or for the performance of pre-contractual measures if the data are no longer necessary for the performance of the contract.
12.5.1. As a user, you have the option of canceling the registration at any time. You can change the data stored about you at any time.
13.1.1. We use on the basis of our legitimate interests on this website a contact form, which can be used for electronic contact. If a user realizes this option, the data entered in the input mask will be transmitted to us and saved.
13.1.4. For the processing of the data in the context of the sending process your consent is obtained and referred to this privacy statement.
13.1.5. Alternatively, contact via the provided e-mail address is possible. In this case, the user's personal data transmitted by e-mail will be stored.
13.1.6. In this context, there is no disclosure of the data to third parties. The data is used exclusively for processing the conversation.
13.2.1. Legal basis for the processing of the data is in the presence of the consent of the user Art. 6 para. 1 lit. a EU GDPR.
13.2.2. The legal basis for the processing of the data transmitted in the course of sending an e-mail is Article 6 (1) lit. f EU GDPR. If the e-mail contact aims to conclude a contract, then additional legal basis for the processing is Art. 6 para. 1 lit. b EU GDPR.
13.3.1. The processing of the personal data from the input mask serves us only to process the contact. In the case of contact via e-mail, this also includes the required legitimate interest in the processing of the data.
13.3.2 The other personal data processed during the sending process serve to prevent misuse of the contact form and to ensure the security of our information technology systems.
13.4.1. The data will be deleted as soon as it is no longer necessary for the purpose of its collection. For the personal data from the input form of the contact form and those sent by e-mail, this is the case when the respective conversation with the user has ended. The conversation is ended when it can be inferred from the circumstances that the relevant facts have been finally clarified.
13.4.2. The additional personal data collected during the sending process will be deleted at the latest after a period of seven days.
13.5.1. The user has the possibility at any time to revoke his consent to the processing of the personal data. If the user contacts us by e-mail, he may object to the storage of his personal data at any time. In such a case, the conversation can not continue.
13.5.3. All personal data stored in the course of contacting will be deleted in this case.
14.1.1. We use Google Anayltics, the web analytics service of Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA, ("Google"), based on our legitimate interests. The use is made to analyze the surfing behavior of our users.
14.1.3. By using this cookie Google is enabled to analyze the usage of our website. Each time one of the pages of this website is accessed by the controller and a Google Analytics component has been integrated, the Internet browser on the information technology system of the person concerned is automatically initiated by the respective Google Analytics component To submit data to Google for online analysis purposes. As part of this technical process, Google will be aware of personal data, such as the IP address of the person concerned, which serve, among other things, Google to track the origin of the visitors and clicks, and subsequently make commission settlements possible.
14.1.4. The cookie stores personally identifiable information, such as access time, the location from which access was made, and the frequency of site visits by the data subject. Each time you visit our website, your personal information, including the IP address of the Internet connection used by the data subject, is transferred to Google in the United States of America. This personal information is stored by Google in the United States of America. Google may transfer such personal data collected through the technical process to third parties.
14.1.6. Google is certified under the Privacy Shield TRANSLATION, which provides a guarantee to comply with European privacy legislation (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active).
14.1.7. Google will use this information in our order to evaluate the use of our online offering by users, to compile reports on the activities within this online offering and to provide us with other related services related to the use of this online offer and the Internet. In this case, pseudonymous usage profiles of the users can be created from the processed data.
14.1.8. The IP address submitted by the user's browser will not be merged with other data provided by Google.
14.2. Legal basis for the processing of personal data The legal basis for processing users' personal data is Article 6 (1) lit. f EU GDPR.
14.3.1. The processing of users' personal data enables us to analyze the surfing behavior of our users. By analyzing the obtained data, we are able to compile information about the use of the individual components of our website. This helps us to constantly improve our website and its user-friendliness. For these purposes, our legitimate interest lies in the processing of the data according to Art. 6 para. 1 lit. f EU GDPR.
14.4.1. The data will be deleted as soon as they are no longer needed for our recording purposes. In our case, this is the case after 24 months.
14.5.2. Users can prevent the storage of cookies by setting their browser software accordingly; Users may also prevent the collection by Google of the data generated by the cookie and related to its use of the online offer and the processing of such data by Google by downloading and installing the browser plug-in available at the following link: http: // tools .google.com / dlpage / gaoptout? hl = en.
14.5.3. For more information about Google's data usage, hiring and opt-out options, please visit Google's websites: https://www.google.com/intl/en/policies/privacy/partners ("Google's use of your data when you use websites or apps our partners "), http://www.google.com/policies/technologies/ads (" Use of data for promotional purposes "), http://www.google.com/settings/ads (" Managing information that Google uses, to show you advertising ").
15.1.1. We use Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA, ("Google") marketing and remarketing services ("Google Marketing Services" for short), based on our legitimate interests.
15.1.2. Google is certified under the Privacy Shield Agreement, which provides a guarantee to comply with European privacy legislation (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active).
15.1.3. Google Marketing Services allows us to better target advertisements for and on our website so that we only present ads to users that potentially match their interests. If a user e.g. Showing ads for products he's been interested in on other websites is called remarketing. For these purposes, when Google and our other websites accessing Google Marketing Services are directly accessed by Google, a code will be executed by Google and so-called (re) marketing tags (invisible graphics or code, also called "Web Beacons ") incorporated into the website. With their help, the user is provided with an individual cookie, i. a small file is saved (instead of cookies, comparable technologies can also be used). The cookies can be set by different domains, including google.com, doubleclick.net, invitemedia.com, admeld.com, googlesyndication.com or googleadservices.com. In this file is noted which web pages the user visited, for what content he is interested and what offers he has clicked, as well as technical information about the browser and operating system, referring web pages, visit time and other information on the use of the online offer. The IP address of the users is also recorded, whereby in the context of Google Analytics we announce that the IP address is shortened within member states of the European Union or other parties to the Agreement on the European Economic Area and only in exceptional cases to one Google server in the US is transmitted and shortened there. The IP address will not be merged with data of the user within other offers from Google. The above information may also be linked by Google with such information from other sources. If the user then visits other websites, they can be displayed according to his interests, the ads tailored to him.
15.1.4. The data of the users are pseudonym processed in the context of the Google marketing services. That Google stores and processes e.g. not the name or e-mail address of the users, but processes the relevant data cookie-related within pseudonymous user profiles. That from the perspective of Google, the ads are not managed and displayed to a specifically identified person, but to the cookie owner, regardless of who that cookie owner is. This does not apply if a user has explicitly allowed Google to process the data without this pseudonymization. The information collected about users through Google Marketing Services is transmitted to Google and stored on Google's servers in the United States.
15.1.5. Among the Google marketing services we use is u.a. the online advertising program "Google AdWords". In the case of Google AdWords, each advertiser receives a different "conversion cookie". Cookies can not be tracked through AdWords advertisers' websites. The information collected through the cookie is used to generate conversion statistics for AdWords advertisers who have opted for conversion tracking. Advertisers will see the total number of users who clicked on their ad and were redirected to a conversion tracking tag page. However, they do not receive information that personally identifies users.
15.1.6. Also we can use the service "Google Optimizer". Google Optimizer allows us to understand how various changes to a website (such as changes to the input fields, the design, etc.) can take place in so-called "A / B testings". Cookies are stored on users' devices for these purposes. Only pseudonymous data of the users are processed.
15.1.7. In addition, we may use the "Google Tag Manager" to integrate and manage the Google Analytics and Marketing Services on our website.
The legal basis for processing users' personal data is Article 6 (1) lit. f EU GDPR.
The data processing takes place in the interest of the analysis, optimization and the economical operation of the on-line offer.
15.4.1. The data will be deleted as soon as it is no longer necessary for the purpose of its collection.
15.5.1. If you wish to opt-out of interest-based advertising through Google Marketing Services, you can take advantage of Google's recruitment and opt-out options: http://www.google.com/ads/preferences.
16.1.1. We use components of the PayPal service provided by PayPal (Europe) S.à.r.l. based on our legitimate interests. & Cie. S.C.A., 22-24 Boulevard Royal, 2449 Luxembourg, Luxembourg ("PayPal").
16.1.2. PayPal is an online payment service provider. Payments are made through so-called PayPal accounts, which are virtual private or business accounts. In addition, PayPal has the ability to process virtual payments through credit cards if a user does not have a PayPal account. A PayPal account is managed via an email address, which is why there is no classic account number. PayPal makes it possible to initiate online payments to third parties or to receive payments. PayPal also takes on trustee functions and offers buyer protection services.
16.1.3. If the data subject selects "PayPal" as a payment option during the order process in our online shop, data of the data subject will be automatically transmitted to PayPal. By selecting this payment option, the data subject consents to the transfer of personal data required for payment processing.
16.1.4. The personal information provided to PayPal is usually about the first and last name the E-Mail adress the IP addressthe telephone number and / or mobile number or other data necessary for payment processing. For the execution of the purchase contract, also such personal data are necessary, which are in connection with the respective order.
16.1.5. The personal data exchanged between PayPal and the controller may be transferred by PayPal to credit reporting agencies. A list of third parties to whom personal information could be shared through PayPal can be viewed at https://www.paypal.com/webapps/mpp/ua/third-parties-list?locale.x=en_US.
16.1.6. PayPal may disclose personal information to affiliates and service providers or subcontractors, to the extent necessary to fulfill its contractual obligations or to process the data on behalf of.
16.3.1 The data processing takes place in the interest of the analysis, optimization and economic operation of the online offer.
16.3.2 The purpose of the transfer of the data to PayPal is payment processing and fraud prevention. The controller will provide PayPal with personally identifiable information, in particular if there is a legitimate interest in the transfer.
16.3.3. The purpose of transmitting data to credit reporting agencies is to verify identity and credit checks.
16.4. Duration of storage The data will be deleted as soon as it is no longer necessary for the purpose of its collection.
16.5.1. The data subject has the option to revoke the consent to the handling of personal data against PayPal at any time.
17.1.1. You may ask the person in charge to confirm if personal data concerning you is processed by us.
(8) the existence of automated decision-making including profiling under Article 22 (1) and (4) EU GDPR and, at least in these cases, meaningful information about the logic involved, and the scope and intended impact of such processing on the data subject.
17.1.3. You have the right to request information about whether your personal information relates to a third country or an international organization. In this connection, you can request the appropriate guarantees in accordance with. Art. 46 EU GDPR in connection with the transfer.
17.2.1. You have a right to rectification and / or completion to the controller, if the personal data you process is incorrect or incomplete. The responsible person must make the correction without delay.
(4) if you have objected to the processing pursuant to Art. 21 (1) EU GDPR and it is not yet certain whether the legitimate reasons of the person responsible outweigh your reasons.
17.3.2. If the processing of personal data concerning you has been restricted, this data may only be used with your consent or for the purpose of asserting, exercising or defending legal claims or protecting the rights of another natural or legal person or for reasons of important public interest Union or a Member State.
17.3.3. If the limitation of the processing after the o.g. If conditions are restricted, you will be informed by the person in charge before the restriction is lifted.
(2) You revoke your consent, to which the processing acc. Art. 6 para. 1 lit. a or Art. 9 para. 2 lit. EU GDPR and there is no other legal basis for processing.
(3) According to. Art. 21 para. 1 EU GDPR objection to the processing and there are no prior justifiable reasons for the processing, or you lay gem. Art. 21 para. 2 EU GDPR Opposition to processing.
(6) The personal data concerning you were collected in relation to information society services offered pursuant to Art. 8 (1) EU GDPR. 17.5. 17.5. Information to third parties If the person in charge has made the personal data concerning you public and is acc. Article 17 (1) of the EU GDPR, it shall take appropriate measures, including technical means, to inform data controllers who process the personal data that you have been identified as being affected, taking into account available technology and implementation costs Persons requesting deletion of all links to such personal data or of copies or replications of such personal data.
17.7.1. If you have the right of rectification, erasure or restriction of processing to the controller, he / she is obliged to notify all recipients to whom your personal data have been disclosed of this correction or deletion of the data or restriction of processing, unless: this proves to be impossible or involves a disproportionate effort.
17.7.2. You have a right to the person responsible to be informed about these recipients.
17.8.2. In exercising this right, you also have the right to obtain that your personal data relating to you are transmitted directly from one person to another, insofar as this is technically feasible. Freedoms and rights of other persons may not be affected.
17.8.3. The right to data portability does not apply to the processing of personal data necessary for the performance of a task in the public interest or in the exercise of official authority delegated to the controller.
18.1. You have the right at any time, for reasons that arise from your particular situation, against the processing of your personal data, which pursuant to Art. 6 para. 1 lit. e or f EU GDPR takes an objection; this also applies to profiling based on these provisions.
18.2. The controller will no longer process the personal data concerning you unless he can demonstrate compelling legitimate grounds for processing that outweigh your interests, rights and freedoms, or the processing is for the purpose of enforcing, exercising or defending legal claims.
18.3. If the personal data relating to you are processed for direct marketing purposes, you have the right to object at any time to the processing of your personal data for the purpose of such advertising; this also applies to profiling insofar as it is associated with such direct mail.
18.4. If you object to processing for direct marketing purposes, your personal data will no longer be processed for these purposes.
18.5. Regardless of Directive 2002/58 / EC, you have the option, in the context of the use of information society services, of exercising your right to object through automated procedures that use technical specifications.
20.1. However, these decisions must not be based on special categories of personal data under Art. 9 (1) EU GDPR, unless Art. 9 (2) lit. a or g EU GDPR applies and reasonable measures have been taken to protect the rights and freedoms as well as your legitimate interests.
20.2. With regard to the cases referred to in (1) and (3), the person responsible shall take appropriate measures to uphold the rights and freedoms and their legitimate interests, including at least the right to obtain the intervention of a person by the controller, to express his / her own position and heard on challenge of the decision.
21.2 A legal remedy gives you the right to complain to a supervisory authority, in particular in the Member State of your residence, place of work or place of alleged infringement, if you believe that the processing of personal data concerning you is contrary to the EU GDPR.
21.3. The supervisory authority to which the complaint has been submitted shall inform the complainant of the status and results of the complaint, including the possibility of a judicial remedy pursuant to Article 78 of the EU GDPR.
 The logfiles contain no IP addresses or other data that allow an assignment to a user.

References: Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 46
 Art. 21
 Art. 6
 Art. 9
 Art. 21
 Art. 21
 Art. 8
 Art. 6
 Art. 9
 Art. 9