Privacy Policy

Unless otherwise stated below, the provision of your personal data is neither legally nor contractually required, nor necessary for the conclusion of a contract. You are not obligated to provide the data. Failure to provide it will have no consequences. This applies only insofar as no other information is provided in the following processing operations. "Personal data" refers to all information relating to an identified or identifiable natural person.

Server Log Files

You can visit our website without providing any personal information. Each time you access our website, usage data is transmitted to us or our web hosting/IT service provider by your internet browser and stored in log files (so-called server log files). This stored data includes, for example, the name of the accessed page, the date and time of access, the IP address, the amount of data transferred, and the requesting provider. The processing is based on Art. 6(1)(f) GDPR, arising from our overriding legitimate interest in ensuring the smooth operation of our website and improving our services.

Contact

The controller for data processing is: Gunar Fenner, Savignyplatz 6, 10623 Berlin, Germany, 030-31808151, info@espadrilles.de

Customer-Initiated Contact via Email

If you initiate business contact with us via email, we collect your personal data (name, email address, message content) only to the extent provided by you. The data processing serves to handle and respond to your contact request.

If the contact is for pre-contractual measures (e.g., consultation regarding purchase interest, preparation of an offer) or concerns a contract already concluded between you and us, this data processing is based on Art. 6(1)(b) GDPR.

If the contact is for other reasons, the data processing is based on Art. 6(1)(f) GDPR, arising from our overriding legitimate interest in processing and responding to your request. In this case, you have the right to object at any time, for reasons arising from your particular situation, to this processing of your personal data based on Art. 6(1)(f) GDPR.

We use your email address only to process your request. Your data will subsequently be deleted in compliance with statutory retention periods unless you have consented to further processing and use.

Advertising

Use of Email Address for Sending Newsletters

We use your email address, independently of contract processing, exclusively for our own advertising purposes to send newsletters, provided you have explicitly consented. The processing is based on Art. 6(1)(a) GDPR with your consent. You can withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal. You can unsubscribe from the newsletter at any time by using the relevant link in the newsletter or by notifying us. Your email address will then be removed from the distribution list.

Shipping Service Providers

Inventory Management

Disclosure of Email Address to Shipping Companies for Shipping Status Updates

We disclose your email address during contract processing to the shipping company, provided you have explicitly consented during the ordering process. The disclosure serves the purpose of informing you via email about the shipping status. The processing is based on Art. 6(1)(a) GDPR with your consent. You can withdraw your consent at any time by notifying us or the shipping company, without affecting the lawfulness of processing based on consent before its withdrawal.

Use of an External Inventory Management System

We use an inventory management system for contract processing as part of order processing. For this purpose, the personal data collected during your order will be transmitted to:

Pickware GmbH, Goebelstr. 21, 64293 Darmstadt

JTL-Software-GmbH, Rheinstr. 7, 41836 Hückelhoven

The processing of your personal data serves the purpose of fulfilling the contract concluded with you and is based on Art. 6(1)(b) GDPR.

Payment Service Providers

Credit Assessment

Use of PayPal

We use the payment service PayPal from PayPal (Europe) S.à.r.l. et Cie, S.C.A. (22-24 Boulevard Royal, L-2449 Luxembourg; "PayPal") on our website. The data processing serves the purpose of offering you payment via the payment service. When selecting and using PayPal, the data required for payment processing will be transmitted to PayPal to fulfill the contract with you using the selected payment method. This processing is based on Art. 6(1)(b) GDPR.

All PayPal transactions are subject to the PayPal Privacy Policy, available at: https://www.paypal.com/de/webapps/mpp/ua/privacy-full

Use of PayPal Check-Out

We use the payment service PayPal Check-Out from PayPal (Europe) S.à.r.l. et Cie, S.C.A. (22-24 Boulevard Royal, L-2449 Luxembourg; "PayPal") on our website. The data processing serves the purpose of offering you payment via the payment service. When selecting and using PayPal, credit card via PayPal, direct debit via PayPal, or "Pay Later" via PayPal, the data required for payment processing will be transmitted to PayPal to fulfill the contract with you using the selected payment method. This processing is based on Art. 6(1)(b) GDPR.

Cookies may be stored to enable browser recognition. The resulting data processing is based on Art. 6(1)(f) GDPR, arising from our overriding legitimate interest in a customer-oriented offering of various payment methods. You have the right to object at any time to this processing of your personal data for reasons arising from your particular situation.

Credit Card via PayPal, Direct Debit via PayPal, "Pay Later" via PayPal

For certain payment methods such as credit card via PayPal, direct debit via PayPal, or "Pay Later" via PayPal, PayPal reserves the right to obtain a credit assessment based on mathematical-statistical methods using credit agencies. For this purpose, PayPal transmits the personal data required for the credit assessment to a credit agency and uses the received information about the statistical probability of a payment default to make a balanced decision about the establishment, execution, or termination of the contractual relationship. The credit assessment may include probability values (score values) calculated based on scientifically recognized mathematical-statistical methods, which may incorporate address data, among other factors. Your legitimate interests will be considered in accordance with legal requirements. The data processing serves the purpose of credit assessment for contract initiation. The processing is based on Art. 6(1)(f) GDPR, arising from our overriding legitimate interest in protecting against payment defaults when PayPal advances payment.

You have the right to object at any time to this processing of your personal data based on Art. 6(1)(f) GDPR for reasons arising from your particular situation by notifying PayPal. Providing the data is necessary for concluding the contract with your desired payment method. Failure to provide it will result in the contract not being concluded with your chosen payment method.

Third-Party Providers

When paying via a third-party payment method, the data required for payment processing will be transmitted to PayPal. This processing is based on Art. 6(1)(b) GDPR. To execute this payment method, PayPal may then forward the data to the respective provider. This processing is based on Art. 6(1)(b) GDPR. Local third-party providers may include:

Apple Pay

(Apple Pay Distribution International Ltd., Hollyhill Industrial Estate, Hollyhill, Cork, Ireland)

Google Pay

(Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland)

Invoice Payment via PayPal

When paying via the invoice payment method, the data required for payment processing will first be transmitted to PayPal. To execute this payment method, PayPal will then forward the data to Ratepay GmbH (Franklinstraße 28-29, 10587 Berlin; "Ratepay") to fulfill the contract with you using the selected payment method. This processing is based on Art. 6(1)(b) GDPR. Ratepay may conduct a credit assessment based on mathematical-statistical methods (probability or score values) using credit agencies, as described above. The data processing serves the purpose of credit assessment for contract initiation. The processing is based on Art. 6(1)(f) GDPR, arising from our overriding legitimate interest in protecting against payment defaults when Ratepay advances payment. Further information on data protection and which credit agencies Ratepay uses can be found at: https://www.ratepay.com/legal-payment-dataprivacy/ and https://www.ratepay.com/legal-payment-creditagencies/.

For more information on data processing when using PayPal, please refer to the associated privacy policy at: https://www.paypal.com/de/webapps/mpp/ua/privacy-full.

Data Subject Rights and Storage Duration

Storage Duration

After complete contract processing, the data will initially be stored for the duration of the warranty period, then in consideration of statutory retention periods, particularly under tax and commercial law, and deleted after the expiry of these periods, unless you have consented to further processing and use.

Rights of the Data Subject

If the legal requirements are met, you have the following rights under Art. 15 to 20 GDPR: right of access, rectification, erasure, restriction of processing, and data portability. Additionally, under Art. 21(1) GDPR, you have the right to object to processing based on Art. 6(1)(f) GDPR, as well as to processing for direct marketing purposes.

Right to Lodge a Complaint with a Supervisory Authority

Under Art. 77 GDPR, you have the right to lodge a complaint with a supervisory authority if you believe that the processing of your personal data is unlawful. You can file a complaint with the supervisory authority responsible for us, which can be reached at the following contact details:

Berlin Commissioner for Data Protection and Freedom of Information
Friedrichstr. 219
Visitor entrance: Puttkamerstr. 16 - 18 (5th floor)
10969 Berlin
Tel.: +49 30 138890
Fax: +49 30 2155050
Email: mailbox@datenschutz-berlin.de

Right to Object

If the personal data processing listed here is based on our legitimate interest under Art. 6(1)(f) GDPR, you have the right to object at any time to such processing with future effect for reasons arising from your particular situation. After an objection, the processing of the affected data will be terminated unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or if the processing serves the establishment, exercise, or defense of legal claims.

Last updated: 22.10.2024