Marc Shoes - Privacy Policy

Data protection at a glance

General information

This Privacy Policy provides a basic overview of what happens to your personal data when you visit our website. Personal data means any information relating to an identified or identifiable person. For detailed information on data protection, please see our Privacy Policy below.

Who is responsible for the collection of data on this website?

MARC Shoes GmbH, which is headquartered in Zeulenroda-Triebes, is responsible for the processing of data on this website. MARC Shoes’s contact details can be found in Section 1 of this Privacy Policy.

How and why do we collect your data?

Manual collection of data

We collect your data if you share it with us. For example, you may provide us with your data when you use our contact form or if you register your details with us. If you provide us with your data in this way, we predominantly use it to contact you directly in order to process your requests or in order to provide you with (contractually agreed) services.

Automatic collection of data

Other data is collected automatically by our IT systems as soon as you visit this website. In particular, this data includes technical data (e.g. your internet browser and operating system or the time at which you access our website). It also includes data on how you use our website. This data helps us to ensure that our website is fully functional, to optimize our website and to improve your user experience on our website.

What rights do you have concerning your data?

You are entitled at any time to receive information free of charge about the source and recipients of the personal data we have stored about you and the purposes for which we are processing it. You also have the right to request that we rectify, block, or delete your data. If you wish to exercise these rights or if you have any questions about data protection, you can contact us at any time using the address provided in Section 1 above. You are also entitled to lodge a complaint with the competent supervisory authority.

Analysis tools and third-party tools

When you visit our website, your browsing behavior may be statistically analyzed. This predominantly takes place using cookies and analysis programs. Your browsing behavior is generally analyzed anonymously and cannot be traced back to you as a person. You can object to this analysis or prevent it from taking place by not using certain tools. More information on this can be found under “Collection of data on our website” in our Privacy Policy.

1. General information and mandatory information

Data protection

As the operator of this website, MARC Shoes GmbH takes the protection of your personal data very seriously. We treat your personal data confidentially and in observance of the applicable statutory data protection regulations and this Privacy Policy.

Various pieces of personal data are collected when you use this website. Personal data is data that can be used to identify you as a person. The website operator only collects, uses, or discloses your personal data to third parties if this is legally permissible or if you have given your consent for your data to be processed. This Privacy Policy explains which data we collect and what we use it for. It also outlines how and for what purposes we process it.

We would like to point out that the transmission of data online (e.g. communication by e-mail) may be vulnerable to security breaches. It is not possible to fully protect data from access by third parties.

Data controller and data protection officer

The data controller for the processing of data on this website is:

MARC Shoes GmbH
Ehrenbergstr. 18
78532 Tuttlingen
Germany

T: +49 (0) 36628 66 – 5900
E: info@marcshoes.com

Encrypted communication

This website uses SSL encryption for security reasons and in order to protect the transmission of confidential information, such as orders or requests that you send to us as the website operator. Your connection is being encrypted if a padlock symbol appears in your browser address bar and the start of the URL in your address bar changes from “http://” to “https://”.

When SSL encryption is activated, the data that you transfer to us cannot be read by third parties.

2. Your rights concerning data protection

Access, blocking, erasure, restriction of processing, objection

As part of the applicable statutory provisions, you have various rights relating to the processing of your personal data. You can contact our data protection officer at any time using the details provided if you would like to exercise your rights or if you have any questions concerning your personal data.

Each data subject has the following rights under the GDPR:

The right of access to the personal data stored about you (pursuant to Article 15 GDPR),
The right to have your personal data rectified (pursuant to Article 16 GDPR),
The right to erasure (pursuant to Article 17 GDPR),
The right to the restriction of processing (pursuant to Article 18 GDPR),
The right to object to your data being processed (pursuant to Article 21 GDPR).

The right to access and the right to erasure are subject to the restrictions laid down in Sections 34 and 35 of the German Federal Data Protection Act (BDSG).

The right to data portability

You have the right (pursuant to Article 20 GDPR) to have data that we have processed by automated means on the basis of your consent or in order to perform a contract to be given to you or to a third party in a commonly used and machine-readable format. If you request that this data be transmitted directly to another controller, this will only take place if technically feasible.

Withdrawal of your consent to the processing of your data

If we are processing your data on the basis of your consent (e.g. in accordance with Article 6 (1) a GDPR), you have the right to withdraw this consent at any time. To exercise this right, you simply need to notify us of your request by e-mail. This withdrawal of consent will not affect the legality of the data processing that has already taken place.

The right to lodge a complaint with the competent supervisory authority

As a data subject, you have the right to lodge a complaint with a supervisory authority in the event of infringements of data protection legislation.

3. Collection of data on our website

Cookies

Cookies are used on some parts of this website to make it more user-friendly, efficient, and secure. Cookies are small text files that your browser stores on your device.

The majority of the cookies we use are session cookies. These are automatically deleted from your device when you leave our website. Other cookies remain on your device until you delete them. These cookies enable us to recognize your browser the next time you visit our website.

You can configure your browser to alert you when cookies are created so that you can choose whether to accept them on a case-by-case basis. You can also configure it to always decline cookies or to decline them in certain cases as well as to automatically delete cookies when you close your browser. Please note that deactivating cookies may limit the functionality of this website.

Cookies that are necessary for electronic communication purposes or in order to provide certain features that you wish to use (e.g. the basket feature) are stored on the basis of Article 6 (1) f GDPR. The website operator has a legitimate interest in storing cookies to help it to optimize its services and keep them free from technical faults. If other cookies (e.g. cookies that analyze your browsing behavior) are stored, this will be addressed separately in this Privacy Policy.

Server log files

The provider of this website automatically collects and stores information in server log files automatically transferred to us by your browser when you visit this website. This information includes:

Your browser type and browser version
Your operating system (if applicable)
The referrer URL
The URL visited, including the protocol and method
Your computer’s hostname
The date and time of the server request
Your IP address
GeoIP country code

This data is not merged with other sources of data.

It is processed within the server log files so that we can fulfil our legitimate interest (pursuant to Article 6 (1) f GDPR). Our legitimate interest is to provide you, as one of our users, with a functional website tailored to your needs (e.g. in the right language for your country) so that our website is presented in an attractive manner and can be optimized continuously. In addition, collecting this data allows us to prevent or protect ourselves against cyber attacks, to perform error analysis, and to detect potential cases of fraud.

The data is processed by Netigo GmbH on the basis of a data processing agreement pursuant to Article 28 GDPR, in which we require the service provider to protect our customers’ data and not to disclose it to unauthorized third parties. The data is only processed in the EU and is not disclosed to third parties. The server log files are stored by the provider for 30 days before being deleted.

How to contact us

Our website provides various means for you to contact us. For example, if you would like to ask us any questions or give us any feedback, you can do this using the contact form provided on our website or the contact details listed (in particular our e-mail address).

When using the contact form, you are required to enter some personal details about yourself before you can send your inquiry to us. For example, you need to provide us with your name and e-mail address. We need this information to communicate with you and to provide you with a fast, high-quality service. This is in our legitimate interest (pursuant to Article 6 (1) f GDPR). In addition, details concerning your request help us to forward it to the right department quickly. You can also choose to give us your telephone number if you would like us to contact you in this way.

We will only use and store your data for the purpose of processing your request. We will pass on the information you enter to the relevant members of staff, who will process your request according to your requirements. We will only share your data with third parties if doing so is necessary in order to process your request.

We will store your request and the data provided in your request for the purpose of processing your request and so that we can respond to any follow-up questions. We will keep this data until you ask us to delete it or until we have fulfilled the purpose for which we were storing it. Any mandatory legal provisions – in particular retention periods – will remain unaffected by this.

Collection of data by services provided by Google Inc.

General information

This website uses various services provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The use of these individual services is described in more detail below.

Our use of the following services and the associated collection of personal data (in particular IP addresses) is generally based on our legitimate interest in analyzing, improving and making our website content appear attractive as well as on our legitimate interest in tailoring any advertising to your needs (Article 6 (1) f GDPR).

Google Analytics

Google Analytics uses cookies (see also 3.1 “Cookies”). Cookies are stored on your computer and enable Google to analyze how you use this website. The information generated by the cookie about your use of this website is generally transmitted to and stored on a Google server in the USA.

IP anonymization

We have activated IP anonymization on our website. This means that Google will shorten your IP address before transmitting it to the USA, provided the IP address originates from a member state of the European Union or a state that is party to the Agreement on the European Economic Area. The operator of this website contracts Google to use this information to evaluate how you use the website, to create reports about the website activity, and to provide other services relating to the use of the website and the internet. The IP address transmitted from your browser during the Google Analytics process is not linked to other data held by Google.

Your right to object to the collection of your data

You can block the storage of cookies by adjusting your browser settings accordingly; please note, however, that in such cases you may not be able to make full use of all the features available on this website. You can also prevent Google from collecting and processing the data generated by the cookie about your use of the website (including your IP address) by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de.

You can also prevent Google Analytics from capturing your data by clicking on the following link. This results in an opt-out cookie being created in your browser, preventing your data from being captured when you visit this website in the future on your current browser: deactivate Google Analytics.

Further information about how Google Analytics handles your data can be found in Google’s Privacy Policy: https://support.google.com/analytics/answer/6004245?hl=de.

The processing of data on our behalf

We have concluded a data processing agreement for our use of Google Analytics and fully comply with the strict provisions of German data protection authorities when using this service.

Collection of demographic data by Google Analytics

This website uses the Demographics feature provided by Google Analytics. This feature enables reports to be created that contain statements about the age, gender, and interests of visitors to this site. This data is gathered from Google’s personalized advertising as well as visitor data from third-party providers. This data cannot be attributed to any specific individuals. You can disable this feature at any time by adjusting the ads settings in your Google account, or you can prohibit the general collection of your data by Google Analytics by following the steps outlined above.

Google reCAPTCHA

Google reCAPTCHA (hereinafter referred to as “reCAPTCHA”) is used to check whether the data entered on our website (e.g. via our contact form) has been inputted by a human or an automated program. To achieve this, reCAPTCHA analyzes various aspects of the behavior of visitors to our website. This analysis begins automatically as soon as a visitor accesses the website. During the analysis process, reCAPTCHA evaluates various pieces of information (e.g. IP address, the length of time the user spends on the website, and the way the user moves their mouse cursor). The data collected during the analysis process is forwarded to Google.

The analysis work performed by reCAPTCHA runs completely in the background and website users are not informed that it is taking place.

The data is processed on the basis of Article 6 (1) f GDPR. The website operator has a legitimate interest in protecting the website from malicious automated spying and spam.

Further information about Google reCAPTCHA and Google’s Privacy Policy can be found at the following links: https://www.google.com/recaptcha/intro/android.html and https://www.google.com/policies/privacy/.

Google Maps

This page uses the Google Maps API. Your IP address needs to be stored in order for you to use Google Maps. This information is generally transmitted to and stored on a Google server in the USA. The operator of this site has no influence over the transmission of this data.

We use Google Maps due to our interest in making our website more attractive and in making it easier for our visitors to find the addresses provided on our website. This represents a legitimate interest within the meaning of Article 6 (1) f GDPR.

You can find the Google Maps Terms of Service and Google’s Privacy Policy at the following links: https://www.google.com/help/terms_maps.html and https://www.google.com/policies/privacy/.

Google web fonts

So that font types can be displayed uniformly, this website uses what are called web fonts which are provided by Google. When a website is accessed, your browser loads the required web fonts in your browser cache so that texts and font types can be displayed correctly.

For this purpose, the browser you use has to connect to the Google servers. This provides Google with the information that our website was called up via your IP address. If your browser does not support web fonts, a standard font from your computer is used.

For additional information about Google web fonts and Google’s privacy policy, see the following links: https://fonts.google.com/about and https://www.google.com/policies/privacy/.

Newsletter

We send newsletters only with the recipient’s consent in accordance with Article 6 Paragraph 1 (a) GDPR or due to a legal allowance. If, when you register for the newsletter its contents are specifically defined, these are authoritative for user consent. We use the newsletter to inform you about news relating to our products, our latest offers, or about information concerning events.

Use of the “CleverReach” shipping service provider

We have commissioned third party provider CleverReach GmbH, Mühlenstr. 43, 26180 Rastede with sending and analysing our newsletter.

If you register for our newsletter, the data (such as your e-mail address) that you enter when registering for the newsletter will be transmitted to CleverReach and stored there. The service provider is based in Germany and the data will be processed on servers in Germany.

Double opt-in and logging

If you would like to receive the newsletter, then in addition to your consent (Article 6 Paragraph 1 (a) GDPR), we need from you a valid e-mail address as well as information that enables us to verify that you are the owner or owners of the specified e-mail address and that you agree to receiving the newsletter. Additional data will not be collected. This data is used only for sending the newsletter and will not be forwarded to third parties. You will receive a confirmation e-mail with a confirmation link. By clicking on this link, you consent to the sending of the newsletter and confirm your e-mail address. When you register for the newsletter, we store your IP address and the date of your registration. Storing this data serves as proof in the event that a third party misuses an e-mail address and registers for the newsletter without the knowledge of the authorised person.

Statistical collection and analyses

We are also able to analyse our newsletter campaigns with assistance from CleverReach. This enables us to see whether a newsletter message was opened, when it was opened, from where it was opened and which links where clicked, for example. In this way we can determine which links were clicked especially frequently. Although this information can be assigned to individual newsletter recipients for technical reasons, it is not our intention, nor that of CleverReach, to observe individual users. Rather, the reports help us to identify the reading habits of our users on a group basis and to adapt our contents to them, or to send various contents according to the interests of our users.

CleverReach also enables us to classify newsletter recipients by various recipient categories (such as their favourite type of sport). In this way, we can adapt the newsletters better to the respective target groups.

Online access and data management

We forward newsletter recipients to the CleverReach websites in some cases. For example, our newsletters contain a link with which the newsletter recipient can call up the newsletter online (if they have problems displaying it in their e-mail program, for example). Furthermore, CleverReach’s privacy policy is available only on their website. In this context, we also point out that cookies are used on the websites of CleverReach and that personal data is therefore processed by CleverReach, its partners and the service providers it commissions (such as Google Analytics). We do not have any influence over this data collection. For additional information, please refer to the privacy policy from CleverReach. We would also like to point out that you have the option of objecting to the data collection for advertising purposes on the websites http://www.aboutads.info/choices/ and http://www.youronlinechoices.com/ (for Europe).

Legal basis

We obtain consent to sending the newsletter based on Article 6 Paragraph 1 (a), 7 GDPR as well as Section 7 Paragraph 2 No. 3 or Paragraph 3 of the Act against Unfair Competition (UWG). You can withdraw your consent to the storage of your data, your e-mail address and their use for sending the newsletter at any time, for example by using the “Unsubscribe” link in the newsletter. This does not affect the lawfulness of consent-based processing that was already carried out.

The use of the CleverReach dispatch service provider, performing the statistical collection and analyses and the logging of the registration process are carried out on the basis of our legitimate interests in accordance with Article 6 Paragraph 1 (f) GDPR. Our interest is governed by a user-friendly and secure newsletter system that corresponds both to our business interests and the expectations of users.

We would also like to point out that you can object to the future processing of your personal data according to statutory requirements at any time in accordance with Article 21 GDPR. In particular, you can object to the processing for the purposes of direct advertising.

Termination/withdrawal

You can withdraw your consent to the storage of your data, your e-mail address and their use for sending the newsletter at any time. You can do this by using a link in the newsletters, in your profile area, or by notifying the contacts mentioned above.

4. Data acquisition in social media

MARC Shoes GmbH has its own channels and accounts in various social networks. We use this presence to increase our exposure, to inform various target groups about news relating to our company and our products and to give interested parties the opportunity to actively evaluate, comment on and share our posts. Our legitimate interest lies in this, also with regard to the associated processing of data on these platforms (in accordance with Art. 6 Par.1 lit. f GDPR):

Facebook: https://www.facebook.com/marc.shoes.original/

Instagram: https://www.instagram.com/marc.shoes.original/

Regardless of whether or not you are registered with the respective platform with your own user account, you can view the content and accounts of MARC Shoes GmbH by clicking on the corresponding link to our website, for example. MARC Shoes does not usually have any influence over which data the respective providers of the services process, how and for what purpose they use the data, or to whom they send the data. This is why we expressly wish to point out here that you are responsible for using the social media presence offered by us and its functions and for complying with the data protection statements of the respective provider:

Facebook: https://www.facebook.com/privacy/explanation

Instagram: https://help.instagram.com/519522125107875

The platform operators regularly provide MARC Shoes with aggregated statistical information relating to visitor numbers, click rates, retention times and similar information which the operators provide so we can analyse and optimise our presence. In accordance with current legal advice, the service provider and MARC Shoes are jointly responsible for processing the data in this case (see also https://www.facebook.com/legal/terms/information_about_page_insights_data).

So that you can contact us directly via social media platforms or respond to our posts, you need to have your own account with the respective service provider. This gives you the opportunity to assess, comment on and share our posts or to follow us. We acquire knowledge of your personal data (such as your user name and additional content from your profile) through these activities. Please remember that such interaction usually takes place on a public forum and can be viewed by a large number of people. We therefore highly recommend that neither you nor third parties post any contact details, sensitive or private information or the like in this way. Similarly, we can also assess, comment on and share your public posts or follow you. The associated data will be made visible to our followers and visitors. We do not intend to publish or process this data further.

Furthermore, you can send messages to us directly by using the messenger service that is integrated in the platforms. These messages cannot be read by other users. However, we would like to point out that we have no knowledge whatsoever of the way in which service providers analyse, interpret or otherwise process these messages. As an alternative to our social media presence and particularly the messenger services they provide, our website www.marcshoes.com is naturally available for all information relating to the company and our products. You will also find contact details here that enable you to communicate privately with us (by using the contact form, for example).