1. data controller (hereinafter: “we”)
Shoe manufactory Hackner e.K.
Zwinger street 5
Owner: Mr. Friedrich Hackner, contact details as above
Phone: +49 (0) 9174 9766951
E-mail address: firstname.lastname@example.org
You can find more details about us in our provider identification.
2. personal data, purposes of their processing and legal bases
As a rule, it is possible to use our website without having to provide personal data. The provision of personal data is voluntary.
Personal data is any information relating to an identified or identifiable natural person (hereinafter “data subject”). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or one or more factors specific to the identity of that natural person.
The purpose of the processing of data is the operation of this website with information on our range of services together with contact options and online application options.
Personal data will only be collected on our website if this is
– for the use of the website (legal basis: Art. 6 para. 1 p. 1 lit. a) and/or Art. 6 para. 1 p. 1 lit. b) Basic Data Protection Regulation (GDPR),
– to protect our interest in improving the user experience and maintaining the security of use (legal basis: Art. 6 para. 1 p. 1 lit. f) DSGVO),
– for the use of the services offered on the website as well as pre-contractual measures, in particular for form entries (legal basis: Art. 6 para. 1 p. 1 lit. a) and/or Art. 6 para. 1 p. 1 lit. b) GDPR) or
– for a contract conclusion and for the contract execution (legal basis: Art. 6 para. 1 p. 1 lit. a) and lit. b) GDPR)
Further details on the processing of data can be found below under corresponding headings:
3. access data/server log files
When you visit our website, the servers automatically store the information that your browser sends, so-called server log files. The information includes
– Name of the retrieved web page,
– Date and time of retrieval,
– Message about successful retrieval,
– Browser type and version,
– Operating system of the user,
– Referrer URL,
This data is not merged with other data sources. The information is provided in accordance with Art. 6 par. 1 p. 1 lit. f) DSGVO used exclusively for the analysis and maintenance of the technical operation of the servers and the network.
Our website stores cookies. Cookies are small files that allow to store on the user’s access device (PC, smartphone or similar) specific information related to the device. On the one hand, they serve the user-friendliness of websites and thus the users (e.g. storage of login data). On the other hand, they are used to collect statistical data of the website usage and to be able to analyze them for the purpose of improving the offer. The legal basis for this is Art. 6 para. 1 p. 1 lit. f) GDPR.
You can manage many online ad cookies from companies through the US site http://www.aboutads.info/choices/ or the EU site http://www.youronlinechoices.com/uk/your-ad-choices/.
5. contact via e-mail
If you send us inquiries by e-mail, the information you provide in the e-mail, including the contact data you provide there, will be used for the purpose of processing the inquiry and in the event of follow-up questions in accordance with Art. 6 Para. 1 p. 1 lit. b) DSGVO stored by us. We never share this data without your consent. We will treat the data you provide voluntarily as strictly confidential. We store and use personal data voluntarily provided by you, i.e. to the extent necessary for further correspondence with you.
6. contact form
If you send us inquiries via the contact form, your data from the inquiry form, including the contact data you provided there, will be used for the purpose of processing the inquiry and for the case of follow-up inquiries pursuant to Art. 6 para. 1 p. 1 lit. b) DSGVO stored by us. We do not share this data without your consent.
7. shariff method to share our blog posts.
We enable the sharing of the videos we provide on the website on social media via share buttons using the so-called “Shariff” method. With this solution, direct contact between the user and the social media portal is only established when the user actively clicks on the share button. The click on the share button thus constitutes a declaration of consent by the user to the transfer of data to the respective social media portal, which are described below under the headings.
For this purpose, our website uses a social plugin of the social network Facebook, which is operated by Meta Platforms Inc, Deborah Crawford 1601 Willow Road Menlo Park, California 94025, USA, a plugin of Twitter by Twitter Inc, 1355 Market Street, Suite 900, San Francisco, CA 94103 U.S.A. and a plugin of Tumblr, which is operated by Tumblr Inc, 60 29th Street 343, San Francisco, CA 94110, USA.
After clicking on the Facebook, Twitter or Tumblr button, data about the user and their website visit is exchanged with the Facebook, Twitter or Tumblr server. If the user is a member of the respective portal and logged in there, information about his website visit is also assigned to his user profile. You can avoid this by logging out. We are not informed about the content of the exchanged data. At https://www.facebook.com/privacy/policy, https://twitter.com/privacy and https://www.tumblr.com/privacy/de, the user receives further privacy notices with detailed information about the collection and use of data by Facebook.
If you would like to receive the newsletter offered on the website, we require an e-mail address from you as well as information that allows us to verify that you are the owner of the e-mail address provided and that you agree to receive the newsletter. Further data is not collected or only on a voluntary basis. We use this data exclusively for sending the requested information and do not pass it on to third parties.
The processing of the data entered in the newsletter registration form is based exclusively on your consent pursuant to Art. 6 para. 1 lit. a GDPR. You can revoke your consent to the storage of the data, the e-mail address and their use for sending the newsletter at any time, for example via the “unsubscribe” link in the newsletter or by e-mail to: email@example.com. The legality of the data processing operations already carried out remains unaffected by the revocation. After you have unsubscribed from the newsletter distribution list, your e-mail address will be stored by us in a blacklist if this is necessary to prevent future mailings. The data from the blacklist will only be used for this purpose and will not be merged with other data. This serves the implementation of our legal obligation both your interest and our interest in complying with the legal requirements when sending newsletters (legitimate interest within the meaning of Art. 6 para. 1 lit. f DSGVO). The storage in the blacklist is not limited in time. You can object to the storage if your interests outweigh our legitimate interest.
9. online store
When you place an order with us, we process the data you provide to enable the selection and ordering of the selected products, together with their payment and delivery to you. The data processing is based on the requirement of the implementation of pre-contractual measures or the execution of the contract pursuant to Art. 6 para. 1 p. 1 lit. b) GDPR.
10. external payment service providers
For the purpose of payment processing, we use the payment service provider PayPal, in addition to the option of payment in advance. This is an online payment service of PayPal (Europe) S.à.r.l. & Cie. S.C.A., 22-24 Boulevard Royal, 2449 Luxembourg.
You can object to this processing of your data at any time by sending a message to us or to PayPal. However, PayPal then remains entitled to process your personal data, if applicable, provided that this is done in accordance with Art. 6 para. 1 p. 1 lit. b) DSGVO is necessary for the contractual processing of payments.
Our website uses the open source web analytics service Matomo. With the help of Matomo, we are able to collect and analyze data about the use of our website by website visitors. By using it, we can find out which page views were made when and from which region they came. We also collect various log files (e.g., IP address, referrer, browsers used, and operating systems) and can measure whether our website visitors perform certain actions (e.g., clicks, purchases, and the like). The use of this analysis tool is based on Art. 6 para. 1 lit. f) GDPR. We have a legitimate interest in analyzing user behavior in order to optimize both its web offering and its advertising.
12. recipients of personal data
Personal data is disclosed to the following categories of recipients at our company:
To our employees and to the hoster of our website. The hoster is Mittwald CM Service GmbH & Co. KG, Königsberger Straße 4-6, 32339 Espelkamp.
Furthermore, your personal data will not be disclosed to third parties without your express consent, unless we are in the sense of Art. 6 para. 1 p. 1 lit. c) DSGVO is legally obliged to do so or the data transfer is necessary pursuant to Art. 6 para. 1 p. 1 lit. b) DSGVO is mandatory for the performance of a contractual relationship.
We would like to point out that data transmission on the Internet (e.g. communication by e-mail) can have security gaps. Complete protection of the data against access by third parties is not possible.
13. duration of storage
We delete your personal data immediately after the purpose has been achieved. Thus, we store your data from your e-mails and the contact form until your request is fully processed and settled. After that, the information is usually deleted.
In addition, an annual review is carried out to determine whether the data stored about you can be deleted.
Session cookies are automatically deleted by us after your website visit. Access data and server log files are deleted after one week. The data collected by Matomo is automatically deleted for all accounts after 180 days.
Please note that for certain data there are retention obligations under commercial and tax law of at least six (§ 257 HGB) or ten (§147 AO) years.
14. rights of the data subjects
You are not required by law to provide your personal data. However, the provision may be necessary for the conclusion of a contract or for functions of the website. Thus, in the event of non-provision, it may not be possible to offer a contract or a function on the website.
There is no automated decision making on the website, profiling does not take place.
The rights of data subjects arise in particular from Articles 15 to 23 and Article 77 of the GDPR as well as from Sections 32 to 37 of the German Federal Data Protection Act (BDSG)-new.
With regard to your personal data you have the right to
– Information, Art.15 GDPR
– Correction, Art. 16 DSGVO
– Deletion, Art. 17 DSGVO
– Restriction of processing, Art.18 GDPR
– Portability, Art. 20 GDPR.
If you have given your consent to the processing of personal data, you have the right of the
– Revocation, Art. 7 DSGVO
with effect for the future.
You also have the right to object to the processing of personal data
– Objection, Art. 21 DSGVO
1. you have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is carried out on the basis of Article 6 (6) of the Data Protection Act. 1 p. 1 lit. f) DSGVO takes place (data processing on the basis of a balancing of interests).
If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the purpose of asserting, exercising or defending legal claims.
2. in individual cases, we process personal data in order to conduct direct advertising. If this is the case with you, you have the right to object at any time to the processing of data concerning you for the purpose of such advertising.
If you object to processing for direct marketing purposes, we will no longer process your personal data for these purposes.
The objection can be made form-free and should preferably be directed to us, see above under 1.
If you are of the opinion that the processing of personal data relating to you violates data protection law, you always have the
– Right to complain
at the competent supervisory authority, cf. Art. 77 DSGVO. Without prejudice to any other administrative or judicial remedy, you have this right to lodge a complaint with a supervisory authority, in particular in the Member State of your residence, workplace or the place of the alleged infringement, if you consider that the processing of personal data concerning you infringes the GDPR.
The contact details of the data protection officers in the German states, the supervisory authorities for the non-public sector, broadcasting, the churches, in Europe and the rest of the world, and the Virtual Data Protection Office can be found there: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html
The supervisory authority responsible for us is the Bavarian State Commissioner for Data Protection, Wagmüllerstraße 18, 80538 Munich.