Duty to inform – GDPR
Dear Customer,
We are strongly committed to protecting your personal data. We therefore process your data solely on the basis of statutory provisions that authorise or obligate us to process it, or subject to your explicit consent. The following Data Privacy Statement complies with the current legal framework as defined by the German Data Protection Act (BDSG) or German Telemedia Act (TMG), as well as the stipulations of the General Data Protection Regulation (GDPR), which applies as of 25 May 2018. The legal bases of the GDPR are authoritative as of 25 May 2018.
We inform you about the most important aspects of how we process data in this Data Privacy Statement.
As the controller, LOWA Sportschuhe GmbH is obligated to inform data subjects of certain actual and legal circumstances relating to data protection. That information is intended to enable data subjects to obtain information on the scope to which and way in which their data is processed. We never sell your data or transmit it to third parties outside the LOWA Sportschuhe Group.
The obligation to provide information is prescribed by Article 13 of the General Data Protection Regulation (GDPR) and applies to data processing by LOWA Sportschuhe GmbH.
a) Identity of the controller
LOWA Sportschuhe GmbH
Hauptstraße 19
85305 Jetzendorf
Germany
b) Contact data of the Data Protection Officer
Bernd Rodomski
E-mail: datenschutz@lowa.de
c) Purpose of processing and legal basis
Performance of a contract (Article 6 (1) 1 point (b) GDPR)
Processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract.
Consent (Article 6 (1) point (a) GDPR
The data subject has given consent to the processing of his or her personal data for one or more specific purposes.
Legitimate interests (Article 6 (1) point (f) GDPR
Processing is necessary to safeguard the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child.
Data of job applicants (Article 88 GDPR, Section 26 BDSG (new version))
Data processing is necessary for making a decision on establishing an employment relationship.
d) Recipients of the data
Your data is processed solely by employees who are authorised to collect and use personal data. The employees are trained in the requirements under data protection law and are obligated to maintain confidentiality.
Our newsletter is sent out by e-mail by the companies Newsletter2Go and MailChimp. LOWA Footscan 360° stores the results of foot measurements at the company netvico GmbH.
e) Transfer of data to third countries
Data is transferred to third countries only in the case of newsletters sent by MailChimp, an e-mail marketing service provider of the U.S. provider Rocket Science Group, LLC, 675 Ponce De Leon Ave NE #5000, Atlanta, GA 30308, USA More details: lowa.com/legal/privacy
f) Duration of storage
We store the data we collect to perform contracts until the warranty and guarantee rights under the law and, possibly, under a contract expire. When these periods end, we retain the information on the contractual relationship required by commercial and fiscal law for the statutory periods of time. The data is processed again in this period of time solely in the event of an audit or examination by the fiscal authorities.
Billing documents: 10 years (German Commercial Code (HGB))
Job application documents: 5 months (German General Act on Equal Treatment (AGG))
Contact requests: until the grounds for collection of the data no longer apply
Order acceptance/services: To comply with warranty periods (2 years)
Newsletter: Until revocation of consent
Foot measurements: Until revocation of consent
g) Rights of data subjects
You as the data subject have the following rights pursuant to Articles 15 to 21 GDPR:
Right to access to and information about your personal data we have stored.
Right to rectification of incorrect personal data and the right to have your incomplete personal data completed.
The right to erase your personal data we have stored, if permissible.
The right to demand restriction of processing of your data, if there are statutory retention periods.
The right to object to processing of your data. If the requirements defined by Article 21 (1) GDPR are met, the data subject can object to processing on grounds relating to his or her particular situation pursuant to Article 6 (1) point (e) or (f).
If applicable, the right to data portability, i.e. surrender of your stored data in a structured format (as of 25 May 2018).
In these cases, please get in touch with:
Name: LOWA Sportschuhe GmbH
Postal address: Hauptstraße 19, 85305 Jetzendorf, Germany
E-mail: datenschutz@lowa.de
h) Right to lodge complaints with the supervisory authority
In accordance with Article 77 GDPR, data subjects have the right to lodge complaints directly with the supervisory authority if they consider that the processing of their personal data infringes the law.
Name: Bayerisches Landesamt für Datenschutzaufsicht (Bavarian Data Protection Authority)
Postal address: Promenade 27 (Schloss) 91522 Ansbach, Germany
E-mail: poststelle@lda.bayern.de
i) Obligation to provide personal data
In particular, it is indispensable for data subjects to provide their personal data when business relationships are initiated or conducted.
If this data is not provided, the controller cannot perform any contractual or other services. Any questions? Then simply get in touch with us. You can find more information in the Internet at lowa.com/legal/privacy