Privacy Policy

We appreciate your visit to our website fusion-shoes.com and your interest in our company.

The protection of your personal data, such as date of birth, name, phone number, address, etc., is important to us.

The purpose of this privacy policy is to inform you about the processing of your personal data that we collect when you visit our site. Our data protection practices comply with the legal regulations of the EU General Data Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG). The following privacy policy serves to fulfill the information obligations arising from the GDPR. These can be found, for example, in Art. 13 and Art. 14 ff. GDPR.

Responsible party

The responsible party within the meaning of Art. 4 No. 7 GDPR is the one who alone or jointly with others decides on the purposes and means of processing personal data.

With regard to our website, the responsible party is:

H&D shoes and more instyle GmbH
North-Carolina-Avenue 10
66953 Pirmasens
Germany
E-Mail: info@hdinstyle.de
Tel.: 063312165517
Fax: 063312165510

Contact details of the data protection officer

We have appointed a data protection officer in accordance with Art. 37 GDPR. You can reach our data protection officer at the following contact details:

Erich Zimmermann
Schwarzwaldstr. 17
68163 Mannheim
Germany
E-Mail: e.zimmermann@zida-gmbh.de
Tel.: +49 (0) 621 30696731
Website: http://www.zida-datenschutz.de/

Provision of the website and creation of log files

Each time our website is accessed, our system automatically collects data and information from the respective accessing device (e.g., computer, mobile phone, tablet, etc.).

Which personal data is collected and to what extent is it processed?

(1) Information about the browser type and the version used;
(2) The operating system of the accessing device;
(3) Hostname of the accessing computer;
(4) The IP address of the accessing device;
(5) Date and time of access;
(6) Websites and resources (images, files, further page content) that were accessed on our website;
(7) Websites from which the user's system accessed our website (referrer tracking);
(8) Notification whether the retrieval was successful;
(9) Amount of data transferred

These data are stored in the log files of our system. Storage of this data together with personal data of a specific user does not take place, so that identification of individual website visitors does not occur.

Legal basis for the processing of personal data

Art. 6 para. 1 lit. f GDPR (legitimate interest). Our legitimate interest is to ensure the achievement of the purpose described below.

Purpose of data processing

The temporary (automated) storage of data is necessary for the process of a website visit to enable delivery of the website. The storage and processing of personal data also takes place to maintain the compatibility of our website for as many visitors as possible and to combat abuse and eliminate disruptions. For this purpose, it is necessary to log the technical data of the accessing computer in order to be able to react as early as possible to display errors, attacks on our IT systems, and/or errors in the functionality of our website. In addition, the data serves us to optimize the website and to generally ensure the security of our information technology systems.

Duration of storage

The deletion of the aforementioned technical data takes place as soon as it is no longer needed to ensure the compatibility of the website for all visitors, but at the latest 3 months after accessing our website.

Right to object and deletion options

You can object to the processing at any time in accordance with Art. 21 GDPR and request deletion of data in accordance with Art. 17 GDPR. Which rights you have and how to assert them can be found at the bottom of this privacy policy.

Special functions of the website

Our site offers you various functions, during the use of which we collect, process, and store personal data. Below we explain what happens with this data:

Order form

• Which personal data is collected and to what extent is it processed?

  The data you enter into the form fields, such as address, name, first name, etc., will be processed by us to fulfill the purpose stated below.

• Legal basis for the processing of personal data

  Art. 6 para. 1 lit. b GDPR (Performance of (pre)contractual measures)

• Purpose of data processing

  The purpose of data processing is to process your order so that we can handle potential contractual relationships with you or carry out pre-contractual measures.

• Duration of storage

  The deletion of the data takes place as soon as it is no longer needed for processing the order and no legal retention obligations exist. This is usually after 10 years (cf. § 147 para. 3 in conjunction with para. 1 no. 1, 4 and 4a AO, § 14b para. 1 UStG).

• Right to object and deletion options

  Which rights you have and how to assert them can be found in the lower section of this privacy policy.

• Necessity of providing personal data

  The information in the order form is neither contractually nor legally required but necessary to conclude a contract. If you do not fill in the mandatory fields or do not fill them in completely, the order you want cannot be completed.

Contact form(s)

• Which personal data is collected and to what extent is it processed?

  The data you entered into our contact forms, which you filled into the input mask of the contact form, will be processed to fulfill the purpose stated below.

• Legal basis for the processing of personal data

  Art. 6 para. 1 lit. a GDPR or Art. 9 para. 2 lit. a GDPR (consent by clear affirmative action or explicit consent)

• Purpose of data processing

  The data collected via our contact form(s) will only be used to process the specific contact request submitted through the contact form.

• Duration of storage

  After processing your request, the collected data will be deleted immediately, provided there are no legal retention periods.

• Revocation and deletion options

  The possibilities for revocation and deletion are based on the general regulations on data protection revocation rights and deletion claims described below in this privacy policy.

• Necessity of providing personal data

  The use of the contact forms is voluntary and is neither contractually nor legally required. You are not obliged to contact us via the contact form but can also use the other contact options provided on our site. If you wish to use our contact form, you must fill in the fields marked as mandatory. If you do not fill in the necessary information in the contact form, you either cannot submit the request, or unfortunately, we cannot process your request.

Login area

• Which personal data is collected and to what extent is it processed?

  The registration and login data you enter with us will be processed to fulfill the purpose stated below.

• Legal basis for the processing of personal data

  Art. 6 para. 1 lit. b GDPR (Performance of (pre)contractual measures)

• Purpose of data processing

  On our website, you have the option to use a separate login area. To verify your authorization to use the protected area or the protected documents, you must enter your login data (email or username and password) into the corresponding form.

• Duration of storage

  The collected data will be stored as long as you maintain a user account with us.

• Right to object and deletion options

  Which rights you have and how to assert them can be found at the bottom of this privacy policy.

• Necessity of providing personal data

  The use of the login area on our site is contractually required to access the protected area. Access to the content protected by the login area is not possible without entering personal data. If you wish to use our login area, you must fill in the fields marked as mandatory (username and password). Entering the data presupposes the existence of a user account. Registration is not possible if the data you enter is incorrect. If the data is incorrect or not entered by you, the protected area cannot be used. However, the rest of the site remains accessible without login.

Newsletter registration form

• Which personal data is collected and to what extent is it processed?

  By registering for the newsletter on our website, we receive the email address you entered in the registration field and, if applicable, further contact details, provided you share them with us via the newsletter registration form.

• Legal basis for the processing of personal data

  Art. 6 para. 1 lit. a GDPR or Art. 9 para. 2 lit. a GDPR (consent by clear affirmative action or explicit consent)

• Purpose of data processing

  The data collected in the registration form of our newsletter is used exclusively by us for sending our newsletter, in which we inform about all our services and news. After registration, we will send you a confirmation email containing a link that you must click to complete the registration for our newsletter (double opt-in).

• Duration of storage

  Our newsletter can be unsubscribed at any time by clicking the unsubscribe link, which is also included in every newsletter. Your data will be deleted by us immediately after unsubscribing. Likewise, your data will be deleted immediately by us in the event of an incomplete registration. We reserve the right to delete data without giving reasons and without prior or subsequent notification.

• Right of withdrawal and removal options

  You can revoke your consent at any time in accordance with Art. 7 para. 3 GDPR. However, processing carried out up to the time of revocation remains unaffected. For further rights, please refer to the overview at the end of this privacy policy.

• Necessity of providing personal data

  If you wish to use our newsletter, you must fill in the fields marked as mandatory and confirm your email address by clicking the double opt-in link. The information provided for newsletter registration is neither necessary to enter into a contract with us nor legally required. It is solely used for sending our newsletter. If you do not fill in the required information, we unfortunately cannot provide you with our newsletter service.

Online withdrawal form

• Scope of processing of personal data and collected personal data

  The data you enter in the form fields of the online withdrawal form, such as name, address, etc., will be processed by us to fulfill the purpose described below.

• Legal basis for the processing of personal data

  Art. 6 para. 1 lit. b GDPR (Performance of (pre)contractual measures)

• Purpose of data processing

  The collection of data is necessary to give you the opportunity to declare your withdrawal online. By entering the data, you can exercise your statutory right of withdrawal directly and immediately online.

• Duration of storage

  The data collected within our online withdrawal form will be deleted immediately after the processing of the withdrawal is completed, unless there are legal retention obligations.

• Right to object and deletion options

  Which rights you have and how to assert them can be found at the bottom of this privacy policy.

• Necessity of providing personal data

  Providing your data within the framework of the online withdrawal form is legally necessary with regard to the mandatory information for exercising the withdrawal via the fillable form. Of course, you can also use the sample withdrawal form or other legally permissible withdrawal options at any time. If you do not fill in all the information properly, your withdrawal declared to us via the online withdrawal form may not become effective.

Automated credit check / scoring

If you wish to conclude a contract with us, we reserve the right to carry out an exclusively automated processing of your personal data in order to check your creditworthiness. According to Art. 22 para. 2 a GDPR, we are also entitled to make such an automated decision. Whether the contract can be concluded or not depends on the result of the automated credit check. In a credit check, statistical probabilities of a payment default are calculated. The credit report may contain probability values (score values) calculated based on scientifically recognized mathematical-statistical methods. A variety of characteristics, such as income, address data, occupation, marital status, and previous payment behavior, are used to infer the customer's future risk of payment default. The result is expressed in the form of a payment value (so-called score). The information obtained in this way forms the basis of our decision on the establishment, execution, or termination of a contractual relationship. If you believe that you have been unjustly excluded from concluding the contract due to the credit check, you are welcome to explain your position to us by email. We will then review the automated decision in the specific individual case in accordance with Art. 22 para. 3 GDPR. To carry out the credit check, we are allowed to store and process your personal data according to Art. 6 para. 1 lit. b GDPR.

Due to the impending contract, we transmit your data to the following provider(s) in the cases listed below:

• Automatic identity and credit check when selecting the payment method "PayPal"

  • Which personal data is collected and to what extent is it processed?

    If you have selected "PayPal" as the payment method, we forward your personal customer data collected during the order process to PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter "PayPal") for payment processing. If you give your consent, the following data are affected by the data transfer: first and last name, street, house number, postal code, city, date of birth, telephone number, as well as the data related to your order.

  • Legal basis for the processing of personal data

    Art. 6 para. 1 lit. b GDPR (Performance of (pre)contractual measures)

  • Purpose of data processing

    When selecting the payment method "PayPal", PayPal conducts a credit check. Mathematical-statistical methods are used to calculate a rating regarding the probability of a payment default (so-called calculation of a scoring value). PayPal bases its decision on providing the respective payment methods on the calculated scoring value. The calculation of a scoring value is carried out according to recognized scientific methods. Reference is also made to PayPal's privacy policy: https://www.paypal.com/de/webapps/mpp/ua/privacy-full

  • Duration of storage

    We will store the relevant data for processing the payment as long as it is necessary to carry out the transaction. As far as the data is subject to legal retention obligations, deletion will take place after the retention period expires. The duration of data storage by PayPal is derived from PayPal's privacy policy: https://www.paypal.com/de/webapps/mpp/ua/privacy-full

  • Right to object and deletion options

    You can object to the processing at any time in accordance with Art. 21 GDPR and request the deletion of the data in accordance with Art. 17 GDPR. Which rights you have and how to assert them can be found in the lower section of this privacy policy.

Integration of external web services and processing of data outside the EU

On our website, we use active content from external providers, so-called web services. By visiting our website, these external providers may receive personal information about your visit. This may involve data processing outside the EU. You can prevent this by installing a corresponding browser plugin or disabling script execution in your browser. This may lead to functional restrictions on websites you visit.

We use the following external web services:

• Rechtstextsnippet and modules

  We use the Rechtstextsnippet and modules service from the company Website-Check GmbH, Beethovenstraße 24, 66111 Saarbrücken, Germany, E-Mail: support@website-check.de, Website: https://www.website-check.de/. The transmission of personal data is made exclusively to servers in the European Union.

  The legal basis for processing is Art. 6 para. 1 lit. c GDPR. The use of the service supports us in fulfilling our legal obligations.

  With the help of the service, content from our legal texts is loaded on our website. The current legal texts are loaded via the integration on our site. This integration may also load further technical modules regarding the legal texts or legally required elements.

  Which rights you have with regard to processing can be found at the end of this privacy policy.

  Further information on handling the transmitted data can be found in the provider's privacy policy at https://www.website-check.de/datenschutzerklaerung/.

• Website-Check Siegel

  We use the Website-Check Siegel service from the company Website-Check GmbH, Beethovenstraße 24, 66111 Saarbrücken, Germany, E-Mail: support@website-check.de, Website: https://www.website-check.de/. The transmission of personal data is made exclusively to servers in the European Union.

  The legal basis for processing personal data is our legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR. Our legitimate interest lies in achieving the purpose described below.

  The script from Website-Check GmbH is the technical integration of the Website-Check seal. With this seal, we want to show that we take data protection very seriously. The transmission of data to Website-Check GmbH takes place for the delivery and display of the seal on our site.

  With regard to processing, you have the right to object as set out in Art. 21. Further information can be found at the end of this privacy policy.

  Further information on handling the transmitted data can be found in the provider's privacy policy at https://www.website-check.de/datenschutzerklaerung/.

Data security and data protection, communication via email

Your personal data is protected by technical and organizational measures during collection, storage, and processing so that it is not accessible to third parties. In the case of unencrypted communication via email, complete data security during transmission to our IT systems cannot be guaranteed by us, so for information with a high need for confidentiality, we recommend encrypted communication or postal mail.

Right to information and correction requests – deletion & restriction of data – withdrawal of consents – right to object

Right to information

You have the right to request confirmation as to whether we are processing personal data about you. If this is the case, you have the right to information about the details named in Art. 15 para. 1 GDPR, unless the rights and freedoms of other persons are affected (see Art. 15 para. 4 GDPR). We will also be happy to provide you with a copy of the data.

Right to rectification

According to Art. 16 GDPR, you have the right to have any incorrect personal data (such as address, name, etc.) corrected by us at any time. You can also request the completion of the data stored with us at any time. The corresponding adjustment will be made immediately.

Right to deletion

According to Art. 17 para. 1 GDPR, you have the right to have the personal data we have collected about you deleted if

• the data is no longer needed;
• due to the withdrawal of your consent, the legal basis for the processing has ceased to exist without replacement;
• You have objected to the processing and there are no legitimate grounds for the processing;
• your data is being processed unlawfully;
• a legal obligation requires this or a collection has taken place according to Art. 8 para. 1 GDPR.

The right does not exist according to Art. 17 para. 3 GDPR if

• the processing is necessary for the exercise of the right to freedom of expression and information;
• your data has been collected based on a legal obligation;
• the processing is necessary for reasons of public interest;
• the data is necessary for the assertion, exercise, or defense of legal claims.

Right to restriction of processing

According to Art. 18 para. 1 GDPR, you have the right in individual cases to request the restriction of the processing of your personal data.

This is the case when

• the accuracy of the personal data is disputed by you;
• the processing is unlawful and you do not agree to a deletion;
• the data is no longer needed for the processing purpose, but the collected data serves the assertion, exercise, or defense of legal claims;
• an objection to the processing pursuant to Art. 21 para. 1 GDPR has been lodged and it is still unclear which interests prevail.

Right to revoke

If you have given us explicit consent to the processing of your personal data (Art. 6 para. 1 lit. a GDPR or Art. 9 para. 2 lit. a GDPR), you can revoke it at any time. Please note that the lawfulness of the processing carried out based on the consent until the revocation is not affected.

Right to object

According to Art. 21 GDPR, you have the right to object at any time to the processing of personal data concerning you that has been collected based on Art. 6 para. 1 lit. f (within the scope of a legitimate interest). This right only applies if there are special circumstances against the storage and processing.

How do you exercise your rights?

You can exercise your rights at any time by contacting the contact details below:

H&D shoes and more instyle GmbH
North-Carolina-Avenue 10
66953 Pirmasens
Germany
E-Mail: info@hdinstyle.de
Tel.: 063312165517
Fax: 063312165510

Right to data portability

You have a right to receive the personal data concerning you according to Art. 20 GDPR. The data will be provided by us in a structured, common, and machine-readable format. The data can be sent either to you personally or to a controller designated by you.

Upon request, we provide you with the following data according to Art. 20 para. 1 GDPR:

• Data collected based on explicit consent according to Art. 6 para. 1 lit. a GDPR or Art. 9 para. 2 lit. a GDPR;
• Data we have received from you under existing contracts according to Art. 6 para. 1 lit. b GDPR;
• Data processed within the scope of an automated procedure.

We will transfer the personal data directly to a controller of your choice, provided this is technically feasible. Please note that we are not allowed to transfer data that interferes with the freedoms and rights of other persons according to Art. 20 para. 4 GDPR.

Right to complain to the supervisory authority according to Art. 77 para. 1 GDPR

If you suspect that your data is being processed unlawfully on our site, you can of course initiate a judicial clarification of the issue at any time. In addition, any other legal options are available to you. Regardless, according to Art. 77 para. 1 GDPR, you have the option to contact a supervisory authority. The right to complain under Art. 77 GDPR applies in the EU member state of your residence, your workplace, and/or the place of the alleged violation, i.e., you can choose the supervisory authority to contact from the aforementioned locations. The supervisory authority where the complaint was filed will then inform you about the status and results of your submission, including the possibility of judicial remedy under Art. 78 GDPR.