Duty to inform – GDPR

Dear Customer,
We are strongly committed to protecting your personal data. We therefore process your data solely on the basis of statutory provisions that authorise or obligate us to process it, or subject to your explicit consent. The following Data Privacy Statement complies with the current legal framework as defined by the German Data Protection Act (BDSG) or German Telemedia Act (TMG), as well as the stipulations of the General Data Protection Regulation (GDPR), which applies as of 25 May 2018. The legal bases of the GDPR are autho­ri­tative as of 25 May 2018.

We inform you about the most important aspects of how we process data in this Data Privacy Statement.

As the cont­roller, LOWA Sport­schuhe GmbH is obligated to inform data subjects of certain actual and legal circum­stances relating to data protection. That infor­mation is intended to enable data subjects to obtain infor­mation on the scope to which and way in which their data is processed. We never sell your data or transmit it to third parties outside the LOWA Sport­schuhe Group.

The obligation to provide infor­mation is prescribed by Article 13 of the General Data Protection Regulation (GDPR) and applies to data processing by LOWA Sport­schuhe GmbH.

a) Identity of the cont­roller
LOWA Sport­schuhe GmbH
Haupt­straße 19
85305 Jetzendorf
Germany

b) Contact data of the Data Protection Officer
Bernd Rodomski
E-mail: datenschutz@lowa.de

c) Purpose of processing and legal basis
Performance of a contract (Article 6 (1) 1 point (b) GDPR)
Processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract.

Consent (Article 6 (1) point (a) GDPR
The data subject has given consent to the processing of his or her personal data for one or more specific purposes.

Legi­timate interests (Article 6 (1) point (f) GDPR
Processing is necessary to safeguard the legi­timate interests pursued by the cont­roller or by a third party, except where such interests are overridden by the interests or funda­mental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child.

Data of job applicants (Article 88 GDPR, Section 26 BDSG (new version))
Data processing is necessary for making a decision on estab­lishing an employment relati­onship.

d) Recipients of the data
Your data is processed solely by employees who are authorised to collect and use personal data. The employees are trained in the requi­rements under data protection law and are obligated to maintain confi­den­tiality.
Our news­letter is sent out by e-mail by the companies News­let­ter2Go and MailChimp. LOWA Footscan 360° stores the results of foot measu­rements at the company netvico GmbH.

e) Transfer of data to third countries
Data is transferred to third countries only in the case of news­letters sent by MailChimp, an e-mail marketing service provider of the U.S. provider Rocket Science Group, LLC, 675 Ponce De Leon Ave NE #5000, Atlanta, GA 30308, USA More details: lowa.com/legal/privacy.

f) Duration of storage
We store the data we collect to perform contracts until the warranty and guarantee rights under the law and, possibly, under a contract expire. When these periods end, we retain the infor­mation on the contractual relati­onship required by commercial and fiscal law for the statutory periods of time. The data is processed again in this period of time solely in the event of an audit or exami­nation by the fiscal autho­rities.

Billing documents: 10 years (German Commercial Code (HGB))
Job appli­cation documents: 5 months (German General Act on Equal Treatment (AGG))
Contact requests: until the grounds for collection of the data no longer apply
Order acceptance/services: To comply with warranty periods (2 years)
News­letter: Until revo­cation of consent
Foot measu­rements: Until revo­cation of consent

g) Rights of data subjects
You as the data subject have the following rights pursuant to Articles 15 to 21 GDPR:

Right to access to and infor­mation about your personal data we have stored.
Right to rectifi­cation of incorrect personal data and the right to have your incomplete personal data completed.
The right to erase your personal data we have stored, if permissible.
The right to demand rest­riction of processing of your data, if there are statutory retention periods.
The right to object to processing of your data. If the requi­rements defined by Article 21 (1) GDPR are met, the data subject can object to processing on grounds relating to his or her particular situation pursuant to Article 6 (1) point (e) or (f).
If applicable, the right to data porta­bility, i.e. surrender of your stored data in a structured format (as of 25 May 2018).
In these cases, please get in touch with:
Name: LOWA Sport­schuhe GmbH
Postal address: Haupt­straße 19, 85305 Jetzendorf, Germany
E-mail: datenschutz@lowa.de

h) Right to lodge complaints with the super­visory authority
In accordance with Article 77 GDPR, data subjects have the right to lodge complaints directly with the super­visory authority if they consider that the processing of their personal data infringes the law.

Name: Baye­risches Landesamt für Datenschutzaufsicht (Bavarian Data Protection Authority)
Postal address: Promenade 27 (Schloss) 91522 Ansbach, Germany
E-mail: post­stelle@lda.bayern.de

i) Obligation to provide personal data
In particular, it is indispensable for data subjects to provide their personal data when business relati­onships are initiated or conducted.
If this data is not provided, the cont­roller cannot perform any contractual or other services. Any questions? Then simply get in touch with us. You can find more infor­mation in the Internet at lowa.com/legal/privacy