A. Controller / Your rights

Responsibility for the operation of the Schöffel website(www.schoeffel.de; www.schoeffel.com) and the collection, processing and use of your personal data in accordance with the applicable data privacy law is

Schöffel Sportbekleidung GmbH
Ludwig-Schöffel-Straße 15
86830 Schwabmünchen
08232-5006-0
Email address: mail@schoeffel.com

Data protection officer:
If you have any questions concerning data protection, please email mail@schoeffel.com or contact our data protection officer directly:

External data protection officer at Schöffel Sportbekleidung GmbH
Stephan Hartinger
Coseco GmbH
Albertus Magnus Straße 2
86836 Graben (Lagerlechfeld)
Email: datenschutz@coseco.de
Homepage: https://www.coseco.de/

A. 1. Your rights

If you have any questions concerning your personal data, you are welcome to write to us at any time. Under the terms of the General Data Protection Regulation (GDPR), you have the following rights:

• The right to information (sub-item Article 15 GDPR)
• The right to correction (Article 16 GDPR)
• The right to deletion (Article 17 GDPR)
• The right to restriction (Article 18 GDPR)
• The right to data portability (Article 20 GDPR)
• The right to appeal (Article 21 GDPR)
• The right to lodge a complaint with a data protection supervisory authority (Article 77 GDPR in conjunction section 19 FDPA)
• Right to withdraw a data privacy declaration (Article 7(3) GDPR)

B. Collection of general access information

Every time you visit our website, server log file information is automatically collected that your browser then sends to us. This information consists of:

• request (file name of the requested file)
• browser type version (e.g.: Internet Explorer 6.0)
• browser language (e.g.: English)
• operating system used (e.g.: Windows XP)
• Internal resolution of the browser window screen resolution
• JavaScript activation, Java on / off, cookies on/ off
• colour depth
• referrer URL (the previously visited page)
• IP address – is immediately anonymised and deleted after processing
• time of the visit
• clicks.

Please note that this information cannot be matched to a specific person. We use this technical access information exclusively for the following purposes:

• to improve the attractiveness and usability of our web pages,
• to detect technical problems on our website at an early stage,
• to deliver the content of our Internet website correctly,
• and to provide law enforcement authorities with the information necessary for criminal prosecution in the event of a cyberattack.

As a technical precaution, this data is stored for a maximum of 7 days to protect the data processing systems against unauthorised access.

C. Purpose of personal data processing / Recipients

We only use your personal data for the purposes stated on this page of information on data protection. The following input masks for the collection of personal data can be found on our website.

C. 1. Newsletter

You can regularly receive free email newsletters from our website in which we inform you about our products, offers, blog posts and all the latest news from the world of Schöffel. The advertised topics and products are stated in the declaration of consent. You must provide the following information in order to subscribe:

• email address (mandatory)
• gender (mandatory)

This mandatory information is required in order to provide you with relevant, personalised content. In addition, by registering you confirm that you are at least 16 years old.
The information you provide when subscribing to our newsletter will only be used for this purpose. Subscribers may also be informed by email of any circumstances that are relevant to the service or subscription (such as changes to the newsletter offer or technical circumstances).

A valid email address is required in order to subscribe. Your consent is obtained during the registration process and reference made to this privacy policy before the data is processed. In order to verify that a registration really is being made by the owner of an email address, we use the "double opt-in" procedure. To this end, we log the order for the newsletter (time and topic), the sending of a confirmation email and the receipt of the response requested in it. We also store your IP address.

Please note that we evaluate your user behaviour when we send out the newsletter. The newsletters contain "web beacons" or "tracking pixels" for this purpose that are called up when the newsletter is opened. For these evaluations, we link the data mentioned under B (browser type / version, operating system used, name of the web page visited previously, IP address / host name of your device, data and time of the server request) and the web beacons to your email address and an individual ID. Any links contained in the newsletter also contain this ID. We can use this data to determine whether and when you opened the newsletter and which links in the newsletter were clicked. This is done to optimise and statistically evaluate our newsletter.

We use Salesforce (salesforce.com Germany GmbH, a subsidiary of salesforce.com inc., Salesforce Tower, 415 Mission Street, San Francisco, CA 94105, USA, see D.13), to send and collect user data for our email newsletter. If you register for our newsletter, the data provided during registration will be transmitted to Salesforce and processed there.

Duration of storage
You can revoke your consent to the storage, processing and analysis of your personal data and its use for sending the newsletter at any time. There is a link for this in every newsletter. You can also inform us of your desire to do so at any time by sending an email tomail@schoeffel.com. We will store your registration data without double opt-in for one month.
Once you have unsubscribed, you will no longer receive any email newsletters (apart from a reminder of your opt-out). If we need to process your email address for any other reasons, your email address will be blocked for the newsletter.

You can object to tracking at any time by clicking on the separate link that you will find in every email or by informing us of this through a different contact channel. The information will be stored for as long as you have subscribed to the newsletter. After unsubscribing, we will store the data purely statistically and anonymously. Tracking is not possible if you have deactivated the display of images in your email program as default. In this case, the newsletter will not be displayed in full, and you may not be able to use all the functions. The above tracking will take place if you display the images manually.

C.1.1.  

Warehouse sale  
Furthermore, all the non-tool-specific information listed under point C.1. applies to the sales newsletter.  
For our sales newsletter, we use the services of Brevo (SendinBlue GmbH, Köpenicker Straße 126, 10179 Berlin, a subsidiary of SendinBlue SAS, 55 rue d'Amsterdam, 75008 Paris, France). Brevo allows us to inform our business contacts about the latest news, company information and offers.   
When you register for our newsletter, the data you provide during registration is transferred to Brevo and processed there.  
The processing of your data in Brevo is based on your consent in accordance with Art. 6 (1) p. 1 lit. a) EU-DSGVO.  
Further details of Brevo's privacy policy you here: Privacy Policy Personal Data Protection - Brevo

C.2. Contact form

If you contact us by email or using the contact form, the information you provide will be stored for the purpose of processing the request and for any follow-on questions. This information is as follows:

• the reason for your request
• your title
• your name
• your country
• your email address
• your message
• optionally your phone number

We also store the time of the contact in order to relate your request to the products, prices and other content applicable at the relevant time. Your consent is obtained to our processing the data as part of the mailing process, and reference is made to this privacy policy.

The details are passed on to third parties in the course of the contact request to our service provider in order to provide the best possible and most timely service.

The above information will also be processed by our service provider, Salesforce Inc. (The Landmark @One Market, Suite 300, San Francisco, CA 94105, USA) in European data centres if you have given us your permission to do so.

You are free to revoke your consent to the processing of personal data at any time. If you contact us by email (mail@schoeffel.com), you can object to the storage of your personal data at any time. In this instance, all personal data stored in the course of your request will be deleted.

Entering your data in the contact forms of our website enables us to contact you personally, to answer your questions, and to offer you our services. Personal data entered in the input mask is only used to enable us to process your initial contact. Any other personal data processed during the mailing process is used solely to prevent misuse of the contact form and to ensure the security of our information technology systems. If contact is made by email, this also constitutes the necessary legitimate interest in the processing of the details.

Transmitting your details to a third country or international organisation

It is possible that data may be accessed or processed in the USA. We have agreed an order processing contract with Salesforce for the transmission of data. Salesforce is also legally bound by the standard contractual clauses, data-processing-addendum.pdf (salesforce.com). Please refer to the Privacy policy of Salesforce Inc. for further information; see F. 10.

Duration of storage

This data will be stored for as long as is necessary for the provision of the services requested by the user or for the purposes indicated in this document.

C.3. Customer account / Registration / Ordering process

Any visitor can create a password-protected account on our website. We record the following data when registering:

• your first name,
• your last name, and
• your email address.

Depending on the case and process, you will expressly transmit further data to us which we will then process. This includes general contact information such as

• your address (optionally without an order),
• your phone number (optional) and
• your date of birth (optional) 

and information that we require for processing your online shop order, such as 

• your ordered products,
• your billing information,
• your billing address,
• your delivery address,
• your payment information such as credit cards, bank details, payment methods,
• any correspondence with our Customer Services department,
•  as well as any information expressly provided by you, such as
• your wish lists and
• your personal profile.

We operate a real-name system; pseudonymous use is not possible. Furthermore, your IP address and the date and time of registration will be processed when you register.

We record the time of each access and, if appropriate, record any incorrect password entries. We collect and process this data for security reasons in order to document incorrect or unwanted access and allow any countermeasures. All personal data is encrypted before it leaves your PC and is transferred via the Internet. Schöffel uses the recognised "Secure Socket Layer" (SSL) transmission with 128-bit encryption for this purpose. This means that no outsiders are able to read the encrypted details of your order, your name, address, credit card or bank details.
You have the option of updating your data in your personal customer account, adding data to it or deleting data from it, at any time. You can also ask us to delete your customer account. To do so, email us at mail@schoeffel.com.

The option of a customer account and other functions in our online shop are made available by the shop software of our service provider (EVEN ON SUNDAY GmbH, Netter Platz 4 / D-49090 Osnabrück).

In order to fulfil the contract, we also pass your details on to the shipping company commissioned with its delivery if necessary.

Transmission of your data
For the transmission of data to service providers, we have in place the necessary agreement on order processing as per Article 28 of the GDPR.

Duration of storage
Due to mandatory commercial and tax regulations, we are obliged to store your address, payment and order details for a period of up to ten years.

C 3.1 Lagerverkauf  

For participation in the stock sale, the process of creating a customer account applies, see C.3.   
The scope of the processed data, transmission of the data and duration of storage are to be taken in accordance with point C.3.   

Transfer of your data to a third country or international organisation  

Access to or processing of data in the USA cannot be ruled out. We have concluded an order processing agreement with Salesforce for the transfer of data. In addition, Salesforce is legally bound via the standard contractual clauses,data-processing-addendum.pdf (salesforce.com). 
Please refer to the privacy policy of Salesforce Inc. for further information, see F. 10. 

C. 4. Application documents

If you contact us by email or contact form, the information you provide will be stored for the purpose of collection, processing or use in making a decision regarding an employment relationship and carrying out an application process for the allocation of a position. This information is as follows:

• your name,
• your address,
• your email address,
• your telephone number,
• your application photo,
• your CV,
• your cover letter and
• details of your qualifications: references, certificates, other documents.

We will process the application documents received from you for the following purposes: collection, processing or use in making a decision regarding an employment relationship and carrying out an application process for the allocation of a position.

The matter will be processed internally by Schöffel IT and operationally by Schöffel's HR department, the department managers of the respective departments, and the works council.
As part of the application process, the data will be processed in the HR department in our human resource management system ("LOGA", P&I Personal & Informatik AG, Kreuzberger Ring 56, 65205 Wiesbaden).

Transmission of your data
For the transmission of data to the service provider, we have in place the necessary agreement on order processing as per Article 28 of the GDPR.

Duration of storage
We will store your data only until the pre-contractual purpose has been fulfilled and if there are no other statutory retention obligations. The data will be deleted no later than six months after refusal.
Your retained data will be blocked for the period of retention.
If you have given us your consent to further storage and to use the data for other relevant vacancies, we will store the data until you revoke your consent and for a maximum of 12 months.

You are free to revoke your consent to the processing of personal data at any time. If you contact us by email (mail@schoeffel.com), you can object to the storage of your personal data at any time. In this event, the application process and communication cannot be continued. In this instance, all the personal data stored in the course of the application process will be deleted in accordance with the legally binding retention requirement.

C. 5. Reviews

The product review feature allows you to post public reviews in our online shop. Your review will be published along with your first name and abbreviated last name in the article (e.g. Anna M.). The following data is processed:

• review
• review product affiliation
• date / time
• IP address
• last name, first name, user's email address, user profile image by Gravatar (optional), user data cookie for storage for further commenting by the same user (optional)
• size and weight information (optional)

When users leave reviews, their IP addresses may be stored for 7 days on the basis of legitimate interest under the terms of Article 6(1)(f) of the GDPR. This is done for our safety in the event of illegal content being left (insults, illegal political propaganda etc.).

We also reserve the right, based on our legitimate interests as per Article 6(1)(f) of the GDPR, to process users' information for the purpose of spam detection.

Reviews will be checked before publication. We reserve the right to delete any reviews that do not correspond to our netiquette or that are objected to by third parties as unlawful.

Duration of storage
The above data will be stored for as long as the article exists or until we remove it. The reviews will be retained. You have the option of asking for your data to be deleted at any time. To do so, please email us (mail@schoeffel.com). In this event, your comments and any personal details that have been stored will be deleted.

C. 6. Landing Pages

When requesting further information materials such as training schedules, information materials for studying or trend reports through our landing pages, you will be required to enter the following personal details in an online form

• first and last name (optional)
• company / position (optional)
• email address
• phone number (optional)
• type of sport (optional)

Real names are not required when requesting information material; anonymous names may be used.

We will also store your IP address and the time of the request.

The data will always be used to offer you our services and for their constant improvement.

The above data will be processed by our service providers, Salesforce Inc. (The Landmark @ One Market, Suite 300, San Francisco, CA 94105, USA) in European data centres.

Transmitting your data to a third country or international organisation

It is possible that data may be accessed or processed in the USA. We have agreed an order processing contract with Salesforce for the transmission of data. Salesforce is also legally bound by the standard contractual clauses, data-processing-addendum.pdf (salesforce.com). Please refer to the Privacy policy of Salesforce Inc. for further information; see F. 10.

C. 7. Competitions

Whenever we run a competition, we process the participants' personal details.
Depending on the type of competition, we will require a valid email address, first and last names, date of birth, and gender. A telephone number may also be required in individual cases if we need to make contact at short notice. If prizes are to be send by post or parcel service, we will also require your postal address in order to arrange for postage. We collect this data in order to ascertain whether you are eligible to participate, and to determine and notify the winners by email. If you do not provide us with the above data, you will not be able to enter the competition or contact us with regard to a win. We will only use your address details to send out prizes. Without them, we will not be able to send a prize by post.

Your details will never be passed on to third parties unless this is necessary for the execution of a competition or to mail any prizes, and provided that data protection authorisation for transmission has been given. If we include partner companies or service providers in the implementation or carry out any campaigns with them, we conclude the necessary agreements for processing the order in according with Article 28 or with joint responsibility as per Article 26 of the GDPR.

If we carry out a competition with partners or if the respective cooperation partner involved who provides the prizes arranges for their dispatch under their own responsibility, any personal details such as an address will be transmitted to that cooperation partner for this specific purpose.

Unless you have additionally subscribed to our newsletter service independently of your participation in the competition or have otherwise expressly given us permission to do so, your details will not be used for any advertising measures. If you have given your consent for this, you can revoke it formlessly at any time for the future via the contact details provided.

You will find detailed information in the respective entry conditions for a competition.

The personal data will be processed by our service providers, Salesforce Inc. (The Landmark @ One Market, Suite 300, San Francisco, CA 94105, USA) in European data centres.

Transferring your details to a third country or international organisation

It is possible that data may be accessed or processed in the USA. We have agreed an order processing contract with Salesforce for the transmission of data. Salesforce is also legally bound by the standard contractual clauses, data-processing-addendum.pdf (salesforce.com). Please refer to the Privacy policy of Salesforce Inc. for further information; see F. 10.

Duration of storage
The data will be deleted as soon as it is no longer required in order to achieve the purposes for which it was collected.The data required for the statutory retention period will be stored.
You have the option of asking for your data to be deleted at any time. To do so, please email us (mail@schoeffel.com). In this event, your comments and any personal details that have been stored will be deleted. If the competition has not yet ended at this time, further participation is not possible.

C. 9. loyalty programme   

In the Schöffel online shop you have the option of registering for the Loyalty Programme.   
To participate, you must create a customer account. In the course of this, personal registration data will be stored, see C.3. In addition, personal data will be accumulated for the purposes of the Loyalty Programme.    

• personal score   
• personal current level    
• personal awards,   

as well as content-related information on participation in the programme.   

Within the framework of the Loyalty Programme, the customer account serves the purpose of presenting all relevant data transparently in one place so that you can view your individual score independently. The collection of the above personal data is necessary for the implementation of the Loyalty Programme, as the design of the benefits relates to individual purchasing behaviour and commitment.  
The data specified above is processed at our service provider Salesforce Inc. (The Landmark @ One Market, Suite 300, San Francisco, CA 94105, USA) in European data centres.  
The processing is carried out exclusively on the basis of Art. 6 para. 1 lit. A DSGVO; the consent can be revoked at any time. 

Transfer of your data to a third country or international organisation  
Access or processing of the data in the USA cannot be ruled out. We have concluded an order processing agreement with Salesforce for the processing of the data. In addition, Salesforce is legally bound via the standard contractual clauses, data-processing-addendum.pdf (salesforce.com). Please refer to the Datenschutzerklärung of Salesforce Inc. for further information, see F. 10. 

Duration of storage  
The data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected (participation in the Loyalty Programme). The data required for the period of the legally prescribed retention period will be stored.  
You have the option of requesting the deletion of your data at any time. To do so, contact us by e-mail (mail@schoeffel.com). In such a case, all personal data that has been stored will be deleted. If you still have a value credit in the Loyalty Programme at this time, it can no longer be redeemed. 

D. Payment services

Depending on which payment method you select during the ordering process, we will pass on the payment data collected for this purpose to the financial institution commissioned with the payment and, if applicable, the payment service provider commissioned by us or to the selected payment service.

In some cases, the selected payment service providers also collect this data themselves if you set up an account there. In this instance, you must log in to the payment service provider using your access data during the ordering process. The privacy policy of the particular payment service provider will apply.

D. 1. Payment

D. 1.1. Paypal
When paying via PayPal, your payment data will be forwarded to PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (referred to in the following as "PayPal"), during the payment process.
You will find further data protection information in PayPal's privacy policy: https://www.paypal.com/de/webapps/mpp/ua/privacy-full

D. 1.2. Amazon Pay
If you select the payment method "Amazon Pay", your payment will be processed by the payment service provider Amazon Payments Europe s.c.a., 5 Rue Plaetis, L-2338 Luxembourg (referred to in the following as "Amazon Payments"), to whom we pass on the information you provide during the ordering process together with the information on your order as per Article 6(1)(b) of the GDPR. Your data will only be passed on for the purpose of processing your payment with the payment service provider Amazon Payments and only to the extent that it is required for this. You will find further information on Amazon Payments' data privacy regulations at: https://pay.amazon.com/de/help/201751600

D. 1.3. Payment by credit card
If you decide to pay by credit card, the data you enter will  be encrypted and passed on directly to the system of our payment service provider, ConCardis GmbH (Helfmann-Park 7, 65760 Eschborn, Germany).
You will find further information on data privacy at ConCardis GmbH here: http://www.concardis.com/datenschutz.

D. 1.4. iDEAL
iDEAL is a standard payment method for our Dutch customers. iDEAL takes you directly to your bank's payment page, where you can then process your payment. You must have an account with one of the participating banks in order to use this payment method.

You will find further information on data privacy here: https://www.ideal.nl/en/disclaimer-privacy-statement/

D. 1.5. Purchase on account

For purchases on account made through Schöffel's online shop, we transmit your data (name, address, whether you are a new or an existing customer, the order amount and, if applicable, your date of birth) to

CommDoo GmbH
Dahlener Str. 570
41239 Mönchengladbach

for the purpose of credit checks, to receive information on the assessment of the risk of payment default based on mathematical-statistical methods using address details, and for the verification of your address (deliverability check).

If the result of the credit check (the score value) is negative, you will only be shown the payment methods for which Schöffel does not have to pay in advance. We have agreed an order processing contract with CommDoo GmbH  for the transmission of data. CommDoo is also legally bound by the standard contractual clauses.

E. Cookies

Like many other websites, we also use cookies. Cookies are small text files that are transferred from a website server to your hard drive. As a result, we automatically receive certain data on your computer and Internet connection, such as the IP address, browser used and the operating system. Cookies cannot be used to start programs or transmit viruses to a computer. Based on the information contain in the cookies, we can facilitate your navigation and enable the correct display of our web pages. Under no circumstances will the data we collect be passed on to third parties or linked to personal data without your consent. Of course, you can also view our website without cookies. Internet browsers are regularly set to allow cookies. You can deactivate the use of cookies at any time in your browser settings. Please note that if you do not accept cookies, the functionality of our website may be limited.

You will find an overview of the cookies we use and the options for updating your personal preferences here:

• Microsoft Edge: https://support.microsoft.com/de-de/microsoft-edge/cookies-in-microsoft-edge-löschen-63947406-40ac-c3b8-57b9-2a946a29ae09 
• Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen" \h
• Chrome:http://support.google.com/chrome/bin/answer.py?hl=de&hlrm=en&answer=95647
• Safari:  https://support.apple.com/de-de/guide/safari/sfri11471/mac
• Opera: http://help.opera.com/Windows/10.20/de/cookies.html

You can also manage most cookies via the websites http://www.youronlinechoices.com/uk/your-ad-choices or http://www.aboutads.info/choices/#completed. Please note that individual functions such as the shopping cart will not work if you have deactivated the use of cookies.

If you have set your browser or given your consent to the use of cookies, you can see the cookies that will be used on our website's cookie banner. You can make your cookie settings on our website under "Data settings" in the footer.

F. Analysis tools, remarketing and targeting

F. 1. Google Analytics

This website uses Google Analytics, a web analysis service provides by Google Inc. (referred to in the following as "Google"). Google Analytics uses "cookies", which are small text files that are placed on your computer, to help analyse how users use the website.

The information generated by the cookie about how you use this website is usually transmitted to  a Google server in the USA and stored there. However, due to the activation of IP anonymisation on these websites, within member states of the European Union or in other contracting states of the Agreement on the European Economic Area, Google will first shorten your IP address. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. Google will use this information on behalf of the operator of this website to evaluate your use of the website, to compile reports on website activity, and to provide other services related to website activity and Internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be combined with other Google data. You can prevent the storage of cookies by setting your browser software accordingly. However, please note that in this event, you may not be able to make full use of all the functions of this website. You can also prevent Google from collecting the data generated by the cookie, referencing it to your use of the website (including your IP address), and from processing this data by downloading and installing the browser plug-in available under the following link:  Browser Add On to Deactivate Google Analytics

You can see the services' data data privacy regulations https://policies.google.com/privacy/frameworks?hl=de here: https://policies.google.com/privacy/frameworks?hl=de

In addition or as an alternative to the browser add-on, you can prevent tracking by Google Analytics on our pages by clicking on this link. This installs an opt-out cookie on your device. This prevents Google Analytics from collecting data for this website and for this browser in the future as long as the cookie remains installed on your browser. You can make your cookie settings on our website under "Data settings" in the footer.

F. 2. Google AdWords Enhanced Conversion Tracking

This website uses Google Conversion Tracking. If you have reached our website via an ad placed by Google, Google AdWords will set a cookie on your computer. The conversion tracking cookie is set when a user clicks on an ad placed by Google. These cookies become invalid after 30 days, and are not used for personal identification. If the user visits certain pages of our website before the cookie expires, we and Google can recognise that the user clicked on the ad and was redirected to this page. Every Google AdWords customer is given a different cookie, so cookies cannot be tracked via AdWords customer websites. The information collected using the conversion cookie is used to create conversion statistics for AdWords customers who have opted for conversion tracking. In addition, the email address is transmitted anonymously to Google in compliance with data protection regulations with the aim of displaying more interest-based ads. If you do not wish to participate in tracking, you can refuse the setting of a cookie required for this purpose – for instance by setting your browser to generally deactivate the automatic setting of cookies or setting your browser so that cookies are blocked by the domain "googleleadservices.com". Please note that you must not delete the opt-out cookies unless you want measuring data to be recorded. If you have deleted all your cookies in the browser, you will have to set the respective opt-out cookie again. You can make your cookie settings on our website under "Data settings" in the footer.

F. 3. Google Remarketing

This website uses the remarketing function of Google Inc. The function is used to present interest-based advertisements to website visitors within the Google advertising network. A cookie is set in the website visitor's browser that enables visitors to be recognised again when they call up any websites in the Google advertising network. Visitors may be shown advertisements on these pages that refer to content they have previously accessed on websites that use Google's remarketing function. Google has stated that it does not collect any personal data during this process.

If you still do not want to use Google's remarketing function, you can deactivate it generally by making the corresponding settings at https://www.google.com/settings/ads. Alternatively, you can deactivate the use of cookies for interest-based advertising via the advertising network initiative by following the instructions at https://www.networkadvertising.org/managing/opt_out.asp.

F. 4. Facebook Pixel / Custom Audiences

This website uses the "Visitor action pixel" of Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA ("Facebook") for measuring conversions within our website. This means that users' behaviour can be tracked after they have clicked on a provider's Facebook ad and been redirected to their website. This method is used to evaluate the effectiveness of Facebook ads for statistical and market research purposes, and can help to optimise future advertising measures.

The collected data is anonymous to us, so we are unable to draw any conclusions regarding user identity. However, the data is stored and processed by Facebook, which means it is possible to make a connection to the respective user profile, and Facebook can then use the data for its own advertising purposes as per  Facebook's Data Policy (https://www.facebook.com/about/privacy/). You can allow Facebook and its partners to place advertisements on and off Facebook. A cookie may also be stored on your computer for these purposes. Consent to the use of the visitor action pixel may only be given by users who are older than 13 years. If you are younger, please ask your legal guardian for permission.

Please click here if you wish to withdraw your consent: https://www.facebook.com/ads/preferences/entry_product=ad_settings_screen. You can make your cookie settings on our website under "Data settings" in the footer.

F. 5. Facebook Remarketing

This website uses the remarketing function "Custom Audiences" of Facebook Inc. ("Facebook"). This function is used to present Facebook interest-based ads  ("Facebook ads") to visitors to this website when visiting the Facebook social network. Facebook's remarketing tag has been implemented on this website for this purpose. This tag establishes a direct connection to the Facebook servers when you visit the website. The Facebook servers are notified that you have visited this website, and Facebook then assigns this information to your personal Facebook user account.

Further information on the collection and use of data by Facebook, on your rights in this respect, and on the options for protecting your privacy can be found in Facebook's privacy policy at: https://www.facebook.com/about/privacy/.
Alternatively, you can deactivate the remarketing function "Custom Audiences" at https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen. You must be logged in to Facebook to do so.

F. 6. Criteo Retargeting Technology

This website uses Internet retargeting technology. This makes it possible to specifically address those Internet users with advertising who are already interested in our online shop and our products. We know from studies that Internet users are more interested when personalised, interest-based advertising is displayed than in advertising without a personal reference. In retargeting, the advertising material is displayed following a cookie-based analysis of previous user behaviour. Of course, no personal data is stored here either, and the use of retargeting technology naturally also complies with the relevant legal data privacy regulations.

Opt-out link for the named service provider: https://www.criteo.com/de/privacy/disable-criteo-services-on-internet-browsers/ 
You can see the service's data privacy regulations here: https://www.criteo.com/de/privacy/

F. 7. Pinterest Retargeting Technology

This website uses the Pinterest retargeting function of Pinterest Europe Limited (Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland). The Pinterest tag (pixel) collects information on use (e.g. information on viewed articles) under the joint responsibility of Pinterest Europe Limited and Schöffel and transmits it to Pinterest Europe Limited. Under data protection law, the further processing of the data transmitted to Pinterest Europe Limited is the sole responsibility of Pinterest Europe Limited. The information that is transmitted to Pinterest Europe Limited may be assigned to you with the help of further information that Pinterest Europe Limited has stored about you, e.g. due to your ownership of an account on the social network "Pinterest". Based on the information collected via the pixel, interest-based advertisements may be displayed to you in your Pinterest account (retargeting). The information collected by the pixel may also be aggregated by Pinterest Europe Limited and the aggregated information used by Pinterest Europe Limited for its own and third-party advertising purposes. For instance, Pinterest Europe Limited may infer certain interests from your surfing behaviour on this website, and may also use this information to promote third-party offers. Pinterest Europe Limited may also combine the information collected via the pixel with other information that Pinterest Europe Limited has collected about you via other websites and / or in connection with the use of the social network "Pinterest", enabling Pinterest Europe Limited to store a profile about you. This profile may be used for advertising purposes.

If you do not want to use Pinterest's remarketing function, you can deactivate it generally by making the corresponding settings at
https://help.pinterest.com/en/article/personalization-and-data. You will find further information on data protection at Pinterest Europe Limited here:
https://policy.pinterest.com/de/privacy-policy

F. 8. LinkedIn Conversion Tracking

This website uses the analysis and conversion tracking technology of the LinkedIn platform. When the website is accessed, the data mentioned in C is transmitted.
LinkedIn's aforementioned technology can be used to show you more relevant advertising based on your interests, or to analyse our ads' user behaviour. LinkedIn also provides us with aggregated and anonymous reports of ad activity and information on how you interact with our website. Data collection is based on your active consent via the cookie banner, Article 6(1)(a) of the GDPR. Your data will be transmitted to the LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA.
We do not know and are unable to influence whether your personal data will be passed on to other recipients.
Nor do we know or are able to influence whether LinkedIn processes your personal data or how long for.

You will find further information on data protection at the LinkedIn Corporation here:
https://de.linkedin.com/legal/privacy-policy
Opt-out link for the named service provider: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out

F. 9. Hotjar

We use the web analysis service Hotjar on our website. The operating company of the Hotjar component is Hotjar Ltd. Hotjar Ltd. is a European company that is based in Malta (Hotjar Ltd, Level 2, St Julians Business Centre, 3, Elia Zammit Street, St Julians STJ 1000, Malta, Europe). Its use is based on Article 6(1)(1)(f) of the GDPR.

The information is transmitted to the Hotjar servers in Ireland and stored there. The following information is collected with Hotjar:

• the IP address of your device (in an anonymised format);
• your email address including your first and last names, if you have provided us with them;
• the referring domain;
• pages visited;
• geographical location (country only);
• date and time our website was accessed;
• screen size of your device;
• device type and browser information.

We can use this tool to track movements on our website (using so-called heat maps). For instance, we can see how far users scroll and which buttons users click on and how often. The tool can also be used to obtain feedback directly from the website users. This support provides us with valuable information that then helps us to make our website even faster and more customer-friendly.

When using Hotjar, we pay particular attention to protecting your personal data. We can see which buttons are clicked, how it progresses, how far it scrolls, the screen size of the device, the device type and browser information, the geographical location (country only), and the preferred language for displaying our website. The areas of our website where your personal data or that of third parties is displayed are automatically hidden by Hotjar, and so cannot be seen at any time.

Hotjar offers each of our users the option of a "Do Not Track header" that prevents the use of Hotjar, so no data referring to the visit to the website is recorded. This is a setting that is supported by the current versions of every standard browser. For this purpose, your browser sends a request to Hotjar telling it to deactivate the tracking of the particular user. If you use our website with various browsers, you will have to set up the "Do Not Tracker header" separately for each browser / computer.

We have agreed an order processing contract with Hotjar for the transmission of data. Hotjar is also legally bound by the standard contractual clauses.
You will find Hotjar Ltd.'s data privacy policy at: https://www.hotjar.com/privacy
Opt-out link for the named service provider:https://www.hotjar.com/opt-out

F. 10. Salesforce Sales Cloud & Marketing Cloud

Salesforce Sales Cloud is a CRM system that allows us, among other things, to manage existing and potential customers and customer contacts, and to organise sales and communication processes. The use of CRM system also enables us to analyse our customer-related processes. Customer data is stored on Salesforce's servers. Personal data may also be transmitted to the parent company of salesforce.com Germany GmbH,  salesforce.com inc., Salesforce Tower, 415 Mission Street, San Francisco, CA 94105, USA.

You will find details of the functions of Salesforce Sales Cloud here: https://www.salesforce.com/de/products/sales-cloud/overview/.

We use the Salesforce Marketing Cloud to send out our newsletters, for automated mailings (e.g. welcome mailing), and for advertising campaigns in social networks and online advertising on other websites. The newsletter subscriber's details are transmitted from the Sales Cloud to the Marketing Cloud for this purpose. The Salesforce Marketing Cloud data is stored and processed on Salesforce servers in the USA. However, with the nine standard contractual clauses of the EU Commission as per Article 46(2)(c) EU GDPR and binding internal data privacy regulations as per Article 46(2b) and Article 47 EU GDPR (known as the binding corporate rules), Salesforce also undertakes to provide an appropriate level of data privacy. The Binding Corporate Rules (BCR) have been approved by the French Data Protection Authority. These are binding corporate rules that legitimise the company's internal data transfer to third countries outside the EU and the EEA. You will find the details here: https://www.salesforce.com/de/blog/2020/07/die-binding-corporate-rules-von-salesforce-erfuellen-hoechste-da.html.

We use so-called web beacons and pixels to receive information on users' click behaviour via the Marketing Cloud. Interaction data is stored in the Marketing Cloud directly with the user so we are able to send your targeted advertising via the AdStudio, e.g. also via social networks. We can specify the groups of users to whom the advertisements are to be displayed more closely ("Custom Audiences"). For this purpose, personal data is shared with Facebook (including Instagram), Google, Pinterest and LinkedIn after pseudonymisation in accordance with SHA 256.

The processing of your data in the Salesforce Sales Cloud is based, where relevant, on our legitimate interest in using a CRM system as per Article 6(1)(1)(f) EU GDPR, otherwise on your consent as per Article 6(1)(1)(a) EU GDPR.

The processing of your data in the Salesforce Marketing Cloud is based on your consent as per Article 6(1)(1)(a) EU GDPR.

Transmitting your details to a third country or international organisation

It is possible that data may be accessed or processed in the USA. We have agreed an order processing contract with Salesforce for the transmission of data. Salesforce is also legally bound by the standard contractual clauses, data-processing-addendum.pdf (salesforce.com). Please refer to the Privacy policy of Salesforce Inc. for further information.

If you do not wish to use the service, you are welcome to contact us by email at any time mail@schoeffel.com.

You will find further details in Salesforce's privacy policy: https://www.salesforce.com/de/company/privacy/

F. 11. Microsoft Bing Ads

Our online offer also uses conversion tracking of Microsoft (Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA). Microsoft Bing Ads sets a cookie on your computer if you have reached our website via a Microsoft Bing ad. This allows Microsoft Bing and ourselves to recognise that someone has clicked on an ad, has been redirected to our website, and has reached a previously determined landing page (conversion page). We only learn the total number of users who clicked on a Bing ad and were then redirected to the conversion page. We are not given any personal information on the user's identity. If you do not wish to participate in the tracking process, you can also decline the setting of the cookie required for this purpose – for instance with a browser setting that generally deactivates the automatic setting of cookies.

Opt-out link for the named service provider: http://choice.microsoft.com/de-de/opt-out
You will find further information on data privacy and the cookies used by Microsoft Bing on Microsoft's website: https://privacy.microsoft.com/de-de/privacystatement.

F.12. Channable

We use on our website Channable of ProductImpulse B.V., in Kromme Nieuwegracht 66, 3512 HL Utrecht. This is a provider of e-commerce solutions for feed management and SEA automation.

Channable is a feed management system with which complex product data can be quickly and easily structured, analyzed and optimized and made available for various shopping and marketing channels.

We have concluded an order processing agreement with Channable for the transfer of data.

Details about the functions of Channable can be found here: https://www.channable.com/ .
You can also find detailed information in the Privacy Policy of Channable at: https://www.channable.com/privacy-policy

G. Other service providers

G. 1. YouTube

Our website contains various videos that provide you with information. When you visit a page that has an embedded video, a connection is established to the YouTube servers and the content stored on http://www.YouTube.com displayed on our website by notifying your browser. The videos are all integrated in the "extended data protection mode", i.e. no data about you as a user is transmitted to YouTube if you do not play the videos. Data is only transferred when you play the videos. We have no influence over this data transmission. When you visit the website, YouTube receives the information that you have accessed the corresponding subpage on our website, and personal data is transmitted to YouTube.

This happens regardless of whether YouTube has provided a user account that you are logged in on or not. If you are logged in as a member of YouTube, YouTube will assign this information to your personal user account. Your use of the service, such as clicking the start button of a video, is also assigned to your user account.

YouTube stores your data as usage profiles and uses them for advertising and market research purposes, and / or the needs-based design of its website. This evaluation is carried out in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users in the social network of your activities on our website.

Our videos are available to you in order to provide you with information on our services. Video playbacks require significant amounts of data. With a high number of visitors, it is necessary to provide a high-performance infrastructure. This is why the videos are integrated via YouTube.

When you visit the website, your personal data is transmitted to YouTube, LLC 901 Cherry Ave., 94066 San Bruno, CA, USA, a company of Google LLC, Amphitheatre Parkway, Mountain View, CA 94043, USA.

You can prevent the reference to your account by logging out of your YouTube account and other user accounts of the YouTube LLC and Google Inc. companies, and deleting the companies' cookies from your browser. You have the right to object to the creation of these user profiles. You need to contact YouTube in order to exercise this right.

For further information on the purpose and scope of data collection and processing by YouTube, please refer to its privacy policy, where you will also find further information on your rights and setting options for the protection of your privacy: https://www.google.de/intl/de/policies/privacy/

G. 2.Google Maps

The component "Google Maps" of Google LLC., 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA, "Google" in the following, is used to display the location of stationary merchants.

Google sets cookies when displaying the merchant locations with the "Google Maps" component in order to process user settings and data when displaying the map and the associated functions. It is possible that Google's external servers in the USA may be used for this.

The connection allows Google to recognise the website from which a request is sent, and to which IP address the representation of the journey is transmitted.

If you do not agree with this, you have the option of setting the browser to prevent or limit the installation of cookies. Any cookies that have already been set can also be deleted at any time. The settings for this depend on the particular browser. With Flash cookies, rather than setting the browser to prevent processing, the appropriate settings need to be made in Flash player. If you prevent the installation of cookies or limit their processing, it may not be possible to fully use the display of the merchant locations.

The use of "Google Maps" and of the information obtained via "Google Maps" is carried out in accordance with Google's Terms of Use and the additional terms and conditions for Google Maps.

You can generally object to the future processing of the data concerning you, which is based on Article 6(1)(f) of the GDPR, at any time under the terms of Article 21 of the FDPA. In particular, you may object to processing for direct marketing purposes.

If you do not agree to your data being processed, you can deactivate the service of "Google Maps" and in this way prevent the transmission of data to Google. To do so, you must deactivate the Java Script function in your browser. Please note, however, that in this event you will not be able to display maps. Google offers the following Opt-out function. You also have the right to object to the creation of these user profiles. You need to contact Google in order to exercise this right.

For further information on the purpose and scope of data collection and processing by the plug-in provider, please refer to its privacy policy, where you will also find further information on your rights and setting options for the protection of your privacy: http://www.google.de/intl/de/policies/privacy.

G. 3. Vimeo

We use the services of the provider Vimeo LLC, based at 555 West 18th Street, New York, New York 10011.

A connection to the Vimeo servers is created whenever you call up a Vimeo video. This tells the Vimeo servers which of our Internet pages you have visited. If you are logged in as a member of Vimeo, Vimeo will assign this information to your personal user account. When you click on the start button of a video, this information can also be assigned to an existing user account.
You can prevent the assignment to your account by logging out of your Vimeo user account before you use our website and deleting the companies' corresponding cookies. You can also prevent videos from playing by deactivating the "JavaScript" functionality in your browser. If you do so, though, you will not be able to watch any videos. Vimeo offers you the Opt-out function in its cookie policy.

The use of Vimeo is in the interest of an appealing presentation of our online offers. This constitutes a legitimate interest under the terms of Article (6)(1)(f) of the GDPR. If the corresponding consent has been requested, processing will take place exclusively under the terms of Article 6(1)(A) of the GDPR. Consent can be revoked at any time.

Vimeo’s data privacy policy provides further information on its collection and use of data: https://vimeo.com/privacy.

G. 4. TikTok

We use the TikTok Pixel on our website. The TikTok Pixel is a TikTok advertiser tool of the two providers 

• TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland, and 
• TikTok Information Technologies UK Limited, WeWork, 125 Kingsway, London, WC2B 6NH, United Kingdom (both jointly referred to in the following as "TikTok"). 

The TikTok Pixel is a JavaScript code that allows us to understand and track visitor activity on our website. The TikTok Pixel collects and processes information on visitors to our website or the devices they use (known as event data). 

The event data collected by the TikTok Pixel is used to target our advertisements, to improve ad delivery, and for personalised advertising. For this purpose, the event data collected on our website using the TikTok Pixel is transmitted to Facebook TikTok. 

Some of this event data is information that is stored on the device you are using. Cookies are also used via the TikTok Pixel that store information on your end device. Your consent is required before any information is stored by the TikTok Pixel or any information accessed.

You can revoke your consent at any time in our Consent Management Banner. 

This collection and transmission of event data is undertaken by us and TikTok with joint responsibility. We have an agreement with TikTok on processing with joint responsibility that sets out the distribution of data protection obligations between us and TikTok. In this agreement, we and TikTok have agreed, among other things, that 

• we are responsible for providing you with all information as per Article 13, 14 of the GDPR on the joint processing of personal data; 
• TikTok is responsible for enabling the rights of data subjects as per Articles 15 to 2 of the GDPR with regard to the personal data stored by Facebook Ireland after the joint processing. 

You can access the agreement between us and TikTok at https://ads.tiktok.com/i18n/official/policy/jurisdiction-specific-terms. 

TikTok has sole responsibility for the processing of the transmitted event data following transmission. 

For further information on how TikTok processes personal data and how to exercise your rights towards TikTok, please refer to TikTok's privacy policy at https://www.tiktok.com/legal/privacy-policy?lang=de-DE. 

G. 5. Fan pages

We operate fan pages on the social networks Facebook, Instagram, LinkedIn and Pinterest. As the operator of these fan pages, we are jointly responsible with the operators of these networks under the terms of Article 4(7) of the GDPR. When you visit one of our fan pages, the responsible parties process personal data. As one of the parties responsible for the fan pages, we have made agreements with the social networks that regulate the conditions for the use of these pages, among other things. We have integrated this privacy policy in the relevant fan pages, where you will find further information. For more information about the processing of personal data on our social media channels, please click here: Privacypolicy for social media

G. 6. ReCAPTCHA

We use the Google, Inc. "reCAPTCHA" service to protect the ordering process in our online shop. The use of this service lets us know whether the corresponding input is of human origin or is abusive from automated machine processing. To the best of our knowledge, the referrer URL, IP address, the behaviour of the website visitors, information on the operating system, browser and length of stay, cookies, display instructions and scripts, the user's input behaviour and mouse movements in the "reCAPTCHA" checkbox are passed on to "Google".

Google uses the information provided in this way e.g. to digitise books and other printed matter, and to optimise services such as Google Street View and Google Maps (e.g. house numbers and street name recognition). The IP address transmitted with "reCAPTCHA" will not be merged with other data from Google unless you are logged in to your Google account at the time of using the "reCAPTCHA" plug-in.

Your personal data is processed in accordance with Article 6(1)(f) of the GDPR (legitimate interest: verification of the authenticity of website visitors).

We do not know whether Google stores the above data, and if it does, how long for.

If you wish to prevent Google from transmitting and storing this data concerning you and your behaviour on our website, you need to log out of Google before you visit our website or use the reCAPTCHA plug-in. Google also offers you an Opt-out function.

The information obtained from using the "reCAPTCHA" service is used in accordance with Google's privacy policy: https://www.google.com/intl/de/policies/privacy/.

G.7. AWIN

Based on your express consent as per Article 6(1)(a) of the GDPR, we use components of the AWIN company on our website. AWIN is a German affiliate network, and serves as the interface between merchants and affiliates. AWIN's operating company is AWIN AG, Eichhornstraße 3, 10785 Berlin, Germany.

AWIN sets a cookie on the information technology system of the person in question. We explained earlier what cookies are. AWIN's tracking cookie does not store any personal data. All that is stored is the affiliate's identification number, i.e. the partner mediating the potential customer, the serial number of the visitor to a website, and the clicked advertising material. This data is stored for the purpose of processing commission payments between a merchant and the affiliate that are then processed by the affiliate network, i.e. AWIN.

You can prevent the setting of cookies by our website, as already described above, at any time by setting the Internet browser used accordingly and permanently objecting to the setting of cookies. Setting the Internet browser in this manner would also prevent AWIN from setting a cookie on your information technology system. Any cookies that AWIN has already set can be deleted at any time through an Internet browser or other software programs.

We have agreed an order processing contract with AWIN for the transmission of data. AWIN is also legally bound by the standard contractual clauses.
AWIN's data privacy regulations are available at https://www.awin.com/de/rechtliches/privacy-policy.

You will find further details and the option for setting an opt-out cookie at: https://www.awin.com/de/rechtliches/optout.

G. 8. SAIZ

We use the services of SAIZ (SAIZ GmbH, Nostiltzstr. 23, 10961 Berlin, Germany, hereinafter referred to as "SAIZ") on our website. SAIZ collects, processes, and stores personal data from visitors to the website for the purposes of providing personalized size and fit recommendations, statistical analysis, and business cost optimization. When visiting our website and after giving your consent (as described below), SAIZ processes the following personal data in particular:

• Age
• Gender
• Height in cm
• Chest circumference (if applicable)
• Hip circumference (if applicable)
• Waist circumference (if applicable)
• Weight
• Information on body type and body shape
• IP address
• Browser information
• Accessed content
• Date and time of visit
• Session ID
• Purchase information
• Referrer URL
• Device operating system

SAIZ collects this data via Persistent Cookies stored in the visitor's local browser. SAIZ stores the profiles of the respective visitor in the local browser of the website visitor. The collected data is processed by SAIZ within the European Union. The provision is not legally or contractually required or essential for the conclusion of a contract. There is no obligation to provide this data. If the data is not provided, we cannot offer the requested content and give no size recommendation. The purposes of data collection and processing by SAIZ are:

• Size calculation
• Sales promotion or revenue increase through cost optimization for our company (size recommendation, fit testing of products)
• Marketing purposes (personalization and fit testing)
• Analytical purposes (conversion tracking)

The recipients of the collected data are SAIZ GmbH and its external service providers, such as DataDog (HQ Europe: 4th Floor, 1 Dockland Central, Guild Street, Dublin 1, D01 E4XO Ireland) and Microsoft (HQ Europe: Konrad-Zuse-Str.1, 85716 Unterschleißheim, Germany), with appropriate agreements ensuring that the collected personal data is only stored on servers of Microsoft and DataDog in the EU. Nonetheless, it cannot be guaranteed with 100% certainty that no data transfer to a third country occurs during the use of Microsoft and DataDog by SAIZ as their subcontractor. Should there be processing of personal data in a third country, it may only take place if the special conditions of Art. 44 et seq. GDPR are met. This includes, in particular, the conclusion of Standard Data Protection Clauses ("EU-SCC") and SAIZ has conducted a so-called "Transfer Impact Assessment" ("TIA").

The legal basis required for the processing of personal data by SAIZ is Art. 6 para. 1 sentence 1 lit. a GDPR (consent). In other words, the personal data of the respective website visitor is processed only after prior consent of the website visitor. This consent is obtained via the cookie banner. You can withdraw your consent at any time via the privacy settings.

The personal data of the visitor will be deleted as soon as the processing purposes for which they were collected have been achieved or if you have withdrawn your consent to data collection. For more information on data processing by SAIZ, please visit: https://www.saiz.io/privacy

G. 9. FACT-Finder

FACT-Finder, a JavaScript code from Omikron Data Quality GmbH, Habermehlstr. 17, 75172 Pforzheim, Germany, is integrated on our website. We use FACT-Finder to make it easier for you to find our products in the shop and to make personal product recommendations.

We process the following data to achieve this:

• your shopping history and interactions with our store (especially the items and product categories you have viewed, searched for or purchased)
• user and / or session ID (in particular your IP address)

We pass all the collected information on to Omikron Data Quality GmbH, where it is stored anonymously for the duration of the contract between Omikron Data Quality GmbH and ourselves.

Our user of the FACT-Finder and the associated data processing serve our legitimate interest in providing you with the best possible customer experience in our shop.

We have agreed an order processing contract for the transmission of data. FACT-Finder's data privacy regulations are available at: https://www.fact-finder.de/dsgvo. You can install a Java-Script blocker to prevent FACT-Finder from executing Java-Script code altogether (e.g. www.ghostery.com).

G. 10. Squarelovin

We use Squarelovin, the user-generated content management tool (Anchor Media GmbH, Budapester Str. 47, 20359 Hamburg) to display tour Instagram content on our website, and for organising and obtaining rights of use.

Squarelovin enables us to display content selected by us that has been published by users on the social media platforms (known as user-generated content) on our website. We check, select and then store the user-generated content (e.g. photos that mention or hashtag our company) in Squarelovin with the consent of the relevant Instagram users. Squarelovin's servers then integrate this user-generated content on our website. The selected content can then be displayed in galleries, on product pages or elsewhere on our website. Squarelovin uses cookies to integrate content for analysis and statistical purposes provided that you have given your consent to this. The integration with Squarelovin does not mean that any data concerning visitors to our website is transmitted to Instagram.

We have agreed an order processing contract with Squarelovin for the transmission of data. Squarelovin is also legally bound by the standard contractual clauses. Further information on Squarelovin's privacy policy is available at squarelovin.com/privacy/. Information on obtain rights of use and on the use of user-generated content is stored at sqln.io/edg.

H. Legal basis for processing

When processing personal data with the data subject's consent, the legal basis for this is Article 6(1)(1)(a) of the GDPR.

When processing personal data that is required for the performance of a contract in which the data subject is a party, Article 6(1)(1)(b) of the GDPR is the legal basis. This regulation also includes processing operations that are necessary for the performance of pre-contractual measures.

If the personal data needs to be processed for the fulfilment of a legal obligation to which our company is subject, Article 6(1)(1)(c) of the GDPR is the legal basis.

If the processing is necessary in order to safeguard a legitimate interest of our company or of a third party and the interests, fundamental rights and freedoms of the data subject do not outweigh the first interest, Article 6(1)(1)(f) of the GDPR is the legal basis for processing. The legitimate interest of our company lies in the execution of our business activities and in the analysis, optimisation and maintenance of the security of our online offer.

I. Data security

All personal data is encrypted before it leaves your PC and is transmitted via the Internet. Schöffel uses the recognised "Secure Socket Layer" (SSL) transmission with 256-bit encryption for this purpose. This means that no outsiders are able to read the encrypted information on your order, your name, your address, your credit card or your bank details or any other data transmitted to us (on our website) .

J. Links to other websites

Our website contains links to other websites. We have no influence over whether their operators comply with the data privacy regulations. Even though the content is carefully checked first, we are unable to assume any liability for external links to third-party content.

K. Retention periods

Personal data is only kept for as long as is necessary for the processing purposes described except when shorter or longer retention periods are permitted by law.

Under the terms of the German Commercial Code (HGB) and the Fiscal Code (AO), we are subject to various legal retention and documentation obligations. The retention or documentation periods specified in the respective legal order may continue for between 6 and 10 years after the end of the business relationship or pre-contractual legal relationship.

It is also possible that a longer retention period may be required. This would be the case, for instance, in the event of preservation of evidence within the framework of the statute of limitations, when the regulation limitation period is three years but may also apply for up to 30.

L. Changes to our Data Privacy Regulations

We reserve the right to amend this privacy policy from time to time so that it always complies with current legal requirements, or to implement changes to our services in the privacy policy, for instance if we introduce new services. The new privacy policy, which we will publish here, will then apply for your new visit.