Privacy policy according to the DSGVO

Name and address of the responsible person

Perpedes GmbH
Härtwasen 8-14
73250 Lenningen
Germany

Phone: 07021/73830-0
E-mail: info@perpedes.de
Website: www.perpedes.de

is the responsible party within the meaning of the EU General Data Protection Regulation (GDPR) and other national data protection laws.

Name and address of the data protection officer

The data protection officer of the responsible party is:

Bosko Jokanovic
Perpedes GmbH
Härtwasen 8-14
73250 Lenningen, Germany
Tel.: 07021/73830-294
E-mail: dsb@perpedes.de
www.perpedes.de

I. General information on data processing

1. scope of the processing of personal data

As a matter of principle, we collect and use personal data of the users of our homepage only insofar as this is necessary for the provision of a functional website, our contents and services. 

In principle, the collection and use of personal data of our users only after their consent. An exception to this principle applies in cases where the processing of data is permitted by legal regulations or where obtaining prior consent is not possible for factual reasons.

2. legal basis for the processing of personal data

The legal bases for the processing of personal data result in principle from: 

Art. 6 (1) p. 1 lit. a DSGVO when obtaining the consent of the data subject.

Art. 6 para. 1 p. 1 lit. b DSGVO for processing operations that serve to fulfill a contract to which the data subject is a party. Included here are processing operations that are necessary for the implementation of pre-contractual measures.

Art. 6 (1) sentence 1 lit. c DSGVO for processing operations that are necessary for the fulfillment of a legal obligation. 

Art. 6 (1) p. 1 lit. d DSGVO if vital interests of the data subject or another natural person make processing of personal data necessary. 

Art. 6 para. 1 p. 1 lit. f DSGVO, if the processing is necessary to protect a legitimate interest of our company or a third party and the interests, fundamental rights and freedoms of the data subject do not override the former interest.

3. data deletion and storage period

Users' personal data will be deleted or blocked as soon as the purpose for storing it no longer applies. Storage beyond this may take place if this has been provided for by the European or national legislator in Union regulations, laws or other regulations to which the responsible party is subject. Data will also be blocked or deleted if a storage period prescribed by the aforementioned standards expires, unless there is a need for further storage of the data for the conclusion or performance of a contract.

II. Use of our website, general information 

1. description and scope of data processing

Each time our website is accessed, our system automatically collects data and information from the user's computer system. The following information is collected in the process: 

Information about the browser type and the version used
Operating system of the user 
Internet service provider of the user
IP address of the user 
Date and time of access
Websites from which the user's system accesses our website
Websites that are accessed by the user's system via our website
The described data is stored in the log files of our system. This data is not stored together with other personal data of the user.

2. purpose and legal basis for data processing 

The temporary storage of the IP address by our system is necessary to enable delivery of the website to the user's computer. For this purpose, the user's IP address must remain stored for the duration of the session. 

The storage in log files is done to ensure the functionality of the website. In addition, we use the data to optimize the website and to ensure the security of our information technology systems. An evaluation of the data for marketing purposes does not take place in this context.

The legal basis for the temporary storage of the data and the log files is Art. 6 para. 1 p. 1 lit. f DSGVO.

The collection of their personal data for the provision of our website and the storage of the data in log files is mandatory for the operation of the website. Therefore, there is no possibility for the user to object. 

3. duration of storage

Your data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected. If your data is collected to ensure the provision of the website, the data will be deleted when the respective session has ended. 

If your data is stored in log files, it will be deleted after seven days at the latest. Storage beyond this period is possible, in which case the IP addresses of the users are deleted or alienated. In this way, it is no longer possible to identify the calling client.

III. General information on the use of cookies

We use cookies on our website. Cookies are text files that are stored in the Internet browser or by the Internet browser on the user's computer system. When you access a website, a cookie may be stored on your operating system. This contains a characteristic string of characters that enables the browser to be uniquely identified when the website is called up again.

Cookies are used by us to make our homepage more user-friendly. Some elements of our website require that the browser can be identified even after a page change. 

The following data is stored and transmitted:
Items in a shopping cart, log-in information.

The legal basis for the processing of personal data using cookies results from Art. 6 para. 1 p. 1 lit. f DSGVO. The purpose of the use of technically necessary cookies is to simplify the use of our website. 

We point out that isolated functions of our website can only be offered using cookies.

These are the following applications: 
Shopping cart, remembering search terms; saving favorites.

We do not use user data collected through technically necessary cookies to create user profiles.

Cookies are stored on the user's computer and transmitted to our site by the user. As a user, you therefore have control over the use of cookies. You can restrict or deactivate the transmission of cookies by making changes in the settings of your Internet browser. There, stored cookies can also be deleted again. Please note that you may no longer be able to use all the functions of our website if you disable cookies.

The legal basis for the processing of personal data using cookies for analysis and advertising purposes is Art. 6 para. 1 p. 1 lit. a DSGVO if the user has given his consent in this regard.

IV. Consent Management via Usercentrics

We have integrated the consent management tool "Usercentrics" (https://usercentrics.com/de/) of Usercentrics GmbH, Sendlinger Straße 7, 80331 Munich, Germany, Tel.: + 49 89 21 54 01 20, Email: contact@usercentrics.com integrated on our website to request consent for data processing or the use of cookies or comparable functions. With the help of "Usercentrics", you have the option of granting or rejecting your consent for certain functionalities of our website, e.g. for the purpose of integrating external elements, integrating streaming content, statistical analysis, range measurement and personalized advertising. You can use "Usercentrics" to give or reject your consent for all functions or to give your consent for individual purposes or individual functions. The settings you have made can also be changed by you afterwards. The purpose of integrating "Usercentrics" is to allow users of our website to decide on the aforementioned matters and, in the course of their continued use of our website, to offer them the opportunity to change settings they have already made.

When you enter our website, the following personal data is transferred to Usercentrics:

Your consent(s) or revocation of your consent(s).
Your IP address
Information about your browser
Information about your terminal device
Time of your visit to the website
Furthermore, Usercentrics stores a cookie in your browser in order to be able to assign the consent(s) given or their revocation to you. The data collected in this way is stored until you request us to delete it, delete the Usercentrics cookie yourself or the purpose for storing the data no longer applies. Mandatory legal storage obligations remain unaffected.

 "Usercentrics" uses the Google Cloud platform from Google Ireland Limited. The server locations are in Frankfurt and Belgium. Here, a third country transfer to the USA cannot be ruled out. However, we have concluded an order processing contract with the provider, as well as standard data protection contract clauses. 

The legal basis for the processing is Art. 6 para. 1 p. 1 lit. c) in conjunction with. Art. 6 para. 3 p. 1 lit. a) in conjunction with. Art. 7 para. 1 DSGVO and alternatively lit. f). By processing the data, we help our customers (according to DSGVO the responsible party) to fulfill their legal obligations (e.g. obligation to provide evidence). Our legitimate interests in the processing lie in the storage of user settings and preferences in relation to the use of cookies and other functionalities.

For more information on data processing by "Usercentrics", please refer to the privacy policy at usercentrics.com/de/datenschutzerklaerung/ .

You can adjust your cookie settings at any time by clicking the button at the bottom right of the screen.

V. Your rights / rights of the data subject

According to the EU General Data Protection Regulation, you have the following rights as a data subject: 

1. right to information
You have the right to receive information from us as the responsible party as to whether and which personal data concerning you are being processed by us, as well as further information in accordance with the legal requirements under Art. 13, 14 DSGVO.

You could assert your right to information at: dsb@perpedes.de. 

2. right to rectification
If the personal data processed by us and concerning you is incorrect or incomplete, you have a right to rectification and/or completion vis-à-vis us. The correction will be made without delay.

3. right to restriction 
You have the right to restrict the processing of personal data concerning you in accordance with the legal provisions (Art. 18 DSGVO).

4. right to deletion 
If the reasons outlined in Art. 17 DSGVO apply, you may request that the personal data concerning you be deleted without delay. 

We would like to point out that the right to erasure does not exist insofar as the processing is necessary for one of the exceptional circumstances mentioned in Art. 17 (3).

5. right to information
If you have asserted the right to rectification, erasure or restriction of processing, we are obliged to inform all recipients to whom the personal data concerning you have been disclosed of this rectification or erasure of the data or restriction of processing, unless this proves impossible or involves a disproportionate effort. Furthermore, you have the right to be informed about these recipients.

6. right to data portability
According to the GDPR, you also have the right to receive the personal data concerning you that has been provided to us in a structured, common and machine-readable format or to request its transfer to another controller.

7. right to revoke the declaration of consent under data protection law.
You have the right to revoke your declaration of consent under data protection law at any time. We point out that the revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation. 

8. right of objection
Furthermore, you have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data relating to you which is carried out on the basis of Article 6 (1) sentence 1 lit. e or f DSGVO.

9 Automated decision in individual cases including profiling.
Under the EU General Data Protection Regulation, you also have the right not to be subject to a decision based solely on automated processing - including profiling - which produces legal effects concerning you or similarly significantly affects you.

10. right to lodge a complaint with a supervisory authority
Finally, if you consider that the processing of personal data concerning you infringes the GDPR, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your residence, workplace or the place of the alleged infringement. 

VI. Data transfer outside the EU

The GDPR ensures an equally high level of data protection within the European Union. When selecting our service providers, we therefore rely on European partners wherever possible if your personal data is to be processed. Only in exceptional cases will we have data processed outside the European Union in the context of using third-party services. We will only allow your data to be processed in a third country if the special requirements of Art. 44 et seq. DSGVO are fulfilled. This means that the processing of your data may then only take place on the basis of special guarantees, such as the officially recognized determination by the EU Commission of a level of data protection corresponding to the EU or the observance of officially recognized special contractual obligations, the so-called "standard data protection clauses".

VII. Newsletter

1. general
You can subscribe to a free newsletter on our homepage, with which we inform you about our current interesting offers. The advertised goods and services are named in the declaration of consent. The data that you enter in the input mask during registration will be transmitted to us. 

We collect the following data on the basis of the consent obtained from you during the registration process:

E-mail address*
Salutation*
First name*
last name*
Company*
Perpedes customer number, if available
Country*
I am particularly interested in these topics
The personal data marked with an asterisk are mandatory.

Furthermore, the following data is stored at the moment of transmission:
IP address of the calling computer, date and time of registration. 

Your data will not be passed on in connection with the data processing for sending newsletters. The data is used exclusively for sending the newsletter.

2. double opt-in and logging
The registration for our newsletter takes place in a so-called double opt-in procedure. After registration, you will receive an e-mail in which you are asked to confirm your registration. This confirmation is necessary so that no one can register with other e-mail addresses.

The registrations for the newsletter are logged in order to be able to prove the registration process according to the legal requirements. This includes the storage of the registration and confirmation time, as well as the IP address.

Legal basis 
The legal basis for the processing of the data is Art. 6 para. 1 p. 1 lit. a DSGVO if the user has given his consent. The collection of the user's email address serves to deliver the newsletter. 

4 Deletion, revocation and objection 
Your data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected. Accordingly, your e-mail address will be stored as long as the subscription to the newsletter is active. The subscription to the newsletter can be terminated by you at any time by revoking your consent. For this purpose, you will find a corresponding link in each newsletter. 

We would also like to point out that you can object to the future processing of your personal data in accordance with the legal requirements pursuant to Art. 21 DSGVO at any time. The objection can be made in particular against the processing for purposes of direct advertising.

5. dispatch service provider CleverReach and statistical collection
This website uses CleverReach to send newsletters. The provider is CleverReach GmbH & Co. KG, Mühlenstr. 43, 26180 Rastede. CleverReach is a service with which the newsletter dispatch can be organized and analyzed. The data you enter for the purpose of receiving newsletters (e.g. e-mail address) is stored on CleverReach's servers in Germany or Ireland.
Our newsletters sent with CleverReach allow us to analyze the behavior of the newsletter recipients. Among other things, we can analyze how many recipients have opened the newsletter message and how often which link in the newsletter was clicked. With the help of so-called conversion tracking, it can also be analyzed whether a predefined action (e.g. purchase of a product on our website) has taken place after clicking on the link in the newsletter. For more information on data analysis through CleverReach newsletters, please visit:

www.cleverreach.com/de/funktionen/reporting-und-tracking/.

The data processing is based on your consent (Art. 6 para. 1 p. 1 lit. a DSGVO). You can revoke this consent at any time in your user profile. The legality of the data processing operations already carried out remains unaffected by the revocation.

If you do not want any analysis by CleverReach, you must unsubscribe from the newsletter. For this purpose, we provide a corresponding link in each newsletter message. Furthermore, you can also unsubscribe from the newsletter directly on the website.

The data you provide for the purpose of receiving the newsletter will be stored by us until you unsubscribe from the newsletter and will be deleted from our servers as well as from the servers of CleverReach after you unsubscribe from the newsletter. Data that has been stored by us for other purposes (e.g. e-mail addresses for the member area) remains unaffected by this.

For more details, please refer to CleverReach's privacy policy at: www.cleverreach.com/de/datenschutz/.

We have concluded an order data processing contract with CleverReach and fully implement the strict requirements of the German data protection authorities when using CleverReach.
 

VIII. Electronic contact

If you wish to contact us, a contact form is available on our homepage, which you can use to contact us electronically. The data entered in the input mask will be transmitted to us and stored. These data are:

Salutation*
first name*,
last name*, 
Company*, 
street and house number*, 
postal code* and city*
E-mail address*.
Your request*
Your message*
The personal data marked with an asterisk are mandatory.

At the time of sending the message, the following data will also be stored:
The IP address of the user, date and time of registration.

Furthermore, it is possible to contact us via the e-mail address provided. In this case, the user's personal data transmitted with the e-mail will be stored. 

Your data will not be passed on to third parties in this context; the data will be used exclusively for processing the establishment of communication.

The legal basis for the processing of the contact request and its handling is regularly Art. 6 para. 1 p.1 lit. b DSGVO.
 
If further personal data is processed during the sending process, this is only used to prevent misuse of the contact form and to ensure the security of our information technology systems.

Your data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected. For the personal data from the input mask of the contact form and those sent by e-mail, this is the case when the respective conversation with the user has ended. The conversation is ended when it is clear from the circumstances that the matter in question has been conclusively clarified. 

The additional personal data collected during the sending process will be deleted after a period of seven days at the latest.

IX. Registration

You have the option of registering on our homepage by entering your personal data. The data is entered into an input mask, transmitted to us and stored. The data will not be passed on to third parties. The following data is collected during the registration process:

E-mail address*
First name*
Last name*
Company*
Customer number
Country*
Street* and house number*
Address addition
Postcode* and city*
Telephone number
E-mail address for invoices
Sales tax number*
The personal data marked with an asterisk are mandatory.

The following data is also stored at the time of registration:
The user's IP address, date and time of registration.

During the registration process, we obtain your consent to the processing of this data, whereby the legal basis for the processing of your data is Art. 6 (1) p. 1 lit. a DSGVO. 

If the registration serves the fulfillment of a contract to which the user is a party or the implementation of pre-contractual measures, the additional legal basis for the processing of the data is Art. 6 para. 1 p. 1 lit. b DSGVO.

After registration, you have the opportunity to view our prices and order products. In addition, registration gives you access to our download material.

Your data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected. This is the case for the data collected during the registration process when the registration on our website is cancelled or modified. 

This is the case for data collected during the registration process for the fulfillment of a contract or for the implementation of pre-contractual measures when the data is no longer necessary for the implementation of the contract. Even after the conclusion of the contract, there may be a need to store personal data of the contractual partner in order to fulfill contractual or legal obligations.

Continuing obligations require the storage of personal data during the term of the contract. In addition, warranty periods must be observed and data must be stored for tax purposes. It is not possible to determine in general terms which storage periods must be observed in this regard, but must be determined on a case-by-case basis for the contracts and contracting parties concluded in each case.

You have the option to cancel your registration on our homepage at any time. Furthermore, you can also have the data stored about you changed at any time. Please contact us for this purpose. Please use the contact form on our homepage or call us. 

If the data is required for the performance of a contract or for the implementation of pre-contractual measures, early deletion of the data is only possible insofar as contractual or legal obligations do not prevent deletion. 

X. Career portal

On this website, we display job offers to which interested parties can apply by e-mail. Unsolicited applications can also be sent to us by e-mail. In the event of an incoming application, we process the data received from the applicant exclusively for the purpose of processing for potential filling of the vacant position.

The primary legal basis for this is Article 88 DSGVO in conjunction with Section 26 (1) BDSG.

Within our company, only those persons who are responsible for processing the application procedure and who are the decision-makers regarding the application outcome will have access to your personal data.

We delete your personal data as soon as they are no longer required for the above-mentioned purposes. If we conclude an employment contract with an applicant, the transmitted data will be stored for the purpose of processing the employment relationship in compliance with the statutory provisions. If no employment contract is concluded with the applicant, the application documents will be deleted no later than six months after notification of the rejection decision, provided that no other legitimate interests of the controller conflict with such deletion. Other legitimate interest in this sense is, for example, a duty to provide evidence in proceedings under the General Equal Treatment Act (AGG).

Your personal data will not be passed on to third parties.

XI. store

You have the possibility to order our goods and services directly on our homepage. In the course of the ordering process, we use the contact data you provided during registration.

At the time of the ordering process, the following data is also stored:
IP address of the user, date and time of the order.

If you would like to order in our store, it is necessary for the conclusion of the contract that you provide your personal data, which we need for the processing of your order. 
Within the company, access to your data is granted to those departments that need it to fulfill our contractual and legal obligations. Service providers and vicarious agents employed by us may also receive data for these purposes. These are in particular the following companies:
Service providers for order processing (services in the deposit area), IT services (server hosting), debt collection and sales and marketing. 

In addition, we pass on your data to the corresponding payment and delivery service providers for the processing of the contract. The legal basis for this is Art. 6 para. 1 p. 1 lit. b DSGVO. 

Furthermore, when ordering insoles, in individual cases your data will be passed on to Perpedes Fußstützen GmbH for the provision of services (e.g. grinding, gluing). Please note that when you place the corresponding order, you also enter into a contract with Perpedes Fußstützen Gmbh. The legal basis for the transfer and processing of the data is thereby Art. 6 para. 1 p. 1 lit. b DSGVO. Further information on the processing of your personal data at Perpedes Fußstützen Gmbh can be found here.

We are required by commercial and tax law to store your address, payment and order data for a period of 10 years. However, we restrict processing after 6 years, i.e. your data will only be used to comply with legal obligations. To prevent unauthorized access by third parties to your personal data, especially financial data, the ordering process takes place via encrypted connection.

XII. Social Media Presence

We maintain fan pages within various social networks and platforms with the aim of communicating with customers, interested parties and users active there and informing them about our services there.

We would like to point out that your personal data may be processed outside the European Union in the process, so that risks may arise for you in this regard (for example, when enforcing your rights under European / German law).
 

User data is generally processed for market research and advertising purposes. For example, usage profiles can be created from the usage behavior and resulting interests of the users. These usage profiles can in turn be used, for example, to place advertisements within and outside the platforms that presumably correspond to the interests of the users. For these purposes, cookies are usually stored on the users' computers, in which the usage behavior and interests of the users are stored. Furthermore, data may also be stored in the usage profiles regardless of the devices used by the users (especially if the users are members of the respective platforms and are logged in to them).

The processing of the users' personal data is based on our legitimate interests in effectively informing users and communicating with users pursuant to Art. 6 para. 1 p. 1 lit. f. DSGVO. If users are asked by the respective providers for consent to data processing (i.e. declare their consent e.g. by ticking a checkbox or confirming a button), the legal basis of the processing is Art. 6 para. 1 p. 1 lit. a. DSGVO.

For more information about the processing of your personal data and your objection options, please refer to the links of the respective provider listed below. The assertion of information and other rights of the data subjects can also be made against the providers, then only they have direct access to the data of the users and have the corresponding information. Of course, we are available for queries and support you if you need help. 

Provider: 

Facebook 
Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland

Privacy policy: www.facebook.com/about/privacy/

Opt-out: www.facebook.com/settings and www.youronlinechoices.com

Instagram 
Instagram Inc, 1601 Willow Road, Menlo Park, CA, 94025, USA.

Privacy Policy/Opt-Out: instagram.com/about/legal/privacy/.

YouTube (Google)
Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA). 

Privacy policy: policies.google.com/privacy

Opt-Out: adssettings.google.com/authenticated

LinkedIn 
LinkedIn Ireland Unlimited Company Wilton Place, Dublin 2, Ireland

Privacy policy www.linkedin.com/legal/privacy-policy 

Opt-Out: www.linkedin.com/psettings/guest-controls/retargeting-opt-out, 

Xing 
XING AG, Dammtorstraße 29-32, 20354 Hamburg, Germany.
Privacy Policy https://privacy.xing.com/de/datenschutzerklaerung.

XIII. Google Maps

On this website we use the offer of Google Maps. This allows us to display interactive maps directly on the website and enables you to use the map function conveniently.

By visiting the website, Google receives the information that you have called up the corresponding sub-page of our website. In addition, the data mentioned in section IV of this declaration are transmitted to Google. This occurs regardless of whether Google provides a user account through which you are logged in or whether no user account exists. If you are logged in to Google, your data will be directly assigned to your account. If you do not want the assignment with your profile at Google, you must log out before activating the button. Google stores your data as usage profiles and uses them for the purposes of advertising, market research and/or demand-oriented design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact Google to exercise this right.

The legal basis for the use of Google Maps is your consent pursuant to Art. 6 (1) p. 1 lit. a DSGVO.

For more information on the purpose and scope of data collection and its processing by the plug-in provider, please refer to the provider's privacy policy. There you will also find further information on your rights in this regard and setting options for protecting your privacy: http://www.google.de/intl/de/policies/privacy.

XIV. Integration of YouTube videos:

We have integrated YouTube videos into our online offer, which are stored on www.youtube.com and can be played directly from our website. These are all integrated in "extended data protection mode", which means that no data about you as a user is transmitted to YouTube if you do not play the videos. Only when you play the videos, the data mentioned in paragraph 2 are transmitted. We have no influence on this data transmission.

By visiting the website, YouTube receives the information that you have accessed the corresponding sub-page of our website. This occurs regardless of whether YouTube provides a user account through which you are logged in or whether no user account exists. If you are logged in to Google, your data will be directly assigned to your account. If you do not want the assignment with your profile at YouTube, you must log out before activating the button. YouTube stores your data as usage profiles and uses them for the purposes of advertising, market research and/or demand-oriented design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact YouTube to exercise this right.

Further information on the purpose and scope of data collection and its processing by YouTube can be found in the privacy policy. There you will also find further information on your rights and setting options to protect your privacy:

https://www.google.de/intl/de/policies/privacy.

XV. Matomo (formerly Piwiki)

We use Matomo for web analysis by means of cookie technology. Since the service is hosted locally by us, the information generated by the cookie about your use of this website is not shared with third parties. The protection of your data is important to us, which is why we have additionally configured Matomo so that your IP address is only recorded in abbreviated form. We therefore process your personal usage data anonymously. It is not possible for us to draw conclusions about your person. We understand the analysis as part of our Internet service. We would like to use it to further improve our website and adapt it even more to the needs of our users. You can revoke your consent at any time.