PRIVACY POLICY
Privacy Policy
1) Information about the collection of personal data and contact details of the controller
1.1
We are pleased that you are visiting our website and thank you for your interest. Below, we inform you about how we handle your personal data when using our website. Personal data refers to all data that can be used to personally identify you.
1.2
The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:
CRMLSH OES
Email: support@crmlshoes.com
The controller responsible for processing personal data is the natural or legal person who alone or jointly with others determines the purposes and means of processing personal data.
1.3
For security reasons and to protect the transmission of personal data and other confidential content (such as orders or inquiries sent to the controller), this website uses SSL or TLS encryption. You can recognize an encrypted connection by the "https://" prefix and the padlock symbol in your browser’s address bar.
2) Data collection when visiting our website
When you use our website purely for informational purposes, meaning you do not register or provide us with information in any other way, we only collect data that your browser sends to our server (so-called "server log files").
When you access our website, we collect the following data, which is technically necessary for us to display the website to you:
- The website visited
- Date and time of access
- Amount of data transferred in bytes
- Source/referrer from which you accessed the page
- Browser used
- Operating system used
- IP address used (possibly in anonymized form)
The processing is carried out in accordance with Article 6(1)(f) GDPR based on our legitimate interest in improving the stability and functionality of our website.
The data will not be passed on or otherwise used. However, we reserve the right to review server log files afterwards if there are specific indications of unlawful use.
3) Hosting
Hosting by Shopify
We use the shop system provided by Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland ("Shopify") for hosting and displaying our online shop based on processing carried out on our behalf.
All data collected on our website is processed on Shopify’s servers.
As part of Shopify’s services, data may also be transferred for further processing on our behalf to:
- Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada
- Shopify Data Processing (USA) Inc.
- Shopify Payments (USA) Inc.
- Shopify (USA) Inc.
In the event of transferring data to Shopify Inc. in Canada, an adequate level of data protection is guaranteed through an adequacy decision by the European Commission.
Shopify companies in the USA are certified under the EU-US data protection framework, ensuring compliance with the level of data protection applicable in the EU.
Further information about Shopify’s privacy policy can be found here:
https://www.shopify.de/legal/datenschutz
Any further processing on servers other than those mentioned above will only take place within the scope described below.
4) Cookies
To make visiting our website attractive and enable the use of certain functions, we use so-called cookies on various pages.
Cookies are small text files stored on your device.
Some cookies we use are deleted after the browser session ends (so-called session cookies). Other cookies remain on your device and allow us to recognize your browser during your next visit (persistent cookies).
When cookies are placed, they may collect and process certain user information, such as:
- Browser data
- Location data
- IP address information
Persistent cookies are automatically deleted after a specified period, which may vary depending on the cookie.
Cookies may be used to simplify the ordering process by storing settings (for example, remembering the contents of a shopping cart for a later visit).
If cookies process personal data, processing takes place according to:
- Article 6(1)(b) GDPR for contract performance
- Article 6(1)(a) GDPR where consent has been given
- Article 6(1)(f) GDPR based on our legitimate interests in the best possible functionality of the website and a customer-friendly browsing experience
You can configure your browser so that you are informed about cookies and can decide individually whether to accept them, or reject cookies in certain cases or generally.
Cookie settings vary depending on the browser. Instructions can be found here:
Internet Explorer:
https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies
Firefox:
https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
Chrome:
https://support.google.com/chrome/answer/95647
Safari:
https://support.apple.com/de-de/guide/safari/sfri11471
Opera:
https://help.opera.com/de/latest/web-preferences/#cookies
Please note that rejecting cookies may limit the functionality of our website.
5) Contacting us
When contacting us (for example, through a contact form or email), personal data is collected.
The information collected through a contact form can be seen in the relevant form.
This data is stored and used exclusively for:
- Responding to your request
- Contacting you
- Related technical administration
The legal basis for processing this data is our legitimate interest in responding to your request according to Article 6(1)(f) GDPR.
If your contact request aims to conclude a contract, the additional legal basis is Article 6(1)(b) GDPR.
Your data will be deleted after your request has been fully processed, provided there are no legal retention obligations.
6) Data processing when opening a customer account and for contract processing
According to Article 6(1)(b) GDPR, personal data is collected and processed when you provide us with this information for contract performance or when opening a customer account.
The data collected can be seen in the respective input forms.
You can delete your customer account at any time by sending a message to the controller’s address mentioned above.
We store and use your data for contract processing.
After completion of the contract or deletion of your customer account, your data will be blocked due to tax and commercial law retention requirements and deleted after these periods expire, unless:
- You have expressly consented to further use of your data, or
- We are legally permitted to continue using the data.
7) Use of your data for direct advertising
Registration for our email newsletter
If you subscribe to our email newsletter, we regularly send you information about our offers.
The only mandatory information required for receiving the newsletter is your email address.
Additional information is voluntary and used to personalize communication.
We use the double opt-in procedure for sending newsletters. This means that you will only receive newsletters after you have expressly confirmed your subscription.
You will receive a confirmation email asking you to click a link to confirm that you wish to receive newsletters.
By activating the confirmation link, you give us consent to use your personal data according to Article 6(1)(a) GDPR.
When registering for the newsletter, we store:
- Your IP address provided by your Internet Service Provider (ISP)
- Date and time of registration
This is done to prevent possible misuse of your email address.
The data collected during newsletter registration is used exclusively for advertising communication via the newsletter.
You can unsubscribe at any time through the unsubscribe link in the newsletter or by contacting the controller.
After unsubscribing, your email address will be deleted from the newsletter distribution list unless further use is legally permitted.