Personal data (hereinafter referred to as “data”) is processed by us only to the extent necessary for providing a functional and user-friendly website, including its content and the services offered there.

According to Article 4, Paragraph 1 of Regulation (EU) 2016/679, known as the General Data Protection Regulation (GDPR), “processing” refers to any operation or set of operations performed with or without automated processes in relation to personal data. This includes the collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure through transmission, dissemination, or any other form of provision, alignment or combination, restriction, deletion, or destruction of data.

With the following privacy statement, we inform you in particular about the type, scope, purpose, duration, and legal basis of the processing of personal data, insofar as we either alone or jointly with others decide on the purposes and means of processing. Additionally, we will inform you about any third-party components used by us for optimization purposes and to enhance user experience, insofar as these third parties process data under their own responsibility.

Our privacy policy is structured as follows:

I. Information about us as the Data Controller
II. Rights of Users and Data Subjects
III. Information on Data Processing
IV. Data Protection in the Context of Contractual Relationships
V. Currency and Changes to the Privacy Policy

I. Information about Us as the Data Controller

The use of our website is possible without providing personal data. However, the use of certain services on our site may require different regulations, which will be explained separately in such cases. Your personal data is processed by us in accordance with German data protection laws. Data is considered personal if it can be clearly assigned to a specific natural person. The legal foundations of data protection can be found in the Federal Data Protection Act (BDSG) and the Telemedia Act (TMG). The following regulations provide information on the type, scope, and purpose of the collection, use, and processing of personal data by the provider Dowe GmbH, Erzgebirgstraße 4, 73466 Lauchheim, 07363-95290-0, info@dowe.de.

We would like to point out that internet-based data transmission has security vulnerabilities, and a complete protection against access by third parties is therefore not possible.

II. Rights of Users and Data Subjects

With regard to the data processing described below, users and data subjects have the following rights:

Confirmation and Information: The right to obtain confirmation as to whether data concerning them is being processed, access to the data being processed, additional information about the data processing, and copies of the data (see also Art. 15 GDPR). Rectification: The right to request the correction or completion of inaccurate or incomplete data (see also Art. 16 GDPR). Deletion: The right to request the immediate deletion of data concerning them (see also Art. 17 GDPR), or, alternatively, if further processing is necessary according to Art. 17 (3) GDPR, the right to request the restriction of processing in accordance with Art. 18 GDPR. Data Portability: The right to receive the data concerning them and that they have provided, and to transmit this data to other providers/controllers (see also Art. 20 GDPR). Complaint: The right to lodge a complaint with the supervisory authority if they believe that their data is being processed by the provider in violation of data protection regulations (see also Art. 77 GDPR).

Additionally, the provider is obligated to inform all recipients to whom data has been disclosed about any corrections or deletions of data or restrictions on processing that have occurred based on Articles 16, 17 (1), or 18 GDPR. However, this obligation does not apply if such notification is impossible or involves a disproportionate effort. Regardless, the user has the right to know about these recipients.

Furthermore, users and data subjects have the right under Art. 21 GDPR to object to the future processing of their data if the data is processed by the provider under Art. 6 (1) (f) GDPR. This includes the right to object to data processing for the purpose of direct marketing.

III. Information on Data Processing

1. Scope and Processing of Personal Data

We collect and use personal data of our users primarily only to the extent necessary to provide a functional website and our content and services. The collection and use of personal data generally occur only with the user’s consent. An exception applies in cases where obtaining prior consent is not possible for practical reasons and the processing of the data is permitted by legal provisions.

2. Legal Basis for Processing Personal Data

If we obtain consent from the data subject for processing personal data, Article 6(1)(a) of the EU General Data Protection Regulation (GDPR) serves as the legal basis. For processing personal data necessary for the performance of a contract to which the data subject is a party, Article 6(1)(b) GDPR serves as the legal basis. This also applies to processing operations necessary for carrying out pre-contractual measures. If processing personal data is required to fulfill a legal obligation to which our company is subject, Article 6(1)(c) GDPR serves as the legal basis. If processing is necessary to protect vital interests of the data subject or another natural person, Article 6(1)(d) GDPR serves as the legal basis. If processing is necessary for safeguarding a legitimate interest of our company or a third party and the interests, fundamental rights, and freedoms of the data subject do not outweigh the former interest, Article 6(1)(f) GDPR serves as the legal basis for the processing.

3. Data Deletion and Retention Period

Personal data of the data subject will be deleted or blocked as soon as the purpose of storage no longer applies. Data may be stored further if required by European or national laws, regulations, or other provisions applicable to the data controller. Data will also be blocked or deleted when the retention period required by these norms expires, unless further storage of the data is necessary for the conclusion or performance of a contract.

4. Disclosure of Personal Data

We do not disclose your personal data to third parties except for the purpose of fulfilling the contract. Collection or transmission of personal data to governmental institutions and authorities occurs only within the framework of applicable legal provisions. Our employees and suppliers/partners are obligated to confidentiality and to comply with our data protection policies.

5. Cookies

a) Session-Cookies

We use cookies on our website. Cookies are small text files or other storage technologies placed and stored on your device by your web browser. These cookies process specific information about you, such as your browser or location data or your IP address.

This processing makes our website more user-friendly, effective, and secure. For example, it enables the display of our website in different languages or offers a shopping cart function. The legal basis for this processing is Art. 6 (1) (b) GDPR if the cookies process data for the initiation or performance of a contract.

If the processing does not serve contract initiation or performance, our legitimate interest lies in improving the functionality of our website. The legal basis for this is Art. 6 (1) (f) GDPR.

Session cookies are deleted when you close your web browser.

b) Third-Party Cookies

Our website may also use cookies from partner companies with whom we collaborate for advertising, analysis, or functionality purposes. For details, especially regarding the purposes and legal bases of processing such third-party cookies, please refer to the following information.

c) Opt-Out Options

You can prevent or limit the installation of cookies by adjusting your web browser settings. You can also delete cookies already stored on your device at any time. The steps and measures required depend on your specific web browser. For guidance, please use the help function or documentation of your web browser or contact its manufacturer or support.Flash cookies cannot be managed through browser settings. You will need to adjust your Flash player settings for this purpose. The necessary steps and measures also depend on your specific Flash player. For assistance, use the help function or documentation of your Flash player or contact the manufacturer or support.

Please note that preventing or restricting cookies may affect the full functionality of our website.

6. Provision of the Website and Creation of Logfiles

This website is provided and hosted by 1&1 Internet SE, Elgendorfer Str. 57, 56410 Montabaur, Tel.: 0721-9600, E-Mail: info@1und1.de. The provider creates so-called server logfiles when you visit our website. For technical reasons, the following data, which your internet browser transmits to us or to our webspace provider (1&1 Internet SE), is collected:

• Browser type and version
• Operating system used
• Website from which you visit us (referrer URL)
• Website you are visiting
• Duration of your session
• Date and time of your access
• Your Internet Protocol (IP) address

These anonymous data are stored separately from any personal data you may have provided and do not allow conclusions to be drawn about a specific person. They are evaluated for statistical purposes to help us optimize our website and our offerings.

7. Contact Possibilities

If you contact us via contact form or email, the data you provide will be used to process your inquiry. Providing the data is necessary to process and respond to your request—without it, we cannot process or respond to your inquiry, or can only do so in a limited manner.

The legal basis for this processing is Art. 6 (1) (b) DSGVO.

Your data will be deleted once your request has been fully answered, unless there are legal retention obligations preventing deletion, such as in the case of a subsequent contract processing.

8. Content and Services from Third Parties

Our website may include content, services, and offerings from other providers that complement our own offerings. Examples of such offerings include maps from Google Maps, social media plugins like Facebook, or graphics provided by third parties. Accessing these third-party services usually requires transmitting your IP address. This enables these providers to recognize and store your user IP address. We make every effort to include only third-party providers who use IP addresses solely to deliver the content. However, we have no control over whether a third-party provider may store the IP address. This storage might be used for statistical purposes, for example. Should we become aware of any storage activities by third-party providers, we will promptly inform our users of this fact. Please also refer to the specific privacy policies of individual third-party providers and service providers whose services we use on our website. You can also find these in this privacy statement.

9. Use of Facebook Components

Based on our legitimate interests (i.e., interest in analyzing, optimizing, and economically operating our online offering within the meaning of Art. 6 (1) (f) DSGVO), we use social plugins (“plugins”) from the social network facebook.com, which is operated by Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (“Facebook”). The plugins can represent interactive elements or content (e.g., videos, graphics, or text posts) and are recognizable by one of the Facebook logos (white “f” on a blue tile, the terms “Like,” “Gefällt mir,” or a “thumbs up” sign) or are marked with the addition “Facebook Social Plugin.” The list and appearance of Facebook Social Plugins can be viewed here: https://developers.facebook.com/docs/plugins/.

Facebook is certified under the Privacy Shield framework and thus provides a guarantee of compliance with European data protection law (https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active).

When a user accesses a function of this online offering that contains such a plugin, their device establishes a direct connection with Facebook’s servers. The content of the plugin is transmitted by Facebook directly to the user’s device and integrated into the online offering. This allows user profiles to be created based on the processed data. We therefore have no influence over the extent of data that Facebook collects using this plugin and inform users accordingly based on our current knowledge.

By integrating the plugins, Facebook receives the information that a user has accessed the corresponding page of the online offering. If the user is logged into Facebook, Facebook can assign the visit to their Facebook account. If users interact with the plugins, for example by pressing the Like button or leaving a comment, the corresponding information is transmitted directly from their device to Facebook and stored there. If a user is not a Facebook member, there is still a possibility that Facebook will find out and store their IP address. According to Facebook, only an anonymized IP address is stored in Germany.

The purpose and extent of data collection, as well as the further processing and use of data by Facebook and the related rights and privacy settings, can be found in Facebook’s privacy policy: https://www.facebook.com/about/privacy/.

If a user is a Facebook member and does not want Facebook to collect data about them via this online offering and link it with their Facebook member data, they must log out of Facebook before using our online offering and delete their cookies. Further settings and objections to the use of data for advertising purposes can be made within Facebook’s profile settings: https://www.facebook.com/settings?tab=ads or via the US page http://www.aboutads.info/choices/ or the EU page http://www.youronlinechoices.com/. The settings are platform-independent, meaning they apply to all devices, such as desktop computers or mobile devices.

10. Use of YouTube Components with Extended Privacy Mode

On our website, we use components (videos) from YouTube, LLC, 901 Cherry Ave., 94066 San Bruno, CA, USA, a subsidiary of Google Inc., Amphitheatre Parkway, Mountain View, CA 94043, USA. We utilize the “extended privacy mode” option provided by YouTube.

When you visit a page with an embedded video, a connection to YouTube’s servers is established. The content of the video is then delivered and displayed on your browser. According to YouTube, in “extended privacy mode,” only data about which of our web pages you have visited is transmitted to YouTube servers when you view the video.

If you are logged into YouTube at the same time, this information will be associated with your YouTube account. You can prevent this by logging out of your YouTube account before visiting our website. For more information on YouTube’s privacy practices, please refer to Google’s privacy policy at: https://www.google.de/intl/en/policies/privacy/.

11. Use of Tumblr Services

Our pages use buttons from the Tumblr service. The provider is Tumblr, Inc., 35 East 21st St, 10th Floor, New York, NY 10010, USA. These buttons allow you to share a post or page on Tumblr or follow the provider on Tumblr. When you access one of our pages with a Tumblr button, your browser establishes a direct connection with Tumblr’s servers. We have no influence over the extent of data Tumblr collects and transmits using this plugin. As of now, the IP address of the user and the URL of the respective page are transmitted.

Further information can be found in Tumblr’s privacy policy at http://www.tumblr.com/policy/de/privacy.

IV. Data Protection in the Context of a Contractual Relationship

We collect, process, and use personal data within the scope of a contractual relationship only as permitted or required by the EU General Data Protection Regulation (GDPR), the Federal Data Protection Act (BDSG), or other legal provisions, or if you have consented.

1. Name and Contact Details of the Data Controller

These privacy notices apply to the data processing by:

Controller: Dowe GmbH
Erzgebirgstraße 4, 73466 Lauchheim, Germany
E-mail: info@dowe.de
Phone: +49 (0) 73 63 / 952 90 0
Fax: +49 (0) 73 63 / 952 90 50

2. Collection and Storage of Personal Data, as well as Nature, Purpose, and Use

When you engage our services, we collect the following information:

• Salutation, first name, last name
• A valid e-mail address
• Address
• Telephone number (landline and/or mobile)
• Information necessary for the execution of the order

The collection of this data is done to:

• Identify you as our customer
• Provide adequate advice
• Correspond with you
• Invoice
• Handle any potential liability claims and enforce any claims against you

The data processing is based on your request and is necessary for the appropriate processing of the order and the mutual fulfillment of obligations arising from the contract, as per Art. 6 (1) Sentence 1 lit. b GDPR. The personal data collected by us for the commissioning will be stored in accordance with Article 6 (1) Sentence 1 lit. c GDPR until the expiration of statutory retention periods (from HGB, StGB, or AO) and then deleted, unless you have consented to further storage under Art. 6 (1) Sentence 1 lit. a GDPR.

3. Disclosure of Data to Third Parties

Your personal data will not be disclosed to third parties for purposes other than those listed below. We only disclose your personal data to third parties if:

• You have given your explicit consent as per Art. 6 (1) Sentence 1 lit. a GDPR,
• The disclosure is necessary for asserting, exercising, or defending legal claims and there is no reason to believe that you have a predominant legitimate interest in not disclosing your data as per Art. 6 (1) Sentence 1 lit. f GDPR,
• There is a legal obligation for the disclosure as per Art. 6 (1) Sentence 1 lit. c GDPR, or
• It is legally permissible and necessary for the execution of contractual relationships with you as per Art. 6 (1) Sentence 1 lit. b GDPR.

4. Rights of the Data Subject

You have the right to:

• Withdraw your consent at any time as per Art. 7 (3) GDPR. This will result in us no longer being able to continue processing the data based on this consent in the future;
• Request information about the personal data we process about you as per Art. 15 GDPR. In particular, you can request information about the purposes of processing, the categories of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage duration, the existence of a right to correction, deletion, restriction of processing, or objection, the existence of a right to lodge a complaint, the origin of your data if it was not collected from you, and the existence of automated decision-making including profiling and, if applicable, meaningful information about the details thereof;
• Request the correction of inaccurate or the completion of incomplete personal data stored by us as per Art. 16 GDPR;
• Request the deletion of your personal data stored by us as per Art. 17 GDPR, provided that the processing is not necessary for the exercise of the right to freedom of expression and information, for the fulfillment of a legal obligation, for reasons of public interest, or for asserting, exercising, or defending legal claims;
• Request the restriction of processing your personal data as per Art. 18 GDPR, provided that the accuracy of the data is contested by you, the processing is unlawful, but you object to its deletion and we no longer need the data, but you need it for the assertion, exercise, or defense of legal claims, or you have objected to the processing as per Art. 21 GDPR;
• Receive your personal data, which you have provided to us, in a structured, commonly used, and machine-readable format as per Art. 20 GDPR, or request the transfer to another controller; and
• Lodge a complaint with a supervisory authority as per Art. 77 GDPR. Generally, you can contact the supervisory authority of your usual residence, place of work, or our place of business.

5. Right to Object

If your personal data is processed based on legitimate interests as per Art. 6 (1) Sentence 1 lit. f GDPR, you have the right to object to the processing of your personal data as per Art. 21 GDPR, provided there are reasons arising from your particular situation. If you wish to exercise your right to object, an e-mail to info@dowe.de is sufficient.

III. Current Status and Changes to This Privacy Policy

This privacy policy is currently valid and is dated June 18, 2018. Due to the development of our website and offers or changes in legal or regulatory requirements, it may be necessary to modify this privacy policy. The current privacy policy can be accessed and printed at any time on the website www.dowe-sportswear.de under the “Privacy” section.