Data protection statement

——————————————–
Data protection statement – for ‘ShoeStar Hamburg’
——————————————–

Instructions on the legally admissible use of this document
————————————————————————–
1 Advertising with newsletters

This data protection statement includes the use of the email
address of the customer for advertising purposes by means of newsletters, which in all cases requires the express consent of the customer. Merely informing the customer of this data protection statement does not suffice for obtaining consent. Rather, the customer must expressly declare that they consent to the use of their address for such purposes during the order placement process. This can be realised using a corresponding declaration
during the order placement process which the customer expressly acknowledges by ticking a box.

The following formulations lend themselves to this purpose:

‘I would like to subscribe to the newsletter (I can unsubscribe at any time).’

or

‘Subscribe to the newsletter’

If you offer to send a newsletter and therefore include the provisions for newsletters in section 2 of this data protection statement, you must ensure that the customer is able to grant their express consent during the order placement process.

2 Use of Google Analytics

In terms of the data protection regulations, the use of Google Analytics is
problematic and controversial. In practical terms, Google can use Google Analytics to create a comprehensive user profile of visitors to a website. If visitors are using a Google service that requires them to be logged in, this user profile can also be assigned to specific persons. Additionally,
section 12 paragraph 1 of the German Telemediengesetz (TMG, ‘broadcast media act’) only permits the processing of personal data if the user
has granted their prior consent or if the body processing the data has
legal authority to do so. However, by using tools such as Google Analytics,
information including the full IP address (data related to a single user) of the visitor to the website is sent to a third party (Google), which can
conflict with the data protection rights of the user. If the user has not granted their prior consent, this results in problems.

Additional information: The Hamburg Commissioner for Data Protection and Freedom of Information (HmbBfDI) is of the opinion that Google Analytics can be used in accordance with the data protection regulations if
- the user is given the opportunity to object to the collection of
usage data. Google provides a deactivation add-on (http://tools.google.com/dlpage/gaoptout?hl=de). To date, this add-on is available for Internet Explorer, Firefox and Google Chrome. Google has now added Safari and Opera, so that all popular browsers are included;
- at the request of the operator of the website, the last octet of the
IP address is deleted before the IP address is stored, thus preventing
the identification of the user. Google states that it is deleted within Europe;
- an order data processing agreement is concluded with the operator of the website under the provisions of the German Federal Data Protection Act (BDSG);
- the operator of the website deletes all data previously collected by
Google Analytics. According to Google, this only happens if the
operator of the website deletes its current Google Analytics account
and creates a new one;
- the operator of the website mentions and explains the use of Google Analytics in the data protection statement on its website.

You can find more information online at:
http://www.datenschutzhamburg.de/uploads/media/GoogleAnalytics_Hinweise_Webseitenbetreiber_in_Hamburg.pdf. This opinion from the Hamburg Commissioner for Data Protection and Freedom of Information (HmbBfDI) is not a legally binding assessment of the use of Google Analytics under the data protection regulations. The IT-Recht Kanzlei (‘office of IT law’) recommends only using Google Analytics if the ?_anonymizeIp()? tracking code is activated (for instructions see http://code.google.com/intl/de-DE/apis/analytics/docs/gaJS/gaJSApi_gat.html), information about the deactivation add-on is provided and information on the data protection regulations can be found in the data protection statement. Please note that
the legally admissible use of Google Analytics is still not absolutely certain and we recommend that you continue to follow the debate between the data protection supervisory authorities on the implementation of the opportunity to object to the processing of data.
[Anm.: Okay so? Dieser Satz in der Vorlage war etwas unklar. Bitte prüfen.]

You can find more information on this topic here:

http://www.it-recht-kanzlei.de/Datenschut-Google-Analytics-Aufsichtsbehörden.html.

1 Anonymous collection of data
———————–
Thank you for visiting our shop and for your interest in our company, our products and our websites. The protection of your privacy when using our websites is important to us. Therefore, please read through the following information:

2 Collection, processing and use of personal data
————————————————————
You can visit our websites without us collecting your personal data. Personal data is only collected if you voluntarily provide it in order to perform an agreement, open a customer account or when contacting us. Without your express consent, this data will only be used to process your order and enquiries. After your order has been processed and the purchase price paid in full, your data will be stored in accordance with the retention periods required by tax and commercial law, after which time the data shall be deleted.

3 Disclosure of personal data
————————————
3.1 Order process

When performing the contract, the personal data we collect will only be disclosed to the carrier in so far as necessary in order to enable the carrier to deliver the goods. We will pass on your payment information to the credit institute we engage when processing payments.

4 Cookies
———
This website uses cookies which serve to make our website more user-friendly, more effective and more secure – especially in terms of making our website easier to navigate. Additionally, cookies allow us to gauge the frequency of page visits and general navigation. Cookies are small text files which are stored on your computer. Please note that some of these cookies are sent to your computer by our server, most of which are known as ‘session cookies’. Session cookies are automatically deleted from your hard drive after your browser session ends.
Other cookies remain on your hard drive and allow us to identify your computer when you next visit (these are known as ‘persistent cookies’). Naturally you can reject cookies at any time, provided that your browser allows you to do this. Please note that certain functions of this website might become unusable, or only usable in a limited capacity, if you configure your browser to not accept cookies (from our website).

5 More information and contact information
————————————
You are entitled to free information about your stored data and to correct, block or delete this data. If you have any questions about the collection, processing or use of your personal data, please contact us. The same applies to any requests you may have for information or to block, correct or delete your personal data, and if you wish to revoke any consent you have granted. You can find our contact information in our legal notice.