1. Who is responsible for my personal data?
The following Genfoot entities are the joint controllers of your personal data:
Genfoot Europe BV
5915 PH Venlo, Netherlands
Genfoot Marketing Europe GmbH
Josef Strobe Str. 42/1
1940 55th Ave
If you have any queries or requests in relation to the processing of your personal data you can contact us at firstname.lastname@example.org.
2. The type of data we process and its purpose?
We process personal data that we receive from you as part of our business relationship. For example, during the initiation, implementation and execution of the contract for the product you purchased and in connection with the use of the product. We further process data you provide for the purpose of your registration to our website.
2.1 Providing you with the product you purchased
We process your personal data such as your name, e-mail address, billing address, shipping address (postal code, city, province) and where applicable the name of your company, in order to perform the contract you entered into with us. This processing of your personal data is necessary to fulfill our contractual obligations to you, such as delivering the product you purchased or processing refunds or returns. For example, your address is needed for delivery of the purchased product. Our online forms clearly identify which fields are required to perform the contract. If you do not provide us with the information, we will not be able to perform the contract.
2.2 Customer Management
We process personal data such as contact information in order to provide you with satisfactory customer management, e.g. contract follow-up or categorize and address inquiries. For this purpose, we also process your personal data as part of our management and development of our client relationship in order to provide you with individualized content and to assess your needs as a customer. We process personal data to analyze preferences and habits in order to improve our services and to ensure that we can deliver our services with the highest quality. In the context of these services we want to provide you with the best possible support. If you register an account on our website, we process your account information including your login credentials, so you can access our website in the future.
2.3 Providing you with content that may interest you
We aim to present you with content that could be of interest to you and to communicate seamlessly over various channels [e-mail and social media] without sending redundant information. Our communication with you is based on the information we collect about you and are permitted to use. Based on the information we collect, we may internally determine that you are interested in certain categories of information. In general, we will inform you about our latest products, innovations and events. We only provide you with such information which you have permitted us to share with you. This can include instances in which you have chosen to receive our newsletter e-mails or in which you did not object to our use of your personal data for marketing-related purposes.
2.4 Legal obligation and legal enforcement
In some cases, we are under a legal obligation to process personal data. Examples are to detect, prevent and investigate fraud or to facilitate the exercise of your consumer rights. Further we may need to process your personal data to detect, prevent and investigate any other actual or suspected violations of law or misuse of our service.
2.5 Browsing our website
Each time you access our website, your internet browser automatically transmits certain information, which we store in "log files". In particular, the following information is transmitted automatically:
• IP address (Internet Protocol address) of the device from which the online service is accessed;
• Internet address of the website from which our website was accessed;
• Operating system and information about the internet browser used, including installed add-ons.
We process this data in order to provide the website to the general public and to enable customers and interested parties to contact us. We do also collect statistical information on the use of the website in order to improve our offerings.
3. Children's personal data
We process children's personal data such as name, birthday, mailing address and e-mail address of the holder of parental responsibility over the child during the registration process for our "Kids Club" and to provide the kids with our "Kids Club" services and subsequent offers. We only process such data where consent is given by the holder of parental responsibility over the child.
4. Cookies, analytic tools
4.2 Analytic tools
In order to keep the website updated, user-oriented and complete, this website relies on Google Analytics, Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, United States. Google Analytics is a web analysis tool that allows our services to be optimized and tailored to your needs. Google Analytics places a cookie on your device. The definition of cookies is explained above. With the setting of the cookie, Google is enabled to analyse the use of our website. With each call-up to our website, the Internet browser on your device will automatically submit data through the Google Analytics component for the purpose of online advertising and the settlement of commissions to Google. Further information and the applicable data protection provisions of Google may be retrieved under https://www.google.com/intl/en/policies/privacy/ and under http://www.google.com/analytics/terms/us.html.
5. Sharing personal data
We share your personal data as set forth below:
● Service Providers: We share your personal data with third party service providers who use this data to perform services for us, such as payment processors, shipping companies (UPS, FedEx), marketing technology providers and auditors.
● Legally required: We may disclose your personal data if we are required to do so by law or where it is necessary to respond to claims asserted against us or to comply with legal processes.
● Business transfers: We may disclose or transfer personal data as part of any merger, sale, and transfer of our assets, acquisition or restructuring of all or part of our business, bankruptcy, or similar event.
6. Data transfer to third countries
Whenever we transfer your personal data outside the EU/EEA, we will take all steps reasonably necessary to ensure that appropriate safeguards are in place to guarantee that your personal data is adequately protected according to the requirements of the data protection laws of the European Union by means of Standard Contractual Clauses approved by the EU Commission.
You have the right to contact email@example.com for more information about the safeguards we have put in place (including a copy of relevant contractual commitments) to ensure the adequate protection of your personal data when it is transferred as mentioned above.
7. Data retention
We store your data as long as necessary for the provision of our services to you or if we have a legitimate interest in the continued storage. For example, when you subscribe to our newsletter, we will store the associated data at least until you unsubscribe or object to the processing of your personal data. If you are a member of our "Kids club", we process your personal data until you withdraw your consent to the processing of your personal data. If you ordered one of our products, we store your data as long as it is necessary for the performance of the contract with you and to comply with the below mentioned legal retention obligations.
We are subject to various retention and documentation requirements pursuant to, inter alia, the German Commercial Code (Handelsgesetzbuch - “HGB”) and the Tax Code (Abgabenordnung - “AO”). The retention and documentation periods specified therein last up to ten years. Finally, the storage period is also governed by statute of limitations periods, which can be up to thirty years, for example, pursuant to secs. 195 et seq. of the German Civil Code (Bürgerliches Gesetzbuch - “BGB”), whereby the general limitations period is three years.
8. What rights do I have?
As the data subject, you are entitled to the following data protection rights:
Access: You have the right to request access to personal data related to you which is stored at Genfoot Inc. and to inquire about the scope of data processing and data transfer performed by Genfoot Inc. and to obtain a copy of your stored personal data.
Rectification: With respect to your personal data stored at Genfoot Inc., you have the right to demand the immediate rectification of incorrect personal data and you have the right to have incomplete personal data completed.
Erasure: You have the right to demand the immediate deletion or erasure of your personal data stored by Genfoot Inc., if the legal requirements are satisfied. This is the case, in particular, if:
• your personal data is no longer needed for the purposes for which it was collected;
• the sole legal basis for processing such data was your consent, and you have withdrawn such consent;
• you have objected to processing on the legal grounds relating to your particular situation, and we cannot prove that there are overriding legitimate grounds for processing;
• your personal data was processed unlawfully; or
• your personal data must be erased in order to comply with legal requirements.
If we have transmitted your data to third parties, we will inform them about the erasure to the extent required by law.
Please note that your right to erasure is subject to certain limitations. For example, we may not and/or must not erase data that we are still required to retain due to statutory retention obligations. In addition, your right of erasure does not extend to data that we need in order to assert, exercise or defend ourselves against legal claims, unless other grounds for continued storage exist.
Restriction of the processing: Under certain conditions, you have the right to request that processing be limited (i.e., the marking of stored personal data with the aim of limiting its processing in the future). The requirements are:
• The accuracy of your personal data is contested by you and Genfoot Inc. must verify the accuracy of the personal data;
• The processing is unlawful, but you oppose the erasure of the personal data and request the restriction of its use instead;
• Genfoot Inc. no longer needs the personal data for the purposes of processing, but you require the data to establish, exercise or defend your legal claims.
• You have objected to processing pending the verification of whether the legitimate grounds of Genfoot Inc. override your legitimate grounds.
Where processing has been restricted, such data will be marked accordingly and, with the exception of storage, will be processed only with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest the EU or an EU Member State.
Data portability: To the extent that we automatically process your personal data that you have provided to us based on your consent or any contract with you, you have the right to receive such data in a structured, commonly used and machine-readable format and have the right to transmit that data to another controller without hindrance from Genfoot Inc. You also have the right to have the personal data transmitted directly from Genfoot Inc. to another controller where technically feasible, provided that such transmission does not adversely affect the rights and freedoms of others.
Withdrawal of consent: If you have given consent to the processing of your personal data, you can then withdraw such consent at any time. Please note that the withdrawal applies prospectively only. Processing that occurred before the withdrawal of consent is unaffected.
Complaint: Furthermore, you have a right to file a complaint with a data protection authority (Datenschutzaufsichtsbehörde), if you believe that the processing of your personal data is unlawful. The right to file a complaint is without prejudice to any other administrative or judicial entity.
Right to object: To the extent that we are relying on our legitimate interests to use your personal data, you have the right to object to such use, and we must stop such processing unless we can either demonstrate compelling legitimate grounds for the use that override your interests, rights and freedoms or where we need to process the data for the establishment, exercise or defence of legal claims. In addition, you can object to the processing of your personal data for direct marketing purposes, which includes profiling to the extent that it is related to such direct marketing without providing any reason. We will then cease the processing of your personal data for direct marketing purposes.
If you want to exercise any of these rights or have any questions or concerns about how we treat your personal data, please contact firstname.lastname@example.org.