Privacy statement for the de.florisvanbommel.com online shop and external channels

In this privacy statement, we provide you with comprehensive information about how we handle your personal data when you visit our website de.florisvanbommel.com and place orders in our online shop. We also inform you about the processing of your personal data when you access external channels.


In the event of any inconsistency between the German version of this Cancellation policy and any translation of this Cancellation Policy into another language, the German version shall always prevail.

This privacy policy was last updated on April 30, 2024.

 

Table of contents
1. General information on data protection under the domain de.florisvanbommel.com

When you visit our online shop at de.florisvanbommel.com, we process your personal data.

Personal data according to the privacy statement and according to Art. 4 No. 1 GDPR is all information that relates to an identified or identifiable natural person, e.g. name, address, email address, user behaviour.

We process your personal data exclusively within the scope of the respective purpose communicated in this privacy statement and only if there is a legal basis for the respective processing.

 

1.1. Responsible Parties

Responsible for the collection and processing of your personal data in accordance with the General Data Protection Regulation (GDPR) and other data protection laws in our online shop under the domain de.florisvanbommel.com is the

Floris van Bommel Shoes GmbH
Füchtenfeld 9
48599 Gronau
Germany
E-Mail: webshop@florisvanbommel.com

For the processing of personal data on our social media channels, there is joint responsibility with the controller of the respective social media network, about which we will inform you below.


1.2. Legal basis for the processing of personal data

a) When we obtain your consent, Art. 6 para. 1 lit. a GDPR serves as the legal basis.

b) For the fulfilment of a contract to which you are a party and for pre-contractual measures in the context of which your personal data is processed, Art. 6 para. 1 lit. b GDPR serves as the legal basis.

c) When processing your personal data to fulfil a legal obligation to which our company is subject, Art. 6 para. 1 lit. c GDPR serves as the legal basis.

d) In the event that vital interests of you or another natural person require the processing of personal data, Art. 6 para. 1 lit. d GDPR serves as the legal basis.

e) If the processing of your personal data is necessary to safeguard a legitimate interest of our company or a third party and if our interests outweigh your interests, fundamental rights and freedoms, Art. 6 para. 1 lit. f GDPR serves as the legal basis for the processing.


1.3. Deletion of personal data and storage duration

a) When we process your personal data on the basis of your express consent pursuant to Art. 6 para. 1 lit. a GDPR, this data will be stored until you withdraw your consent.

b) Where statutory retention periods exist for personal data that is processed on the basis of Art. 6 para. 1 lit. b GDPR, this data will be routinely deleted after the respective retention periods have expired. This does not apply if it is still required to fulfill the contract and/or if we have a continued legitimate interest in storing the data.

c) In the case of the processing of personal data on the basis of Art. 6 para. 1 lit. f GDPR, this data is stored until the data subject exercises their right to object. The only exception to this (except in the case of processing for direct marketing purposes) is if we can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or if the processing serves the establishment, exercise or defense of legal claims.

d) Otherwise, customers' personal data will always be deleted at the latest when they are no longer necessary for the purposes for which they were collected or otherwise processed or when the purpose no longer applies.

1.4. Objection to the processing of your data; withdrawal of consent

If you have given your consent to the processing of your personal data, you can withdraw this consent at any time. We will then no longer be permitted to continue processing your personal data that was processed on the basis of your consent; however, the processing of this data will continue to be permitted until you withdraw your consent.

You have the right to object, on grounds relating to your particular situation, at any time to the processing of personal data concerning you which is based on point (e) or (f) of Article 6(1) GDPR, including profiling based on those provisions. In this case, we will no longer process the personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defense of legal claims.


1.5. Disclosure of personal data to third parties

In principle, the personal data collected from you will never be passed on or resold by us to third parties.

The only exception to the transfer of personal data is when we work with third parties as service providers within the scope of order processing. These service providers have been carefully selected and commissioned by us, are bound by our instructions and are regularly monitored. In this case, we will inform you about the transfer of personal data to this third party as part of the respective processing.

If such service providers are based in a country outside the European Economic Area (EEA), we will inform you about the consequences of this circumstance in the description of the respective processing.

2. Processing your personal data when accessing the page de.florisvanbommel.com

2.1. Provision of the store

When you visit our store, we automatically collect the following data, which is required by us for technical reasons to display our store and to ensure stability and security:

The user's operating system, type, language and version of the browser software, IP address, date and time of the request, website from which the request comes, website accessed by the user via our website, time zone difference to Greenwich Mean Time (GMT), content of the request (specific page) and access status/HTTP status code.

The data is also stored in the log files of our system. This data is not stored together with other personal data of the user.

Legal basis for the temporary storage of the data and log files is Art. 6 para. 1 lit. f GDPR. The collection of data for the provision of the store and the storage of data in log files is essential for the operation of the store. Consequently, the user has no option to object.

Duration of storage / deletion: The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. In the case of data collection for the provision of the website, the data is deleted when the respective session has ended. When the data is stored in log files, this is the case after seven days at the latest. Storage beyond this period is possible. In this case, the IP addresses of the users are deleted or anonymized so that it is no longer possible to identify the accessing computer.

2.2. Use of Cookies and other technologies

We use cookies and other tracking technologies in our store. These serve the purpose of making our offer more user-friendly and secure. Cookies are small text files that your browser stores locally on your hard disk. We differentiate between the following cookies:

Technically necessary cookies – We use technically necessary cookies that are required for the operation of the store and to ensure its functionality. Depending on the purpose, these are stored permanently – even after the end of the session (so-called persistent cookies, e.g. opt-out) – or they are deleted when the browser is closed (so-called session cookies – these are only valid for one browser session).

Legal basis: Our legitimate interest in the operation of the website pursuant to Art. 6 para. 1 lit. f GDPR.

Non-essential cookies (in particular tracking, analytical and marketing cookies) – We also use other cookies if you give us your consent to do so. These cookies enable us to analyze how you use our store. This enables us to tailor the content to the needs of our visitors. Cookies also enable us to measure the effectiveness of a particular advertisement and to place it according to the thematic interests of the user, for example.

Legal basis: Your consent in accordance with Art. 6 para. 1 lit. a GDPR

Overview of the cookies and other tracking technologies used at de.florisvanbommel.com: click here.


2.3. Contacting us

If you contact us in our store de.florisvanbommel.com (e.g. via e-mail or contact form), the following personal data provided by you via e-mail will be transmitted to us and stored:

First name, last name, e-mail address, IP address

This data is used exclusively for the purpose of responding to your request.

Legal basis: In the case of an e-mail, the legal basis is our legitimate interest in responding to your request, Art. 6 para. 1 lit. f GDPR. If you contact us to conclude a contract, the additional legal basis for the processing is Art. 6 para. 1 lit. b GDPR.

Duration of storage / deletion: The personal data sent by e-mail or contact form will be deleted after final processing of your request. This is usually the case when your request has been finally resolved and there are no legal obligations to retain data.

If you withdraw your consent to the processing of your personal data or object to the processing on the basis of our legitimate interest, we will not be able to continue the conversation with you. In this case, all personal data stored in the course of your contact will be deleted.

3. Processing of your personal data when placing orders in the store at de.florisvanbommel.com

When you place an order in our store, we will process the following personal data:


3.1. Registering a user account

In our shop, you have the option of registering a user account by entering your personal data.

The registration of a user account is mandatory for the fulfilment of orders.

By registering a user account, you can view your own order history and use the data you have provided for future orders. We also use your personal data and account details from the user account for returns and refunds.

For orders in our online shop, we also require your billing address for delivery. If the delivery address differs from the billing address, you must also provide the details for the delivery address.

By registering on our website, we save the user's IP address as well as the date and time of registration (technical background data).

Mandatory fields are labelled as such in the contact form; all other information is voluntary.

Legal basis: The registration of a user account is necessary for the fulfilment of a contract or for the implementation of pre-contractual measures pursuant to Art. 6 para. 1 lit. b GDPR. With regard to the processing of technical background data, you give your consent in accordance with Art. 6 para. 1 lit. a GDPR upon completion of registration.

Duration of storage / deletion: The personal data will be deleted if you request us to delete the user account and if there are no legal storage obligations to the contrary. The technical background data will be deleted after a period of seven days at the latest.

3.2. Transfer of personal data to payment service providers

We offer the following payment methods to pay for purchases made in our online shop:

Klarna
If you choose “purchase on account” or “instalment purchase” during checkout, your data will be transmitted to Klarna.
Provider: The operating company of Klarna is Klarna AB, Sveavägen 46, 111 34 Stockholm, Sweden.
Personal Data: The personal data transmitted to Klarna is usually your first name, surname, address, date of birth, gender, email address, IP address, telephone number, mobile phone number and other data required to process an invoice or instalment purchase. Personal data relating to the respective order is also required to process the purchase contract. In particular, there may be a mutual exchange of payment information, such as bank details, card number, expiry date and CVC code, number of items, item number, data on goods and services, prices and tax charges, information on previous purchasing behaviour or other information on your financial situation.
Legal basis: By selecting one of these payment options, you consent to the transfer of personal data in accordance with Art. 6 para. 1 lit. a GDPR, which is necessary for the processing of invoice or instalment purchases or to conduct identity and credit checks. The purpose of the data transfer is, in particular, identity verification, payment administration and fraud prevention.
We will transmit personal data to Klarna in particular if there is a legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR for the transmission. The personal data exchanged between Klarna and us will be transmitted by Klarna to credit agencies.
The purpose of this transfer is to check identity and creditworthiness. Klarna is used in the interest of proper and smooth payment processing. This constitutes a legitimate interest in accordance with Art. 6 para. 1 lit. f GDPR.
Objection / Revocation: You have the option to revoke your consent for Klarna to handle your personal data at any time. A revocation does not affect personal data that must be processed, used or transmitted for (contractual) payment processing.
Klarna's privacy policy: The applicable data protection provisions of Klarna may be accessed via here.

PayPal
If you select "PayPal" as the payment option during the order process in our online shop, your data will automatically be transmitted to PayPal.
Provider: The European operating company of PayPal is PayPal (Europe) S.à.r.l. & Cie. S.C.A., 22-24 Boulevard Royal, 2449 Luxembourg, Luxembourg.
Personal data: The personal data transmitted to PayPal is usually your first name, last name, address, email address, IP address, telephone number, mobile phone number or other data necessary for payment processing. To process the purchase contract, it is also necessary to provide personal data in connection with the respective order.
Legal basis: By selecting one of these payment options, you consent to the transfer of personal data in accordance with Art. 6 para. 1 lit. a GDPR, which is necessary for processing the invoice or instalment purchase as well as for identity and credit checks. The purpose of the data transfer is payment processing and fraud prevention. We will transmit personal data to PayPal in particular if there is a legitimate interest for the transmission pursuant to Art. 6 para. 1 lit. f GDPR. The personal data exchanged between PayPal and us may be transmitted by PayPal to credit agencies. The purpose of this transmission is to verify your identity and conduct a credit check.
Objection/revocation: You have the option to revoke your consent to the handling of personal data from PayPal at any time. A revocation does not affect personal data that must be processed, used or transmitted for (contractual) payment processing.
PayPal is used in the interest of proper and smooth payment processing. This constitutes a legitimate interest in accordance with Art. 6 para. 1 lit. f GDPR.
PayPal's privacy policy: PayPal's applicable privacy policy is available here.

SOFORT
If you select "Sofortüberweisung" as a payment option in our online shop, your data will be automatically transmitted to Sofortüberweisung.
Provider: The operating company of Sofortüberweisung is SOFORT GmbH, Fußbergstraße 1, 82131 Gauting, Germany, part of Klarna Bank AB, (publ), Sveavägen 46, 111 34 Stockholm, Sweden.
Personal data: The personal data shared with Sofortüberweisung is your first name, last name, address, email address, IP address, telephone number, mobile phone number or other data necessary for payment processing.
Legal basis: By selecting this payment option, you consent to the transfer of personal data required for payment processing.
The use of Sofortüberweisung is also in the interest of proper and smooth payment processing. This constitutes a legitimate interest in accordance with Art. 6 para. 1 lit. f GDPR. The purpose of transmitting the data is to process payments and prevent fraud. We will also transmit other personal data to Sofortüberweisung if we have a legitimate interest in the transmission.
The personal data exchanged between Sofortüberweisung and us may be transmitted to credit agencies by Sofortüberweisung. The purpose of this transmission is to conduct an identity and credit check.
Revocation / objection: The data subject may revoke their consent to the handling of personal data from Sofortüberweisung at any time. A revocation does not affect personal data that must be processed, used or transmitted for (contractual) payment processing.
Klarna's privacy policy: The applicable data protection provisions of Sofortüberweisung are available here.

4. Data transfer to transport service providers

In order to fulfil the contract with you, we pass on the delivery address you have provided to the service provider commissioned to transport the goods.

Legal basis: The delivery address is shared with the transport service provider in accordance with Art. 6 Abs. 1 lit. b DSGVO (fulfilment of contract).

5. Processing of your personal data in the context of marketing activities on de.florisvanbommel.com

5.1. E-mail marketing

If you subscribe to our e-mail newsletter in our shop de.florisvanbommel.com, the following personal data provided by you will be transmitted to us and stored:

E-mail address

Mandatory fields are labelled as such in the registration form; all other information is voluntary.

Legal basis: If you enter your e-mail address into our registration form to receive the e-mail newsletter, the legal basis is your consent pursuant to Art. 6 para. 1 lit. a GDPR.

Duration of storage / deletion: Your personal data from the registration form will be deleted if you revoke your consent by e-mail or by using the unsubscribe link in the newsletter.


5.2. Social Media Share Links

We use so-called "share links" on our website leading to our online presence on social media platforms. By providing these links in our shop, no personal data is shared with the providers of these social media platforms. Regarding the processing of personal data on our social media channels, please refer to section (i) of this privacy statement.

6. Processing your personal data outside of de.florisvanbommel.com

We operate publicly accessible pages under the domains shown below, according to whose imprint we are responsible for the content of the respective page and which refer to this privacy statement. We collect personal data when you visit these pages, which we would like to inform you about here:


6.1. Social Media Channels

We operate the following channels on these social media platforms:
Instagram
Facebook
YouTube

In addition to those responsible, Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland (hereinafter referred to as "Meta") is responsible for the Instagram and Facebook pages.

We have concluded an agreement with Meta in accordance with Art. 26 GDPR, which regulates, among other things, the mutual responsibility for the Instagram page.

We have no influence on the exact processing procedures on the part of Meta in terms of the scope, type, and purpose of data processing of your personal data. In this regard, Meta provides general information, which also applies to the aforementioned Instagram channel via this link. In this regard, Meta provides general information which also applies to the aforementioned Facebook channel via this link

We ourselves maintain the aforementioned pages in order to communicate with visitors to these pages and to inform them about our offers.

Legal basis: The processing of your personal data is based on our legitimate interests in effective information and communication in accordance with Art. 6 para. 1 clause 1 lit. f. GDPR.

In addition to those responsible, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter referred to as "Google") is responsible for our online presence on YouTube.

We have concluded an agreement with Google in accordance with Art. 26 GDPR, which, among other things, regulates the mutual responsibility for the YouTube page.

We have no influence on the exact processing procedures on the part of Google in terms of scope, type and purpose of data processing of your personal data. Meta provides general information in this regard, which also applies to the aforementioned YouTube channel, via this link

We ourselves maintain the aforementioned pages in order to communicate with visitors to these pages and to inform them about our offers.

Legal basis: The processing of your personal data is based on our legitimate interests in effective information and communication in accordance with Art. 6 para. 1 clause 1 lit. f. GDPR.
7. Your rights as a data subject

When processing your personal data, the GDPR grants you the following rights as a data subject. To exercise these rights, you can contact us at any time.


7.1. Rights under Art. 15 et. seq. DSGVO

You have the following rights towards us as the controller regarding your personal data:
a) Right of access pursuant to Art. 15 DSGVO
b) Right to rectification or erasure pursuant to. Art. 16 and 17 DSGVO
c) Right to restriction of processing in accordance with Art. 18 DSGVO
d) Right to data portability pursuant to Art. 20 DSGVO
e) Right to revoke the declaration of consent under data protection law pursuant to Art. 7 para. 3 DSGVO

7.2. Right to object in case of a balancing of interest pursuant to Art. 21 DSGVO

When we process your personal data as part of a balancing of interests and on the basis of an overriding legitimate interest on our part, you have the right to object to this processing at any time with effect for the future. The objection must be made on grounds relating to your particular situation. If you exercise your right to object, we will stop processing the data concerned. We reserve the right to continue processing your personal data if we can demonstrate compelling legitimate grounds for the processing which override your interests, fundamental rights and freedoms, or if the processing serves the establishment, exercise or defence of legal claims.


7.3. Right to lodge a complaint with the supervisory authority pursuant to. Art. 77 DSGVO

You also have the right to complain to a data protection supervisory authority about the processing of your personal data by us.

8. Updating this Privacy Statement

We regularly amend this privacy policy and update it here. In the event of significant changes that may affect the rights of customers, we will announce the changes in advance in written form and, if necessary, point out available options for objection.