INFORM & FALL IN LOVE
Data protection pursuant to Art. 13 GDPR

Privacy Policy.

Data protection is a matter of trust, and your trust matters to us. We respect your privacy and the protection of your personal data. Therefore, the lawful processing of your personal data is important to us. To make you feel secure when visiting our websites, we strictly comply with statutory provisions when processing your personal data and want to inform you about how we handle your data pursuant to Art. 13 of the General Data Protection Regulation (GDPR).

1 · Controller

The controller for the data collection and processing described below is ara Shoes GmbH, Albert-Einstein-Str. 3, 40764 Langenfeld, Germany.

2 · Storage of the IP address

We store the IP address transmitted by your web browser strictly for the purpose of detecting, limiting and eliminating attacks on our websites for a period of seven days. After this period, we delete or anonymise the IP address. The legal basis is Art. 6 (1) (f) GDPR.

3 · Usage data

When you visit our websites, so-called usage data is temporarily stored on our web server as a log for statistical purposes in order to improve the quality of our websites. This dataset consists of:

  • the page from which the file was requested,
  • the name of the file,
  • the date and time of the request,
  • the volume of data transferred,
  • the access status (file transferred, file not found),
  • a description of the type of web browser used,
  • the IP address of the requesting computer, shortened so that personal identification is no longer possible.

The aforementioned log data is stored only in anonymised form.

4 · Processing of your data and data transfer

We transfer your data to service providers within the framework of data processing pursuant to Art. 28 GDPR; they support us in operating our websites and the related processes. Our service providers are strictly bound by our instructions and accordingly obliged contractually. We use the following service providers: Google Analytics, Mailchimp (Intuit Inc., USA) for sending information and newsletter emails. In some cases, we transfer personal data to a third country outside the EU. In each case, we have ensured an adequate level of data protection, including by concluding Standard Contractual Clauses (SCC) with the respective providers. We guarantee that your personal data will otherwise not be passed on to third parties. However, we reserve the right to disclose information about you if we are legally required to do so or if disclosure is required of us by lawfully acting authorities or law enforcement agencies.

5 · Cookies

We use cookies on our websites. Cookies are small text files that can be stored and read on your end device. A distinction is made between session cookies, which are deleted as soon as you close your browser, and persistent cookies, which are stored beyond the individual session. Cookies can contain data that enables the recognition of the device used. In some cases, however, cookies only contain information on certain settings that are not personal. We use session cookies and persistent cookies on our websites. Processing takes place on the basis of Art. 6 (1) sentence 1 (f) GDPR and in the interest of making our internet presence more user-friendly, effective and secure overall and of speeding up navigation on our platform.

You can set your browser so that you are informed about the setting of cookies and can decide individually whether to accept them or refuse them in certain cases or generally. This makes the use of cookies transparent for you. You can also delete cookies at any time via the corresponding browser setting and prevent the setting of new cookies. The functionality of our website is limited if cookies are not accepted.

6 · Tracking tools

6.1 · Google Analytics

To design our website according to your needs, we create pseudonymous usage profiles with the help of Google Analytics, provided you have given your explicit consent (opt-in). Data processing takes place on the basis of your consent pursuant to Art. 6 (1) sentence 1 (a) GDPR. The information generated by the cookie about your use of this website is generally transferred to a Google server in the USA and stored there. Since we have activated IP anonymisation, your IP address will be shortened by Google beforehand within EU Member States. We have also concluded a data processing agreement with Google Inc. (USA) in accordance with Art. 28 GDPR.

You can revoke your consent to the creation of pseudonymous usage profiles at any time. You can prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) by Google as well as the processing of this data by Google by downloading and installing the browser plug-in available at the following link.

6.2 · Google Tag Manager

We also use Google Tag Manager on our website for the purpose of personalised, interest-based and location-based online advertising. This form of advertising is carried out anonymously. The display of advertising material on the websites of our partners is carried out using Google Tag Manager based on cookie technology and the previous visit to our website. The data is collected and stored by Google. You can manage your advertising settings in the Google Ads Help (support.google.com/ads/answer/7395996). The legal basis for data processing is your consent pursuant to Art. 6 (1) sentence 1 (a) GDPR.

7 · Google Retargeting

In order to offer you advertising tailored to your interests on other internet sites as well, we use Google retargeting technologies. Data processing is based on Art. 6 (1) (a) GDPR. When you visit our websites, recognition features of your browser or end device are retrieved, your IP address is evaluated, or a recognition feature is stored on your end device as a small text file (e.g. a so-called third-party cookie).

Your usage behaviour is recorded when you visit various websites. The features are designed pseudonymously. If you are logged in with your Google account, these features can be assigned directly to your profile. Google can link and store your visits to our websites with your features in order to display targeted advertising to you on other internet pages. You can change your consent at any time using the corresponding browser settings. Until then, data processing is lawful.

8 · Storefinder

We provide a Storefinder. There, you can enter your country and a postal code or city so that all nearby ara specialist retailers are displayed. Cookies are set when you access the Google Maps map material. When you access the Google Maps map material, information about your use (in particular the IP address of your computer) may be transmitted to a server of Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA and stored there. The use of the Storefinder is voluntary. If you decide to use it, the legal basis is Art. 6 (1) sentence 1 (f) GDPR.

9 · Social Media Plugins

For data protection reasons, we do not embed any social plugins directly in our website. Therefore, when you visit our pages, no data is transmitted to social media services such as Facebook, Instagram and Pinterest. Profiling by third parties is thus excluded. However, you can still follow us on the platforms. You can reach these pages via a link. Only if you decide to click on the corresponding buttons does data transmission to the operator of the respective social media service take place.

Data typically transmitted in this process is:

  • the website visited on which the social button is located,
  • date and time of the click on the social button,
  • information about the browser and operating system used, and
  • your current IP address.

By clicking on the button, you give your consent to data processing pursuant to Art. 6 (1) sentence 1 (a) GDPR vis-à-vis the social media service.

10 · Social Media Presence

The data you enter on our social media pages (Facebook, Instagram, Pinterest) — such as comments, videos, images, likes, tweets, etc. — is published by the social media platform and is never used or processed by us for other purposes. We merely reserve the right to delete content if this should be necessary. The legal basis is Art. 6 (1) sentence 1 (f) GDPR. Data processing takes place in the interest of our public relations and communication.

It cannot be excluded that the operator of the social media platform uses web-tracking methods. We have no influence over the web-tracking methods of the social media platform.

11 · B2B Shop

Data processing for contract performance: Please refer to the following page for information on data processing: www.ara-shoes.de/Datenschutz/

12 · Email Applications

We process your personal data in accordance with applicable data protection legislation on the basis of § 26 BDSG. We process the data you provide to us as part of your email application exclusively for the purpose of selecting applicants. No data processing for other purposes takes place. You determine yourself the scope of the data you wish to submit to us as part of your email application. In case of an unsuccessful application, your documents will be deleted six months after the end of the application procedure.

13 · Security measures

In order to protect your data against unwanted access as comprehensively as possible, we take technical and organisational measures. We use an encryption procedure on our pages. Your information is transmitted from your computer to our server and vice versa over the internet using SSL encryption. You can recognise this by the closed lock symbol in the status bar of your browser and the address line beginning with https://.

14 · ara Shops

Under the "ara worldwide" tab, you have the option of using our shop via the link www.ara-shoes.de. For information on data processing on this site, please consult the privacy policy provided there: www.ara-shoes.de/Datenschutz/.

15 · Your rights

When your personal data is processed, the GDPR grants you, as a website user, certain rights:

15.1 · Right to information (Art. 15 GDPR)

You have the right to request confirmation as to whether personal data concerning you is being processed; if this is the case, you have the right to information about this personal data and to the information specifically listed in Art. 15 GDPR.

15.2 · Right to rectification and erasure (Art. 16 and 17 GDPR)

You have the right to request immediate rectification of inaccurate personal data concerning you and, if necessary, completion of incomplete personal data. You also have the right to request that personal data concerning you be erased without undue delay, provided one of the reasons specifically listed in Art. 17 GDPR applies — for example, if the data is no longer needed for the purposes pursued.

15.3 · Right to restriction of processing (Art. 18 GDPR)

You have the right to request the restriction of processing if one of the conditions listed in Art. 18 GDPR is met — for example, if you have objected to the processing, for the duration of any examination.

15.4 · Right to data portability (Art. 20 GDPR)

In certain cases specifically listed in Art. 20 GDPR, you have the right to receive personal data concerning you in a structured, commonly used and machine-readable format, or to request the transmission of this data to a third party.

15.5 · Right to object (Art. 21 GDPR)

If data is collected on the basis of Art. 6 (1) sentence 1 (f) GDPR (data processing for the safeguarding of legitimate interests), you have the right to object to the processing at any time on grounds relating to your particular situation. We will then no longer process the personal data unless we can demonstrate compelling legitimate grounds for processing that override the interests, rights and freedoms of the data subject, or unless the processing serves the assertion, exercise or defence of legal claims.

15.6 · Right to lodge a complaint with a supervisory authority

Under Art. 77 GDPR, you have the right to lodge a complaint with a supervisory authority if you are of the opinion that the processing of data relating to you violates data protection regulations. The right of complaint can be exercised in particular with a supervisory authority in the Member State of your residence, place of work or place of the alleged infringement. You may exercise your rights, for example, by contacting ara Shoes GmbH, Albert-Einstein-Str. 3, 40764 Langenfeld, Germany, Email: info@ara-shoes.de.

16 · Data Protection Officer Contact Details

Our company Data Protection Officer is available to answer your questions or suggestions on data protection. They can be reached at the following contact details:

datenschutz nord GmbH
Konsul-Smidt-Straße 88
28217 Bremen
Phone: +49 421 69 66 32 0
Email: office@datenschutz-nord.de

17 · Changes to this Privacy Policy

We reserve the right to amend this privacy policy at any time.

ara — Trust your feeling.
Because it knows your path.