Data Protection

We appreciate your interest in our website. Protecting your privacy when processing personal data and ensuring the security of all business data is a priority for us, and we take this into account in our business processes. Here, we provide you with detailed information about how we handle your data.

§ 1 General Information on the Collection of Personal Data in Connection with Visits to Our Website

(1) Below, we provide information about the collection of personal data when you use our website. Personal data refers to all data that can be personally attributed to you, such as your name, address, email addresses, and user behavior. Please note that data transmission over the Internet (e.g., when communicating via email) may be subject to security vulnerabilities. It is not possible to completely protect data from access by third parties.

(2) The controller pursuant to Article 4(7) of the EU General Data Protection Regulation (GDPR) is

Prinz Sportlich GmbH & Co. KG
Westenhellweg 95–101
44137 Dortmund
Phone: +49 2301 94580-652
Email: info@heat-mvmnt.de

(3) This website is hosted by an external service provider (host). The personal data collected on this website is stored on the host’s servers. This may include, in particular, IP addresses, contact requests, metadata and communication data, contractual data, contact information, names, website visits, and other data generated through a website. The use of the hosting provider is for the purpose of fulfilling our contractual obligations toward our potential and existing customers (Art. 6(1)(b) GDPR) and in the interest of ensuring the secure, fast, and efficient provision of our online services by a professional provider (Art. 6(1)(f) GDPR). If consent has been obtained, processing is carried out exclusively on the basis of Article 6(1)(a) of the GDPR and Section 25(1) of the TTDSG, to the extent that the consent covers the storage of cookies or access to information on the user’s device (e.g., device fingerprinting) within the meaning of the TTDSG. Consent may be revoked at any time. Our hosting provider will process your data only to the extent necessary to fulfill its service obligations and will follow our instructions regarding this data.

We have entered into a data processing agreement (DPA) with the website host. This is a contract required under data protection law that ensures the host processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.

(4) Unless a more specific retention period is stated in this Privacy Policy, we will retain your personal data until the purpose for which the data is processed no longer applies. If you assert a legitimate request for erasure or revoke your consent to data processing, your data will be erased unless we have other legally permissible grounds for storing your personal data (e.g., retention periods under tax or commercial law); in the latter case, the data will be erased once these grounds no longer apply.

(5) If you have consented to the data processing, we process your personal data on the basis of Article 6(1)(a) of the GDPR or Article 9(2)(a) of the GDPR, provided that special categories of data pursuant to Article 9(1) of the GDPR are being processed. In the event of explicit consent to the transfer of personal data to third countries, data processing is also carried out on the basis of Article 49(1)(a) of the GDPR. If you have consented to the storage of cookies or to access to information on your device (e.g., via device fingerprinting), data processing is additionally based on Section 25(1) of the German Teleservices Data Protection Act (TTDSG). Consent may be revoked at any time. If your data is necessary for the performance of a contract or for the implementation of pre-contractual measures, we process your data on the basis of Article 6(1)(b) of the GDPR. Furthermore, we process your data if it is necessary to comply with a legal obligation on the basis of Article 6(1)(c) of the GDPR. Data processing may also be based on our legitimate interest pursuant to Article 6(1)(f) of the GDPR. The applicable legal bases in each individual case are described in the following sections of this Privacy Policy.

(6) Among other things, we use tools from companies based in the United States or other third countries that do not provide adequate data protection. When these tools are active, your personal data may be transferred to and processed in these third countries. Please note that a level of data protection comparable to that of the EU cannot be guaranteed in these countries. For example, U.S. companies are required to disclose personal data to security authorities without you, as the data subject, being able to take legal action against this. It therefore cannot be ruled out that U.S. authorities (e.g., intelligence agencies) may process, analyze, and permanently store your data located on U.S. servers for surveillance purposes. We have no influence over these processing activities.

§ 2 Your Rights

(1) Below, we provide information about your rights as a data subject pursuant to Article 15 of the GDPR. You may exercise these rights at any time by contacting us directly. If you exercise these rights with us, we will thoroughly review your request, taking into account the relevant legal requirements and obligations. To this end, we may request additional information from you. We will explain the results of our review and our approach to fulfilling your request in detail. It is possible that we may not be able to fully comply with your requests in the manner you desire. This should not deter you from exercising your rights with us or from inquiring with us regarding this matter. We will be happy to answer all your questions.

(2) Right of Access
You have the right to request information from us at any time regarding whether and which of your personal data we are processing. This also includes details regarding the purposes of the processing, recipients to whom we have disclosed your data (if applicable), the planned retention period, and, if applicable, information regarding the origin of this data, provided that we did not collect it directly from you. In addition, you have the right to receive a one-time, free copy of your personal data stored by us. We reserve the right to charge a reasonable administrative fee for the preparation of subsequent copies.

(3) Right to Rectification
You have the right to request that we rectify any inaccurate personal data we have stored about you. This also includes the right to have incomplete personal data completed.

(4) Right to Erasure
You have the right to request that we erase the personal data we have stored about you. If we have published data about you, this also includes our obligation, within the scope of the “right to be forgotten” pursuant to Art. 17(2) of the GDPR, to forward your request for erasure—taking into account available technology and implementation costs—to other controllers responsible for processing this published personal data, including all links to such data as well as copies or replicas thereof.

(5) Right to Restriction of Processing
You have the right to request that we restrict the processing of personal data we have stored about you. Once restricted, such data may only be processed with your consent or for a limited number of purposes specified by law.

(6) Right to Object to Processing
To the extent that we base the processing of your personal data on a balancing of interests, you may object to such processing. This is the case, in particular, when the processing is not necessary for the performance of a contract with you, as we will explain in the subsequent description of each function. When exercising such an objection, we ask that you explain the reasons why we should not process your personal data as we currently do. In the event of a justified objection, we will review the situation and either cease or adjust the data processing, or explain to you our compelling legitimate grounds on the basis of which we will continue the processing.

(7) Right to Withdraw Consent Under Data Protection Law
If you have given your consent to the processing of your data, you may withdraw it at any time. Such a withdrawal affects the lawfulness of the processing of your personal data after you have notified us of your withdrawal.

(8) Right to Data Portability
You have the right to receive from us the personal data you have provided to us in a structured, commonly used, and machine-readable format for the purpose of transferring it to another controller. This also includes, at your request and subject to technical feasibility, the direct transfer of such data from us to the other controller.

(9) Right to File a Complaint with a Supervisory Authority
You have the right to file a complaint at any time with a data protection supervisory authority regarding our processing of your personal data.

§ 3 Collection of Personal Data When Visiting Our Website

(1) Even when you use our website purely for informational purposes, we collect at least the personal data listed below, which your browser transmits to our server each time you visit a page. This is necessary for technical reasons to display our website to you and to ensure its stability and security (the legal basis for this is Art. 6(1), sentence 1, lit. f of the GDPR):

· IP address

· Hostname

· Date and time of the request

· Time zone difference from Greenwich Mean Time (GMT)

· Content of the request (specific page)

· Access Status/HTTP Status Code

· Amount of data transferred in each instance

· Website from which the request originates (referrer)

· The specific pages of our website that you have visited

· Browser: Type, version, and language setting

· Operating system: Type and version

· Additionally, if JavaScript is enabled:

§ Screen Resolution

§ Color Depth

§ Browser Window Size

§ Installed Browser Plugins

(2) Use of Cookies and Other Storage Technologies:

Cookies are small text files that are stored on your device and associated with the browser you are using. In addition, websites may store so-called HTML5 storage objects on your device. In both cases, information is stored and retrieved. This can be done for a wide variety of purposes; however, it cannot be used to execute programs or transmit malware.

a) This website places the elements listed below on your device, either directly or via external sources. Using our Consent Tool, which you can access via the button at the beginning of this Privacy Notice, you can grant or withdraw consent for the placement of specific elements or categories of elements. The legal basis for the use of these elements is your consent pursuant to Art. 6(1), sentence 1, lit. a GDPR and § 25(1) TTDSG. The legal basis for the use of the remaining elements is generally our balancing of interests regarding the operation of our website based on technical necessity pursuant to Article 6(1), sentence 1, letter f of the GDPR in conjunction with Section 25(2) of the TTDSG. If a different legal basis applies in a specific case, you will be informed of this in the description of the corresponding functionality to which an element is assigned.

b) You can configure your browser settings according to your preferences and, for example, refuse to accept third-party cookies or all cookies.
We generally recommend that you automatically or regularly manually delete cookies, browser history, and other temporary web storage objects to enhance the protection of your privacy.

§ 4 Additional Features and Services on Our Website

(1) In addition to the purely informational use of our website, we offer various services that you may use if you are interested. To do so, you may need to provide additional personal data, which we use to provide the respective service and to which the aforementioned data processing principles apply.

(2) When you contact us via email, we will store your email address and any other data you provide in order to respond to your inquiry. If a business relationship exists between you and us or is established as a result of your inquiry, we will store this data for the duration of our business relationship. Otherwise, we will delete this data once it is no longer necessary to store it for the complete processing of your inquiry. If statutory retention requirements prevent deletion, we will restrict the processing of the data for the duration of such requirements and delete it thereafter. By sending your email, you consent to our processing the data you have provided in the manner described above (legal basis: Art. 6(1), sentence 1, lit. a of the GDPR).

(3) In some cases, we use external service providers to process your data. We have carefully selected and commissioned these providers, and we have entered into agreements with them to protect your data to the extent required by data protection law. In some cases, these service providers are also based outside the European Economic Area (EEA), which means that the data collected in accordance with the information provided in § 3 may, in such cases, be transferred to countries with a level of data protection that is not comparable to that of the EU/EEA.

Below, we provide detailed information about the information services, tracking and analytics tools, social media offerings, and other third-party services used on our website.

Information Services

1. Newsletter

(1) With your consent, you may subscribe to our newsletter, through which we inform you about our current special offers. The advertised goods and services are specified in the consent form. Your consent constitutes the legal basis pursuant to Art. 6(1), sentence 1, lit. a of the GDPR for all processing of personal data in connection with our newsletter.

(2) We use the so-called double opt-in procedure for subscribing to our newsletter. This means that after you subscribe, we will send an email to the email address you provided, asking you to confirm that you wish to receive the newsletter. If you do not confirm your subscription within [24] hours, your information will be blocked and automatically deleted after one month. In addition, we store the IP addresses you used and the times of your registration and confirmation. The purpose of this procedure is to verify your registration and, if necessary, to investigate any potential misuse of your personal data.

(3) The only required information for subscribing to the newsletter is your email address. Providing additional, separately marked data is voluntary and is used to address you personally. After your confirmation, we process this data for the purpose of sending you the newsletter. The legal basis is Article 6(1)(a) of the GDPR.

(4) You may revoke your consent to receive the newsletter at any time and unsubscribe from it. You can revoke your consent by clicking the link provided in every newsletter email, via this form on the website, by emailing Newsletter@example.com, or by sending a message to the contact information provided in the legal notice.

(5) Please note that your consent also extends to the analysis of your user behavior associated with the distribution of the newsletter and carried out by us. For this analysis, the emails we send contain so-called web beacons or tracking pixels, which are single-pixel image files stored on our website. For the purposes of this analysis, we link the data specified in § 3(1) and the web beacons to your email address and a unique ID. Links received in the newsletter also contain this ID. The data is collected exclusively in pseudonymized form; thus, the IDs are not linked to your other personal data, and direct personal identification is ruled out.

The information will be stored for as long as you remain subscribed to the newsletter. After you unsubscribe, we will store the data for purely statistical purposes and in an anonymous form. Furthermore, such tracking is not possible if you have disabled the display of images by default in your email program. In this case, the newsletter will not be displayed in its entirety, and you may not be able to use all of its features. If you choose to display the images manually, the tracking described above will take place.

(6) This website uses Mailchimp’s services to send newsletters. The provider is Rocket Science Group LLC, 675 Ponce De Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA. Mailchimp is a service that can be used, among other things, to organize the distribution of newsletters. If you enter data for the purpose of subscribing to the newsletter (e.g., email address), this data is stored on Mailchimp’s servers in the United States. We have disabled performance tracking in Mailchimp, so Mailchimp will not analyze your behavior when you open our newsletters. We have entered into a data processing agreement with Mailchimp. Data transfers to the U.S. are based on the EU Commission’s Standard Contractual Clauses. Details can be found here: https://mailchimp.com/eu-us-data-transfer-statement/ and https://mailchimp.com/legal/data-processing-addendum/#Annex_C_-_Standard_Contractual_Clauses. You can find more details about Mailchimp’s privacy policy here: https://mailchimp.com/legal/terms/.

5. Integration of the CleverPush Push Notification Service

(1) You can sign up to receive so-called push notifications. For this purpose, we use the “CleverPush” service, which is operated by CleverPush GmbH, Brauhausstraße 15A, 22041 Hamburg (“CleverPush”). Through our push notifications, you will regularly receive information about sneaker releases. We have entered into a data processing agreement with CleverPush, under which CleverPush is bound by our instructions.

(2) To subscribe to push notifications, you must confirm the prompt from your browser or device to receive the notifications. This process is documented and stored by CleverPush. For this purpose, the time of registration as well as a push token or device ID is stored. This data serves, on the one hand, to enable us to send you push notifications and, on the other hand, as proof of your registration. The legal basis for this processing is your consent and thus Article 6(1)(a) of the GDPR.

(3) CleverPush also analyzes our push notifications statistically. This allows CleverPush to determine whether and when our push notifications were displayed and clicked. This enables us to identify which push notifications interest recipients so that we can tailor future messages to the presumed interests of all recipients and thereby increase interest in our offerings. In addition to the push token or device ID, we also store the main topic of the app on which the push notifications were activated. We also use this information to send push notifications to the relevant subscribers that are in line with their presumed interests. The legal basis for this processing is our legitimate interest pursuant to Art. 6(1)(f) of the GDPR. A push token or device ID is assigned to a specific individual only if we are legally required to do so, to defend against claims against us, if this is necessary as evidence, or to pursue potential violations of the law.

(4) You may revoke your consent to the storage and use of your personal data for the purpose of receiving our push notifications at any time with future effect. Revoking your consent does not affect the lawfulness of the processing carried out on the basis of your consent prior to the revocation. Furthermore, you may object at any time to the use of personal data described above on the basis of Article 6(1)(f). To do so, please withdraw your consent. You can withdraw your consent by adjusting the settings for receiving push notifications in your device or browser settings. The opt-out process is explained in detail at the following link: https://cleverpush.com/faq.

Web Analytics

The legal basis for the use of all web analytics tools listed in this section is Article 6(1)(a) of the GDPR and Section 25(1) of the TTDSG, i.e., your corresponding consent, which you have provided through the selection you made in our Consent Tool. If you have not given your consent there, the tools listed in this section will not be used. You can withdraw your consent at any time by changing your selection in our Consent Tool.

1. Use of Google Analytics

(1) This website uses Google Analytics, a web analytics service provided by Google Inc. (“Google”). Google Analytics uses so-called “cookies,” which are text files stored on your computer that enable an analysis of your use of the website. The information generated by the cookie regarding your use of this website is generally transmitted to a Google server in the United States and stored there. However, if IP anonymization is enabled on this website, your IP address will be truncated by Google beforehand within member states of the European Union or in other signatory states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the United States and truncated there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity, and to provide other services related to website and internet usage to the website operator.

(2) In addition to opting out of analytics cookies in our Consent Tool, you can prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) by Google, as well as the processing of this data by Google, by downloading and installing the browser plug-in available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de.

(3) This website uses Google Analytics with an anonymization feature. As a result, IP addresses are truncated during processing, thereby preventing any association with specific individuals.

(4) For data transfers to non-secure third countries, Google relies on the EU-U.S. Data Privacy Shield and the EU Commission’s Standard Data Protection Clauses. Details can be found here: https://policies.google.com/privacy/frameworks?hl=de

(5) Third-Party Provider Information: Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland
General Privacy Notice: https://www.google.de/intl/de/policies/privacy and https://www.google.com/policies/privacy/partners/?hl=de
Specific Privacy Notice Regarding Google Analytics: https://support.google.com/analytics/answer/6004245?hl=de&ref_topic=2919631

Social Media and Other Third-Party Services

1. Social Media

(1) We currently do not use any plug-ins from social media providers on our website; instead, we have merely included links to our profiles on the following social media platforms: Facebook, Instagram, LinkedIn, Pinterest, Telegram, TikTok, and YouTube. The mere presence of these links does not result in the transfer of personal data to the respective provider. Only if you click on the link—which you can identify by the respective social media icon—and thereby access our page hosted by the respective provider will the provider become aware of this.

2. Embedding of YouTube Videos

(1) We have embedded videos from YouTube into our online offering to make our website more interesting and appealing to our visitors and to better present content and information. They can be found at https://www.YouTube.com stored and can be played directly from our website. The videos are embedded in “enhanced privacy mode,” which means that no data about you as a user is transmitted to YouTube unless you play the videos. Only when you play the videos is the data specified in paragraph 2 transmitted. We have no control over this data transmission.

(2) When you play an embedded YouTube video, YouTube receives the information that you have accessed this video and the corresponding subpage of our website. Information about how you interact with this video is also transmitted to YouTube. In addition, the data specified in § 3(1) of this Privacy Policy is transmitted. These data transfers occur regardless of whether you have a YouTube user account and, if applicable, are logged in to it or not. If you are logged in to YouTube, the transmitted data is directly associated with your account. If you do not wish for this data to be associated with your YouTube profile, you must log out before playing the video. YouTube stores your data as usage profiles and uses it for advertising, market research, and/or to tailor its website to user needs. Such analysis is carried out in particular (even for users who are not logged in) to deliver targeted advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles; to exercise this right, you must contact YouTube.

(3) By playing the videos, you consent to their use and the associated data transfer to YouTube. The legal basis for the use of the plug-in is Article 6(1)(a) of the GDPR.

(4) For more information on the purpose and scope of data collection and its processing by YouTube, please refer to the privacy policy. There you will also find further information about your rights and privacy settings: YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, USA, represented by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; https://www.google.de/intl/de/policies/privacy

3. Integration of DatoCMS

(1) This website displays content managed in DatoCMS, a so-called headless content management system. This content is stored on servers operated by the provider of DatoCMS; therefore, access to these servers and the associated data transfers are subject to Section 3(1) of this Privacy Policy.

(2) The use of DatoCMS is necessary for technical reasons in order to display the content you have requested. The legal basis for this use is our legitimate interest pursuant to Article 6(1)(f) of the GDPR.

(3) The provider of DatoCMS is Dato S.r.l., Via Francesco Botticini 3, 50143 Florence, Italy. Information on Dato S.r.l.’s privacy policy can be found at https://www.datocms.com/legal/privacy-policy .

4. Use of Algolia’s Search Service

(1) For the search function provided on our website, we use the service of the service provider Algolia SAS, Rue d’Amsterdam, 75008 Paris, France. In this context, your search queries are processed on the service provider’s servers. When your search queries are transmitted, the data listed in § 3(1) is also transferred to the service provider’s servers. Data processing is primarily carried out to respond to your search query. In addition, your queries are also used in anonymized form for statistical purposes. The legal basis for data processing is our legitimate interest pursuant to Art. 6(1)(f) of the GDPR. Our interest lies in providing a search function that our visitors expect, as well as in the statistical analysis of search queries on our website, so that we can better tailor the structure and content to the interests of our visitors.

(2) We have entered into a data processing agreement with the service provider Algolia, under which Algolia is bound by our instructions. You can find further information on the service provider’s data protection practices at https://www.algolia.com/policies/privacy/ See above.

5. Integration of Other Third-Party Services

(1) We have also integrated Google Tag Manager into this website to manage tags and plug-ins. We use this service based on a balancing of interests due to technical necessity (legal basis: Art. 6(1), sentence 1, lit. f GDPR):

(2) When you visit the website, the respective third-party provider receives the information that you have accessed the corresponding subpage of our website. In addition, the data specified in § 3(1) of this Privacy Policy is transmitted. This occurs regardless of whether this third-party provider offers a user account through which you are logged in or whether no user account exists. If you are logged in with the third-party provider, your data will be directly associated with your account. If you do not wish for this data to be associated with your profile at the respective third-party provider, you must log out before visiting our website. The third-party provider may store your data as a usage profile and may use it for advertising, market research, and/or to tailor its website to your needs. Such analysis is conducted in particular (even for users who are not logged in) to deliver targeted advertising and, where applicable, to inform other users of the respective service about your activities on our website. You have the right to object to the creation of these user profiles; to exercise this right, you must contact the respective third-party provider.

(3) For further information on the purpose and scope of data collection and its processing by the third-party provider, please refer to the privacy notices of these providers provided below. There you will also find further information regarding your rights in this regard and settings options for protecting your privacy:

(4) Addresses of the respective providers and URLs to their privacy policies:

a) Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland; https://www.google.de/intl/de/policies/privacy and https://www.google.com/policies/privacy/partners/?hl=de

Online Advertising and Marketing

1. Integration of the partner management platform impact.com

(1) This website uses the partner management platform impact.com. This platform acts as an intermediary between the manufacturers or sellers of the goods we present and companies like ours, which ultimately promote the sales of these goods through their activities. We receive performance-based compensation for this. To measure success, the platform analyzes visits originating from our website that lead to the linked stores and, where applicable, result in purchases there. Personal data is also processed in this context.

(2) The use of impact.com is essential to our business model in order to provide our website visitors with the desired service. The legal basis for this data processing is our legitimate interest pursuant to Art. 6(1)(f) of the GDPR.

(3) The provider of impact.com in Germany is Impact Germany GmbH, Friedrichstraße 68, 10117 Berlin. The parent company of Impact Germany GmbH is Impact Tech, Inc., 223 E. De La Guerra Street, Santa Barbara, CA 93101, USA. Information on Impact’s privacy policy can be found at https://impact.com/privacy-policy/ .

(4) We have entered into a contract with the service provider regarding the processing of personal data based on the EU Commission’s Standard Contractual Clauses.