Skip to Content

Data Privacy Policy


Dear customer, below we would like to inform you about the processing of your personal data in our shoe store. The protection of your personal data is very important to us. When processing your personal data, we strictly adhere to the relevant legal regulations.


1. Terminology


1.1 Personal data

Personal data means any information relating to an identifiable or identified natural person. An identifiable person is any natural person who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, location data or specific factors such as physical or physiological characteristics.


1.2 Processing

Processing means any operation which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.


1.3 Restriction of processing

Restriction of processing means the marking of stored personal data with the aim of limiting their processing in the future.


1.4 Controller 

Controller is the natural or legal person, agency or body which, alone or jointly with others, determines the purposes and means of the processing of personal data.


1.5 Processor

Processor is a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.


1.6 Consent 

Consent is any freely given, specific, informed and unambiguous indication of the data subject's wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her.


1.7 Data concerning health

Data concerning health means personal data that relates to the physical or mental health of a natural person, including the provision of health care services, which reveal information about his or her health status.


1.8 Special categories of personal data

Special categories of personal data are specially protected data such as health data, biometric data, data concerning a natural person's sex life or sexual orientation and data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership.



2. Scope


This data protection information applies to the processing of your data in connection with the scanning of your foot and all subsequent services and business activities by us or our service providers or third parties engaged by us.



3. Controller


For the processing of your personal data within the scope of this privacy policy we and corpus.e AG are joint controllers. We work closely with corpus.e AG with regard to the scanning of your foot and the provision of data for your shoe recommendation and purchase, so that we are jointly responsible for the processing of your data. Our contact details are as follows:


Controller 1:


Controller 2:

corpus.e AG

Staffelstr. 1

70190 Stuttgart

Germany


In order to guarantee your rights and taking into account the data protection regulations for the processing of your personal data as joint controllers, we have concluded an agreement that establishes rules for the processing of your personal data.


Since the controller corpus.e AG processes personal data in Europe and is based in the European Union, we have - if our legal address is not within a Country covered by an EU adequacy decision - agreed MODULE ONE of the standard contractual clauses for the transfer of personal data to third countries in accordance with Regulation (EU) 2016/679 of the European Parliament and the Council pursuant to the implementing decision of June 4 2021 as a guarantee of a level of data protection appropriate to the European Union due to the export of data from the European Union to the United States of America.



4. Data protection officer


The contact details of our data protection officers are


Controller 1:


Controller 2:

corpus.e AG

Data Protection Officer

dataprotection@shooiq.com



5. Processing of your personal data


5.1 Categories of personal data


If your foot is scanned by us, we process the following personal data:

  • Your name
  • Your e-mail address
  • Your height and body weight
  • A scan of your foot in the form of a static foot measurement and a dynamic running analysis and the resulting data (dimensions, shape, indications of any injuries or misalignments, etc.)
  • Data on shoes and/or insoles that fit and/or did not fit you (e.g. shoe size, model, manufacturer)
  • Time and place of the foot measurement/s
  • Sales information (in particular date, scope, type and number of sales)
  • Your declaration of consent



5.2 Purposes of data processing


We process your e-mail address and your name in order to be able to record your declaration of consent. 


In addition, if you also give us your consent, we will also process your name and e-mail address in order to send you promotional information about our products, services and our company, about our business partners and about events that may be of interest to you. We use the double opt-in procedure to obtain your consent. We will only send you information if you confirm your e-mail address by clicking on a link that we send you via e-mail. This enables us to verify your identity. You can withdraw your consent at any time by sending us an e-mail or letter or by clicking on a link contained in every e-mail advertisement you receive.


We process all the personal data mentioned in section 5.1 in order to provide you with personalised and effective advice on your shoe purchases and to suggest suitable products and services for your purchases, thereby increasing your wearing comfort, making your purchases easier and faster and finding products that are a perfect fit for you. This is also only done with your consent.


Furthermore, your data will be anonymised and statistically evaluated in anonymised form in order to obtain information about the sale of our products and the frequency of our business activities, to optimise our sales system and to improve our product range and our services. 

We record your declaration of consent in order to safeguard our legitimate interest in being able to prove that you have given your consent. If, at your request, we send your declaration of consent and our privacy policy to your e-mail address, we will use your e-mail address to fulfil this service.

We also use your e-mail address for correspondence in connection with shoe purchases or to answer your enquiries.



5.3 Legal basis


The legal basis for processing your data is your consent. You can find the sample declaration of consent here.


The recording of your declaration of consent and the anonymization are carried out on the basis of our legitimate interests, on the one hand to fulfil our obligations to provide evidence, and on the other hand to be able to carry out statistical evaluations in anonymised form to improve our products and services.


If, at your request, we send your declaration of consent and our privacy policy to your e-mail address, this is done to fulfil our legitimate interest in being able to provide this service to you. If we use your e-mail address in connection with your shoe purchases, this is done to prepare or execute a contractual relationship with you or to fulfil our legitimate interest in being able to communicate with you at your request. 


You can withdraw your consent at any time without giving reasons. This can be done orally, in writing or by e-mail to the contact details of the controller or data protection officer given above.



5.4 Duration of processing


Your personal data will be erased if you have withdrawn your consent and statutory retention obligations don’t exist. Your data will also be deleted when the purpose of the processing has been achieved and there are no legal or contractual retention obligations. 



5.5 Disclosure of personal data


Your personal data will not be disclosed to other persons, companies or organisations, in particular health data to third parties, unless you have expressly consented to such disclosure.


In addition, data may be passed on if

  • there is an enforceable official or court order or
  • we are obliged to do so by law or
  • the processing is necessary to protect your vital interests or those of another natural person, or
  • it is necessary for the performance of a task carried out in the public interest or in the exercise of official authority, or
  • we are authorised or even obliged to disclose data in order to pursue overriding legitimate interests.



6. Processing


For processing, it may be necessary for us to transfer your personal data to third parties (processors), for example in the context of IT support, hosting or newsletter dispatch.


If we use processors to process your data, we conclude the legally required data processing agreements. In this way, we ensure that the processor only uses the transferred data to fulfil the contract. We also ensure that the processor complies with the necessary technical and organisational measures for data security and data protection. 


Processors are carefully selected by us.



7. Your rights


You have the following rights with regard to the personal data concerning you, which you can assert against us:


7.1 Right of access by the data subject


You can request confirmation as to whether or not personal data concerning you are being processed by us. You can request access to the personal data and the following information

  • the purposes of the processing
  • the categories of personal data being processed
  • the recipients or categories of recipient to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organisations
  • where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period
  • the existence of the right to request from the controller rectification or erasure of personal data or restriction of processing of personal data concerning the data subject or to object to such processing
  • the existence of a right to lodge a complaint with a supervisory authority
  • where the personal data are not collected from you, any available information as to their source
  • the existence of automated decision-making, including profiling, and meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject.


We provide a copy of the personal data that is the subject of the processing under the legal requirements.


7.2 Right to rectification


If the personal data concerning you are not (or is no longer) correct, you can request that it be corrected. If your data are incomplete, you can request for it to be completed.


7.3 Right to erasure


You can request the erasure of your personal data if the following conditions are met:

  • the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed, or
  • you have withdrawn your consent on which the processing is based and there is no other legal ground for the processing, or
  • you have objected to the processing and there are no overriding legitimate grounds for the processing of your personal data, or you have objected to the processing of your data for direct marketing purposes, or
  • the personal data have been processed unlawfully, or
  • the erasure of the personal data is necessary for compliance with a legal obligation to which we are subject.


This does not apply if the processing is necessary

  • to exercise the right to freedom of expression and information, or
  • for compliance with a legal obligation to which we are subject or for the performance of a task carried out in the public interest or
  • for reasons of public interest in the area of public health or
  • for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes in so far as the erasure is likely to render impossible or seriously impair the achievement of the objectives of that processing; or
  • for the establishment, exercise or defence of legal claims.


7.4 Right to restriction of processing


You have the right to request the restriction of the processing of your personal data if one of the following conditions is met:

  • the accuracy of the personal data is contested by you, for a period enabling us to verify the accuracy of the personal data, or
  • the processing is unlawful and you oppose the erasure of the personal data and request the restriction of their use instead, or
  • we no longer need the personal data for the purposes of the processing, but you need it for the establishment, exercise or defence of legal claims, or
  • you have objected to the processing of your personal data, but it is not yet clear whether our legitimate grounds for processing override your legitimate grounds.


7.5 Right to object to processing


You have the right to object, on grounds relating to your particular situation, at any time to processing of your personal data which is carried out in the public interest or for the purposes of the legitimate interests pursued by us. In this case, we will no longer process your data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, including where the processing serves the establishment, exercise or defence of legal claims. You also have the right to object at any time to the processing of personal data concerning you for the purpose of direct marketing; this also applies to any profiling insofar as it is associated with such direct marketing.


7.6 Right to withdraw your consent


If you have given your consent for processing, you have the right to withdraw your consent at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.


7.7 Right to data portability


You have the right to receive the personal data concerning you that you have provided to us in a structured, commonly used and machine-readable format ("data portability") and the right to request the transmission of this data to another controller.


As controllers, we have jointly agreed on how we will safeguard your rights and have defined the obligations of each data controller to fulfil your rights as a data subject. This applies in particular to the exercise of your rights as a data subject and the fulfilment of our information obligations.


is your point of contact. You can assert your rights by notifying us using the contact details provided in the "Controller 1" section or by contacting the data protection officer of Controller 1 appointed by us.


If you believe that the processing of your personal data violates data protection law, you also have the right to lodge a complaint with a competent data protection supervisory authority. This also includes the data protection supervisory authority responsible for us: [competent authority together with contact details].

You can also lodge a complaint with the following supervisory authority at the registered office of the Controller 2:


Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg

Lautenschlagerstraße 20

70173 Stuttgart

Germany

Tel.: +49 711 615541-0

E-Mail: poststelle@lfdi.bwl.de



March 1st 2024