Privacy Policy

Privacy policy

Unless specified otherwise below, providing your data is not required by law, contract, or for the completion of a contract. You are not obligated to provide this data, and choosing not to do so will not have any consequences. This is only true if no additional information is given in subsequent processing operations.
“Personal data” refers to any information that relates to an identified or identifiable individual.

Server Log Files

You can browse our website without providing any personal information. Each time you access our site, your Internet browser sends usage data to us or our web host/IT service provider, which is stored in log files (also known as server log files). This data includes details such as the name of the page visited, the date and time of access, the IP address, the volume of data transferred, and the requesting provider. This processing is conducted under Art. 6 para. One lit. f GDPR, based on our legitimate interest in maintaining the smooth operation of our website and enhancing our services.
Your data may be transferred to countries outside the European Union for which the EU Commission has made an adequacy decision. Suppose there is no such decision, for instance, for transfers to the USA. In that case, the data transfers are based on standard contractual clauses, which provide appropriate safeguards for the protection of personal data. You can find more information about these clauses at: Standard Contractual Clauses.

Contact Us

Responsible Party
If you have inquiries, please get in touch with us. The entity responsible for data processing is Ira Neumann e.K., located at Eickedorfer Str. 1A, 28879 Grasberg, Germany. You can contact us by phone at +49 (0) 4208-8285280 or via email at service@blue-heeler.shoes

Initiating Contact via Email
If you choose to contact us via email, we will collect only the personal information you provide (such as your name, email address, and message) to the extent you provide it. This information is used to address and respond to your inquiry.
If your contact is related to pre-contractual measures (such as inquiries about a purchase or request for a quote) or pertains to an existing contract between us, the data processing is based on Art. 6 para. One lit. b GDPR.
If your contact is for other purposes, the data processing is based on Art. 6 para. One lit. f GDPR, which allows us to handle and respond to your request based on our legitimate interest. You have the right to object to this processing at any time, based on Art. 6 para. One lit. f GDPR, for reasons specific to your situation.
We will use your email address solely to process your request. We will delete your data once statutory retention periods have expired unless you have agreed to further processing and use.

Collection and Processing via Contact Form
When you use the contact form, we collect only the personal data you provide, such as your name, email address, and message. This data is used solely to establish contact with you.
Suppose your contact is related to pre-contractual measures (such as inquiries about purchasing or preparing an offer) or pertains to an existing contract with us. In that case, the data processing is based on Art. 6 para. One lit. b GDPR.
For other types of contact, the data processing is based on Art. 6 para. One lit. f GDPR, reflecting our legitimate interest in handling and responding to your request. You have the right to object to this processing at any time, based on Art. 6 para. One lit. f GDPR, for reasons related to your specific situation.
We will only use your email address to respond to your request. After processing, your data will be deleted according to statutory retention periods unless you have agreed to further processing and use.

Customer Account Orders

Customer Account
When you create a customer account, we collect the personal data you provide as specified during registration. This data processing aims to enhance your shopping experience and streamline order management. Processing is based on your consent under Art. 6 para. 1 lit. a GDPR. You can withdraw your consent at any time by notifying us, which will not affect the legality of processing carried out before the withdrawal. After withdrawal, your customer account will be deleted.

Collection, Processing, and Disclosure of Personal Data for Orders
When you place an order, we collect and process your personal data only as necessary to fulfill and manage your order and address your inquiries. Providing this data is essential for concluding the contract. Failure to provide it will prevent us from completing the contract. Processing is based on Art. 6 para. 1 lit. b GDPR and is necessary for contract performance.
We may share your data with shipping companies, dropshipping providers, payment processors, order fulfillment services, and IT service providers. We ensure compliance with legal requirements and limit data transmission to what is necessary.
Your data may be transferred to countries outside the European Union where the EU Commission has issued an adequacy decision. For countries without such a decision, like the USA, data transfers are governed by standard contractual clauses to ensure adequate protection, as detailed here: Standard Contractual Clauses.

Advertising

Use of Email Address for Newsletters
We use your email address solely for sending newsletters, provided you have given explicit consent. This processing is based on Art. 6 para. 1 lit. a GDPR. You can withdraw your consent at any time without affecting the legality of processing that occurred before the withdrawal. To unsubscribe from the newsletter, you can use the link provided in each newsletter or notify us directly. Your email address will then be removed from our mailing list.

Use of Email Address for Direct Advertising
If you have purchased a product or service from us, we may use your email address to send you electronic advertising for our own similar goods or services, unless you have opted out of this use. Providing your email address is necessary for the completion of the contract; failure to do so means we cannot finalize the contract. This processing is based on Art. 6 para. 1 lit. f GDPR, reflecting our legitimate interest in direct advertising. You can object to this use at any time by notifying us. Contact details for exercising this right are available in the legal notice, or you can use the link provided in the promotional email. Opting out incurs no costs other than the standard transmission fees.

Shipping Service Provider

Sharing Email Address with Shipping Companies
If you have explicitly consented during the ordering process, we will share your email address with the shipping company for the purpose of providing updates on the shipping status. This data processing is based on Art. 6 para. 1 lit. a GDPR, with your consent. You can withdraw your consent at any time by contacting us or the shipping company without affecting the legality of processing that occurred before the withdrawal.

Payment Service Provider
Use of PayPal
We use the PayPal payment service provided by PayPal (Europe) S.à.r.l. et Cie, S.C.A. (22-24 Boulevard Royal, L-2449 Luxembourg; “PayPal”) on our website. This data processing allows us to offer you the option to pay using PayPal. When you choose to pay via PayPal, the necessary payment information will be transmitted to PayPal to process the payment and fulfill the contract with you. This processing is based on Art. 6 para. 1 lit. b GDPR.
Please note that all PayPal transactions are governed by PayPal’s privacy policy, which can be found at PayPal Privacy Policy.

Use of PayPal Express
We use the PayPal Express payment service provided by PayPal (Europe) S.à.r.l. et Cie, S.C.A. (22-24 Boulevard Royal, L-2449 Luxembourg; “PayPal”) on our website. This service allows us to offer you payment via PayPal Express. To enable this payment option, PayPal collects, stores, and analyzes data such as your IP address, device type, operating system, browser type, and device location when you access the website. Cookies may also be used to recognize your browser.
The processing of your personal data is based on Art. 6 para. One lit. f GDPR, reflecting our legitimate interest in providing a customer-friendly range of payment methods. You have the right to object to this data processing at any time for reasons related to your specific situation.
When you choose to use PayPal Express, the necessary data for payment processing will be sent to PayPal to complete the transaction and fulfill the contract with you. This processing is based on Art. 6 para. One lit. b GDPR. For more information on how your data is handled when using PayPal Express, please refer to the PayPal privacy policy at PayPal Privacy Policy.

Use of PayPal Check-Out
We use the PayPal Check-Out payment service provided by PayPal (Europe) S.à.r.l. et Cie, S.C.A. (22-24 Boulevard Royal, L-2449 Luxembourg; “PayPal”) on our website. This service allows us to offer various payment options, including PayPal, credit card via PayPal, direct debit via PayPal, and “Pay Later” via PayPal. When you choose one of these payment methods, the necessary data for processing the payment is transmitted to PayPal to fulfill the contract with you. This processing is based on Art. 6 para. One lit. b GDPR.

Credit Card via PayPal, Direct Debit via PayPal, & “Pay Later” via PayPal
For payment methods such as credit card via PayPal, direct debit via PayPal, or “Pay Later” via PayPal, PayPal may conduct a credit check using mathematical and statistical procedures through credit agencies. To do this, PayPal will share the personal data needed for the credit check with a credit agency and use the resulting information to assess the likelihood of payment default. This helps PayPal make informed decisions about establishing, executing, or terminating the contractual relationship. The credit report may include probability scores derived from recognized mathematical and statistical methods, which may factor in address data. Your privacy interests are protected in accordance with legal requirements. This data processing aims to verify creditworthiness to facilitate the contract. It is based on Art. 6 para. One lit. f GDPR, reflecting our legitimate interest in protecting against non-payment if PayPal provides advance payments.
You have the right to object to this processing at any time based on Art. 6 para. One lit. f GDPR, by informing PayPal of your objection. Providing the necessary data is essential for using the requested payment method. If you do not provide the data, the contract cannot be completed using the selectedC payment method.

Third-Party Providers
When using a payment method provided by a third party, the necessary payment data is transmitted to PayPal. This processing is based on Art. 6 para. One lit. b GDPR. PayPal may then forward this data to the respective third-party provider to complete the payment process. This is also based on Art. 6 para. 1 lit. b GDPR. Examples of local third-party providers include:

• Sofort (SOFORT GmbH, Theresienhöhe 12, 80339 Munich, Germany)
• giropay (Paydirekt GmbH, Stephanstr. 14-16, 60313 Frankfurt am Main)

Purchase on Account via PayPal
When you choose the “purchase on account” payment method, the necessary data for payment processing is initially sent to PayPal. PayPal then forwards this data to Ratepay GmbH (Franklinstraße 28-29, 10587 Berlin; “Ratepay”) to complete the payment process. This processing is based on Art. 6 para. One lit. b GDPR. Ratepay may perform a credit check using mathematical and statistical methods (such as probability or score values) with credit agencies, as described above. The purpose of this data processing is to verify creditworthiness for initiating the contract, based on Art. 6 para. One lit. f GDPR, reflecting our legitimate interest in protecting against payment defaults if Ratepay provides advance payments. For more details on data protection and the credit agencies used by Ratepay, visit [Ratepay Privacy Policy](https://www.ratepay.com/legal-payment-dataprivacy/) and [Ratepay Credit Agencies](https://www.ratepay.com/legal-payment-creditagencies/). For further information on data processing with PayPal, refer to their privacy policy at [PayPal Privacy Policy](https://www.paypal.com/de/webapps/mpp/ua/privacy-full).

Cookies
Our website uses cookies, which are small text files stored on your computer by your web browser. When you visit our site, a cookie may be placed on your system. This cookie contains a unique string of characters that helps identify your browser when you return to the site.
You have full control over cookies on your computer. You can configure your web browser to notify you before cookies are set, allowing you to choose whether to accept them and prevent their storage. You can also delete cookies that have already been saved. Please note that disabling cookies may affect your ability to fully use all features of our website.
For information on managing (including deactivating) cookies in major browsers, follow these links:

• Chrome
• Internet Explorer
• Mozilla Firefox
• Safari

Technically Necessary Cookies
Unless stated otherwise in this privacy policy, we use technically necessary cookies solely to enhance the user-friendliness, effectiveness, and security of our website. These cookies allow our systems to recognize your browser after you navigate between pages and provide you with continuous services. Certain functions of our website rely on cookies to maintain browser recognition across page changes.
The use of cookies or similar technologies is based on § 25 para. 2 TTDSG. The processing of your personal data is carried out in accordance with Art. 6 para. 1 lit. f GDPR, reflecting our legitimate interest in ensuring the optimal performance of the website and delivering a user-friendly and effective service. You have the right to object to this processing at any time based on your specific situation.

Use of Borlabs Cookie
Our website uses the Borlabs Cookie consent management tool provided by Borlabs – Benjamin A. Bornschein (Georg-Wilhelm-Str. 17, 21107 Hamburg; “Borlabs”). This tool allows you to provide and manage your consent for data processing on our website, including cookie settings, and to withdraw consent if needed.
The purpose of this data processing is to obtain and document the necessary consent for data processing, thereby fulfilling legal requirements. Cookies may be used for this purpose, and the following information may be collected: the date and time of your page visit, details about your browser and device, a UID (a randomly assigned anonymous ID), and opt-in/opt-out data. This information is not shared with third parties.
This data processing is conducted to comply with legal obligations under Art. 6 para. 1 lit. c GDPR. For more details on Borlabs’ data protection practices, please visit: Borlabs Cookie Privacy.

Use of Google Analytics 4
We utilize Google Analytics, a web analysis service provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; “Google”), on our website.
The purpose of this data processing is to analyze website usage and visitor behavior for marketing and advertising purposes. Google will use the collected information to assess your use of our website, generate reports on website activity, and provide additional services related to website and internet usage.
The data collected may include: IP address, date and time of page visits, click paths, browser and device information, pages visited, referrer URL (the site from which you accessed our site), location data, and purchase activities. Google will not merge the IP address transmitted by your browser with other Google data.
Google employs technologies such as cookies, browser web storage, and tracking pixels to analyze your website usage. Information generated about your use of the website is typically sent to a Google server in the USA and stored there. Since there is no EU Commission adequacy decision for the USA, data is transferred based on standard contractual clauses providing adequate protection for personal data, which can be reviewed at Google Privacy Framework. Both Google and US government authorities may have access to your data, and Google may link this data with other information it holds about you, including search history, personal accounts, and data from other devices.
When using Google Analytics 4, your IP address is automatically collected and processed in an anonymized form. Google shortens IP addresses within EU member states or other countries participating in the Agreement on the European Economic Area.
The use of cookies and similar technologies is based on your consent, as per § 25 para. 1 p. 1 TTDSG in conjunction with Art. 6 para. 1 lit. a GDPR. You may withdraw your consent at any time without affecting the legality of processing based on consent before its withdrawal.
For more information on Google’s terms of use and data protection practices, visit Google Partner Sites Privacy and Google Privacy Policy.

Use of Google Ads Conversion Tracking
Our website utilizes the Google Ads online advertising program and its associated conversion tracking service, provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; “Google”).
When you click on an ad served by Google, a cookie for conversion tracking is placed on your computer. These cookies are temporary, do not contain personal data, and are not used for personal identification. If you visit certain pages on our website and the cookie is still active, Google and we can determine that you clicked on the ad and were redirected to this page. Each Google Ads client is assigned a unique cookie, preventing tracking across different clients’ websites.
The data collected through conversion cookies is used to compile conversion statistics, showing us how many users clicked on our ads and were redirected to a page with a conversion tracking tag. However, we do not receive information that can identify individual users personally.
Your data may be transferred to Google LLC servers in the USA. Since there is no adequacy decision from the EU Commission for the USA, data transfers are based on standard contractual clauses providing adequate protection for personal data, which can be reviewed at Google Privacy Framework and Google Ads Controller Terms.
The use of cookies and similar technologies is based on your consent, as outlined in § 25 para. 1 p. 1 TTDSG in conjunction with Art. 6 para. 1 lit. a GDPR. You may withdraw your consent at any time without affecting the legality of processing based on consent prior to its withdrawal.
For more information, including Google’s privacy policy, visit: Google Privacy Policy.

Use of the ADCELL Partner Program
We utilize the ADCELL partner program provided by Firstlead GmbH (Rosenfelder Str. 15-16, 10315 Berlin; “ADCELL”).
When you click on an advertisement with a partner link, ADCELL places a cookie on your computer for conversion tracking purposes. These cookies are used to ensure accurate billing within the partner program by tracking the effectiveness of advertising. They allow us to determine that you clicked on the ad and trace the source of the order back to the advertiser. ADCELL also employs tracking pixels to analyze visitor traffic on web pages.
Information collected by cookies and tracking pixels regarding your use of the website (including your IP address) and the delivery of ads is transmitted to and stored on an ADCELL server. ADCELL can identify when a partner link on this site has been clicked. Although ADCELL may share anonymized information with partners in some cases, your IP address is not combined with other stored data.
The processing of your personal data is based on Art. 6 para. 1 lit. f GDPR, which allows us to measure the effectiveness of partner advertising and ensure accurate commission billing as part of the partner program. You have the right to object to the processing of your personal data at any time, based on reasons related to your specific situation.
You can opt out of ADCELL tracking by visiting ADCELL Privacy Settings. If you disable tracking, your data will not be included in conversion tracking statistics.
You can also prevent cookies from being stored by adjusting the settings in your browser. However, please note that this may limit your ability to use some features of the website.

Plug-ins and Miscellaneous
Use of Google Tag Manager
We utilize Google Tag Manager, provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; “Google”), on our website.
Google Tag Manager helps manage JavaScript and HTML tags used to deploy tracking and analysis tools. Its purpose is to enhance and optimize our website according to user needs.
While Google Tag Manager itself does not store cookies or process personal data, it facilitates the activation of other tags that may collect and process such data.
For more information on terms of use and data protection, please refer to the following link.

Use of Google reCAPTCHA
We use the Google reCAPTCHA service provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; “Google”) on our website. This service helps differentiate between human input and automated machine processing. To achieve this, your input is sent to Google, along with your IP address and any other data necessary for reCAPTCHA.
This data is processed by Google within the European Union and may also be transmitted to Google LLC servers in the USA. Since there is no adequacy decision by the EU Commission for the USA, data transfers are based on standard contractual clauses that provide adequate safeguards for personal data protection. You can view these clauses at: https://policies.google.com/privacy/frameworks.
The processing of your personal data is conducted under Art. 6 para. 1 lit. f GDPR, based on our legitimate interest in safeguarding our website from automated access, misuse, and spam. You have the right to object to the processing of your personal data at any time, based on Art. 6 para. 1 lit. f GDPR, for reasons related to your particular situation.
For more details on Google reCAPTCHA and its privacy policy, please visit: https://www.google.com/recaptcha/intro/android.html and https://www.google.com/privacy.  

Use of Cloudflare
Our website utilizes the Cloudflare content delivery network (CDN) provided by Cloudflare Inc. (101 Townsend St, San Francisco, CA 94107, USA; “Cloudflare”). This network comprises servers located in multiple data centers that work to deliver certain content from our website.
The purpose of this data processing is to enhance the loading times of our website, thereby improving user experience. During this process, various data may be collected, including IP addresses, system configuration details, and information about traffic to and from customer websites (commonly known as server log files).
Data may be transferred to the USA. The EU Commission has not issued an adequacy decision for the USA. Data transfers are governed by standard contractual clauses as appropriate safeguards for personal data protection, which can be reviewed at: [Standard Contractual Clauses](https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_de).
The processing of your personal data is conducted based on our legitimate interest in ensuring that our website meets user needs and functions effectively, as outlined in Art. 6 para. 1 lit. f GDPR. You have the right to object to the processing of your personal data based on specific circumstances at any time, as per Art. 6 para. 1 lit. f GDPR.
For more information on data protection while using Cloudflare, please visit: [Cloudflare Privacy Policy](https://www.cloudflare.com/de-de/privacypolicy/).

Use of Google Maps
We incorporate Google Maps from Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; “Google”) on our website. This functionality allows us to display geographical information and interactive maps visually.
When you access pages that include Google Maps, Google may collect, process, and use data from visitors. This data may also be transferred to the USA. Since the EU Commission has not issued an adequacy decision for the USA, data transfers are conducted based on standard contractual clauses as suitable safeguards for personal data protection, which can be reviewed at: Standard Contractual Clauses.
The processing of your personal data is based on our legitimate interest in enhancing and customizing our website, as per Art. 6 para. 1 lit. f GDPR. You have the right to object to the processing of your personal data at any time, based on specific circumstances, as outlined in Art. 6 para. 1 lit. f GDPR.
For further information on how Google collects and uses data, please refer to Google’s privacy policy at Google Privacy Policy. You can also adjust your settings in the data protection center to manage and protect your data processed by Google.

Use of YouTube
We integrate YouTube videos on our website through an embedding function provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; “YouTube”), a subsidiary of Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”).
The videos are displayed on our site within an iFrame. We use YouTube’s “Extended Data Protection Mode,” which means that YouTube does not store information about website visitors unless they watch a video. In such cases, information related to the video viewing is transmitted to and stored by YouTube.
Your data may be transferred to the USA. As there is no adequacy decision from the EU Commission for the USA, data transfers are conducted based on standard contractual clauses that ensure appropriate safeguards for data protection, which can be reviewed at: Standard Contractual Clauses.
The processing of your personal data is based on our legitimate interest in optimizing and tailoring our website, as per Art. 6 para. 1 lit. f GDPR. You have the right to object to the processing of your personal data at any time, based on specific circumstances, according to Art. 6 para. 1 lit. f GDPR.
For more information on how YouTube and Google collect and use data, your rights regarding this data, and how to protect your privacy, please refer to YouTube’s privacy policy at YouTube Privacy Policy.

Use of Google Fonts
We utilize Google Fonts from Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; “Google”) on our website.
The purpose of this data processing is to ensure a consistent presentation of fonts across our website. To load the fonts, a connection is established with Google’s servers when you access our site. This may involve the use of cookies. During this process, your IP address and browser information are transmitted to Google. This data is not associated with your Google account.
Your data might be transferred to the USA. The EU Commission has not made an adequacy decision for the USA. Data transfer is based on standard contractual clauses, which provide suitable guarantees for the protection of personal data. You can view these clauses at: https://policies.google.com/privacy/frameworks.
The processing of your personal data is carried out based on Art. 6 para. 1 lit. f GDPR, reflecting our legitimate interest in maintaining a user-friendly and aesthetically pleasing website. You have the right to object to this processing at any time on grounds related to your particular situation, as provided under Art. 6 para. 1 lit. f GDPR, by informing us of your objection.
For more information on data processing and protection, visit Google’s privacy policy and Google Fonts FAQ.

Duration of Storage
Once the contract has been fully executed, your data will initially be retained for the duration of the warranty period. Following this, it will be kept in accordance with statutory retention periods, particularly those related to tax and commercial laws. After these periods have expired, the data will be deleted, unless you have agreed to its continued processing and use.

Rights of the Data Subject
Under Art. 15 to 20 GDPR, you have the following rights if the legal conditions are met: the right to access, correct, delete, restrict processing, and transfer your data. Additionally, under Art. 21 para. 1 GDPR, you have the right to object to processing based on Art. 6 para. 1 f GDPR, as well as to processing for direct marketing purposes.

Right to File a Complaint with the Supervisory Authority
According to Art. 77 GDPR, you have the right to file a complaint with the supervisory authority if you believe that your personal data is being processed unlawfully.
You may file a complaint with the supervisory authority responsible for us at the following contact details:
State Commissioner for Data Protection of Lower Saxony
Prinzenstrasse 5
30159 Hanover
Phone: +49 511 1204500
Fax: +49 511 1204599
Email: poststelle@lfd.niedersachsen.de

Right to Object
If the processing of your personal data is based on our legitimate interests under Art. 6 para. 1 lit. f GDPR, you have the right to object to this processing at any time for reasons related to your specific situation, with effect for the future.   Upon receiving your objection, we will cease processing the data in question unless we can demonstrate compelling legitimate grounds for continuing the processing that outweighs your interests, rights, and freedoms or if the processing is necessary for the establishment, exercise, or defense of legal claims.   If your personal data is being processed for direct marketing purposes, you may object to this processing at any time by notifying us. Once we receive your objection, we will stop using your data for direct marketing.