VAUDE Privacy Policy

An overview of data protection

General information

The following information will provide you with an easy to navigate overview of what will happen with your
personal data when you visit this website. The term “personal data” comprises all data that can be used to
personally identify you. For detailed information about the subject matter of data protection, please consult
our Data Protection Declaration, which we have included beneath this copy.

Data recording on this website
Who is the responsible party for the recording of data on this website (i.e., the “controller”)?

The data on this website is processed by the operator of the website, whose contact information is available
under section “Information about the responsible party (referred to as the “controller” in the GDPR)” in this
Privacy Policy.

How do we record your data?

We collect your data as a result of your sharing of your data with us. This may, for instance be information
you enter into our contact form.

Other data shall be recorded by our IT systems automatically or after you consent to its recording during
your website visit. This data comprises primarily technical information (e.g., web browser, operating system,
or time the site was accessed). This information is recorded automatically when you access this website.

What are the purposes we use your data for?

A portion of the information is generated to guarantee the error free provision of the website. Other data
may be used to analyze your user patterns.

What rights do you have as far as your information is concerned?

You have the right to receive information about the source, recipients, and purposes of your archived
personal data at any time without having to pay a fee for such disclosures. You also have the right to demand
that your data are rectified or eradicated. If you have consented to data processing, you have the option to
revoke this consent at any time, which shall affect all future data processing. Moreover, you have the right to
demand that the processing of your data be restricted under certain circumstances. Furthermore, you have
the right to log a complaint with the competent supervising agency.

Please do not hesitate to contact us at any time if you have questions about this or any other data protection
related issues.

Analysis tools and tools provided by third parties

There is a possibility that your browsing patterns will be statistically analyzed when your visit this website.
Such analyses are performed primarily with what we refer to as analysis programs.

For detailed information about these analysis programs please consult our Data Protection Declaration
below.

Hosting

We are hosting the content of our website at the following provider:

External Hosting

This website is hosted externally. Personal data collected on this website are stored on the servers of the
host. These may include, but are not limited to, IP addresses, contact requests, metadata and
communications, contract information, contact information, names, web page access, and other data
generated through a web site.

The external hosting serves the purpose of fulfilling the contract with our potential and existing customers
(Art. 6(1)(b) GDPR) and in the interest of secure, fast, and efficient provision of our online services by a
professional provider (Art. 6(1)(f) GDPR). If appropriate consent has been obtained, the processing is carried
out exclusively on the basis of Art. 6 (1)(a) GDPR and § 25 (1) TTDSG, insofar the consent includes the
storage of cookies or the access to information in the user's end device (e.g., device fingerprinting) within the
meaning of the TTDSG. This consent can be revoked at any time.

Our host(s) will only process your data to the extent necessary to fulfil its performance obligations and to
follow our instructions with respect to such data.

We are using the following host(s):

Microsoft Ireland Operations Limited
Rechtsform: Private Company Limited by Shares
Eingetragen in Irland, Nr. 256796
Office:
70 Sir John Rogerson's Quay
Dublin 2
Irland

Data processing

We have concluded a data processing agreement (DPA) for the use of the above-mentioned service. This is a
contract mandated by data privacy laws that guarantees that they process personal data of our website
visitors only based on our instructions and in compliance with the GDPR.

General information and mandatory information

Data protection
The operators of this website and its pages take the protection of your personal data very seriously. Hence,
we handle your personal data as confidential information and in compliance with the statutory data
protection regulations and this Data Protection Declaration.

Whenever you use this website, a variety of personal information will be collected. Personal data comprises
data that can be used to personally identify you. This Data Protection Declaration explains which data we
collect as well as the purposes we use this data for. It also explains how, and for which purpose the
information is collected.

We herewith advise you that the transmission of data via the Internet (i.e., through e-mail communications)
may be prone to security gaps. It is not possible to completely protect data against third-party access.

Information about the responsible party (referred to as the “controller” in the GDPR)

The data processing controller on this website is:

VAUDE Sport GmbH & Co. KG
Vaude Straße 2
D-88069 Tettnang

Phone: +49-(0)-7542-5306-0
E-Mail: impressum@vaude.com

The controller is the natural person or legal entity that single-handedly or jointly with others makes
decisions as to the purposes of and resources for the processing of personal data (e.g., names, e-mail
addresses, etc.).

Storage duration

Unless a more specific storage period has been specified in this privacy policy, your personal data will remain
with us until the purpose for which it was collected no longer applies. If you assert a justified request for
deletion or revoke your consent to data processing, your data will be deleted, unless we have other legally
permissible reasons for storing your personal data (e.g., tax or commercial law retention periods); in the
latter case, the deletion will take place after these reasons cease to apply.

General information on the legal basis for the data processing on this website

If you have consented to data processing, we process your personal data on the basis of Art. 6(1)(a) GDPR or
Art. 9 (2)(a) GDPR, if special categories of data are processed according to Art. 9 (1) DSGVO. In the case of
explicit consent to the transfer of personal data to third countries, the data processing is also based on Art.
49 (1)(a) GDPR. If you have consented to the storage of cookies or to the access to information in your end
device (e.g., via device fingerprinting), the data processing is additionally based on § 25 (1) TTDSG. The
consent can be revoked at any time. If your data is required for the fulfillment of a contract or for the
implementation of pre-contractual measures, we process your data on the basis of Art. 6(1)(b) GDPR.
Furthermore, if your data is required for the fulfillment of a legal obligation, we process it on the basis of Art.
6(1)(c) GDPR. Furthermore, the data processing may be carried out on the basis of our legitimate interest
according to Art. 6(1)(f) GDPR. Information on the relevant legal basis in each individual case is provided in
the following paragraphs of this privacy policy.

Designation of a data protection officer
We have appointed a data protection officer.

Ulrike Eben
VAUDE Sport GmbH & Co. KG
VAUDE-Straße 2
88069 Tettnang
Deutschland

Phone: +49-(0)-7542-5306-0
E-Mail: datenschutz@vaude.com

Information on data transfer to the USA and other non-EU countries

Among other things, we use tools of companies domiciled in the United States or other from a data
protection perspective non-secure non-EU countries. If these tools are active, your personal data may
potentially be transferred to these non-EU countries and may be processed there. We must point out that in
these countries, a data protection level that is comparable to that in the EU cannot be guaranteed. For
instance, U.S. enterprises are under a mandate to release personal data to the security agencies and you as
the data subject do not have any litigation options to defend yourself in court. Hence, it cannot be ruled out
that U.S. agencies (e.g., the Secret Service) may process, analyze, and permanently archive your personal
data for surveillance purposes. We have no control over these processing activities.

Revocation of your consent to the processing of data
A wide range of data processing transactions are possible only subject to your express consent. You can also
revoke at any time any consent you have already given us. This shall be without prejudice to the lawfulness
of any data collection that occurred prior to your revocation.

Right to object to the collection of data in special cases; right to object to direct
advertising (Art. 21 GDPR)

IN THE EVENT THAT DATA ARE PROCESSED ON THE BASIS OF ART. 6(1)(E) OR (F) GDPR, YOU HAVE
THE RIGHT TO AT ANY TIME OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA BASED ON
GROUNDS ARISING FROM YOUR UNIQUE SITUATION. THIS ALSO APPLIES TO ANY PROFILING BASED
ON THESE PROVISIONS. TO DETERMINE THE LEGAL BASIS, ON WHICH ANY PROCESSING OF DATA IS
BASED, PLEASE CONSULT THIS DATA PROTECTION DECLARATION. IF YOU LOG AN OBJECTION, WE
WILL NO LONGER PROCESS YOUR AFFECTED PERSONAL DATA, UNLESS WE ARE IN A POSITION TO
PRESENT COMPELLING PROTECTION WORTHY GROUNDS FOR THE PROCESSING OF YOUR DATA,
THAT OUTWEIGH YOUR INTERESTS, RIGHTS AND FREEDOMS OR IF THE PURPOSE OF THE
PROCESSING IS THE CLAIMING, EXERCISING OR DEFENCE OF LEGAL ENTITLEMENTS (OBJECTION
PURSUANT TO ART. 21(1) GDPR).

IF YOUR PERSONAL DATA IS BEING PROCESSED IN ORDER TO ENGAGE IN DIRECT ADVERTISING,
YOU HAVE THE RIGHT TO OBJECT TO THE PROCESSING OF YOUR AFFECTED PERSONAL DATA FOR
THE PURPOSES OF SUCH ADVERTISING AT ANY TIME. THIS ALSO APPLIES TO PROFILING TO THE
EXTENT THAT IT IS AFFILIATED WITH SUCH DIRECT ADVERTISING. IF YOU OBJECT, YOUR PERSONAL
DATA WILL SUBSEQUENTLY NO LONGER BE USED FOR DIRECT ADVERTISING PURPOSES
(OBJECTION PURSUANT TO ART. 21(2) GDPR).

Right to log a complaint with the competent supervisory agency
In the event of violations of the GDPR, data subjects are entitled to log a complaint with a supervisory
agency, in particular in the member state where they usually maintain their domicile, place of work or at the
place where the alleged violation occurred. The right to log a complaint is in effect regardless of any other
administrative or court proceedings available as legal recourses.

Right to data portability
You have the right to demand that we hand over any data we automatically process on the basis of your
consent or in order to fulfil a contract be handed over to you or a third party in a commonly used, machine
readable format. If you should demand the direct transfer of the data to another controller, this will be done
only if it is technically feasible.

Information about, rectification and eradication of data

Within the scope of the applicable statutory provisions, you have the right to at any time demand
information about your archived personal data, their source and recipients as well as the purpose of the
processing of your data. You may also have a right to have your data rectified or eradicated. If you have
questions about this subject matter or any other questions about personal data, please do not hesitate to
contact us at any time.

Right to demand processing restrictions

You have the right to demand the imposition of restrictions as far as the processing of your personal data is
concerned. To do so, you may contact us at any time. The right to demand restriction of processing applies in
the following cases:

In the event that you should dispute the correctness of your data archived by us, we will usually need
some time to verify this claim. During the time that this investigation is ongoing, you have the right to
demand that we restrict the processing of your personal data.
If the processing of your personal data was/is conducted in an unlawful manner, you have the option to
demand the restriction of the processing of your data in lieu of demanding the eradication of this data.
If we do not need your personal data any longer and you need it to exercise, defend or claim legal
entitlements, you have the right to demand the restriction of the processing of your personal data instead
of its eradication.
If you have raised an objection pursuant to Art. 21(1) GDPR, your rights and our rights will have to be
weighed against each other. As long as it has not been determined whose interests prevail, you have the
right to demand a restriction of the processing of your personal data.

If you have restricted the processing of your personal data, these data – with the exception of their archiving –
may be processed only subject to your consent or to claim, exercise or defend legal entitlements or to
protect the rights of other natural persons or legal entities or for important public interest reasons cited by
the European Union or a member state of the EU.

SSL and/or TLS encryption

For security reasons and to protect the transmission of confidential content, such as purchase orders or
inquiries you submit to us as the website operator, this website uses either an SSL or a TLS encryption
program. You can recognize an encrypted connection by checking whether the address line of the browser
switches from “http://” to “https://” and also by the appearance of the lock icon in the browser line.

If the SSL or TLS encryption is activated, data you transmit to us cannot be read by third parties.

Encrypted payment transactions on this website

If you are under an obligation to share your payment information (e.g. account number if you give us the
authority to debit your bank account) with us after you have entered into a fee-based contract with us, this
information is required to process payments.

Payment transactions using common modes of paying (Visa/MasterCard, debit to your bank account) are
processed exclusively via encrypted SSL or TLS connections. You can recognize an encrypted connection by
checking whether the address line of the browser switches from “http://” to “https://” and also by the
appearance of the lock icon in the browser line.

If the communication with us is encrypted, third parties will not be able to read the payment information you
share with us.

Recording of data on this website

Cookies

Our websites and pages use what the industry refers to as “cookies.” Cookies are small data packages that do
not cause any damage to your device. They are either stored temporarily for the duration of a session
(session cookies) or they are permanently archived on your device (permanent cookies). Session cookies are
automatically deleted once you terminate your visit. Permanent cookies remain archived on your device
until you actively delete them, or they are automatically eradicated by your web browser.

In some cases, it is possible that third-party cookies are stored on your device once you enter our site (thirdparty
cookies). These cookies enable you or us to take advantage of certain services offered by the third
party (e.g., cookies for the processing of payment services).

Cookies have a variety of functions. Many cookies are technically essential since certain website functions
would not work in the absence of the cookies (e.g., the shopping cart function or the display of videos). The
purpose of other cookies may be the analysis of user patterns or the display of promotional messages.

Cookies, which are required for the performance of electronic communication transactions, or for the
provision of certain functions you want to use (e.g., for the shopping cart function) or those that are
necessary for the optimization (required cookies) of the website (e.g., cookies that provide measurable
insights into the web audience), shall be stored on the basis of Art. 6(1)(f) GDPR, unless a different legal basis
is cited. The operator of the website has a legitimate interest in the storage of required cookies to ensure the
technically error free and optimized provision of the operator’s services. If your consent to the storage of the
cookies and similar recognition technologies has been requested, processing occurs exclusively on the basis
of the consent obtained (Art. 6(1)(a) GDPR and § 25 (1) TTDSG); this consent may be revoked at any time.

You have the option to set up your browser in such a manner that you will be notified any time cookies are
placed and to permit the acceptance of cookies only in specific cases. You may also exclude the acceptance of
cookies in certain cases or in general or activate the delete function for the automatic eradication of cookies
when the browser closes. If cookies are deactivated, the functions of this website may be limited.

In the event that third-party cookies are used or if cookies are used for analytical purposes, we will
separately notify you in conjunction with this Data Protection Policy and, if applicable, ask for your consent.

Consent with Usercentrics

This website uses the consent technology of Usercentrics to obtain your consent to the storage of certain
cookies on your device or for the use of specific technologies, and to document the former in a data
protection compliant manner. The party offering this technology is Usercentrics GmbH, Sendlinger Straße 7,
80331 München, Germany, website:
https://usercentrics.com/ (hereinafter referred to as “Usercentrics”).

Whenever you visit our website, the following personal data will be transferred to Usercentrics:
Your declaration(s) of consent or your revocation of your declaration(s) of consent
Your IP address
Information about your browser
Information about your device
The date and time you visited our website

Moreover, Usercentrics shall store a cookie in your browser to be able to allocate your declaration(s) of
consent or any revocations of the former. The data that are recorded in this manner shall be stored until you
ask us to eradicate them, delete the Usercentrics cookie or until the purpose for archiving the data no longer
exists. This shall be without prejudice to any mandatory legal retention periods.

Usercentrics uses cookies to obtain the declarations of consent mandated by law. The legal basis for the use
of specific technologies is Art. 6(1)(c) GDPR.

Data processing

Social Media

Facebook

We have integrated elements of the social network Facebook on this website. The provider of this service is
Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. According to Facebook’s statement
the collected data will be transferred to the USA and other third-party countries too.

An overview of the Facebook social media elements is available under the following link:
https://developers.facebook.com/docs/plugins/.

If the social media element has been activated, a direct connection between your device and the Facebook
server will be established. As a result, Facebook will receive information confirming your visit to this website
with your IP address. If you click on the Facebook Like button while you are logged into your Facebook
account, you can link content of this website to your Facebook profile. Consequently, Facebook will be able
to allocate your visit to this website to your user account. We have to emphasize that we as the provider of
the website do not receive any information on the content of the transferred data and its use by Facebook.
For more information, please consult the Data Privacy Policy of Facebook at:
https://de-de.facebook.com/privacy/explanation.

If your approval (consent) has been obtained the use of the abovementioned service shall occur on the basis
of Art. 6 Sect. 1 lit. a GDPR and § 25 TTDSG (German Telecommunications Act). Such consent may be
revoked at any time. If your consent was not obtained, the use of the service will occur on the basis of our
legitimate interest in making our information as comprehensively visible as possible on social media.

https://www.facebook.com/legal/controller_addendum. According to this agreement, we are responsible for
providing the privacy information when using the Facebook tool and for the privacy-secure implementation
of the tool on our website. Facebook is responsible for the data security of Facebook products. You can
assert data subject rights (e.g., requests for information) regarding data processed by Facebook directly with
Facebook. If you assert the data subject rights with us, we are obliged to forward them to Facebook.

Instagram

We have integrated functions of the public media platform Instagram into this website. These functions are
being offered by Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2,
Ireland.

If the social media element has been activated, a direct connection between your device and Instagram’s
server will be established. As a result, Instagram will receive information on your visit to this website.

If you are logged into your Instagram account, you may click the Instagram button to link contents from this
website to your Instagram profile. This enables Instagram to allocate your visit to this website to your user
account. We have to point out that we as the provider of the website and its pages do not have any
knowledge of the content of the data transferred and its use by Instagram.

If your approval (consent) has been obtained the use of the abovementioned service shall occur on the basis
of Art. 6(1)(a) GDPR and § 25 TTDSG (German Telecommunications Act). Such consent may be revoked at
any time. If your consent was not obtained, the use of the service will occur on the basis of our legitimate
interest in making our information as comprehensively visible as possible on social media.

Insofar as personal data is collected on our website with the help of the tool described here and forwarded to
Facebook or Instagram, we and Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal
Harbour, Dublin 2, Ireland are jointly responsible for this data processing (Art. 26 DSGVO). The joint
responsibility is limited exclusively to the collection of the data and its forwarding to Facebook or Instagram.
The processing by Facebook or Instagram that takes place after the onward transfer is not part of the joint
responsibility. The obligations incumbent on us jointly have been set out in a joint processing agreement. The
wording of the agreement can be found under:
https://www.facebook.com/legal/controller_addendum. According to this agreement, we are responsible for
providing the privacy information when using the Facebook or Instagram tool and for the privacy-secure
implementation of the tool on our website. Facebook is responsible for the data security of Facebook or
Instagram products. You can assert data subject rights (e.g., requests for information) regarding data
processed by Facebook or Instagram directly with Facebook. If you assert the data subject rights with us, we
are obliged to forward them to Facebook.

Data transmission to the US is based on the Standard Contractual Clauses (SCC) of the European
Commission. Details can be found here:
https://www.facebook.com/legal/EU_data_transfer_addendum,
https://help.instagram.com/519522125107875 and
https://de-de.facebook.com/help/566994660333381.
For more information on this subject, please consult Instagram’s Data Privacy Declaration at:
https://instagram.com/about/legal/privacy/.

LinkedIn

This website uses elements of the LinkedIn network. The provider is LinkedIn Ireland Unlimited Company,
Wilton Plaza, Wilton Place, Dublin 2, Ireland.

Any time you access a page of this website that contains elements of LinkedIn, a connection to LinkedIn’s
servers is established. LinkedIn is notified that you have visited this website with your IP address. If you click
on LinkedIn’s “Recommend” button and are logged into your LinkedIn account at the time, LinkedIn will be in
a position to allocate your visit to this website to your user account. We have to point out that we as the
provider of the websites do not have any knowledge of the content of the transferred data and its use by
LinkedIn.

If your approval (consent) has been obtained the use of the abovementioned service shall occur on the basis
of Art. 6 (1)(a) GDPR and § 25 TTDSG (German Telecommunications Act). Such consent may be revoked at
any time. If your consent was not obtained, the use of the service will occur on the basis of our legitimate
interest in making our information as comprehensively visible as possible on social media.

Data transmission to the US is based on the Standard Contractual Clauses (SCC) of the European
Commission. Details can be found here:
https://www.linkedin.com/help/linkedin/answer/62538/datenubertragung-aus-der-eu-dem-ewr-und-derschweiz?
lang=de
For further information on this subject, please consult LinkedIn’s Data Privacy Declaration at:
https://www.linkedin.com/legal/privacy-policy.

TikTok

We have a profile on TikTok. The provider is TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland. Details on how they handle your personal data can be found in TikTok's privacy policy: https://www.tiktok.com/legal/page/eea/privacy-policy/en.
Data transfer to non-secure third countries is based on the standard contractual clauses of the EU Commission. You can find details here: https://www.tiktok.com/legal/page/eea/privacy-policy/en.

Analysis tools and advertising

Matomo

This website uses the open-source web analysis service Matomo.

Through Matomo, we are able to collect and analyze data on the use of our website-by-website visitors. This
enables us to find out, for instance, when which page views occurred and from which region they came. In
addition, we collect various log files (e.g. IP address, referrer, browser, and operating system used) and can
measure whether our website visitors perform certain actions (e.g. clicks, purchases, etc.).

The use of this analysis tool is based on Art. 6(1)(f) GDPR. The website operator has a legitimate interest in
the analysis of user patterns, in order to optimize the operator’s web offerings and advertising. If appropriate
consent has been obtained, the processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR and §
25 (1) TTDSG, insofar the consent includes the storage of cookies or the access to information in the user’s
end device (e.g., device fingerprinting) within the meaning of the TTDSG. This consent can be revoked at any
time.

IP anonymization
For analysis with Matomo we use IP anonymization. Your IP address is shortened before the analysis, so that
it is no longer clearly assignable to you.

Cookie-free analysis
We have configured Matomo so that Matomo does not store any cookies in your browser.

Hosting
We host Matomo in the Matomo Cloud.

WP Statistics

This website uses the WP Statistics analysis tool to evaluate visitor accesses statistically. The provider is
Veronalabs, Tatari 64, 10134, Tallinn, Estonia (https://veronalabs.com).

WP Statistics can be used to analyze the use of our website. In doing so, WP Statistics records, among other
things, log files (IP address, referrer, browser used, origin of the user, search engine used) and actions that
the website visitors have taken on the site (e.g. clicks and views).

The data collected with WP Statistics is stored exclusively on our own server.

The use of this analysis tool is based on Art. 6(1)(f) GDPR. We have a legitimate interest in the anonymized
analysis of user behavior in order to optimize both our websites and our advertising. If appropriate consent
has been obtained, the processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR and § 25 (1)
TTDSG, insofar the consent includes the storage of cookies or the access to information in the user’s end
device (e.g., device fingerprinting) within the meaning of the TTDSG. This consent can be revoked at any
time.

IP anonymization
We use WP Statistics with anonymized IP. Your IP address is shortened so that it can no longer be directly
assigned to you.

Google Ads

The website operator uses Google Ads. Google Ads is an online promotional program of Google Ireland
Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Ads enables us to display ads in the Google search engine or on third-party websites, if the user
enters certain search terms into Google (keyword targeting). It is also possible to place targeted ads based
on the user data Google has in its possession (e.g., location data and interests; target group targeting). As the
website operator, we can analyze these data quantitatively, for instance by analyzing which search terms
resulted in the display of our ads and how many ads led to respective clicks.

The use of these services occurs on the basis of your consent pursuant to Art. 6(1)(a) GDPR and § 25(1)
TTDSG. You may revoke your consent at any time.

Data transmission to the US is based on the Standard Contractual Clauses (SCC) of the European
Commission. Details can be found here:
https://policies.google.com/privacy/frameworks and
https://privacy.google.com/businesses/controllerterms/mccs/.

Google Ads Remarketing

This website uses the functions of Google Ads Remarketing. The provider of these solutions is Google
Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

With Google Ads Remarketing, we can assign people who interact with our online offering to specific target
groups in order to subsequently display interest-based advertising to them in the Google advertising
network (remarketing or retargeting).

Moreover, it is possible to link the advertising target groups generated with Google Ads Remarketing to
device encompassing functions of Google. This makes it possible to display interest-based customized
advertising messages, depending on your prior usage and browsing patterns on a device (e.g., cell phone) in a
manner tailored to you as well as on any of your devices (e.g., tablet or PC).

If you have a Google account, you have the option to object to personalized advertising under the following
link:
https://www.google.com/settings/ads/onweb/.

The use of these services occurs on the basis of your consent pursuant to Art. 6(1)(a) GDPR and § 25(1)
TTDSG. You may revoke your consent at any time.

For further information and the pertinent data protection regulations, please consult the Data Privacy
Policies of Google at:
https://policies.google.com/technologies/ads?hl=de.

Formation of Target Groups with Customer Reconciliation
For the formation of target groups, we use, among other things, the Google Ads Remarketing customer
reconciliation feature. To achieve this, we transfer certain customer data (e.g., email addresses) from our
customer lists to Google. If the respective customers are Google users and are logged into their Google
accounts, matching advertising messages within the Google network (e.g., YouTube, Gmail or in a search
engine) are displayed for them to view.

Google Conversion-Tracking

This website uses Google Conversion Tracking. The provider of this service is Google Ireland Limited
(“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

With the assistance of Google Conversion Tracking, we are in a position to recognize whether the user has
completed certain actions. For instance, we can analyze the how frequently which buttons on our website
have been clicked and which products are reviewed or purchased with particular frequency. The purpose of
this information is to compile conversion statistics. We learn how many users have clicked on our ads and
which actions they have completed. We do not receive any information that would allow us to personally
identify the users. Google as such uses cookies or comparable recognition technologies for identification
purposes.

The use of these services occurs on the basis of your consent pursuant to Art. 6(1)(a) GDPR and § 25(1)
TTDSG. You may revoke your consent at any time.

For more information about Google Conversion Tracking, please review Google’s data protection policy at:
https://policies.google.com/privacy?hl=de.

Google DoubleClick

This website uses features of Google DoubleClick. The provider is Google Ireland Limited (“Google”), Gordon
House, Barrow Street, Dublin 4, Ireland, (hereinafter “DoubleClick”).

DoubleClick is used to show you interest-based ads across the Google Network. Advertisements can be
tailored to the interests of the viewer using DoubleClick. For example, our ads may appear in Google search
results or in banners associated with DoubleClick.

To be able to display interest adequate promotional content to users, DoubleClick must recognize the
respective visitor so that it can allocate the websites visited, the clicks and other user pattern information to
the user. To do this, DoubleClick deploys cookies or comparable recognition technologies (e.g., device
fingerprinting). The recorded information is consolidated into a pseudonym user profile so that the
respective user can be shown interest adequate advertising.

The use of these services occurs on the basis of your consent pursuant to Art. 6(1)(a) GDPR and § 25(1)
TTDSG. You may revoke your consent at any time.

For further information on how to object to the advertisements displayed by Google, please see the
following links:

https://policies.google.com/technologies/ads and
https://adssettings.google.com/authenticated.

Meta Pixel (formerly Facebook Pixel)

This website uses the visitor action pixel from Facebook/Meta for conversion measurement. The provider of this service is Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. However, according to Facebook, the data collected is also transferred to the USA and other third countries.

This allows the behavior of page visitors to be tracked after they have been redirected to the provider's website by clicking on a Facebook ad. This allows the effectiveness of the Facebook ads to be evaluated for statistical and market research purposes and future advertising measures to be optimized.

The collected data is anonymous for us as the operator of this website, we cannot draw any conclusions about the identity of the users. However, the data is stored and processed by Facebook, so that a connection to the respective user profile is possible and Facebook can use the data for its own advertising purposes, in accordance with the Facebook Data Usage Policy (https://de-de.facebook.com/about/privacy/). This allows Facebook to enable the placement of advertisements on Facebook pages as well as outside of Facebook. This use of the data cannot be influenced by us as the site operator.

The use of this service is based on your consent according to Art. 6 para. 1 lit. a DSGVO and § 25 para. 1 TTDSG. The consent can be revoked at any time.

We use the extended matching function within the meta pixel.

Advanced matching allows us to transmit to Meta (Facebook) various types of data (e.g., city, state, zip code, hashed email addresses, names, gender, date of birth, or phone number) of our customers and prospects that we collect through our website. This activation allows us to more precisely tailor our advertising campaigns on Facebook to people who are interested in our offers. In addition, advanced matching improves attribution of website conversions and expands Custom Audiences.

Insofar as personal data is collected on our website with the help of the tool described here and forwarded to Facebook, we and Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland are jointly responsible for this data processing (Art. 26 DSGVO). The joint responsibility is limited exclusively to the collection of the data and its forwarding to Facebook. The processing by Facebook that takes place after the onward transfer is not part of the joint responsibility. The obligations incumbent on us jointly have been set out in a joint processing agreement. The text of the agreement can be found at: https://www.facebook.com/legal/controller_addendum. According to this agreement, we are responsible for providing the privacy information when using the Facebook tool and for the privacy-secure implementation of the tool on our website. Facebook is responsible for the data security of Facebook products. You can assert data subject rights (e.g., requests for information) regarding data processed by Facebook directly with Facebook. If you assert the data subject rights with us, we are obliged to forward them to Facebook.

Data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://www.facebook.com/legal/EU_data_transfer_addendum and https://de-de.facebook.com/help/566994660333381.

You can find further information on protecting your privacy in Facebook's privacy notices: https://de-de.facebook.com/about/privacy/.

You can also deactivate the "Custom Audiences" remarketing function in the Ad Settings section at https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen. To do this, you must be logged into Facebook.

If you do not have a Facebook account, you can disable usage-based advertising from Facebook on the European Interactive Digital Advertising Alliance website: http://www.youronlinechoices.com/de/praferenzmanagement/.

The Company has certification under the "EU-US Data Privacy Framework" (DPF). The DPF is an agreement between the European Union and the USA, which is intended to ensure compliance with European data protection standards for data processing in the USA. Every company certified under the DPF undertakes to comply with these data protection standards. For more information, please contact the provider at the following link: https://www.dataprivacyframework.gov/s/participant-search/participant-detail?contact=true&id=a2zt0000000GnywAAC&status=Active

Newsletter

Emarsys

We use the marketing automation system "Emarsys" from Emarsys eMarketing Systems AG Märzstrasse 1, A-1150 Vienna, to carry out marketing campaigns, for analysis purposes and to address existing and potential new customers in a target group-specific manner. We use the system in particular for sending e-mail communication (e.g. in connection with the sending of newsletters) and pass on the data you provided when registering for the newsletter to Emarsys. This transfer takes place in accordance with Art. 6 para. 1 lit. f GDPR and serves our legitimate interest in using an effective, secure and user-friendly newsletter system. The data you enter for the purpose of subscribing to the newsletter (e.g. email address) will be stored on Emarsys servers within the European Union.

We have concluded an order processing contract with Emarsys, in which we oblige Emarsys to protect our customers' data and not to pass it on to third parties.

E-mail tracking: The statistical surveys also include determining whether the newsletters are opened, when they are opened and which links are clicked. Although this information can technically be assigned to individual newsletter recipients, it is not intended to analyze personal data.

Personalization: So that we can inform you with our newsletter individually and about the most suitable product offers, the data you provide when registering for the newsletter (usually e-mail address), the data of your interaction with our website (e.g. products viewed) and the data from your order history (usually order date, products ordered) are merged into a user profile. Individual product recommendations are generated on this basis and we have the option of sending you personalized content.

The analysis is carried out with the help of cookies and tracking pixels that are stored on our website. This allows us to determine, for example, whether certain newsletter messages have been opened and which links have been clicked on. Conversion tracking can also be used to determine whether a predefined action (e.g. purchase of a product on our website) has taken place after clicking on the link in the newsletter.

The aforementioned data is only collected in pseudonymized form and is not linked to any other personal data. The data will only be stored for as long as is necessary for the processing purpose or until you withdraw your consent. You can object to this profile enhancement by sending us a short message to datenschutz@vaude.com.

Double opt-in and logging: Registration for our newsletter takes place in a so-called double opt-in procedure. This means that after registering, the user receives an email asking them to confirm their registration. This confirmation is necessary so that no one can register with other people's e-mail addresses. Registration for the newsletter is logged in order to be able to prove the registration process in accordance with legal requirements. This includes saving the time of registration and confirmation. The changes to the user data stored by the mailing service provider are also logged.

Cancellation/revocation: The user can cancel the receipt of our newsletter at any time, i.e. revoke their consent. The user will find a link to unsubscribe from the newsletter at the end of each newsletter. If users have unsubscribed from the newsletter, the personal data processed for sending the newsletter will be removed from the newsletter distribution list. After unsubscribing from the newsletter distribution list, the data will continue to be stored in order to prevent future mailings. The data will only be used for this purpose and will not be merged with other data. This serves both the interests of the user and our interest in complying with legal requirements when sending newsletters (legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR). 
The storage is not limited in time. The user can object to the storage if their interests outweigh our legitimate interest.

Users can find further information on data protection in the Emarsys privacy policy at https://emarsys.com/de/datenschutzrichtlinie/

Plugins and Tools

YouTube with expanded data protection integration

This website embeds videos from the website YouTube. The operator of the pages is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.

We use YouTube in extended data protection mode. According to YouTube, this mode means that YouTube does not store any information about visitors to this website before they watch the video. However, the transfer of data to YouTube partners is not necessarily excluded by the extended data protection mode. Thus, YouTube - regardless of whether you watch a video - establishes a connection to the Google DoubleClick network.

As soon as you start a YouTube video on this website, a connection to the YouTube servers is established. This tells the YouTube server which of our pages you have visited. If you are logged into your YouTube account, you enable YouTube to assign your surfing behavior directly to your personal profile. You can prevent this by logging out of your YouTube account.

Furthermore, YouTube can save various cookies on your end device after starting a video or use comparable recognition technologies (e.g. device fingerprinting). In this way, YouTube can obtain information about visitors to this website. This information is used, among other things, to collect video statistics, improve the user experience, and prevent fraud attempts.

If necessary, further data processing processes may be triggered after the start of a YouTube video, over which we have no control. This includes, for example, the reloading of Google Fonts. You can find more information about Google Fonts at https://developers.google.com/fonts/faq and in Google's privacy policy: https://policies.google.com/privacy?hl=de

YouTube is used in the interest of an appealing presentation of our online offers. This represents a legitimate interest within the meaning of Art. 6 para. 1 lit. f DSGVO. Insofar as a corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a DSGVO and § 25 para. 1 TTDSG, insofar as the consent includes the storage of cookies or access to information in the user's terminal device (e.g. device fingerprinting) within the meaning of the TTDSG. The consent can be revoked at any time.

For more information about privacy at YouTube, please see their privacy policy at: https://policies.google.com/privacy?hl=de.
The company is certified in accordance with the "EU-US Data Privacy Framework" (DPF). The DPF is an agreement between the European Union and the USA, which is intended to ensure compliance with European data protection standards for data processing in the USA. Every company certified under the DPF undertakes to comply with these data protection standards. For more information, please contact the provider at the following link: https://www.dataprivacyframework.gov/s/participant-search/participant-detail?contact=true&id=a2zt000000001L5AAI&status=Active

Google reCAPTCHA

We use “Google reCAPTCHA” (hereinafter referred to as “reCAPTCHA”) on this website. The provider is
Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

The purpose of reCAPTCHA is to determine whether data entered on this website (e.g., information entered
into a contact form) is being provided by a human user or by an automated program. To determine this,
reCAPTCHA analyzes the behavior of the website visitors based on a variety of parameters. This analysis is
triggered automatically as soon as the website visitor enters the site. For this analysis, reCAPTCHA
evaluates a variety of data (e.g., IP address, time the website visitor spent on the site or cursor movements
initiated by the user). The data tracked during such analyses are forwarded to Google.

reCAPTCHA analyses run entirely in the background. Website visitors are not alerted that an analysis is
underway.

Data are stored and analyzed on the basis of Art. 6(1)(f) GDPR. The website operator has a legitimate
interest in the protection of the operator’s websites against abusive automated spying and against SPAM. If
appropriate consent has been obtained, the processing is carried out exclusively on the basis of Art. 6(1)(a)
GDPR and § 25 (1) TTDSG, insofar the consent includes the storage of cookies or the access to information in
the user’s end device (e.g., device fingerprinting) within the meaning of the TTDSG. This consent can be
revoked at any time.

For more information about Google reCAPTCHA please refer to the Google Data Privacy Declaration and
Terms Of Use under the following links:
https://policies.google.com/privacy?hl=de and
https://policies.google.com/terms?hl=de.

Zendesk

We deploy the CRM system Zendesk to process user inquiries. The provider is Zendesk, Inc., 1019 Market
Street in San Francisco, CA 94103 USA.

We use Zendesk to be able to respond to your inquiries promptly and efficiently. This constitutes a
legitimate interest as defined in Art. 6(1)(f) GDPR.

In order to be able to submit inquiries, you must provide your e-mail address and name.

The messages addressed to us remain with us until you request deletion, or the data storage purpose no
longer applies (e.g. after completed processing of your request). Mandatory statutory provisions, in
particular retention periods, remain unaffected.

Zendesk has Binding Corporate Rules (BCR) which have been approved by the Irish Data Protection
Authority. These are binding corporate rules that legitimize the transfer of data within the company to third
countries outside the EU and EEA. Details can be found here:

https://www.zendesk.de/blog/update-privacy-shield-invalidation-european-court-justice/.

If you should not want to agree to the processing of your inquiries by us via Zendesk, you have the
alternative option to communicate with us via e-mail, telephone, or fax.

For more information, please consult Zendesk’s Data Privacy Declaration at:

https://www.zendesk.de/company/customers-partners/privacy-policy/.

Zendesk Chat Functions

Our website offers you the opportunity to send us messages via a chat window. The chat functions are
provided by Zendesk. Whenever you use this chat window, we do not only store your chat messages, but also
your IP address. You do not have to provide your name to engage in chats.

Data processing

Integration of services and content from OUTTRA

a) Display product availability
In order to check the local product availability, we use OUTTRA components from 81 MEDIA GmbH, Ziegelbrennerstr. 5, 73074 Stuttgart.
The components use the IP-Address of the user only for the purposes of sending him/her this information. The IP-Address is
therefore essential in order to inform about the product availability close to the user.
Upon choosing “buy local” the IP-Address of the user at the servers of OUTTRA is anonymized. With the anonymized IP-Address
a consultation with a data bank takes place, which allows for a gross localization of the user on the basis of the
not-anonymized part of the IP-Address. Subsequently, the user will see the local stores, where the products are available.
The legal basis for processing personal data is Art. 6 (1) lit. f) GDPR. Our legitimate interest lies in advertising and
sales of our products, as well as in a functionality of our website.
Should checking the product availability be connected with entering a sales agreement, the legal basis for processing
personal data is Art. 6 (1) lit. b) GDPR.
According to Art. 21 (1) GDPR you have a right to object for the future, at any time, the processing of personal data
based on Article 6(1) lit. f) GDPR. The objection can be made in particular against processing for direct marketing purposes.
After ending your browser session, no personal data from the components will be processed by 81 MEDIA GmbH or by
VAUDE Sport GmbH & Co. KG.

b) Google Maps
The "Google Maps" component of Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland is used to display the location of the stationary retailers that have the product you are looking for.
To use the functions of Google Maps, it is necessary to save your IP address. This information is usually transmitted to a Google server in the USA and stored there. The provider of this site has no influence on this data transfer. If Google Maps is activated, Google may use Google Fonts for the purpose of uniform display of fonts. When you access Google Maps, your browser loads the required web fonts into your browser cache in order to display texts and fonts correctly.
The legal basis for this is Art. 6 para. 1 lit. f GDPR. The legitimate interest lies in optimizing the functionality of the website.
Through the connection, Google can recognize from which website a request is sent and to which IP address the display of the directions is transmitted.

If you do not agree to this processing, you have the option of preventing or restricting the installation of cookies
or restrict the installation of cookies by adjusting your browser settings accordingly. Cookies that have already been saved can also be deleted at any time. The settings for this depend on the respective browser. In the case of Flash cookies
processing cannot be prevented via the browser settings, but by the corresponding setting of the Flash player.
of the Flash player. If you prevent the installation of cookies or restrict their processing, this may result in the
result in the display of the dealer locations not being fully usable.
Data transfer to the USA is based on the standard contractual clauses of the EU Commission. You can find details here: https://privacy.google.com/businesses/gdprcontrollerterms/ and
https://privacy.google.com/businesses/gdprcontrollerterms/sccs/.

You can find more information on the handling of user data in Google's privacy policy: https://policies.google.com/privacy?hl=de
The company is certified in accordance with the "EU-US Data Privacy Framework" (DPF). The DPF is an agreement between the European Union and the USA that is intended to ensure compliance with European data protection standards for data processing in the USA. Every company certified under the DPF undertakes to comply with these data protection standards. Further information on this can be obtained from the provider at the following link: https://www.dataprivacyframework.gov/s/participant-search/participant-detail?contact=true&id=a2zt000000001L5AAI&status=Active

c) Booking an appointment
We use the OUTTRA component from 81MEDIA GmbH, Ziegelbrennerstr. 5, 73074 Stuttgart for the appointment booking process.
To perform this function, OUTTRA stores the first name, last name, e-mail and telephone number in encrypted form in the
database and sends this data to the dealer at which the appointment booking was requested.

The legal basis for processing personal data as outlined above is Art. 6 (1) lit f) GDPR. Our legitimate interest lies in
advertising and sales of products and services, as well as in the functionality of the website required for this.
According to Art. 21 GDPR you have a right to object at any time to the future processing of your personal data based on
Article 6 (1) lit. f) GDPR. The objection can be made in particular against processing for direct marketing purposes.

eCommerce and payment service providers

Orders in the VAUDE Online Shop

Processing of customer and contract data

We collect, process and use personal customer and contract data for the establishment, content design and modification of our contractual relationships.

The legal basis for this is Art. 6 para. 1 lit. b GDPR.

The customer data collected will be deleted after completion of the order or termination of the business relationship and expiry of any existing statutory retention periods.
Statutory retention periods remain unaffected.

In order to offer you maximum convenience, we provide you with the option of permanently storing your personal data in a password-protected customer account.
The creation of a customer account is always voluntary. When you create a customer account, we process the data you provide for the management of the customer account in accordance with Article 6, paragraph 1, letter b) of the GDPR. Once created, you do not have to enter your data again. You also have the option of viewing and changing the data stored in your customer account at any time.

You can have your customer account deleted at any time. Please note, however, that not all data that can be viewed in your customer account can be deleted, especially if you have previously placed orders. For example, we are legally obliged to continue to store data relating to orders placed as long as guarantees for the goods purchased are still valid and the retention periods under commercial and tax law have not yet expired. Your data is automatically deleted in accordance with the applicable retention periods under commercial and tax law. The legal basis for this further data processing is Article 6, paragraph 1, letter c) and Article 6, paragraph 1, letter f) of the GDPR.

Processor
We would like to point out that we use Adobe Commerce as a processor for the processing of our online orders. Adobe Commerce is an e-commerce platform that supports us in collecting, processing and handling your orders. In this context, personal data is processed in accordance with the applicable data protection laws and this privacy policy.
Adobe Commerce acts exclusively in accordance with our instructions and has access to personal data only to the extent necessary to provide its services to us. Adobe Commerce has taken appropriate technical and organizational measures to ensure the security of your data.

Data transmission when concluding contracts for online stores, retailers and shipping goods

When you order goods from us, we pass on your personal data to the transport company responsible for delivery and to the payment service provider responsible for processing payments. Only the data required by the respective service provider to fulfill its task will be disclosed. The legal basis for this is Art. 6 para. 1 lit. b GDPR, which permits the processing of data for the performance of a contract or pre-contractual measures.

Notification of availability

Purpose of data processing:
The personal data you provide (e.g. name and email address) will only be used to notify you when the product or goods you have requested are available again. We only store and process your data for this purpose.

Data deletion:
As soon as you have been notified of the availability of the requested product or if your request is no longer relevant, your personal data will be deleted. We will not retain your data for longer than is necessary for this specific purpose.

Consent:
We will only process your data if you have expressly given us your consent to inform you about the availability of a product. Your consent is voluntary and you have the right to withdraw this consent at any time. Withdrawal will result in us deleting your data and no further notifications will be sent.

Data security:
We take appropriate measures to protect your personal data and prevent unauthorized access, misuse or loss.

Payment services
We integrate third-party payment services on our website. When you make a purchase from us, your payment details (e.g. name, payment amount, account details, credit card number) are processed by the payment service provider for the purpose of payment processing. The respective contractual and data protection provisions of the respective providers apply to these transactions. The payment service providers are used on the basis of Art. 6 para. 1 lit. b GDPR (contract processing) and in the interest of a smooth, convenient and secure payment process (Art. 6 para. 1 lit. f GDPR). Insofar as your consent is requested for certain actions, Art. 6 para. 1 lit. a GDPR.

We use the following payment services / payment service providers on this website:

Mollie
The provider of this payment service is Mollie B.V., Keizersgracht 126, 1015CW Amsterdam, Netherlands (hereinafter referred to as "Mollie"). With the help of Mollie, we can integrate various payment methods on our website. Details can be found in Mollie's privacy policy: https://www.mollie.com/de/privacy

PayPal
The provider of this payment service is PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter referred to as "PayPal").
Data transfer to the USA is based on the standard contractual clauses of the EU Commission.
Details can be found in PayPal's privacy policy:
https://www.paypal.com/de/webapps/mpp/ua/privacy-full

Stripe
The provider for customers within the EU is Stripe Payments Europe, Ltd, 1 Grand Canal Street Lower,
Grand Canal Dock, Dublin, Ireland (hereinafter referred to as "Stripe").
Data transfer to the USA is based on the standard contractual clauses of the EU Commission.
Details can be found here:
https://stripe.com/de/privacy and
https://stripe.com/de/guides/general-data-protection-regulation
Details can be found in Stripe's privacy policy at the following link:
https://stripe.com/de/privacy

Klarna
The provider is Klarna AB, Sveavägen 46, 111 34 Stockholm, Sweden (hereinafter referred to as "Klarna"). Klarna offers various payment options (e.g. installment purchase). If you choose to pay with Klarna (Klarna checkout solution), Klarna will collect various personal data from you. Klarna uses cookies to optimize the use of the Klarna checkout solution. Details on the use of Klarna cookies can be found at the following link:
https://cdn.klarna.com/1.0/shared/content/policy/cookie/de_de/checkout.pdf
Details can be found in Klarna's privacy policy at the following link:
https://www.klarna.com/de/datenschutz/

Mastercard
The provider of this payment service is Mastercard Europe SA, Chaussée de Tervuren 198A, B-1410
Waterloo, Belgium (hereinafter referred to as "Mastercard").
Mastercard may transfer data to its parent company in the USA. The data transfer to the
USA is based on the Binding Corporate Rules of Mastercard. Details can be found here:
https://www.mastercard.de/de-de/datenschutz.html and
https://www.mastercard.us/content/dam/mccom/global/documents/mastercard-bcrs.pdf

VISA
The provider of this payment service is Visa Europe Services Inc, London Branch, 1 Sheldon Square, London W2 6TT, United Kingdom (hereinafter referred to as "VISA").
The United Kingdom is considered a secure third country under data protection law. This means that Great Britain has a level of data protection that corresponds to the level of data protection in the European Union.
VISA may transfer data to its parent company in the USA. The data transfer to the USA is
based on the standard contractual clauses of the EU Commission. Details can be found here:
https://www.visa.de/nutzungsbedingungen/visa-globale-datenschutzmitteilung/mitteilung-zuzustandigkeitsfragen-fur-den-ewr.html
Further information can be found in VISA's privacy policy:
https://www.visa.de/nutzungsbedingungen/visa-privacy-center.html

Apple Pay
The provider of the payment service is Apple Inc, Infinite Loop, Cupertino, CA 95014, USA. You can find Apple's privacy policy at: https://www.apple.com/legal/privacy/de-ww/

Online-based Audio and Video Conferences (Conference tools)

Data processing

We use online conference tools, among other things, for communication with our customers. The tools we
use are listed in detail below. If you communicate with us by video or audio conference using the Internet,
your personal data will be collected and processed by the provider of the respective conference tool and by
us. The conferencing tools collect all information that you provide/access to use the tools (email address
and/or your phone number). Furthermore, the conference tools process the duration of the conference, start
and end (time) of participation in the conference, number of participants and other “context information”
related to the communication process (metadata).

Furthermore, the provider of the tool processes all the technical data required for the processing of the
online communication. This includes, in particular, IP addresses, MAC addresses, device IDs, device type,
operating system type and version, client version, camera type, microphone or loudspeaker and the type of
connection.

Should content be exchanged, uploaded, or otherwise made available within the tool, it is also stored on the
servers of the tool provider. Such content includes, but is not limited to, cloud recordings, chat/ instant
messages, voicemail uploaded photos and videos, files, whiteboards, and other information shared while
using the service.

Please note that we do not have complete influence on the data processing procedures of the tools used. Our
possibilities are largely determined by the corporate policy of the respective provider. Further information
on data processing by the conference tools can be found in the data protection declarations of the tools
used, and which we have listed below this text.

Purpose and legal bases

The conference tools are used to communicate with prospective or existing contractual partners or to offer
certain services to our customers (Art. 6(1)(b) GDPR). Furthermore, the use of the tools serves to generally
simplify and accelerate communication with us or our company (legitimate interest in the meaning of Art.
6(1)(f) GDPR). Insofar as consent has been requested, the tools in question will be used on the basis of this
consent; the consent may be revoked at any time with effect from that date.

Duration of storage

Data collected directly by us via the video and conference tools will be deleted from our systems
immediately after you request us to delete it, revoke your consent to storage, or the reason for storing the
data no longer applies. Stored cookies remain on your end device until you delete them. Mandatory legal
retention periods remain unaffected.

We have no influence on the duration of storage of your data that is stored by the operators of the
conference tools for their own purposes. For details, please directly contact the operators of the conference
tools.

Conference tools used

We employ the following conference tools:

Microsoft Teams

We use Microsoft Teams. The provider is the Microsoft Ireland Operations Limited, One Microsoft Place,
South County Business Park, Leopardstown, Dublin 18, Ireland. For details on data processing, please refer
to the Microsoft Teams privacy policy:
https://privacy.microsoft.com/de-de/privacystatement.

Data processing

Best Partner Programm

Best partner programm

In the Best Partner program, VAUDE Sport GmbH & Co.KG, VAUDE Franchise GmbH and the VAUDE franchisees jointly process the data provided.
Purpose of processing:
• Exchange and complaint without receipt
• Take goods to choose from
• Enable individual orders and delivery of the goods
• Information about news and campaigns by email and/or by post
• 10% birthday discount on a purchase
• More discount campaigns

The legal basis for processing is GDPR Art. 6 Para. 1 lit a). Consent can be easily revoked at any time by unsubscribing
via the button in an email sent by us or by sending an email to datenschutz@vaude.com.

The following data is processed:
Name, postal address, email address, birthday, purchase history

There is no obligation to join the Best Partner program to purchase our products. However, the advantages specified
above can only be used as long as participation in the Best Partner Program exists.

VAUDE Privacy Policy

About VAUDE

Service

Business & Legal

Where to buy