Privacy Policy

Privacy Notice

Preface 

We, ROHDE Shoes GmbH, (hereinafter jointly: "we" or "us") take the protection of your personal data seriously and would like to inform you here about data protection when visiting our website.

As part of our data protection responsibility, the entry into force of the EU General Data Protection Regulation (Regulation (EU) 2016/679; hereinafter: "GDPR") has imposed additional obligations on us to ensure the protection of personal data of the person affected by processing (hereinafter, we also refer to you as the data subject as "customer", "user", "you", or "data subject").

Insofar as we decide, either alone or jointly with others, on the purposes and means of data processing, this primarily includes the obligation to inform you transparently about the type, scope, purpose, duration, and legal basis of the processing (cf. Art. 13 and 14 GDPR). With this statement (hereinafter: "Privacy Notice"), we inform you about how your personal data is processed by us.

A) General Information

(1) Definitions

Following the model of Art. 4 GDPR, this Privacy Notice is based on the following definitions:

– "Personal data" (Art. 4 No. 1 GDPR) means any information relating to an identified or identifiable natural person ("data subject"). An identifiable person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, an online identifier, location data, or to one or more factors specific to their physical, physiological, genetic, mental, economic, cultural, or social identity. Identifiability can also arise from linking such information with other supplementary knowledge. The manner in which, or form in which, the information arises or is embodied is irrelevant (photos, video, or audio recordings may also contain personal data).

– "Processing" (Art. 4 No. 2 GDPR) means any operation involving personal data, whether or not by automated (i.e. technology-assisted) means. This includes in particular collection (i.e. acquisition), recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure, or destruction of personal data, as well as the change of a purpose originally underlying a data processing operation.

– "Controller" (Art. 4 No. 7 GDPR) means the natural or legal person, public authority, agency, or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data.

– "Third party" (Art. 4 No. 10 GDPR) means any natural or legal person, public authority, agency, or body other than the data subject, the controller, the processor, and persons who, under the direct authority of the controller or processor, are authorized to process personal data; this also includes other legal entities belonging to the group.

– "Processor" (Art. 4 No. 8 GDPR) means a natural or legal person, public authority, agency, or other body which processes personal data on behalf of the controller, in particular according to its instructions (e.g. IT service providers). Within the meaning of data protection law, a processor is in particular not a third party.

– "Consent" (Art. 4 No. 11 GDPR) of the data subject means any freely given, specific, informed, and unambiguous indication of the data subject's wishes by which they, by a statement or by a clear affirmative action, signify agreement to the processing of personal data relating to them.

(2) Name and Address of the Controller

The body responsible for processing your personal data within the meaning of Art. 4 No. 7 GDPR is us:

ROHDE Shoes GmbH

represented by Managing Director Renato Lo Presti

Erich-Rohde-Straße 22

34613 Schwalmstadt

Email: service@rohde.com

Phone: +49 (0) 66 91 78 196

For further information about our company, please refer to the legal notice on our website: https://www.rohde.com/impressum/ 

(3) Contact Details of the External Data Protection Officer

Gesellschaft für Datenschutz Mittelhessen mbH

Auf der Appeling 8

35043 Marburg

Email: datenschutz@gdsm.de

Phone: +49 (0) 6421 804 13 10

Website: www.gdsm.de

(4) Legal Bases of Data Processing

By law, any processing of personal data is in principle prohibited and only permitted if the data processing falls under one of the following legal justifications:

– Art. 6(1)(1)(a) GDPR ("Consent"): If the data subject has given consent freely, in an informed manner, and unambiguously, through a statement or other clear affirmative action, indicating that they agree to the processing of personal data relating to them for one or more specific purposes;

– Art. 6(1)(1)(b) GDPR: If processing is necessary for the performance of a contract to which the data subject is party, or in order to take steps at the request of the data subject prior to entering into a contract;

– Art. 6(1)(1)(c) GDPR: If processing is necessary for compliance with a legal obligation to which the controller is subject (e.g. a statutory retention obligation);

– Art. 6(1)(1)(d) GDPR: If processing is necessary to protect the vital interests of the data subject or of another natural person;

– Art. 6(1)(1)(e) GDPR: If processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller; or

– Art. 6(1)(1)(f) GDPR ("Legitimate Interests"): If processing is necessary for the purposes of the legitimate interests (in particular legal or economic interests) pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject (in particular where the data subject is a minor). 

For the processing operations we carry out, we specify the applicable legal basis below in each case. Processing may also be based on multiple legal bases.

(5) Data Deletion and Storage Period

For the processing operations we carry out, we specify below how long the data is stored with us and when it is deleted or blocked. Unless an explicit storage period is stated below, your personal data will be deleted or blocked as soon as the purpose or legal basis for storage no longer applies. Your data is generally stored only on our servers in Germany, subject to any transfer that may take place in accordance with the provisions in A.(7) and A.(8).

However, storage may take place beyond the specified period in the event of a (threatened) legal dispute with you or other legal proceedings, or if storage is required by statutory provisions to which we, as controller, are subject (e.g. § 257 HGB [German Commercial Code], § 147 AO [German Fiscal Code]). 

When the storage period prescribed by statutory provisions expires, the personal data will be blocked or deleted, unless further storage by us is necessary and a legal basis exists for this.

(6) Data Security

We employ appropriate technical and organizational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction, or unauthorized access by third parties (e.g. TLS encryption for our website), taking into account the state of the art, implementation costs, and the nature, scope, context, and purpose of the processing, as well as the existing risks of a data breach (including its likelihood and impact) for the data subject. Our security measures are continuously improved in line with technological developments.

We are happy to provide further information on this upon request. 

(7) Cooperation with Processors

We use external domestic and foreign service providers to operate our web shop and our website presence. These act only on our instructions and have been contractually obligated, within the meaning of Art. 28 GDPR, to comply with data protection regulations.

(8) Conditions for the Transfer of Personal Data to Third Countries

In the course of our business relationships, your personal data may be transferred to or disclosed to third-party companies. These may also be located outside the European Economic Area (EEA), i.e. in third countries. Such processing takes place exclusively to fulfill contractual and business obligations and to maintain your business relationship with us. We inform you of the specific details of any such transfer at the relevant points below.

For some third countries, the European Commission has certified, through so-called adequacy decisions, a level of data protection comparable to the EEA standard. (A list of these countries and a copy of the adequacy decisions can be found here: https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/adequacy-decisions_en) 

In other third countries to which personal data may be transferred, however, a consistently high level of data protection may not exist due to a lack of legal provisions. Where this is the case, we ensure that data protection is adequately guaranteed. 

This can be achieved through binding corporate rules, standard contractual clauses of the European Commission for the protection of personal data, certificates, or recognized codes of conduct. 

(9) No Automated Decision-Making (Including Profiling)

We do not intend to use personal data collected from you for automated decision-making procedures (including profiling).

(10) No Obligation to Provide Personal Data

We do not make the conclusion of contracts with us dependent on you providing us with personal data beforehand. As a customer, you generally have no statutory or contractual obligation to provide us with your personal data; however, we may only be able to provide certain offers to a limited extent or not at all if you do not provide the data required for this. If this should exceptionally be the case within the scope of the products offered by us as described below, you will be informed of this separately.

(11) Statutory Obligation to Transmit Certain Data

We may, under certain circumstances, be subject to a special statutory or legal obligation to provide lawfully processed personal data to third parties, in particular public authorities (Art. 6(1)(1)(c) GDPR).

(12) Your Rights

You may assert your rights as a data subject regarding your processed personal data against us at any time using the contact details provided above in A.(2). As a data subject, you have the right:

– pursuant to Art. 15 GDPR, to request information about your data processed by us. In particular, you may request information about the purposes of processing, the category of data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right to lodge a complaint, the origin of your data if it was not collected by us, as well as the existence of automated decision-making including profiling and, where applicable, meaningful information about its details;

– pursuant to Art. 16 GDPR, to request the immediate rectification of inaccurate data or the completion of your data stored with us;

– pursuant to Art. 17 GDPR, to request the deletion of your data stored with us, unless processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise, or defense of legal claims;

– pursuant to Art. 18 GDPR, to request restriction of the processing of your data, insofar as you dispute the accuracy of the data or the processing is unlawful;

– pursuant to Art. 20 GDPR, to receive the data you have provided to us in a structured, commonly used, and machine-readable format, or to request its transmission to another controller ("data portability");

– pursuant to Art. 21 GDPR, to object to processing, provided that processing is carried out on the basis of Art. 6(1)(1)(e) or (f) GDPR. This is particularly the case if processing is not necessary for the performance of a contract with you. Unless this concerns an objection to direct marketing, when exercising such an objection we ask that you explain the reasons why we should not process your data as we have done. In the event of your justified objection, we will examine the situation and either stop or adjust the data processing, or show you our compelling legitimate grounds on the basis of which we will continue the processing;

– pursuant to Art. 7(3) GDPR, to revoke at any time any consent you have given (even prior to the applicability of the GDPR, i.e. before 25 May 2018) – i.e. your voluntary, informed, and unambiguous indication of your will, expressed through a statement or other clear affirmative action, that you agree to the processing of the personal data concerned for one or more specific purposes. This means that we may no longer continue, for the future, the data processing that was based on this consent; and

– pursuant to Art. 77 GDPR, to lodge a complaint with a data protection supervisory authority about the processing of your personal data by our company, in particular with the supervisory authority responsible for us: 

The Hessian Commissioner for Data Protection and Freedom of Information

represented by

Prof. Dr. Alexander Roßnagel

Gustav-Stresemann-Ring 1

65189 Wiesbaden

Phone: +49  (0) 611-1408 0

Email: poststelle@datenschutz.hessen.de

B. Visiting Our Company's Websites

(1) Explanation of the Function

Information about our company and the services and products we offer can be found in particular at https://www.rohde.com/ together with the associated subpages (hereinafter jointly: "Websites"). 

When you visit our websites, personal data about you may be processed.

(2) Personal Data Processed

When the Websites are used for informational purposes, the following categories of personal data are collected, stored, and further processed by us:

"Log data": When you visit our Websites, a so-called log data record (server log files) is temporarily and anonymously stored on our web server. This consists of:

– the page from which the page was requested (referrer URL)

– the name and URL of the requested page

– the date and time of access

– a description of the type, language, and version of the web browser used

– the IP address of the requesting computer, which is shortened so that it is no longer possible to identify a person

– the amount of data transferred

– the operating system

– notification of whether the request was successful (access status/HTTP status code)

– the GMT time zone difference

"Contact form data": When contact forms are used, the data transmitted through them is processed (e.g. gender, first and last name, address, email address, and the time of submission).

(3)  Purpose and Legal Basis of Data Processing

We process the personal data described above in accordance with the provisions of the GDPR, other applicable data protection regulations, and only to the extent necessary. Insofar as the processing of personal data is based on Art. 6(1)(1)(f) GDPR, the purposes mentioned also constitute our legitimate interests.

The processing of log data serves statistical purposes and the improvement of the quality of our website, in particular the stability and security of the connection (legal basis is Art. 6(1)(1)(f) GDPR).

The processing of contact form data takes place to handle customer inquiries (legal basis is Art. 6(1)(1)(b) or (f) GDPR).

(4) Duration of Data Processing

Your data is processed only for as long as necessary to achieve the processing purposes stated above; the legal bases specified within the respective processing purposes apply accordingly. Regarding the use and storage period of cookies, please see point A.(5) 

Third parties engaged by us will store your data on their systems for as long as is necessary in connection with the provision of services for us, in accordance with the respective assignment.

Further details on the storage period can otherwise be found under A.(5) 

(5) Transfer of Personal Data to Third Parties; Legal Basis

The following categories of recipients, who are generally processors (see A.(6)), may have access to your personal data:

– Service providers for operating our website and processing the data stored or transmitted by the systems (e.g. for data center services, payment processing, IT security). The legal basis for the disclosure is then Art. 6(1)(1)(b) or (f) GDPR, insofar as they are not processors;

– Government agencies/authorities, insofar as this is necessary to fulfill a legal obligation. The legal basis for the disclosure is then Art. 6(1)(1)(c) GDPR;

– Persons engaged to carry out our business operations (e.g. auditors, banks, insurers, legal advisors, regulatory authorities, parties involved in company acquisitions or the formation of joint ventures). The legal basis for the disclosure is then Art. 6(1)(1)(b) or (f) GDPR.

For the guarantees of an adequate level of data protection when data is transferred to third countries, see A.(8). 

Beyond this, we only pass on your personal data to third parties if you have given explicit consent to do so pursuant to Art. 6(1)(1)(a) GDPR.

(6) Use of Cookies, Plugins, and Other Services on Our Website

a) Cookies

We use cookies on our Websites. Cookies are small text files that are assigned to and stored on your hard drive by the browser you use, via a characteristic string of characters, and through which certain information flows to the party that sets the cookie. Cookies cannot execute programs or transmit viruses to your computer and therefore cannot cause damage. They serve to make the internet offering as a whole more user-friendly and effective, i.e. more pleasant for you.

Cookies may contain data that makes it possible to recognize the device used again. In some cases, however, cookies only contain information about certain settings that cannot be linked to a person. Cookies cannot directly identify a user. 

A distinction is made between session cookies, which are deleted again as soon as you close your browser, and persistent cookies, which are stored beyond the individual session. With regard to their function, cookies are in turn divided into:

– Technical cookies: These are absolutely necessary in order to navigate the website, use basic functions, and ensure the security of the website; they neither collect information about you for marketing purposes nor store which websites you have visited;

– Performance cookies: These collect information about how you use our website, which pages you visit, and, for example, whether errors occur when using the website; they do not collect information that could identify you – all information collected is anonymous and is only used to improve our website and find out what interests our users;

– Advertising cookies, targeting cookies: These serve to offer the website user needs-based advertising on the website or third-party offers and to measure the effectiveness of these offers; advertising and targeting cookies are stored for a maximum of 13 months;

– Sharing cookies: These serve to improve the interactivity of our website with other services (e.g. social networks); sharing cookies are stored for a maximum of 13 months.

Any use of cookies that is not absolutely technically necessary constitutes data processing that is only permitted with your explicit and active consent pursuant to Art. 6(1)(1)(a) GDPR. This applies in particular to the use of advertising, targeting, or sharing cookies. Furthermore, we only pass on your personal data processed by cookies to third parties if you have given explicit consent to do so pursuant to Art. 6(1)(1)(a) GDPR.

b) Cookies and Tools Used

Further information about which cookies we use and how you can manage your cookie settings and disable certain types of tracking can be found below:

C. Social Media Marketing and Data Processing

(1) Google Analytics

To design our Websites according to needs, we create pseudonymous usage profiles with the help of Google Analytics. Google Analytics uses targeting cookies that are stored on your device and can be read by us. In this way, we are able to recognize and count returning visitors and find out how often our Websites have been accessed by different users. Data processing takes place on the basis of Art. 6(1)(a) GDPR (consent).

The information generated by the cookie about your use of our Website is generally transmitted to and stored on a Google server in the USA. However, since we have activated IP anonymization on our Website, your IP address is first shortened by Google within member states of the European Union. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and shortened there (further information on the purpose and scope of data collection is available, for example, at https://policies.google.com/privacy?hl=de&gl=de). 

We have also concluded a data processing agreement with Google LLC (USA) pursuant to Art. 28 GDPR. Accordingly, Google will use all information strictly for the specified purpose only, in order to evaluate the use of our Websites on our behalf and compile reports on website activity.

Google sets the following cookies when you visit our Website and consent to the use of the Google Analytics cookie:

 _ga

This helps us count how many people visit our website, if you have visited it before.

 _gid

This helps us count how many people visit our website, if you have visited it before.

_gat

This helps us manage the rate at which requests were made to display a page.

You can revoke your consent at any time, once given. 

Please use one of the following options to do so:

– Let us know that you would like to revoke your consent.

– You can prevent the storage of cookies through a corresponding setting in your browser software; however, please note that in this case you may not be able to use all functions of this Website to their full extent.

 – You can also prevent the collection of the data generated by the cookie relating to your use of our Websites (including your IP address) by Google, as well as the processing of this data by Google, by downloading and installing the browser plugin available at the following link (https://tools.google.com/dlpage/gaoptout?hl=de).

(2) Use of Google Ads Conversion Tracking and Remarketing

We use Google Ads to draw attention to our attractive offers on external websites with the help of advertising materials (so-called Google Ads). In relation to the advertising campaign data, we can determine how successful the individual advertising measures are. In doing so, we pursue the interest of showing you advertising that is of interest to you, making our website more interesting for you, and achieving a fair calculation of advertising costs. These advertising materials are delivered by Google via so-called "ad servers." For this purpose, we use ad server cookies, through which certain parameters for measuring success, such as the display of ads or clicks by users, can be measured. If you access our website via a Google ad, a cookie will be stored on your PC by Google Ads. These cookies generally expire after 30 days and are not intended to identify you personally. This cookie generally stores, as analysis values, the unique cookie ID, number of ad impressions per placement (frequency), last impression (relevant for post-view conversions), and opt-out information (marking that the user no longer wishes to be addressed). These cookies enable Google to recognize your internet browser. If a user visits certain pages of an Ads customer's website and the cookie stored on their computer has not yet expired, Google and the customer can see that the user clicked on the ad and was redirected to that page. Each Ads customer is assigned a different cookie. Cookies therefore cannot be tracked across the websites of Ads customers. We ourselves do not collect or process any personal data as part of the advertising measures described. We only receive statistical evaluations provided by Google. Based on these evaluations, we can determine which of the advertising measures used are particularly effective. Due to the marketing tools used, your browser automatically establishes a direct connection with Google's server. We have no influence on the scope and further use of the data collected by Google through the use of this tool, and we therefore inform you according to our knowledge: through the integration of Ads, Google receives the information that you have accessed the relevant part of our website or clicked on an ad from us. If you are registered with a Google service, Google can assign the visit to your account. Even if you are not registered with Google or are not logged in, it is possible that the provider will find out and store your IP address. 

Furthermore, we use enhanced conversions as part of Google Ads. With the help of this extension, we can optimize our advertising campaign. For this purpose, we collect your name, phone number, and email address, which you entered on our website by filling out a form or making a purchase. The data is pseudonymized using a hashing algorithm called SHA-256. Through hashing, the personal data is converted into a so-called string. The hashed data is then transmitted to Google. Google matches this data against registered Google accounts. Through this matching, Google could draw conclusions about the account holder if a matching comparison hash is found in Google's user data. Google then links campaign conversions with events such as clicks or ad views. The platform then assigns conversions across devices and platforms, so that advertisers can build retargeting audiences. We only use enhanced conversions if you have given your consent pursuant to Art. 6(1)(a) GDPR.

You can prevent participation in this tracking process in various ways: 

a) through a corresponding setting in your browser software; in particular, blocking third-party cookies means that you will not receive advertisements from third-party providers; 

b) by disabling cookies for tracking, you must set your browser to block cookies from the domain "www.googleadservices.com", https://www.google.de/settings/ads, whereby this setting will be deleted if you delete your cookies; 

c) by disabling interest-based advertising from providers that are part of the "About Ads" self-regulatory campaign, via the link http://www.aboutads.info/choices, whereby this setting will be deleted if you delete your cookies; 

d) through permanent deactivation in your Firefox, Internet Explorer, or Google Chrome browsers at the link http://www.google.com/settings/ads/plugin. 

e) Please note that in this case you may not be able to use all functions of this offer to their full extent. The legal basis for the processing of your data is Art. 6(1)(1)(a) GDPR. You can revoke your consent at any time with effect for the future at the following link: (link to cookie banner)

Further information on data protection at Google can be found here: http://www.google.com/intl/de/policies/privacy and https://services.google.com/sitestats/de.html. Alternatively, you can visit the website of the Network Advertising Initiative (NAI) at http://www.networkadvertising.org.

For cases in which personal data is transferred to the USA, Google has subjected itself to the EU-U.S. Data Privacy Framework, https://www.dataprivacyframework.gov/s/.

(3) Use of Google Hosted Libraries

Our Website uses the external service Google Hosted Libraries from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. This service is used to shorten loading times through a globally available content distribution network. For this purpose, various open source JavaScript libraries are loaded via the Google server. When using this service, personal data (e.g. IP address, location data) may be processed by Google Hosted Libraries. For cases in which personal data is transferred to the USA, Google has subjected itself to the EU-U.S. Data Privacy Framework https://www.dataprivacyframework.gov/s/, meaning the level of data protection for data transfer to the USA is currently considered adequate. The legal basis for processing is based on consent pursuant to Art. 6(1)(a) GDPR. 

(4) Google Double Click

This website uses the online marketing tool DoubleClick by Google. For the European region, the company Google Ireland Limited (Gordon House, Barrow Street Dublin 4, Ireland) is responsible for all Google services. Google DoubleClick cookies are set on the basis of Art. 6(1)(a) GDPR.

DoubleClick uses cookies to serve ads relevant to users, improve campaign performance reports, or avoid a user seeing the same ads multiple times. Through a cookie ID, Google records which ads are served in which browser, thereby preventing them from being served multiple times. In addition, DoubleClick can use cookie IDs to record so-called conversions, which relate to ad requests. This is the case when a user sees a DoubleClick ad and later visits the advertiser's website with the same browser and makes a purchase there. Due to the marketing tools used, your browser automatically establishes a direct connection with Google's server. We have no influence on the scope and further use of the data collected by Google through the use of this tool, and we therefore inform you according to our knowledge: through the integration of DoubleClick, Google receives the information that you have accessed the relevant part of our website or clicked on our ad. If you are registered with a Google service, Google can assign the visit to your account. Even if you are not registered with Google or are not logged in, it is possible that the provider will obtain and store your IP address.

Data transfer is currently based on the standard contractual clauses (SCCs) provided by Google. We reserve the right to disable Google Double Click should a court or supervisory authority decision determine that these SCCs do not comply with data protection requirements.

More about the data processed through the use of Google Double Click can be found in the Privacy Policy at https://policies.google.com/privacy?hl=en-US   

(5) Integration of Google Tag Manager

This Website uses Google Tag Manager, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Google Tag Manager is used to manage website tags via an interface, making it possible to integrate other services into our online offering. The Tag Manager itself (which implements the tags) does not, for example, yet create user profiles or store cookies. Google only learns the user's IP address, which is necessary to run Google Tag Manager. The legal basis for data processing is your consent within the meaning of Art. 6(1)(a) GDPR.  Any data transfer to the USA that may take place is currently based on the standard contractual clauses (SCCs) provided by Google. We reserve the right to disable Google Tag Manager should a court or supervisory authority decision determine that these SCCs do not comply with data protection requirements. 

Further information on Google Tag Manager is available on the website: https://marketingplatform.google.com; 

Privacy policy: https://policies.google.com/privacy; 

Types of processing and data processed: https://privacy.google.com/businesses/adsservices; 

Data processing terms for Google advertising products and standard contractual clauses for third-country data transfers: https://business.safety.google/adsprocessorterms

(6) Facebook Pixel

Within our online offering, we use the so-called "Facebook Pixel" of the social network Facebook, which is operated by Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA, or, if you reside in the EU, Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland ("Facebook").

With the help of the Facebook Pixel, Facebook is able, on the one hand, to identify you as a visitor to our online offering as a target group for the display of ads (so-called "Facebook Ads"). 

Accordingly, we use the Facebook Pixel to show the Facebook Ads placed by us only to Facebook users who have shown an interest in our online offering, or who have certain characteristics (e.g. interest in certain topics or products, determined based on the websites visited) that we transmit to Facebook (so-called "Custom Audiences"). 

With the help of the Facebook Pixel, we also want to ensure that our Facebook Ads correspond to users' potential interests and are not perceived as a nuisance. With the help of the Facebook Pixel, we can further track the effectiveness of Facebook advertisements for statistical and market research purposes by seeing whether users were redirected to our website after clicking on a Facebook ad (so-called "conversion").

Specific information and details about the Facebook Pixel and how it works can be found in Facebook's help section at: 

https://www.facebook.com/business/help/742478679120153?id=1205376682832142

(7) Social Media Plugins

We do not use any social media plugins on our Websites. 

If our Websites contain icons of social media providers (e.g. Facebook, Instagram, or YouTube), we use these only for passive linking to the respective providers' pages.

(8) Newsletter

It is possible to sign up for a newsletter. Every user who signs up for the newsletter first receives an opt-in email with a confirmation link. 

Only then are they successfully registered.

The newsletter contains news, offers, and further information about the products of Rohde Shoes GmbH.

By signing up for the newsletter, you will receive personalized information about the products, any services, or suggestions for participating in promotions, such as sweepstakes or product tests, by email, in accordance with the consent you have given.

By signing up for the newsletter, you will receive a newsletter tailored to you (if the newsletter is "personalized", "individualized", or "custom-tailored"). To do this, we analyze your purchasing and click behavior on our Websites and/or within the newsletter in order to compile the information relevant to you. 

We also use remarketing measures to show you relevant online advertising.

The data is forwarded to a customer management platform (Oxid), to which service providers may also have access to support and carry out the newsletter.

The platform service provider receives access to personal data from a third country (countries outside the European Economic Area). Standard contractual clauses pursuant to Art. 46 GDPR have been concluded with these service providers as suitable safeguards.

Further information on this can be found here: https://ec.europa.eu/info/law/law-topic/data-protection/data-transfers-outside-eu_de

This collected data is automatically deleted after 24 months at the latest if you no longer respond to the newsletter, e.g. by opening it (inactivity). 

If you no longer wish to receive the newsletter, you can object to receiving it at any time and unsubscribe accordingly. To do this, click on the link contained in every newsletter, which will guide you through the unsubscribe process, or send us your revocation by email.

If your profile has not been verified as part of the so-called double opt-in procedure, your profile will be deleted after 6 months at the latest.

(9) Cookie Consent Manager System "Usercentrics" 

We use a cookie consent manager tool on our Website to inform you about the technologies we use on our Website, as well as to obtain, manage, and document your consent to the processing of your personal data by these technologies.  

This is necessary pursuant to Art. 6(1)(1)(c) GDPR in conjunction with Art. 7(1) GDPR to fulfill our legal obligation to be able to prove your consent to the processing of your personal data. The service provider is the German company Usercentrics GmbH, Sendlinger Straße 7, 80331 Munich, Germany. You can find out more about the data processed through the use of Usercentrics in the privacy policy at https://usercentrics.com/de/datenschutzerklaerung/. 

(10) Pinterest

We use social plugins from the social network Pinterest on our site, operated by Pinterest Inc., 635 High Street, Palo Alto, CA, 94301, USA ("Pinterest"). Pinterest cookies are set on the basis of Art. 6(1)(a) GDPR. Pinterest is a social network specializing in graphic representations. When you visit a page that contains such a plugin, your browser establishes a direct connection to Pinterest's servers. The plugin transmits log data to Pinterest's server in the USA. The following data is transmitted to, stored, and processed by Pinterest if you allow the cookies.

- Your IP address

- the address of the websites visited that also contain Pinterest functions

- type and settings of the browser

- date and time of the request 

- your usage of Pinterest and cookies

Pinterest stores the collected data until it is no longer needed for the company's purposes and no retention period applies. The data is then deleted or anonymized so that you can no longer be identified as a person. The data may also be stored on American servers. 

You have the right and the option at any time to revoke your consent to the use of third-party cookies such as Pinterest via the cookie management tool. 

Further information on the purpose, scope, and further processing and use of the data by Pinterest, as well as your rights and options in this regard for protecting your privacy, can be found in Pinterest's privacy notice: https://about.pinterest.com/de/privacy-policy

(11) Google App Engine

We use Google App Engine from the American service provider Google Inc. for our Website. For the European region, the company Google Ireland Limited (Gordon House, Barrow Street Dublin 4, Ireland) is responsible for all Google services. Google App Engine is a service for developing and deploying web applications on Google servers. Google App Engine cookies are set on the basis of Art. 6(1)(a) GDPR.

 Google also processes data, among other places, in the USA. We would like to point out that, in the opinion of the European Court of Justice, there is currently no adequate level of protection for data transfer to the USA. This can entail various risks for the lawfulness and security of data processing.

Data transfer is currently based on the standard contractual clauses (SCCs) provided by Google. We reserve the right to disable Google Double Click should a court or supervisory authority decision determine that these SCCs do not comply with data protection requirements.

More about the data processed through the use of Google App Engine can be found in the Privacy Policy at https://policies.google.com/privacy?hl=en-US?tid=134769154

(12) Changes to This Privacy Notice

As part of the ongoing development of data protection law as well as technological or organizational changes, our Privacy Notice is regularly reviewed for any need for adjustment or amendment. You will be informed of changes in particular on our German website. 

This Privacy Notice is current as of May 2026.