\n Data Protection Notice <\/h2>\n <\/div>\n

\n This Data Protection Notice provides information on the processing of your personal data by PUMA SE (hereinafter \u201cPUMA\u201d, \u201cwe\u201d or \u201cus\u201d) for interested persons in our RE:SUEDE PRODUCT TEST (hereinafter \u201cProduct Test\u201d) in accordance with the EU General Data Protection Regulation (hereinafter \u201cGDPR\u201d). <\/h3>\n
\n \n

1.\tScope, data controller, data protection officer and definitions<\/h2>\n \n

1.1\tThe Controller for the processing of your personal data<\/h2>\n The Controller for the processing of your personal data is: \n PUMA SE
\n PUMA Way 1
\n 91074 Herzogenaurach
\n Germany
\n resuede@puma.com

1.2\tContact details of the Data Protection Officer<\/h2>\n Data Protection Officer
\n PUMA Way 1
\n 91074 Herzogenaurach
\n Email: privacy@puma.com (Please note: For exercising your data protection rights, please use the email address referred to in Section 5!)\n

1.3\tDefinitions<\/h2>\n This Data Protection Notice is based on the following terms under data protection law, which we have defined to facilitate understanding. \n \u2022\tGDPR means Regulation (EU) 2016\/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95\/46\/EC (General Data Protection Regulation).
\n \u2022\tRecipient means a natural person or legal person, public authority, agency or an-other body, to which the personal data are disclosed, whether a third party or not. However, public authorities which may receive personal data in the framework of a particular enquiry in accordance with Union or Member State law shall not be regarded as recipients; the processing of those data by the public authorities shall be in compliance with the applicable data protection rules according to the pur-poses of the processing.
\n Examples of possible recipients: IT services providers, logistic firms and shipping service providers; for more information, please refer to Section 4)
\n \u2022\tPUMA Group means all enterprises that are affiliated with PUMA SE pursuant to Section 15 Aktiengesetz [German Stock Corporation Act].
\n \u2022\tPersonal data means any information relating to an identified or identifiable natu-ral person (\u201cdata subject\u201d); an identifiable natural person is one who can be identi-fied, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person. \n Examples of personal data: Name and contact details.
\n \u2022\tController means the natural person or legal person, public authority, agency, or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law.
\n \u2022\tProcessing means any operation or set of operations which is on personal data or on sets of personal data, whether or not by automated means such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

2.\tPurposes and legal bases of our processing of your personal data <\/h2>\n

2.1\tProcessing of your data when you visit our Product Test landing page<\/h2>\n By visiting the landing page of our Product Test, we process your personal data for the following purposes and by virtue of the following legal bases: \n

2.1.1\tProvision of landing page and IT security<\/h2>\n We process your personal data that are technically necessary to allow us to provide our partici-pation landing page to you and to guarantee stability and security when you visit our websites. This includes the following personal data: \n \u2022\tIP address
\n \u2022\ttype and version of browser
\n \u2022\toperating system and platform
\n \u2022\tthe complete Uniform Resource Locator (URL)
\n These personal data will be stored for security purposes in server log files, which will automati-cally be deleted after 7 days.
\n This data processing is necessary for the purpose of enabling you to use our websites (Legal ba-sis: Art. 6 (1) sentence 1, lit. b GDPR) as well as for the purposes of our legitimate interest to guarantee IT security (Legal basis: Art. 6 (1) sentence 1, lit. f GDPR). \n

2.1.2\tUse of cookies<\/h2>\n On our landing page we use cookies. Cookies are small text files that are stored in the browsers of your end devices whenever you visit our landing page. Through cookies, your actions and set-tings can be tracked, stored and recognized for the duration of the browser session or even after this. In addition to this, cookies and their respective cookie IDs allow your browser to be recog-nised. For example, after leaving the landing page, you can reconstruct the content of the form.\n For more information about the use of cookies (including types and purposes of our cookies and information on cookie settings) please refer to our Cookie Settings.\n

2.2\tSigning-up for our Product Test<\/h2>\n When you want to participate in our Product Test, we process the personal data that you pro-vide in the application form. The provision of personal data in the mandatory fields of the form is a contractual requirement for the participation in the Product Test. This includes the follow-ing personal data depending on whether you are a German resident or not:\n \u2022\tFirst and last name (optional for non-German residents)
\n \u2022\tE-Mail
\n \u2022\tTelephone number (optional)
\n \u2022\tAddress (only for German residents)
\n \u2022\tZIP Code (optional for non-German residents)
\n \u2022\tCountry (optional for non-German residents)
\n \u2022\tDate of Birth (optional)
\n \u2022\tShoe Size (only for German residents)\t
\n\n This data processing is necessary for the performance of the Product Test (Legal basis: Art. 6 (1) sentence 1, lit. b GDPR). Data processing regarding optional data is based on your consent. (Le-gal basis: Art. 6 (1) sentence 1, lit. a GDPR)\n\n

2.3\tUpdates about the Product Test<\/h2>\n If you sign-up to receive updates about our Product Test, we process your email address to send you these updates from time-to-time.
\n This data processing is based on your consent (Legal basis: Art. 6 (1) sentence 1, lit. a GDPR).\n Withdrawal of consent:
\n You can withdraw your consent and unsubscribe from our updates on the Product Test at any time by sending an email with your unsubscribe request to our customer (resuede@puma.com) and\/or by clicking on the unsubscribe link which is contained in every newsletter. With confir-mation of your unsubscription your personal data will be deleted.\n

2.4\tEvents<\/h2>\n In case there will be an event in connection with the Product Test, we will use your personal data to inform and invite you.\n This data processing is based on our legitimate interest (Legal basis: Art. 6 (1) sentence 1, lit. f GDPR)\n

3.\tRetention and erasure of your personal data<\/h2>\n We store your personal data only for as long as it is required for the applicable processing pur-poses. As soon as the data for the purposes is no longer required, we might keep your personal for the length of time, during which you can assert claims against us or we can assert claims against you (the statutory period of limitations is generally three years, starting with the end of the year in which the claim arises, e.g., the end of the year of purchase).\n In addition to this, we store your personal data for as long and to the extent we are obliged to do so by law. Corresponding obligations of proof and retention can be found, inter alia, in the German Commercial Code, the German Tax Code and the German Money Laundering Act. The retention periods may accordingly last up to ten years.\n

4.\tTransfer of personal data and the categories of recipients<\/h2>\n Your personal data may be transferred \/ disclosed to the following categories of recipients:\n \u2022\tOther companies within the PUMA Group within the scope of a group-internal, collabora-tive process. Such data processing, where applicable, is necessary for the purpose of our legitimate interest to run our administration activities efficiently and collaboratively.
\n \u2022\tIT Service providers who provide the platforms, databases and tools for the data pro-cessing described under Section 2 (e.g., provision of landing page, the dispatch of newslet-ters) and therefore processes your personal data on our behalf.
\n \u2022\tFulfilment and shipping service providers for the delivery of the shoes to the selected par-ticipants (including notifications about the delivery status of the orders) (Legal basis: Art. 6 (1) sentence 1, lit. b GDPR).
\n \u2022\tIn addition to this, we only transfer your personal data if we are legally obliged to forward such data (e.g., to the police authorities within the scope of criminal investigations or to the data protection supervisory authorities). This transfer of personal data is necessary for compliance with a legal obligation (Legal basis: Art. 6 (1) sentence 1, lit. c GDPR).
\n We ensure that suitable safeguards (e.g. conclusion of applicable EU Standard Contractual Claus-es and, if necessary, additional measures) for adequate data protection are in place, if your per-sonal data is disclosed to any recipients mentioned above, which are established outside the EU\/EEA.\n

5.\tYour other data protection rights<\/h2>\n In accordance with the GDPR, you may demand at any time that we:\n \u2022\tprovide you with information on your personal data that we process (Art. 15 GDPR),
\n \u2022\trectify (Art. 16 GDPR),
\n \u2022\terase (Art. 17 GDPR),
\n \u2022\trestrict (Art. 18 GDPR) and\/or
\n \u2022\texport (Art. 20 GDPR)
\n your personal data stored on our systems.\n You also have the right to object at any time to the processing of your personal data on the basis of our legitimate interests pursuant to Art. 6 (1) sentence 1, lit. f GDPR on grounds relating to your particular situation. We will then no longer process your data for this\/these purpose(s) un-less our legitimate interests in processing predominates or the processing serves to establish, exercise or defend legal claims. \n Please send your respective request(s), stating at least your first and last name by email to res-uede@puma.com.\n If you exercise these rights against us, we will process your personal data in order to respond to your request. This data processing is necessary for compliance with a legal obligation (Legal ba-sis: Art. 6 (1) sentence 1, lit. c GDPR). We will store your request, including the personal data contained therein and our response to it, for up to three years for the establishment, exercise or defence of legal claims (Legal basis: Art. 6 (1) sentence 1, lit. f GDPR; Art. 17 (3) lit. e) GDPR).
\n Irrespective of your abovementioned rights, you can lodge a complaint with a data protection supervisory authority, if you are of the opinion that the processing of your personal data by PU-MA violates the GDPR (Art. 77 GDPR). \n

6.\tOnline Offers to Children<\/h2>\n Persons under the age of 16 are not allowed to provide us with any personal data or submit a declaration of consent unless they have the express permission of their parents or legal guardi-ans. We would like to encourage parents and legal guardians to participate actively in the online activities and interests of their children.\n\n

7.\tLinks to third parties<\/h2>\n On the landing page links to third-party websites are \u2013 visibly \u2013 included. As far as links to web-sites of other providers are available, we have no influence on their contents. Therefore, no guarantee or liability can be assumed for these contents. The respective provider or operator of these sites is always responsible for the contents of these sites. The linked pages were checked for possible violations of law and recognizable infringements at the time of linking; illegal con-tents were not recognizable at that time. However, a permanent control of the contents of the linked pages is not reasonable without concrete evidence of a violation of the law. If we be-come aware of any infringements of the law, such links will be removed immediately.\n\n

8.\tChanges to this Data Protection Notice<\/h2>\n The provisions of this Data Protection Notice shall apply in the version in force at the time the landing page is visited, and the service is used.
\n We reserve the right to supplement and modify the content of this Data Protection Notice. The updated Data Protection Notice applies from the time, in which it was published on the landing page.\n <\/div>\n <\/div>\n <\/div>\n\n <\/div>\n <\/div>\n"}