Privacy policy

1. Information about the collection of personal data and contact details of the person responsible
1.1 We are pleased that you are visiting our website, and thank you for your interest. Below, we inform you about the handling of your data when using our website. Personal data is all data with which you can be personally identified.

1.2 Responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:

Name: Eric Braunschweiler
Address: Renggerstrasse 60, 8038 Zürich, Switzerland
E-mail: eric@gnlfootwear.com
Telephone: +41 44 482 00 17

The person responsible for the processing of personal data is the natural or legal person who, alone or together with others, decides on the purposes and means of personal processing data.

1.3 For security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries into the person responsible), this website uses an SSL or TLS encryption. You can recognize an encrypted connection by the string “https://” and the lock symbol in your browser line.

2. Data collection when visiting our website

When using our website for informational purposes, i.e., if you do not register or otherwise provide us with information, we only collect data that your browser transmits to our server (so-called “server log files”). When you visit our website, we collect the following data, which is technically necessary for us to display the website to you:
- Our visited website
- Date and time at the time of access
- Amount of data sent in bytes
- Source/reference from which you came to the page
- Browser used
- Operating system used
- IP address used

Processing takes place in accordance with Art. 6 Para. 1 Point (f) GDPR based on our legitimate interest in improving the stability and functionality of our website. The data will not be passed on or used in any other way. However, we reserve the right to check the server log files retrospectively if there are specific indications of illegal use.

3. Cookies
In order to make visiting our website attractive and to enable the use of certain functions, we use so-called “cookies” on various pages. These are small text files that are stored on your device. Some of the cookies we use are deleted after the end of the browser session, i.e., after you close your browser (so-called “session cookies”). Other cookies remain on your device and allow us or our partner companies (third-party cookies) to recognize your browser the next time you visit (persistent cookies). If cookies are set, they collect and process certain user information such as browser and location data as well as IP address values on an individual basis. Persistent cookies are automatically deleted after a specified period, which may differ depending on the cookie. In some cases, cookies are used to simplify the ordering process by saving settings (e.g., remembering the content of a virtual shopping cart for a later visit to the website). If personal data is also processed by individual cookies implemented by us, the processing is carried out per Art.6 Para.1 Point (b) GDPR either for the execution of the contract or under Art. 6 Para. 1 Point (f) GDPR to protect our legitimate interests in the best possible functionality of the website as well as a customer-friendly and effective web page design.

We may work with advertising partners who help us to make our website more interesting for you. For this purpose, cookies from partner companies are also saved on your hard disk when you visit our website (third-party cookies). Please note that you can set your browser so that you are informed about the setting of cookies and decide individually whether to accept them or to exclude the acceptance of cookies for certain cases or in general. Each browser differs in the way it manages the cookies settings. This is described in the help menu of each browser, which explains how you can change your cookie settings. You can find these for the respective browser under the following links: Internet Explorer, Firefox, Chrome, Safari or Opera.

Please note that the functionality of our website may be restricted if cookies are not accepted.

4. Establishing contact
When contacting us (e.g., via contact form or e-mail), personal data is collected. Which data is collected in the case of a contact form can be seen from the respective contact form. This data is stored and used exclusively to answer your request or for contacting you and the associated technical administration. The legal basis for processing the data is our legitimate interest in answering your request per Art. 6 Para. 1 Point (f) GDPR. If your contact is aimed after a contract, then an additional legal basis for the processing is Art. 6 Para. 1 Point (b) GDPR. Your data will be deleted after the final processing of your request; this is the case if it can be inferred from the circumstances that the matter concerned has been finally clarified and provided that there are no statutory retention requirements.

5. Data processing when opening a customer account and for contract processing
According to Art. 6 Para. 1 Point (b) GDPR, personal data will continue to be collected and processed if you provide it to us for the execution of a contract or when opening a customer account. Which data is collected can be seen from the respective input forms. It is possible to delete your customer account at any time, and you can send a message to the above address of the person responsible. We save and use the data you provide for contract processing. After completion of the contract or deletion of your customer account, your data will be blocked with due regard to tax and commercial law retention periods and deleted after this period, unless you have expressly consented to further use of your data or reserve a legally permitted further data use on our part, about which we will inform you accordingly below.

6. Use of your data for direct advertising (newsletter)
If you register for our e-mail newsletter, we will send you regular information about our offers. The only mandatory information for sending the newsletter is your e-mail address. The provision of any other data is voluntary and is used to address you personally. We use the opt-in procedure to send the newsletter. This means that we will only send you an e-mail newsletter if you have expressly confirmed to us that you consent to the sending of the newsletters. With your registration, you give us your consent to the use of your data under Art. 6 Para. 1 Point (a) GDPR. When registering for the newsletter, we save your IP address entered by the Internet Service Provider (ISP) as well as the date and time of registration to be able to trace a possible misuse of your e-mail address at a later date. The data collected by us when registering for the newsletter will only be used for advertising purposes in the form of the newsletter. You can unsubscribe from the newsletter at any time using the link provided in the newsletter or by sending a message to the person named above. After unsubscribing, your e-mail address will be deleted from our newsletter mailing list immediately, unless you have expressly consented to further use of your data or we reserve the right to use the data beyond this, which is permitted by law and about which we inform you in this declaration.

7. Data processing for order processing
To process your order, we work with the following service provider(s) who support us in whole or in part in the execution of contracts. Certain personal data is transmitted to these service providers per the following information. The personal data collected by us will be passed on to the transport company commissioned with the delivery as far as this is necessary for the delivery of the goods. We pass on your payment data to the commissioned credit institution as part of the payment processing, if this is necessary for the payment processing. If payment service providers are used, we will inform you explicitly below. The legal basis for the transfer of the data is Art. 6 Para.1 Point (b) GDPR.

7.1 Using Stripe
We use Stripe, an offer from the American Stripe Inc. (hereinafter “Stripe”) to process payments (legal basis according to GDPR, if and insofar as applicable: Art. 6 Para. 1 Point (b) and (f) GDPR). Stripe is certified according to both the EU-American and the Swiss-American Privacy Shield, thereby ensuring adequate data protection. In particular, Stripe has published the following information on the type, scope, and purpose of data processing: data protection declaration, entry in the Privacy Shield list.

7.2 Billpay’s/Klarna’s payment options
In order to be able to offer you Klarna’s payment options and to assess whether you qualify for their payment options and to tailor the payment options for you, we might in the checkout pass your personal data in the form of contact and order details to Klarna and Billpay. Your personal data is handled in accordance with applicable data protection law and in accordance with the information in the Klarna and Billpay privacy notices.

8. Web analytics services
8.1 AWStats
To be able to evaluate our website statistically, we use the AWStats program. The program is a free web analysis software. It is used to evaluate log files that web servers create based on visitor requests. The program does not use cookie files for evaluation. The statistical analysis is carried out via the log files, which also contain IP addresses. As a rule, this data cannot be assigned to specific persons. This data is not merged with other data sources; the data is also deleted after statistical analysis. In contrast to other statistical programs, no data is transmitted to an external server at AWStats. The program is installed on your server. For example, data transmission abroad is avoided because our servers are located in Switzerland (CH).

8.2 Google Analytics
This website uses Google Analytics, a web analytics service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). Google Analytics uses so-called “cookies”, text files that are stored on your computer and that enable an analysis of your use of the website. The information generated by the cookie about your use of this website (including the shortened IP address) is usually transmitted to a Google server in the USA and stored there. This website uses Google Analytics exclusively with the extension "_anonymizeIp()”, which ensures anonymization of the IP address by shortening it and excludes a direct personal reference. The extension will shorten your IP address from Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. The full IP address will only be transmitted to a Google server in the USA and abbreviated there in exceptional cases. In these exceptional cases, this processing takes place per Art. 6 Para. 1 Point (f) GDPR based on our legitimate interest in the statistical analysis of user behavior for optimization and marketing purposes. On our behalf, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide us with other services related to website activity and internet usage. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. You can prevent the storage of cookies by setting your browser software accordingly; however, we would like to point out that in this case, you may not be able to use all functions of this website to their full extent. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from the processing of this data by Google by downloading the browser plug-in available under the following link and install. As an alternative to the browser plug-in or within browsers on mobile devices, please click on the following link to set an opt-out cookie that will prevent Google Analytics from collecting data on this website in the future (this opt-out cookie only works in this browser and only for this domain; if you delete your cookies in this browser, you must click this link again): Deactivate Google Analytics

Google LLC, based in the USA, is certified for the US-European data protection agreement “Privacy Shield,” which guarantees compliance with the data protection level applicable in the EU. This website also uses Google Analytics for a cross-device analysis of visitor flows, which is carried out via a user ID. You can deactivate the cross-device analysis of your usage in your customer account under “My data,” “Personal data.” You can find more information on the handling of user data at Google Analytics in Google’s privacy policy.

8.3 Google conversion tracking
The information obtained using the conversion cookie is used to create conversion statistics for AdWords customers who have opted for conversion tracking. Customers learn the total number of users who clicked on their ads and were redirected to a page with a conversion tracking tag. However, they will not receive any information that can be used to identify users personally. If you do not want to participate in tracking, you can object to this use by easily deactivating the Google Conversion Tracking cookie via your internet browser under user settings. You will then not be included in the conversion tracking statistics. “Conversion cookies” are saved based on Art. 6 Para.1 Point (f) GDPR. The website operator has a legitimate interest in analyzing user behavior to optimize both its website and its advertising. You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general, and activate the automatic deletion of cookies when the browser is closed. If cookies are deactivated, the functionality of this website may be restricted.

8.4 Google Analytics Remarketing
Our websites use the functions of Google Analytics Remarketing in connection with the cross-device functions of Google AdWords and Google DoubleClick. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. This function enables the advertising target groups created with Google Analytics Remarketing to be linked to the cross-device functions of Google AdWords and Google DoubleClick. In this way, interest-related, personalized advertising messages that have been adapted to you depending on your previous usage and surfing behavior on one device (e.g., mobile phone) can also be displayed on another of your devices (e.g., tablet or PC). If you have given your consent, Google will link your web and app browser history to your Google account for this purpose. In this way, the same personalized advertising messages can be displayed on any device on which you log in with your Google account. To support this function, Google Analytics records Google-authenticated user IDs, which are temporarily linked to our Google Analytics data to define and create target groups for cross-device advertising. You can permanently object to cross-device remarketing/targeting by deactivating personalized advertising in your Google account by following this link: https://www.google.com/settings/ads/onweb/. The summary of the data recorded in your Google account takes place exclusively based on your consent, which you can give or revoke Google (Art. 6 Para. 1 Point (a) GDPR). In the case of data collection processes that are not merged into your Google account (e.g., because you do not have a Google account or have objected to the merging), the collection of the data is based on Art. 6 Para. 1 Point (f) GDPR. The legitimate interest arises from the fact that the website operator has an interest in the anonymized analysis of website visitors for advertising purposes. Further information and the data protection regulations can be found in Google’s privacy policy at: https://www.google.com/policies/technologies/ads/.

8.5 Facebook Pixel
The so-called “Facebook Pixel” of the social network Facebook, which is operated by Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA, is used within our online offer. With the help of the Facebook Pixel, Facebook can determine you as a visitor to our online offer as a target group for the display of advertisements. Accordingly, the Facebook Pixel is used only to display the Facebook ads placed by us to those Facebook users who have shown an interest in our online offer or who have certain characteristics (interests in certain topics or products that are determined based on the websites visited) that we transmit to Facebook (Custom Audiences). With the help of the Facebook Pixel it is ensured that our Facebook ads correspond to the potential interest of the users and do not cause a nuisance. Facebook Pixel is used to analyze the effectiveness of Facebook ads for statistical and market research purposes. Conversions become visible, forwarding Facebook ads to our shop.

Facebook’s privacy policy
Facebook processes the data per Facebook’s data usage guidelines. Accordingly, general information on the display of Facebook ads is in the data usage guidelines of Facebook. Special information and details about the Facebook Pixel and how it works are listed in the Facebook help section.

Basis
The use of Facebook Pixel and the storage of “conversion cookies” is based on Art. 6 Para. 1 Point (f) GDPR. We have a legitimate interest in analyzing user behavior to optimize both our website and our advertising.

9. Tools and Others
9.1 Google Maps
On our website we use Google Maps (API) from Google LLC., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). Google Maps is a web service for displaying interactive (land) maps to display geographic information visually. By using this service, our location will be shown to you and any travel will be easier. As soon as you call up the sub-pages in which the Google Maps map is integrated, information about your use of our website (such as your IP address) is transmitted to Google servers in the USA and stored there. This takes place regardless of whether Google provides a user account that you are logged in to or whether there is no user account. If you are logged in to Google, your data will be assigned directly to your account. If you do not want your profile to be assigned to Google, you must log out before activating the button. Google stores your data (even for users who are not logged in) as usage profiles and evaluates them. Such an evaluation takes place in particular per Art. 6 Para. 1 Point (f) GDPR on the basis of Google’s legitimate interests in the display of personalized advertising, market research and/or the design of its website in line with requirements. You have a right to object to the creation of these user profiles, and you must contact Google to exercise them. Google LLC, based in the USA, is certified for the US-European data protection agreement “Privacy Shield”, which guarantees compliance with the data protection level applicable in the EU. If you do not agree to the future transmission of your data to Google when using Google Maps, there is also the option of completely deactivating the Google Maps web service by switching off the JavaScript application in your browser. Google Maps and thus the map display on this website, cannot then be used. You can view Google’s terms of use here, and the additional terms of use for Google Maps can be found here. Detailed information on data protection in connection with the use of Google Maps can be found on the Google website or here.

9.2 Facebook Social Plugin
Our website uses so-called social plugins (“plugins”) from the social network Facebook, which is operated by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA (“Facebook”). The plugins are marked with a Facebook logo or the caption “social plugin from Facebook” or “Facebook social plugin.” An overview of the Facebook plugins and their appearance can be found here. When you visit a page on our website that contains such a plugin, your browser establishes a direct connection to the Facebook servers. The content of the plugin is transmitted from Facebook directly to your browser and integrated into the page. Through this integration, Facebook receives the information that your browser has accessed the corresponding page of our website, even if you do not have a Facebook profile or are not currently logged into Facebook. This information (including your IP address) is transmitted from your browser directly to a Facebook server in the USA and stored there. If you are logged in to Facebook, Facebook can immediately assign your visit to our website to your Facebook profile. If you interact with the plugins, for example, by clicking the “Like” button or making a comment, this information is also transmitted directly to a Facebook server and stored there. The information is also published on your Facebook profile and displayed to your Facebook friends. The purpose and scope of the data collection and the further processing and use of the data by Facebook, as well as your rights and setting options for protecting your privacy, can be found in Facebook’s data protection information. If you do not want Facebook to assign the data collected via our website directly to your Facebook profile, you must log out of Facebook before visiting our website. You can also completely prevent the loading of the Facebook plugins with add-ons for your browser.

9.3 Instagram Social Media Plugin
Our website uses so-called social plugins (“plugins”) from Instagram, which is operated by Instagram LLC., 1601 Willow Road, Menlo Park, CA 94025, USA (“Instagram”). The plugins are marked with an Instagram logo, for example, in the form of an “Instagram camera”. An overview of the Instagram plugins and their appearance can be found here. When you visit a page of our website that contains such a plugin, your browser establishes a direct connection to the Instagram servers. The content of the plugin is transmitted directly from Instagram to your browser and integrated into the page. Through this integration, Instagram receives the information that your browser has accessed the corresponding page of our website, even if you do not have an Instagram profile or are not currently logged in to Instagram. This information (including your IP address) is sent from your browser directly to an Instagram server in the USA and stored there. If you are logged into Instagram, Instagram can immediately assign your visit to our website to your Instagram account. If you interact with the plugins, for example, by pressing the “Instagram” button, this information is also transmitted directly to an Instagram server and stored there. The information will also be published on your Instagram account and displayed to your contacts there. The purpose and scope of the data collection and the further processing and use of the data by Instagram as well as your rights and setting options for protecting your privacy, can be found in Instagram’s data protection information. If you do not want Instagram to directly associate the data collected via our website with your Instagram account, you must log out of Instagram before visiting our website. You can also completely prevent the loading of Instagram plugins with add-ons for your browser, e.g., using the script blocker “NoScript.

9.4 YouTube
We embed YouTube videos on some of our pages. The corresponding plugins are operated by YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. When you visit a page with the YouTube plugin, a connection to YouTube servers is established. YouTube is informed on which pages you visit. If you are logged in to your YouTube account, YouTube can assign your surfing behavior to you personally. You can prevent this by logging out of your YouTube account beforehand. If a YouTube video is started, the provider uses cookies that collect information about user behavior. Anyone who has deactivated the storage of cookies for the Google ad program will not have to expect such cookies when watching YouTube videos. However, YouTube also stores non-personal usage information in other cookies. If you want to prevent this, you must block the storage of cookies in the browser. Further information on data protection at “YouTube” can be found in Google’s data privacy policy.

10. Rights of the data subject
The applicable data protection law grants you comprehensive data protection rights (information and intervention rights) to the person responsible concerning the processing of your personal data, about which we will inform you below:

• Right to information per Art. 15 GDPR: In particular, you have a right to information about your data processed by us, the processing purposes, the categories of processed personal data, the recipients or categories of recipients to whom your data has been or will be disclosed, planned storage period or the criteria for determining the storage period, the existence of a right to correction, deletion, restriction of processing, objection to processing, complaint to a supervisory authority, the origin of your data if we have not collected it from you, the existence of automated decision-making, including profiling and, if necessary, meaningful information about the logic involved and the scope that affects you and the intended effects of such processing, as well as your right to be informed about the guarantees that exist according to Art. 46 GDPR when your data is forwarded to third countries;

• Right to correction under Art. 16 GDPR: You have the right to immediate correction of incorrect data concerning you and/or completion of your incomplete data stored by us;

• Right to deletion according to Art. 17 GDPR: You have the right to request the deletion of your data if the requirements of Art. 17 Para. 1 GDPR is met. However, this right does not exist in particular if the processing is necessary to exercise the right to freedom of expression and information, to fulfill a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims;

• Right to the restriction of processing per Art. 18 GDPR: You have the right to request the restriction of the processing of your data as long as the correctness of your data, which you disputed, is checked, if you reject the deletion of your data due to inadmissible data processing and instead request the restriction of the processing of your data if you need your data for the establishment, exercise or defense of legal claims after we no longer need this data once the purpose has been achieved or if you have objected based on your particular situation, as long as it is not certain whether our legitimate reasons prevail;

• Right to information per Art. 19 GDPR: If you have asserted the right to correction, deletion or restriction of processing against the person responsible, he is obliged to correct or delete the data to all recipients to whom the personal data concerning you have been disclosed or to restrict processing unless this proves to be impossible or involves a disproportionate effort. You have the right to be informed about these recipients;

• Right to data portability per Art. 20 GDPR: You have the right to receive your data that you have provided to us in a structured, common and machine-readable format or to request the transfer to another person responsible, insofar as this is technically feasible;

• The right to revoke the consent given per Art. 7 Para. 3 GDPR: You have the right to revoke your consent to the processing of data at any time with future effect. In the event of revocation, we will delete the data concerned immediately, unless further processing can be based on a legal basis for processing without consent. Withdrawing consent does not affect the lawfulness of processing based on consent before its withdrawal;

• Right to file a complaint per Art. 77 GDPR: If you believe that the processing of your data violates the GDPR, you have the right to complain with a supervisory authority, in particular without prejudice to any other administrative or judicial remedy of the Member State of your residence, your place of work or the place of the alleged violation.

11. Right to object
If we process your data based on our overriding legitimate interest as part of a balancing of interests, you have the right at any time to object to this processing with future effect for reasons that arise from your particular situation. If you exercise your right to object, we will stop processing the data concerned. Further processing is reserved, however, if we can prove compelling reasons for processing worthy of protection that outweigh your interests, fundamental rights and freedoms, or if the processing serves to assert, exercise or defend legal claims. If we process your data for direct marketing purposes, you have the right to object at any time to the processing of your data for such advertising. You can exercise the objection as described above. If you exercise your right to object, we will stop processing the data concerned for direct marketing purposes.

12. Duration of storage of personal data
The duration of the storage of personal data is based on the respective statutory retention period (e.g., retention periods under commercial and tax law). After the deadline has expired, the corresponding data will be routinely deleted, provided that it is no longer required to fulfill the contract or initiate a contract and/or that we have no legitimate interest in the further storage.

Zurich, 25 May 2018