(Version1.0_16052018wm)
Introduction
As the operator of the website, BRAX (in the following: "we") is the data controller for the processing of the website users' personal data. You will find our contact details in the respective imprint of the website that you use. The contacts for questions regarding the processing of personal data are named directly in this Privacy Policy.

We take the protection of your privacy and your private data very seriously. We collect, store and use your personal data only in accordance with the content of this Privacy Policy and the applicable data protection regulations, in particular the European General Data Protection Regulation (GDPR) and national data protection regulations.

This Privacy Policy serves to inform you of the extent and purpose for which personal data is processed in connection with use of the website.
Personal data
Personal data is information about an identified or identifiable natural person. This includes all information about your identity such as your name, email address or postal address. Information that cannot be associated with your identity (such as statistical data, such as the number of users of the website) is not considered personal information.

You can use our website without disclosing your identity and without providing personal data. In this case, we will only collect general information about your visit to our website. For some of the services offered, however, we collect personal data from you. These data are then processed by us only for the purpose of using this website, in particular for providing the desired information. When personal data is collected, only the data that is absolutely necessary must de provided. In addition, further information may be provided voluntarily. We point out in each case whether it is obligatory to fill out certain fields or whether provision of the information is voluntary. We then inform you regarding the specific details in the corresponding section of this Privacy Policy.

No automated decision-making process based on your personal data is carried out in connection with the use of our website.
Processing of personal data
We will store your data on specially protected servers within the European Union. These are protected by means of technical and organisational measures against loss, destruction, access, modification and distribution of your data by unauthorised persons. Your data can only be accessed by a few authorised individuals. They are responsible for the technical, commercial or editorial support of the servers. However, despite regular checks, complete protection against all hazards is not possible.

During the order process, your personal data is transmitted over the internet in encrypted form. We use SSL encryption (Secure Socket Layer) for data transmission.
Transfer of data to third parties
We only use your personal information to provide the services you have requested. If we employ external service providers to assist with provision of services, they also access the data exclusively for the provision of services. We ensure compliance with data protection regulations using technical and organisational measures and also oblige our external service providers to do the same.Furthermore, we do not pass on the data to third parties without your express consent, in particular not for advertising purposes. Your personal data will only be transferred if you have consented to the data transfer or if we are entitled or obliged to do so on the basis of statutory provisions and/or official or court orders. In particular, this may involve providing information for the purposes of criminal prosecution, averting danger or enforcing intellectual property rights.
Legal bases of data processing
If we obtain consent for the processing of your personal data, Art. 6 (1) (a) GDPR is the legal basis for data processing.

If your personal data is processed because this is necessary to fulfil a contract or is necessary in the context of a contractual relationship with you, Art. 6 (1) (b) GDPR is the legal basis for data processing.

If we process your personal data to fulfil a legal obligation, Art. 6 (1) (c) GDPR is the legal basis for data processing.

Furthermore, Art. 6 (1) (f) GDPR can be considered as a legal basis for data processing if the processing of your personal data is necessary to safeguard a legitimate interest of our company or a third party, and your interests, fundamental rights and freedoms do not require the protection of the personal data.

Within the framework of this Privacy Policy, we always point out the legal basis on which we base the processing of your personal data.
Data deletion and storage period
We always delete or block your personal data if the respective purpose of the storage ceases to apply. However, data can also be stored if this is provided for by legal requirements to which we are subject, for example with regard to legal storage and documentation obligations. In such a case, we will delete or block your personal data after the end of the corresponding specifications.
Use of our website
Information about your computer
Whenever you access our websites, we collect the following information about your computer independently of your registration: the IP address of your computer, the your browser's request and the time of this request. In addition, the status and the amount of data transferred are recorded as part of this request. We also collect product and version information about the browser and operating system used by the computer. We also record the website from which our website was accessed. The IP address of your computer will only be stored for the duration of your use of the website and will then be deleted or anonymised by means of truncation. The remaining data is stored for a limited period.We use this data to operate the website, in particular to detect and eliminate errors, to determine the usage of the website and to make adjustments or improvements. These purposes also comprise our legitimate interest in data processing pursuant to Art. 6 (1) (f) GDPR.
Use of cookies
As is the case on many websites, we use cookies. Cookies are small files that are stored on your computer and which store certain settings and data for exchange with our website via your browser. A cookie usually contains the name of the domain from which the cookie file was sent as well as information about the age of the cookie and an alphanumeric identifier.Cookies allow us to recognise your computer and make any preferences available immediately. Cookies help us to improve our websites and to offer you a better and more personalised service. This also comprises our legitimate interest in data processing pursuant to Art. 6 (1) (f) GDPR.

The cookies we use are so-called session cookies, which are automatically deleted after the end of the browser session. Occasionally, cookies with a longer storage period can also be used so that your default settings and preferences can still be taken into account the next time you visit our website.

Most browsers are set to automatically accept cookies. However, you can deactivate the storage of cookies or set your browser so that it notifies you as soon as cookies are sent. It is also possible to delete cookies that have already been saved manually via the browser settings. Please note that, if you refuse to store cookies or delete necessary cookies, you may only be able to use our website to a limited extent or not at all.
Google Analytics
We use Google Analytics for statistical evaluations. Google Analytics is a web analytics service provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94034, USA ("Google"). Google Analytics uses "cookies", text files that are stored on your computer and allow an analysis of your use of this website. The information generated by the cookies about your use of this website is generally transferred to a Google server in the USA and stored there. However, if IP anonymisation is activated on this website, your IP address will be truncated in advance by Google within the member states of the European Union or in other states party to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transferred to a Google server in the US and truncated there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity, and to provide the website operator with other services related to website and internet usage. The IP address provided by your browser as part of Google Analytics will not be merged with other Google data. You can prevent cookies from being saved by setting your browser software accordingly; however, we would like to point out that in this case you may not be able to fully utilise all the functions of this website. In addition, you can prevent Google from tracking the data generated by the cookie and your use of the website (including your IP address), as well as the processing of this data by Google, by clicking on the link below and downloading and installing the available browser plugin: http://tools.google.com/dlpage/gaoptout?hl=de.

For more information, please visit http://tools.google.com/dlpage/gaoptout?hl=de or http://www.google.com/intl/de/analytics/privacyoverview.html (general information about Google Analytics and data protection). We would like to point out that on our website Google Analytics has been extended with the code " anonymizeIp();" to make IP addresses anonymous, whereby the last octet is deleted.

We are of the opinion that, due to the protective measures taken (anonymisation and the possibility of objection), data processing for the optimisation of our website can be considered a legitimate interest in data processing pursuant to Art. 6 (1) (f) GDPR.
Webtrekk
Some of the data collected when you visit this website is used for statistical purposes.The extent of the data is described below. The data will only be transferred to our statistics service provider, Webtrekk GmbH (Hannoversche Str. 19, 10115 Berlin, Germany, http://www.webtrekk.com). We use the services of Webtrekk GmbH to collect statistical data about the use of our website and to optimise it accordingly. Webtrekk GmbH is certified by TÜV Saarland for data protection in the area of web controlling software. During your visit to our website, some information transmitted by your browser is collected and evaluated for our web controlling. Collection is made via a pixel, which is integrated into each website.

The following data is collected in this way:
request (file name of the requested file), browser type and version (e.g. Mozilla Firefox 33.0, Internet Explorer 10, etc.), browser language (e.g. English), operating system, browser resolution, screen resolution, Java
Script enabled: "Yes" or "No," Java: "On" or "Off", cookies: "On" or "Off", colour depth, referrer URL, truncated IP address for geographic analysis down to city level, time stamps, clicks, e-commerce information such as order value, products, quantity, etc., content of forms: Free text fields such as name, email address, account number and telephone number are collected as "completed" or "empty". The inputs themselves are not collected.

The IP address is sent with each request, so that the server knows where to send its responses. Every internet user receives an internet address from an internet service provider (ISP) as soon as they access the internet. The ISP knows which IP addresses are used when and by which internet user. The ISP is legally obliged to store this information. Webtrekk does not store IP addresses. We immediately truncate the IP address for session identification and geographic analysis in our tool. Then we delete the IP address. It is not possible to associate our data with individuals or to identify individuals using our data. The geographic analysis works via a database that contains the IP address information from different ISPs with the geographic location of the IP address down to the city level. The individual addresses of internet users are not known.Our internet pages use cookies in several places: Last click (used for session timeout; duration is one session); "Session cookie" (used for session identification; duration is one session); "Ever cookie" (used for identifying new and returning visitors; duration is 6 months).

To opt-out of Webtrekk web controlling, a cookie with the name "webtrekkOptOut" is set by the domain brax01.webtrekk.net. This opt-out applies as long as you do not delete the cookie. The cookie is set for the named domain, per browser and computer. Therefore, for example, if you visit our website from home and work or with different browsers, you would need to enable the cookie from each computer and browser.To complete the opt-out, please click on the following link: https://brax01.webtrekk.net/653677695099801/optout
Retargeting and remarketing
Retargeting or remarketing refers to technologies that show users who have previously visited a particular website corresponding advertising even after leaving that website. For this purpose, it is necessary to recognise internet users beyond our own website, for which the corresponding service provider's cookies are used; in addition, the previous usage behaviour is taken into account. For example, if a user views certain products, these or similar products may later be displayed as advertisements on other websites. This is personalised advertising adapted to the needs of individual users. For this personalised advertising, it is not necessary for the user to be recognised beyond identification. We therefore do not merge the data used for retargeting or remarketing with other data.We use such technologies to display advertisements on the internet. We use third party providers for the placement of the advertisements. We use, among other things, offers from Google, which enable automatic display of the products that are interesting to an internet user. This function is implemented using cookies. For more information about this technology, please see Google's Privacy Policy at https://policies.google.com/privacy?hl=de. The installation of cookies for Google Remarketing and Google AdWords Conversion Tracking can be prevented by setting the respective browser software; to do this, visit the website http://www.google.com/policies/privacy/ads/ and change the corresponding setting.

The placement of advertising is our legitimate interest in data processing pursuant to Art. 6 (1) (f) GDPR.
Registration / BRAXCLUB
You can register to use our website and become a member of BRAXCLUB. To do so, you must provide the data requested during registration, for example name, address and email address, and accept the BRAXCLUB Terms and Conditions of Participation (available at www.braxclub.com). We also collect the date and time of registration and the IP address. During the registration process, we obtain your consent for the use of the data. The advantage for you is that you do not have to re-enter this data each time you use the website or place an order.

If consent is given, the legal basis for the processing of the data for registration is Art. 6 (1) (a) GDPR. If you register with us for the fulfilment or initiation of a contract, the legal basis for the processing of the data is additionally Art. 6 Para. (1) (b) GDPR.

The information requested during registration as a required field is necessary for the fulfilment or initiation of a contract with us for certain services. However, you are not obliged to register, but can also order as a guest. In this case, however, you will have to enter all the data required to process the contract for each order.

By registering, a customer account is created for you. We store the data in the customer account as long as an active customer relationship exists. If no activity can be determined over a period of three years, the status of the customer relationship is set to inactive. You can request the deletion of your customer account at any time.
Order processing
We only use your personal information for orders (your name and home address, date of birth, clothing size and gender, e-mail address and your account details) within our company and affiliated companies as well as within the company commissioned to process orders.
Storage and transfer of data for orders
To process orders, we work with various companies responsible for payment processing and logistics. We ensure that our partners also comply with data protection regulations. Under these conditions, we transfer your address data (name and address) to the respective transport company that will deliver the ordered products to you. The legal basis for this is Art. 6 (1) (b) GDPR. The processing of your personal data is necessary for the fulfilment of the contract with you.

We store the data as long as it is necessary for the fulfilment of the contract. In addition, we store this data for the fulfilment of post-contractual obligations and for compliance with commercial and tax retention periods over the legally prescribed length of time. As a rule, this retention period is 10 years from the end of the respective calendar year.
Payment processing for orders, Paypal, Sofortüberweisung
Depending on the selected payment method, the payment processing for orders may be carried out with the involvement of a service provider.When paying by credit card, your necessary data such as name, address and purchase data - when paying with Mastercard or Visa via the payment service provider Concardis GmbH, Butzweiler Stern Haus 1, Butzweilerhof-Allee 2-4, D-50829 Cologne; Germany - will be forwarded to the respective credit card company.

If you pay via PayPal, you will be redirected to the PayPal website via a link. This entails the processing of your personal data. This includes your name, your address, your email address, telephone number if applicable, as well as account or credit card details. Please refer to the General Terms and Conditions, Terms of Use and Privacy Policy of PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg, on the website www.paypal.com. for further information.

When paying with Sofortüberweisung, you will be redirected via a link to the website of Sofortüberweisung, a service of Sofort GmbH, which belongs to Klarna Bank AB (publ), Sveavägen 46111 34 Stockholm, Sweden. This entails the processing of your personal data. This includes your name, your address, your email address, telephone number if applicable, as well as account or credit card details. Please refer to Klarna's General Terms and Conditions, Terms of Use and Privacy Policy, which can be found at https://www.klarna.com, for further information.

The legal basis for payment processing is Art. 6 (1) (b) GDPR. The processing of your personal data is necessary for the fulfilment of the contract with you, whereby you are free to choose the method of payment.

We store the data as long as it is necessary for the fulfilment of the contract. In addition, we store this data for the fulfilment of post-contractual obligations and for compliance with commercial and tax retention periods over the legally prescribed length of time. As a rule, this retention period is 10 years from the end of the respective calendar year.
Credit check
Depending on the selected payment method, it may be necessary to check your creditworthiness. In this case, we use external service providers, to whom we transmit your data (name, address, date of birth, order value), if you have consented to the credit check.

We transmit your data to infoscore Consumer Data GmbH, Rheinstr. 99, 76532 Baden-Baden, Germany for the purpose of the credit check, to obtain information for assessing the risk of non-payment on the basis of mathematical-statistical procedures using address data and to verify your address (check for deliverability).

The legal bases for these transmissions are Article 6 (1) (b) and Article 6 (1) (f) GDPR. Transmissions on the basis of these provisions may only be made as long as this is necessary for safeguarding the legitimate interests of our company or those of third parties and the data subject's interests in fundamental rights and freedoms, which require the protection of personal data, do not prevail. Detailed information on ICD within the meaning of Art. 14 of the European General Data Protection Regulation ("EU GDPR"), i.e. information on the business purpose, data storage purposes, data recipients, the right to self-disclosure, the right to deletion or correction, etc. can be found in the Annex or at the following link: https://finance.arvato.com/icdinfoblatt.
Competitions
The information requested in the context of competitions is processed for the purpose of carrying out and processing the respective competition. The data of the participants will not be linked with further information. If the participant has won, they will be contacted using the data provided. In addition, we reserve the right to also publish the names of the winners in abbreviated form or – with the consent of the winners – by giving full names on our internet pages as well as in other media (Facebook). We delete the data of all participants after the end of the competition. The participant is entitled at any time to lodge an objection to the use of the information provided with the data controller. In this case, the data will be deleted and participation in the competition will not be possible. The legal basis for data processing is your consent within the meaning of Art. 6 (1) (a) GDPR.

Participation in the competition is independent of the granting of consent for marketing measures. As far as a corresponding consent is given in the context of the participation in the competition, we shall continue to use and store the participant's according to the granted consent. The one-time granted consent for marketing measures can be revoked at any time with effect for the future; the revocation has no effect on the chances of winning.
Applicant portal
The applicant portal allows you to apply for a job with us and submit all necessary information and documents. Use of the applicant portal is voluntary; you can also send us your application by other means, for example by email or post.

When an application is received via the applicant portal, your documents are electronically forwarded to the responsible employees at our company. If you have applied for an advertised position, the documents will be automatically deleted three months after completion of the recruitment procedure, provided that there are no other legitimate interests preclude deletion. Such legitimate interests in this sense are, for example, the burden of proof in a procedure under the German General Act on Equal Treatment (AGG). In the case of an application without reference to an advertised position (unsolicited application), the application will be kept as long as the application may be of interest. You can request the deletion of your application at any time, even before the expiry of the intended retention periods. In the event of a successful application, the transmitted data will be stored for the purpose of processing the employment relationship in compliance with the legal requirements. In all other cases, the legal basis for the storage of your applicant data is your consent pursuant to Art. 6 (1) (a) GDPR.
Communication with us
You can contact us in various ways, including using the contact form on our website. You can also receive our newsletter by email on a regular basis.
Contact form
If you wish to use the contact form on our website, we will collect the personal data you enter in the contact form, in particular your name and email address. We also store the IP address and the date and time of the request. We process the data transmitted via the contact form exclusively for the purpose of answering your enquiry or request.

You can decide yourself which information you transmit to us via the contact form. The legal basis for the processing of your data is your consent according to Art. 6 (1) (a) GDPR.

After we have processed the request, the data will initially be stored for the event that there are any queries. Deletion of the data can be requested at any time, otherwise deletion takes place after the matter has been completely settled; legal storage obligations remain unaffected in each case.
Newsletter
If you register for our newsletter, we will use your email address for our own advertising purposes until you unsubscribe from the newsletter. You will receive regular information via email on current topics as well as emails for special occasions, for example special campaigns. The e-mails may be personalised and individualised based on our information about you.

Unless you have given us your written consent, we use the double opt-in procedure to register for our newsletter, i.e. we will only send you a newsletter by email after you have expressly confirmed to us that we should activate the newsletter dispatch. We will then send you a notification email and ask you to confirm that you wish to receive our newsletter by clicking on a link in that email.

The legal basis for the processing of your data is your consent according to Art. 6 (1) (a) GDPR, if you have expressly registered for the newsletter. In compliance with legal requirements, we may also send you our newsletter without express consent because you have ordered goods or services from us, we have received your email address in this context and you have not objected to receiving information by email. In this case, our legitimate interest in the transmission of direct mail pursuant to Art. 6 (1) (f) GDPR is considered the legal basis.

Whenever the newsletter is displayed and individual links from the newsletter called up , information is collected and evaluated; this is transmitted automatically. To this end, a cookie with unlimited duration is set when a link from the newsletter is called up for the first time. If the cookie has been deleted in the meantime or if you use another browser, the cookie will be saved again. Cookies enable you to be recognised and your user behaviour to be evaluated on our internet pages. The data collected is used to create personal user profiles. This is done to constantly improve the service for you and to inform you about suitable offers and actions even more individually.

The links from the newsletter contain a random but unique identification number. We or external service providers working on our behalf may collect and store this number when you access these links from your computer to retrieve additional information from our website. The number in the links will not be merged with your name and other personally identifiable information without your explicit consent.

You can only object to the collection and evaluation of the use of links described above by unsubscribing from the newsletter (please click on the "unsubscribe" link at the end of the respective newsletter).

If you no longer wish to receive any newsletters from us at all, you can at any time revoke your one-time granted consent with future effect or object to the further receipt of the newsletter without incurring any costs other than the transmission costs according to your base rate. Simply use the unsubscribe link included in each newsletter or send a message to us (onlineshop@brax.com) or our data protection officer.
Social Media
Our website includes links to the social networks Facebook, Google+ and Instagram, the career network Xing, the employer rating platform kununu and the short messaging service Twitter. You can recognise the links by the respective logo of the providers.

By clicking on the links, the corresponding social media pages are opened, to which this Privacy Policy does not apply. Please refer to the corresponding privacy policies of the individual providers for details on the provisions applicable there; you will find these under:

Facebook: http://www.facebook.com/policy.php
Google+: https://www.google.com/policies/privacy/?hl=de
Instagram: https://help.instagram.com/155833707900388
Xing: https://www.xing.com/privacy
kununu: https://www.kununu.com/de/info/datenschutz
Twitter: https://twitter.com/privacy?lang=de

No personal information is transmitted to the respective providers when the corresponding links are called up. Your access to the linked page is also the basis for data processing by the respective providers.
Use of YouTube
Videos are integrated into our website, for whose reproduction we use a plugin from the YouTube ("YouTube") service operated by Google. The service is operated by YouTube LLC, 901 Cherry Ave, San Bruno, CA 94066, USA. When you visit one of our pages that features a YouTube plugin, you will be connected to the servers of YouTube. The YouTube server will be informed of which pages of our website you visited.

If you're logged into your YouTube account, you will enable YouTube to link your browsing behaviour directly to your personal profile. You can prevent this by logging out of YouTube and deleting cookies. For more information about how user data is handled, please see Google's Privacy Policy at https://www.google.de/intl/de/policies/privacy/, which also applies to YouTube.

We use YouTube to show you videos and thus convey to you more about us and our services; this is also a legitimate interest within the meaning of Art. 6 Para. (1) (f) GDPR.
Your rights and contact
We attach great importance to explaining how we process your personal data as transparently as possible and to informing you about your rights. Please contact us at any time if you would like more information or wish to exercise the rights to which you are entitled.
Data subjects' rights
You have extensive rights in respect of the processing of your personal data. First of all, you have a comprehensive right to information and may, if necessary, request the correction and/or deletion or blocking of your personal data. You can also request a restriction of processing and have a right of objection. You also have a right to data portability with regard to the personal data you send us.

If you wish to exercise any of your rights and/or would like to receive further information on the subject, please contact our customer service. Alternatively, you can also contact our data protection officer.
Revocation of content and objection
Consent given by you can be freely revoked at any time with effect for the future. Revocation of the consent does not affect the legality of the data processing that has taken place on the basis of the consent prior to the revocation. The contacts for this are both our customer service and our data protection officer.

If the processing of your personal data is not based on consent but on the basis of other legal grounds, you can object to this data processing. Your objection will result in a reassessment and, if necessary, cessation of data processing. Insofar as the data processing is to be continued nevertheless, you will be informed about the result of the reassessment and will receive more detailed information from us as to why the data processing is permissible.
Data protection officer and contact
We have appointed a data protection officer for the parent company and its subsidiaries, who supports us in data protection matters and whom you can also contact directly. If you have any questions relating to our handling of personal data or require further information on data protection issues, please do not hesitate to contact our data protection officer and his team:

Wolfgang Mews Leineweber GmbH & Co. KG
Wittekindstrasse 16 - 18
D-32051 Herford, Germany

If you would like to contact our data protection officer personally by e-mail, you can also reach him under datenschutz(at)brax.com.
Complaints
If you believe that the processing of your personal data by us does not comply with this Privacy Policy or the applicable data protection regulations, you may complain to our data protection officer. The data protection officer will then examine the matter and inform you of the outcome of the examination. In addition, you also have the right to appeal to a supervisory authority.
Further information and changes
Links to other Websites
Our website may contain links to other websites. These links are usually marked as such. We have no influence on whether the linked websites comply with the applicable data protection regulations. We therefore recommend that you also inform yourself on other websites about the respective privacy policies.
Changes to this privacy policy
The status of this privacy policy is indicated by the date (below). We reserve the right to change this privacy policy at any time with effect for the future. Changes occur in particular when technical adjustments are made to the website or when the statutory data protection requirements change. The current version of the privacy policy is always available directly via the website. We recommend that you regularly check this privacy policy for changes.