Privacy policy

The controller for the data collection and processing described below is ara Shoes GmbH, Albert-Einstein-Str. 3, 40764 Langenfeld, Germany.

We store the IP address transmitted by your web browser strictly for the purpose and for a period of seven days, with a view to being able to detect, contain and eliminate attacks on our websites. After this period has expired, we delete or anonymise the IP address. The legal basis is Article 6 (1) (f) GDPR.

When you visit our websites, so-called usage data is temporarily stored on our web server as a protocol for statistical purposes, in order to improve the quality of our websites. This data set consists of:

• the page from which the file was requested, • the name of the file, • the date and time of the query, • the volume of data transferred, • the access status (file transferred, file not found), • the description of the type of web browser used, • the IP address of the requesting computer, which is shortened so that personal reference can no longer be established.

The aforementioned protocol data is stored anonymously.

We transfer your data within the scope of order processing pursuant to Article 28 GDPR to service providers who support us in operating our websites and the associated processes. Our service providers are strictly bound by our instructions and are contractually obligated accordingly.

For the operation of this E-Learning platform we use the following processors: Clerk, Inc. (authentication, USA — EU data residency enabled), Neon Inc. (Postgres hosting in Frankfurt am Main) and Vercel Inc. (platform hosting in Frankfurt am Main). EU Standard Contractual Clauses are in place for any data transfers to the USA.

We guarantee that your personal data will not otherwise be passed on to third parties. We reserve the right, however, to disclose information about you if we are legally obliged to do so or if disclosure is required from us by lawfully acting authorities or law enforcement agencies.

We use cookies on our websites. Cookies are small text files that can be stored on your end device and read out. A distinction is made between session cookies, which are deleted as soon as you close your browser, and permanent cookies, which are stored beyond the individual session.

On this E-Learning platform we only use strictly necessary cookies: a session cookie from our authentication service Clerk keeps you signed in after login, and a cookie called "ara-locale" remembers your selected language. No tracking or marketing cookies are set.

Processing is based on Article 6 (1) (1) (f) GDPR in conjunction with § 25 (2) no. 2 TTDSG, in the interest of making our internet presence overall more user-friendly, effective and secure. You can delete cookies at any time via the relevant browser setting and prevent the setting of new cookies. If cookies are not accepted, the functionality of this website is restricted.

Our lesson videos are embedded via YouTube in privacy-friendly no-cookie mode (youtube-nocookie.com). The provider is Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland. When the video loads, a connection to YouTube servers is established and your IP address is transmitted to Google; in no-cookie mode no personalised advertising cookies are set.

Embedding only occurs after you have explicitly consented via our consent banner. The legal basis is your consent pursuant to Article 6 (1) (a) GDPR in conjunction with § 25 (1) TTDSG. You can withdraw your consent at any time by resetting the cookie settings (browser settings or re-opening our cookie notice).

Further information is available in Google's privacy policy: https://policies.google.com/privacy.

When you register and use the E-Learning platform we store the following personal data: first and last name, e-mail address, profile picture (if provided), organisation affiliation, role, language preference and your learning progress (completed lessons, quiz results, points balance).

The legal basis is Article 6 (1) (b) GDPR (performance of a contract). The data is stored for the duration of your usage relationship and for the duration of the statutory retention periods. You can delete your account at any time yourself — the option is available under "My account".

In order to protect your data as comprehensively as possible against unwanted access, we take technical and organisational measures. We use an encryption procedure on our pages. Your information is transferred from your computer to our server and vice versa via the internet using SSL encryption. You can recognise this by the fact that in the status line of your browser the lock symbol is closed and the address line begins with https://.

When processing your personal data, the GDPR grants you as a website user certain rights:

9.1. Right of access (Art. 15 GDPR): You have the right to request confirmation as to whether personal data concerning you is being processed; if this is the case, you have a right to access this personal data and to the information listed in detail in Art. 15 GDPR.

9.2. Right to rectification and erasure (Art. 16 and 17 GDPR): You have the right to request without undue delay the rectification of inaccurate personal data concerning you and, if necessary, the completion of incomplete personal data. You also have the right to request that personal data concerning you be erased without undue delay if one of the reasons listed in detail in Art. 17 GDPR applies.

9.3. Right to restriction of processing (Art. 18 GDPR): You have the right to request the restriction of processing if one of the conditions listed in Art. 18 GDPR is met.

9.4. Right to data portability (Art. 20 GDPR): In certain cases listed in detail in Art. 20 GDPR, you have the right to receive the personal data concerning you in a structured, commonly used and machine-readable format, or to request the transmission of this data to a third party.

9.5. Right to object (Art. 21 GDPR): If data is collected on the basis of Art. 6 (1) (1) (f) GDPR (data processing to safeguard legitimate interests), you have the right, for reasons arising from your particular situation, to object to the processing at any time.

9.6. Right to lodge a complaint with a supervisory authority: Pursuant to Art. 77 GDPR, you have the right to lodge a complaint with a supervisory authority if you believe that the processing of data concerning you violates data protection regulations.

You can assert your rights with ara Shoes GmbH, Albert-Einstein-Str. 3, 40764 Langenfeld, e-mail: info@ara-shoes.de.

Our company data protection officer is at your disposal for any questions or suggestions on the topic of data protection. He can be reached using the following contact details:

datenschutz nord GmbH Konsul-Smidt-Straße 88 28217 Bremen Telefon: 0421 69 66 32 0 E-Mail: office@datenschutz-nord.de

We reserve the right to change this privacy policy at any time.