This Data Protection Information provides information on the processing of your personal data by PUMA SE (hereinafter "PUMA", "we" or "us") whenever you visit this website in accordance with the EU General Data Protection Regulation (hereinafter "GDPR").
This Data Processing Information applies to the use of the Digital Product Testing Platform ("DPTP") provided to you by PUMA under the domain https://producttesting.puma.com/, including any processing of personal data in connection with the execution of a test of PUMA products by you. Data processing on websites of other companies within the PUMA Group are not covered by this Data Processing Information.
Unless otherwise specified in this Data Processing Information, the Controller for the processing of your personal data is:
PUMA Way 1
Please send any questions concerning data protection to:
Data Protection Officer
PUMA Way 1
Email: email@example.com (Please note: for exercising your data protection rights please use the email addresses referred to in Section 7 to 8!)
This Data Processing Information is based on the following terms under data protection law, which we have defined to facilitate understanding.
The legal basis for all data processing is stipulated in Art. 6 GDPR. We process your personal data accordingly for business processes related to PUMA product tests, for the initiation, performance and recession of contractual relationships, upon legal obligations but also for upholding contractual relationships, for offering products and services, as well as for strengthening our relationship with You, which includes analysis for performance and customer marketing purposes.
Your consent can also constitute a permission for the processing of your personal data. In case your consent is asked for accordingly, we will inform you about the purpose of the data processing and your right of withdrawal. If your consent for processing personal data relates to special categories of personal data, we will specifically point this out to you in advance.
Which data we process is determined by the respective context.
If you visit the DPTP, we process your personal data for the following purposes and by virtue of the following legal bases:
We process your personal data that are technically necessary to allow us to provide the DPTP to you and to guarantee stability and security when you visit the DPTP. This includes the following personal data:
This data processing is necessary for the purpose of our legitimate interest to guarantee IT security (legal basis: Art. 6 (1) sentence 1, lit. f GDPR). The data is immediately anonymised by shortening the IP address to not establish a connection to the user.
We also process your personal data that are technically necessary to allow us to provide you with a localised version of the DPTP, in particular with regard to the language.
This data processing is necessary for the purpose of our legitimate interest to adapt the DPTP to your needs (legal basis: Art. 6 (1) sentence 1, lit. f GDPR).
By creating an account for the DPTP, you apply for testing PUMA products. When you create your DPTP account, you are required to provide personal data. This includes the following personal data:
This data processing is necessary for the performance of a contract with you (legal basis: Art. 6 (1) sentence 1, lit. b GDPR). By processing these personal data, we assess if you meet the requirements as a product tester in general or for a specific PUMA product test.
Most of the cookies are session-cookies, which are deleted automatically after each visit. Permanent cookies are automatically deleted from your computer when they are no longer valid, which is usually after six months, or they delete themselves before validity has ended.
We store your personal data only for as long as it is required for the applicable processing purposes. As soon as the data for the purposes is no longer required, we might keep your personal for the length of time, during which you can assert claims against us or we can assert claims against you (the statutory period of limitations is generally three years, starting with the end of the year in which the claim arises, e.g. the end of the year of purchase).
In addition to this, we store your personal data for as long and to the extent we are obliged to do so by law. Corresponding obligations of proof and retention can be found, inter alia, in the German Commercial Code, the German Tax Code and the German Money Laundering Act. The retention periods may accordingly last up to ten years.
Your personal data may be transferred / disclosed to the following categories of recipients:
Please note, that we might transfer your personal data to a third country which is outside the European Union/ the European Economic Area, only if (a) it is necessary for the performance of the contractual obligations under our agreement; (b) you have given your consent or (c) there is a legal obligation to do so. We will ensure that your personal data is adequately protected.
We are supported by external service providers and transfer your personal data to PUMA Group subsidiaries that are outside the European Union / European Economic Area with whom we have concluded a corresponding agreement to ensure the security of the processed data and justify the data transfer in accordance with chapter 5 GDPR.
Certain personal data is necessary for the initiation, performance and recession of a contractual relationship, as well as the fulfilment of related contractual and legal obligations. The same applies to the use of the DPTP and the various functions within.
Please be aware, that the use of the DPTP and the underlying contractual relationship cannot be guaranteed without the provision of the above-mentioned personal data.
If we process your personal data according to Section 2 of this Data Protection Information on the basis of our legitimate interests (legal basis: Art. 6 (1) sentence 1, lit. f GDPR), you can – without prejudice to, if applicable, specific unsubscribe / opt-out possibilities provided in Section 2 – object to the respective data processing at any time on grounds relating to your particular situation by sending your request to firstname.lastname@example.org. We will then no longer process your data for this / these purpose(s) unless our legitimate interests in processing overweighs or the processing serves to establish, exercise or defend legal claims.
If you object to the processing of your data, we will process any collected personal data in this context in order to respond to your request. This data processing is necessary for compliance with a legal obligation (legal basis: Art. 6 (1) sentence 1, lit. c GDPR).
In accordance with the GDPR, you may demand at any time that we:
Please send your request either by email to email@example.com or in writing, to PUMA SE, PUMA Way 1, 91074 Herzogenaurach Germany.
If you exercise these rights against us, we will process your personal data in order to respond to your request. This data processing is necessary for compliance with a legal obligation (legal basis: Art. 6 (1) sentence 1, lit. c GDPR).
Irrespective of your abovementioned rights, you can lodge a complaint with a data protection supervisory authority, if you are of the opinion that the processing of your personal data by PUMA violates the GDPR (Art. 77 GDPR).
Persons under the age of 18 are not allowed to provide us with any personal data or submit a declaration of consent unless they have the express permission of their parents or legal guardians. We would like to encourage parents and legal guardians to participate actively in the online activities and interests of their children.
On the DPTP links to third-party websites are – visibly – included. As far as links to websites of other providers are available, we have no influence on their contents. Therefore, no guarantee or liability can be assumed for these contents. The respective provider or operator of these sites is always responsible for the contents of these sites. The linked pages were checked for possible violations of law and recognizable infringements at the time of linking; illegal contents were not recognizable at that time. However, a permanent control of the contents of the linked pages is not reasonable without concrete evidence of a violation of the law. If we become aware of any infringements of the law, such links will be removed immediately.
The provisions of this Data Processing Information shall apply in the version in force at the time the DPTP is visited and the service is used.
We reserve the right to supplement and modify the content of this Data Processing Information. The updated Data Processing Information applies from the time, in which it was published on the DPTP.