Privacy Policy

• 1. Our Contact Details

  The controller of the processing of personal data explained herein is KRM AG with its registered address at Rothusstrasse 17, 6331 Hünenberg, Switzerland, unless otherwise is mentioned herein. Please unfold below sections to read more about how to contact us.

  • 1.1 Identity of the Controller(s) and the Appointed Representative

    Unless otherwise specified elsewhere, the legal entity being responsible for the collection and processing of your personal data under this Privacy Policy (the “Controller”) is: 

    
    

    KRM AG
    Rothusstrasse 17
    6331 Hünenberg
    Switzerland
    E-mail: legal@krm.ag

     

    KRM AG has appointed the below representative within the European Union. The appointed representative is mandated to be addressed in addition to, or instead of the Controller by, in particular, supervisory authorities and data subjects, on all issues related to the controller’s processing of personal data.

    
    

    ECCO Holding A/S
    Industrivej 5
    6261 Bredebro
    Denmark
    e-mail: legal@ecco.com.
    Phone: +45 7491 1625

  • 1.2 Our Contact Details

    If you have any questions or need to get in contact with us we urge you to contact us through our Customer Care representatives either by;

    E-mail:                   vevoszolgalat@eu.ecco.com

    Phone                    + 36 (1) 4453658

    Letter:                    ECCO (Poland) Sp. z o.o., Żwirki i Wigury 16B, 02-092 Warszawa, Polska attn..: Customer Care

  • 1.3 Contact details for the Data Protection Officer

    Our appointed Data Protection Officer can be contacted either by;

    E-mail:                    legal@ecco.com

    Phone:                   +45 7491 1733

    Letter:                     ECCO Holding A/S, Legal Department, Industrivej 5, 6261 Bredebro, Denmark attn.: DPO

• 2. HOW WE USE COOKIES AND YOUR PERSONAL DATA

  When you interact with us we will collect personal data about you, and use it for various purposes, such as operating this website, enabling you to make use of our various services, including our online shop, signing up for Newsletters, creating accounts with us, contacting our Customer Care representatives etc. We also use your personal data to evaluate and assess your personal interests and preferences in order to personalize your website experiences and improve our services and offer you services better customized to your interests and preferences.

  
  

  If you are asked to provide information, then it is optional for you to disclose such information. The information might, however, be needed for statutory, contractual or practical reasons. We will always clearly indicate whether the information is mandatory. If you refrain from disclosing information which we deem as mandatory, as a consequence it may be that we will not be able to provide you with the services you have requested (e.g. signing up for a newsletter, creating an account or making a purchase through our online shop etc.). 

  
  

  To help personalise and continuously improve our services and communication with you, for instance through our newsletters, we may upon occasion ask you for information on your personal interests, demographic data or your experience of our products and services. This supplementary information is always voluntary, but we appreciate your support in providing it.

  
  

  How we collect and use your personal data depends on how you interact with us, and which services you make use of.  

  
  

  We, like all other ECCO and KRM Affiliates, strongly believe in the protection of the personal data in our custody and control, and thus we have implemented what we believe are appropriate technical and organisational security measures to protect this personal data against unauthorized or unlawful processing and against accidental loss, destruction or damage.

  
  

  If you unfold below sections, you can read more about how we collect and process your personal data in different situations, including the general categories of personal data being processed; the source of the personal data that we do not directly obtain from you; the purposes for which personal data is being processed; and the legal basis for the processing.

  • 2.1 Cookie Information

  • 2.2 When signed up for newsletters

    You have the opportunity to sign up to receive information by e-mail and text messages (SMS) about ECCO’s products (shoes, bags and related accessories) services, contests and promotions from us and other ECCO and KRM Affiliates (“Newsletters”). Please click herefor an overview of the relevant ECCO and KRM Affiliates. The list of relevant ECCO and KRM Affiliates will be updated on a regular basis, when changes occur.

     

    We will only send you newsletters and other marketing material, if you have specifically consented to receive newsletters from us. 

     

    If you sign up to receive Newsletters either through one of our websites, in one of the Brick & Mortar ECCO Stores operated by a KRM Affiliate or in another manner, then you will be asked to provide certain basic information about yourself. The mandatory personal data includes your first and last name and e-mail address (“Newsletter Registration Data”), which will be used for the purpose of your registration, checking the validity of the e-mail and providing you with relevant Newsletters. We cannot sign you up for Newsletters, unless you provide us with the mandatory information.

     

    We may also give you the opportunity to provide us with other supplementary data other than the data, which we clearly have indicated as mandatory such as gender, shoe size and phone number. It is your own choice whether you provide such supplementary data to us. If you provide us with the supplementary data, it will help us improve our services and offerings to you.

     

    The Legal basis for sending you Newsletters is GDPR art. 6(1) a) namely the consent you have granted, when signing up to receive Newsletters.

     

    You can always withdraw from a consent to receive Newsletters and unsubscribe from an e-mail or SMS list by following the instructions in any e-mail, SMS or other communication you receive from us. Please also refer to section 5 (Your rights and how to withdraw consents and unsubscribe).

     

    Our Newsletters contain so-called tracking pixels. A tracking pixel is a miniature graphic embedded in such e-mails, which are sent in HTML format to enable log file recording and analysis. This allows a statistical analysis of the success or failure of online marketing campaigns. Based on the embedded tracking pixel, we may see if and when an e-mail was opened by the recipient, and which links in the e-mail were called up by the recipient (“Newsletter-Tracking Data”). Such Newsletter-Tracking Data are used by us to perform general marketing research and to optimize the distribution and use of Newsletters. The legal basis for this is GDPR art. 6(1) f) our legitimate interest namely in understanding customer behaviour and interests and ensuring effective marketing and advertisement of ECCO product and services.

     

    We will also use the Newsletter Registration Data, supplementary data and Newsletter-Tracking Data to perform general marketing research and to tailor or improve our websites and our service offerings. We may also link this data to other personal data about you for profiling purposes in order to be able to personalize your website experiences, adapt the content of future Newsletters to better suit to your interests and to provide you with personalized offerings. Please also refer to section 2.8 (Profiling for marketing purposes).

     

  • 2.3 When having a MY ECCO account

    If you create a MY ECCO account with us, then you will be asked to provide certain basic information in order to create and operate the account. The mandatory personal data includes your first and last name, gender, e-mail address, and password (“Account Registration Data”). The purpose is to create the MY ECCO account and make it available to you. We cannot create an account and make it available to you, unless you provide us with the mandatory information.

    Sign up using Facebook: If you have signed up using your Facebook account, you at the same time have given us access to collect and use the information from Facebook such as your e-mail, password, first name, last name, birth date, country, language and other information contained in your public Facebook profile including the pages, videos, other content or ads you like, share, see or click on. The Facebook profile information will be used for the requested signing up, signing in to your account and further to tailor or improve our websites, and the service offerings, including our offerings to you. If you want to restrict the amount of information third parties including us can get access to, we strongly recommend you to change your privacy settings in your Facebook profile.  

     

    Please also note that Facebook will be collecting information about you, when using your Facebook account as log in. For more information about how Facebook collects and uses your personal data please click here.   

     

    Sign up using Google: If you have signed up using your Google account, you at the same time have given us access to collect and use the information from Google such as your e-mail, password, first name, last name, birth date, country, language and other Google account information you have allowed third parties to see. The Google account information will be used for the requested signing up, signing in to your account and further to tailor or improve our websites, and the service offerings, including our offerings to you. If you want to restrict the amount of information third parties including us can get access to, we strongly recommend you to change your privacy settings in your Google account.  

     

    Please also note that Google might be collecting information about you, when using your Google account as log in. For more information about using your Google Account as log in, please click here.

     

    We may also give you the opportunity to provide us with other supplementary data than the data which we have clearly indicated as mandatory. Such supplementary data might include your age, birth date, family information, shoe size, shipping and billing address and other demographic information or information about your interests and purchasing preferences. We might also give you the opportunity to submit personal data about other people (e.g. information about your kids, spouse, friends etc.). If you submit personal data about other persons, you warrant that you have informed such other persons about the submission and have obtained their prior consent hereto and to our use hereof in accordance with this Privacy Policy.  

     

    It is your own choice whether you will provide such Supplementary Data to us.

     

    You can use your MY ECCO account to manage your account data and provide us with supplementary data, which will help us improve our services and offerings to you. You will also have access to certain transactional data about your previous purchases, returns etc.

     

    In order to give you a better service in the Brick & Mortar ECCO Stores operated by our KRM Affiliates, the staff in these ECCO Stores will have access to your MY ECCO account data (including your first and last name, e-mail address, transactional data and other supplementary information you have provided to us), if you identify yourself to the staff either by providing your e-mail, name, or phone number.  The ECCO Stores may use the data to service you, and may on our behalf register information about your visit, such as the date of the visit, details about your purchases, returns etc.

     

    We recommend that you keep your MY ECCO account data updated at all times.

     

    To provide you with an increased level of security online, access to your personal data on certain parts of our websites may be protected with a password that you have selected. We strongly recommend that you do not disclose your password to anyone. We will never ask you for your password in any unsolicited communication.

     

    The legal basis for the processing described above in this section is GDPR art. 6(1) a) namely the consent you have granted when creating the account.  

     

    You can manage and delete your MY ECCO account by logging into the account to administer it. Please also refer to section 5 (Your rights and how to withdraw consents and unsubscribe).

     

    We will also use your personal data for performing general market research and analysis in order to tailor and improve our websites and service offerings. We may also link your MY ECCO account data to other personal data about you for profiling purposes in order to be able to personalize your website experiences and to provide you with personalized offerings (e.g. special birthday vouchers, offers in your preferred or commonly used ECCO Store etc.).  Please also refer to section 2.8 (Profiling for marketing purposes).

     

    Please be informed that we will not use your e-mail and phone etc. to send you Newsletters, unless you have provided a separate consent to receive such Newsletters.

  • 2.4 When using our online ECCO shop

    We offer you the opportunity to make purchases of ECCO products through our online shop. The purchases made through the online shop on gb.ecco.com are made from KRM (Great Britain) Ltd., with its registered address at 102, Kensington High Street, London W8 4SG, United Kingdom. However, the processing of your personal data related to the use of the online shop is under our control.

     

    If you make or take steps to make a purchase on this website or any of our other websites, we process your personal data including your name, e-mail, shipping and billing address, details of the purchased items and other information necessary for the purpose of completing the purchase and delivery of the purchased items to you (“Online Transactional Data”).  The Legal basis for this processing is GDPR art. 6(1) b) namely that the processing is necessary for the performance of a contract to which you are party or in order to take steps at your request prior to entering into a contract.  

    
    

    Payments: For the purpose of managing payments on this website, we have integrated components of the following online payment service provider: Altapay A/S, Gyngemose Parkvej 50 , 2860 Søborg, Denmark (Hereinafter referred to as the “Online Payment Service Provider”). When having selected the relevant payment method, we automatically transfer personal data to the Online Payment Service Provider, which is necessary for payment processing. The data will also be used for fraud prevention purposes. The personal data transmitted to the Online Payment Service Provider includes: first name, last name, shipping and billing addresses, transactional data, email address, IP address, telephone number, mobile phone number, and other data necessary for payment processing. You will provide your credit card details directly to the Online Payment Service Provider, who will then further transfer necessary data to the relevant credit card agencies for identity and creditworthiness checks and payment clearance. The Legal basis for this processing is GDPR art. 6(1) b) namely that the processing is necessary for the performance of a contract to which you are party or in order to take steps at your request prior to entering into a contract. 

    
    

    Automated Fraud Check: If you make an order through our online shop we perform automated fraud checks to minimize the risk of being exposed to fraudulent behaviour and the misuse of credit cards etc. For this purpose, we use your personal data including your name, e-mail, delivery address, billing address, credit card number, expiry date, security code and purchase behaviour for automated decision-making without human intervention to determine whether there is a risk that we are exposed to fraudulent behaviour and misuse of credit cards etc. If we suspect fraudulent behaviour, then the purchase will not be completed. In case you experience that the purchase is denied and you want to object to this, please contact our Customer Care in accordance withsection 1 (Our Contact Details). The Legal basis for this processing is GDPR art. 6(1) f) our legitimate interest namely in the prevention and protection of us and third parties against fraud, misuse of services, and money laundering.    

    
    

    Returns: If you return any purchased items to us, then we process your personal data including the Online Transactional Data necessary for the purpose of managing your return request and returning your money. The Legal basis for this processing is GDPR art. 6(1) b) namely that the processing is necessary for the performance of a contract to which you are party and GDPR art. 6(1) f) our legitimate interest namely in providing customer services. 

    
    

    We also use your Online Transactional Data, abandoned shopping basket, returns etc. for general marketing research purposes and to tailor or improve our websites and service offerings. We may also link the data to other personal data about you for profiling purposes in order to be able to personalize your website experiences and to provide you with personalized offerings. Please also refer to section 2.8 (Profiling for marketing purposes.

  • 2.5 When visiting our Brick and Mortar ECCO Stores

    You can visit the Brick & Mortar ECCO Stores operated by our KRM Affiliates without disclosing any information about yourself.  

     

    Electronic Receipt: We offer to provide you with an electronic copy of your invoice by e-mail, when you make a purchase in one of the ECCO Stores operated by our KRM Affiliates. If you make use of this service, then we will keep your e-mail address together with a copy of the invoice to provide you with this service, and later on be able to retrieve a copy hereof in case you need to document a purchase. The legal basis for this is GDPR art. 6(1) f) our legitimate interest namely in providing customers services.

     

    We will not use your e-mail to send you newsletters or other marketing material, unless you specifically have signed up to receive Newsletters.

     

    Having a MY ECCO account: In order to give you a better service in the Brick & Mortar ECCO Stores operated by our KRM Affiliates, the staff in these ECCO Stores will have access to your MY ECCO account data (including first and last name, e-mail address, transactional data and other supplementary information you have provided to us), if you identify yourself to the staff either by providing your e-mail, name, or phone number.  The ECCO store may use the data to service you, and the ECCO Stores may on our behalf register information about your visit, such as the date of the visit, details about your purchases, returns etc. (“Offline Transactional Data”). The legal basis for the processing described in this section is GDPR art. 6(1) a) namely the consent you have granted when creating the account. Please also refer to SECTION 2.3 (WHEN HAVING A MY ECCO ACCOUNT) and section 2.8 (Profiling for marketing purposes).

     

    Having signed up to receive Newsletters: If you have signed up to receive Newsletters, and have chosen to identify yourself in the ECCO Store, e.g. by giving your name, e-mail or phone number then the ECCO Store may on our behalf register information about your visit, such as the date of the visit, details about your purchases, returns etc. (“Offline Transactional Data”). Please also refer to SECTION 2.2 (WHEN SIGNED UP FOR NEWSLETTERS) and section 2.8 (Profiling for marketing purposes).

  • 2.6 When contacting us through Customer Care etc

    When you contact us either through one of our Customer Care representatives, or e-mail us with a comment or questions we will retain and use such information in order to respond to your request. You may be asked for further information that identifies you, such as your name, e-mail address, telephone number and country for the purpose of being able to answer your questions etc. We might also request other information, which might be needed to reply to your request. It is always optional for you what information you chose to provide us with. However, please note that in case we do not have sufficient information to process your request, then it might have as a consequence, that we will not be able to accommodate your request. The Legal basis for this processing is GDPR art. 6(1) f) our legitimate interests namely in providing customer services, understanding customer behaviour and interests and establishing, exercising and/or defending legal claims.   

     

    We might also request other information including health data, biometric data or special categories of data, if you have made a claim against us, and the information is needed for establishing, exercising or defending the claim. The legal basis for this is GDPR art. 9(1) f) namely that the processing is necessary for establishing, exercising or defending legal claims.

  • 2.7 When participating in competitions and surveys etc

    Occasionally we may give you the opportunity to participate in competitions, surveys etc. If you choose to participate, then we will be asking you to provide us with certain data. Such data depends on the specific competition or survey etc., but might include your name, e-mail, age, gender, family information, shoe size, other demographic information or information about your interests and purchasing preferences. We use this information for running competitions or surveys etc., but we also use it for general market research purposes and to tailor or improve our websites and service offerings. The Legal basis for this is GDPR art. 6(1) a) namely the consent you have granted, when choosing to participate in the competition or survey etc.

     

    We may also link the personal data obtained through your participation in a competition or survey etc. to other personal data about you for profiling purposes as described in section 2.8 (Profiling for marketing purposes)

  • 2.8 Profiling for marketing purposes

    If you have identified yourself to us, for example by making a purchase, creating an account or by giving us your name, e-mail address or phone number, then we may link the personal data we have collected about you as per above sections, including data collected through the use of our websites, Newsletter-Tracking Data, names, e-mail, phone number, addresses, Facebook profile information, Google account information, information from you concerning demographics, interests and preferences (e.g. gender, birth date, shoe size, family situation, product preferences etc.), Online and Offline Transactional Data incl. abandoned shopping baskets, returns and Customer Care interactions. The purpose for this is to perform general marketing research incl. customer analysis and customer segmentation and statistics. Furthermore, we may use the information to evaluate and assess your individual interests and preferences in order to personalize your shopping and website experiences and optimizing the service you receive us and our affiliates. The legal basis for this is GDPR art. 6(1) f) our legitimate interests namely in understanding customer behaviour and interests and ensuring effective marketing and advertisement of ECCO product and services.

     

    If you have signed up to receive Newsletters, then we will also use your personal data in order to adapt the content of Newsletters to better suit your interests and to provide you with personalized offerings. The Legal basis for this is GDPR art. 6(1) a) namely the consent you have granted, when signing up to receive Newsletters.

     

    If you disagree and want to object to this, please contact us in accordance with the section 1 “Our Contact Details”, and we will then cease to use your personal data for profiling for marketing purposes.

• 3. HOW WE SHARE YOUR PERSONAL DATA WITH OTHERS

  In order to make our services available to you, provide you with requested services and support and in general to operate our business, we will have to disclose and transfer your personal data to other ECCO and KRM Affiliates and third parties, such as IT suppliers, marketing agencies, logistics service providers, payment service providers etc.

   

  Please be ensured that we will not sell or rent your personal data to third parties for them to be able to use your personal data for their own direct marketing purposes, unless we have your consent to do so.

   

  When using data processors to process your personal data on our behalf we require, that they only process your personal data in accordance with our instructions. We also require that the data processors signs relevant contracts providing sufficient guarantees to implement appropriate technical and organisational measures in such a manner that the data processing will meet the requirements of the applicable data protection regulation and ensures an appropriate protection of your rights.

   

  In case we disclose your personal data to third parties, who will not be acting as a data processor under our instructions, but as independent data controllers, then we do our best to ensure that they are trustworthy and have implemented appropriate technical and organisational measure to protect your data, and provides us with clear commitments to comply with applicable data protection regulation and not to use the personal data received from us for other purposes, than providing agreed services and making statistical analysis in an anonymised manner.

   

  Unfold below sections to read more about how we share your personal data.

  • 3.1 Categories of Recipients

    The main categories of potential recipients of your personal data are:

     

    A. Service Providers

    We may share your personal data with our trusted third party service providers, who, on our behalf, operate, maintain, and/or support our IT systems and IT infrastructure, our websites, manage our payment solutions, perform statistical analysis, sending newsletters, deliver goods you have purchased from us, provide customer support and perform other important services for us.

    B. Other KRM Affiliates

    If you have created an account with us, then we may disclose your personal data to other companies which are owned or controlled by us (“KRM Affiliates”) in order for the operation of the MY ECCO account cf.  section 2.3 (WHEN HAVING A MY ECCO ACCOUNT).

     

    If you have made a purchase from one of our KRM Affiliates through our online shop, then transactional data will be disclosed in order for the KRM Affiliate to comply with relevant accounting and tax regulation etc.  

     

    We may also disclose your personal data to other KRM Affiliates in other situations in order for them to provide us with relevant services.

     

    C. Other ECCO Affiliates

    We may disclose your personal data to ECCO Sko A/S with its registered address at Industrivej 5, 6261 Bredebro, Denmark and other companies, which are owned or controlled by ECCO Sko A/S or owns or controls ECCO Sko A/S (“ECCO Affiliates”) in order for them to provide us with relevant services.

     

    D. Legal Successors

    A transfer of your personal data to another legal entity may occur as part of a transfer of our business or parts thereof in form of a reorganization, sale of assets, consolidation, merger or similar.

     

    E. Other disclosures

    In addition to where you have consented to a disclosure of the personal data or where disclosure is necessary to achieve the purpose(s) for which, it was collected, personal data may also be disclosed in special situations, where we have reason to believe that doing so is necessary to identify, contact or bring legal action against anyone damaging, injuring, or interfering (intentionally or unintentionally) with our rights or property, users, or anyone else who could be harmed by such activities, or otherwise where necessary for the establishment, exercise or defence of legal claims. 

  • 3.2 Transfer of data to third countries

    The use of service providers and disclosure of your personal data to other ECCO and KRM Affiliates and other recipients might imply a transfer of your personal data to countries, which might not have data protection regulation as protective as in your jurisdiction and might not be considered ensuring an adequate level of protection of personal data by the EU Commission or a national data protection authority (so called “unsafe Third Countries”). Such countries include, but is not limited to, the United States, Canada, China, Vietnam, Singapore, Thailand, Malaysia, Japan, South Korea, Indonesia, Australia and New Zealand.

     

    We require that all recipients of your personal data provide appropriate safeguards to protect your personal data, when it is transferred to “unsafe Third Countries”, through the adherence to standard data protection clauses adopted by the EU Commission cf. the GDPR article 46(2). Please refer to the following link to obtain more information about the standard data protection clauses we use here. If the recipient is certified under the US Privacy Shield this is also considered as providing appropriate safeguards to protect your personal data cf. the EU General Data Protection Regulation article 46(2). Please click here to obtain more information about the US Privacy Shield.  

     

    If you have any questions, please contact our Customer Care representatives in accordance with section 1 (Our Contact Details).

• 4. HOW WE RETAIN AND DELETE YOUR DATA

  Your personal data will be held by us and kept in a form, which permits identification of you for no longer than is necessary for the purposes for which the personal data is collected and legitimately processed. This implies that we will keep and process your personal data as long as we are providing services to you and also keep it afterwards for as long as would be needed for the settlement of any potential disputes that may be raised afterwards or as long as the law otherwise provides for. Thereafter, we will either delete your personal data or anonymise it so that it no longer can be used to identify you. 

  
  

  We will delete any information, which according to our reasonable assessment seems to be inaccurate or out of date by reason of the time elapsed since it was collected or by reason of any other information in our possession.

  
  

  If you provide us with a written request, we will also erase or anonymize your personal data without undue delay, unless we have a valid legal ground to continue to keep your personal data. Please also refer to section 5 (Your rights and how to withdraw consents and unsubscribe).

• 5. YOUR RIGHTS AND HOW TO WITHDRAW CONSENTS AND UNSUBSCRIBE

  You have certain rights according to the applicable data protection regulation. Some of the rights are rather complex and include exemptions, accordingly you are recommended to read relevant laws and guidance from the regulatory authorities for full explanation of these rights. However, you can find a summary of your rights, if you unfold below sections.

  • 5.1 The right to access

    You have a right to obtain the confirmation as to whether or not your personal data are being processed by us. In addition, you have a right to obtain more detailed information about the personal data kept and the processing undertaken by us and under certain circumstances the right to receive a copy of this personal data.

  • 5.2 The right to rectification

  • 5.3 The right to erasure

    In some cases, you have the right to erasure of your personal data without undue delay. Those circumstances include; i) the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed; ii) you withdraw consent to consent-based processing; iii) the processing is for direct marketing purposes and iv) the personal data has been unlawfully processed. However, there are certain general exclusions of the right to erasure. Those general exclusions include where processing is necessary; i) for the exercising the right of freedom of expression and information; ii) for compliance with legal obligation; or iii) for the establishment, exercise or defence of legal claims. 

  • 5.4 The right to restriction of processing

    In some cases, you have the right to restrict the processing of your personal data. Where processing has been restricted, we may continue to store your personal data. However, we will only otherwise process it i) with your consent; ii) for the establishment, exercise or defence of legal claims; iii) for the protection of the rights of another natural or legal person; or iv) for reasons of important public interest. 

  • 5.5 The right to data portability

    To the extent the legal basis for the processing is your consent, and such processing is carried out by automated means, you have the right to receive your personal data in a structured, commonly used and machine-readable format. However, this right does not apply where it would adversely affect the rights and freedoms of others.

  • 5.6 The right to object

    You have the right to object to the processing of your personal data on grounds relating to your particular situation, but only to the extent that the legal basis for the processing is that the processing is necessary for i) the performance of a task carried out in the public interest or in the exercise of any official authority vested in ECCO; or ii) the purpose of legitimate interests pursued by us or a third party. In such case we will cease processing the personal data, unless we can demonstrate compelling legitimate grounds for the processing, which override your interests, rights and freedoms or the processing is for the establishment, exercise or defence of legal claims.

     

    You also have the right to object to our processing of your personal data for direct marketing purposes (including profiling for direct marketing purposes). If you make such an objection, we will cease to process your personal data for this purpose.

  • 5.7 The right to withdraw consent

    To the extent that the legal basis for the processing is your consent, you have the right to withdraw from that consent at any time.

     

    In case you withdraw from a consent given, then we will cease to process your personal data, unless and to the extent the continued processing is permitted or required according to the applicable personal data regulation or other applicable laws and regulations. The withdrawal from your consent will in no event effect the lawfulness of processing based on consent before its withdrawal.

     

    If you refrain from providing required consents, or later on withdraw from the consents, it might have as a consequence that you may not be able to benefit from some of the service offerings provided by us.

  • 5.8 The right to complaint to data protection supervisory authority

    You may always lodge a complaint with your local data protection supervisory authority. The data protection supervisory authority in United Kingdom is

     

    The Information Commissioner’s Office

    Water Lane,

    Wycliffe House Wilmslow

    Cheshire SK9 5AF

    UK

    www.ico.org.uk 

     

    We do our best to ensure that we protect your personal data, keep you informed about how we process your personal data and comply with the applicable data protection regulation. In case you are not satisfied with the processing and protection of your personal data or the information you have received from us, then we urge you to inform us in order for us to improve. Please also do not hesitate to contact us, if you want to make use of your rights.

    
    

    Please contact us through the points of contact listed in section 1 (Our Contact Details). Please also provide us with relevant information to take care of your request, including your full name and email address so that we can identify you. We will respond to your request without undue delay.

    
    

    You can always withdraw from a consent to receive newsletters etc. and unsubscribe from an e-mail list by following the instructions in any e-mail or other communication you receive from us.

    
    

    If you have created an account with us, then you can also manage and delete your account by logging into the account and administer your account.

• 6. LINKS TO OTHER WEBSITES

  We may provide links to third party websites. These linked websites are not under our control, and we therefore cannot accept responsibility or liability for the conduct of third parties linked to our websites. Before disclosing your personal data on any other website, we advise you to examine the terms and conditions of using that website and its privacy policies.

• 7. CHANGES TO THIS PRIVACY POLICY

  We reserve the right, at our discretion, to add, modify or remove portions of this Privacy Policy in the future to ensure that the information herein provides relevant and adequate information about our collecting and processing of your personal data.

   

  This Privacy Policy may be supplemented by other information received from us or another ECCO or KRM Affiliates and other terms and conditions applicable to this website or which you have agreed to as part of interacting with us or another ECCO or KRM Affiliate.

  You can always find the updated version of our Privacy Policy at gb.ecco.com  

   

  If you have consented to receive newsletters and other information from us, we will also inform you directly about any updates to this Privacy Policy through e-mail.

   

  Version 05/2018

  
  

  ECCO & KRM Affiliates	Country
  ECCO Distributors DAC	Ireland
  ECCO France S.A.S.	France
  ECCO Holding A/S	Denmark
  ECCO Holst A/S	Denmark
  ECCO Leather B.V.	The Netherlands
  ECCO Shoes Trade Ltd.	Turkey
  ECCO Shops Vestdanmark A/S	Denmark
  ECCO Sko A/S	Denmark
  KRM (Austria) GmbH	Austria
  KRM (Cyprus) Ltd.	Cyprus
  KRM (Czech Republic) s.r.o.	Czech Republic
  KRM (Danmark) A/S	Denmark
  KRM (Deutschland) GmbH	Germany
  KRM (Great Britain) Ltd.	UK
  KRM (Hungary) Kft.	Hungary
  KRM (Norway) AS	Norway
  KRM (Poland) Sp.z.o.o.	Poland
  KRM (PORTUGAL), LDA	Portugal
  KRM (Sweden) AB	Sweden
  KRM Adriatic d.o.o.	Croatia
  KRM AG	Switzerland
  KRM Footwear Romania SRL	Romania
  KRM Footwear d.o.o. Beograd-Novi Beograd	Republic of Serbia
  KRM Kenkä Oy	Finland
  KRM OBUTEV SL, trgovsko podjetje, d.o.o.	Slovenia
  KRM Retail (Slovakia) s.r.o.	Slovakia
  KRM Switzerland AG	Switzerland
  SIA KRM Baltic	Latvia