PRIVACY ­POLICY

2. Collection and Storage of Personal Data and Purpose of Processing

a) When visiting the website

When you access our website, information is automatically transmitted by the browser used on your device to the server of our website and temporarily stored in so-called log files. This includes in particular the IP address of the requesting device, the date and time of access, the name and URL of the retrieved file, the website from which access is made (referrer URL), the browser used and, if applicable, the operating system of your device as well as the name of your access provider.

The processing of this data is carried out in order to ensure a smooth connection to the website, to ensure comfortable use of our website, to evaluate system security and stability and for other administrative purposes.

The legal basis for data processing is Art. 6(1)(f) GDPR. Our legitimate interest arises from the purposes listed above. In no case do we use the collected data for the purpose of drawing conclusions about your person.

b) When using the contact form

If you send us inquiries via the contact form, your details from the form, including the contact data you provide there, will be stored by us for the purpose of processing the request and in case of follow-up questions.

The processing of the data entered is based on your consent pursuant to Art. 6(1)(a) GDPR.

The data you enter will remain with us until the purpose for data storage no longer applies or you request deletion, provided that no statutory retention obligations oppose this.

c) Newsletter

If you have expressly given your consent, we use your email address to send you our newsletter. Registration is carried out using the double opt-in procedure. You can unsubscribe from the newsletter at any time via the unsubscribe link or by contacting us.

The legal basis is Art. 6(1)(a) GDPR.

d) Shoe Finder

Under secosol.de/shoefinder.hartmann-os.com, we provide a web-based Shoe Finder that allows users to search for suitable shoe models.

No registration, name or email address, customer data, health data or foot-related data is required to use the Shoe Finder. Search queries and search histories are not stored by the application. No user profiles are created and user behaviour is not analysed.

For the technical provision of the Shoe Finder, technically necessary access data is processed. This includes, in particular, the IP address when accessing the application. In addition, technical server and nginx log data is generated. IP addresses are stored for 14 days and subsequently deleted. This processing serves to ensure the secure and functional provision and technical administration of the application.

A technically necessary Streamlit session is used while the Shoe Finder is being used. No cookies are used for this purpose.

The Shoe Finder is hosted on a server operated by Matthias Hartmann Orthopädie + Sport GmbH in Germany. The product and shoe data stored in the Shoe Finder does not contain any personal data relating to visitors.

The processing of technically necessary access data is based on Art. 6(1)(f) GDPR. Our legitimate interest lies in providing the Shoe Finder in a secure, stable and functional manner.

3. Cookies and consent management

Cookies and comparable technologies are used on our website. These are small text files that are stored on your device.

The use of cookies is carried out via a consent or cookie tool. Technically necessary cookies are used on the basis of Section 25(2) TTDSG. All other cookies, in particular analysis and marketing cookies, are only used after your explicit consent.

You can revoke or adjust your consent at any time via the settings of the cookie banner.

4. Google Tag Manager

We use Google Tag Manager, a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google Tag Manager is used to manage and deploy tracking tags. The service itself does not process personal data and does not set cookies.

Other services are integrated via Google Tag Manager, which are only activated after your consent via the consent tool.

The legal basis is Art. 6(1)(a) GDPR.

5. Google Analytics 4

We use Google Analytics 4, a web analytics service provided by Google Ireland Limited.

Google Analytics enables us to analyze user behavior on our website. Among other things, information about page views, duration of visits, interactions and technical information about the device used is collected. The IP address is processed in anonymized form.

The collected data may be transferred to Google servers and processed there. Data may also be transferred to the United States. Google uses appropriate safeguards such as standard contractual clauses.

The use takes place exclusively on the basis of your consent pursuant to Art. 6(1)(a) GDPR.

You can prevent the collection of your data at any time by withdrawing your consent via the cookie banner.

6. Google Search Console

We use Google Search Console, a service provided by Google Ireland Limited, to analyze the visibility of our website in Google search results.

Only aggregated data such as search queries, clicks and impressions are made available. No personal data of website visitors is processed directly.

The legal basis is Art. 6(1)(f) GDPR.

7. Google Maps

We use Google Maps on our website to display interactive maps, particularly within our dealer locator.

To use the functions of Google Maps, it is necessary to process your IP address. This information is usually transmitted to Google servers. Data may also be transferred to the United States.

The integration takes place exclusively after your consent via the consent tool.

The legal basis is Art. 6(1)(a) GDPR.

8. YouTube

Videos from the YouTube platform may be embedded on our website. The provider is Google Ireland Limited.

When accessing a page with an embedded video, a connection to YouTube servers is established. Personal data, in particular your IP address, may be transmitted.

The content is only loaded after your consent via the consent tool.

The legal basis is Art. 6(1)(a) GDPR.

9. Google Fonts

Fonts are used on our website. If these are not hosted locally, they are loaded from servers of Google Ireland Limited.

When loading fonts, your IP address is transmitted to Google. Data may also be transferred to the United States.

The integration takes place exclusively after your consent via the consent tool.

The legal basis is Art. 6(1)(a) GDPR.

10. Data sharing

Your personal data will only be shared with third parties if you have given your explicit consent, if this is legally permissible, if it is necessary for the performance of a contract or if there is a legal obligation.

11. Social Media

Our website contains links to our profiles on social networks, in particular LinkedIn and Instagram.

When clicking on these links, you will be redirected to the respective platform. No automatic data transmission to these providers takes place when simply visiting our website.

Please note that personal data may be processed by the respective providers when using their platforms. Further information can be found in the privacy policies of the respective providers.

12. Data subject rights

You have the right to obtain information about your stored personal data, to request correction, deletion or restriction of processing, to receive your data in a structured format and to withdraw any consent you have given at any time. You also have the right to lodge a complaint with a supervisory authority.

13. Right to object

If your personal data is processed on the basis of legitimate interests, you have the right to object to the processing.

14. Data security

We use SSL or TLS encryption and appropriate technical and organizational measures to protect your data against unauthorized access, loss or manipulation.

15. Updates and changes

This privacy policy is currently valid and has the status of March 2026. We reserve the right to amend it if necessary.

Status: September 2026