This Privacy Policy explains which personal data is processed when you visit SNEAKER.DE, why it is processed, and which rights you have.
Last updated: 24 August 2026
1. Controller
sneaker.de
Lena Sänger
c/o Postflex #2681
Emsdettener Str. 10
48268 Greven
Germany
Email: [email protected]
Further information: Imprint
2. General information and legal bases
We process personal data only where this is necessary to operate this website securely and reliably, to respond to enquiries, or where you have provided consent. Depending on the processing activity, we rely in particular on Art. 6(1)(a) GDPR (consent), Art. 6(1)(b) GDPR (contract or pre-contractual steps), and Art. 6(1)(f) GDPR (legitimate interests). Access to or storage of information on your device is additionally governed by Section 25 TDDDG.
Our legitimate interests include the secure, stable and user-friendly provision of our website, preventing misuse, and responding to enquiries.
3. Website delivery and hosting
This website is hosted by Kinsta. When the website is accessed, technically required log data may be processed, including IP address, date and time, requested URL, referrer, browser/device information, transferred data volume, and HTTP status. This processing is required to deliver the website, analyse errors, and maintain security and is based on Art. 6(1)(f) GDPR. Kinsta processes data on our behalf under an agreement pursuant to Art. 28 GDPR.
Further information: Kinsta Privacy Policy.
4. Cloudflare
We use Cloudflare as a content delivery network, DNS, proxy and security service. Requests are routed through Cloudflare. Cloudflare may process IP addresses, request and header data, browser/device information, and security signals. The purpose is to deliver the website quickly and securely and to prevent automated or malicious access. The legal basis is Art. 6(1)(f) GDPR. Where strictly necessary information is stored on or accessed from your device, Section 25(2)(2) TDDDG applies.
Cloudflare may process data outside the European Economic Area. The transfer mechanisms stated by the provider apply to such transfers. Further information: Cloudflare Privacy Policy.
5. Bot and abuse protection
We use Shield Security to protect logins, forms and website functions. IP addresses, browser and request information, and technical signals may be processed to detect automated or abusive access. The legal basis is Art. 6(1)(f) GDPR; technically necessary storage is based on Section 25(2)(2) TDDDG.
6. Cookies and consent management
On your first visit, you can decide whether external media may be loaded. You can change or withdraw your choice at any time via “Cookie settings” in the footer. Rejecting optional content is as easy as accepting it. Without consent, optional external media remains blocked.
The legal basis for storing your choice is Section 25(2)(2) TDDDG and Art. 6(1)(f) GDPR. Consent for external media is based on Section 25(1) TDDDG and Art. 6(1)(a) GDPR. The consent solution is hosted locally; your consent choice is not transmitted to an external consent provider.
7. External media
Articles may include embeds from YouTube, Vimeo, SoundCloud or Spotify. These services are loaded only after you consent to the “External media” category. When loaded, the respective provider receives your IP address and technical browser/device information. Depending on the provider and your login status, additional data may be processed and associated with an account. Processing in third countries, particularly the United States, is possible.
- YouTube / Google Ireland Limited: Privacy information
- Vimeo.com, Inc.: Privacy information
- SoundCloud: Privacy information
- Spotify AB: Privacy information
The legal basis is your consent, which you may withdraw at any time, under Art. 6(1)(a) GDPR and Section 25(1) TDDDG.
8. Locally hosted fonts
The fonts used on this website are served locally from our server. Loading them does not establish a connection to Google Fonts.
9. Audience measurement with WP Statistics
We use WP Statistics for anonymous audience measurement and to improve our website. In particular, page views, time of access, referrer, browser and device type, and an approximate geographic assignment are evaluated statistically. WP Statistics does not store cookies or comparable identifiers on your device for this purpose.
The IP address is anonymised before it is stored and is then hashed. Full user-agent strings and WordPress user IDs of logged-in visitors are not stored. Your browser's “Do Not Track” setting is respected. Voluntary sharing of anonymous usage data with the plugin provider is disabled. Statistics data is stored in the WordPress database at our hosting provider and is not used to create advertising profiles.
Detailed statistics records are automatically aggregated after 180 days; aggregated counts may be retained for longer-term comparisons. The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is to analyse usage and reach anonymously so that we can improve our content and technology. You may object to this processing under Art. 21 GDPR, for example by enabling “Do Not Track” in your browser or by contacting us.
Further information: WP Statistics privacy information.
10. External links, social media and partner links
Our website includes links to social networks, brands, shops and other websites. Data is transferred to the destination only when you open such a link. The respective provider is responsible for any subsequent processing.
Some shop and partner links are opened through go.sneaker.de or a redirection service. When you click, the redirection service and destination provider may receive your IP address, time of access, referrer, and browser/device information. The destination website may use its own cookies or tracking technologies. Further information about the redirection service used: Short.io Privacy Policy.
11. Contact
If you contact us by email, we process the information you provide to respond to your enquiry and any follow-up questions. The legal basis is Art. 6(1)(b) GDPR where the enquiry concerns a contract or pre-contractual steps; otherwise it is Art. 6(1)(f) GDPR. We delete the data once the enquiry has been resolved, unless statutory retention duties apply.
12. Retention
We retain personal data only for as long as necessary for the relevant purpose or where statutory retention duties apply. If the purpose ceases to apply or consent is withdrawn, the data is deleted unless another legal basis or retention duty applies. Specific cookie durations are listed above.
13. Your rights
Subject to the statutory requirements, you have rights including access, rectification, erasure, restriction of processing, data portability and objection. You may withdraw consent at any time with effect for the future. You also have the right to lodge a complaint with a data protection supervisory authority.
To exercise your rights, email [email protected].
14. No automated decision-making
We do not use solely automated decision-making, including profiling, within the meaning of Art. 22 GDPR.
15. Changes to this Privacy Policy
We update this Privacy Policy when the services used, processing activities, or legal requirements change. The version published on this page is the applicable version.