Data Protection Information
This Data Protection Information provides information on the processing of your personal data whenever you visit this website of PUMA United Kingdom Limited (hereinafter “PUMA”, “we” or “us”).
1. Scope, data controller, data protection officer and definitions
1.1. Scope of this Data Protection Information
This Data Protection Information applies to the use of this website of PUMA United Kingdom Limited. Data processing on websites of other companies within the PUMA Group are not covered by this Data Protection Information.
1.2. The Controller for the processing of your personal data
Unless otherwise specified in this Data Protection Information, the Controller for the processing of your personal data is:
PUMA UNITED KINGDOM LTD
Super G Steamboat Way
WF10 5XY Castleford
United Kingdom
1.3. Definitions
This Privacy Notice is based on the following terms under data protection law, which we have defined to facilitate understanding.
Examples of possible recipients: Banks / payment providers, logistic firms and shipping service providers and IT services providers; for more information please refer to Section 4)
Examples of personal data: Name, contact details, bank or credit card details.
For the data processing activities described in this Data Protection Information, the Controller is PUMA United Kingdom, unless otherwise specified.
2. Purposes and legal bases of our processing of your personal data
2.1. Processing of your data when you visit our websites
If you visit our websites in order to find out about products and services without registering for a customer account, purchasing products in our online shop or otherwise actively transferring information to us (purely for informational purposes), we process your personal data for the following purposes and by virtue of the following legal bases:
2.1.1. Provision of websites and IT security
We host this website using the services of Webflow, Inc., a Delaware corporation located at 398 11th Street, Floor 2, San Francisco, CA 94103, USA.
As part of this hosting, we process your personal data that are technically necessary to allow us to provide our websites to you and to guarantee stability and security when you visit our websites. This includes the following personal data:
This data processing is necessary for the purpose of enabling you to use our websites (Legal basis: Art. 6 (1) sentence 1, lit. b GDPR) as well as for the purposes of our legitimate interest to guarantee IT security (Legal basis: Art. 6 (1) sentence 1, lit. f GDPR).
We also use basic analytics to analyze how the website is used, such as the number of page views or site search terms, without reference to personal data.
Further information on hosting via Webflow can be found at:
https://webflow.com/legal/eu-privacy-policy
https://webflow.com/legal/privacy-faqs
2.1.2. Website Analytics
Use of cookies
On our website we use cookies. Cookies are small text files that are stored in the browsers of your end devices whenever you visit our websites. Through cookies, your actions and settings on our websites can be tracked, stored and recognized for the duration of the browser session or even after this. In addition to this, cookies and their respective cookie IDs allow your browser to be recognised. For example, after leaving the website, you can reconstruct the content of your shopping card or be shown the last seen products.
For more information about the use of cookies on our websites, the cookie categories and for individual settings please refer to our Cookie Settings (https://uk.puma.com/uk/en/help/cookie-settings).
Google Analytics
We use Google Analytics on our websites, a web analysis service der Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland („Google“).
Google Analytics uses cookies that allow an analysis to be made on the usage of our websites.
The information generated by the cookie on the use of our websites might be transferred to a server of Google in the USA. However, as we use Google Analytics with the extension “anonymizeIP()”, Google will reduce the IP address of the website visitor within Member States of the European Union or in other states party to the Agreement on the European Economic Area or the United Kingdom beforehand, which excludes any direct association to you. Only in exceptional cases, is the full IP address transferred to a server of Google in the USA and shortened there. On behalf of PUMA, Google will use this information in order to evaluate the use of the websites, to prepare reports on the website activities, to analyze the impact and improve the customization of our digital advertisements, and to provide further services to PUMA connected with the use of the websites and of the Internet. The IP address transferred from the user’s browser with regard to Google Analytics is not merged with other data by Google. Further information on terms of use and data protection can be found under:
https://policies.google.com/terms (https://policies.google.com/terms)
https://policies.google.com/privacy (https://policies.google.com/privacy)
This data processing is necessary for the purpose of our legitimate interest to carry out analyses in order to improve our website and our products, and to advertise our products on the Internet in a customized and efficient way (Legal basis: Art. 6 (1) sentence 1, lit. f GDPR).
Google Analytics Opt-out:
You can prevent the processing of your usage data (including your IP address) by Google Analytics generally, by downloading and installing the browser add-on available at the following link:
https://tools.google.com/dlpage/gaoptout (https://tools.google.com/dlpage/gaoptout)
In addition, you can also prevent Google Analytics from collecting your usage data on our websites by clicking on the following link:
Click here to opt-out of Google Analytics (https://tools.google.com/dlpage/gaoptout)
In this case a persistent opt-out cookie (name: “ga-disable-UA-[…]”) is set in your current used browser, that prevents your data from being recorded in the future when you visit our websites with this specific browser. If you use another browser, Google Analytics will be in principle enabled, unless the opt-out cookie is also set in this browser. Please note, that Google Analytics will be enabled again, if you delete the abovementioned opt-out cookie in your browser.
Google Tag Manager
On our websites, we use the Google Tag Manager, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google").
The Google Tag Manager enables PUMA to use so-called website tags via a web-based user interface provided to us by Google.
Website tags are "measurement codes and associated code fragments" that can communicate with Tag Manager servers and be configured through a web-based user interface, Google Tag Manager.
Google Tag Manager also allows us to resolve other website tags that may also collect data.
In order to provide the service, we set a cookie if you have given consent to the activation of the cookie (Art. 6 para. 1, lit. a GDPR).
The information generated might be transferred to a server of Google in the USA. However, as we use Google Analytics with the extension “anonymizeIP()”, Google will reduce the IP address of the website visitor within Member States of the European Union or in other states party to the Agreement on the European Economic Area or the United Kingdom beforehand, which excludes any direct association to you. Only in exceptional cases, is the full IP address transferred to a server of Google in the USA and shortened there
You can find more information about Google Tag Manager on the following Google web pages:
2.1.3. Customer care
Depending on the subject matter of your request, we will rely on your personal data that has been stored within the scope of other data processing activities in our systems (e.g. data that you have provided during a purchase). If and to the extent that this is necessary to answer your query, we will also collect data from external sources (e.g. query with a shipping service provider as part of shipment tracking or an investigation request).
In context of requests concerning a (pre)contractual relationship with you, this data processing is necessary for the performance of a contract (provision of a customer service) with you (Legal basis: Art. 6 (1) sentence 1, lit. b GDPR). If you wish to exercise your rights with respect to us, the correspondent this data processing is necessary for compliance with a legal obligation (Legal basis: Art. 6 (1) sentence 1, lit. c GDPR). If you would like to receive information or complain about our products and services, the respective data processing is necessary for the purpose of our legitimate interest to respond to your information request / complaint (Legal basis: Art. 6 (1) sentence 1, lit. f GDPR).
2.2. Email marketing
2.2.1. Email newsletter dispatch to subscribers
If you have subscribed to our email newsletter via “double opt-in” procedure we will send you from time to time newsletters to inform you about our products, services and promotions.
This data processing is based on your consent (Legal basis: Art. 6 (1) sentence 1, lit. a GDPR).
Withdrawal of consent:
You can withdraw your consent and unsubscribe from our newsletter at any time by sending an email with your unsubscribe request to our customer (xxx@puma.com) and/or by clicking on the unsubscribe link which is contained in every newsletter.
2.6. Other processing
2.6.1 Heylo
We also offer you the opportunity to register with our Heylo Community, provided by the Piccup Inc., 548 Market St, 61435, San Francisco, CA 94104, USA, via links on this website, where we offer various content.
Registration is not mandatory and is entirely voluntary. Your activities in our Heylo Community and sharing of content are also voluntary.
PUMA can see the content and activities you share in the Heylo Community and, if necessary, analyze them using the analysis tools provided by Heylo.
Detailed information about the Terms of Service and the processing of your data in connection with your participation in the Heylo Community can be found at:
https://www.heylo.com/privacy
2.6.2. Performance of internal audits
Within the scope of audits within the PUMA Group, both at home and abroad, your personal data may be processed. During this process, we rely also on data from other sources, depending on the case (e.g. credit agencies).
Your data may, under certain circumstances, also be appropriately processed in order to identify and rectify misconduct within the enterprise, and to implement compliance programmes and compliance measures.
This data processing is necessary for compliance with our legal obligations (e.g. under the Stock Company Act) (Legal basis: Art. 6 (1), sentence 1, lit. c GDPR) and/or for the purpose of our legitimate interest to check the processes and efficiency in the PUMA Group, to rectify misconduct and cases of fraud, to enforce and/or defend our rights, as the case may be, and to uncover any criminal offences, (Legal basis: Art. 6 (1) sentence 1, lit. f GDPR).
2.6.3. Issuing of analyses
On the basis of your data, which we process the meaning of Section 2 of this Data Protection Information, we may issue analyses. These serve as a basis for our business decisions, to improve our products and services, to adapt to the needs of our customers and to carry out marketing activities. The analyses issued on this basis no longer have any personal reference, which means it is no longer possible to trace them back to you.
This data processing is necessary for the purpose of our legitimate interest to improve the products and services we offer and carry out marketing activities (Legal basis: Art. 6 (1) sentence 1, lit. f GDPR).
2.6.4. Prize Competitions & Raffles
PUMA offers you the chance to participate in prize competitions and raffles on this Website, as well as in our stores, on Social Media like Instagram, Facebook, TikTok, with our Affiliate Partners, in Newsletters, or similar.
Your personal data will be processed with your participation. In all our prize competitions and raffles, you only need to provide us with the data that we require to perform the raffle and to notify you of your win. Typically, this is your email address, but additional data might be required based on the applicable terms and conditions of certain raffles.
If the raffle is about winning PUMA Sportswear (clothes and shoes), we ask for your name, your clothing or shoe size and your gender in addition to your email address. In order to be able to collect the prize from us, we may also ask you to inform us of the store of your choice, where you can pick up your prize by giving your name. If the prize is sent by post, which can be in case you can win tickets, vouchers or other non-cash prizes, we need your home address in addition to your name. In some cases, we might additionally ask for your age to ensure that you can legally participate in the raffle based on the applicable terms and conditions. You will find further information on all this in the terms and conditions that apply.
The data required by us to perform the raffle under the applicable terms and conditions are highlighted as mandatory fields. Unfortunately, participation in the raffle is not possible without entering your data in the marked mandatory fields. Other, unmarked fields, however, are optional and you decide yourself whether you want to share further data with us. Participation in the raffle does not depend of your optional data and has no effect on the performance of the raffle.
In the event of your participation, we process the data you provide to us in the raffle solely for the purpose of performing the raffle and notifying the winner. The same applies if you provide us with data based on terms and conditions for raffles on social media (Instagram, Facebook, Twitter, ...), e.g. by uploading a photo or posting articles, linking hashtags, using handles or commenting on our campaigns. The applicable terms and conditions may stipulate that we publish your name and address on our social media platforms (Instagram, Facebook, Twitter, ...) to announce you as a winner and your prize.
Please note, that your data will be deleted after the raffle.
Within the scope of our raffles you also have the opportunity to give us your consent to the use of your data for advertising. Your consent to advertising has no effect on your participation in the raffle. If you give us your consent to receive advertising, such as newsletters per email, usually by ticking a checkbox, we will process your data, especially your email address, also to send you offers and information about our products by email. You can withdraw your consent at any time. Further information on data processing when receiving our newsletter can be found under the section “Newsletter”.
We process your personal data based on your consent in accordance with Art. 6 sec. 1 lit. a GDPR and, where applicable, to fulfil a legal obligation in accordance with Art. 6 sec. 1 lit c GDPR. Your data will not be passed on to third parties. In individual cases we are supported by external service providers with whom we have concluded a corresponding agreement to ensure the security of the processed data.
Of course, you can exercise the rights to which you are entitled under data protection law against us at any time. You will find more detailed information on this under the section “Your Rights”.
3. Retention and erasure of your personal data
We keep your personal data for as long and to the extent required for the purposes named in this Data Protection Information (Section 2 ).
As soon as the data for the purposes named in Section 2 is no longer required, we keep your personal data for the length of time, during which you can assert claims against us or we can assert claims against you (the statutory period of limitations is generally three years, starting with the end of the year in which the claim arises, e.g. the end of the year of purchase).
In addition to this, we store your personal data for as long and to the extent we are obliged to do so by law. Corresponding obligations of proof and retention can be found, inter alia, in the Money Laundering Regulations. The retention periods may accordingly last up to ten years.
4. Transfer of personal data and the categories of recipients
Your personal data may be transferred / disclosed to the following categories of recipients:
We ensure that suitable safeguards (e.g., conclusion of applicable Standard Contractual Clauses and, if necessary, additional measures) for adequate data protection are in place, if your personal data is disclosed to any recipients mentioned above, which are established outside the UK or EU/EEA.
5. Right to object to data processing based on legitimate interests
We process your personal data within the meaning of Section 2, based on our legitimate interest, in particular to guarantee IT security on our websites, to adapt our website to your needs, to carry out analyses and marketing activities, to inform you about our products and services, to remind you of any purchasing processes that have not yet been completed, to increase the coverage of our products and marketing activities, to prevent fraud and abuse, to avoid payment defaults, to care for our customers, to safeguard, enforce and defend our legal interests (also before the courts, as necessary), and to carry out our internal management efficiently and collaboratively. For information about the balancing of interests carried out by PUMA, please contact xxx@puma.com.
Notwithstanding the specific possibilities to object to data processing described in Section 2 (e.g. provided opt-out or unsubscribe links), you have the right to object at any time to the processing of your personal data on the basis of our legitimate interests pursuant to Art. 6 (1) sentence 1, lit. f GDPR on grounds relating to your particular situation by sending an email to xxx@puma.com. We will then no longer process your data for this/these purpose(s) unless our legitimate interests in processing overweights or the processing serves to establish, exercise or defend legal claims.
If you object to the processing of your data, we will process any collected personal data in this context in order to respond to your request. This data processing is necessary for compliance with a legal obligation (Legal basis: Art. 6 (1) sentence 1, lit. c GDPR).
6. Right to withdraw consent
If you have given us your consent for the processing of your personal data, you can withdraw this consent at any time. The withdrawal of your consent is effective for the future and shall not affect the lawfulness of processing based on consent before its withdrawal.
Unless specifically regulated in Section 2, please send your withdrawal of consent to xxx@puma.com.
If you withdraw your consent, we process your personal data collected in this connection to answer your inquiry. This data processing is necessary for compliance with a legal obligation (Legal basis: Art. 6 (1) sentence 1, lit. c GDPR).
7. Your other data protection rights
You may demand at any time:
For further information on each of those rights, including the circumstances in which they apply, see the Guidance from the UK Information Comissioner's Office (ICO) on indivduals rights.
Please send your request, stating at least your first and last name, either by email to xxx@puma.com or in writing, to XXXXXXX.
If you exercise these rights against us, we will process your personal data in order to respond to your request. This data processing is necessary for compliance with a legal obligation (Legal basis: Art. 6 (1) sentence 1, lit. c GDPR).
Irrespective of your abovementioned rights, you can lodge a complaint with a data protection supervisory authority, if you are of the opinion that the processing of your personal data by us violates applicable data protection laws.
8. Changes to this Data Protection Information
The provisions of this Data Protection Information, including the referenced Cookie Information, shall apply in the version in force at the time the online shop is used.
We reserve the right to supplement and modify the content of this Data Protection Information. The updated Data Protection Information applies from the time, in which it was published on our websites. In case of substantive or material changes to the Data Protection Information, especially changes that affect the processing of your personal data already collected by us, we will inform you in advance (e.g. by email).