At SNEAKIT, we prioritize your personal data, as we understand the importance of safeguarding the information you entrust to us. Our commitment is to handle your data with the utmost care and transparency, explaining clearly how we collect and use it.

This Privacy Policy is addressed to you, as a user or customer, who accesses the website: https://sneakit.com/.

The purpose of this document is to inform you about how your personal data may be collected and processed by SNEAKIT.

What is Personal Data?

"Personal data" refers to any information about you that allows you to be identified directly or indirectly. For example, your first and last name or a photo may identify you directly. Your email address can identify you indirectly.

What is Processing?

"Processing" refers to any operation or set of operations performed on personal data, whether or not by automated means, such as collection, recording, organization, storage, adaptation, alteration, retrieval, consultation, use, disclosure by transmission, dissemination, alignment, combination, blocking, erasure, or destruction.

Respecting your privacy and your personal data is a priority for us. We commit to processing your data in strict compliance with the Austrian Data Protection Act, as amended, and the General Data Protection Regulation (EU) of 27 April 2016 (hereinafter "GDPR").

In all cases, we adhere to the following key principles:

• You remain in control of your personal data.
• Your data is treated transparently, confidentially, and securely.

Who is Responsible for Protecting Your Data?

The company responsible for processing your data is SNEAKIT GmbH, registered with the company register number FN 578988d and located at Perfektastraße 61/2/1, 1230 Vienna, Austria.

More Information and Contact Details:

The data controller determines the means and purposes of the processing. If two or more controllers jointly determine the purposes and means of processing, they are joint controllers. The subcontractor processes personal data on behalf of the controller, acting under their authority and instructions.

SNEAKIT is represented by Mr. Felix Lehner, as Chairman.

If you have any questions about the management and use of your personal data, you can contact us:

• By email: contact@sneakit.com
• By post: SNEAKIT - Legal Department - Perfektastraße 61/2/1, 1230 Vienna, Austria

How Do We Collect Your Data?

All personal data concerning you is collected directly from you when you place an order on the site or during interactions with our services. Additionally, data related to your navigation on the site may be used to better understand your needs and interests and to tailor our commercial and advertising offers accordingly.

Why and On What Basis Does SNEAKIT Process Your Data?

The legal basis for our processing operations can include the pursuit of legitimate interests, contractual obligations, consent, and legal obligations. You, as the data subject, may request further information on the balancing of interests.

Your personal data is collected by SNEAKIT to:

• Manage and track your contracts, orders, deliveries, and invoices: Necessary for the execution of your order for products.
• Respond to your requests for information about our products or delivery conditions: Based on your consent.
• Send you our newsletter and commercial offers: Based on your consent.
• Manage and respond to your requests to exercise your "Data Protection" rights: To comply with legal obligations.
• Ensure the proper functioning and continuous improvement of our site and its features: Based on our legitimate interest in guaranteeing optimal operation and quality of the site.

In all cases, we use all available means to ensure the security and confidentiality of your personal data, in compliance with applicable laws and regulations.

What Data is Processed?

The compulsory or optional nature of the personal data requested and the possible consequences of a failure to reply are specified at the time of collection. You can view details of the personal data we may hold about you.

Data processed includes:

• For managing and tracking contracts, orders, deliveries, and invoices: Name, email address, telephone number, postal addresses, payment information.
• For responding to information requests: Name, email address.
• For sending newsletters and offers: Name, email address.
• For managing requests to exercise data protection rights: Name, email address.
• For site functionality and improvement: Navigation data via cookies.
• For competitions: Name, date of birth, email address, telephone number, postal address.

Who Will Receive Your Data?

Within the limits of their respective responsibilities and for the purposes mentioned above, the main persons who may have access to your data include:

• Authorized personnel of various SNEAKIT departments (administration, accounting, marketing, sales, logistics, IT).
• Companies managing the site.
• Companies responsible for transporting products.
• Authorized personnel of our subcontractors (e.g., banking partners).
• Relevant courts, mediators, accountants, auditors, lawyers, bailiffs, debt collection agencies, police, or rescue services as necessary.

Your data will not be passed on, exchanged, sold, or rented to anyone other than those mentioned above.

Service providers processing your data include:

• Facebook Pixel
• Google Ads Pixel
• Snapchat
• TikTok
• Pinterest
• Eulerian
• Google Analytics
• Bing
• Webgains
• Google Remarketing
• Trengo
• Pingdom
• Nosto

How Long Do We Keep Your Data?

We keep your data only for as long as necessary for the purposes described, summarized as follows:

• Contracts, orders, deliveries, invoices: Duration of the relationship + 3 years.
• Accounting records: 10 years.
• Information requests: 3 years from the end of the business relationship or last contact.
• Newsletters and commercial offers: 3 years from the end of the business relationship or last contact.
• Exercise of data protection rights: 1 year (right of access/rectification), 3 years (right to object).
• Site functionality and improvement: 13 months for identified traffic data, 25 months for cookies and trackers.

What Are Your Rights?

In accordance with the Data Protection Act and the GDPR, you have the following rights:

• Right of access (Article 15 GDPR): To know if your data is being processed and access it.
• Right to rectification (Article 16 GDPR): To correct inaccurate or incomplete data.
• Right to erasure (Article 17 GDPR): To have your data deleted under certain conditions.
• Right to restrict processing (Article 18 GDPR): To limit the processing of your data under certain conditions.
• Right to data portability (Article 20 GDPR): To receive your data in a structured, commonly used format.
• Right to object (Article 21 GDPR): To object to the processing of your data under certain conditions.
• Right to withdraw consent: At any time, for processing based on consent.
• Right to decide the fate of your data after your death: Instructions on whether your data is shared or deleted.

These rights can be exercised by contacting us at contact@sneakit.com or by mail to: SNEAKIT - Legal Department - Perfektastraße 61/2/1, 1230 Vienna, Austria.

Additionally, you may lodge a complaint with supervisory authorities.

What About Connection Data and Cookies?

We use connection data (e.g., date, time, IP address, page visited) and cookies to identify you, remember your visits, and measure site audience statistics. You can consent to, refuse, or choose the type of cookies that are placed on your devices.

Is Your Data Transferred Outside the European Union?

We primarily process your data within the European Union. If your data is transferred outside the EU, appropriate safeguards are implemented in accordance with regulations. These safeguards are available on request from contact@sneakit.com or by mail to: SNEAKIT - Legal Department - Perfektastraße 61/2/1, 1230 Vienna, Austria.

What Security Measures Are in Place to Protect Your Data?

SNEAKIT and its subcontractors undertake to implement all technical and organizational measures to ensure the security of personal data processing and confidentiality, in accordance with the Austrian Data Protection Act and the GDPR. We take necessary precautions to prevent unauthorized access, alteration, or destruction of your data.