Privacy Policy / Datenschutzerklärung

1. Data Controller (Verantwortlicher)

The entity responsible for processing personal data on this website in accordance with the EU General Data Protection Regulation (GDPR / DSGVO) is:

2. Overview of Personal Data Processed

When using Shoe Fit (shoe-fit.com), we process personal data only when necessary to provide our shoe fit recommendation and comparison services.

• User Account Data: Name, email address, profile image (provided when logging in via Google OAuth).
• Session & Technical Data: Session tokens, IP address, and User-Agent header required for authenticating users and maintaining anonymous guest sessions.
• Fit Feedback Data: Ratings submitted for shoe models (length ratings and width ratings), linked to your user ID or anonymous guest ID.

3. Legal Bases for Processing (Art. 6 DSGVO)

We process your personal data on the following legal grounds:

• Art. 6(1)(b) DSGVO (Performance of Contract): Processing account details, logins, and shoe fit preferences to provide personalized fit recommendations.
• Art. 6(1)(f) DSGVO (Legitimate Interests): Processing server logs, session tokens, and IP addresses to maintain application security, prevent fraudulent fit ratings, and ensure smooth service performance.

4. Hosting & Data Processors

We rely on trusted third-party providers to host and operate our application:

5. Cookies & Local Storage

We use strictly necessary session cookies (`better-auth.session_token`) and HTTP cookies required for maintaining login state and user preferences (such as shoe size system preferences). These cookies do not track you across third-party websites and are exempt from cookie consent banners under ePrivacy Directive rules.

6. Your Rights under GDPR (Art. 15–22 DSGVO)

You have the following rights regarding your personal data:

• Right to Access (Art. 15): Request confirmation of whether we process your personal data and obtain a copy.
• Right to Rectification (Art. 16): Request correction of inaccurate personal data.
• Right to Erasure / Account Deletion (Art. 17): Delete your account and all associated fit feedback directly from your account settings page or by contacting us.
• Right to Data Portability (Art. 20): Receive your stored personal data in a structured, standard machine-readable format.
• Right to Lodge a Complaint: Lodge a complaint with a competent data protection supervisory authority.