Privacy policy

Thank you for visiting our website. Compliance with data protection regulations is of particular importance to us. The aim of this privacy policy is to inform you as a user of the website about the nature, scope and purpose of the processing of personal data and the rights that exist for you, insofar as you are considered a data subject within the meaning of Article 4 No. 1 of the General Data Protection Regulation.

1. RESPONSIBLE
This website and the range of services are operated by:

Sport Import GmbH
Industriestraße 39
26188 Edewecht
Germany
Tel.: +49 4405 – 9280 – 0
E-mail: datenschutz@sportimport.de

2. DATA PRIVACY OFFICER
We have appointed a data protection officer.

Herr Thorsten Brendel
ViCoTec IT-Sicherheit & Datenschutz GmbH & Co. KG
Im Technologiepark 12
26129 Oldenburg

Fon: +49 441 – 24 92 65 20

E-mail: datenschutz@sportimport.de

3. GENERAL
We have designed the development of the website to collect as little data from you as possible. In doing so, we always ensure that your personal data is only processed in accordance with a legal basis or consent granted by you. We comply with the regulations of the General Data Protection Regulation (DSGVO), which has been in force since 25.5.2018, and the respective applicable national regulations, such as the Federal Data Protection Act, the Telecommunications Telemedia Data Protection Act or other more specific laws on data protection.

4. PURPOSE AND LEGAL BASIS OF THE PROCESSING OF PERSONAL DATA

We always process your personal data for a specific purpose.

In summary, we process your personal data for the following purposes:

- To be able to process your request with you in case of contact inquiries (e.g. e-mail address, first name, last name);
- For the technical realization of our website and to provide you with our information on this website (e.g. IP address, cookies, browser information);
- To send a newsletter with information about our service offerings and news about our services (e.g. name, e-mail address);
- To be able to show you suitable dealers in your vicinity (e.g. zip code, city) as part of the dealer search;
- To receive and process an application from you for one of our job openings.

The specific purposes are described for the processing operations presented here (e.g. contact form, web analysis, ordering process, etc.).

With regard to the legal basis for the processing of your personal data applies:

We process personal data that is required for the justification, implementation or processing of our service offer (contract processing) on the legal basis of Art. 6 (1) lit. b DSGVO. Insofar as we obtain consent from you for the processing of your personal data, the consent forms the legal basis for the data processing in accordance with Art. 6 (1) lit. a DSGVO. Data processing is also permissible if we process your data to protect our legitimate interests and your interests or fundamental rights and freedoms with regard to the processing of personal data are not overridden (Art. 6 para. 1 lit. f DSGVO). Insofar as we use external service providers within the scope of commissioned data processing, the processing is carried out on the legal basis of Art. 28 DSGVO.

5. COLLECTION OF PERSONAL DATA WHEN VISITING OUR WEBSITE

In the case of mere informational use of the website, i.e. if you do not register or otherwise transmit information to us, we only collect the personal data that your browser transmits to our server. If you wish to view our website, we collect the following data, which is technically necessary for us to display our website to you and to ensure stability and security (legal basis is Art. 6 para. 1 p. 1 lit. f DS-GVO):

-IP address
-Date and time of the request
-Time zone difference from Greenwich Mean Time (GMT)
-Content of the request (concrete page)
-Access status/HTTP-Statuscode
-Data volume transferred in each case
-Website from which the request comes
-Browser
-Operating system and its interface
-Language and version of the browser software.

In addition to the aforementioned data, cookies are stored on your computer when you use our website. You can find more information on this under the item "Cookies" in this data protection declaration and in the consent management tool used.

6. INTEGRATION OF SERVICES FROM OTHER PROVIDERS

Our website uses content, services and performances of other providers. These are, for example, services for the statistical evaluation of the use and visit of our website. In order for this data to be called up and displayed in the user's browser, it is necessary to transmit the user's IP address to the third-party providers used.

Even though we strive to use only third-party providers that only require the IP address to deliver content or even work with anonymized IP addresses, we have no influence on whether the IP address may be stored. Information on the third-party providers used can be found below in this privacy policy.

Google Maps

Nature and scope of processing

We use the map service Google Maps to create directions. Google Maps is a service of Google Ireland Limited, which displays a map on our website.

When you access this content on our website, you establish a connection to servers of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, whereby your IP address and, if applicable, browser data such as your user agent are transmitted. This data is processed exclusively for the above-mentioned purposes and to maintain the security and functionality of Google Maps.

Purpose and legal basis

The use of Google Maps is based on your consent pursuant to Art. 6 para. 1 lit. a. DSGVO and § 25 para. 1 TTDSG.

Storage duration

The concrete storage period of the processed data cannot be influenced by us, but is determined by Google Ireland Limited. Further information can be found in the privacy policy for Google Maps: https://policies.google.com/privacy.

Matomo

Nature and scope of processing

We use the open source software tool Matomo (formerly PIWIK) on our website. The software sets a cookie in your browser (for cookies, see already above). If individual pages of our website are called up, the following data is stored:

- Two bytes of the IP address of the user's calling system (anonymized IP address).
- The accessed web page
- The website from which the user has reached the accessed website (referrer)
- The subpages that are called from the called web page
- The time spent on the website
- The frequency of access to the website

The software runs exclusively on the servers of our website. Your personal data is only stored there. The data is not passed on to third parties.

Purpose and legal basis

We process your data with the help of the analysis software Matomo for the purpose of evaluating the use of individual components and content of our website on the basis of your consent pursuant to Art. 6 para. 1 lit. a DSGVO and § 25 para. 1 TTDSG. You give your consent by setting the use of cookies (cookie banner / Consent Manager), with which you can also declare your revocation at any time with effect for the future pursuant to Art. 7 para. 3 DSGVO. There is no legal or contractual obligation to provide your data. If you do not give us your consent, a visit to our website is possible without restriction, but not all functions may be fully available.

Storage duration

The specific storage period of the cookies set is 13 months.

7. COOKIES

Cookies are small text files that are stored on your data carrier and save certain settings and data for exchange with our system via your browser. A cookie usually contains the name of the domain from which the cookie data was sent as well as information about the age of the cookie and an alphanumeric identifier.

Cookies enable our systems to recognize the user's device and make any preferences immediately available. As soon as a user accesses the platform, a cookie is transferred to the hard drive of the respective user's computer. Cookies help us to improve our website and provide you with a better and more customized service. They allow us to recognize your computer, or your (mobile) device when you return to our website and thereby:

- Store information about your preferred activities on the website and thus tailor our website to your individual interests.
- To accelerate the speed of processing your requests.

We cooperate with third-party services that help us to make the Internet offer and the website more interesting for you. Therefore, cookies from these partner companies (third-party providers) are also stored on your hard drive when you visit the website. These are cookies that are automatically deleted after the specified time.

For more information on the individual third-party providers, please refer to the Cookie Consent Tool and the privacy notices stored therein.

If you do not wish to use browser cookies, you can set your browser so that cookies are not accepted. Please note that in this case you may only be able to use our website to a limited extent or not at all. If you only want to accept our own cookies, but not the cookies of our service providers and partners, you can select the setting in your browser "Block third-party cookies". We assume no responsibility for the use of third-party cookies.


8. CONTACT

You can contact us by e-mail or via our contact form. In this case, we store the personal data you provide in order to process your request and to contact you to handle your request. If we request information via our contact form, we have marked the mandatory fields required for contacting us accordingly (asterisk). The voluntary information is used to specify your request and to improve the processing of your request. The requested data is transmitted to us by you on a purely voluntary basis.

Depending on the type of inquiry, the legal basis for this processing is Article 6 (1) (b) of the German Data Protection Act (DSGVO) for inquiries that you make yourself as part of a pre-contracted measure or Art. 6 para. 1 sentence 1 lit. f DSGVO if your request is of a different nature. The legitimate interest follows from the purposes mentioned under point 4 a.). If personal data is requested that we do not need for the fulfillment of a contract or for the protection of legitimate interests, the transfer to us will be based on your consent pursuant to Art. 6 para. 1 lit. a DSGVO.


9. DEALER SEARCH

To provide our dealer search, we collect and process the zip code you provide to improve our service offering and convenient provision of suitable dealers in the requested region. We display content from Google Maps for the display of an interactive map for the dealer search and to support the selection of a dealer within our site. Google Maps is a mapping service provided by Google Ireland Limited, Google Building Gordon House, 4 Barrow St., Dublin, D04 E5W5, Ireland, parent company: Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA.

By visiting our website, Google receives the information that you have accessed the corresponding sub-page of our website. In addition, the IP address and location information are transmitted. The legal basis for the processing is Art. 6 para. 1 lit. a) DSGVO.

10. APPLICATION PROCESS

On our website, we publish job offers to which you can apply via an application form. If you decide to apply for a vacancy, we will process the personal data you provide there and send to us solely for the purpose of carrying out the application process.

The legal basis for processing your personal data as part of the application process is Section 26 (1) in conjunction with (2) BDSG.

In the event of a rejection, we will delete your data as soon as a retention period of 6 months required by labor law has expired. The period begins with the dispatch of the rejection. If you have expressly consented to the further use of your data for subsequent contact regarding positions that may be of interest to you, we will continue to store your data in accordance with your consent.

If an employment relationship is established following the application process, the data will initially continue to be stored to the extent necessary and permissible and then transferred to the personnel file.

Your personal data may be processed on our behalf on the basis of a contract processing agreement pursuant to Art. 28 DSGVO by Personio GmbH & Co. KG to be processed. In doing so, we ensure that the processing of personal data is carried out in accordance with the General Data Protection Regulation.

Otherwise, data will only be transferred to recipients outside the company if this is permitted or required by law, if the transfer is necessary to fulfill legal obligations, or if you have consented to it. A transfer to a third country is not intended.

The provision of personal data in the context of application processes is neither legally nor contractually required. You are therefore not obliged to provide the personal data. However, the provision of personal data is necessary for the decision on an application or the conclusion of a contract for employment with us. However, in the context of your application, you should only provide personal data that is required for the acceptance and execution of the application. If you do not provide us with any personal data in an application, we will not be able to make a decision on the establishment of an employment relationship.

Please note that applications that you send to us by e-mail are transmitted unencrypted. In this respect, there is a risk that unauthorized persons can intercept and use this data.

11. PRESENCE IN SOCIAL MEDIA

In order to present our company in the best possible way and to be able to communicate with you as a user, customer or interested party and to inform you about the services we offer, we make use of our presence in social networks.

You can find us on the following platforms or social networks:

- Facebook
- Instagram
- YouTube
- Twitter
- LinkedIn

When using social networks, data is processed outside the European Union (EU) and the European Economic Area (EEA). An equivalent level of data protection to that existing in the EU cannot be guaranteed in all countries outside the EU. In this context, it may lead to risks for you as a user if the transferred data is processed in so-called third countries with a non-adequate level of data protection. This makes it more difficult to enforce known user rights. In addition, your data may not be processed in your interest by the provider in the third country. In the USA, there is no level of data protection comparable to the requirements of the GDPR. It is possible that government agencies access personal data without us or you knowing about it. Enforcement of your rights is probably not possible in the USA.

The processing purposes pursued by the social networks usually differ from ours. Thus, it usually happens that the data collected from you in social networks are processed for purposes of market research, advertising and creation of user profiles for personalized advertising (e.g. Facebook, Google, Instagram, etc.).

To realize this, cookies are used, which record user behavior and enable profiling of the user. In the case of Facebook, a user profile is also created for persons who do not have a registered account on Facebook. A specific list of the purposes for which user data is processed can be found in the data protection notices of the respective providers. By making the appropriate settings in your user account, you can restrict the profiling, at least to a certain extent. For the exact procedure, please read the corresponding data protection information of the respective provider.

Facebook Fanpage

When you visit our Facebook page, Facebook collects, among other things, your IP address and other information that is present on your PC in the form of cookies. This information is used to provide us, as operators of the Facebook pages, with statistical information about the use of the Facebook page. Facebook provides more detailed information on this at the following link: http://de-de.facebook.com/help/pages/insights .

By means of the transmitted statistical information, it is not possible for us to draw conclusions about individual users. We only use this information to respond to the interests of our users and to continuously improve our online presence and ensure its quality.

We collect your data via our fan page only to realize a possible provision for communication and interaction with us. This collection usually includes your name, message content, comment content and the profile information you provide "publicly".

The processing of your personal data for our above-mentioned purposes is based on our legitimate business and communicative interest in offering an information and communication channel pursuant to Art. 6 (1) lit. f DSGVO. If you as a user have given your consent to the data processing to the respective provider of the social network, the legal basis of the processing extends to Art. 6 para. 1 lit. a, Art. 7 DSGVO.

Due to the fact that the actual data processing is carried out by the provider of the social network, our access to your data is limited. Only the provider of the social network is authorized to fully access your data. Due to this, only the provider can directly take and implement appropriate measures to fulfill your user rights (information request, deletion request, objection, etc.). The assertion of corresponding rights is therefore most effective directly against the respective provider.

If you still need help with this matter, please feel free to contact us.

Data subject rights

With the Facebook "Page Controller Addendum", the rights and obligations to be complied with together with Facebook are shown. These can be found at the following link: https://www.facebook.com/legal/terms/page_controller_addendum

In the event of a request for information, we will forward it to Facebook and ask you to fill out the corresponding contact form at https://www.facebook.com/login.php?next=https%3A%2F%2Fwww.facebook.com%2Fhelp%2Fcontact%2F308592359910928.

Below you will find a detailed description of the respective data processing by the providers and their objection options (so-called opt-out) via the corresponding links to the providers' websites:

- Facebook (Meta Platform Ireland, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Irland) - Datenschutzerklärung: https://www.facebook.com/about/privacy/, Opt-Out: https://www.facebook.com/settings?tab=ads, https://www.facebook.com/legal/terms/page_controller_addendum
- Instagram (Meta Platform Ireland, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Irland) - Datenschutzerklärung: http://instagram.com/about/legal/privacy/, Opt-Out: http://www.youronlinechoices.com
- Ggoogle/ YouTube (Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) - Privacy policy: https://policies.google.com/privacy, Opt-Out: https://adssettings.google.com/authenticated
- Twitter (Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA) - Privacy Policy: https://twitter.com/de/privacy, Opt-Out: https://twitter.com/personalization
- LinkedIn (LinkedIn Ireland Unlimited Company Wilton Place, Dublin 2, Irland) - Datenschutzerklärung: https://www.linkedin.com/legal/privacy-policy, Opt-Out: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out

12. NEWSLETTER

With your consent, you can subscribe to our newsletter, with which we inform you about our current interesting offers. The advertised goods and services are named in the consent form.

For the registration to our newsletter we use the so-called double-opt-in procedure. This means that after your registration, we will send you an e-mail to the specified e-mail address in which we ask you to confirm that you wish to receive the newsletter. If you do not confirm your registration within [24 hours], your information will be blocked and automatically deleted after one month. In addition, we store your respective IP addresses used and times of registration and confirmation. The purpose of this procedure is to be able to prove your registration and, if necessary, to clarify a possible misuse of your personal data.

The only mandatory data for sending the newsletter is your e-mail address. The provision of further, separately marked data is voluntary and will be used to address you personally. After your confirmation, we store your e-mail address for the purpose of sending the newsletter. The legal basis is Art. 6 para. 1 p. 1 lit. a DS-GVO.

Your personal data may be processed on our behalf on the basis of order processing contracts pursuant to Art. 28 DSGVO. In these cases, we ensure that the processing of personal data is carried out in accordance with the General Data Protection Regulation.

You can revoke your consent to the sending of the newsletter at any time and unsubscribe from the newsletter. You can declare the revocation by clicking on the link provided in every newsletter e-mail, by e-mail to datenschutz@sportimport.de or by sending a message to the contact details given in the imprint.

13. RIGHTS OF THE PERSON CONCERNED

You have the right:

-in accordance with Art. 15 DSGVO to request information about your personal data processed by us. In particular, you can request information about the processing purposes, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right of complaint, the origin of your data if it has not been collected by us, as well as the existence of automated decision-making including profiling and, if applicable, meaningful information about its details;

-in accordance with Art. 16 DSGVO to immediately demand the correction of incorrect or completion of your personal data stored by us;

-pursuant to Art. 17 DSGVO to request the erasure of your personal data stored by us, unless the processing is necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defense of legal claims;

- to request the restriction of the processing of your personal data in accordance with Art. 18 DSGVO, insofar as the accuracy of the data is disputed by you, the processing is unlawful, but you object to its erasure and we no longer require the data, but you need it for the assertion, exercise or defense of legal claims or you have objected to the processing in accordance with Art. 21 DSGVO;

- pursuant to Art. 20 DSGVO to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request the transfer to another controller (data portability);

- to revoke your consent at any time in accordance with Art. 7 (3) DSGVO. This has the consequence that we may no longer continue the data processing based on this consent for the future and that

- to complain to a supervisory authority in accordance with Art. 77 DSGVO. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or our company headquarters.

Right of objection If your personal data is processed on the basis of legitimate interests pursuant to Art. 6 (1) p. 1 lit. f DSGVO, you have the right to object to the processing of your personal data pursuant to Art. 21 DSGVO, provided that there are grounds for doing so that arise from your particular situation or the objection is directed against direct advertising. In the latter case, you have a general right to object, which will be implemented by us without specifying a particular situation.

If you wish to exercise your right of revocation or objection, simply send an e-mail to datenschutz@sportimport.de.

14. DISCLOSURE OF YOUR PERSONAL DATA

The transfer of your personal data takes place as described below.

Data is also disclosed if we are entitled or obliged to disclose data due to statutory provisions and/or official or court orders. In particular, this may involve the disclosure of information for the purposes of criminal prosecution, the prevention of danger or the enforcement of intellectual property rights.

Insofar as your data is passed on to service providers to the extent necessary, they will only have access to your personal data to the extent necessary to fulfill their tasks. These service providers are obliged to treat your personal data in accordance with the applicable data protection laws, in particular the DSGVO. Insofar as your personal data is processed on our behalf on the basis of order processing contracts pursuant to Art. 28 DSGVO, we ensure that the processing of personal data is carried out in accordance with the General Data Protection Regulation.

We make a point of processing your data within the EU / EEA. However, we may use service providers that process data outside the EU / EEA. In these cases, we ensure that an appropriate level of data protection comparable to the standards within the EU is established at the recipient before transferring your personal data. This can be achieved, for example, via EU standard contracts or Binding Corporate Rules or special agreements to whose regulations the company may be subject.

15. DATA SECURITY

We secure our website by technical and organizational measures against loss, destruction, access, modification or distribution of your data by unauthorized persons.

In particular, your personal data is transmitted encrypted with us. We use the SSL/TLS (Secure Sockets Layer/Transport Layer Security) coding system for this. Our security measures are continuously improved in line with technological developments.

16. STORAGE PERIOD FOR THE PERSONAL DATA

With regard to the storage period, we delete personal data as soon as their storage is no longer necessary for the fulfillment of the original purpose and there are no longer any legal retention periods. The statutory retention periods form the criterion for the final duration of the storage of personal data. After expiry of the period, the corresponding data is routinely deleted. In the case of the existence of retention periods, a restriction of the processing takes place in the form of blocking the data.

17. REFERENCES AND LINKS

When calling up Internet pages referred to within the framework of our website, information such as name, address, e-mail address, browser properties, etc. may be requested again. This privacy policy does not regulate the collection, disclosure or handling of personal data by third parties.

Third party service providers may have different and their own rules for handling the collection, processing and use of personal data. It is therefore advisable to inform yourself on the websites of third parties about their practices regarding the handling of personal data before entering personal data.