PRIVACY POLICY

Thank you for visiting our website. We find it very important to comply with the data protection regulations. The aim of this privacy statement is to provide you with more information as to how and why we will process your personal data when you use our website and to tell you about your rights as a “data subject”, as defined in Art. 4 No. 1 of the General Data Protection Regulation (GDPR).

1.  CONTROLLER

The services provided on this website are operated by:

Sport Import GmbH
Industriestraße 39
26188 Edewecht
Germany

Tel.: 04405 – 9280 – 0
Email: datenschutz@sportimport.de

2. DATA PROTECTION OFFICER

We have appointed a data protection officer.

Herr Thorsten Brendel
ViCoTec IT-Sicherheit & Datenschutz GmbH & Co. KG
Im Technologiepark 12
26129 Oldenburg

Fon: +49 441 – 24 92 65 20

Email: datenschutz@sportimport.de

3. GENERAL INFORMATION

We have designed our website to collect as little data from you as possible. We will ensure that your personal data is only ever processed in accordance with a specific legal basis or with your consent. We comply with the provisions of the General Data Protection Regulation (GDPR), which has been in force since 25 May 2018, and the applicable national regulations such as the Federal Data Protection Act (BDSG), the German Act on Data Protection and Privacy in Telecommunications and Telemedia (TTDSG) and other more specific data protection laws.

4. PURPOSE AND LEGAL BASIS FOR THE PROCESSING OF PERSONAL DATA

We will always process your personal data for a specific purpose.
In summary, we may process your personal data for any of the following purposes:
– To operate technical systems and ensure that we can provide you with information on our website (e.g. IP address, cookies, browser information)

The specific purposes of each form of processing are presented in this privacy statement (e.g. contact form, web analytics, ordering process).
With regard to the legal basis for the processing of your personal data, the following applies:
Any personal data that we need to establish and execute contracts for our range of services will be processed on the basis of point (b) of Art. 6 (1) GDPR. If we obtain your consent to data processing, the legal basis for data processing will be your consent in accordance with point (a) of Art. 6 (1) GDPR. Our data processing will also be permissible if we process your data to pursue our legitimate interests, unless our legitimate interests are overridden by your own interests or fundamental rights and freedoms that require the protection of personal data, as stipulated in point (f) of Art. 6 (1) GDPR. If we commission external service providers to perform data processing, your personal data will be processed on the basis of Art. 28 GDPR.

5. COLLECTION OF PERSONAL DATA DURING VISITS TO OUR WEBSITE

If you use our website purely for informational purposes (i.e. if you do not register or otherwise provide us with information), we will only collect the personal data your browser transmits to our server. If you would like to view our website, we will collect the data listed below, which is technically necessary for us to display our website and ensure stability and security in accordance with point (f) of Art. 6 (1) GDPR:

• IP address;
• Date and time of request;
• Difference between your time zone and Greenwich Mean Time (GMT);
• Content of request (specific page);
• Access status / HTTP status code;
• Volume of data transmitted;
• Website from which the request comes;
• Browser;
• Operating system and its interface; and
• Language and version of browser software.

In addition to the data listed above, cookies will be saved on your computer when you use our website. You can find more information in the “Cookies” section of this privacy statement and in the consent management tool used on our website.

6. INTEGRATION OF THIRD-PARTY SERVICES

Our website features content and services from other providers (e.g. statistical services for the analysis of website usage and visits). In order for this data to be accessed and displayed in your browser, your IP address will have to be sent to the third-party providers.
Although we try to limit our range of third-party content and services to those offered by providers who only need your IP address to deliver content, or those who even work with anonymized IP addresses, we have no control over the storage of your IP address. More information on our third-party providers can be found in this privacy statement.

Matomo

Nature and scope of processing
Our website features a piece of open-source software known as “Matomo” (formerly PIWIK). The software will place a cookie in your browser (see above for more information on cookies). Whenever you access individual pages on our website, the following data will be stored:

• Two bytes of your system’s IP address (anonymous);
• The page accessed on our website;
• The website from which you have been redirected to the page (referrer URL);
• The sub-pages you open from the page accessed on our website;
• The amount of time you spend on the page; and
• The frequency with which you access the page.

The software runs exclusively on our website’s servers. Your personal data will only be stored there. Your data will not be shared with third parties.

Purpose and legal basis
We will use Matomo to process your data for the purpose of analyzing your use of individual features and content on our website; this will be carried out on the basis of your consent in accordance with point (a) of Art. 6 (1) GDPR and Section 25 (1) TTDSG. You can give your consent by configuring your settings to enable cookies (cookie banner / consent manager), and you can always change your settings to withdraw your consent with future effect in accordance with Art. 7 (3) GDPR. You are not legally or contractually obliged to provide your data. If you do not give us your consent, you will still be able to visit our website without restrictions; however, you may find that some features are not fully available.

Retention period
The cookies will be stored on your device for 13 months.

7.  Cookies

Cookies are small text files that will be saved on your disk, storing certain settings and data so that your browser can interact with our system. A cookie usually contains the name of the domain from which the cookie data has been sent, as well as information about the age of the cookie and an alphanumeric identifier.
Cookies will enable our systems to recognize your device and remember your preferred settings. As soon as you access our platform, a cookie will be transferred to your computer’s hard drive. These cookies will help us improve our website and offer you a better service that is more tailored to your needs. If you return to our website, cookies will enable us to recognize your computer or (mobile) device and:

• Save information about your preferred activities on our website so that we can tailor it to your personal interests; and
• Accelerate our response to your enquiries.

As we use third-party services that help make our website more interesting for you, cookies from our partners (third-party providers) will also be saved on your hard drive when you visit our website. These cookies will be automatically deleted after a set period.

You can find more detailed information on each third-party provider in the data protection notices contained in our cookie consent tool.

If you do not want browser cookies to be used, you can set your browser to disable cookies. If you do this, however, please note that you might not be able to use some or all features of our website. If you only want to accept our own cookies and would like to disable cookies from our partners and service providers, you can select “Block third-party cookies” in your browser settings. We are not responsible for the use of third-party cookies.

8. SOCIAL MEDIA PRESENCE

We use social networks to present our company in the best possible way, to communicate with our existing and prospective users and customers, and to provide information about our services.

As part of our use of social networks, data is processed outside of the European Union (EU) and the European Economic Area (EEA). A level of data protection equivalent to EU standards cannot be guaranteed in all countries outside the EU. As a result, there may be risks for you as a user if your data is processed in third countries with an inadequate level of data protection.

This will make it more difficult for you to enforce your rights as a user. In addition, your data might not be processed in your interest by providers in third countries. In the USA, the level of data protection does not meet the requirements of the GDPR. It is possible for government agencies to access personal data without us or you being aware of it. You will probably be unable to enforce your rights in the USA.

In addition to the respective provider of a social network, we also collect and process personal user data on so-called “fan pages”. With this notice, we inform you about which data we collect from you on our social media sites, how we use it and how you can object to the use of the data. For the respective data processing purposes and data categories, please refer to the respective offer listed in more detail below.

The social media activities operated by us and detailed below are carried out on the basis of a balancing of interests pursuant to Art. 6 (1) f) GDPR.

In order to do this, social networks use cookies to record user behavior and generate a profile for each user. Facebook even creates a user profile for people who do not have a registered Facebook account.
The specific purposes of processing are listed in each provider’s privacy policy. You can stop a user profile from being created – at least to a limited extent – by changing your settings in your user account. For more information, please refer to the privacy policy for the relevant provider.

The relevant platforms are:

Sport Import GmbH operates profiles on the listed platforms in order to draw attention to products and service offers and to interact with customers, interested parties and other users of the platform.

In this context, the platform operators also use certain data that they have collected from users of the platform (e.g., whether a photo on a profile was marked with “Like” or commented on) to create aggregated usage statistics and make them available to the respective operators of the profile (so-called “Insights” or “Analytics”). We as profile operators also receive such usage statistics. The information that we receive as profile operators does not allow any conclusions to be drawn about individual users. The profile operator itself has no access to personal data that the platform operators process for the creation of usage statistics. The respective platform operator alone determines which data is processed for these purposes, and in what manner. Sport Import GmbH, as profile operator, can neither legally nor actually influence the processing by the platform operators.

For processing in connection with the creation of usage statistics, Sport Import GmbH and the respective platform operator are considered joint controllers within the meaning of Art. 26 GDPR.

Where possible, joint responsibility agreements exist with the respective platform operators.

Beyond that, data processing by Sport Import GmbH as profile operator only takes place to a very limited extent:

o Processing of usernames and comments that are deleted due to violation of netiquette. These are kept on file for possible proof in the event of legal disputes within the statute of limitations.

o Processing of usernames and individual messages when you contact us via messenger services.

o Processing of user names when participating in competitions. The relevant conditions of participation apply.

o Processing of usernames and postings in the context of inquiries and, if applicable, obtaining consent for re-posting of images.

For these purposes, we generally only process your name, message content, comment content and the profile information you provide “publicly”.

9. RIGHTS OF DATA SUBJECTS

You have the following rights:

• The right to request access to the personal data we are processing on you in accordance with Art. 15 GDPR. You may particularly request information on: the purposes of the processing; the categories of personal data concerned; the categories of recipient to whom your personal data has or will be disclosed; the envisaged retention period; whether you have the right to request the rectification or erasure of your personal data or the restriction of processing or the right to object to such processing; whether you have the right to lodge a complaint; the source of any data not provided by yourself; and whether we carry out automated decision-making, including profiling, and meaningful information about any such processes;

• The right to request the immediate rectification of any incorrect data or the immediate supplementation of any incomplete data we hold on you in accordance with Art. 16 GDPR;

• The right to request the erasure of any personal data we hold on you in accordance with Art. 17 GDPR, unless our processing is necessary to exercise freedom of expression and information, to comply with a legal obligation, for reasons of public interest, or for the establishment, exercise or defense of legal claims;

• The right to request the restriction of the processing of your personal data in accordance with Art. 18 GDPR if you contest its accuracy, if the processing is unlawful but you oppose the deletion of your data, if we no longer need your data but you require it for the establishment, exercise or defense of legal claims, or if you have objected to processing in accordance with Art. 21 GDPR;

• The right to receive any personal data you have provided to us in a structured, commonly used and machine-readable format, or to have this data transferred to another controller in accordance with Art. 20 GDPR (data portability);

• The right to withdraw any consent you have previously given in accordance with Art. 7 (3) GDPR. As a result, we will not be able to continue any data processing performed on the basis of your consent; and

• The right to lodge a complaint with a supervisory authority in accordance with Art. 77 GDPR. You can usually do this by contacting the supervisory authority in your habitual place of residence or at our place of business.

• Right to object

If your personal data is being processed on the basis of our legitimate interests pursuant to point (f) of Art. 6 (1) GDPR, you are entitled to object to the processing of your personal data, provided your reasons for doing so relate to your particular situation or your objection concerns direct marketing (Art. 21 GDPR). If the latter is the case, you have a general right to object, and we will honor your right without you having to name a specific situation.

If you would like to exercise your right to object or withdraw your consent, you just have to send an email to datenschutz@sportimport.de.

10. DISCLOSURE OF YOUR PERSONAL DATA

Your personal data will be shared with third parties as described below.

Your personal data will also be shared with third parties if we are authorized or obliged to disclose your data in accordance with legal provisions and/or an administrative order or court order. In particular, this may involve the provision of information for the purposes of prosecuting a crime, averting danger or enforcing intellectual property rights.

If your data is shared with service providers to the necessary extent, they will only have access to your personal data to the extent required for them to perform their tasks. The service providers will be obliged to handle your personal data in accordance with the applicable data protection laws, particularly the GDPR. If your personal data is ever processed on our behalf on the basis of data processing agreements concluded in accordance with Art. 28 GDPR, we will ensure that your personal data is processed in accordance with the GDPR.

We will try to ensure that your data is processed within the EU / EEA. However, we may work with service providers who process data outside of the EU / EEA. In such cases, we will ensure that the recipient has established an adequate level of data protection that is comparable to EU standards before disclosing your personal data. We may achieve this, for example, by establishing EU standard contractual clauses or binding corporate rules with the company or by concluding special agreements with the company.

11. DATA SECURITY

We will take technical and organizational measures to secure our website and to protect your personal data against loss, destruction and unauthorized access, modification and disclosure. In particular, your personal data will be encrypted within our company using the SSL / TLS coding system (Secure Sockets Layer / Transport Layer Security). Our safety measures are constantly being improved in line with technical developments.

12. RETENTION OF PERSONAL DATA

We will delete your personal data as soon as it no longer has to be stored for the purpose for which it was originally collected and as soon as the statutory retention periods have expired. The statutory retention periods are the definitive criterion when it comes to determining how long your personal data will be stored. Your data will be routinely deleted at the end of such periods. If the retention periods are still in place, we will restrict our processing by blocking your data.

13. LINKS AND REFERENCES

If you access any of the websites that are linked on our website, you may be asked once again to provide information such as your name, address, email address and browser properties. This privacy statement does not cover the way in which your personal data may be collected, shared or used by third parties.

Third-party service providers may have their own policies regarding the collection, processing and use of personal data. It is therefore advisable to find out about their personal data practices before entering your details on their websites.