Thank you for visiting our website. We find it very important to comply with the data protection regulations. The aim of this privacy statement is to provide you with more information as to how and why we will process your personal data when you use our website and to tell you about your rights as a “data subject”, as defined in Art. 4 No. 1 of the General Data Protection Regulation (GDPR).

1. Controller

The services provided on this website are operated by:

Sport Import GmbH
Industriestraße 39
26188 Edewecht
Germany

Tel.: +49 4405 – 9280 – 0
Email: datenschutz@sportimport.de

2. Data protection officer

We have appointed a data protection officer.

www.mein-datenschutzbeauftragter.de

Mr. Philipp Herold
Hafenstraße 1a
D-23568 Lübeck

Email: datenschutz@sportimport.de

3. General information

We have designed our website to collect as little data from you as possible. We will ensure that your personal data is only ever processed in accordance with a specific legal basis or with your consent. We comply with the provisions of the General Data Protection Regulation (GDPR), which has been in force since 25 May 2018, and the applicable national regulations such as the Federal Data Protection Act (BDSG), the German Act on Data Protection and Privacy in Telecommunications and Telemedia (TTDSG) and other more specific data protection laws.

4. Purpose and legal basis for the processing of personal data

We will always process your personal data for a specific purpose.

In summary, we may process your personal data for any of the following purposes:

  1. To process any enquiries you may send us (e.g. email address, first name, last name);
  2. To operate technical systems and ensure that we can provide you with information on our website (e.g. IP address, cookies, browser information);
  3. To send you newsletters with our latest news and information on our range of services (e.g. name, email address);
  4. To show you suitable dealers in your area via the “store locator” feature (e.g. postcode, town); and
  5. To accept and process any job applications you may send us.

The specific purposes of each form of processing are presented in this privacy statement (e.g. contact form, web analytics, ordering process).

With regard to the legal basis for the processing of your personal data, the following applies:

Any personal data that we need to establish and execute contracts for our range of services will be processed on the basis of point (b) of Art. 6 (1) GDPR. If we obtain your consent to data processing, the legal basis for data processing will be your consent in accordance with point (a) of Art. 6 (1) GDPR. Our data processing will also be permissible if we process your data to pursue our legitimate interests, unless our legitimate interests are overridden by your own interests or fundamental rights and freedoms that require the protection of personal data, as stipulated in point (f) of Art. 6 (1) GDPR. If we commission external service providers to perform data processing, your personal data will be processed on the basis of Art. 28 GDPR.

5. Collection of personal data during visits to our website

If you use our website purely for informational purposes (i.e. if you do not register or otherwise provide us with information), we will only collect the personal data your browser transmits to our server. If you would like to view our website, we will collect the data listed below, which is technically necessary for us to display our website and ensure stability and security in accordance with point (f) of Art. 6 (1) GDPR:

  • IP address;
  • Date and time of request;
  • Difference between your time zone and Greenwich Mean Time (GMT);
  • Content of request (specific page);
  • Access status / HTTP status code;
  • Volume of data transmitted;
  • Website from which the request comes;
  • Browser;
  • Operating system and its interface; and
  • Language and version of browser software.

In addition to the data listed above, cookies will be saved on your computer when you use our website. You can find more information in the “Cookies” section of this privacy statement and in the consent management tool used on our website.

6. Integration of third-party services

Our website features content and services from other providers (e.g. statistical services for the analysis of website usage and visits). In order for this data to be accessed and displayed in your browser, your IP address will have to be sent to the third-party providers.

Although we try to limit our range of third-party content and services to those offered by providers who only need your IP address to deliver content, or those who even work with anonymized IP addresses, we have no control over the storage of your IP address. More information on our third-party providers can be found in this privacy statement.

Google Maps

Nature and scope of processing

We use Google Maps to generate directions. Google Maps is a service provided by Google Ireland Limited that presents a map on our website.

If you access this content on our website, you will establish a connection to the servers operated by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4 Ireland), which will facilitate the transmission of your IP address and, if applicable, browser data such as your user agent. This data will be used exclusively for the purposes outlined above and to maintain the security and functionality of Google Maps.

Purpose and legal basis

We will use Google Maps on the basis of your consent in accordance with point (a) of Art. 6 (1) GDPR and Section 25 (1) TTDSG.

Retention period

We have no control over the amount of time for which the processed data will be stored; this will be determined by Google Ireland Limited. You can find more information in Google’s privacy policy: https://policies.google.com/privacy.

Matomo

Nature and scope of processing

Our website features a piece of open-source software known as “Matomo” (formerly PIWIK). The software will place a cookie in your browser (see above for more information on cookies). Whenever you access individual pages on our website, the following data will be stored:

  • Two bytes of your system’s IP address (anonymous);
  • The page accessed on our website;
  • The website from which you have been redirected to the page (referrer URL);
  • The sub-pages you open from the page accessed on our website;
  • The amount of time you spend on the page; and
  • The frequency with which you access the page.

The software runs exclusively on our website’s servers. Your personal data will only be stored there. Your data will not be shared with third parties.

Purpose and legal basis

We will use Matomo to process your data for the purpose of analyzing your use of individual features and content on our website; this will be carried out on the basis of your consent in accordance with point (a) of Art. 6 (1) GDPR and Section 25 (1) TTDSG. You can give your consent by configuring your settings to enable cookies (cookie banner / consent manager), and you can always change your settings to withdraw your consent with future effect in accordance with Art. 7 (3) GDPR. You are not legally or contractually obliged to provide your data. If you do not give us your consent, you will still be able to visit our website without restrictions; however, you may find that some features are not fully available.

Retention period

The cookies will be stored on your device for 13 months.

7. Cookies

Cookies are small text files that will be saved on your disk, storing certain settings and data so that your browser can interact with our system. A cookie usually contains the name of the domain from which the cookie data has been sent, as well as information about the age of the cookie and an alphanumeric identifier.

Cookies will enable our systems to recognize your device and remember your preferred settings. As soon as you access our platform, a cookie will be transferred to your computer’s hard drive. These cookies will help us improve our website and offer you a better service that is more tailored to your needs. If you return to our website, cookies will enable us to recognize your computer or (mobile) device and:

  • Save information about your preferred activities on our website so that we can tailor it to your personal interests; and
  • Accelerate our response to your enquiries.

As we use third-party services that help make our website more interesting for you, cookies from our partners (third-party providers) will also be saved on your hard drive when you visit our website. These cookies will be automatically deleted after a set period.

You can find more detailed information on each third-party provider in the data protection notices contained in our cookie consent tool.

If you do not want browser cookies to be used, you can set your browser to disable cookies. If you do this, however, please note that you might not be able to use some or all features of our website. If you only want to accept our own cookies and would like to disable cookies from our partners and service providers, you can select “Block third-party cookies” in your browser settings. We are not responsible for the use of third-party cookies.

8. Contacting us

You can contact us by email or via our contact form. If you do this, we will store the personal data you send us for the purpose of processing your enquiry and contacting you for additional information. We have marked all mandatory information in the contact form with an asterisk (*). Any additional information you provide will give us a better idea of your enquiry and help us to deal with your concern. The requested data will be sent to us on a purely voluntary basis.

Depending on the nature of your enquiry, the legal basis for this processing will either be point (b) of Art. 6 (1) GDPR for enquiries that you make yourself before entering into a contract or point (f) of Art. 6 (1) GDPR for all other enquiries. Our legitimate interest is outlined in section 4 a) above. If we ask you to provide any personal data that we do not need to perform a contract or pursue our legitimate interests, this data will be sent to us on the basis of your consent given in accordance with point (a) of Art. 6 (1) GDPR.

9. Store locator

We will collect and process the postcode you enter in our “store locator” to conveniently present suitable dealers in your local area and improve our range of services. We have embedded interactive content from Google Maps in our website to help you find a suitable dealer. Google Maps is provided by Google Ireland Limited (Gordon House, 4 Barrow St., Dublin, D04 E5W5, Ireland), which is a subsidiary of Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA).

When you visit our website, Google will be informed that you have accessed a particular sub-page. It will also be sent your IP address and location information. The legal basis for this form of processing is point (a) of Art. 6 (1) GDPR.

10. Application process

We post vacancies on our website and you can apply via our application form. If you decide to apply for an advertised position, we will process the personal data you provide in the application form exclusively for the purpose of running the application process.

Your personal data will be processed during the application process on the basis of Section 26 (1) BDSG in conjunction with Section 26 (2) BDSG.

If your application is rejected, we will delete your data at the end of the 6-month retention period required under labor law. This period will begin when we send our rejection letter. If you explicitly allow us to continue using your data so that we can contact you regarding other positions that may be of interest to you, we will continue to store your data with your consent.

If we enter into an employment contract with you at the end of the application process, your data will initially be stored to the extent necessary before being transferred to a personnel file.

Your personal data may be processed by Personio GmbH & Co. KG on our behalf on the basis of a data processing agreement concluded in accordance with Art. 28 GDPR. In such cases, we will ensure that your personal data is processed in accordance with the GDPR.

Otherwise, your personal data will only be passed on to recipients outside of the company if this is permitted or required by law, if this is necessary for us to perform our legal obligations, or if you give your consent. We do not intend to transfer your personal data to any third countries.

As the provision of personal data during the application process is not required by law or contract, you are not obliged to provide your personal data. However, we do require your personal data to decide whether to accept your application and enter into an employment contract with you. When submitting your application, you should only provide the personal data that is necessary for your application to be accepted and for the application process to be conducted. If you do not provide us with any personal data in your application, we will not be able to decide whether to enter into an employment contract with you.

Please note that your applications will not be encrypted if you send them by email, which means that there is a risk of your data being intercepted and used by unauthorized third parties.

 

11. Social media presence

We use social networks to present our company in the best possible way, to communicate with our existing and prospective users and customers, and to provide information about our services.

You can find us on the following platforms and social networks:

  • Facebook
  • Instagram
  • YouTube
  • Twitter
  • LinkedIn

As part of our use of social networks, data is processed outside of the European Union (EU) and the European Economic Area (EEA). A level of data protection equivalent to EU standards cannot be guaranteed in all countries outside the EU. As a result, there may be risks for you as a user if your data is processed in third countries with an inadequate level of data protection.

This will make it more difficult for you to enforce your rights as a user. In addition, your data might not be processed in your interest by providers in third countries. In the USA, the level of data protection does not meet the requirements of the GDPR. It is possible for government agencies to access personal data without us or you being aware of it. You will probably be unable to enforce your rights in the USA.

The processing purposes pursued by social networks usually differ from our own. For example, the data collected from you in social networks will usually be processed for the purposes of conducting market research, creating advertising and generating user profiles for targeted advertising (e.g. Facebook, Google, Instagram).

In order to do this, social networks use cookies to record user behavior and generate a profile for each user. Facebook even creates a user profile for people who do not have a registered Facebook account.
The specific purposes of processing are listed in each provider’s privacy policy. You can stop a user profile from being created – at least to a limited extent – by changing your settings in your user account. For more information, please refer to the privacy policy for the relevant provider.

Facebook fan page

If you visit our Facebook page, Facebook will record your IP address and other information stored on your PC in the form of cookies. This information will be used to provide us, as the operator of the Facebook page, with statistical information on the use of our Facebook page. Facebook provides more information here: http://de-de.facebook.com/help/pages/insights.

This statistical information cannot be traced back to individual users; it is merely used to respond to our users’ interests, to continually improve our online activities and to ensure quality.

We will only collect your data via our fan page if you wish to communicate and interact with us. This will generally include your name, the content of your messages, your comments and the parts of your profile you have made “public”.

We will process your personal data for the purposes outlined above on the basis of our legitimate interest in offering an information and communication channel for business purposes in accordance with point (f) of Art. 6 (1) GDPR. If you consent to your user data being processed by the relevant social media provider, the legal basis for processing will be point (a) of Art. 6 (1) GDPR and Art. 7 GDPR.

As the actual data processing will be carried out by the relevant social media provider, our access to your data will be limited. Only the social media provider in question will be authorized to have full access to your data. For this reason, only the provider will be able to directly take and implement suitable measures to honor your user rights (e.g. right of access, right to erasure, right to object). The most effective way of asserting your rights is therefore to contact the relevant provider directly.

But if you need any help in this matter, please do not hesitate to contact us.

Rights of data subjects

The rights and obligations to be observed in cooperation with Facebook are presented in its “Page Controller Addendum”: https://www.facebook.com/legal/terms/page_controller_addendum.

If you send us a request for information, we will forward it to Facebook and ask you to fill out the relevant contact form here:

https://www.facebook.com/login.php?next=https%3A%2F%2Fwww.facebook.com%2Fhelp%2Fcontact%2F308592359910928.

The following pages contain a detailed description of the data processing activities carried out by each provider and the ways in which you can opt out:

https://www.facebook.com/settings?tab=ads  https://www.facebook.com/legal/terms/page_controller_addendum

http://www.youronlinechoices.com

 

12. Newsletter

If you give your consent, you can subscribe to our newsletter so that we can inform you about our latest offers that may be of interest to you. The advertised products and services are specified in the consent form.

We use the so-called “double opt-in” process for subscriptions to our newsletter. In other words, once you have subscribed, we will send you an email for you to confirm whether you would like to receive the newsletter. If you do not confirm your subscription within [24 hours], your information will be blocked and automatically deleted after one month. We will also save your IP addresses and the time you subscribe and confirm your subscription. The purpose of this process is to prove you have subscribed and to investigate any misuse of your personal data.

If you wish to receive our newsletter, you will only have to provide your email address. If you voluntarily provide additional data, which is marked separately, we will use this information to address you personally. Once you have confirmed your subscription, we will save your email address for the purpose of sending you the newsletter. The legal basis is point (a) of Art. 6 (1) GDPR.

Your personal data may be processed on our behalf on the basis of data processing agreements concluded in accordance with Art. 28 GDPR. In such cases, we will ensure that your personal data is processed in accordance with the GDPR.

You may always withdraw your consent to the newsletter and unsubscribe at any time. You can withdraw your consent by clicking on the link provided in each newsletter, by writing to datenschutz@sportimport.de or by sending a message to the contact indicated in our legal notice.

 

13. Rights of data subjects

You have the following rights:

  • The right to request access to the personal data we are processing on you in accordance with Art. 15 GDPR. You may particularly request information on: the purposes of the processing; the categories of personal data concerned; the categories of recipient to whom your personal data has or will be disclosed; the envisaged retention period; whether you have the right to request the rectification or erasure of your personal data or the restriction of processing or the right to object to such processing; whether you have the right to lodge a complaint; the source of any data not provided by yourself; and whether we carry out automated decision-making, including profiling, and meaningful information about any such processes;
  • The right to request the immediate rectification of any incorrect data or the immediate supplementation of any incomplete data we hold on you in accordance with Art. 16 GDPR;
  • The right to request the erasure of any personal data we hold on you in accordance with Art. 17 GDPR, unless our processing is necessary to exercise freedom of expression and information, to comply with a legal obligation, for reasons of public interest, or for the establishment, exercise or defense of legal claims;
  • The right to request the restriction of the processing of your personal data in accordance with Art. 18 GDPR if you contest its accuracy, if the processing is unlawful but you oppose the deletion of your data, if we no longer need your data but you require it for the establishment, exercise or defense of legal claims, or if you have objected to processing in accordance with Art. 21 GDPR;
  • The right to receive any personal data you have provided to us in a structured, commonly used and machine-readable format, or to have this data transferred to another controller in accordance with Art. 20 GDPR (data portability);
  • The right to withdraw any consent you have previously given in accordance with Art. 7 (3) GDPR. As a result, we will not be able to continue any data processing performed on the basis of your consent; and
  • The right to lodge a complaint with a supervisory authority in accordance with Art. 77 GDPR. You can usually do this by contacting the supervisory authority in your habitual place of residence or at our place of business.
  • Right to object

If your personal data is being processed on the basis of our legitimate interests pursuant to point (f) of Art. 6 (1) GDPR, you are entitled to object to the processing of your personal data, provided your reasons for doing so relate to your particular situation or your objection concerns direct marketing (Art. 21 GDPR). If the latter is the case, you have a general right to object, and we will honor your right without you having to name a specific situation.

If you would like to exercise your right to object or withdraw your consent, you just have to send an email to datenschutz@sportimport.de.

 

14. Disclosure of your personal data

Your personal data will be shared with third parties as described below.

Your personal data will also be shared with third parties if we are authorized or obliged to disclose your data in accordance with legal provisions and/or an administrative order or court order. In particular, this may involve the provision of information for the purposes of prosecuting a crime, averting danger or enforcing intellectual property rights.

If your data is shared with service providers to the necessary extent, they will only have access to your personal data to the extent required for them to perform their tasks. The service providers will be obliged to handle your personal data in accordance with the applicable data protection laws, particularly the GDPR. If your personal data is ever processed on our behalf on the basis of data processing agreements concluded in accordance with Art. 28 GDPR, we will ensure that your personal data is processed in accordance with the GDPR.

We will try to ensure that your data is processed within the EU / EEA. However, we may work with service providers who process data outside of the EU / EEA. In such cases, we will ensure that the recipient has established an adequate level of data protection that is comparable to EU standards before disclosing your personal data. We may achieve this, for example, by establishing EU standard contractual clauses or binding corporate rules with the company or by concluding special agreements with the company.

 

15. Data security

We will take technical and organizational measures to secure our website and to protect your personal data against loss, destruction and unauthorized access, modification and disclosure. In particular, your personal data will be encrypted within our company using the SSL / TLS coding system (Secure Sockets Layer / Transport Layer Security). Our safety measures are constantly being improved in line with technical developments.

 

16. Retention of personal data

We will delete your personal data as soon as it no longer has to be stored for the purpose for which it was originally collected and as soon as the statutory retention periods have expired. The statutory retention periods are the definitive criterion when it comes to determining how long your personal data will be stored. Your data will be routinely deleted at the end of such periods. If the retention periods are still in place, we will restrict our processing by blocking your data.

 

17. Links and references

If you access any of the websites that are linked on our website, you may be asked once again to provide information such as your name, address, email address and browser properties. This privacy statement does not cover the way in which your personal data may be collected, shared or used by third parties.

Third-party service providers may have their own policies regarding the collection, processing and use of personal data. It is therefore advisable to find out about their personal data practices before entering your details on their websites.