We are very pleased about your interest in our company. The protection of your personal data is important to us. We collect and utilise your personal data exclusively in accordance with and within the framework of the applicable data protection laws of the Federal Republic of Germany, in particular the General Data Protection Regulation (GDPR), the Federal Data Protection Act (BDSG), and all further applicable provisions of data protection law.
In the following, we will inform you about the type, scope, and purpose of the collection and utilisation of personal data when using our website. You can access this information at any time on our website.
Personal data are all data with which a natural person (the data subject) can be directly or indirectly identified, e.g., name, address, e-mail address, user behaviour.
I. NAME AND CONTACT DETAILS OF THE RESPONSIBLE DATA PROTECTION OFFICER
1. The responsible person in the sense of the data protection laws (Art. 4(7) GDPR) is:
Delta-Sport Handelskontor GmbH
Tel.: +49 40 5 27 310 0
2. You can reach our data protection officer at:
Delta-Sport Handelskontor GmbH
– The Data Protection Officer –
Tel.: +49 40 5 27 310 0
If you have any questions or suggestions regarding data protection, you are welcome to contact our data protection officer directly.
II. GENERAL PRINCIPLES
1. Scope and legal principles for processing
We process personal data only in accordance with the legal regulations. In particular, personal data will only be processed if you have consented to it or if the processing is otherwise permitted by law.
Insofar as we obtain the consent of the data subject for the processing of personal data, Art. 6(1)a of the EU General Data Protection Regulation (GDPR) serves as the legal basis.
When processing personal data necessary for the performance of a contract to which the data subject is a party, Art. 6(1)b GDPR serves as the legal basis. This also applies to processing operations necessary for the performance of preliminary contractual measures.
Where processing of personal data is necessary to comply with a legal obligation to which our company is subject, Art. 6(1)c GDPR shall serve as the legal basis.
In the event that vital interests of the data subject or another natural person necessitate the processing of personal data, Art. 6(1)d GDPR serves as the legal basis.
If the processing is necessary to protect a legitimate interest of our company or of a third party and if the interests, basic rights, and freedoms of the data subject do not outweigh the aforementioned interest, Art. 6(1)f GDPR serves as the legal basis for the processing.
2. Transfer / Recipient of data
Within our company, only those offices will have access to your data that require it to protect our legitimate interests, or to fulfil our contractual or legal obligations, or to respond to your enquiries.
We sometimes use external service providers to process your data. They process data on our behalf as order processors (e.g. for central IT services or the hosting of our website). The service providers who work for us as processors are only permitted to use the data in accordance with our instructions. We are legally responsible in such cases for appropriate data protection precautions at the companies we commission. The companies were carefully selected by us, commissioned in writing in accordance with the legal requirements, are obliged to follow our instructions, and are regularly inspected.
A transfer of your personal data to third parties will only take place if this is legally permissible, in particular if
• you have given your express consent to this in accordance with Art. 6(1)a GDPR,
• the transfer in accordance with Art. 6(1)b GDPR is necessary for the processing of contractual relationships with you,
• there is a legal obligation for the transfer according to Art. 6(1)c GDPR,
• the transfer is necessary in accordance with Art. 6(1)f GDPR in order to protect our legitimate interests unless the interests of the user outweigh these.
3. Duration of data storage and deletion
We only process and store personal data for the duration necessary to achieve the purpose of the processing. Should the purpose of processing cease to apply, then the data shall be deleted, unless there are legal obligations to retain data that prevent deletion. In the latter case, processing is restricted in order to comply with storage obligations.
4. Data protection
We use SSL or TLS encryption during website visits and to protect the transfer of content. You can recognise this by seeing that the key or lock symbol in the lower status bar of your browser is closed, which your browser displays when an SSL connection is established.
We also use suitable technical and organisational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction, and against unauthorised access by third parties. Our security measures are continually improved in line with technological developments.
5. Rights of the data subject
You have the following rights with regard to personal data pertaining to you:
• the right to withdraw consent;
• the right to information;
• the right to rectification or erasure;
• the right to restrict processing;
• the right to object to processing;
• the right to data portability;
• the right to complain to a supervisory authority.
You can find more information on these rights under item IV in these instructions.
III. INFORMATION ON INDIVIDUAL DATA PROCESSING OPERATIONS
The following provisions contain more detailed information on the individual data processing procedures, for example, which personal data is collected, for which purposes it is used, on what basis we are entitled to collect the data, how long it is stored for, and, if applicable, to whom it is transferred:
1. Data processing when visiting the website
When you visit our website, the browser used on your end device automatically sends information to our website server. The following data is connected in this process:
• the IP address of the requesting computer;
• the date and time of access;
• the name and URL of the file retrieved;
• the website from which access was gained (referrer URL);
• the browser used and, if applicable, the operating system of your computer as well as the name of your access provider;
• the names of files that were downloaded.
This information is stored temporarily in a so-called log file. This does not include your IP addresses or any other data that allows the data to be attributed to you. This data is not stored together with other personal data about you.
The above data will be processed by us for the following purposes:
• displaying the website;
• ensuring a smooth connection setup to the website;
• ensuring convenient use of our website;
• evaluating system security and stability; and
• for further administrative purposes.
The system’s temporary storage of the IP address is necessary to enable the transfer of website data to the user’s computer and thus display of the website content accessed. Storage in log files takes place in order to ensure the functionality of the website. The data is also used to optimise the website and to ensure the security of our information technology systems.
The legal basis for the data processing is Art. 6(1)f GDPR. Our legitimate interest follows from the data collection purposes listed above. We never use the collected data for the purpose of drawing conclusions about your person.
Information stored in the cookie arises in connection with the specific end device used in each case. However, this does not mean that we thereby gain direct knowledge of your identity.
In addition, we also use temporary cookies to optimise user-friendliness, and these are stored on your end device for a certain fixed period of time, which may vary depending on the cookie. If you visit our website again to use our services, it is automatically recognised that you have already visited us and which entries and settings you made, so that you do not have to enter them again.
We use the cookies to make visiting our website more pleasant and simpler for you. The data processing is based on Art. 6(1)f GDPR. We have a legitimate interest in storing cookies in order to provide our services without technical errors and in an optimised manner.
Most browsers accept cookies automatically. You can, however, configure your browser according to your wishes so that, for example, no cookies are stored on your computer or a notice always appears before a new cookie is created. You can also delete the cookies at any time in the security settings of your browser.
However, the complete deactivation of cookies may mean that you cannot use all the functions of our website.
3. The use of Google Analytics
We use Google Analytics to analyse website use. The data collected from this is used to optimise our website and advertising measures.
Google Analytics is a web analytics service operated and provided by Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, United States). Google processes website usage data on our behalf and is contractually committed to measures to ensure the confidentiality of the data processed.
During your visit to the website, the following are some of the data recorded:
• the pages accessed;
• your behaviour on the pages;
• your approximate location (country and city);
• your IP address (in truncated form, so that no clear assignment is possible);
• technical information such as browser, internet provider, end device, and screen resolution;
• the source of origin of your visit (i.e., via which website or via which advertising medium you came to us).
This data is transferred to a Google server in the USA. Google complies with the data protection provisions of the “EU-US Privacy Shield” agreement.
Google Analytics stores cookies in your web browser for a period of two years since your last visit. These cookies contain a randomly generated user ID which can be used to recognise you on future visits to the website.
The recorded data is stored together with the randomly generated user ID, enabling the evaluation of pseudonymous user profiles. This user-related data is automatically deleted after 14 months. Other data remain stored in aggregated form indefinitely.
The data processing is based on your consent pursuant to Art. 6(1)a GDPR.
If you do not agree with the collection, you can carry out a one-time installation of to cancel it. You can also deactivate Google Analytics[ga-optout text=”click here.”]
4. Data processing when contacting us by e-mail
If you contact us by e-mail, we will store the data you provide and only use it to process your request and to contact you to handle your request. The legal basis for the processing of the data is Art. 6(1)f GDPR. Our legitimate interest follows from the processing of your request, which is not opposed by any overriding interests on your part, as you contact us voluntarily for this purpose.
If the contact is aimed at the conclusion of a contract, the additional legal basis for the processing is Art. 6(1)b GDPR.
IV. RIGHTS OF THE DATA SUBJECT
As a data subject, you have the following rights:
1. The right to withdraw consent
If you have given your consent to the processing of your data, you have the right to withdraw your consent at any time in accordance with Art. 7(3) GDPR. This has the consequence that we may no longer continue the data processing in the future, insofar as we were permitted to do so on the basis of your consent. The lawfulness of the processing carried out up to the withdrawal remains unaffected, i.e., the processing carried out in the past on the basis of the consent remains lawful.
If you wish to withdraw your consent, it is sufficient, for example, to send an e-mail to the Data Protection Officer at email@example.com or using the contact addresses in item I.
2. The right to confirmation and information
You have the right to request confirmation from us, in accordance with Art. 15 of the GDPR, as to whether personal data concerning you is being processed. You also have the right to obtain information free of charge about your personal data processed by us. In particular, you can request information about:
• the purposes of the processing;
• the category of the personal data;
• the categories of participants that your data was or will be transferred to;
• the planned storage duration;
• the existence of a right to rectification, erasure, restriction of processing, and a right to object;
• the existence of a right of complaint;
• all available information about the origin of your data, if it has not been collected at our company;
• and regarding the existence of automated decision-making, including profiling, and, if applicable, meaningful information on the details thereof.
3. The right to rectification
You have the right, in accordance with Art. 16 GDPR, to demand the immediate rectification of inaccurate or incomplete personal data stored by us.
4. The right to deletion
You have the right to request the deletion of your personal data stored by us in accordance with Art. 17 GDPR if one of the following grounds applies:
– the personal data are no longer necessary for the purposes for which they were collected or otherwise processed.
– you withdraw the consent on which the processing was based and there is no other legal basis for the processing.
– you object to processing based on Art. 6(1)b or f GDPR and there are no overriding legitimate grounds for processing, or you object to the processing of data for the purpose of direct advertising.
– the personal data were processed unlawfully.
– the deletion of the personal data is necessary for compliance with a legal obligation under EU or Member State law to which we are subject.
– the personal data was collected in relation to information society services offered pursuant to Art. 8(1) GDPR.
This does not apply insofar as the processing is necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the assertion, exercise, or defence of legal claims.
5. The right to restrict processing
You have the right to request the restriction of the processing of your personal data in accordance with Art. 18 GDPR if
– you dispute the accuracy of the data for a duration that allows us to verify the accuracy of your data;
– the processing is unlawful but you object to its erasure and request the restriction of processing instead;
– we no longer need the data, but you need it to assert, exercise or defend legal claims; or
– you have objected to the processing in accordance with Art. 21 GDPR as long as it has not been established whether our legitimate grounds override yours.
In this case, your data, apart from being stored, may only be processed with your consent or for certain legally defined purposes, in particular for legal prosecution and the protection of the rights of other persons. We will notify you before the restriction is lifted.
6. The right to data portability
You have the right, in accordance with Art. 20 GDPR, to receive the personal data you have provided to us in a structured, commonly used and machine-readable format, or to request that it be transferred to another responsible person.
7. The right to object to processing
Under certain conditions, you also have the right to object to the processing of your personal data pursuant to Art. 21 GDPR. Please read our separate instructions on this under section 10: Separate information about your right to object according to Art. 21 GDPR.
8. Notice on exercising the rights under sections 1 – 7
You may contact us at any time if you wish to exercise the aforementioned rights. To do this, it is sufficient, for example, to send an e-mail to the Data Protection Officer firstname.lastname@example.org or you can contact the addresses given in item I.
9. The right to appeal to a supervisory authority
Furthermore, you have the right to complain to a supervisory authority in accordance with Art. 77 GDPR. For example, you can contact the supervisory authority of your habitual place of residence or place of work or of our registered office for this purpose. You can find a list of the supervisory authorities here:
10. Separate information about your right to object according to Art. 21 GDPR
In the following, we would like to draw your attention in particular to your right of objection in accordance with Art. 21 GDPR:
The right to object
a) Individual right to object according to Art. 21(1) GDPR
The prerequisite for this right to object is that data processing takes place on the basis of the provisions of Art. 6(1)e or f GDPR.
Art. 6(1)e regulates the case where processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority placed in the responsible person. This primarily applies to holders of sovereign powers such as the Federal Government, the Federal States, and their authorities or entrusted private persons.
Art. 6(1)f GDPR permits processing if this is necessary to safeguard the legitimate interests of the controller or a third party unless the interests or fundamental rights and freedoms of the data subject override these.
If the data processing is carried out on one of these bases, you have the right to object to the processing of personal data relating to you at any time on grounds relating to your particular situation. This is also valid for profiling based on these provisions.
Consequences of this objection: Following an objection, we will no longer process the data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms, or unless the processing is for the assertion, exercise, or defence of legal claims.
b) Right to object to the processing of data for direct marketing purposes
This right to object is conditional upon your data being processed for the purposes of direct advertising.
In this case, you have the right to object to data processing for the purpose of such advertising at any time. This also applies to profiling when it is related to direct advertising.
The consequence of the objection is that the data are no longer processed for these purposes.
c) Exercising the right to object
You can contact us at any time if you wish to exercise your right to object in accordance with a) or b). In order to do this, it is sufficient, for example, to send an e-mail to the Data Protection Officer email@example.com or you can use the contact addresses given in item I.
V. DURATION OF VALIDITY
We reserve the right to make changes at any time in order to ensure that our data protection information always complies with the current legal requirements. This is also valid in the event that the data protection information has to be adapted due to new or revised products or services.