Privacy
I. Name and address of the data controller
The data controller within the meaning of data protection law is
Sport Import GmbH
Industriestraße 39
26188 Edewecht
Germany
Tel. +49 (0) 4405-9280-0
Email: info@sportimport.de
Website: www.sportimport.de
You can find more information about our company, such as details of our authorised representatives in our legal notice:
https://www.sportimport.de/impressum
II. General information on data processing
1. Scope of personal data processing
We collect and utilise our users' personal data only insofar as this is necessary for provision of an operational site and of our content and services.
2. Legal basis for the processing of personal data
Insofar as we obtain the consent of the data subject for processing personal data, Art. 6 para. 1 lit. a of the EU General Data Protection Regulation (GDPR) serves as the legal basis.
For the processing of personal data necessary for performance of a contract to which the data subject is a party, Art. 6 para. 1 lit. b GDPR serves as the legal basis. This also applies to processing necessary for pre-contractual activities.
Insofar as the processing of personal data is necessary to fulfil a legal obligation to which our company is subject, Art. 6 para. 1 lit. c GDPR serves as the legal basis.
If processing is necessary to safeguard a legitimate interest of our company or a third party and if the interests, fundamental rights and freedoms of the data subject do not outweigh the first-mentioned interest, Art. 6 para. 1 lit. f GDPR serves as the legal basis for processing.
3. Data deletion and storage duration
The personal data of a relevant person will be deleted or blocked as soon as the purpose of storage ceases to exist. Furthermore, data may be stored if this has been provided by the European or national legislation in EU regulations, laws or other provisions to which the data controller is subject. Blocking or erasure of data will be carried out even if a storage deadline prescribed by the above-mentioned standards expires, unless data storage is a necessity for concluding or performing a contract.
III. Provision of the website and creation of log files
1. Description and scope of data processing
Every time our website is accessed, our system automatically collects data and information that is automatically transmitted to the server of our website by the browser used on your device.
In doing so, the following data is collected:
(1) your IP address
(2) date and time of access
(3) name and URL of file(s) you retrieve/access
(4) browser used and, if applicable, the operating system of your computer as well as the name of your access provider
(5) the website that referred you to our website
The data is also stored in the log files of our system. This data is not stored together with other personal user data.
2. Legal basis for data processing
The legal basis for temporary storage of data and log files is Art. 6 para. 1 lit. f GDPR.
3. Purpose of data processing
Temporary storage of the IP address by the system is necessary to enable the delivery of the website to the user's device. To this end, the user's IP address must remain stored for the duration of the session.
The data is stored in log files to ensure the website's functionality. The data are also used to optimise the website and to ensure the security of our information technology systems. No evaluation of the data for marketing purposes is undertaken in this context.
These purposes also encompass our legitimate interest in data processing in accordance with Art. 6 para. 1 lit. f GDPR.
4. Duration of storage
The data will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. In the case of data collection for provision of the website, this will be undertaken once the respective session has ended.
Should any data be stored in log files, these will be deleted after seven days at the latest. Further storage is possible. In this case, the user's IP addresses will be deleted or distorted, so that assignment of the accessing client is no longer possible.
5. Objection and removal option
Collection of data for provision of the website and storage of data in log files is absolutely necessary for operation of the website. Consequently, there is no option to object on the part of the user.
IV. Use of cookies
a) Description and scope of data processing
Our website uses cookies. Cookies are text files that are stored in the internet browser or by the internet browser on the user's device. If a user visits a website, a cookie may be stored on the user's operating system. This cookie contains a distinctive character string that enables unique identification of the browser when the website is accessed again.
We use cookies to make our website more user-friendly. Some elements of our website require that the requesting browser can be identified even after changing pages.
The following data is stored and transmitted in cookies:
(1) Session cookies
Session cookies allow our shop software to determine whether you have items in your shopping basket and whether you are logged in. It serves to identify your browser for the server. No further information except the session ID is stored in the browser.
(2) CSRF
The shop software used generates an individual CSRF cookie when visiting the shop, so that the data subject can visit the individual areas of the shop. Here you will find information on CSRF protection: https://en.wikipedia.org/wiki/Cross-site_request_forgery
(3) SLT
The SLT cookie allows the shop to recognize the data subject upon return to the shop, even if the session has already expired. This cookie will only be set after logging in.
(4) x-ua-device
The x-ua-device cookie stores the end device of the data subject and is designed to make the website experience more pleasant.
b) Legal basis for data processing
The legal basis for processing personal data using cookies is Art. 6 para. 1 lit. f GDPR.
c) Purpose of data processing
The purpose of using technically necessary cookies is to simplify use of websites for users. Some features of our website are not offered without the use of cookies. In this case, it is necessary that the browser be recognised even after changing the page.
We require cookies for the following applications:
(1) Shopping basket
(2) Wishlist
(3) Login status
(4) CSRF protection
For these purposes, our legitimate interest also lies in the processing of personal data pursuant to Art. 6 para. 1 lit. f GDPR.
e) Duration of storage, objection and removal option
Cookies are stored on the user's computer and transmitted to our site. Therefore, as a user you have full control of the use of cookies. By changing the settings in your internet browser, you can disable or restrict the setting of cookies. Cookies that have already been saved can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to use all of the website's features.
V. Data collection and use for fulfilling contracts
1. Description and scope of data processing
On our website, we process the personal data you have already communicated to us by your B2B login to fill your orders.
2. Legal basis for data processing
If the processing of the data is used to fulfil contracts with the user or in the course of pre-contractual measures, the additional legal basis for the processing of the data is Art. 6 6 para. 1 lit. b GDPR.
3. Purpose of data processing
The processing of personal data is necessary to fulfil contracts with users or to implement pre-contractual measures at the user's request.
4. Data transfer for contract fulfilment, credit checks, or identity checks
A transfer of personal data will only take place if it is necessary to fulfil the contract. We will disclose your information to the shipping company responsible for the delivery as necessary.
5. Duration of storage
The data will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected.
This is the case for data collected during the registration process for fulfilment of a contract or implementation of pre-contractual measures, if the data is no longer necessary for fulfilment of the contract. Even after conclusion of the contract, it may still be necessary to store personal data of the contractual partner in order to fulfil contractual or legal obligations.
6. Objection and removal option
As a user, you have the option to cancel your registration at any time. You can change the data we have on file about you at any time. If the data is required to fulfil a contract or implement pre-contractual measures, this data may only be deleted if not precluded by contractual or legal obligations.
VI. Contact form and email contact
1. Description and scope of data processing
There is a contact form on our website that can be used for electronic contact. If users accept this option, the data entered in the input screen will be transmitted to us and stored. The data we collect is shown on the respective input forms. In addition, we save the date and time of the contact.
Alternatively, you can contact us via the email address provided: info@sportimport.de. In this case, the user's personal data which are transmitted along with the email will be stored.
In the case of an electronic contact via contact form or email, the transmitted data is stored on Microsoft-operated email servers, generally in the USA. Microsoft Corporation has submitted to the EU-US Privacy Shield ( https://www.privacyshield.gov/participant?id=a2zt0000000KzNaAAK ), ensuring adequate levels of data protection.
No data will be disclosed to third parties in this context. The data is used exclusively for the processing of the conversation.
2. Legal basis for data processing
The legal basis for processing the data transmitted in your email or via the contact form is Art. 6 para. 1 lit. f GDPR. If the contact could lead to the conclusion of a contract, then an additional legal basis for the processing is Art. 6 para. 1 lit. b GDPR.
3. Purpose of data processing
We process personal data from the input mask or contact via email serves solely to process your request. This also constitutes the legitimate interest in processing the data.
The other personal data processed during the sending process helps prevent misuse of the contact form and to ensure the security of our information technology systems.
4. Duration of storage
If you contact us using the form on the website or by email, the data you provide will be stored with us for six months for the purpose of processing your enquiry and in the event of follow-up questions. Furthermore, data may be stored if this has been provided by the European or national legislation in EU regulations, laws or other provisions to which the data controller is subject.
Personal data that was additionally collected during the sending procedure will be deleted at the latest after a period of seven days.
VII. Embedded YouTube videos
On our website, we have incorporated videos from YouTube (YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, USA, represented by: Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA). The embedding of these videos on our web pages is done in order to provide our users with the best possible information content about our products. For these purposes, our legitimate interest also lies in the processing of personal data pursuant to Art. 6 para. 1 lit. f GDPR.
We use the enhanced privacy mode of YouTube when embedding. Normally, when you visit an embedded video page, YouTube gets your IP address and sets a cookie on your machine, which happens in advanced privacy mode only when you watch the video. If you have a user account on YouTube and you are logged in at the time you watch the video, YouTube will associate the usage data with your user account. We have no control over the collection and use of your data on YouTube. In order to use the full functionality of YouTube, it is necessary that your IP address be saved. This storage is typically done on a Google-operated server in the United States. We have no influence on this storage. Google LLC has submitted to the EU-US Privacy Shield (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI), ensuring an appropriate level of data protection.
You can find the privacy policy of Google LLC at https://www.google.com/policies/privacy. You can opt out of personalized advertising provided by Google at https://adssettings.google.com/.
VIII. SSL encryption
Our websites use encryption for security reasons and to protect the transmission of sensitive content, such as the contact data you submit via the contact form. An SSL encryption of a web page can be recognized if the beginning of the URL changes from "http://" to "https://" and a padlock symbol appears in your browser line.
IX. Contact details of the Data Protection Officer
You can reach our data protection officer under the following contact data:
Mr. Thorsten Brendel
ViCoTec IT-Sicherheit & Datenschutz GmbH & Co. KG
Im Technologiepark 12
26129 Oldenburg
Fon: +49 441 – 24 92 65 20
Email: datenschutz@sportimport.de
X. Your rights as a data subject
In principle, you have the right to information, rectification, deletion, restriction of processing, data portability, revocation and objection. If you believe that the processing of your data violates data protection law or your data protection rights have been otherwise violated in any way, you can complain to the supervisory authority
Stand: 01.04.2024