PRIVACY POLICY STATEMENT

We are very pleased about your interest in our company. The protection of your personal data is important to us. We collect and utilise your personal data exclusively in accordance with and within the framework of the applicable data protection laws of the Federal Republic of Germany, in particular the General Data Protection Regulation (GDPR), the Federal Data Protection Act (BDSG), and all further applicable provisions of data protection law.

In the following, we will inform you about the type, scope, and purpose of the collection and utilisation of personal data when using our website. You can access this information at any time on our website.

Personal data are all data with which a natural person (the data subject) can be directly or indirectly identified, e.g., name, address, e-mail address, user behaviour.

1. The responsible person in the sense of the data protection laws (Art. 4(7) GDPR) is:

Delta-Sport Handelskontor GmbH
Wragekamp 6
22397 Hamburg
Deutschland
Tel.: +49 40 5 27 310 0
E-Mail: info@www.crivit-bikes.com
Website: www.delta-sport.com

2. You can reach our data protection officer at:

E-Mail: dsb@www.crivit-bikes.com

or at

Delta-Sport Handelskontor GmbH
– The Data Protection Officer –
Wragekamp 6
22397 Hamburg
Germany
Tel.: +49 40 5 27 310 0

If you have any questions or suggestions regarding data protection, you are welcome to contact our data protection officer directly.

1. Scope and legal principles for processing

We process personal data only in accordance with the legal regulations. In particular, personal data will only be processed if you have consented to it or if the processing is otherwise permitted by law.
Insofar as we obtain the consent of the data subject for the processing of personal data, Art. 6(1)a of the EU General Data Protection Regulation (GDPR) serves as the legal basis.
When processing personal data necessary for the performance of a contract to which the data subject is a party, Art. 6(1)b GDPR serves as the legal basis. This also applies to processing operations necessary for the performance of preliminary contractual measures.
Where processing of personal data is necessary to comply with a legal obligation to which our company is subject, Art. 6(1)c GDPR shall serve as the legal basis.
In the event that vital interests of the data subject or another natural person necessitate the processing of personal data, Art. 6(1)d GDPR serves as the legal basis.
If the processing is necessary to protect a legitimate interest of our company or of a third party and if the interests, basic rights, and freedoms of the data subject do not outweigh the aforementioned interest, Art. 6(1)f GDPR serves as the legal basis for the processing.
We designate the respective legal basis for processing in relation to the information on the individual data processing operations in this privacy policy statement or when you provide us with your personal data.

2. Transfer / Recipient of data

Within our company, only those offices will have access to your data that require it to protect our legitimate interests, or to fulfil our contractual or legal obligations, or to respond to your enquiries.
We sometimes use external service providers to process your data. They process data on our behalf as order processors (e.g. for central IT services or the hosting of our website). The service providers who work for us as processors are only permitted to use the data in accordance with our instructions. We are legally responsible in such cases for appropriate data protection precautions at the companies we commission. The companies were carefully selected by us, commissioned in writing in accordance with the legal requirements, are obliged to follow our instructions, and are regularly inspected.
A transfer of your personal data to third parties will only take place if this is legally permissible, in particular if

• you have given your express consent to this in accordance with Art. 6(1)a GDPR,
• the transfer in accordance with Art. 6(1)b GDPR is necessary for the processing of contractual relationships with you,
• there is a legal obligation for the transfer according to Art. 6(1)c GDPR,
• the transfer is necessary in accordance with Art. 6(1)f GDPR in order to protect our legitimate interests unless the interests of the user outweigh these.

If we intend to transfer personal data to third parties, you can find more detailed information on this in the information on the individual data processing operations in this privacy policy statement or when you provide us with your personal data.

3. Duration of data storage and deletion

We only process and store personal data for the duration necessary to achieve the purpose of the processing. Should the purpose of processing cease to apply, then the data shall be deleted, unless there are legal obligations to retain data that prevent deletion. In the latter case, processing is restricted in order to comply with storage obligations.
You will find more details in connection with the information on the individual data processing operations in this privacy policy statement or when providing your personal data.

4. Data protection

We use SSL or TLS encryption during website visits and to protect the transfer of content. You can recognise this by seeing that the key or lock symbol in the lower status bar of your browser is closed, which your browser displays when an SSL connection is established.
We also use suitable technical and organisational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction, and against unauthorised access by third parties. Our security measures are continually improved in line with technological developments.

5. Rights of the data subject

You have the following rights with regard to personal data pertaining to you:
• the right to withdraw consent;
• the right to information;
• the right to rectification or erasure;
• the right to restrict processing;
• the right to object to processing;
• the right to data portability;
• the right to complain to a supervisory authority.

You can find more information on these rights under item IV in these instructions.

In the following provisions, you will find detailed information about the individual data processing operations, for example which personal data is collected, the purposes for which it is used, the legal basis on which we are entitled to collect it, how long it is stored, and, where applicable, to whom it is transferred:

1. Data processing when visiting the website
When you access our website, your browser automatically sends information to our web server. The following data is collected in the process:

  • The IP address of the requesting device,
  • The date and time of access,
  • Name and URL of the requested file,
  • The website from which access came (referrer URL),
  • The browser used and, where applicable, the operating system of your device and the name of your internet service provider,
  • Names of downloaded files.

This information is temporarily stored in a so-called log file. It does not include your IP address or any other data that would allow us to identify you. These data are not stored together with other personal data about you.
We process the above-mentioned data for the following purposes:

  • Displaying our website,
  • Ensuring a smooth connection to the website,
  • Ensuring comfortable use of our website,
  • Analyzing system security and stability, and
  • For other administrative purposes.

Temporary storage of the IP address by the system is necessary to transmit the content of the website to the user’s device and to display the requested content. Storing the data in log files is necessary to ensure the website’s functionality. The data are also used to optimize our website and to ensure the security of our IT systems.
The legal basis for this data processing is Art. 6(1) sentence 1(f) GDPR. Our legitimate interest follows from the aforementioned purposes of data collection. Under no circumstances do we use the collected data to draw conclusions about your person.

Please note that pursuant to Art. 21 GDPR, you have the right to object to the processing based on Art. 6(1)(f) GDPR. Further information can be found under section IV.10 of this Privacy Policy.

In addition, we use cookies when you visit our website. Detailed explanations can be found under section 2 of this Privacy Policy.

2. Cookies
We use cookies on our website. Cookies are small files that your browser automatically creates and that are stored on your device (laptop, tablet, smartphone, etc.) when you visit our site. Cookies do not harm your device and contain no viruses, Trojans, or other malware.

The cookie stores information that is related to the specific device used. This does not mean that we gain direct knowledge of your identity.

Cookies serve to make our service more user-friendly. We use session cookies to recognize that you have already visited certain pages of our website. These are automatically deleted when you leave the website.

Additionally, we use temporary cookies to optimize usability. They are stored on your device for a specific period (which may vary depending on the cookie). If you visit the website again, they automatically recognize that you have previously visited us and remember your inputs and settings, so you don’t have to re-enter them.

We use cookies to make visiting our website more pleasant and convenient. The data processing is based on Art. 6(1) sentence 1(f) GDPR. Our legitimate interest lies in the technically flawless and optimized provision of our services.

Please note that pursuant to Art. 21 GDPR, you have the right to object to processing under Art. 6(1)(f) GDPR. Further information can be found under section IV.10 of this Privacy Policy.

Most browsers automatically accept cookies. However, you can configure your browser so that either no cookies are stored on your device or you are notified every time before a new cookie is set. You can also delete cookies at any time in your browser’s security settings.

However, disabling cookies completely may prevent you from using all the functions of our website.

3. Use of Google Analytics
We use Google Analytics to analyze how people use the website. The data obtained are used to optimize our website and advertising measures.

Google Analytics is a web analytics service provided by Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, United States). Google processes website usage data on our behalf and is contractually obligated to ensure the confidentiality of the processed data.

During your visit, Google Analytics records, among other things:

  • Pages visited,
  • Your behavior on the pages (clicks, time spent etc.),
  • Your approximate location (country and city),
  • Your IP address (anonymized so it cannot be uniquely identified),
  • Technical information such as browser, internet provider, device, and screen resolution,
  • The source of your visit (i.e. through which website or advertisement you reached us).

These data are transferred to Google servers in the USA. Google observes the data protection provisions of the EU‑US Privacy Shield agreement.
Google Analytics sets cookies in your browser that remain for two years after your last visit. These cookies contain a randomly generated user ID that helps to recognize you on future visits.
The recorded data are stored together with the user-ID, enabling the analysis of pseudonymous user profiles. These user-related data are automatically deleted after 14 months. Other data are retained in aggregated form indefinitely.

Data processing is based on your consent in accordance with Art. 6(1)(a) GDPR.
If you do not consent to this processing, you can prevent it by installing a one-time browser add-on: https://tools.google.com/dlpage/gaoptout?hl=en. You can also deactivate Google Analytics by clicking here: [ga-optout text=”click here.”]

More information on Google’s data usage, settings, and opt-out options is available in Google’s privacy policy: https://www.google.com/policies/privacy/

4. Data processing when contacting us by e-mail
If you contact us by e‑mail, the data you provide are stored by us and used only to handle your inquiry and to communicate with you in order to process it. The legal basis for this processing is Art. 6(1) sentence 1(f) GDPR. Our legitimate interest follows from handling your inquiry, which is not overridden by any fundamental interests of yours, as you voluntarily contacted us for this purpose.

Please note that you have the right to object to processing under Art. 6(1)(f) GDPR. Further information can be found under section IV.10 of this Privacy Policy.

If the inquiry is aimed at concluding a contract, the additional legal basis for processing is Art. 6(1)(b) GDPR.

The data will be deleted once storage is no longer necessary, in particular after your request has been processed. Continued use of data that we hold for other purposes and for which we have another lawful basis (e.g. data necessary for contract performance) remains unaffected. Where statutory retention obligations exist, we restrict processing to what is legally required. Independently, you retain all rights as a data subject. Please refer to section IV for further information on data subject rights in our Privacy Policy.

5. Data processing during applications
The protection of your personal data when you apply to us, especially via our online application portal, is governed by separate privacy provisions, which you can view here:

Privacy Policy for Applicants

6. Management of cookies and similar technologies
To manage the cookies and similar technologies used (tracking pixels, web beacons, etc.) and related consents, we use the consent tool “Real Cookie Banner”. Details about how “Real Cookie Banner” works can be found at: https://devowl.io/de/rcb/datenverarbeitung/

The legal bases for processing personal data in this context are Art. 6(1)(c) GDPR and Art. 6(1)(f) GDPR. Our legitimate interest lies in managing the cookies and similar technologies used and the related consents.

Providing personal data is neither legally nor contractually required nor necessary for entering into a contract. You are not obligated to provide personal data. If you do not provide the personal data, we will not be able to manage your consents.

As a data subject, you have the following rights:

1. The right to withdraw consent

If you have given your consent to the processing of your data, you have the right to withdraw your consent at any time in accordance with Art. 7(3) GDPR. This has the consequence that we may no longer continue the data processing in the future, insofar as we were permitted to do so on the basis of your consent. The lawfulness of the processing carried out up to the withdrawal remains unaffected, i.e., the processing carried out in the past on the basis of the consent remains lawful.
If you wish to withdraw your consent, it is sufficient, for example, to send an e-mail to the Data Protection Officer at dsb@www.crivit-bikes.com or using the contact addresses in item I.

2. The right to confirmation and information

You have the right to request confirmation from us, in accordance with Art. 15 of the GDPR, as to whether personal data concerning you is being processed. You also have the right to obtain information free of charge about your personal data processed by us. In particular, you can request information about:

• the purposes of the processing;
• the category of the personal data;
• the categories of participants that your data was or will be transferred to;
• the planned storage duration;
• the existence of a right to rectification, erasure, restriction of processing, and a right to object;
• the existence of a right of complaint;
• all available information about the origin of your data, if it has not been collected at our company;
• and regarding the existence of automated decision-making, including profiling, and, if applicable, meaningful information on the details thereof.

3. The right to rectification

You have the right, in accordance with Art. 16 GDPR, to demand the immediate rectification of inaccurate or incomplete personal data stored by us.

4. The right to deletion

You have the right to request the deletion of your personal data stored by us in accordance with Art. 17 GDPR if one of the following grounds applies:

– the personal data are no longer necessary for the purposes for which they were collected or otherwise processed.
– you withdraw the consent on which the processing was based and there is no other legal basis for the processing.
– you object to processing based on Art. 6(1)b or f GDPR and there are no overriding legitimate grounds for processing, or you object to the processing of data for the purpose of direct advertising.
– the personal data were processed unlawfully.
– the deletion of the personal data is necessary for compliance with a legal obligation under EU or Member State law to which we are subject.
– the personal data was collected in relation to information society services offered pursuant to Art. 8(1) GDPR.

This does not apply insofar as the processing is necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the assertion, exercise, or defence of legal claims.

5. The right to restrict processing

You have the right to request the restriction of the processing of your personal data in accordance with Art. 18 GDPR if

– you dispute the accuracy of the data for a duration that allows us to verify the accuracy of your data;
– the processing is unlawful but you object to its erasure and request the restriction of processing instead;
– we no longer need the data, but you need it to assert, exercise or defend legal claims; or
– you have objected to the processing in accordance with Art. 21 GDPR as long as it has not been established whether our legitimate grounds override yours.

In this case, your data, apart from being stored, may only be processed with your consent or for certain legally defined purposes, in particular for legal prosecution and the protection of the rights of other persons. We will notify you before the restriction is lifted.

6. The right to data portability

You have the right, in accordance with Art. 20 GDPR, to receive the personal data you have provided to us in a structured, commonly used and machine-readable format, or to request that it be transferred to another responsible person.

7. The right to object to processing

Under certain conditions, you also have the right to object to the processing of your personal data pursuant to Art. 21 GDPR. Please read our separate instructions on this under section 10: Separate information about your right to object according to Art. 21 GDPR.

8. Notice on exercising the rights under sections 1 – 7

You may contact us at any time if you wish to exercise the aforementioned rights. To do this, it is sufficient, for example, to send an e-mail to the Data Protection Officer atdsb@www.crivit-bikes.com or you can contact the addresses given in item I.

9. The right to appeal to a supervisory authority

Furthermore, you have the right to complain to a supervisory authority in accordance with Art. 77 GDPR. For example, you can contact the supervisory authority of your habitual place of residence or place of work or of our registered office for this purpose. You can find a list of the supervisory authorities here:

https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html

10. Separate information about your right to object according to Art. 21 GDPR

In the following, we would like to draw your attention in particular to your right of objection in accordance with Art. 21 GDPR:

The right to object
a) Individual right to object according to Art. 21(1) GDPR
The prerequisite for this right to object is that data processing takes place on the basis of the provisions of Art. 6(1)e or f GDPR.
Art. 6(1)e regulates the case where processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority placed in the responsible person. This primarily applies to holders of sovereign powers such as the Federal Government, the Federal States, and their authorities or entrusted private persons.
Art. 6(1)f GDPR permits processing if this is necessary to safeguard the legitimate interests of the controller or a third party unless the interests or fundamental rights and freedoms of the data subject override these.
If the data processing is carried out on one of these bases, you have the right to object to the processing of personal data relating to you at any time on grounds relating to your particular situation. This is also valid for profiling based on these provisions.
Consequences of this objection: Following an objection, we will no longer process the data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms, or unless the processing is for the assertion, exercise, or defence of legal claims.

b) Right to object to the processing of data for direct marketing purposes
This right to object is conditional upon your data being processed for the purposes of direct advertising.
In this case, you have the right to object to data processing for the purpose of such advertising at any time. This also applies to profiling when it is related to direct advertising.
The consequence of the objection is that the data are no longer processed for these purposes.

c) Exercising the right to object
You can contact us at any time if you wish to exercise your right to object in accordance with a) or b). In order to do this, it is sufficient, for example, to send an e-mail to the Data Protection Officer atdsb@www.crivit-bikes.com or you can use the contact addresses given in item I.

We reserve the right to make changes at any time in order to ensure that our data protection information always complies with the current legal requirements. This is also valid in the event that the data protection information has to be adapted due to new or revised products or services.