Data privacy statement

Thank you for your interest in our company. The protection of your personal data is important to us. We collect and utilise your personal data exclusively in accordance with and within the framework of the applicable data protection laws of the Federal Republic of Germany, in particular the EU General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG), and all further applicable provisions of data protection law.

In the following, we will inform you about the type, scope, and purpose of the collection and utilisation of personal data when using our website. You can access this information at any time on our website.

Personal data are all data with which a natural person (the data subject) can be directly or indirectly identified, e.g., name, address, email address, or user behaviour.

If you have any questions or suggestions regarding data protection, please contact our Data Protection Officer directly.

1. The responsible person in the sense of the data protection laws (Art. 4(7) GDPR) is:

Delta-Sport Handelskontor GmbH
Wragekamp 6
22397 Hamburg
Deutschland
Tel.: +49 40 5 27 310 0
E-Mail: info@delta-sport.com
Website: www.delta-sport.com

2. You can reach our data protection officer at:

E-Mail: dsb@delta-sport.com

or at

Delta-Sport Handelskontor GmbH
– The Data Protection Officer –
Wragekamp 6
22397 Hamburg
Germany
Tel.: +49 40 5 27 310 0

If you have any questions or suggestions regarding data protection, you are welcome to contact our data protection officer directly.

We designate the respective legal basis for processing in relation to the information on the individual data processing operations in this data privacy statement or when you provide us with your personal data.

a. Data transmission and data recipients

Your data will only be accessible to departments in our company that require this data to safeguard our legitimate interests, to fulfil our contractual obligations, or to respond to your enquiries.

We sometimes engage external service providers as processors to process your data on our behalf (e.g., for central IT services or website hosting). Service providers we engage as processors are only permitted to use this data in accordance with our instructions. In such instances, we are legally responsible for ensuring that appropriate data protection precautions are taken at the companies we engage. We selected these companies carefully, and confirmed their engagement in writing in accordance with the legal requirements; these companies are obligated to follow our instructions and are subject to regular inspections.

Personal data is only transmitted to third countries (outside the EU/EEA) for which the European Commission has issued an adequacy decision or after suitable guarantees (e.g., EU Standard Contractual Clauses) have been secured.

b. Duration of data storage and deletion

We only store your personal data for as long as necessary to fulfil the intended purpose or to comply with statutory retention requirements.

You can find more detailed information about the specific data processing activities elsewhere in this data privacy statement or when disclosing your personal data.

c. Data security

We use SSL or TLS encryption in the context of visits to our website and to protect the transmission of content. You can identify this by checking for the locked padlock symbol in your browser’s lower status bar, which your browser displays when an SSL connection is established.

We also use appropriate technical and organisational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction, and against unauthorised access by third parties. We continuously improve our security measures in line with technological developments.

a. Visiting our website

i. Purpose

When you visit our website, the browser used on your end device automatically sends information to our website server. The following data is connected in this context:

  • the IP address of the requesting computer;
  • the data and time at which the file was retrieved;
  • the website from which access was requested (referrer URL); and
  • the browser used and, if applicable, your computer’s operating system, and the name of your access provider.

This information is stored temporarily in a file called a log file. This information does not include your IP address or any other data that would allow the data to be attributed to you.

We process the data specified above for the following purposes:

  • to display our website;
  • to ensure that a connection to the website is established smoothly;
  • to ensure convenient use of our website;
  • to evaluate system security and stability; and
  • for further administrative purposes.

It is necessary for the system to store a user’s IP address temporarily in order to enable the transfer of website data to the user’s computer and thus display the requested website content. Data is stored in log files in order to ensure the functionality of the website. We also use data to optimise our website and to ensure the security of our information technology systems.

We use a service provider (web hosting service) that processes your data on our behalf and exclusively in accordance with our instructions (cf. Recipients) in order to display our website and its service to you.

WPSpace

Broll IT & Media GmbH

Universitätsstrasse 3

56070 Koblenz
Germany

ii. Legal basis

The legal basis for the data processing is Art. 6(1)(f) GDPR. Our legitimate interest follows from the data collection purposes listed above. We never use collected data for the purpose of drawing conclusions about your identity.

Please note that, in the case of data processing on the basis of Art. 6(1)(f) GDPR, you have the right to object to processing in accordance with Art. 21 GDPR. You can find further information in Section 5 of this data privacy statement.

iii. Storage duration

Log files are stored for a maximum of seven days and subsequently deleted.

iv. Data origin

The data originates from the browser used on your end device.

v. Recipients (incl. transmission of personal data to non-EU countries)

WPSpace

Broll IT & Media GmbH

Universitätsstrasse 3

56070 Koblenz
Germany

b. Use of a tool to obtain and manage consent

i. Purpose

We use different tools and technologies on our website, including cookies, for which we require your consent. We use a Consent Manager tool to obtain and manage your consent. We use a product called Borlabs Cookie, which we host ourselves. The Consent Manager stores information on your end devices in order to store your consent. You can submit all information for the tools and technologies we use in the consent manager and withdraw this information at any time. The Consent Manager is automatically displayed upon your first visit to our website. You can also open the Consent Manager again at any time by clicking on the symbol in the footer in the bottom-left of our website. You can find all necessary details regarding the cookies used and the tools and technologies that require user consent in the Consent Manager.

ii. Legal basis

The legal basis for the use of the Consent Manager is our obligation to obtain your consent for certain processing activities as well as our legal obligation to demonstrate the consent you have issued to us (Art. 6(1)(c) GDPR in conjunction with Art. 7 GDPR and Art. 5(2) GDPR).

iii. Storage duration

The storage duration for this data is 90 days, with this information specified in the consent manager.

iv. Data origin

Directly from you.

v. Recipients (incl. transmission of personal data to non-EU countries)

None.

You are neither legally nor contractually obligation to make personal data available to us in the context of using our website. However, without providing your IP address, you will not be able to access our website. In addition, we will only be able to process requests and communicate with you by using your contact details.

We do not use any form of automated decision-making.

As a data subject, you have the following rights:

6.1. The right to withdraw consent

If you have given your consent to the processing of your data, you have the right to withdraw your consent at any time in accordance with Art. 7(3) GDPR. As a consequence, we will be unable to continue such data processing in the future, insofar as we were permitted to do so on the basis of your consent. The lawfulness of the processing carried out up to the withdrawal remains unaffected, i.e., the processing carried out in the past on the basis of your consent remains lawful.

6.2. Right of confirmation and access

You have the right to request confirmation from us, in accordance with Art. 15 of the GDPR, as to whether personal data concerning you is being processed. You also have the right to obtain information free of charge about your personal data processed by us. In particular, you can request information about:

  • the purposes of the processing;
  • the category of the personal data;
  • the categories of recipients that your data was or will be transferred to;
  • the planned storage duration;
  • the existence of a right to rectification, erasure, restriction of processing, and a right to object;
  • the existence of a right of complaint;
  • all available information about the origin of your data, if it has not been collected at our company;
  • and regarding the existence of automated decision-making, including profiling, and, if applicable, meaningful information on the details thereof.

6.3. The right to rectification

You have the right, in accordance with Art. 16 GDPR, to demand the immediate rectification of inaccurate or incomplete personal data stored by us.

6.4. The right to deletion

You have the right to request the deletion of your personal data stored by us in accordance with Art. 17 GDPR if one of the following grounds applies:

– the personal data are no longer necessary for the purposes for which they were collected or otherwise processed.

– you withdraw the consent on which the processing was based and there is no other legal basis for the processing.

– you object to processing based on Art. 6(1)(b) or (f) GDPR and there are no overriding legitimate grounds for processing, or you object to the processing of data for the purpose of direct advertising.

– the personal data were processed unlawfully.

– the deletion of the personal data is necessary for compliance with a legal obligation under EU or Member State law to which we are subject.

– the personal data was collected in relation to information society services offered pursuant to Art. 8(1) GDPR.

This does not apply insofar as the processing is necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the assertion, exercise, or defence of legal claims.

6.5. The right to restriction of processing

You have the right to request the restriction of processing of your personal data in accordance with Art. 18 GDPR if

– you contest the accuracy of the personal data for a period enabling the controller to verify the accuracy of the personal data;

– the processing is unlawful but you oppose the erasure of the personal data and request the restriction of their use instead;

– we no longer require the personal data for the purposes of the processing, but you require the data for the establishment, exercise or defence of legal claims; or

– you have objected to processing pursuant to Art. 21 GDPR pending the verification of whether our legitimate grounds override yours.

In this case, your data, apart from being stored, may only be processed with your consent or for certain legally defined purposes, in particular for legal prosecution and the protection of the rights of other persons. We will notify you before the restriction is lifted.

6.6. The right to data portability

You have the right, in accordance with Art. 20 GDPR, to receive the personal data you have provided to us in a structured, commonly used and machine-readable format, or to request that it be transferred to another controller.

Notice on the exercise of rights pursuant to Sections 6.1 – 6.6.

You may contact us at any time if you wish to exercise the aforementioned rights. You can do this, for example, by sending an email to the Data Protection Officer at dsb@delta-sport.com or using the contact details listed in Section 1.

6.7. The right to appeal to a supervisory authority

Furthermore, you have the right to complain to a supervisory authority in accordance with Art. 77 GDPR. For example, you can contact the supervisory authority of your habitual place of residence or place of work or of our registered office for this purpose. You can find a list of the supervisory authorities here:

https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html

6.8. Separate information about your right to object according to Art. 21 GDPR

In the following, we would like to draw your attention in particular to your right of objection in accordance with Art. 21 GDPR:

Right to object

  1. a) Individual right to object pursuant to Art. 21(1) GDPR

The prerequisite for this right to object is that data processing takes place on the basis of the provisions of Art. 6(1)(e) or (f) GDPR.

Art. 6(1)(e) regulates GDPR cases in which processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority placed in the controller. This primarily applies to holders of sovereign powers such as the Federal Government, the Federal States, and their authorities or entrusted private persons.

Art. 6(1)(f) GDPR permits processing if this is necessary to safeguard the legitimate interests of the controller or a third party unless the interests or fundamental rights and freedoms of the data subject override these.

If the data processing is carried out on one of these bases, you have the right to object to the processing of personal data relating to you at any time on grounds relating to your particular situation. This is also valid for profiling based on these provisions.

Consequences of this objection: Following an objection, we will no longer process the data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms, or unless the processing is for the assertion, exercise, or defence of legal claims.

  1. b) Right to object to processing of data for direct marketing purposes

The prerequisite for this right to object is that your data are processed for direct marketing purposes.

In this case, you have the right to object to data processing for the purpose of such marketing at any time. This also applies to profiling when it is related to direct marketing.

The consequence of the objection is that the data are no longer processed for these purposes.

  1. c) Exercising the right to object

You can contact us at any time if you wish to exercise your right to object in accordance with a) or b). You can do this, for example, by sending an email to the Data Protection Officer at dsb@delta-sport com or using the contact details listed in Section 2.

We reserve the right to make changes at any time in order to ensure that our data protection information always complies with the current legal requirements. This is also valid in the event that the data protection information has to be adapted due to new or revised products or services.