PRIVACY POLICY STATEMENT

    We are very pleased about your interest in our company. The protection of your personal data is important to us. We collect and utilise your personal data exclusively in accordance with and within the framework of the applicable data protection laws of the Federal Republic of Germany, in particular the General Data Protection Regulation (GDPR), the Federal Data Protection Act (BDSG), and all further applicable provisions of data protection law.

    In the following, we will inform you about the type, scope, and purpose of the collection and utilisation of personal data when using our website. You can access this information at any time on our website.

    Personal data are all data with which a natural person (the data subject) can be directly or indirectly identified, e.g., name, address, e-mail address, user behaviour.

    1. The responsible person in the sense of the data protection laws (Art. 4(7) GDPR) is:

    Delta-Sport Handelskontor GmbH
    Wragekamp 6
    22397 Hamburg
    Deutschland
    Tel.: +49 40 5 27 310 0
    E-Mail: info@www.crivit-bikes.com
    Website: www.delta-sport.com

    2. You can reach our data protection officer at:

    E-Mail: dsb@www.crivit-bikes.com

    or at

    Delta-Sport Handelskontor GmbH
    – The Data Protection Officer –
    Wragekamp 6
    22397 Hamburg
    Germany
    Tel.: +49 40 5 27 310 0

    If you have any questions or suggestions regarding data protection, you are welcome to contact our data protection officer directly.

    1. Scope and legal principles for processing

    We process personal data only in accordance with the legal regulations. In particular, personal data will only be processed if you have consented to it or if the processing is otherwise permitted by law.
    Insofar as we obtain the consent of the data subject for the processing of personal data, Art. 6(1)a of the EU General Data Protection Regulation (GDPR) serves as the legal basis.
    When processing personal data necessary for the performance of a contract to which the data subject is a party, Art. 6(1)b GDPR serves as the legal basis. This also applies to processing operations necessary for the performance of preliminary contractual measures.
    Where processing of personal data is necessary to comply with a legal obligation to which our company is subject, Art. 6(1)c GDPR shall serve as the legal basis.
    In the event that vital interests of the data subject or another natural person necessitate the processing of personal data, Art. 6(1)d GDPR serves as the legal basis.
    If the processing is necessary to protect a legitimate interest of our company or of a third party and if the interests, basic rights, and freedoms of the data subject do not outweigh the aforementioned interest, Art. 6(1)f GDPR serves as the legal basis for the processing.
    We designate the respective legal basis for processing in relation to the information on the individual data processing operations in this privacy policy statement or when you provide us with your personal data.

    2. Transfer / Recipient of data

    Within our company, only those offices will have access to your data that require it to protect our legitimate interests, or to fulfil our contractual or legal obligations, or to respond to your enquiries.
    We sometimes use external service providers to process your data. They process data on our behalf as order processors (e.g. for central IT services or the hosting of our website). The service providers who work for us as processors are only permitted to use the data in accordance with our instructions. We are legally responsible in such cases for appropriate data protection precautions at the companies we commission. The companies were carefully selected by us, commissioned in writing in accordance with the legal requirements, are obliged to follow our instructions, and are regularly inspected.
    A transfer of your personal data to third parties will only take place if this is legally permissible, in particular if

    • you have given your express consent to this in accordance with Art. 6(1)a GDPR,
    • the transfer in accordance with Art. 6(1)b GDPR is necessary for the processing of contractual relationships with you,
    • there is a legal obligation for the transfer according to Art. 6(1)c GDPR,
    • the transfer is necessary in accordance with Art. 6(1)f GDPR in order to protect our legitimate interests unless the interests of the user outweigh these.

    If we intend to transfer personal data to third parties, you can find more detailed information on this in the information on the individual data processing operations in this privacy policy statement or when you provide us with your personal data.

    3. Duration of data storage and deletion

    We only process and store personal data for the duration necessary to achieve the purpose of the processing. Should the purpose of processing cease to apply, then the data shall be deleted, unless there are legal obligations to retain data that prevent deletion. In the latter case, processing is restricted in order to comply with storage obligations.
    You will find more details in connection with the information on the individual data processing operations in this privacy policy statement or when providing your personal data.

    4. Data protection

    We use SSL or TLS encryption during website visits and to protect the transfer of content. You can recognise this by seeing that the key or lock symbol in the lower status bar of your browser is closed, which your browser displays when an SSL connection is established.
    We also use suitable technical and organisational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction, and against unauthorised access by third parties. Our security measures are continually improved in line with technological developments.

    5. Rights of the data subject

    You have the following rights with regard to personal data pertaining to you:
    • the right to withdraw consent;
    • the right to information;
    • the right to rectification or erasure;
    • the right to restrict processing;
    • the right to object to processing;
    • the right to data portability;
    • the right to complain to a supervisory authority.

    You can find more information on these rights under item IV in these instructions.

    The following provisions contain more detailed information on the individual data processing procedures, for example, which personal data is collected, for which purposes it is used, on what basis we are entitled to collect the data, how long it is stored for, and, if applicable, to whom it is transferred:

    1. Data processing when visiting the website
    When you visit our website, the browser used on your end device automatically sends information to our website server. The following data is connected in this process:
    • the IP address of the requesting computer;
    • the date and time of access;
    • the name and URL of the file retrieved;
    • the website from which access was gained (referrer URL);
    • the browser used and, if applicable, the operating system of your computer as well as the name of your access provider;
    • the names of files that were downloaded.

    This information is stored temporarily in a so-called log file. This does not include your IP addresses or any other data that allows the data to be attributed to you. This data is not stored together with other personal data about you.
    The above data will be processed by us for the following purposes:

    • displaying the website;
    • ensuring a smooth connection setup to the website;
    • ensuring convenient use of our website;
    • evaluating system security and stability; and
    • for further administrative purposes.

    The system’s temporary storage of the IP address is necessary to enable the transfer of website data to the user’s computer and thus display of the website content accessed. Storage in log files takes place in order to ensure the functionality of the website. The data is also used to optimise the website and to ensure the security of our information technology systems.
    The legal basis for the data processing is Art. 6(1)f GDPR. Our legitimate interest follows from the data collection purposes listed above. We never use the collected data for the purpose of drawing conclusions about your person.
    Please note that, in the event of data processing on the basis of Art. 6(1)f GDPR, you have the right to object to the processing in accordance with Art. 21 GDPR. You can find further information on this subject in item IV. 10 of this privacy policy statement.
    We also use cookies when you visit our website. You can find more explanations on this under section 2 of this privacy policy statement.

    2. Cookies

    We use cookies on our website. These are small files automatically created by your browser and stored on your end device (laptop, tablet, smartphone, or similar) when you visit our website. Cookies do not cause any damage to your end device and do not contain any viruses, trojans, or other malware.
    Information stored in the cookie arises in connection with the specific end device used in each case. However, this does not mean that we thereby gain direct knowledge of your identity.
    On the one hand, the use of cookies serves to make the use of our website more pleasant for you. For example, we use so-called session cookies to recognise that you have already visited individual pages of our website. These are automatically deleted after you leave our website.
    In addition, we also use temporary cookies to optimise user-friendliness, and these are stored on your end device for a certain fixed period of time, which may vary depending on the cookie. If you visit our website again to use our services, it is automatically recognised that you have already visited us and which entries and settings you made, so that you do not have to enter them again.
    We use the cookies to make visiting our website more pleasant and simpler for you. The data processing is based on Art. 6(1)f GDPR. We have a legitimate interest in storing cookies in order to provide our services without technical errors and in an optimised manner.
    Please note that, in the event of data processing on the basis of Art. 6(1)f GDPR, you have the right to object to the processing in accordance with Art. 21 GDPR. You can find more information on this under item IV. 10 of this privacy policy statement.
    Most browsers accept cookies automatically. You can, however, configure your browser according to your wishes so that, for example, no cookies are stored on your computer or a notice always appears before a new cookie is created. You can also delete the cookies at any time in the security settings of your browser.
    However, the complete deactivation of cookies may mean that you cannot use all the functions of our website.

    3. The use of Google Analytics

    We use Google Analytics to analyse website use. The data collected from this is used to optimise our website and advertising measures.
    Google Analytics is a web analytics service operated and provided by Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, United States). Google processes website usage data on our behalf and is contractually committed to measures to ensure the confidentiality of the data processed.

    During your visit to the website, the following are some of the data recorded:
    • the pages accessed;
    • your behaviour on the pages;
    • your approximate location (country and city);
    • your IP address (in truncated form, so that no clear assignment is possible);
    • technical information such as browser, internet provider, end device, and screen resolution;
    • the source of origin of your visit (i.e., via which website or via which advertising medium you came to us).

    This data is transferred to a Google server in the USA. Google complies with the data protection provisions of the “EU-US Privacy Shield” agreement.
    Google Analytics stores cookies in your web browser for a period of two years since your last visit. These cookies contain a randomly generated user ID which can be used to recognise you on future visits to the website.
    The recorded data is stored together with the randomly generated user ID, enabling the evaluation of pseudonymous user profiles. This user-related data is automatically deleted after 14 months. Other data remain stored in aggregated form indefinitely.
    The data processing is based on your consent pursuant to Art. 6(1)a GDPR.

    If you do not agree with the collection, you can carry out a one-time installation of to cancel it. You can also deactivate Google Analytics[ga-optout text=”click here.”]
    For more information on Google’s use of data, settings, and opt-out options, please see Google’s privacy policy: https://www.google.com/policies/privacy/

    4. Data processing when contacting us by e-mail

    If you contact us by e-mail, we will store the data you provide and only use it to process your request and to contact you to handle your request. The legal basis for the processing of the data is Art. 6(1)f GDPR. Our legitimate interest follows from the processing of your request, which is not opposed by any overriding interests on your part, as you contact us voluntarily for this purpose.
    Please note that, in the event of data processing on the basis of Art. 6(1)f GDPR, you have the right to object to the processing in accordance with Art. 21 GDPR. You can find further information on this subject in item IV. 10 of this privacy policy statement.
    If the contact is aimed at the conclusion of a contract, the additional legal basis for the processing is Art. 6(1)b GDPR.
    The data will be deleted by us when storage is no longer necessary, in particular when the processing of your enquiry has been completed. The further use of data that we have stored for other purposes and that we are entitled to process on the basis of another legal basis (e.g., in relation to data required for the performance of the contract) remains unaffected by this. We restrict processing to the extent necessary to comply with legal retention obligations where these exist. Irrespective of this, you are entitled to your rights as a data subject. For more details, please refer to our information on the rights of the data subject under item IV of the privacy policy statement.

    As a data subject, you have the following rights:

    1. The right to withdraw consent

    If you have given your consent to the processing of your data, you have the right to withdraw your consent at any time in accordance with Art. 7(3) GDPR. This has the consequence that we may no longer continue the data processing in the future, insofar as we were permitted to do so on the basis of your consent. The lawfulness of the processing carried out up to the withdrawal remains unaffected, i.e., the processing carried out in the past on the basis of the consent remains lawful.
    If you wish to withdraw your consent, it is sufficient, for example, to send an e-mail to the Data Protection Officer at dsb@www.crivit-bikes.com or using the contact addresses in item I.

    2. The right to confirmation and information

    You have the right to request confirmation from us, in accordance with Art. 15 of the GDPR, as to whether personal data concerning you is being processed. You also have the right to obtain information free of charge about your personal data processed by us. In particular, you can request information about:

    • the purposes of the processing;
    • the category of the personal data;
    • the categories of participants that your data was or will be transferred to;
    • the planned storage duration;
    • the existence of a right to rectification, erasure, restriction of processing, and a right to object;
    • the existence of a right of complaint;
    • all available information about the origin of your data, if it has not been collected at our company;
    • and regarding the existence of automated decision-making, including profiling, and, if applicable, meaningful information on the details thereof.

    3. The right to rectification

    You have the right, in accordance with Art. 16 GDPR, to demand the immediate rectification of inaccurate or incomplete personal data stored by us.

    4. The right to deletion

    You have the right to request the deletion of your personal data stored by us in accordance with Art. 17 GDPR if one of the following grounds applies:

    – the personal data are no longer necessary for the purposes for which they were collected or otherwise processed.
    – you withdraw the consent on which the processing was based and there is no other legal basis for the processing.
    – you object to processing based on Art. 6(1)b or f GDPR and there are no overriding legitimate grounds for processing, or you object to the processing of data for the purpose of direct advertising.
    – the personal data were processed unlawfully.
    – the deletion of the personal data is necessary for compliance with a legal obligation under EU or Member State law to which we are subject.
    – the personal data was collected in relation to information society services offered pursuant to Art. 8(1) GDPR.

    This does not apply insofar as the processing is necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the assertion, exercise, or defence of legal claims.

    5. The right to restrict processing

    You have the right to request the restriction of the processing of your personal data in accordance with Art. 18 GDPR if

    – you dispute the accuracy of the data for a duration that allows us to verify the accuracy of your data;
    – the processing is unlawful but you object to its erasure and request the restriction of processing instead;
    – we no longer need the data, but you need it to assert, exercise or defend legal claims; or
    – you have objected to the processing in accordance with Art. 21 GDPR as long as it has not been established whether our legitimate grounds override yours.

    In this case, your data, apart from being stored, may only be processed with your consent or for certain legally defined purposes, in particular for legal prosecution and the protection of the rights of other persons. We will notify you before the restriction is lifted.

    6. The right to data portability

    You have the right, in accordance with Art. 20 GDPR, to receive the personal data you have provided to us in a structured, commonly used and machine-readable format, or to request that it be transferred to another responsible person.

    7. The right to object to processing

    Under certain conditions, you also have the right to object to the processing of your personal data pursuant to Art. 21 GDPR. Please read our separate instructions on this under section 10: Separate information about your right to object according to Art. 21 GDPR.

    8. Notice on exercising the rights under sections 1 – 7

    You may contact us at any time if you wish to exercise the aforementioned rights. To do this, it is sufficient, for example, to send an e-mail to the Data Protection Officer atdsb@www.crivit-bikes.com or you can contact the addresses given in item I.

    9. The right to appeal to a supervisory authority

    Furthermore, you have the right to complain to a supervisory authority in accordance with Art. 77 GDPR. For example, you can contact the supervisory authority of your habitual place of residence or place of work or of our registered office for this purpose. You can find a list of the supervisory authorities here:

    https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html

    10. Separate information about your right to object according to Art. 21 GDPR

    In the following, we would like to draw your attention in particular to your right of objection in accordance with Art. 21 GDPR:

    The right to object
    a) Individual right to object according to Art. 21(1) GDPR
    The prerequisite for this right to object is that data processing takes place on the basis of the provisions of Art. 6(1)e or f GDPR.
    Art. 6(1)e regulates the case where processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority placed in the responsible person. This primarily applies to holders of sovereign powers such as the Federal Government, the Federal States, and their authorities or entrusted private persons.
    Art. 6(1)f GDPR permits processing if this is necessary to safeguard the legitimate interests of the controller or a third party unless the interests or fundamental rights and freedoms of the data subject override these.
    If the data processing is carried out on one of these bases, you have the right to object to the processing of personal data relating to you at any time on grounds relating to your particular situation. This is also valid for profiling based on these provisions.
    Consequences of this objection: Following an objection, we will no longer process the data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms, or unless the processing is for the assertion, exercise, or defence of legal claims.

    b) Right to object to the processing of data for direct marketing purposes
    This right to object is conditional upon your data being processed for the purposes of direct advertising.
    In this case, you have the right to object to data processing for the purpose of such advertising at any time. This also applies to profiling when it is related to direct advertising.
    The consequence of the objection is that the data are no longer processed for these purposes.

    c) Exercising the right to object
    You can contact us at any time if you wish to exercise your right to object in accordance with a) or b). In order to do this, it is sufficient, for example, to send an e-mail to the Data Protection Officer atdsb@www.crivit-bikes.com or you can use the contact addresses given in item I.

    We reserve the right to make changes at any time in order to ensure that our data protection information always complies with the current legal requirements. This is also valid in the event that the data protection information has to be adapted due to new or revised products or services.

    © COPYRIGHT - DELTA-SPORT HANDELSKONTOR GMBH