Data Protection Declaration

In the following, we inform you about how and why we collect your personal data when you use our website or contact us by e-mail, by phone, or using a contact form. Personal data within the meaning of Art. 4(1) EU General Data Protection Regulation (GDPR) refers to all data that can be personally related to you, e.g. your name, address, e-mail addresses and user behaviour.

I. Name and contact information for controller and data protection officer

The controller responsible for processing personal data within the meaning of Art. 4(7) GDPR is:

Sportspar GmbH
Gustav-Adolf-Ring 7
04838 Eilenburg (Germany)

Tel. +49 (0) 3423 7007-0 
E-mail: service@sportspar.com 
(please refer to our statutory information page at sportspar.com/legal-notice).

Our data protection officer, lawyer Mr. Christian Krösch, SLK Compliance Services GmbH, Königsbrücker Straße 76, 01099 Dresden, can be contacted by phone on +49 351 8967 6360 or by e-mail at datenschutz[at]slk-compliance.de.

II. General information on the collection and transfer of personal data and the period for which it is stored

Your personal data is mainly processed for the purposes of providing access to our website and establishing and fulfilling a contractual relationship with you. When you contact us by email, by phone or using a contact form, we store the data you give us (e.g. your e-mail address, your name and phone number if applicable) in order to process your enquiry. The principal legal basis for this is Art. 6(1)(b) GDPR. Moreover, we may make use of your separate consent pursuant to Art. 6(1)(a). We also process your data in order to meet our legal obligations, particularly those incumbent on us under commercial and fiscal law. The legal basis for this form of processing is Art. 6(1)(c) GDPR. If necessary, we also process your data on the basis of Art. 6(1)(f) GDPR in order to pursue our legitimate interests or those of third parties. These interests can for example arise in connection with advertising (insofar as you have not objected to the use of your data for this purpose), the exercise or defence of legal claims, guarantees of our company’s IT security, business management measures, and the ongoing development of products and services.

We only disclose your personal data to third parties if you have consented to us doing so pursuant to Art. 6(1)(a) GDPR, if the disclosure of your personal data is necessary to establish, exercise, or defend legal claims or to protect our legitimate interests pursuant to Art. 6(1)(f) GDPR (e.g. affiliated companies, courts, tax consultants, solicitors) and there is no reason to assume that you have an overriding interest in the non-disclosure of your data that is worthy of protection, if your data has to be disclosed to fulfil a legal obligation as per Art. 6(1)(c) GDPR (e.g. financial authorities), or if the disclosure of your data is permitted by law and necessary for the performance of a contract to which you are a party, as described in Art. 6(1)(b) GDPR (e.g. banks, logistics providers, IT service providers).

Your personal data may be transferred to a third country depending on which of our website services you use or request from us. We only transmit personal data to recipients outside the European Economic Area (EEA) if the European Commission has confirmed that an adequate level of data protection exists in the respective third country, if further appropriate data privacy guarantees (e.g. binding internal data privacy regulations or EU Standard Contractual Clauses (SCC)) have been put in place, or if derogations exist within the meaning of Art. 49 GDPR.

We will erase your personal data as soon as it is no longer required for any of the purposes specified in this Privacy Policy. After the contractual relationship with you has expired, we will retain your personal data for as long as the law obliges us to do so. This is regularly required in connection with the statutory retention periods and obligations to produce evidence specified for example in the Commercial and Fiscal Codes. The retention periods stipulated in this legislation can be up to ten years. Personal data may also be retained for the period in which claims can be brought against us (statutory limitation period of three or up to thirty years).

You are only obliged to furnish us with the personal data which we require in connection with the provision and use of certain functions on our website, which we require to establish and execute a contractual relationship with you and fulfil the contractual duties associated with this relationship, or which we are obliged to collect by law. Without this data, we will be unable to provide access to the website and certain of its functions, to conclude a contract with you, or to execute such a contract.

III. Collection and processing of personal data on our website

Visiting our website

If you are only using the website for information purposes and do not register or transfer information to us in any other way, we will only collect the personal data which your browser transmits to our server and which is technically necessary to display our website and guarantee its stability and security. This data encompasses your IP address, the query sent by your browser, and the time at which this query is sent. The status and quantity of data transferred in connection with this query are also recorded.

The temporary storage of the IP address by the system is necessary to ensure that the website can be displayed in your browser. This is why your IP address must be stored for the duration of the session. The other data is processed to guarantee the functionality of the website. We also use this data for the purpose of optimising our website and ensuring that our information technology systems are stable and secure. The legal basis for this is Art. 6(1)(f) GDPR, based on the weighing of our overriding legitimate interests as mentioned above.

The data we collect is transferred to external service providers (hosting providers, IT service providers, web agencies), who help us process the data for the purposes specified above.

This data will be erased as soon as it is no longer required for the purpose for which it was collected. If the data was collected for the purpose of displaying the website, it will be erased when the respective session ends. Otherwise, the data will be erased within no more than 14 days of the data subject accessing the website.

Google Fonts

For our website we use Google Fonts provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). When you visit our website, Google receives an information that you accessed the respective sub-website of our website. Communication data (such as IP address, browser data, device information) is transmitted to Google. This transmission takes place regardless of Google providing a user account which you could log in or there is no user account. If you are logged into Google, your data will be directly assigned to your account. If you do not want your data to be assigned to your Google profile, you will need to log out before clicking on the button. Google stores your data as a user profile and uses this data for advertising, market research and/or for configuring its website in a way that meets the user’s needs. This data (including data relating to users who are not logged in) is analysed mainly for the purpose of delivering advertising that meets the user’s needs and informing other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles. If you wish to exercise this right, you will need to contact YouTube.

We use this service to display our website in a uniform and appealing way. When you visit one of our websites, your browser loads the necessary web fonts into your browser cache in order to display texts and fonts correctly. If your browser does not support web fonts, one of the standard fonts will be automatically used by your browser instead. Legal basis for the use of Google fonts is Art. 6(1)(f) GDPR.

Besides processing the aforesaid data through Google, we transmit the data collected to third parties (e.g. providers of platform, hosting, support and analytical services) for processing in line with the purposes specified above (implementation of and assistance with delivery of the website).

In the exceptional cases where Google transfers personal data to Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, these transfers are subject to the standard data protection clauses mentioned in Art. 46 GDPR. You might demand access to these clauses at Google.

The personal data collected will be erased as soon as it is no longer required for processing purposes; this is usually the case once you leave the website.

IV. Other information about data processing on and off our website

Contact and communication

As a customer, business partner, prospect or supplier, we only collect your personal data if you send it to us by e-mail, post, telephone or through a contact form on our website. In this case, we collect the information disclosed during the course of the correspondence and/or cooperation. This specifically includes the names and contact data transmitted along with the date and reason for the contact. 

The personal data we collect from you is used to provide the products and services you require and to correspond with you (legal basis Art. 6(1)(b) GDPR), to comply with legal obligations (legal basis Art. 6(1)(c) GDPR), or for the purposes of the legitimate interests pursued by ourselves or by third parties (legal basis Art. 6(1)(f) GDPR) as described in this Privacy Policy.

You are under no obligation to provide the personal data specified above. The data provided may be required for the conclusion of a contract. Unless you provide this data, it may not be possible to communicate with you or to conclude and execute a contract.

Based on the statutory regulations or a contractual agreement, the data that is relevant in each individual case is transferred to public bodies where overriding legal requirements exist, to external service providers or other contractors, and to other external bodies where you have given your consent or where the transfer of your data is permitted on grounds of overriding legitimate interest.

This data will be erased as soon as it is no longer required for the purpose for which it was collected. If the data provided is subject to statutory retention periods under fiscal or commercial law, it will be stored for the obligatory ten-year retention period and then erased unless you have consented to it being stored for a longer period or your data has to be processed further for the purpose of establishing, exercising, or defending legal claims (statutory limitation period of three or up to thirty years).

V Objection or withdrawal of consent to the processing of your data

If you have consented to the processing of your data, you can withdraw this consent at any time. Once you have sent it to us, this withdrawal will influence the permissibility of the processing of your personal data.

If the processing of your personal data is based on the weighing of interests, you are entitled to object to this processing. This is particularly the case if the processing is not necessary for the fulfilment of a contract with you, as specified in the following description of the respective functions. If you exercise your right to object, we will ask you to specify the reasons why we should not continue processing your personal information as before. If your objection is justified, we will investigate the situation and either stop or adjust the data processing or inform you of the compelling, legitimate grounds on which we are obliged to continue.

You can of course object to the processing of your personal data for advertising and data analysis purposes at any time. You can send us your objection to advertising using the contact information provided in section I.

VII. Your rights

Pursuant to Art. 15 GDPR, you have the right to request information from us about the personal data we are processing. In particular, you may request information about the purposes for which your data is processed, the categories of personal data processed, the categories of recipients to whom your data has been or will be disclosed, the planned retention period, the existence of a right to rectification, erasure, restriction of processing, the existence of a right to object, the existence of a right of appeal, the source of your data if it was not collected by us, the existence of automated decision-making processes including profiling and, if applicable, meaningful detailed information about what these involve.

Pursuant to Art. 16 GDPR, you have the right to request that inaccurate personal data held by us about you be rectified or incomplete data be completed without undue delay. Pursuant to Art. 17 GDPR, you have the right to request that we erase personal data held by us about you unless this data needs to be processed to exercise the right of freedom of expression and information, to comply with a legal obligation, for reasons of public interest, or to establish, exercise or defend legal claims.

Pursuant to Art. 18 GDPR, you have to right to request that the processing of your personal data be restricted if you contest its accuracy, if the processing of your data is unlawful but you oppose its erasure, if we no longer need your data but you need it to establish, exercise, or defend legal claims, or if you have objected to the processing of your data in accordance with Art. 21 GDPR. 

Pursuant to Art. 20 GDPR, you have to right to request that the personal data you provided be placed at your disposal in a structured, commonly used and machine-readable format or that it be transferred to another controller. 

Pursuant to Art. 7(3) GDPR, you have the right to withdraw your consent to our processing of your personal data at any time. If you do so, we will in future cease the data processing on which your consent was based.

Pursuant to Art. 77 GDPR, you also have the right to lodge a complaint with a supervisory authority regarding our processing of your personal data, particularly in the member state of your habitual residence, place of work or placed of the alleged infringement, if you consider that the processing of your personal data infringes the GDPR.