Privacy policy

The person responsible for data processing is:

Sport-Tec GmbH
Physio & Fitness
Lemberger Straße 255
D-66955 Pirmasens

E-mail: info@sport-tec.de
Phone: +49 (0) 6331 1480-0

Thank you for your interest in our online store. The protection of your privacy is very important to us. Below we inform you in detail about the handling of your data.

Change cookie settings

1. Access data and hosting

You can visit our websites without providing any personal details. Each time a web page is accessed, the web server automatically stores a so-called server log file, which contains, for example, the name of the requested file, your IP address, the date and time of access, the amount of data transferred and the requesting provider (access data), and documents the access. This access data is analysed solely for the purpose of ensuring the smooth operation of the website and improving our service. This serves to safeguard our overriding legitimate interests, following a balancing of interests, in the correct presentation of our service in accordance with Article 6(1)(f) of the GDPR.

All access data is deleted no later than seven days after the end of your visit to the website. All access data is processed only for as long as is necessary to achieve the aforementioned processing purposes.

Hosting

The services relating to the hosting and display of the website are partly provided by our service providers as part of data processing on our behalf. Unless otherwise stated in this privacy policy, all access data and all data collected via the forms provided for this purpose on this website are processed on their servers. If you have any questions regarding our service providers and the basis of our cooperation with them, please use the contact details provided in this privacy policy.

2. Data processing for contract fulfilment and establishing contact

2.1 Data processing for contract fulfilment

For the purpose of contract fulfilment (including enquiries regarding and the handling of any existing claims arising from warranty, breach of contract and the right of withdrawal, as well as any statutory obligations to update information) in accordance with Article 6(1)(b) of the GDPR, we collect personal data if you voluntarily provide it to us as part of your order. Mandatory fields are marked as such, as in these cases we absolutely require the data for contract fulfilment and cannot dispatch the order without it. The data collected is specified in the relevant input forms.

Further information on the processing of your data, in particular regarding its disclosure to our service providers for the purposes of order processing, payment processing and dispatch, can be found in the following sections of this privacy policy. Once the contract has been fully fulfilled, your data will be subject to restricted processing and will be deleted upon expiry of the retention periods under tax and commercial law in accordance with Article 6(1), first sentence, point (c) of the GDPR, unless you have expressly consented to the further use of your data in accordance with Article 6(1), first sentence, point (a) of the GDPR, or we reserve the right to use your data beyond this scope where such use is permitted by law and about which we inform you in this policy.

Merchandise management system
We use merchandise management systems provided by external service providers for order and contract processing. Our service providers act on our behalf within the framework of data processing on our behalf. If you have any questions regarding our service providers and the basis of our cooperation with them, please use the contact details provided in this privacy policy.

2.2 Customer account

Where you have given your consent in accordance with Article 6(1), first sentence, point (a) of the GDPR by choosing to open a customer account, we will use your data for the purpose of opening the customer account and for storing your data for future orders on our website. You may delete your customer account at any time, either by contacting us via the contact details provided in this privacy policy or by using the function provided for this purpose within your customer account. Once your customer account has been deleted, your data will be deleted, unless you have expressly consented to the continued use of your data in accordance with Article 6(1), first sentence, point (a) of the GDPR, or we reserve the right to use your data for other purposes that are permitted by law and about which we inform you in this policy.

2.3 "homie" chatbot (AI-powered product advice)

For automated product and service advice, we use the AI-powered chatbot "homie" from baoo Technologies GmbH, Salierring 32, 50677 Cologne ("homie") in our online shop. homie enables you to ask questions about our product range and raise any concerns you may have. Your input is processed to provide you with appropriate answers and product recommendations. Separately, your chat input is technically processed to respond to your enquiry, and your use of the chatbot is analysed on a pseudonymous basis.

homie acts on our behalf (Article 28 of the GDPR). Data is stored within the EU (data centre in Frankfurt am Main). To answer your enquiries, chat entries are transferred to OpenAI, L.L.C., 3180 18th Street, San Francisco, CA 94110, USA. Where personal data is processed, the data transfer is carried out on the basis of the European Commission's Standard Data Protection Clauses (Article 46(2)(c) of the GDPR). The chatbot is also hosted on the infrastructure of Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA. Vercel is certified under the EU-US Data Privacy Framework.

The use of the chatbot and the pseudonymous analysis are based on your consent (Article 6(1), first sentence, point (a) of the GDPR). Where the collection and processing of special categories of personal data (in particular health data) are concerned, this is carried out on the basis of your prior, explicit and informed consent in accordance with Article 9(2)(a) in conjunction with Article 6(1), first sentence, point (a) of the GDPR. Please note that providing personal data is not required for the use of the chatbot as a whole and is not demanded. We therefore ask that, as a general rule, you do not enter any personal data in the chat, or only that which is absolutely necessary for the consultation.

You may withdraw your consent at any time with future effect via the (cookie/consent settings). Further information on data protection at homie can be found here.

Contact us

As part of our customer communications, we collect personal data in accordance with Article 6(1), first sentence, point (b) of the GDPR for the purpose of processing your enquiries, provided you voluntarily supply this information to us when contacting us (e.g. via the contact form, live chat tool or email). Mandatory fields are marked as such, as in these cases we require the data to process your enquiry. The data collected is specified in the relevant input forms. Once your enquiry has been fully processed, your data will be deleted, unless you have expressly consented to the further use of your data in accordance with Article 6(1), first sentence, point (a) of the GDPR, or we reserve the right to use your data for other purposes that are permitted by law and about which we inform you in this statement.

3. Data processing for the purpose of order fulfilment

To fulfil the contract in accordance with Article 6(1)(b) of the GDPR, we pass on your data to the delivery service provider commissioned to carry out the delivery, insofar as this is necessary for the delivery of the goods ordered. If you have any questions regarding our service providers and the basis of our cooperation with them, please use the contact details provided in this privacy policy.

The same applies to the transfer of data to our manufacturers or wholesalers in cases where they handle the dispatch on our behalf (drop-shipping). These are regarded as delivery service providers within the meaning of this privacy policy.

Transfer of data to delivery service providers for the purpose of dispatch notification
Provided that you have given us your express consent to this during or after placing your order, we will, on this basis and in accordance with Article 6(1), first sentence, point (a) of the GDPR, pass on your email address and telephone number to the selected delivery service provider so that they can contact you prior to delivery for the purpose of notifying you of the delivery or arranging a delivery time. You may withdraw your consent at any time by sending a message via the contact details provided in this privacy policy. Following withdrawal, we will delete the data you have provided for this purpose, unless you have expressly consented to the continued use of your data or we reserve the right to use your data for other purposes that are permitted by law and about which we inform you in this policy. If you have any questions regarding our service providers and the basis of our cooperation with them, please contact us using the contact details provided in this privacy policy.

Deutsche Post AG
Charles-de-Gaulle-Str. 20
53113 Bonn
Germany

DPD Deutschland GmbH
Wailandtstraße 1
63741 Aschaffenburg
Germany

Schenker Deutschland AG
Schlachte 15-18
28195 Bremen
Germany

GT Fitness + Logistik GmbH
Im Garbrock 15
48683 Ahaus
Germany

4. Data processing for payment processing

When processing payments in our online shop, we work with the following partners: technical service providers, credit institutions and payment service providers.

4.1 Data processing for transaction processing

Depending on the selected payment method, we pass on the data necessary for processing the payment transaction to our technical service providers, the commissioned credit institutions or the selected payment service provider, insofar as this is necessary to process the payment. This serves the purpose of fulfilling the contract in accordance with Article 6(1), first sentence, point (b) of the GDPR. In some cases, the payment service providers collect the data required for processing the payment themselves, e.g. on their own website or via a technical integration into the ordering process. In this respect, the privacy policy of the respective payment service provider applies.

Depending on the payment method selected, data may be transferred to third countries outside the EU/EEA for which the European Commission has, by means of a decision, determined that an adequate level of data protection exists. Where data is transferred to third countries outside the EU/EEA for which the European Commission has not adopted a decision on an adequate level of data protection, the cooperation is based on the European Commission´s Standard Data Protection Clauses.

If you have any questions regarding our payment processing partners or the basis of our cooperation with them, please use the contact details provided in this privacy policy.

4.2 Data processing for the purposes of fraud prevention and optimising our payment processes

Where necessary, we may provide the aforementioned service providers with further data, which they use, together with the data required to process the payment, for the purposes of fraud prevention and optimising our payment processes (e.g. invoicing, handling disputed payments, supporting our accounts department). This serves, in accordance with Article 6(1), first sentence, point (f) of the GDPR, to safeguard our legitimate interests - which, following a balancing of interests, take precedence - in protecting ourselves against fraud and in ensuring efficient payment management.

4.3 Credit check

Where we make an advance payment (for purchases on account), we obtain identity and creditworthiness information from specialist service providers (credit reference agencies). To this end, we will transfer your personal data required for a credit check to:

CRIF GmbH
Victor-Gollancz-Straße 5
76137 Karlsruhe
Germany

infoscore Consumer Data GmbH
Rheinstraße 99
76532 Baden-Baden
Germany

This serves to safeguard our overriding legitimate interests, as determined following a balancing of interests in accordance with Article 6(1)( 1(f) of the GDPR to assess the creditworthiness and willingness to pay of our potential customers prior to the conclusion of a contract, thereby avoiding losses on the purchase price, and is necessary for the conclusion of the contract in accordance with Article 22(2)(a) of the GDPR. Appropriate measures to safeguard your rights, freedoms and legitimate interests are taken into account in this regard. You have the option of setting out your position and challenging the decision by contacting us via the contact details provided in this privacy policy. Once the contract has been fully fulfilled, your data processed for this purpose will be deleted, unless you have expressly consented to the continued use of your data or we reserve the right to use your data for other purposes that are permitted by law and about which we inform you in this statement.

4.4 Identity and credit checks when selecting Klarna payment services

Purchase on account via Klarna
If you choose to use the payment services of Klarna Bank AB (publ), Sveavägen 46, 111 34 Stockholm, Sweden (hereinafter "Klarna"), we will pass on your data to Klarna for the purposes of payment and contract processing in accordance with Article 6(1)(b) of the GDPR. This data is transferred so that Klarna can issue an invoice in accordance with your requested payment method and carry out an identity and creditworthiness check. Please note that we can only offer you the relevant Klarna payment method if the results of the creditworthiness check permit it. Detailed information on this and on the credit reference agencies used can be found in the Please refer to Klarna´s privacy policy .

4.5 Identity and credit checks when selecting "Purchase on account" via PayPal and Ratepay

If you choose the "purchase on account" payment method (offered via Ratepay GmbH, Franklinstraße 28-29, 10587 Berlin (hereinafter "Ratepay") and PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, 2449 Luxembourg (hereinafter "PayPal")), we will forward your data to Ratepay for the purposes of payment and contract processing in accordance with Article 6(1)(b) of the GDPR. This data is transferred so that Ratepay can issue an invoice in accordance with your requested invoicing method and carry out an identity and creditworthiness check. Please understand that we can only offer you the option to purchase on account via Ratepay if the results of the creditworthiness check permit this. Detailed information on this and on the credit reference agencies used can be found in the Please refer to Ratepay´s privacy policy . Further information on data protection at PayPal can be found here.

4.6 Instalment payment option

If you select the instalment payment option and provide the necessary data protection consent in accordance with Article 6(1)(a) of the GDPR, personal data (first name, surname, address, email, telephone number, date of birth, IP address, gender) together with the data required for transaction processing (product, invoice amount, due dates, total amount, invoice number, taxes, currency, order date and time) will be transferred to our partner TeamBank AG, Beuthener Straße 25, 90471 Nuremberg, Germany.
To verify the customer´s identity and creditworthiness, our partner carries out enquiries and obtains information from publicly accessible databases and credit reference agencies. For details of the providers from whom information and, where applicable, creditworthiness data are obtained using mathematical and statistical methods, as well as further details regarding the processing of your data following its transfer to our partner TeamBank AG, please refer to their privacy policy, which can be found here: https://www.easycredit-ratenkauf.de.

Our partner, TeamBank AG, uses the information received regarding the statistical probability of a payment default to make a balanced decision on whether to establish, continue or terminate the contractual relationship. You have the option of contacting our partner, TeamBank AG, to set out your position and contest the decision. The consent to the transfer of data given during the ordering process may be withdrawn at any time, even without giving reasons, by notifying us, with effect for the future.

4.7 Engagement of debt collection agencies

We will pass on your data to our appointed debt collection agency, Riverty Services GmbH, Inge-Reitz Straße 5-7, 55120 Mainz, Germany, if our payment claim has not been settled despite a prior reminder. In this case, the claim will be collected directly by the debt collection agency. This serves to fulfil the contract in accordance with Article 6(1), first sentence, point (b) of the GDPR, as well as to safeguard our overriding legitimate interests, following a balancing of interests, in the effective assertion and enforcement of our payment claim in accordance with Article 6(1), first sentence, point (f) of the GDPR.

5. Advertising by email and post

5.1 Email newsletters requiring subscription, newsletter tracking with separate consent

When you subscribe to our newsletter, we use the data required for this purpose or data you have provided separately to send you our email newsletter on a regular basis, based on your consent in accordance with Article 6(1)(a) of the GDPR. You can unsubscribe from the newsletter at any time, either by contacting us using the details provided below or via a link provided for this purpose in the newsletter. Once you have unsubscribed, we will remove your email address from the mailing list, unless you have expressly consented to the further use of your data in accordance with Article 6(1)(a) of the GDPR, or we reserve the right to use your data for other purposes that are permitted by law and about which we inform you in this statement.

If you have also given us your consent in accordance with Article 6(1), first sentence, point (a) of the GDPR to analyse our newsletters, we will also analyse your interaction with our newsletter by measuring, storing and evaluating open rates and click-through rates for the purpose of designing future newsletter campaigns ("newsletter tracking").

For this analysis, the emails sent contain single-pixel technologies (e.g. so-called web beacons, tracking pixels), which are stored on our website. For the purposes of this analysis, we link in particular the following "newsletter data"

the page from which the page was requested (known as the referrer URL),
the date and time of the request,
a description of the type of web browser used,
the IP address of the requesting computer,
the email address,
the date and time of registration and confirmation

and the one-pixel technologies with your email address or your IP address and, where applicable, an individual ID. Links contained in the newsletter may also contain this ID.

You can opt out of newsletter tracking at any time, either by sending a message via the contact details provided or via a link provided for this purpose in the newsletter.

The information will be stored for as long as you remain subscribed to the newsletter.

Email newsletters without registration and your right to object

If we receive your email address in connection with the sale of a product or service, we reserve the right to send you regular offers by email for similar products from our range to those you have already purchased. We will not send you such offers if you have already objected to this use of your email address or are registered on a Robinson list, which we are legally obliged to comply with.

You may also object to this use of your email address at any time, easily and free of charge, by sending a message via the contact details provided in this privacy policy or via a link provided for this purpose in the promotional email; that is, without incurring any costs other than the transmission costs in accordance with standard rates. Once you have unsubscribed, we will remove your email address from the recipient list, unless you have expressly consented to the further use of your data in accordance with Article 6(1)(a) of the GDPR, or we reserve the right to use your data for other purposes that are permitted by law and about which we inform you in this policy.

5.2 Sending newsletters

Where applicable, the newsletter may also be sent by our service providers as part of data processing carried out on our behalf. If you have any questions regarding our service providers and the basis of our cooperation with them, please use the contact details provided in this privacy policy.

We use the "Inxmail" service provided by Inxmail GmbH, Wentzingerstr. 17, 79106 Freiburg im Breisgau, for newsletter distribution and tracking. For this purpose, we provide Inxmail with your email address and - where you have provided them voluntarily - further details, e.g. for personalised communication. Inxmail acts on our behalf. Processing takes place within the European Union. Your data will not be transferred to a third country in this context.

5.3 Sending review requests by email

Provided that you have given us your explicit consent to this during or after your order in accordance with Article 6(1)(a) of the GDPR, we will use your email address to ask you to leave a review of your order via the review system we use. This consent may be withdrawn at any time by sending a message via the contact details provided in this privacy policy or via a link provided for this purpose in the review request. Once you have withdrawn your consent, we will delete your email address from the recipient list, unless you have expressly consented to the further use of your data in accordance with Article 6(1)(a) of the GDPR, or we reserve the right to use your data for other purposes that are permitted by law and about which we inform you in this policy.

Where applicable, the review requests may also be sent by our service provider, Trusted Shops SE, Subbelrather Str. 15C, 50823 Cologne ("Trusted Shops").

When sending out review requests, we receive information from Trusted Shops regarding the respective status (e.g. whether the review request has been sent and whether it has been received). This is carried out in accordance with Article 6(1)(f) of the GDPR to fulfil our legitimate interest in receiving information about the review invitations, so that we can make any necessary improvements based on this, and to fulfil Trusted Shops´ legitimate interest in being able to offer this service.

We are jointly responsible with Trusted Shops for sending review requests and for collecting and displaying review and status information.

Within the framework of the joint responsibility between us and Trusted Shops, please contact Trusted Shops in the first instance regarding data protection queries and to exercise your rights; you can find their contact details here. For further information on data protection, please follow the link below here. Regardless of this, you can always contact us using the contact details provided in this privacy policy. Your enquiry will then, if necessary, be forwarded to the other data controller for a response.

5.4 Direct mail and your right to object

Furthermore, we reserve the right to use your first name, surname and postal address for our own advertising purposes, e.g. to send you interesting offers and information about our products by post. This serves to safeguard our legitimate interests, which prevail following a balancing of interests, in addressing our customers for advertising purposes in accordance with Article 6(1)(f) of the GDPR. You may object to the storage and use of your data for these purposes at any time by contacting us via the contact details provided in this privacy policy.

Once you have withdrawn your consent, we will remove your address from the mailing list, unless you have expressly consented to the further use of your data in accordance with Article 6(1), first sentence, point (a) of the GDPR, or we reserve the right to use your data for other purposes that are permitted by law and about which we inform you in this policy.

The promotional mailings are carried out as part of data processing on our behalf by a service provider to whom we pass on your data for this purpose. If you have any questions regarding our service providers and the basis of our cooperation with them, please use the contact details provided in this privacy policy.

6. Cookies and other technologies

General information

To make your visit to our website more engaging and to enable the use of certain features, we use technologies on various pages, including so-called cookies. Cookies are small text files that are automatically stored on your device. Some of the cookies we use are deleted at the end of the browser session, i.e. when you close your browser (so-called session cookies).Other cookies remain on your device and enable us to recognise your browser the next time you visit (persistent cookies). You can find the storage duration in the overview within your web browser´s cookie settings.

Privacy protection on end devices

When you use our online service, we employ technologies that are strictly necessary to provide the digital service you have expressly requested. The storage of information on your device or access to information already stored on your device does not require your consent in this respect.

For functions that are not strictly necessary, the storage of information on your device or access to information already stored on your device requires your consent. Please note that if you do not give your consent, parts of the website may not be fully accessible. Any consent you have given remains valid until you adjust or reset the relevant settings on your device.

Any subsequent data processing carried out by cookies and other technologies

We use technologies that are strictly necessary for the use of certain functions on our website. These technologies collect and process your IP address, the time of your visit, device and browser information, and information regarding your use of our website. This serves our overriding legitimate interests in optimising the presentation of our website, following a balancing of interests, in accordance with Article 6(1)(f) of the GDPR.

We also use technologies to fulfil the legal obligations to which we are subject (e.g. to be able to provide evidence of consent to the processing of your personal data), as well as for web analytics and online marketing. Further information on this, including the respective legal basis for data processing, can be found in the following sections of this privacy policy.

Cookie settings

You can find the cookie settings for your browser via the following links: Microsoft Edge™ / Safari™ / Chrome™ / Firefox™ / Opera™.

Provided you have consented to the use of these technologies in accordance with Article 6(1)(a) of the GDPR, you may withdraw your consent at any time by contacting us via the contact details provided in the privacy policy.

Change cookie settings

7. Use of cookies and other technologies

We use the following cookies and other third-party technologies on our website. Unless otherwise stated for individual technologies, this is based on your consent in accordance with Article 6(1)(a) of the GDPR. Once the purpose has ceased to apply and we have stopped using the relevant technology, the data collected in this context will be deleted. You may withdraw your consent at any time with future effect. Further information on your options for withdrawal can be found in the section "Cookies and other technologies". Further information, including the legal basis for our cooperation with the individual providers, can be found under the individual technologies. If you have any questions regarding the providers and the legal basis for our cooperation with them, please use the contact details provided in this privacy policy.

7.1 Use of Google services

We use the technologies of Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland ("Google") described below. The information automatically collected by Google's technologies regarding your use of our website is generally transmitted to a server operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, and stored there. Unless otherwise specified for individual technologies, data processing is carried out on the basis of an agreement concluded between joint controllers for the respective technology in accordance with Article 26 of the GDPR. Further information on data processing by Google can be found in the Google Privacy Policy.

Our service providers are based in and/or use servers in countries outside the EU and the EEA for which the European Commission has, by means of a decision, determined that an adequate level of data protection exists.

Our service providers are based in and/or use servers in countries outside the EU and the EEA. No adequacy decision has been issued by the European Commission for these countries. Our cooperation with them is based on the European Commission's Standard Data Protection Clauses.

Google Analytics
For the purpose of website analysis, Google Analytics automatically collects and stores data (IP address, time of visit, device and browser information, and information about your use of our website), from which usage profiles are created using pseudonyms. Cookies may be used for this purpose. If you visit our website from within the EU, your IP address is stored on a server located in the EU for the purpose of deriving location data and is then deleted immediately before the traffic is forwarded to other Google servers for processing. Data processing is carried out on the basis of a data processing agreement with Google.

If you do not give us consent in accordance with Article 6(1)(a) of the GDPR to the use of Google Analytics, no cookies will be stored on or read from your device. The data processing described in the preceding paragraphs will not take place. To close gaps in web analytics through behavioural and conversion modelling, pings containing data (user agent, information on your consent behaviour, screen resolution, IP address) are sent to Google.

Google Ads
For advertising purposes in Google search results and on third-party websites, the so-called Google remarketing cookie is set when you visit our website. This cookie automatically enables interest-based advertising by collecting and processing data (IP address, time of visit, device and browser information, and information about your use of our website) and by means of a pseudonymous cookie ID, and based on the pages you have visited, to enable interest-based advertising. Any further data processing only takes place if you have enabled the "personalised advertising" setting in your Google account. In this case, if you are logged into Google whilst visiting our website, Google uses your data together with Google Analytics data to create and define audience lists for cross-device remarketing.

For website analysis and event tracking, we use Google Ads Conversion Tracking to measure your subsequent usage behaviour if you have arrived at our website via a Google Ads advertisement. To this end, cookies may be used and data (IP address, time of visit, device and browser information, as well as information on your use of our website based on events specified by us, such as visiting a web page or subscribing to a newsletter) may be collected, from which usage profiles are created using pseudonyms.

If you do not give us consent in accordance with Article 6(1), first sentence, point (a) of the GDPR to the use of Google Ads, no cookies will be stored on or read from your device. The data processing described in the preceding paragraphs will not take place. To fill gaps in web analytics through behavioural and conversion modelling, pings containing data (user agent, information on your consent behaviour, screen resolution, IP address, page URL, information on ad clicks in URL parameters) are sent to Google. Your IP address is used to determine the country of origin.

Google Maps
For the visual display of geographical information, Google Maps collects data relating to your use of the Maps functions - in particular your IP address and location data - which is transmitted to Google and subsequently processed by Google. We have no influence over this subsequent data processing.

Google reCAPTCHA
To protect our web forms against misuse and to prevent spam generated by automated software (so-called "bots"), Google reCAPTCHA collects data (IP address, time of visit, browser information and details of your use of our website) and analyses your use of our website using JavaScript and cookies. In addition, other cookies stored in your browser by Google services are analysed. Data processing is carried out on the basis of a data processing agreement with Google. A customer´s users who access websites protected by reCAPTCHA are no longer subject to Google´s privacy policy and terms of service.

Google Fonts
To ensure consistent display of content on our website, the "Google Fonts" script collects data (IP address, time of visit, device and browser information), transmits it to Google and Google then processes it. We have no influence over this subsequent data processing.

Google Tag Manager
Google Tag Manager enables us to manage various codes and services on our website. When implementing individual tags, Google may also process personal data (e.g. IP address, online identifiers (including cookies)). Data processing is carried out on the basis of a data processing agreement with Google.

The use of Google Tag Manager enables the integration of various services and technologies. If you do not wish to use individual tracking services and have therefore disabled them, this deactivation will apply to all relevant tracking tags integrated via Google Tag Manager.

YouTube Video Plugin
To embed third-party content, the YouTube Video Plugin collects data (IP address, time of visit, device and browser information) in the enhanced privacy mode we use; this data is transmitted to Google and subsequently processed by Google only if you play a video.

7.2 Use of Microsoft services

We use the technologies of Microsoft Ireland Operations Ltd., One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, D18 P521, Ireland ("Microsoft") as set out below. Data processing is carried out on the basis of an agreement between joint controllers in accordance with Article 26 of the GDPR. The information automatically collected by Microsoft technologies regarding your use of our website is generally transferred to and stored on a server belonging to Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA. Further information on data processing by Microsoft can be found in the Microsoft Privacy Statement.

Microsoft Advertising
For advertising purposes in Bing, Yahoo and MSN search results, as well as on third-party websites, the so-called Microsoft Advertising Remarketing cookie is set when you visit our website. This cookie automatically enables interest-based advertising by collecting and processing data (IP address, time of visit, device and browser information, and information about your use of our website), using a pseudonymous cookie ID and based on the pages you have visited.

For website analytics and event tracking, we use Microsoft Advertising Universal Event Tracking (UET) Your subsequent usage behaviour if you have arrived at our website via a Microsoft Advertising advert. To this end, cookies may be used and data (IP address, time of visit, device and browser information, as well as information about your use of our website based on events specified by us, such as visiting a web page or subscribing to a newsletter) may be collected, from which usage profiles are created using pseudonyms. Provided that your internet-enabled devices are linked to your Microsoft account and you have not disabled the "Interest-based advertising" setting in your Microsoft account, Microsoft may generate reports on usage behaviour (in particular, cross-device user figures), even if you switch devices - this is known as "cross-device tracking". We do not process any personal data in this regard; we merely receive statistics generated on the basis of Microsoft UET.

Microsoft Clarity
If you have given us your consent in accordance with Article 6(1), first sentence, point (a) of the GDPR, the "Clarity" service provided by Microsoft Ireland Operations Ltd., One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, D18 P521, Ireland ("Microsoft") on this website for the purpose of website analytics. When using Clarity, data (IP address, time of visit, device and browser information, and information regarding your use of our website) is automatically collected and stored, from which usage profiles are created using pseudonyms. Cookies may be used for this purpose. The pseudonymised usage profiles will not be merged with personal data relating to the holder of the pseudonym without your separate, explicit consent.

You may withdraw your consent at any time with future effect, in particular by changing your settings in the Consent Manager on our website or by contacting us via the contact details provided in this privacy policy.

The information automatically collected by Microsoft technologies regarding your use of our website is generally transferred to and stored on a server belonging to Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA. For the USA, an adequacy decision by the European Commission exists on the basis of the EU-US Data Privacy Framework (DPF), provided that the relevant service provider is certified. Certification has been obtained. In addition, the data transfer is based on the European Commission's Standard Data Protection Clauses (Article 46(2)(c) of the GDPR). Microsoft acts on our behalf.

7.3 Use of meta services

Use of Meta Pixel
We use the Meta Pixel as part of the technologies described below provided by Meta Platforms Ireland Ltd., Block J, Serpentine Avenue, Dublin 4, Ireland ("Facebook (by Meta)" or "Meta Platforms Ireland"). The Meta Pixel automatically collects and stores data (IP address, time of visit, device and browser information, as well as information on your use of our website based on events specified by us, such as visiting a webpage or subscribing to a newsletter), from which usage profiles are created using pseudonyms. As part of what is known as "extended data matching", information that can be used to identify individuals (e.g. names, email addresses and telephone numbers) is also collected and stored in hashed form for matching purposes.To this end, when you visit our website, the Meta Pixel automatically sets a cookie which, by means of a pseudonymous cookie ID, enables your browser to be recognised when you visit other websites. Meta Platforms Ireland will combine this information with other data from your Facebook account and use it to compile reports on website activity and to provide other services related to website usage, in particular personalised and group-based advertising. The information automatically collected by Meta Platforms Ireland´s technologies regarding your use of our website is generally transmitted to and stored on a server belonging to Meta Platforms, Inc., 1601 Willow Road, Menlo Park, California 94025, USA. Further information on data processing by Meta Platforms Ireland can be found in the Privacy policy of Meta Platforms Ireland..

Our service providers are based in and/or use servers in the following countries, for which the European Commission has, by decision, determined that an adequate level of data protection exists: Brazil, the USA, Canada, Japan, South Korea, New Zealand, the United Kingdom, Argentina.

The adequacy decision for the USA serves as the basis for transfers to third countries, provided that the relevant service provider is certified. Certification is in place.

Our service providers are based in and/or use servers in the following countries: Australia, Hong Kong, India, Indonesia, Malaysia, Singapore, Thailand, Taiwan and Mexico. There is no adequacy decision by the European Commission for these countries. Our cooperation with them is based on the following safeguards: the European Commission´s Standard Data Protection Clauses.

Meta Ads Manager
We use Meta Ads Manager to advertise this website on Facebook (by Meta) and on other platforms. We determine the parameters of the respective advertising campaign. Meta Platforms Ireland is responsible for the actual implementation, in particular for deciding where to place the adverts for individual users. Unless otherwise specified for the individual technologies, data processing is carried out on the basis of an agreement between joint controllers in accordance with Article 26 of the GDPR. Joint controllership is limited to the collection of data and its transfer to Meta Platforms Ireland. The subsequent data processing by Meta Platforms Ireland is not covered by this.

Based on the pseudonymous cookie ID set by the Meta Pixel and the data collected about your usage behaviour on our website, we use Custom Audiences to deliver personalised advertising.

Via Conversions (via the Meta Pixel or Conversations API), we measure your subsequent usage behaviour for the purposes of web analytics and event tracking if you have arrived at our website via an advert from Meta Ads Manager. Data processing is carried out on the basis of a data processing agreement with Meta Platforms Ireland.

7.4 Other providers of web analytics and online marketing services

Use of Dymatrix for web analytics
For the purpose of website analytics, technologies from Dymatrix GmbH, Lautenschlagerstraße 2, 70173 Stuttgart, Germany, to automatically collect and store data (IP address, time of visit, device and browser information, and information regarding your use of our website), from which usage profiles are created using pseudonyms. Cookies may be used for this purpose. The pseudonymised usage profiles are not merged with personal data relating to the holder of the pseudonym without separate, explicit consent. Dymatrix acts on our behalf.

Use of the Vimeo video plugin to embed third-party content
To embed third-party content, the video plugin from Vimeo Inc., 330 West 34th Street, 5th Floor, New York 10011, USA ("Vimeo") collects data (IP address, time of visit, device and browser information), transmits it to Vimeo and subsequently processes it. Data processing is carried out on the basis of an agreement between joint controllers in accordance with Article 26 of the GDPR. Google Analytics is automatically integrated into the Vimeo video plugin. For the purpose of website analysis, Google Analytics automatically collects and stores data (IP address, time of visit, device and browser information, and information regarding your use of our website), from which usage profiles are created using pseudonyms. Cookies may be used for this purpose. Google Analytics is a service provided by Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). The information automatically collected by Google regarding your use of our website is generally transmitted to and stored on a server belonging to Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. If you visit our website from within the EU, your IP address is stored on a server located in the EU for the purpose of deriving location data and is then immediately deleted before the traffic is forwarded to other Google servers for processing. We have no influence over or access to the data processing carried out by Vimeo, including the settings and results of Google Analytics.

Our service providers are based in and/or use servers in countries outside the EU and the EEA for which the European Commission has issued a decision recognising an adequate level of data protection.

8. Integration of the Trusted Shops Trustbadge / other widgets

Provided you have given your consent in accordance with Article 6(1)(a) of the GDPR, Trusted Shops widgets are integrated into this website to display Trusted Shops services (e.g. quality seals, collected reviews) and to offer Trusted Shops products to buyers following an order.

The Trustbadge and the services advertised through it are provided by Trusted Shops SE, Subbelrather Str. 15C, 50823 Cologne ("Trusted Shops"), with whom we are joint data controllers under Article 26 of the GDPR. In this privacy notice, we set out below the key terms of the agreement in accordance with Article 26(2) of the GDPR.

When interacting with the Trustbadge AI+, session cookies are set to save the login status and display the so-called "welcome layer", which shows the details of the respective online shop (company information, reviews, information on the existence of buyer protection) as well as the #trstd secret. A cookie is set to recognise logged-in users and is stored for a maximum of 400 days after login. In addition, session cookies are set to send push notifications when using the app, provided the user has consented to this. This is necessary so that Trusted Shops can provide the digital service you have requested. Trusted Shops is responsible for data processing when interacting with the Trustbadge AI+.

As part of the joint responsibility arrangement between us and Trusted Shops SE, please contact Trusted Shops in the first instance regarding data protection queries and to exercise your rights, using the contact details provided in the privacy information. Regardless of this, you may, however, always contact the data controller of your choice. Your enquiry will then, if necessary, be forwarded to the other data controller for a response.

8.1 Data processing when integrating the Trustbadge/other widgets

The Trustbadge is provided by a US-based CDN (Content Delivery Network) provider. An adequate level of data protection is ensured in each case by an adequacy decision of the European Commission, which is available for the USA here. Service providers from the US used are generally certified under the EU-US Data Privacy Framework (DPF). Further information is available here. Where service providers used are not certified under the DPF, standard contractual clauses have been agreed as a suitable safeguard.

When the Trustbadge is accessed, the web server automatically stores a so-called server log file, which also contains your IP address, the date and time of access, the volume of data transferred and the requesting provider (access data), and documents the access. The IP address is anonymised immediately after collection, so that the stored data cannot be linked to you personally. The anonymised data is used in particular for statistical purposes and for error analysis.

8.2 Data processing after completion of an order

Provided you have given your consent, once the order has been completed, the Trustbadge accesses the order information stored on your device (order total, order number, product purchased where applicable) as well as your email address, and your email address is hashed using a cryptographic one-way function. The hash value is then transmitted to Trusted Shops together with the order information in accordance with Article 6(1)(a) of the GDPR. This serves to verify whether you are already registered for Trusted Shops' services. If this is the case, further processing takes place in accordance with the contractual agreement between you and Trusted Shops. You can find this for Germany here; for Austria here and for Switzerland here. If you have not yet registered for the services or do not give your consent to automatic recognition via the Trustbadge, you will subsequently be given the opportunity to register manually to use the services or to take out cover under any existing user agreement you may have.

To this end, once you have completed your order, the Trustbadge accesses the following information stored on the device you are using: order total, order number and email address. This is necessary so that we can offer you buyer protection. The data will only be transmitted to Trusted Shops once you have actively chosen to take out buyer protection by clicking on the button labelled accordingly in the so-called Trustcard. If you choose to use the services, further processing is governed by the contractual agreement with Trusted Shops in accordance with Article 6(1)(b) of the GDPR, in order to complete your registration for buyer protection, secure your order and, where applicable, subsequently send you review invitations by email.

Trusted Shops uses service providers in the areas of hosting, monitoring and logging. The legal basis for this is Article 6(1)(f) of the GDPR, for the purpose of ensuring trouble-free operation. Processing may take place in third countries (the USA, the UK and Israel). An adequate level of data protection is ensured in each case by an adequacy decision of the European Commission, which for the USA can be found here, for the UK here and for Israel here. Service providers from the USA are generally certified under the EU-US Data Privacy Framework (DPF). Further information is available here. Where service providers used are not certified under the DPF, standard contractual clauses have been agreed as an appropriate safeguard.

9. Social Media

Our online presence on Facebook (by Meta), X (formerly: Twitter), Instagram (by Meta), YouTube, Pinterest, LinkedIn, Xing

Provided you have given your consent to the respective social media operator in accordance with Article 6(1)(a) of the GDPR, when you visit our online presence on the social media platforms listed above, your data will be automatically collected and stored for market research and advertising purposes, from which usage profiles are created using pseudonyms. These may be used, for example, to display advertisements both on and off the platforms that are presumed to match your interests. Cookies are generally used for this purpose. For detailed information on the processing and use of data by the relevant social media operator, as well as contact details, your rights in this regard and settings to protect your privacy, please refer to the providers' privacy policies linked below. Should you nevertheless require assistance in this matter, please contact us.

Facebook (by Meta) is a service provided by Meta Platforms Ireland Ltd., Block J, Serpentine Avenue, Dublin 4, Ireland ("Meta Platforms Ireland"). The information automatically collected by Meta Platforms Ireland regarding your use of our online presence on Facebook (by Meta) is generally transferred to and stored on a server belonging to Meta Platforms, Inc., 1601 Willow Road, Menlo Park, California 94025, USA. Data processing in connection with a visit to a Facebook (by Meta) fan page is carried out on the basis of an agreement between joint controllers in accordance with Article 26 of the GDPR. Further information (information on Insights data) can be found here.

Our service providers are based in and/or use servers in the following countries, for which the European Commission has, by means of a decision, determined that an adequate level of data protection exists: Brazil, the USA, Canada, Japan, South Korea, New Zealand, the United Kingdom and Argentina.

The adequacy decision for the USA serves as the basis for transfers to third countries, provided that the relevant service provider is certified. Certification is in place.

X is a service provided by X Internet Unlimited Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Ireland ("X"). The information automatically collected by X regarding your use of our online presence on X is generally transferred to and stored on a server belonging to X Corp., FM 1209, Building 2, Bastrop, TX 78602, USA.

Instagram (by Meta) is a service provided by Meta Platforms Ireland Ltd., Block J, Serpentine Avenue, Dublin 4, Ireland ("Meta Platforms Ireland"). The information automatically collected by Meta Platforms Ireland regarding your use of our online presence on Instagram is generally transferred to and stored on a server belonging to Meta Platforms, Inc., 1601 Willow Road, Menlo Park, CA 94025, USA. Data processing in connection with visits to an Instagram (by Meta) fan page is carried out on the basis of an agreement between joint controllers in accordance with Article 26 of the GDPR. Further information (information on Insights data) can be found here.

Our service providers are based in and/or use servers in the following countries, for which the European Commission has determined, by means of a decision, that an adequate level of data protection exists: Brazil, USA, Canada, Japan, South Korea, New Zealand, United Kingdom, Argentina.

The adequacy decision for the USA serves as the basis for transfers to third countries, provided that the relevant service provider is certified. Certification is in place.

Our service providers are based in and/or use servers in the following countries: Australia, Hong Kong, India, Indonesia, Malaysia, Singapore, Thailand, Taiwan and Mexico. There is no adequacy decision by the European Commission for these countries. Our cooperation with you is based on the following safeguards: the European Commission's Standard Data Protection Clauses.

YouTube is a service provided by Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). The information automatically collected by Google regarding your use of our online presence on YouTube is generally transmitted to and stored on a server operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Pinterest is a service provided by Pinterest Europe Ltd., Waterloo Exchange, 3rd Floor, Waterloo Road, Dublin 4, Ireland ("Pinterest"). The information automatically collected by Pinterest regarding your use of our online presence on Pinterest is generally transferred to and stored on a server operated by Pinterest, Inc., 505 Brannan St., San Francisco, CA 94107, USA.

Our service providers are based in and/or use servers in countries outside the EU and the EEA for which the European Commission has issued a decision recognising an adequate level of data protection.

LinkedIn is a service provided by LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland ("LinkedIn"). The information automatically collected by LinkedIn regarding your use of our online presence on LinkedIn is generally transferred to and stored on a server belonging to LinkedIn Corporation, 1000 W. Maude Avenue, Sunnyvale, CA 94085, USA.

Our service providers are based in and/or use servers in the following countries, for which the European Commission has, by decision, determined an adequate level of data protection: USA

The adequacy decision for the USA serves as the basis for transfers to third countries, provided that the relevant service provider is certified. Certification is in place.

Xing is a service provided by New Work SE, Am Strandkai 1, 20457 Hamburg, Germany.

10. Data processing in connection with your application to Sport-Tec

10.1 Scope and purpose of data collection

You have the option of applying to us by email, post or via our online application form. Upon receipt of your application, we process your personal data - in particular master data (name, contact details), application documents (CV, cover letter, certificates) and any communication and note data generated during the application process - for the purpose of assessing your suitability and deciding whether to enter into an employment relationship. The legal basis for this is Article 6(1), first sentence, point (b) of the GDPR in conjunction with Section 26(1) of the Federal Data Protection Act (BDSG). Where special categories of personal data within the meaning of Article 9(1) of the GDPR are processed as part of the recruitment process, this shall only take place where the applicable legal requirements are met. This may, in particular, be carried out on the basis of Section 26(3) of the German Federal Data Protection Act (BDSG) in conjunction with Article 9(2)(b) of the GDPR, insofar as the processing is necessary for the exercise of rights or the fulfilment of legal obligations arising from labour law or social security or social protection law.

Where we consider it necessary for the purpose of filling the vacancy, we may also collect additional publicly available information about you, for example via professional networks (e.g. LinkedIn, XING). In this case, we will inform you separately, in accordance with Article 14 of the GDPR, about the source of the data collected. The legal basis for this is Article 6(1), first sentence, point (f) of the GDPR.

Within our organisation, only those individuals involved in processing your application will have access to your data.

10.2 Retention period

Unless an employment relationship is established, we will delete your application data no later than six months after the conclusion of the application process, provided that no longer retention is required to assert, exercise or defend legal claims. The legal basis is Article 6(1), first sentence, point (f) of the GDPR. If you have given us your consent to do so, or if statutory retention obligations prevent the data from being deleted, the data may be retained for a longer period.

10.3 Inclusion in the candidate pool

If we are unable to offer you a job, we may offer to add you to our candidate pool so that we can consider you for suitable positions in the future. Inclusion in the pool is based solely on your consent (Article 6(1)(a) of the GDPR). Consent is voluntary and may be withdrawn at any time with future effect. Following withdrawal, your data will be deleted, provided there are no statutory retention obligations to the contrary. Irrespective of this, the data will be deleted no later than two years after consent was given.

10.4 Automated decision-making

No automated decision-making or profiling within the meaning of Article 22 of the GDPR takes place as part of the application process.

11. Contact details and your rights

11.1 Your rights

As a data subject, you have the following rights:

pursuant to Article 15 of the GDPR, the right to request information, to the extent specified therein, about your personal data processed by us;
pursuant to Article 16 of the GDPR, the right to request, without undue delay, the rectification of inaccurate personal data or the completion of your personal data stored by us;
in accordance with Article 17 of the GDPR, the right to request the erasure of your personal data stored by us, unless further processing
- is necessary for the exercise of the right to freedom of expression and information;
- to comply with a legal obligation;
- for reasons of public interest; or
- for the establishment, exercise or defence of legal claims;
in accordance with Article 18 of the GDPR, the right to request the restriction of the processing of your personal data, insofar as
- you contest the accuracy of the data;
- the processing is unlawful, but you object to its erasure;
- we no longer require the data, but you require it to establish, exercise or defend legal claims; or
- you have objected to the processing in accordance with Article 21 of the GDPR;
in accordance with Article 20 of the GDPR, the right to receive the personal data you have provided to us in a structured, commonly used and machine-readable format, or to request that it be transferred to another controller;
In accordance with Article 77 of the GDPR, you have the right to lodge a complaint with a supervisory authority. As a rule, you may contact the supervisory authority for your usual place of residence or place of work, or for the location of our registered office.

Right to object
Where we process personal data as explained above in order to safeguard our legitimate interests, which prevail following a balancing of interests, you may object to such processing with effect for the future. If the processing is carried out for direct marketing purposes, you may exercise this right at any time as described above. Where the processing is carried out for other purposes, you have a right to object only if there are grounds arising from your particular situation.

Once you have exercised your right to object, we will no longer process your personal data for these purposes, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or where the processing is necessary for the establishment, exercise or defence of legal claims.

This does not apply if the processing is carried out for direct marketing purposes. In that case, we will no longer process your personal data for this purpose.

11.2 Contact details

If you have any questions regarding the collection, processing or use of your personal data, or if you wish to request information, rectification, restriction or erasure of data, or to withdraw your consent or object to a specific use of your data, please contact us directly using the contact details provided in our legal notice.