Your personal data (e.g. salutation, name, address, e-mail address, telephone number, bank details, credit card number) will only be processed by us in accordance with the provisions of the European General Data Protection Regulation (GDPR), the specific regulations of the German Data Protection Act (BDSG-NEU) as well as other relevant legal provisions.
With the following statements, we comply with our duty to inform in accordance with art. 13 and 14 GDPR and inform you comprehensively about the different processing of your personal data.
Controller according to acc. art. 4 para. 7 GDPR is:
Represented by: Dr. Marc Leutsch, Sebastian Fitz
Telephone: +49 (0) 7222 9419326
Personal data is data regarding personal or business details of a certain person or on a certain date determinable individual person, such as name, address, your bank account number, passport or telephone number, license plate and e-mail address or IP-number. Non-personal data is, in contrast, data with which the ascertainment of your actual identity is not possible. This includes for example, information of your gender, which browser you use or which sports you prefer.
You will remain anonymous when using the a.m.sports GmbH website, as long as you have not voluntarily given us personal data for our use. The only exception to this policy is represented by the temporary compulsory automatic storage of your IP-number as well as the usage of cookies. Full particulars are given below.
We process your personal data exclusively for the following purposes and legal basis:
a) Processing of your personal data when contacting us through our website for the implementation of pre-contractual measures in acc. art. 6 para. 1 lit. b) GDPR
The a.m.sports GmbH websites contain (also due to legal regulations) information that enables a fast electronic contact to our company. Corresponding messages can be sent using the specified general e-mail address or by using the contact form. The personal data transmitted will be processed for the purpose of carrying out pre-contractual measures.
As part of the implementation of pre-contractual actions, we will disclose your personal information to the following different categories of recipients:
IT service providers: Within the scope of the operation and maintenance of our IT systems, external service providers and, if applicable, their subcontractors have access to your personal data.
b) Processing of your personal data in the context of a contractual relationship in acc. art. 6 para. 1 lit. b) GDPR
To fulfill our contract with you, your so-called inventory data, such as name, address, e-mail address, orders, if necessary telephone number and bank details, are processed. If you have registered as a customer in our webshop, we also process your login data.
As part of the fulfillment of the contract, we will disclose your inventory data to the following different categories of recipients:
Transport company: For delivery of the goods, your name and address will be given to the forwarder of the goods.
Financial service providers: To process the payment, your name, address and bank details are transmitted to the affiliated financial service providers.
IT service providers: In addition, external service providers and, if applicable, their subcontractors may have access to your inventory data in context of operation and maintenance of our IT systems.
c) Processing of your personal data in the case of PayPal payment by installment in accordance with art. 6 para. 1 lit. a), b) and f) GDPR
In case you have selected payment by installment as a payment method to fulfill our contract, we cooperate with the online service provider PayPal. In the course of the application process of PayPal payment by installment, you have consented in collection and transmission of your personal data to PayPal, which are necessary for the execution of the contract as well as an identity and credit check, such as name, address, date of birth, gender, e-mail address, IP address, telephone number and regarding the orders, such as the number of articles, item number, invoice amount and taxes in percent. The transmission of these data takes place, so that PayPal can carry out an identity and credit check for the handling of your purchase with the desired payment method. In accordance with the GDPR, PayPal has a legitimate interest in the transmission of the buyer’s personal data and needs them in order to obtain information from credit bureaux for the purposes of identity and credit checks.
Revocation of the usage of personal data towards PayPal:
1. You may revoke your consent in usage of personal data towards PayPal at any time. However, PayPal may be entitled to continue processing, using and transmitting the personal data, if necessary for contractual payment processing by PayPal, if required by law, or if required by a court or authority.
d) Processing of your personal data by credit bureaus for collecting credit data acc. art. 6 para. 1 lit. b) and f) GDPR and probability values acc. art. 22 para. 2 lit. b) GDPR in connection with § 31 para. 1 BDSG-NEU
As far as we are in advance, e.g. when purchasing on account or delivery of test products and therefore we have a legitimate interest, we may collect a credit report about you at the following credit bureaus:
CRIF Bürgel GmbH, Radlkoferstraße 2, 81373 München
We will transfer your name, address and date of birth. The credit bureau provides the address and credit data stored in its database, as well as probability values based on address data and with the aid of mathematical-statistical methods. On the basis of the information obtained from the credit bureau as well as internal guidelines, we examine the risk of damage (loss of payment, fraud, etc.) for us and make the conclusion for the contract (purchase, test).
Data transfer is only carried out if we have credibly demonstrated our legitimate interest (for example, purchase on account or delivery of test products). We only use and process the transferred data for this purpose. Use or processing for other purposes is only permitted under the conditions of data protection.
e) Processing of your personal data due to legal obligations in acc. art. 6 para. 1 lit. c) GDPR
We mandate tax companies with accounting and tax advice, forward your inventory data to them and thereby fulfill our obligations, e.g. the proper bookkeeping (GoB).
f) Processing of your personal data to realize tasks of public interest or official authority acc. art. 6 para. 1 lit. e) GDPR
With the above legal basis, we may also need to disclose your inventory data to public bodies. An example of this is the transfer of data to tax authorities to fulfill our tax control and reporting obligations.
g) Processing of your personal data for advertising purposes acc. art. 6 para. f) GDPR
If we have received your name and address as part of the contractual relationship, we use it for advertising purposes. According to Recital 47 GDPR we have a legitimate interest in this regard.
We may also mandate service providers for promotions and disclose your personal information to them.
You can object to the commercial use of your address from the contractual relationship at any time with effect for the future, without any costs other than the transmission costs according to the basic tariffs. Just send an e-mail to: firstname.lastname@example.org.
h) Processing your personal data for our newsletter acc. § 7 para. 2 lit. 3 and para. 3 UWG
In case of newsletter registration your e-mail address shall be used for own promotional purposes. You have explicitly granted the following consent separately or within the order process: “Register for our newsletter …”.
You can except the consent anytime as of now, without that costs other than the transfer costs according basic rates occur.
If we have received your e-mail address based on a contractual relationship, we shall use it for promotions of own and similar products, too. In this case we have informed you explicitly about the data collection and use.
Under certain circumstances, we also mandate service providers and disclose your personal data to them.
You can except the promotional use of your e-mail address based on a contractual relationship anytime as of now, without that costs other than the transfer costs according basic rates occur.
If you don’t want to get the newsletter any more, you can unsubscribe by a deregistration link in the newsletter. Or send us an appropriate e-mail to:
i) Automatic processing of the following personal data for purposes of data security, stability and operational reliability of our website in accordance with art. 6 para. 1 lit. c) GDPR and for the purposes of advertising, market research or the needs-based design of our telemedia in accordance with art. 6 para. 1 lit. f) GDPR
We automatically collect information from everyone who visits the a.m.sports GmbH websites regarding the IP-number assigned to your computer when you access the internet, which browser and operating system you use and which websites you have previously viewed. This data is stored in so-called log files on the web server of our web service provider. At the same time, the IP-number is considered to be personal data. For the protection against misuse of our own computer system, it is required to store the IP-number of site visitors for a temporary period of time. If we need to draw upon the log files in order to compose a user profile, or for the purpose of advertising, market research or further design of our websites, then the IP-number will previously be made anonymous. Otherwise, the IP-number will be erased from the log files. As a result, your IP-number remains anonymous even during the automatic collection and temporary storage of your IP-number. According to Recital 47 GDPR, we have a legitimate interest in processing for the purposes of advertising, market research or the needs-based design of our telemedia.
Web analysis with Google Analytics
Further information concerning the terms and conditions of use and data privacy can be found at http://www.google.com/analytics/terms/gb.html or at https://www.google.de/intl/en_uk/policies/. Please note that on this website, Google Analytics code is supplemented by “anonymizeIp” to ensure an anonymized collection of IP addresses (so called IP-masking).
Social plug-ins from Facebook
Social plug-ins from Twitter
Conversion tracking through visitor action pixels from Facebook
Within our website we use the "visitor action pixel" of Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA ("Facebook"). With its help, we can track users' actions after they've seen or clicked a Facebook ad. This allows us to track the effectiveness of Facebook advertisements for statistical and market research purposes. The data collected in this way is anonymous for us, ie we do not see the personal data of individual users. However, this data is stored and processed by Facebook, about which we inform you according to our knowledge. Facebook can connect this data to your Facebook account and also for their own advertising purposes, according to Facebook's data usage policy https://www.facebook.com/about/privacy/. You can enable Facebook and its affiliates to display ads on and off Facebook. It may also be stored for these purposes, a cookie on your computer.
You have the option to prevent tracking with Facebook's visitor action pixel. Please click on this link (the opt out works only in the browser and only for this domain). An opt-out cookie is stored on your device. If you delete your cookies in this browser, you must click this link again.
Google YouTube Videos
Our website uses plugins from the Google-powered YouTube page. Site operator is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. When you visit one of our YouTube plug-in-enabled sites, you will be connected to the servers of YouTube. It tells the YouTube server which of our pages you've visited. If you're logged into your YouTube account, YouTube will allow you to associate your browsing behavior directly with your personal profile. You can prevent this by logging out of your YouTube account. The use of YouTube is in the interest of an attractive presentation of our online offers. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR.
This site uses the mapping service Google Maps via an API. Provider is Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA. To use the features of Google Maps, it is necessary to save your IP address. This information is usually transmitted to and stored on a Google server in the United States. The provider of this site has no influence on this data transfer.
The use of Google Maps is in the interest of an attractive presentation of our online offers and an easy findability of the places we have indicated on the website. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR.
Conversion Tracking durch Google Adwords
Our website uses Google Inc. ("Google") conversion tracking. If you have reached our website via an advertisement sent by Google, Google Adwords will set a cookie on your computer. The conversion tracking cookie is set when a user clicks on a Google-served ad. These cookies lose their validity after 30 days and are not used for personal identification. If the user visits certain pages on our website and the cookie has not expired, we and Google may recognize that the user clicked on the ad and was redirected to this page. Each Google AdWords customer receives a different cookie. Cookies can not be tracked through AdWords advertisers' websites. The information gathered using the conversion cookie is used to generate conversion statistics for AdWords advertisers who have opted for conversion tracking. Customers are told the total number of users who clicked on their ad and were redirected to a conversion tracking tag page. However, they do not receive information that personally identifies users.
If you do not want to participate in the tracking, you can refuse the required setting of a cookie - for example via a browser setting that generally disables the automatic setting of cookies or sets your browser to block cookies from the domain "googleleadservices.com".
j) Other processing of your personal data based on your consent acc. art. 6 para. 1 lit. a) GDPR
Incidentally, we will only process personal data from you other than those mentioned in no. 5 a) – h) if you voluntarily provide them to us or have consented to processing them.
Any transfer, sale or other transfer of your personal data to third parties outside the purposes and legal bases listed under no. 6 does not take place.
In case data processing takes place from countries in which no adequate level of data protection exists (so-called “third countries”), special measures are required acc. to the GDPR. Before a service provider or its subcontractor located in a third country obtains the technical possibility of access to your personal data, we take measures to safeguard data protection, for example by concluding EU Standard Modal Clauses.
We process your personal information as long as it is necessary for the fulfillment of our contractual obligations. If these obligations cease to exist, we will delete your personal data.
Due to legal obligations, in particular the commercial and tax-related storage requirements, we must keep certain categories of your personal data even after fulfillment of our contract for a limited further processing. The deadlines for storage and documentation specified in HGB and AO are 6 and 10 years, respectively. After expiry of these deadlines, a deletion will also be made here, unless you have expressly agreed in further use.
a) Right of access acc. art. 15 GDPR
You are entitled at any time, within the scope of legal provisions, to request free information about your data processed by us, the purposes of processing, the duration of storage or the criteria for determining the duration of storage and the recipients of the data. You are also entitled to receive a copy of your data.
b) Right of rectification, erasure, restriction of processing acc. art. 16-19 GDPR
Should your data processed by us be incorrect, incomplete or inadmissible, you may require us to correct your data, to supplement, to limit processing or to delete the data to the extent permitted by law. Furthermore, as a user, you have the option of automatically deleting your data in the application at any time.
c) Right of data portability acc. art. 20 GDPR
If you have provided us with your information based on your consent or as part of a contractual relationship with us, we will provide that data in a standard format upon your request or, to the extent that this is technically possible, transmit it to you third parties determined by you.
d) Right of revoking the consent in acc. art. 7 para. 3 GDPR
You have the right at any time to revoke your consent granted to us and based on art. 6 para. 1 lit. (a) with effect for the future. The revocation of consent means that the data processing based on this consent no longer takes place.
The relevant data processings are listed under no. 6.
e) Right of object acc. art. 22 GDPR
You are entitled, for reasons arising from your particular situation, to object at any time against the processing of personal data relating to you, on the basis of art. 6 para. 1 lit. e) or f). In this case, we will no longer process your personal data unless we can demonstrate compelling legitimate reasons for processing that outweigh your interests, rights and freedoms, or the processing is for the purpose of enforcing, pursuing or defending legal claims.
If we process your personal information for advertising purposes, you have the right to object at any time. This also applies to the profiling, as far as it is associated with such advertising. In the event of your disagreement, we will no longer process your personal data for these purposes.
The relevant data processing is listed under no. 6.
f) Right of conplaint acc. art. 57 GDPR
You are welcome to contact us with questions, suggestions and criticism.
You can also send a complaint to the authority. You have the choice of approaching the authority, which is locally responsible for you or for us. The contact details of the authority responsible for our company can be found at the following link: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html
We do not carry out automated decision making including profiling (automated analysis of personal circumstances).
You can prevent storage of cookies by choosing a “disable cookies” option in your browser settings. But this can limit the functionality of our Internet offers as a result.
a.m.sports GmbH meets the technical and organizational security measures in order to protect your personal data from loss or misuse. Thus, your data is stored in a secure operations environment which is not accessible to the public. If you would like to contact a.m.sports GmbH by e-mail, we must inform you that the confidentiality of this information cannot be guaranteed. The contents of e-mails can – just as with a postcard – be viewed by a third party. We therefore recommend sending personal information to us by post.
Dr. Marc Leutsch