Privacy Statement for the BORA – hansgrohe shop (www.shop.bora-hansgrohe.com)
The BORA – hansgrohe online shop is operated by RD Pro Cycling GmbH & Co. KG (in the following: DPC), based in Raubling, Germany as controller.
Data Protection Officer
The controller has appointed a Data Protection Officer for this website, who can be reached at: Alexandra Beil, +498035907182, firstname.lastname@example.org
The protection of personal data plays an important role in our company. Therefore, we operate the BORA – hansgrohe Website consistent with the laws dedicated to the protection of personal data and data security. In the following you will find out which data we eventually collect, how we process and use them and to whom we eventually transfer them.
Collection, Processing und Usage of Personal Data
When you visit the BORA – hansgrohe Website, we generally find out only anonymous data, like the website from which you visit us, your Internet Service Provider, the sites, which you access on our website, your operating system and your web browser. DPC uses this information solely for statistical purposes and to improve the service on this website.
This website contains links and content from Velon because DPC is a member of Velon: a joint venture of professional cycling teams. Because of this membership, we share information on the content that you access and your use of interactive elements with Velon. By accepting cookies on this website, you give us permission to share your personal data with Velon for the creation of joint group profiles.
For the latter we will share your personal data with Velon in order for them to:
• Analyze the behavior of website visitors.
• Provide website visitors with better service and support.
• Provide website visitors with relevant offers, campaigns and general advertisements in order to promote cycling and its events.
Click here to see how Velon handles your data: https://www.velon.cc/privacy-cookies
Usage data, like the Internet Protocol Address and respectively information about the start and duration of usage, are being generated automatically due to the employed technical means. For this reason the named data are mandatory for the communication with you. Data that is no longer needed for communication purposes will be deleted or anonymised by us.
Furthermore data can be stored on the computer of the website user. These data are called "Cookie", which serve to simplify the access behavior of the users. However the user has the option of deactivating this function within the respective web browser. In this case there may be restrictions on the usability of our website. The provider expressly points out that the transmission of data on the Internet (e.g. by e-mail) has security gaps and cannot be 100% protected against access by third parties.
The use of the contact details of the provider identification - especially the phone / fax numbers and email address - for commercial advertising is expressly not desired, unless the provider had previously given his written consent or there is already a business contact. In the case of infringement, the provider reserves the right to legal action.
This website uses the YouTube embedding function to show and play back videos of the provider, “YouTube”, which belongs to Google LLC., 1600 Amphitheatre Parkway, Mountain View, CA 94043, US (“Google”). The privacy-enhanced mode is used, which, according to the provider’s information, activates the storage of user information only when the video/videos is/are played back. If the playback of an embedded YouTube video is started, the provider, “YouTube”, implements cookies to gather information on user behaviour. According to information from “YouTube”, these serve, amongst other things, to capture video statistics, which improve user-friendliness and prevent abusive practices. If you are logged into Google, your data is associated directly with your account if you click on a video. If you do not want the association to be made with your YouTube profile, you must log out before activating the button. Google saves your data (even for users who are not logged in) as a user profile and analyses it. Such an analysis is carried out, in particular, pursuant to point (f) of Article 6(1) GDPR on the basis of the legitimate interests of Google in the insertion of personalised advertising, market research and/or the needs-based design of our website. You have a right to object to the creation of this user profile, which you must exercise by contacting YouTube. A connection is made to the Google network “DoubleClick” every time this website is accessed, regardless of whether embedded videos are played back, which can trigger further data-processing events over which we have no influence. Headquartered in the US, Google LLC has Privacy Shield certification; Privacy Shield being the EU-US framework for data protection, which guarantees compliance with the applicable EU data protection level. You can find further information on data protection with YouTube in the data protection statement of the provider at: https://policies.google.com/privacy?hl=en&gl=de
This website uses Google Analytics, a web analytics service provided by Google Inc. ("Google"). Google Analytics uses so-called "Cookies", text files that are stored on your computer and that allow an analysis of the use of the website by you. The information generated by the cookie about your use of this website is usually sent to a Google server in the USA transferred and stored there. However f IP anonymisation is activated on this website, your IP address will be shortened by Google beforehand within member states of the European Union or other parties to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be sent to a Google server in the US and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide other services related to website activity and internet usage to the website operator. The IP address provided by your browser as part of Google Analytics will not be merged with other Google data. You can prevent the storage of cookies by a corresponding setting of your browser software; however, please note that if you do this, you may not be able to use all the features of this website to the fullest extent possible. In addition, you may prevent the collection by Google of the data generated by the cookie and related to your use of the website (including your IP address) as well as the processing of this data by Google by downloading the browser plug-in available under the following link and install. The current link is http://tools.google.com/dlpage/gaoptout?hl=de.
This website uses so-called social plugins ("plugins") of the social network Facebook, which is operated by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA ("Facebook"). The plugins are marked with a Facebook logo or the addition "Social Plug-in of Facebook" or "Facebook Social Plugin". An overview of the Facebook plugins and their appearance can be found here: http://developers.facebook.com/plugins
If you visit a page of our website that contains such a plugin, your browser establishes a direct connection to the Facebook servers. The content of the plugin is transmitted by Facebook directly to your browser and incorporated by it into the website.
By integrating the plugins, Facebook receives the information that your browser has accessed the corresponding page of our website, even if you do not have a Facebook account or are currently not logged in to Facebook. This information (including your IP address) is transmitted from your browser directly to a Facebook server in the US and stored there.
If you are logged in to Facebook, Facebook can assign the visit to our website directly to your Facebook account. If you interact with the plugins, for example, click the "Like" button or leave a comment, the corresponding information is also transmitted directly to a Facebook server and stored there. The information will also be posted on Facebook and displayed to your Facebook friends. Facebook may use this information for the purpose of advertising, market research and tailor-made Facebook pages. For this purpose, Facebook uses usage, interest and relationship profiles, e.g. to evaluate your use of our website in relation to the advertisements displayed on Facebook, to inform other Facebook users about your activities on our website and to provide other services related to the use of Facebook.
In order to receive our newsletter, your e-mail address as well as your personal and surname as well as your salutation are required for personalization purposes. Your data provided during the registration will be used exclusively by us for sending the newsletter and will not be passed on to third parties. Before sending the newsletter, you must expressly confirm to us within the framework of the so-called double opt-in procedure that we should activate the newsletter service for you. You will then receive a confirmation and authorization email from us asking you to click on the link in this email to confirm that you wish to receive our newsletter. Of course you will find a corresponding unsubscribe link in each of our newsletters.
Purposes of Collection, Processing or Use
All personal data, which accumulates while you visit the BORA – hansgrohe Website will be handled compliant with the relevant data protection laws. Your personal data will only be collected, processed or used for the purposes of carrying out your requests as well as for preserving our own commercial interests regarding the need-driven design of the website and other marketing activities.
For the maintenance of the BORA – hansgrohe Website as well as for the press work we fall back on the expertise of specialized service providers, who may collect, process or use personal data on our behalf.
We or any commissioned third party will not sell your personal data to third parties or merchandise them in a similar other way.
DPC will collect, process and use your personal data only for the purposes that have been communicated to you, unless the collection, processing or usage
− takes place for purposes that are directly associated with the original purposes,
− is necessary for the preparation, negotiation and fulfilment of a contract with you,
− is necessary due to a legal provision or an official order judicial order,
− is necessary for purposes of legal protection or for the defence against legal claims,
− aim at the prevention of misuse or other illegal actions, that may compromise DPC's systems and with it the data security.
DPC ensures through technical and organisational measures that your personal data is protected against accidental or illegal deletion, alteration or against loss and unauthorised transfer or access.
DPC is not responsible for the privacy policies or the content of other websites to which links exist.
At any time you have the right to withdraw your consent for the collection, processing or usage of your data, which you gave us with effect for the future. DPC will carry out your motions for disclosure, correction and deletion as well as for other rights readily and within the legal framework.
The applicable data protection regulation gives you rights in relation to the controller with regard to the processing of your personal data (access and intervention rights). The information below explains these rights:
Right of access pursuant to Article 15 GDPR: In particular, you have the right to information about the personal data we process that concerns you, the purposes of the processing, the categories of personal data concerned, the recipients or categories of recipient to whom the personal data have been or will be disclosed, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period, the existence of the right to request from the controller rectification or erasure of personal data or restriction of processing of personal data or to object to such processing, the right to lodge a complaint with a supervisory authority, where the personal data is not collected from the data subject, any available information as to its source, the existence of automated decision-making, including profiling, and, as required, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject, as well as the notification obligation regarding rectification or erasure of personal data or restriction of processing information, which guarantees exist with regard to the sharing of your data with third countries pursuant to Article 46 GDPR;
Right to rectification pursuant to Article 16 GDPR: You have a right to obtain from us without undue delay the rectification and/or completion of inaccurate personal data that concerns you;
Right to erasure pursuant to Article 17 GDPR: You have the right to have your personal data erased subject to the conditions of Article 17(1) GDPR. However, this right does not apply, in particular, if the processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, on grounds of public interest or for the establishment, exercise or defence of legal claims;
Right to restriction of processing pursuant to Article 18 GDPR: You have the right to the restriction of processing of your personal data, so long as the accuracy of the personal data contested by you is checked, if you oppose the erasure of the personal data due to improper data processing and request the restriction of its use instead; if you need your data for the establishment, exercise or defence of legal claims, since we no longer need this data for the purposes of the processing or if you objected to processing for reasons of your special situation, pending verification of whether the legitimate grounds of the controller override those of the data subject;
Notification obligation regarding rectification or erasure of personal data or restriction of processing pursuant to Article 19 GDPR: If you have asserted your right to obtain rectification, erasure or restriction of your personal data from the controller, the controller is obliged to notify all the recipients to whom the personal data affected was disclosed of this rectification or erasure of the data or the restriction of the processing, unless this proves impossible or involves disproportionate effort. You have the right to be notified of these recipients.
Right to data portability pursuant to Article 20 GDPR: You have the right to receive the personal data that concerns you, which you have provided to us, in a structured, commonly used and machine-readable format, and have the right to transmit this data to another controller, where technically feasible.
Right to withdraw consent pursuant to Article 7(3) GDPR: You have the right to withdraw consent for processing data at any time with future effect. In the event of withdrawal, we will erase the relevant data with undue delay, provided that further processing cannot be based on a legal basis for processing without consent. The withdrawal of consent does not affect the legality of the processing carried out on the basis of the consent up until the point of withdrawal;
Right to lodge a complaint pursuant to Article 77 GDPR: If you consider that the processing of personal data relating to you infringes the GDPR, you have, without prejudice to any other administrative or judicial remedy, the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement.
If we process your personal data as part of a consideration of interests on the basis of our predominant legitimate interest, you have the right to object, on grounds of your particular situation, to the processing of personal data that concerns you with future effect.
If you exercise your right to object, we will no longer process the data concerned. However, we reserve the right to continue to process the personal data if we can demonstrate compelling legitimate reasons which override your interest, rights and freedoms or for the establishment, exercise or defense of legal claims.
If we process your personal data for direct marketing purposes, you have the right to object at any time to the processing of the personal data concerned for the purpose of this sort of advertising. You can exercise the right to object as described above.
If you exercise your right to object, we will no longer process the data concerned for direct marketing purposes.
Duration of storage of personal data
The duration of storage of personal data is measured according to the particular statutory retention period (e.g. retention periods concerning tax and commercial law). Once the period has expired, the data concerned is erased as a matter of routine, provided that it is no longer required for the fulfilment or development of a contract and/or there no longer remains a legitimate interest for further retention on our part.
For any questions with regard to the processing of your personal data, do not hesitate to contact us directly at DPC. Please find our contact details in the imprint.