Privacy Policy

1. Data Protection at a glance

General information

The following notes provide a simple overview of what happens to your personal data when you visit this website. Personal data is any data with which you can be personally identified. Detailed information on the subject of data protection can be found in our data protection declaration listed under this text.

 

Data collection on this website

Who is responsible for data collection on this website?

The data processing on this website is carried out by the website operator. Their contact details can be found in the section "Notice on the responsible body" in this data protection declaration.

How do we collect your data?

On the one hand, your data is collected by providing it to us. This can be, for example data that you enter in a contact form.

Other data is collected automatically or after your consent when visiting the website by our IT systems. These are mainly technical data (e.g. Internet browser, operating system or time of page view). This data is collected automatically as soon as you enter this website.

What do we use your data for?

Part of the data is collected to ensure error-free provision of the website. Other data may be used to analyse your user behaviour.

What rights do you have regarding your data?

You have the right at any time to receive information free of charge about the origin, recipient and purpose of your stored personal data. You also have the right to request the rectification or deletion of this data. If you have given your consent to data processing, you can revoke this consent at any time for the future. You also have the right to request the restriction of the processing of your personal data in certain circumstances. Furthermore, you have the right to lodge a complaint with the competent supervisory authority.

You can contact us at any time if you have any further questions on the subject of data protection.

Analysis tools and third-party tools

When you visit our website, your surfing behavior can be statistically evaluated. This is mainly done with cookies and so-called analysis programs. Here we also use services from Google - this is a company headquartered in the USA. Further information and the privacy policy can be found here or at https://policies.google.com/privacy?hl=e.

The analysis of your surfing behavior is usually anonymous; the surfing behavior cannot be traced back to you.

 You can object to this analysis or prevent it by not using certain tools. Detailed information about all these tools and your options for objection can be found in the following privacy policy.

 

2. Hosting and Content Delivery Networks (CDN)

Amazon Web Services (AWS)

We host our website on AWS. The provider is Amazon Web Services EMEA SARL, 38 Avenue John F. Kennedy, 1855 Luxembourg (hereinafter AWS).

When you visit our website, your personal data is processed on AWS servers. Personal data may also be transmitted to the parent company of AWS in the USA. The data transfer to the USA is based on the EU standard contractual clauses.

Details can be found here: aws.amazon.com/de/blogs/security/aws-gdpr-data-processing-addendum/.

For more information, see AWS's Privacy Statement: aws.amazon.com/de/privacy/.

The use of AWS is based on Art. 6 para. 1 lit. f GDPR. We have a legitimate Interest in the most reliable presentation of our website. Provided that a corresponding Consent has been requested, the processing takes place exclusively on the basis of Art. 6 para. 1 lit. a GDPR and § 25 (1) TTDSG, insofar as the consent includes the storage of cookies or access to information in the user's terminal device (e.g. device fingerprinting) within the meaning of the TTDSG. The consent can be revoked at any time.

Order processing

We have concluded a contract for order processing (DPA) with the above-mentioned provider. This is a contract prescribed by data protection law, which ensures that it processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.

Akamai

To accelerate our websites, we use the Content Delivery Network (CDN) from Akamai Technologies Inc., 150 Broadway, Cambridge, MA 02142, USA, (Akamai). A CDN is a service with the help of which content of our online offer, in particular large media files, such as graphics or scripts, are delivered faster with the help of regionally distributed servers connected via the Internet. The processing of your data takes place solely for the aforementioned purposes and to maintain the security and functionality of the CDN.

Akamai transfers personal data from the log files (e.g. IP addresses) to the USA for each data processing, as certain servers for processing the log files are only located in the USA. Akamai is therefore committed to complying with the standards and regulations of European data protection law. For more information about Akamai's privacy practices, please visit www.akamai.com/de/de/privacy-policies/.

Akamai stores data for up to 24 hours so that content can be delivered faster when you visit our website.

Akamai cookies are classified as strictly necessary cookies.

Bootstrap CDN

We use on our site the service Bootstrap CDN of the company StackPath, LLC, 2021 McKinney Avenue, Suite 1100, 75201 Texas, United States,

E-mail: privacy@stackpath.com
Website: www.stackpath.com

The processing also takes place in a third country for which there is no adequacy decision of the Commission. Therefore, the usual level of protection for the GDPR cannot be guaranteed during transmission, as it cannot be ruled out that authorities in the third country, e.g. may have access to the collected data.
The legal basis for the transmission of personal data is our legitimate interest in the processing in accordance with Article 6 (1) (f) GDPR. Our legitimate interest lies in achieving the purpose described below.

Bootstrap CDN is a content delivery network that mirrors our content through various servers to ensure optimal accessibility worldwide.

With regard to the processing, you have the right to object listed in Article 21. Further information can be found at the end of this data protection declaration.

Further information on the handling of the transmitted data can be found in the provider's data protection declaration under www.bootstrapcdn.com/privacy-policy.

Cloudflare

We use the "Cloudflare" service. The provider is Cloudflare Inc., 101 Townsend St., San Francisco, CA 94107, USA (hereinafter referred to as "Cloudflare").

Cloudflare offers a globally distributed content delivery network with DNS. Technically, the transfer of information between your browser and our website is routed via the Cloudflare network. This enables Cloudflare to analyse traffic between your browser and our website and serve as a filter between our servers and potentially malicious traffic from the Internet. Cloudflare may also use cookies or other technologies to recognize Internet users, but these are used solely for the purpose described herein.

The use of Cloudflare is based on our legitimate interest in providing our website as error-free and securely as possible (Art. 6 para. 1 lit. f GDPR).

The data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: www.cloudflare.com/privacypolicy.

For more information about security and privacy at Cloudflare, please visit: www.cloudflare.com/privacypolicy.

Order processing

We have concluded a contract for order processing (DPA) with the above-mentioned provider. This is a contract prescribed by data protection law, which ensures that it processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.

Pingdom

On our website, we use "Pingdom", a service of SolarWinds Worldwide, LLC, 7171 Southwest Parkway, Bldg 400, Austin, Texas 78735, USA (hereinafter referred to as "SolarWinds"). Pingdom stores and processes information about your user behaviour on our website. For this purpose, Pingdom uses, among other things, cookies, i.e. small text files that are stored locally in the cache of your web browser on your device and that enable an analysis of your use of our website.

We use Pingdom for marketing and optimization purposes, in particular to analyse the use of our website and to be able to continuously improve individual functions and offers as well as the user experience. Through the statistical evaluation of user behaviour, we can improve our offer and make it more interesting for you as a user. This is also our legitimate interest in the processing of the above data by the third-party provider. The legal basis is Art. 6 para. 1 sentence 1 lit. f) GDPR.

You can prevent the installation of cookies by deleting existing cookies and deactivating the storage of cookies in the settings of your web browser. We would like to point out that in this case you may not be able to use all the functions of our website to their full extent. You can also prevent the collection of the aforementioned information by Pingdom by setting an opt-out cookie on the website linked below:

We would like to point out that this setting will be deleted if you delete your cookies. You can object to the collection and forwarding of personal data or prevent the processing of this data by deactivating the execution of Java Script in your browser. In addition, you can prevent the execution of Java-Script code altogether by installing a Java Script blocker (e.g. www.noscript.net or www.ghostery.com). We would like to point out that in this case you may not be able to use all the functions of our website to their full extent.

Third party information: SolarWinds Worldwide, LLC, 7171 Southwest Parkway, Bldg 400, Austin, Texas 78735, USA.

Further information from the third-party provider on data protection can be found on the following website: www.solarwinds.com/legal/privacy

RawGit

We use on our site the service RawGit of the company Ryan Grove, Portland, Oregon, United States, website: www.wonko.com. The processing also takes place in a third country for which there is no adequacy decision of the Commission. Therefore, the usual level of protection for the GDPR cannot be guaranteed during transmission, as it cannot be ruled out that authorities in the third country, e.g. may have access to the collected data.

The legal basis for the transmission of personal data is our legitimate interest in the processing in accordance with Article 6(1)(f) GDPR. Our legitimate interest lies in achieving the purpose described below.

The service is a content delivery network that mirrors our content via various servers to ensure optimal accessibility worldwide.
With regard to the processing, you have the right to object listed in Article 21. Further information can be found at the end of this data protection declaration.

Unpkg

On our website a web service of the company Npm, Inc., 1999 Harrison Street #1150, CA 94612 Oakland, United States of America (hereinafter: Unpkg) is loaded. If you have activated Java Script in your browser and have not installed a Java Script blocker, your browser may transmit personal data to Unpkg. Further information on the handling of the transferred data can be found in Unpkg's privacy policy: www.npmjs.com/policies/privacy.

You can prevent the collection and processing of your data by Unpkg by deactivating the execution of script code in your browser or by installing a script blocker in your browser.

 

3. General information and mandatory information

Privacy

The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this data protection declaration.

When you use this website, various personal data is collected. Personal data is data with which you can be personally identified. This privacy policy explains what data we collect and what we use it for. It also explains how and for what purpose this is done.

We would like to point out that data transmission on the Internet (e.g. when communicating by e-mail) may have security gaps. A complete protection of the data against access by third parties is not possible.

Note on the responsible body

The responsible body for data processing on this website is:

WINORA-STAIGER GmbH
Max-Planck-Straße 6
97526 Sennfeld

Phone: 09721-65 01-0
E-mail:
info@winora-group.de

The responsible body is the natural or legal person who, alone or jointly with others, decides on the purposes and means of processing personal data (e.g. names, e-mail addresses, etc.).

Storage period

Unless a more specific storage period has been specified in this data protection declaration, your personal data will remain with us until the purpose for data processing ceases to apply. If you make a legitimate request for deletion or revoke your consent to data processing, your data will be deleted unless we have other legally permissible reasons for storing your personal data (e.g. tax or commercial retention periods); in the latter case, the deletion takes place after these reasons have ceased to exist.

General information on the legal bases of data processing on this website

If you have consented to data processing, we process your personal data on the basis of Art. 6 para. 1 lit. a GDPR or Art. 9 para. 2 lit. a GDPR, provided that special categories of data are processed in accordance with Art. 9 para. 1 GDPR. In the case of express consent to the transfer of personal data to third countries, the data processing is also carried out on the basis of Art. 49 para. 1 lit. a GDPR. If you have consented to the storage of cookies or access to information in your end device (e.g. via device fingerprinting), the data processing will also be carried out on the basis of § 25 para. 1 TTDSG. The consent can be revoked at any time. If your data is required for the fulfilment of the contract or for the implementation of pre-contractual measures, we process your data on the basis of Art. 6 para. 1 lit.b GDPR. Furthermore, we process your data if it is necessary to fulfil a legal obligation on the basis of Art. 6 para. 1 lit.c GDPR.

The data processing may also take place on the basis of our legitimate interest in accordance with Art. 6 para. 1 lit. f GDPR. The relevant legal bases in each individual case are provided in the following paragraphs of this data protection declaration.

General information on the legal bases of data processing on this website

If you have consented to data processing, we process your personal data on the basis of Art. 6 para. 1 lit. a GDPR or Art. 9 para. 2 lit. a GDPR, provided that special categories of data are processed in accordance with Art. 9 para. 1 GDPR. In the case of express consent to the transfer of personal data to third countries, the data processing is also carried out on the basis of Art. 49 para. 1 lit. a GDPR. If you have consented to the storage of cookies or access to information in your end device (e.g. via device fingerprinting), the data processing will also be carried out on the basis of § 25 para. 1 TTDSG. The consent can be revoked at any time. If your data is required for the fulfilment of the contract or for the implementation of pre-contractual measures, we process your data on the basis of Art. 6 para. 1 lit.b GDPR. Furthermore, we process your data if it is necessary to fulfil a legal obligation on the basis of Art. 6 para. 1 lit.c GDPR.
The data processing may also take place on the basis of our legitimate interest in accordance with Art. 6 para. 1 lit. f GDPR. The relevant legal bases in each individual case are provided in the following paragraphs of this data protection declaration.

Data protection supervisor

We have appointed a data protection officer for our company.

Dipl.-Ing. Lars Ebertz on behalf of L-E-C.COM GmbH
Lubergstrasse 2
D-35756 Mittenaar

Phone: 02778 6969 10
E-mail: lars@ebertz-datenschutz.de

Note on data transfer to the USA and other third countries

Among other things, we use tools from companies based in the USA or other third countries that are not secure under data protection law. If these tools are active, your personal data may be transferred to and processed in these third countries. We would like to point out that in these countries no level of data protection comparable to that of the EU can be guaranteed. For example, US companies are obliged to hand over personal data to security authorities without you as a data subject being able to take legal action against this. It can therefore not be ruled out that US authorities (e.g. secret services) process, evaluate and permanently store your data on US servers for surveillance purposes. We have no influence on these processing activities.

Revocation of your consent to data processing

Many data processing operations are only possible with your express consent. You can revoke your consent at any time. The legality of the data processing carried out until the revocation remains unaffected by the revocation.

Right to object to data collection in special cases as well as to direct marketing (Art. 21 GDPR)

IF THE DATA PROCESSING ON THE BASIS OF ART. 6 PARA. 1 LIT. E OR F GDPR, YOU HAVE THE RIGHT AT ANY TIME TO, FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION, AGAINST THE PROCESSING OF YOUR PERSONAL DATA LODGE AN OBJECTION; THIS SHALL ALSO APPLY TO A SITUATION BASED ON THESE PROVISIONS. PROFILING. THE RESPECTIVE LEGAL BASIS ON WHICH PROCESSING IS BASED, PLEASE REFER TO THIS PRIVACY POLICY. IF YOU FILE AN OBJECTION, IF WE WILL NO LONGER PROCESS YOUR PERSONAL DATA CONCERNED, UNLESS WE CAN PROVIDE COMPELLING LEGITIMATE GROUNDS FOR PROCESSING EVIDENCE THAT OUTWEIGHS YOUR INTERESTS, RIGHTS AND FREEDOMS OR THE PROCESSING SERVES TO ASSERT, EXERCISE OR DEFEND LEGAL CLAIMS (OBJECTION PURSUANT TO ARTICLE 21 (1) GDPR).

IF YOUR PERSONAL DATA IS PROCESSED FOR DIRECT MARKETING PURPOSES, SO YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNED FOR THE PURPOSE OF SUCH ADVERTISING INSERTION; THIS ALSO APPLIES TO PROFILING, INSOFAR AS SUCH DIRECT ADVERTISING IN CONNECTION. IF YOU OBJECT, YOUR PERSONAL DATA WILL THEN NO LONGER BE USED FOR THE PURPOSE OF DIRECT MARKETING (OBJECTION PURSUANT TO ART. 21 PARA. 2 GDPR).

Right to lodge a complaint with the competent supervisory authority

In the event of violations of the GDPR, the data subjects have the right to lodge a complaint with a supervisory authority, in particular in the Member State of their habitual residence, place of work or place of alleged infringement. The right to lodge a complaint is without prejudice to any other administrative or judicial remedy.

Right to data portability

You have the right to have data that we process automatically on the basis of your consent or in fulfilment of a contract handed over to you or to a third party in a common, machine-readable format. If you request the direct transfer of the data to another controller, this will only take place to the extent that it is technically feasible.

SSL or TLS encryption

This site is used for security reasons and to protect the transmission of confidential content, such as Example orders or inquiries that you send to us as the site operator, an SSL or TLS Encryption. You can recognize an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser line.

If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

Information, deletion and correction

Within the framework of the applicable legal provisions, you have the right to free of charge at any time. Information about your stored personal data, their origin and recipient and the purpose of the data processing and, if applicable, a right to correction or deletion of this data. You can contact us at any time if you have any further questions on the subject of personal data.

Right to restriction of processing

You have the right to request the restriction of the processing of your personal data. You can contact us at any time. The right to restriction of processing exists in the following cases:

  • If you contest the accuracy of your personal data stored by us, we need usually time to check this. For the duration of the audit, you have the right to request the restriction of the processing of your personal data.
  • If the processing of your personal data was/is unlawful, you can request the restriction of data processing instead of deletion.
  • If we no longer need your personal data, but you need it to exercise it,
  • If you need to defend or assert legal claims, you have the right to request the restriction of the processing of your personal data instead of deletion.
  • If you have filed an objection pursuant to Article 21 (1) GDPR, a balance must be struck between your interests and ours. As long as it is not yet clear whose interests prevail, you have the right to request the restriction of the processing of your personal data.
  • If you have restricted the processing of your personal data, this data may only be processed – apart from its storage – with your consent or for the establishment, exercise or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the European Union or a Member State.

 

Objection to advertising e-mails

The use of contact data published within the scope of the imprint obligation for the purpose of sending unsolicited advertising and information materials is hereby rejected. The operators of the pages expressly reserve the right to take legal action in the event of the unsolicited sending of advertising information, such as spam e-mails.

 

4. Data collection on this website

Cookies

Our Internet pages use so-called "cookies". Cookies are small text files and are aimed at No damage to your device. They are stored either temporarily on your device for the duration of a session (session cookies) or permanently (permanent cookies). Session cookies are automatically deleted at the end of your visit. Permanent cookies remain stored on your device until you delete them yourself or they are automatically deleted by your web browser.

In some cases, cookies from third-party companies may also be stored on your device when you enter our site (third-party cookies). These enable us or you to use certain services of the third-party company (e.g. cookies for processing payment services).

Cookies have different functions. Numerous cookies are technically necessary because certain website functions would not work without them (e.g. the shopping cart function or the display of videos). Other cookies are used to evaluate user behaviour or to display advertising.

Cookies that are necessary to carry out the electronic communication process, to provide certain functions desired by you (e.g. for the shopping cart function) or to optimize the website (e.g. cookies to measure the web audience) (necessary cookies) are stored on the basis of Art. 6 para. 1 lit. f GDPR, unless another legal basis is specified. The website operator has a legitimate interest in the storage of necessary cookies for the technically error-free and optimized provision of its services. If consent to the Storage of cookies and comparable recognition technologies has been queried, the processing takes place exclusively on the basis of this consent (Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TTDSG); the consent can be revoked at any time.

You can set your browser so that you are informed about the setting of cookies and Allow cookies only in individual cases, exclude the acceptance of cookies for certain cases or in general and enable the automatic deletion of cookies when closing the browser. Disabling cookies may limit the functionality of this website.

You can set your browser so that you are informed about the setting of cookies and Allow cookies only in individual cases, exclude the acceptance of cookies for certain cases or in general and enable the automatic deletion of cookies when closing the browser. Disabling cookies may limit the functionality of this website.

Insofar as cookies are used by third-party companies or for analysis purposes, we will inform you separately about this in the context of this data protection declaration and, if necessary, request your consent.

OneTrust Consent Management

We offer you the opportunity to decide in detail in which cases you want to consent to tracking via cookies and other technologies - for the purpose of displaying content relevant to you and offers tailored to you.

The processing of your data for the purposes stated here is partly based on legitimate interest, but in some cases we also need your consent. For this purpose, we use the Consent Management Platform (CMP) of OneTrust, LLC, 1350 Spring St NW, Atlanta, GA 30309, as a processor.

The CMP of Onetrust enables you to give us a data protection-compliant and self-determined consent to the processing of your data and to revoke it at any time. You can also object to data processing based on our legitimate interest. Further information on Data Protection and Onetrust's CMP can be found here:
www.onetrust.de/datenschutzerklaerung/.

Server log files

The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are:

  • Browser type and browser version
  • Operating system used
  • Referrer URL
  • Host name of the accessing computer
  • Time of server request IP address
  • This data is not merged with other data sources.

This data is not merged with other data sources.

This data is collected on the basis of Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in the technically error-free presentation and optimization of his website – for this purpose, the server log files must be recorded.

Contact

If you send us inquiries via the contact form, your details from the Inquiry form including the contact details provided by you there for the purpose of processing the request and in case of follow-up questions stored by us. We do not provide this data without your consent further.

The processing of this data takes place on the basis of Art. 6 para. 1 lit.b GDPR, if your request is related to the fulfillment of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective processing of enquiries addressed to us (Art. 6 para. 1 lit. f GDPR) or on your consent (Art. 6 para. 1 lit. a GDPR) if this has been requested; the consent can be revoked at any time.

The data you enter in the contact form will remain with us until you request us to delete it, revoke your consent to storage or the purpose for data storage no longer applies.(e.g. after your request has been processed). Mandatory statutory provisions – in particular retention periods – remain unaffected.

Request by e-mail, telephone or fax

If you contact us by e-mail, telephone or fax, your request, including all resulting personal data (name, request), will be stored and processed by us for the purpose of processing your request. We do not pass on this data without your consent.

The processing of this data takes place on the basis of Art. 6 para. 1 lit.b GDPR, if your request is related to the fulfillment of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective processing of enquiries addressed to us (Art. 6 para. 1 lit. f GDPR) or on your consent (Art. 6 para. 1 lit. a GDPR) if this has been requested; the consent can be revoked at any time.

The data sent by you via contact requests remain with us until you request us to delete, revoke your consent to the storage or the purpose for the data storage lapses (e.g. after completion of your request). Mandatory statutory provisions - in particular statutory retention periods - remain unaffected.

Salesforce Sales Cloud

We use Salesforce Sales Cloud to manage customer data. The provider is salesforce.com Germany GmbH, Erika-Mann-Str. 31, 80636 Munich (hereinafter referred to as "Salesforce").

Salesforce Sales Cloud is a CRM system and allows us, among other things, to manage existing and potential customers as well as customer contacts and to organize sales and communication processes. The use of the CRM system also enables us to analyse our customer-related processes. Customer data is stored on Salesforce's servers. Personal data may also be transmitted to the parent company of salesforce.com Germany GmbH, salesforce.com inc., Salesforce Tower, 415 Mission Street, San Francisco, CA 94105, USA.

Details about Salesforce Sales Cloud features can be found here: www.salesforce.com/de/products/sales-cloud/overview/.

Salesforce Sales Cloud is used on the basis of Art. 6 para. 1 lit. f GDPR. The Website operator has a legitimate interest in the most efficient customer administration and communication possible. If a corresponding consent has been requested, the processing takes place exclusively on the basis of Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TTDSG, insofar as the consent includes the storage of cookies or access to information in the user's terminal device (e.g. DeviceFingerprinting) within the meaning of the TTDSG. The consent can be revoked at any time.

Salesforce has Binding Corporate Rules (BCR) approved by the French Data Protection Authority. These are binding corporate rules that legitimise the company's internal data transfer to third countries outside the EU and the EEA. Details can be found here: www.salesforce.com/de/blog/2020/07/die-binding-corporate-rules-von-salesforce-erfuellenhoechste-da.html

For details, see Salesforce's Privacy Policy: www.salesforce.com/de/company/privacy/.

Order processing

We have concluded a contract for order processing (DPA) with the above-mentioned provider. This is a contract prescribed by data protection law, which ensures that it processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.

Registration on this website – Bike Garage

You can register on this website to use additional features on the site. We only use the data entered for this purpose for the purpose of using the respective offer or service of the Bike Garage for which you have registered. The mandatory information requested during registration must be provided in full. Otherwise, we will refuse the registration.

For important changes, such as the scope of the offer or technically necessary changes and information , we use the e-mail address provided during registration to inform you in this way.

The processing of the data entered during registration takes place for the purpose of carrying out the user relationship established by the registration and, if necessary, for the initiation of further contracts (Art. 6 para. 1 lit.b GDPR) and if consent has been obtained on the basis of Art. 6 para. 1 lit. a GDPR.
The data collected during registration will be stored by us – in Salesforce Sales Cloud – as long as you are registered in the Bike Garage and will then be deleted.

Statutory retention periods remain unaffected.

 

5. Analysis tools and advertising

Google Tag Manager

We use Google Tag Manager. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google Tag Manager is a tool used to provide tracking or statistics tools and other technologies on our website. Google Tag Manager itself does not create a User profiles, does not store cookies and does not carry out any independent analyses. It only serves the Management and playout of the tools integrated via him. However, Google Tag Manager collects your IP address, which can also be transferred to Google's parent company in the United States.

The Use of Google Tag Manager is based on Art. 6 para. 1 lit. f GDPR. The Website operator has a legitimate interest in a quick and uncomplicated integration and administration of various tools on its website. If a corresponding consent has been requested, the processing takes place exclusively on the basis of Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TTDSG, insofar as the consent to the storage of cookies or access to information in the End device of the user (e.g. device fingerprinting) within the meaning of the TTDSG. The consent is revocable at any time.

 

Google Analytics

This website uses functions of the web analysis service Google Analytics. The provider is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics enables the website operator to analyse the behaviour of website visitors. In this case, the website operator receives various usage data, such as .B page views, length of stay, operating systems used and origin of the user. This data is summarized in a user ID and assigned to the respective end device of the website visitor.

Furthermore, with Google Analytics, we can, inter alia: Record your mouse and scroll movements and clicks. Furthermore, Google Analytics uses various modeling approaches to supplement the collected data sets and uses machine learning technologies in data analysis.

Google Analytics uses technologies that enable the recognition of the user for the purpose of analysing user behaviour (e.g. cookies or device fingerprinting). The information collected by Google about the use of this website is usually transmitted to a Google server in the USA and stored there.

The use of this service is based on your consent in accordance with Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TTDSG. The consent can be revoked at any time.

The data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: privacy.google.com/businesses/controllerterms/mccs.

Browser Plugin

You can prevent the collection and processing of your data by Google by downloading and installing the browser plug-in available under the following link: tools.google.com/dlpage/gaoptout.

More information on the handling of user data by Google Analytics can be found in Google's privacy policy: support.google.com/analytics/answer/.

Order processing

We have concluded a contract with Google for order processing and fully implement the strict requirements of the German data protection authorities when using Google Analytics.

 

Clarity

This website uses Clarity. Provider is Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399 (USA), docs.microsoft.com/en-us/clarity/ (hereinafter "Clarity").

Clarity is a tool for analysing user behaviour on this website. In particular, Clarity records mouse movements and creates a graphical representation of which part of the website users scroll on particularly frequently (heatmaps). Clarity may also record sessions so that we can view site usage in the form of videos. Furthermore, we receive information about the general user behaviour within our website.

Clarity uses technologies that enable the recognition of the user for the purpose of analysing user behaviour (e.g. cookies or the use of device fingerprinting). Your personal data is stored on Microsoft's servers (Microsoft Azure Cloud Service) in the USA.

Insofar as consent has been obtained, the above-mentioned service is used exclusively on the basis of Art. 6 para. 1 lit. a GDPR and § 25 TTDSG. The consent can be revoked at any time. If no consent has been obtained, the use of this service takes place on the basis of Art. 6 para. 1 lit. f GDPR; the website operator has a legitimate interest in effective user analysis.

Further details on Clarity's data protection can be found here: docs.microsoft.com/en-us/clarity/faq.

Order processing

We have concluded a contract for order processing (DPA) with the above-mentioned provider. This is a contract prescribed by data protection law, which ensures that it processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.

Further details on Clarity's data protection can be found here: docs.microsoft.com/en-us/clarity/faq.

 

Google Conversion Tracking

This website uses Google Conversion Tracking. The provider is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.

With the help of Google conversion tracking, Google and we can recognize whether the user has performed certain actions. For example, we can evaluate which buttons on our website were clicked on how often and which products were viewed or purchased particularly frequently. This information is used to create conversion statistics. We learn the total number of users who clicked on our ads and what actions they took. We do not receive any information with which we can personally identify the user. Google itself uses cookies or comparable recognition technologies for identification.

The use of this service is based on your consent in accordance with Art. 6 para. 1 lit. a GDPR and §25 para. 1 TTDSG. The consent can be revoked at any time.

More information about Google Conversion Tracking can be found in Google's privacy policy: policies.google.com/privacy.

 

Google DoubleClick

This website uses functions of Google DoubleClick. The provider is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland, (hereinafter "DoubleClick").

DoubleClick is used to show you interest-based advertisements throughout the Google advertising network. The advertisements can be adapted to the interests of the respective viewer with the help of DoubleClick. For example, our advertising may appear in Google search results or in banner ads associated with DoubleClick.

In order to be able to display interest-based advertising to users, DoubleClick must select the respective Recognize viewers and their visited websites, clicks and other information about assign user behaviour. For this purpose, DoubleClick uses cookies or comparable recognition technologies (e.g. device fingerprinting). The information collected is combined into a pseudonymous user profile in order to display interest-based advertising to the user concerned.

The use of this service is based on your consent in accordance with Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TTDSG. The consent can be revoked at any time.
Further information on objection options to the advertisements displayed by Google can be found in the following links: policies.google.com/technologies/ads and adssettings.google.com/authenticated.

 

AWIN Partner Program

On the basis of your express consent in accordance with Art. 6 para. 1 lit. a GDPR, we use components of the company AWIN on our website. AWIN is a German affiliate network and serves as an interface between merchants and affiliates.

Affiliate marketing is an Internet-based form of distribution that enables commercial operators of websites, the so-called merchants or advertisers, to display advertising, which is usually remunerated via click or sale commissions, on websites of third parties, i.e. at sales partners, who are also called affiliates or publishers. The merchant provides an advertising medium via the affiliate network, i.e. an advertising banner or other suitable means of Internet advertising, which are subsequently integrated by an affiliate on its own websites or advertised via other channels, such as keyword advertising or e-mail marketing.

The operating company of AWIN is AWIN AG, Eichhornstraße 3, 10785 Berlin, Germany.

AWIN sets a cookie on the information technology system of the data subject. What cookies are has already been explained above. AWIN's tracking cookie does not store any personal data. Only the identification number of the affiliate, i.e. the partner mediating the potential customer, as well as the serial number of the visitor to a website and the clicked advertising material are stored. The purpose of storing this data is the processing of commission payments between a merchant and the affiliate, which are processed via the affiliate network, i.e. AWIN.

The data subject can prevent the setting of cookies by our website, as already described above, at any time by means of a corresponding setting of the Internet browser used and thus permanently object to the setting of cookies. Such a setting of the Internet browser used would also prevent AWIN from setting a cookie on the information technology system of the data subject. In addition, cookies already set by AWIN can be deleted at any time via an Internet browser or other software programs.

The applicable data protection provisions of AWIN can be retrieved under: www.awin.com/de/rechtliches/privacy-policy.

 

Facebook Pixel

This website uses Facebook's visitor action pixels to measure conversion. The provider of this service is Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. However, according to Facebook, the data collected will also be transferred to the USA and other third countries.

In this way, the behaviour of the site visitors can be tracked after they have clicked on a Facebook advertisement have been redirected to the provider's website. As a result, the effectiveness of Facebook ads can be evaluated for statistical and market research purposes and future advertising measures can be optimized.

The data collected is anonymous for us as the operator of this website, we cannot draw any conclusions about the identity of the users. However, the data is stored and processed by Facebook so that a connection to the respective user profile is possible and Facebook uses the data for its own advertising purposes, in accordance with the Facebook Data Usage Policy. This allows Facebook to enable the placement of advertisements on Facebook pages as well as outside of Facebook. This use of the data cannot be influenced by us as the site operator.

The use of this service is based on your consent in accordance with Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TTDSG. The consent can be revoked at any time.

The data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here:
www.facebook.com/legal/EU_data_transfer_addendum and de-de.facebook.com/help/.

Insofar as personal data is collected on our website with the help of the tool described here and sent to Facebook, we and Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland jointly responsible for this data processing (Art. 26 GDPR). The joint responsibility is limited exclusively to the recording of the Data and its transfer to Facebook. The processing by Facebook after the forwarding is not part of the joint responsibility. The obligations incumbent upon us jointly were set out in a joint processing agreement. The text of the agreement can be found at:
www.facebook.com/legal/controller_addendum.

According to this agreement, we are responsible for providing data protection information when using the Facebook tool and for implementing the tool on our website in a secure manner under data protection law. Facebook is responsible for the data security of Facebook products. Data subject rights (e.g. request for information) with regard to the data processed by Facebook can be asserted directly at Facebook. If you use the If we assert the rights of data subjects with us, we are obliged to forward them to Facebook.

In Facebook's privacy policy you will find further information on the protection of your privacy: de-de.facebook.com/about/privacy/.

You can also disable the Custom Audiences remarketing feature in the Ads Settings section of www.facebook.com/ads/preferences/. To do this, you must be logged in to Facebook.

If you do not have a Facebook account, you can deactivate usage-based advertising from Facebook on the website of the European Interactive Digital Advertising Alliance: www.youronlinechoices.com/de/praferenzmanagement/.

 

Google Signals

This website uses Google Signals. Signals is an online advertising program of Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States ("Google") as an extension of the Google Analytics family. On the basis of the data collected by Google, so-called cross-device tracking is carried out by Google itself. As a website operator, we receive anonymous reports that do NOT allow us to assign them to natural persons or user profiles. More information about Google AdWords and Google Conversion Tracking can be found in Google's privacy policy: policies.google.com/privacy. You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general and activate the automatic deletion of cookies when closing the browser. Disabling cookies may limit the functionality of this website.

 

Bing Ads

On the basis of our legitimate interests (i.e. interest in the analysis, optimisation and economic operation of our online offer within the meaning of Art. 6 para. 1 lit. f. GDPR), we use the conversion and tracking tool "Bing Ads" of Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA, within our online offer. Microsoft stores cookies on users' devices in order to enable an analysis of the use of our online offer by users, provided that users have reached our online offer via a Microsoft Bing ad (so-called "conversion measurement"). In this way, Microsoft and we can recognize that someone has clicked on an ad, has been redirected to our online offer and has reached a previously determined landing page (so-called "conversion page"). We only learn the total number of users who clicked on a Bing ad and were then redirected to the conversion page. No IP addresses are stored. No personal information on the identity of users is disclosed.

Microsoft is certified under the Privacy Shield Agreement and thus offers a guarantee to comply with European data protection law (www.privacyshield.gov). If users do not wish to participate in the Bing Ads tracking process, they can also deactivate the setting of a cookie required for this purpose via browser settings or use Microsoft's opt-out page: choice.microsoft.com.

Users can find more information about data protection and the cookies used by Microsoft Bing Ads in the Microsoft Privacy Statement: privacy.microsoft.com/de-de/privacystatement.

 

BIDEX BIKELOCAL PLUGIN

For the online reservation function, we use a plugin from BIDEX GmbH, Talsperrenweg 72, 58256 Ennepetal (hereinafter: BIDEX BikeLocal). With the BIDEX BikeLocal plugin, we offer you the opportunity to reserve the products displayed on our website via a convenient reservation function at the nearest dealer in order to be able to buy the item directly in the shop. You can also use a callback service within the plugin to be called back directly by the corresponding merchant. Legal basis for the use of the BIDEX BikeLocal plugin and the following under section 2.) the means described for processing your personal data is Art. 6 para. 1 sentence 1 lit. f GDPR.

PROCESSING OF RESERVATIONS AND CALLBACK SERVICE

You can use the BIDEX BikeLocal plugin for non-binding reservations of our products or a callback service through which the selected specialist dealer can contact you directly. In this case, BIDEX as a service provider provides these services for you and assumes the function of an intermediary in order to forward your reservation request to the corresponding specialist dealer. To reserve an item, it is necessary to enter the following data: first name, last name, e-mail address, telephone number (mandatory fields). This data is required for your reservation to be processed. The indication of the telephone number serves in particular the purpose of being able to reach you at short notice if the reserved article is exceptionally not yet ready for presentation (e.g. in unassembled condition) or, for example, must first be procured from the stock of another branch. In such a case, we would also like to be able to contact you if you have already made your way to one of our dealers and, if necessary, if necessary. by e-mail can no longer be reached in time. Failure to provide your data would mean that you would not be able to use the reservation function of the BIDEX BikeLocal plugin. Via the comment function in the reservation form you still have the possibility to write a message, which we will take into account when making the reservation.

For the callback service, the following data is required: name, telephone number. You can optionally enter a desired date for the callback by the dealer and also a comment in the form. Your data will first be transmitted to BIDEX via the form (SSL encryption) and processed there. Your data will then be sent by BIDEX by e-mail to the dealer you have selected for this purpose. BIDEX also receives, stores and processes the transmitted data for the further processing of the reservation request or callback request

BIDEX is solely responsible for the phases of the collection of your data via the form, their transmission to BIDEX and their forwarding to the selected dealer for the processing of your reservation

In order to protect your personal data for the processing of reservations or callback requests via the BIDEX BikeLocal plugin, we have concluded an agreement with BIDEX on joint responsibility for processing and on the technical and organizational measures for the protection of your personal data. This agreement ensures that your personal data will be processed for the phases of joint responsibility exclusively for the processing of your reservation or callback request and will not be used without your express consent, in particular for advertising and analysis purposes that go beyond the scope described below.

In the agreement, we have also stipulated that BIDEX fulfils the existing information obligations towards you under the GDPR and is the joint contact person for the exercise of your rights. Detailed information on data protection when processing reservations via the BIDEX BikeLocal plugin with detailed information on your rights can be found here: local.bidex.bike/Datenschutz.

The legal basis for the processing of your data in connection with a reservation is Art. 6 para. 1 sentence 1 lit b GDPR. BIDEX processes your data for the processing of your reservation of our products in the selected specialist shop. BIDEX deletes the data processed in this context after storage is no longer necessary or restricts processing if there are statutory retention obligations.

PROVISION OF THE BIDEX BIKELOCAL PLUGIN

Data transmission when calling up the reservation function When the reservation function on our website is called, an automatic connection to the BIDEX servers is established. For technical reasons, your IP address will be transmitted to BIDEX in order to display the reservation function in your browser, but will only be temporarily stored in the log files of the BIDEX server. The data and information collected anonymously in the log files are evaluated by BIDEX only statistically, with the aim of increasing the data protection and data security of the BIDEX BikeLocal plugin and ensuring an optimal level of protection for the personal data processed. For technical reasons, we have no influence on these evaluations.

Use of cookies BIDEX uses session cookies to operate the plugin. Session cookies are small text files that are temporarily stored on your computer system until you leave our website. For technical reasons, we have no influence on the use of these cookies. You can individually configure your browser settings for accepting or rejecting cookies. We would like to point out that in this case you may not be able to use all the functions of the BIDEX BikeLocal plugin.

 

6. Newsletter

Newsletter data

If you would like to receive the newsletter offered on the website or have registered in the Bike Garage, we need an e-mail address from you as well as information that allows us to verify that you are the owner of the e-mail address provided and agree to receive the newsletter. Further data will not be collected or will only be collected on a voluntary basis. We use this data exclusively for sending the requested information and do not pass it on to third parties outside the Accell Central Group.

The processing of the data entered in the newsletter registration form takes place exclusively on Basis of your consent (Art. 6 para. 1 lit. a GDPR). You can revoke your consent to the storage of the data, the e-mail address and their use for sending the newsletter at any time, for example via the "unsubscribe" link in the newsletter. The legality of the data processing operations that have already taken place remains unaffected by the revocation.

The data stored by you for the purpose of subscribing to the newsletter will be stored by us until your Unsubscribe from the newsletter stored by us or .dem newsletter service provider and deleted from the newsletter distribution list after unsubscribing from the newsletter or after the end of the purpose. We reserve the right to delete or block e-mail addresses from our newsletter distribution list at our own discretion within the scope of our legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR.

Data stored by us for other purposes remain unaffected by this. After you unsubscribe from the newsletter distribution list, your e-mail address will be sent to us or .dem Newsletter service providers may be stored in a blacklist if this is necessary to prevent future mailings. The data from the blacklist will only be used for this purpose and will not be merged with other data. This serves both your interest and our interest in complying with the legal requirements when sending newsletters (legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR). The storage in the blacklist is not limited in time. You can object to the storage if your interests outweigh our legitimate interest.

For details on the tools you use, see Salesforce Sales Cloud.

 

7. Plugins and Tools

Vimeo

This website uses plugins from the video portal Vimeo. The provider is Vimeo Inc., 555 West 18th Street, New York, New York 10011, USA.

When you visit one of our pages equipped with a Vimeo video, a connection to Vimeo's servers is established. The Vimeo server is informed which of our pages you have visited. In addition, Vimeo obtains your IP address. This also applies if you are not logged in to Vimeo or do not have an account with Vimeo. The information collected by Vimeo is transmitted to the Vimeo server in the United States.

If you are logged in to your Vimeo account, you enable Vimeo to assign your surfing behaviour directly to your personal profile. You can prevent this by logging out of your Vimeo account.

Vimeo uses cookies or comparable recognition technologies (e.g. device fingerprinting) to recognize website visitors.

The use of Vimeo is in the interest of an appealing presentation of our online offers. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR. Provided that a corresponding consent has been requested, the processing takes place exclusively on the basis of Art. 6 para. 1 lit. a GDPR and § 25 (1) TTDSG, insofar as the consent includes the storage of cookies or access to information in the user's terminal device (e.g. device fingerprinting) within the meaning of the TTDSG. The consent can be revoked at any time.

The data transfer to the USA is based on the standard contractual clauses of the EU Commission and, according to Vimeo, on "legitimate business interests".

Details can be found here: vimeo.com/privacy.

Further information on the handling of user data can be found in Vimeo's privacy policy at: vimeo.com/privacy.

 

Google Web Fonts

This site uses so-called web fonts, which are provided by Google, for the uniform presentation of fonts. When you call up a page, your browser loads the required web fonts into your browser cache in order to display texts and fonts correctly.

For this purpose, the browser you are using must connect to Google's servers. As a result, Google becomes aware that this website has been accessed via your IP address. The use of Google WebFonts is based on Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in the uniform presentation of the typeface on its website. If a corresponding consent has been requested, the processing takes place exclusively on the basis of Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TTDSG, insofar as the consent includes the storage of cookies or access to information in the user's terminal device (e.g. DeviceFingerprinting) within the meaning of the TTDSG. The consent can be revoked at any time.

If your browser does not support web fonts, a standard font will be used by your computer.

Further information on Google Web Fonts can be found under developers.google.com/fonts/faq and in Google's privacy policy: policies.google.com/privacy.

 

Google Maps

This site uses the map service Google Maps. The provider is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.

To use the functions of Google Maps, it is necessary to save your IP address. This information is usually transmitted to a Google server in the USA and stored there. The provider of this site has no influence on this data transfer. If Google Maps is activated, Google may use Google Web Fonts for the purpose of uniform display of fonts. When you call up Google Maps, your browser loads the required web fonts into your browser cache in order to display texts and fonts correctly.
The use of Google Maps is in the interest of an appealing presentation of our online offers and an easy findability of the places indicated by us on the website. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR. Provided that a corresponding consent has been requested, the processing takes place exclusively on the basis of Art. 6 para. 1 lit. a GDPR and § 25 (1) TTDSG, insofar as the consent includes the storage of cookies or access toinformation in the user's terminal device (e.g. device fingerprinting) within the meaning of the TTDSG. The consent can be revoked at any time.

The data transfer to the USA is based on the standard contractual clauses of the EU Commission.

Details can be found here:
privacy.google.com/businesses/gdprcontrollerterms/ and privacy.google.com/businesses/gdprcontrollerterms/sccs/.

More information on the handling of user data can be found in Google's privacy policy: policies.google.com/privacy.

OpenStreetMap

We use the map service of OpenStreetMap (OSM).

We integrate the map material of OpenStreetMap on the server of the OpenStreetMap Foundation, St John's Innovation Centre, Cowley Road, Cambridge, CB4 0WS, Great Britain. Great Britain is considered a safe third country under data protection law. This means that the UK has a level of data protection that corresponds to the level of data protection in the European Union. When using the OpenStreetMap maps connect to the servers of the OpenStreetMap Foundation.

References

Your IP address and other information about your behaviour on this website will be forwarded to the OSMF. OpenStreetMap may store cookies in your browser or use comparable recognition technologies.

The use of OpenStreetMap is in the interest of an appealing presentation of our online offers and an easy findability of the places specified by us on the website. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR. If a corresponding consent has been requested, the processing takes place exclusively on the basis of Art. 6 para. 1 lit. a GDPR and §25 para. 1 TTDSG, insofar as the consent includes the storage of cookies or access to information in the user's terminal device (e.g. device fingerprinting) within the meaning of the TTDSG. The consent can be revoked at any time.

 

Google reCAPTCHA

We use "Google reCAPTCHA" (hereinafter "reCAPTCHA") on this website. The provider is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.

The purpose of reCAPTCHA is to check whether the data entry on this website (e.g. in a contact form) is carried out by a human or by an automated program. For this purpose, reCAPTCHA analyses the behaviour of the website visitor based on various characteristics. This analysis begins automatically as soon as the website visitor enters the website. Evaluated for analysis reCAPTCHA various information (e.g. IP address, length of stay of the website visitor on the website or mouse movements made by the user). The data collected during the analysis will be forwarded to Google.

The reCAPTCHA analyses run completely in the background. Website visitors are not informed that an analysis is taking place.

The storage and analysis of the data takes place on the basis of Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in protecting its web offers from abusive automated spying and SPAM. If a corresponding consent has been requested, the processing takes place exclusively on the basis of Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TTDSG, insofar as the consent includes the storage of cookies or access to information in the user's terminal device (e.g. device fingerprinting) within the meaning of the TTDSG. The consent can be revoked at any time.

For more information about Google reCAPTCHA, please refer to the Google Privacy Policy and the Google Terms of Service under the following links:
policies.google.com/privacy and policies.google.com/terms.