Privacy Statement

PRIVACY STATEMENT

May 2018

EVOC SPORTS GmbH respects your privacy and stands for fairness and transparency in the treatment of your personal data. In accordance with the applicable data protection regulations, including the European General Data Protection Regulation (GDPR), we explain in this privacy policy statement how we collect, store, protect and ultimately erase your personal data. This privacy statement contains information about our data protection provisions and measures and also about the decisions you are entitled to take, as part of your right to control your information, regarding the manner in which your information is collected and used online. You can easily access this statement on our homepage and in the footer of every subpage.

1. Name and address of controller

The controller within the meaning of the General Data Protection Regulation (GDPR) and other national data protection laws of the Member States as well as other data protection provisions is:

EVOC SPORTS GmbH,
Tegernseer Landstraße 37a,
D-81541 Munich,


Tel: +49 89 54041140,

Email: info@evocsports.de,

Website: www.evocsports.com

You can contact the Data Protection Officer of EVOC SPORTS GmbH at data_compliance@evocsports.com.

2. Nature and scope of data processing for the provision of the website

When you visit and use our website, we collect the personal data that your browser automatically sends to our server. This information is stored temporarily in a log file. When you use our website, we collect the following data which we require for technical reasons so that we can display our website to you and ensure its stability and security:

(1) information about the browser type, the version used and the language and version of the browser software: this is for analytical purposes to ensure optimum presentation of our websites;

(2) the operating system and its interface: this is for analytical purposes to ensure optimum presentation of our websites;

(3) the internet service provider: this is for analytical purposes to ensure optimum presentation of our websites;

(4) the IP address so that our website can be shown when accessed;

(5) date and time of access and the time zone difference in relation to GMT, content of the request, access status and respective volume of data transmitted, in order to ensure the smooth operation of our offer;

(6) website from which the request is made;

(7) clickstream data (i.e. the pages you access, the links you click on and other actions relating to EVOC websites) and product information.

Legal basis:

The legal basis for the temporary storage of the data and log files is Article 6(1)(f) GDPR. We collect this data in order to be able to show you our website and to ensure the security of our IT systems. Collection of this data is necessary for the operation of our website.

Storage period:

As soon as this data is no longer necessary for the purpose of displaying the website, it is erased. The recording of data in order to make the website available and the storage of data in log files is absolutely necessary for the operation of the website. Consequently, users do not have the option of objecting to this. More extensive storage may occur in a specific case where provided for by law.

3. Contact forms

Nature and scope of data processing

On our website we offer you the possibility of contacting us using a form provided for this purpose. During the process of sending your inquiry via the contact form, reference is made to this privacy statement in order to obtain your consent. If you make use of the contact form, the following personal data concerning you will be processed:

Your name, email address, subject line and message. If the inquiry is in relation to a warranty, specifically an inquiry regarding FREE CRASH REPLACEMENT, the following additional data is requested: postal address, post code, town, telephone number, country, body size.

When you send your message, the following data is also stored: your IP address, and date and time the message is sent. Alternatively, you can contact us using the email address provided. In that case, the user’s personal data sent with the email is saved.

The processing of personal data from the input mask is for the sole purpose of handling the contact request. Similarly, if you get in touch by email, the required legitimate interest in processing the data is also met. The rest of the personal data processed during the sending procedure serves to prevent misuse of the contact form and to ensure the security of our IT systems. The data is not passed on to third parties during this process. The data is used exclusively to process the conversation.

Legal basis for data processing

The legal basis for collecting and sending a contact inquiry is Article 6(1)(b) and (f) GDPR. Legal basis for processing your Personal Data is Article 6(1)(a) when you provided us with your consent.

Storage period

The data is erased as soon as it is no longer required in order to fulfil the purpose for which it was collected. This is the case with the personal data from the input mask of the contact form and data sent by email once the conversation with the user has ended. The conversation has ended when it can be assumed from the circumstances that the relevant situation has been definitively resolved. The additional personal data collected during the sending procedure is erased after seven days at the latest.

Objection and elimination options

A user who contacts us via email may object to the storage of his or her personal data at any time. In this case, it will not be possible to continue the conversation. Any personal data stored during the course of the contact process will be erased in such a case.

4. Use of cookies

Our website uses cookies. Cookies are text files stored in the user’s internet browser and/or by the internet browser on the user’s computer system. When a user visits a website, a cookie may be stored on the user’s operating system. This cookie contains a characteristic sequence of signs which enables the browser to be clearly identified when it accesses the website again.

We use different types of cookies on the website. These cookies serve different purposes. According to their purpose, cookies may generally be assigned to one of the following categories:

Our website uses cookies from all of the above categories in order to provide you with the best internet experience. For a detailed list of the cookies used by us please see the cookie table below.

Name of the Cookie

Website

Purpose of the Cookie

Storage period

_ga;

evocsports.com

This cookie is used to distinguish unique users by assigning a randomly generated number as a client identifier. It is included in each page request in a site and used to calculate visitor, session and campaign data for the sites analytics reports.

14 months

_gat

evocsports.com

the _gat cookie which is used to limit the amount of data recorded by Google on high traffic volume websites

14 months

a) Strictly Necessary Cookies

We employ cookies in order to make the design of our EVOC website more user-friendly. Some elements in our website require that the accessing browser can be identified even after changing page.

 

Legal basis

Strictly Necessary Cookies will be set by us on your device without us explicitly asking for your consent. The legal basis for processing of personal data using cookies is Article 6(1)(f) GDPR.

 

Storage period

Cookies are stored on your computer, from where they are sent to us. Therefore, you as user also have complete control over the use of cookies. By changing the settings of your internet browser, you can block or limit the transmission of cookies. Cookies that have already been stored can be deleted at any time. This can also be done automatically. If cookies are blocked for our website, it is possible that not all of the website’s functions can continue to be used in full.

Objection and elimination options

Not all functions of the website can be used without these cookies. If you do not accept the use of Strictly Necessary Cookies, please disable cookies or refrain from visiting our website. You can block the cookies in your browser settings. There are no further possibilities of objection.

b) Analytical Cookies

We further use analytical cookies which allow us to analyse the use of our website by the visitors.The following data can be transmitted in this way:

Data and purpose of processing:

(1) search term entered
(2) frequency of site visits
(3) use of website functions
Analysis cookies are used for the purpose of improving the quality and content of our website. From the analysis cookies we can find out how the website is used and thus constantly optimise our offer. The user data collected in this way is pseudonymised by technical means. Consequently, it is not possible to match the data to the accessing user. The data is not stored together with other personal data of the user. When visiting our website, an info banner informs users of the use of cookies for analytical purposes and refers them to this privacy statement. Users are also informed about how to prevent the storage of cookies in their browser settings.

Legal basis

We collect and process the data based on your consent pursuant to Article 6(1)(a) GDPR.

Storage period

The data will be used until you withdraw your consent. Cookies are stored on the user’s computer, from where they are sent to our website. Therefore, you as user also have complete control over the use of cookies. By changing the settings of your internet browser, you can block or limit the transmission of cookies. Cookies that have already been stored can be deleted at any time.

Objection and elimination options

You may withdraw your consent at any time. By changing the settings of your internet browser, you can block or limit the transmission of cookies and also delete cookies that have been stored.

5.1 Use of Google Maps

On our website, we use the Google Maps component of the company Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA; hereinafter “Google”.

Each time the Google Maps component is accessed, a cookie is inserted by Google in order to process user settings and data when displaying the page into which the Google Maps component is integrated. This cookie is generally not deleted when the browser is closed but expires after a certain period of time unless you delete it manually first.If you do not agree to this processing of your data, you have the option of blocking the Google Maps service and in this way preventing the transmission of data to Google. To do this, you have to deactivate the JavaScript function in your browser. However, we should point out that in this case you will not be able to use Google Maps or only to a limited extent.
The use of Google Maps and the information obtained through it occurs pursuant to Google’s Terms of Service at

http://www.google.de/intl/de/policies/terms/regional.html

and the additional business terms for Google Maps at

https://www.google.com/intl/de_de/help/terms_maps.html.

 

5.2 Use of Vimeo components

We use components of the provider Vimeo on our website. Vimeo is a service provided by Vimeo LCC, 555 West 18th Street, New York, New York 10011, USA. Every single time you access our website, which is equipped with one of these components, this component will cause the browser you are using to download a particular presentation of the Vimeo component. If you visit our website while logged into Vimeo, it will recognise the exact page you are visiting through the information collected by the component and allocate this information to your personal account at Vimeo. For example, if you click the “Play” button or leave comments, this information is sent to your personal user account at Vimeo, where it is saved. The information that you have visited our website is also forwarded to Vimeo. This occurs regardless of whether or not you click on the components or leave comments, for example.
If you wish to prevent the transmission and storage by Vimeo of data about you and your behaviour on our website, you have to log out of Vimeo before you visit our website. More information about this can be found in the privacy policy of Vimeo, particularly regarding the collection and use of data by Vimeo: https://vimeo.com/privacy

5.3 Use of Google Analytics

This website uses Google Analytics, a web analysis service of Google Inc. (“Google”), 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, which operates as a processor for us.
Google Analytics uses cookies. These are text files stored on your computer which enable analysis of your use of the website. The information about your use of the website generated by cookies is usually transmitted to a Google server in the United States and stored there.
The following data is processed:

The IP address transmitted by your browser within the scope of Google Analytics is not combined with other Google data. On our website, we have also expanded Google Analytics by adding the “IP anonymisation” code. This ensures that your IP address is hidden so that all data is collected anonymously. Consequently, in anonymising the IP, your IP address is first abbreviated by Google within the Member States of the European Union or other contracting states to the Agreement on the European Economic Area. Only in exceptional cases is the complete IP address sent to a Google server in the United States and abbreviated there. Google uses this information generated on behalf of the operator of this website in order to evaluate your use of our website, to compile reports about website activity and to provide the website operator with other services related to website use and internet activity.

Our legitimate interest in data processing also resides in these purposes. The legal basis for the use of Google Analytics is Article 6(1)(f) GDPR. For the exceptional cases in which personal data is sent to the United States, Google has agreed to abide by the EU-US Privacy Shield.
You can prevent the storage of cookies through a setting contained for this purpose in your browser software; however, we should point out that in this case you may not be able to use all the functions of this website in full.
You can also prevent the capture for Google of data generated by the cookie referring to your use of the website (including your IP address) as well as the processing of this data by Google by downloading and installing a browser plug-in available at the following link: https://tools.google.com/dlpage/gaoptout?hl=en
As an alternative to the browser add-on, particularly for browsers in mobile devices, you can also prevent the collection of information by Google Analytics by clicking here to block Google Analytics.
This sets up an opt-out cookie preventing the future capture of your data when visiting this website. The opt-out cookie applies only to the browser in question and only to our website and is downloaded to your device. If you delete the cookies in this browser, you will have to set up the opt-out cookie again. [Note. You can find information about the integration of the opt-out cookie at: https://developers.google.com/analytics/devguides/collection/gajs/?hl=de#disable

We also use Google Analytics to evaluate data from double-click cookies as well as AdWords for statistical purposes. If you do not wish this to occur, you can deactivate this in the ad settings manager (http://www.google.com/settings/ads/onweb/?hl=en).

You can find further information about data protection in connection with Google Analytics on the Google Analytics Help page (https://support.google.com/analytics/answer/6004245?hl=en).

6. Rights of data subjects

If your personal data is processed, you are a data subject within the meaning of the GDPR and have the following rights with respect to the controller:

Right to information

You may request from the controller confirmation as to whether or not we are processing personal data concerning you. If this is the case, you may request from the controller access to the following information:
(1) the purposes for which the personal data is processed;
(2) the categories of personal data processed;
(3) the recipients or categories of recipient to whom the personal data concerning you have been or will be disclosed;
(4) the envisaged period for which the personal data concerning you will be stored, or, if specific information about this is not possible, the criteria used to determine that period;
(5) the existence of the right to request from the controller rectification or erasure of personal data concerning you or the right to restrict personal data concerning you or to object to such processing;
(6) the right to lodge a complaint with a supervisory authority;
(7) where the personal data is not collected from the data subject, any available information as to its source;
(8) the existence of automated decision-making, including profiling, referred to in Article 22(1) and (4) GDPR and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject.
You have the right to request information about whether or not personal data concerning you is sent to third countries or international organisations. In relation to the transfer, you may request to be informed of the appropriate safeguards pursuant to Article 46 GDPR.

Right of rectification

You have the right to obtain from the controller rectification and/or completion where the personal data processed concerning you is inaccurate or incomplete. The controller must undertake the rectification without undue delay.

Right to restriction of processing

Subject to the following conditions, you may request restriction of the processing of the personal data concerning you:
(1) if you contest the accuracy of the personal data concerning you, for a period enabling the controller to verify the accuracy of the personal data;
(2) if the processing is unlawful and you oppose the erasure of the personal data and request the restriction of their use instead;
(3) if the controller no longer needs the personal data for the purposes of the processing, but you require the data for the establishment, exercise or defence of legal claims; or
(4) if you have objected to processing pursuant to Article 21(1) GDPR and it has not yet been verified whether the legitimate grounds of the controller override your grounds.
Where processing of the personal data concerning you has been restricted, with the exception of storage, such data will only be processed, with your consent, for the establishment, exercise or defence of legal claims, for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State. Where processing has been restricted in accordance with the above conditions, you will be informed by the controller before the restriction on processing is lifted.

Right to erasure

a)    Obligation to erase
You may request that the controller erase personal data concerning you without undue delay and the controller will be obliged to erase this data without undue delay where one of the following grounds applies:
(1) The personal data concerning you is no longer necessary in relation to the purposes for which it was collected or otherwise processed.
(2) You withdraw the consent on which the processing is based according to point (a) of Article 6(1), or point (a) of Article 9(2) GDPR, and where there is no other legal ground for the processing.
(3) You object to the processing pursuant to Article 21(1) GDPR and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Article 21(2) GDPR.
(4) The personal data concerning you was unlawfully processed.
(5) The personal data concerning you has to be erased to ensure compliance with a legal obligation in Union or Member State law to which the controller is subject.
(6) The personal data concerning you was collected in relation to the offer of information-society services referred to in Article 8(1) GDPR.
b)    Information to third parties
Where the controller has made personal data concerning you public and is obliged pursuant to Article 17(1) GDPR to erase the personal data, the controller, taking account of available technology and the cost of implementation, shall take reasonable steps, including technical measures, to inform controllers which are processing the personal data that you, as the data subject, have requested the erasure by such controllers of any links to, or copy or replication of, those personal data.
c)    Exceptions
There will be no right to erasure where the processing is necessary
(1) for exercising the right of freedom of expression and information;
(2) for compliance with a legal obligation which requires processing by Union or Member State law to which the controller is subject or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
(3) for reasons of public interest in the area of public health in accordance with points (h) and (i) of Article 9(2) as well as Article 9(3) GDPR;
(4) for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes in accordance with Article 89(1) GDPR in so far as the right referred to in part (a) is likely to render impossible or seriously impair the achievement of the objectives of that processing; or
(5) for the establishment, exercise or defence of legal claims.

Right of notification

Where you have exercised your right of rectification, erasure or restriction of processing to the controller, the controller is under an obligation to communicate any rectification or erasure of data or restriction of processing to each recipient to whom the personal data concerning you have been disclosed, unless this proves impossible or involves disproportionate effort. You have the right to be informed about these recipients by the controller

Right to data portability

You have the right to receive the personal data concerning you, which you provided to a controller, in a structured, commonly used and machine-readable format. You also have the right to transmit those data to another controller without hindrance from the controller to which the personal data have been provided, where
(1) the processing is based on consent pursuant to point (a) of Article 6(1) GDPR or point (a) of Article 9(2) GDPR or on a contract pursuant to point (b) of Article 6(1) GDPR; and
(2) the processing is carried out by automated means.
In exercising this right, you also have the right to have the personal data concerning you transmitted directly from one controller to another, where technically feasible. This may not adversely affect the freedoms and rights of other persons. The right to data portability does not apply to processing of personal data necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

Right to object

You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on point (e) or (f) of Article 6(1) GDPR, including profiling based on those provisions. The controller may no longer process the personal data concerning you unless the controller demonstrates compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defence of legal claims. Where personal data concerning you are processed for direct marketing purposes, you have the right to object at any time to processing of personal data concerning you for such marketing. This also applies to profiling, to the extent that it is related to such direct marketing. Where you object to processing for direct marketing purposes, the personal data concerning you will no longer be processed for such purposes. In the context of the use of information-society services, and notwithstanding Directive 2002/58/EC, you have the option of exercising your right to object by automated means using technical specifications.

Right to withdraw the data protection declaration of consent

You have the right to withdraw your data protection declaration of consent at any time. The withdrawal of consent will not affect the lawfulness of processing based on consent before its withdrawal.

Automated decision-making in individual cases, including profiling

You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or significantly affects you in some similar way. This does not apply if the decision:
(1) is necessary for the entry into, or performance of, a contract between you and a data controller;
(2) is authorised by Union or Member State law to which the controller is subject and which also lays down suitable measures to safeguard your rights and freedoms and legitimate interests; or
(3) is based on your explicit consent.
However, these decisions must not be based on special categories of personal data referred to in Article 9(1) GDPR, unless point (a) or (g) of Article 9(2) applies and suitable measures to safeguard your rights and freedoms and legitimate interests are in place.
With regard to the cases referred to points (1) and (3), the data controller shall implement suitable measures to safeguard your rights and freedoms and legitimate interests, including at least the right to obtain human intervention from the controller, to express your point of view and to contest the decision.
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or the place of the alleged infringement if you consider that the processing of personal data relating to you infringes the GDPR. The supervisory authority with which the complaint has been lodged shall inform the complainant of the progress and outcome of the complaint including the possibility of a judicial remedy pursuant to Article 78 GDPR.

Right to lodge a complaint with a supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or the place of the alleged infringement if you consider that the processing of personal data relating to you infringes the GDPR. The supervisory authority with which the complaint has been lodged shall inform the complainant of the progress and outcome of the complaint including the possibility of a judicial remedy pursuant to Article 78 GDPR.