Data privacy

**1. Name and Contact Details of the Data Controller and the Company Data Protection Officer**

This data protection information applies to data processing by:

Data Controller: CicloSport K.W. Hochschorner GmbH (hereinafter: CicloSport), Robert-Stirling-Ring 1, 82152 Krailling, Germany

Email: ciclosport@ciclosport.de

Telephone: +49 (0) 89 895 270 0

The company data protection officer of CicloSport can be reached at the above address, c/o Data Protection, or at datenschutz@ciclosport.de.

**2. Collection and Storage of Personal Data as well as Type and Purpose of their Use**

**a) When visiting the website / using our app CicloApp**

When you visit our website https://ciclosport.com or use our app CicloApp, the browser used on your device automatically sends information to the server of our website. This information is temporarily stored in a so-called log file. The following information is collected without your intervention and stored until automated deletion:

– IP address of the requesting computer,
– Date and time of access,
– Name and URL of the retrieved file,
– Website from which the access occurs (referrer URL),
– Browser used and, if applicable, the operating system of your computer as well as the name of your access provider.

The mentioned data is processed by us for the following purposes:

– Ensuring a smooth connection setup of the website,
– Ensuring comfortable use of our website,
– Evaluation of system security and stability as well as
– For other administrative purposes.

The legal basis for data processing is Art. 6 para. 1 sentence 1 lit. f GDPR. Our legitimate interest follows from the purposes listed above for data collection. In no case do we use the collected data for the purpose of drawing conclusions about you as a person.

Furthermore, we use cookies and analysis services when you visit our website. More detailed explanations can be found under sections 4 and 5 of this data protection declaration.

**b) When registering for our newsletter**

If you have expressly consented pursuant to Art. 6 para. 1 sentence 1 lit. a GDPR, we use your email address to send you our newsletter regularly. Providing an email address is sufficient to receive the newsletter.

You can unsubscribe at any time, for example via a link at the end of each newsletter. Alternatively, you can send your unsubscribe request/revocation by email to datenschutz@ciclosport.de. After unsubscribing, your email address will be deleted by us unless the processing of the same is permitted based on another permission rule of Art. 6 GDPR – in this case, deletion occurs after the respective permission rule ceases to apply.

**c) When using our contact form**

For questions of any kind, we offer you the opportunity to contact us via a form provided on the website. Providing a valid email address is required so that we know who the inquiry is from and can respond to it. Further information can be provided voluntarily.

Data processing for the purpose of contacting us is based on your voluntarily given consent pursuant to Art. 6 para. 1 sentence 1 lit. a GDPR.

The personal data collected by us for the use of the contact form will be automatically deleted after your inquiry has been resolved unless the processing of personal data is permitted based on another permission rule of Art. 6 GDPR – in this case, deletion occurs after the respective permission rule ceases to apply.

**d) Registration on our website / Registration via our mobile app “CicloApp”**

If you have expressly consented, we use your name and email address for registration in our online portal by creating a user account. Within this online portal, you can upload, save, and display fitness data collected by you. This data is not transferred to third parties.

Data processing for the purpose of using our online portal (uploading, saving, displaying) is based on your voluntarily given consent pursuant to Art. 6 para. 1 sentence 1 lit. a GDPR.

The personal data collected by us for the use of our online portal will be deleted after your user account is deleted unless the processing of personal data is permitted based on another permission rule of Art. 6 GDPR – in this case, deletion occurs after the respective permission rule ceases to apply.

**3. Transfer of Data**

Your personal data will not be transferred to third parties for purposes other than those listed below.

We only share your personal data with third parties if:

– You have given your explicit consent pursuant to Art. 6 para. 1 sentence 1 lit. a GDPR,
– The transfer is necessary pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR for the establishment, exercise, or defense of legal claims and there is no reason to assume that you have an overriding legitimate interest in not disclosing your data,
– There is a legal obligation to transfer pursuant to Art. 6 para. 1 sentence 1 lit. c GDPR, and
– It is legally permissible and necessary for the processing of contractual relationships with you pursuant to Art. 6 para. 1 sentence 1 lit. b GDPR. Relevant recipient categories include technical service providers for providing the website content and partially automated communication between user/data subject and website provider/data controller, as well as logistics service providers.

**4. Cookies**

We use cookies on our site. These are small files that your browser automatically creates and that are stored on your end device (laptop, tablet, smartphone, etc.) when you visit our site. Cookies do not harm your end device, do not contain viruses, trojans, or other malware.

Information is stored in the cookie, which results in connection with the specific end device used. However, this does not mean that we obtain direct knowledge of your identity.

The use of cookies serves, on the one hand, to make the use of our offer more pleasant for you. For example, we use so-called session cookies to recognize that you have already visited individual pages of our website. These are automatically deleted after you leave our site.

In addition, we also use temporary cookies to optimize user-friendliness, which are stored on your end device for a certain fixed period. If you visit our site again to use our services, it is automatically recognized that you have already been with us and what entries and settings you have made so that you do not have to enter them again.

Furthermore, we use cookies to statistically record the use of our website and to evaluate it for the purpose of optimizing our offer for you (see section 5). These cookies enable us to automatically recognize that you have already been with us when you visit our site again. These cookies are automatically deleted after a defined period.

The data processed by cookies are necessary for the aforementioned purposes to protect our legitimate interests and those of third parties pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR.

Most browsers accept cookies automatically. However, you can configure your browser so that no cookies are stored on your computer or a message always appears before a new cookie is created. However, completely disabling cookies may mean that you cannot use all the functions of our website.

**5. Analysis Tools**

**Google Analytics**

The tracking measures listed below and used by us are carried out on the basis of Art. 6 para. 1 sentence 1 lit. f GDPR. With the tracking measures used, we want to ensure a needs-based design and the ongoing optimization of our website. On the other hand, we use the tracking measures to statistically record the use of our website and evaluate it for the purpose of optimizing our offer for you. These interests are to be regarded as legitimate within the meaning of the aforementioned provision.

For the purpose of the needs-based design and ongoing optimization of our pages, we use Google Analytics, a web analytics service provided by Google Inc. (https://www.google.de/intl/de/about/) (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; hereinafter “Google”). In this context, pseudonymized usage profiles are created and cookies (see section 4) are used. The information generated by the cookie about your use of this website such as

– Browser type/version,
– Operating system used,
– Referrer URL (the previously visited page),
– Host name of the accessing computer (IP address),
– Time of server request,

are transmitted to a Google server in the USA and stored there. The information is used to evaluate the use of the website, to compile reports on website activities, and to provide other services related to website use and internet use for the purpose of market research and demand-oriented design of these internet pages. This information may also be transferred to third parties if required by law or if third parties process this data on behalf of Google. Under no circumstances will your IP address be merged with other data from Google. The IP addresses are anonymized, so that an assignment is not possible (IP masking).

You can prevent the installation of cookies by setting your browser software accordingly; however, we point out that in this case, not all functions of this website may be fully usable.

You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) as well as the processing of this data by Google by downloading and installing a browser add-on (https://tools.google.com/dlpage/gaoptout?hl=de).

As an alternative to the browser add-on, especially for browsers on mobile devices, you can also prevent the collection by Google Analytics by clicking on this link. An opt-out cookie will be set that prevents the future collection of your data when visiting this website. The opt-out cookie is only valid in this browser and only for our website and is stored on your device. If you delete the cookies in this browser, you must set the opt-out cookie again.

Further information on data protection in connection with Google Analytics can be found in

the Google Analytics help (https://support.google.com/analytics/answer/6004245?hl=de).

**6. Data Subject Rights**

You have the right:

– According to Art. 15 GDPR, to request information about your personal data processed by us. In particular, you can request information about the processing purposes, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage duration, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right to complain, the origin of your data if it was not collected by us, as well as the existence of automated decision-making including profiling and, if applicable, meaningful information on their details;
– According to Art. 16 GDPR, to request the immediate correction of incorrect or completion of your personal data stored by us;
– According to Art. 17 GDPR, to request the deletion of your personal data stored by us, unless the processing is necessary to exercise the right to freedom of expression and information, to fulfill a legal obligation, for reasons of public interest, or to assert, exercise, or defend legal claims;
– According to Art. 18 GDPR, to request the restriction of the processing of your personal data, as far as the accuracy of the data is disputed by you, the processing is unlawful, but you reject its deletion and we no longer need the data, but you need it for the assertion, exercise, or defense of legal claims, or you have objected to the processing according to Art. 21 GDPR;
– According to Art. 20 GDPR, to receive your personal data, which you have provided to us, in a structured, commonly used, and machine-readable format or to request the transfer to another responsible party;
– According to Art. 7 para. 3 GDPR, to revoke your once given consent at any time against us. This has the consequence that we may no longer continue the data processing based on this consent for the future, and
– According to Art. 77 GDPR, to complain to a supervisory authority. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or our company headquarters for this.

**7. Right of Objection**

If your personal data is processed based on legitimate interests according to Art. 6 para. 1 sentence 1 lit. f GDPR, you have the right to object to the processing of your personal data according to Art. 21 GDPR, as far as there are reasons for this arising from your particular situation or the objection is directed against direct advertising. In the latter case, you have a general right to object, which is implemented by us without specifying a particular situation.

If you wish to exercise your right of revocation or objection, simply send an email to datenschutz@ciclosport.de.

**8. Validity and Changes to this Data Protection Declaration**

This data protection declaration is currently valid as of May 2018.

Due to the further development of our website and offers thereof or due to changed legal or official requirements, it may become necessary to change this data protection declaration. The current data protection declaration can be retrieved and printed at any time on the website at https://www.ciclosport/datenschutz.

Imprint from the imprint generator of the law firm Hasselbach, Lawyers for labor and family law