Source: https://www.komm-mit.com/privacy-policy/
Timestamp: 2019-04-21 08:27:34+00:00

Document:
We collect and use personal data from our users only to the extent required for the provision of a functional website and for the provision of our content and services. Collection and use of users’ personal data is subject to the user’s permission, unless it was impossible on material grounds to obtain such permission in advance and the processing is permitted under statutory regulations.
Insofar as we obtain the data subject’s permission for the processing of personal data, the legal basis for the processing is art. 6 para. 1 a) GDPR.
For the processing of personal data required for the performance of a contract to which the data subject is party, the legal basis is art. 6 para. 1 b) GDPR. This also applies to processing required for the execution of pre-contractual measures.
Where the processing of personal data is required for the performance of a legal obligation to which we are subject, the legal basis is art. 6 para. 1 c) GDPR.
In the event that the processing of personal data is required in the essential interests of the data subject or another natural person, the legal basis is art. 6 para. 1 d) GDPR.
Where processing is required in our legitimate interests or those of a third party and the interests, basic rights and freedoms of the data subject do not outweigh such interests, the legal basis for the processing is art. 6 para. 1 f) GDPR.
The data subject’s personal data will be deleted or locked as soon as the purpose for which they were stored no longer applies. Further storage is possible only where provided for under European or national legislation in the form of regulations, acts of parliament or other provisions to which the data controller is subject. Data will also be locked or deleted where a storage period provided for under the aforementioned norms expires, unless the data are required for formation or performance of contract.
(P) Do logfiles contain the user’s IP address?
The temporary storage of your IP address by the system is necessary for the provision of the website to your computer. Your IP address needs to be saved for the duration of your session.
These purposes also constitute our legitimate interest in data processing as per art. 6 para. 1 f) GDPR.
Data are deleted as soon as they are no longer required for the purpose for which they were collected. Where data capture is required for the provision of our website, this purpose ceases to apply when your session ends.
The capture of data for the provision of our website and the storage of the data in logfiles is required for the operation of the website. You therefore have no right to object to such capture and storage.
The legal basis for the processing of personal data using cookies is art. 6 para. 1 f) GDPR.
The purpose of using technically necessary cookies is to simplify your use of the website. Some of the functions of our website cannot be provided unless cookies are used. Such functions require that your browser can be recognised when you re-visit our site.
Cookies are saved on your computer and transferred from there to our website. As a user, you therefore have full control over their use. By adjusting your browser settings you can deactivate or restrict the transfer of cookies. Cookies already stored can be deleted at any time. This can also be done automatically. However, if you deactivate cookies for our website, some of the functions of the site may not be fully available.
Receipt of our newsletter is subject to subscription via our website.
On our website you can subscribe to a free newsletter, which we use to keep you informed of current events, sponsorship projects, campaigns and training tips. If you register, the data you enter will be transferred to us. This will include your email address and, optionally, your phone number, region, regional football association and role in the association, the age range of your team and your date of birth and phone number. This information will help us send you emails with information tailored specifically to your needs and interests.
When you register, your consent will be obtained for the processing of your data and reference made to this data protection statement.
Where data are processed for the sending of our newsletter, your data will not be shared with any third party. Your data will be used solely for the despatch of the newsletter.
Where you have provided consent, the legal basis for the processing of data after you have subscribed to the newsletter is art. 6 para. 1 a) GDPR.
The collection of your email address enables us to send you our newsletter. The optional data enables us to tailor future emails to your individual needs and preferences.
The data are deleted as soon as they are no longer required for the purpose for which they were collected. Your email address will be saved for as long as your newsletter subscription is active.
You can terminate your subscription to the newsletter at any time. To do so, simply click on the link contained in each newsletter.
On our website we offer users the option to register by providing their personal details. The data entered are submitted to us and stored. They are not shared with any third party. The following data are collected as part of the registration process: first name, surname, address, building number, postcode, city, county/region/state and phone number. We need this information in order to send you the catalogue. We need your phone number so that we can call you in case your address has been entered incorrectly.
As part of the registration process, your permission will be obtained for the processing of these data.
Subject to your consent, the legal basis for the processing of your data is art. 6 para. 1 a) GDPR.
Your registration is required for the despatch of the newsletter as well as for confirmation by phone. If you register for the catalogue, you will receive information on KOMM MIT events and special offers and campaigns.
Data are deleted as soon as they are no longer required for the purpose for which they were collected.
As a user, you can cancel your registration at any time. The data stored about you can be changed by you at any time.
Our website contains a contact form. If you use it to contact us, the data you enter will be submitted to us and stored. These data comprise your first name, surname, email address, name of your sports club, phone number, age range of team, subject and your message.
Subject to your consent, the legal basis for the data processing is art. 6 para. 1 a) GDPR.
The legal basis for the processing of data transferred when you send an email is art. 6 para. 1 f) GDPR. Where the email is for the purpose of forming a contract, the additional legal basis for the processing is art. 6 para. 1 b) GDPR.
The personal data gathered via the input interface are processed by us solely for the purpose of dealing with your enquiry. If you contact us via email, our requisite legitimate interest in the processing of your data is also based on this purpose.
Other personal data processed during the despatch process are used to prevent the misuse of the contact form and to ensure our IT systems remain secure.
The data are deleted as soon as they are no longer required for the purpose for which they were collected. Personal data gained from the contact form or via email are no longer required when the conversation with you has ended. The conversation is deemed ended when the circumstances suggest that the matter at hand has been definitively resolved.
Additional data collected during the despatch process are deleted within seven days.
You can at any time revoke your permission for the processing of your personal data. If you contact us via email, you can at any time object to the storage of your personal data. If you do so, the conversation cannot be continued and all personal data that have been saved during the recording of contact will be deleted.
(8) The existence of any automated decision-making, including profiling, as per art. 22 para. 1 and 4 GDPR and – as a minimum in such cases – meaningful information as to the algorithms involved and the consequences and intended outcomes of such processing.
You also have the right to be informed if your personal data are transferred to a non-EU country or an international organisation. In this regard you have the right to be informed of the transfer guarantees provided under art. 46 GDPR.
You have the right to have your personal data corrected and/or completed by the data controller insofar as the data are inaccurate or incomplete. Inaccurate information must be corrected by the data controller immediately.
If you have objected to the processing under art. 21 GDPR and it is provisionally unclear whether the legitimate interests of the data controller outweigh your grounds for objection.
Where the processing of your personal data is restricted, they may be processed only with your permission or for the assertion of or defence against claims or the protection of the rights of another natural or juristic person or on grounds of significant public interest within the EU or one of its member states.
Where restriction of processing is subject to limitation on any of the above grounds, you will be informed by the data controller before the restriction is lifted.
The personal data are no longer required for the purposes for which they were collected or otherwise provided.
You withdraw the consent on which under art. 6 para. 1 a) or art. 9 para. 2 a) GDPR the processing was based and there is no other legal basis for the processing.
Under art. 21 GDPR you object to the processing and there are no precedent legitimate grounds for the processing or you object to processing under art. 21 para. 2 GDPR.
Your personal data have been unlawfully processed.
The deletion of your personal data is required for compliance with a legal obligation under EU law of the law of a member state to which the data controller is subject.
Your personal data have been collected in relation to information society services as per art. 8 para. 1 GDPR.
Where the data controller has published your personal data and under art. 17 para. 1 GDPR is required to delete them, it must with due regard to the available technology and the costs of implementation put in place appropriate measures, including technical ones, to inform the data controller who is processing your personal information that you as the data subject have requested from them the deletion of all links to these personal data and of copies or duplications thereof.
(3) On grounds of public interest concerning public health as per 9 para. 2 h) and i) or art. 9 para. 3 GDPR.
Where you exercise your right to the correction, deletion or restriction of processing of your data by the data controller, the latter is obliged to inform all recipients to whom your personal data have been disclosed unless it would be impossible or unfeasible to do so.
You have the right to be informed by the data controller who the recipients of your data are.
The data are processed using automated processes.
In exercising this right, you further have the right to have your personal data transferred directly from a data controller to another data controller insofar as is technically feasible. Such transfer must not impair the freedoms and rights of other persons.
The right to data transferability does not apply to the processing of personal data required for the performance of a task assigned to the data controller in the public interest or by an official authority.
You have the right to object at any time, and on grounds specific to your circumstances, to the processing of your personal data on the basis of art. 6 para. 1 e) or f) GDPR. This also applies for any profiling based on these provisions.
The data controller will cease to process your personal data unless it can prove compelling grounds for doing so that outweigh your interests, rights and freedoms or if the processing is for the assertion of or defence against claims or the exercise of rights.
Where your personal data are processed for direct marketing purposes, you have the right at any time to object to such processing. This also applies for any profiling connected to direct marketing.
If you object to the processing for direct marketing purposes, your personal data will cease to be used for such purposes.
As far as the use of information society services is concerned, you have the right, regardless of Directive 2002/58/EC, to exercise your objection via automated processes for which technical specifications are used.
You have the right to withdraw at any time your consent as provided under data protection law. Such withdrawal will however not affect the lawfulness of any processing carried out prior to the withdrawal.
(3) Is carried out with your permission.
Such decision-making must not in any event be based on special categories of personal data as per art. 9 para. 1 GDPR unless art. 9 para. 2 a) or g) applies and appropriate measures have been put in place for the protection of your rights, freedoms and legitimate interests.
For instances provided for under (1) and (3), the data controller will take appropriate measures to protect the rights and interests involved as well as your legitimate interests, including as a minimum the right to procure the intervention of a person working for the data controller, the right to the representation of your own point of view and the right to contest a decision.
If you believe that the processing of your personal data breaches the provisions of GDPR, you have the right, regardless of any other legal remedy, to complain to a supervisory authority, especially in a place of residence or work or where the alleged infringement took place.
The supervisory authority to which the complaint is submitted will inform you as to the progress and outcome of your complaint, including the option to pursue a judicial resolution under art. 78 GDPR.

References: art. 6
 art. 6
 art. 6
 art. 6
 art. 6
 art. 6
 art. 6
 art. 6
 art. 6
 art. 6
 art. 6
 art. 6
 art. 22
 art. 46
 art. 21
 art. 6
 art. 9
 art. 21
 art. 21
 art. 8
 art. 17
 art. 9
 art. 6
 art. 9
 art. 9
 art. 78