Source: https://www.sportograf.com/en/service/general/privacy
Timestamp: 2019-04-19 07:13:29+00:00

Document:
A trusting and secure handling of personal data is very important to us. We observe the regulations of the EU General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG) and other European regulations and would like to inform you in detail and transparently about the processing of your personal data in this data protection declaration.
Personal data is all data that can be related to you personally, e.g. name, address, e-mail addresses or user behaviour. With regard to the other terms used below, such as "responsible person" or "processor", we refer you to the definition catalogue of the definitions in Art. 4 GDPR.
* or that the processing is based on our legitimate interests (e.g. analysis and further development of our products, increase in economic efficiency), see Art. 6 Para. 1 lit. f GDPR.
When using our website for information purposes only, i.e. if you do not register or otherwise provide us with information, we only collect the personal data that your browser transmits to our servers.
* and, if applicable, the operating system and browser version of your PC.
When you contact us by e-mail, we process the data you provide us with (your e-mail address, your name, telephone number if applicable, and other details) in order to process and answer your questions; the legal basis is Art. 6 Para. 1 lit. f GDPR.
Users can optionally create a user account by viewing their orders in particular. In the context of the registration, the necessary compulsory data are communicated to the users. The user accounts are not public and cannot be indexed by search engines. It is incumbent upon the users to secure their data before the end of the contract in the event of termination. In the event of termination of the user account, we are entitled to irretrievably delete all user data stored during the term of the contract.
Within the scope of registration and renewed registrations as well as use of our online services, we store the IP address and the time of the respective user action. The storage is based on our legitimate interests, as well as the user's protection against misuse and other unauthorized use. A passing on of these data to third parties does not take place in principle, unless it is necessary for the pursuit of our claims or there is a legal obligation according to Art. 6 para. 1 lit. c GDPR.
We process usage data (e.g., the websites visited on our website, interest in our products) and content data (e.g., entries in the contact form or user profile) for advertising purposes in a user profile in order to display the user, e.g. product information based on the services they have previously used.
We offer all interested parties the opportunity to register for the Raceletter newsletter. The newsletter appears at irregular intervals and deals with everything the race heart desires!
Purpose of data processing, legal basis and content of consent: Within the scope of registration, only your e-mail address is required. We send our newsletter only on the basis of the consent of the recipient according to Art. 6 Para. 1 lit. a, Art. 7 GDPR. By subscribing to our newsletter, you agree to receive information and promotional materials regarding Sportograf's offers and promotions.
Double Opt-In procedure: We use the so-called double opt-in procedure when registering for the newsletter. After registration, the interested party receives an e-mail with a confirmation link to the given e-mail address, which he must click to confirm registration for the newsletter. We log the registrations for the newsletter in order to be able to prove the registration process according to the data protection requirements. In this context, we store the time of registration and confirmation as well as the IP address.
Statistical survey and analysis: The newsletters contain a so-called "web-beacon", i.e. a file the size of a pixel, which is called up by the server of the dispatch service provider when the newsletter is opened. Within the scope of this retrieval, technical information, such as information about the browser and your system, as well as your IP address and time of retrieval are first collected. This information is used for the technical improvement of the services on the basis of the technical data or the target groups and their reading behaviour on the basis of their retrieval locations (which can be determined with the help of the IP address) or the access times. The statistical surveys also include determining whether the newsletters are opened, when they are opened and which links are clicked. For technical reasons, this information can be assigned to the individual newsletter recipients. However, it is neither our nor the shipping service provider's intention to observe individual users. The evaluations serve us much more to recognize the reading habits of our users and to adapt our contents to them or to send different contents according to the interests of our users.
Termination/revocation: You can cancel the receipt of our newsletter at any time, i.e. revoke your consent. At the same time, your consent to its dispatch by the dispatch service provider and the statistical analyses will expire. A separate revocation of the dispatch by the dispatch service provider or the statistical evaluation is unfortunately not possible. You will find a link to cancel the newsletter at the end of each newsletter. If users have only subscribed to the newsletter and cancelled their subscription, their personal data will be deleted.
E. Photography at sports events If you take part in an event at which we have been commissioned by the organizer as an exclusive photo service, we may collect photographic material on which you can be identified personally, possibly with your participant number of the event (e.g. start number).
We use the data collected at the sporting events to fulfil our obligation as a photo service provider under the underlying contract with the organiser and in our own economic interest to market the photos of the event to the interested participants via our website www.sportograf.com Based on our many years of experience in the field of event photography, we can state that on the one hand, the participants of sporting events will be informed transparently that Sportograf will be used as an exclusive photo service provider and, on the other hand, every participant of such an event must expect that the organiser or his cooperation partner will market photos of such events as souvenirs.
Legal basis are our aforementioned legitimate interests according to Art. 6 para. 1 lit. f GDPR. You can object to this processing in accordance with section 12. Your data will not be passed on to third parties. For the collection of the corresponding photos we exclusively use photographers, whom we have obligated under data protection law according to the EU data protection basic regulation.
Unless otherwise stated, we collect, process or use your personal data in order to fulfil our obligations under the underlying contracts (e.g. ordering goods or services, sending the newsletter, enabling access to various platforms), cf. Art. 6 Para. 1 lit. b GDPR.
In all other respects, we collect, process or use the personal data presented under point 3 lit. a on the basis of our legitimate interest to enable the use of our website and to guarantee its IT security, cf. art. 6 para. 1 lit. f GDPR.
The data stored with us will be deleted as soon as they are no longer required for their intended purpose, or the storage is no longer necessary for the execution of the contract or execution and the deletion does not conflict with any justified interests on our part or legal storage obligations. If the user's data are not deleted because they are required for other and legally permissible purposes, their processing will be restricted. This means that the data will be blocked and not processed for other purposes. This applies, for example, to user data which must be stored for commercial or tax reasons.
According to legal requirements, data is stored for 6 years in accordance with § 257 para. 1 HGB (German Commercial Code) (commercial books, inventories, opening balance sheets, annual financial statements, commercial letters, accounting records, etc.) and for 10 years in accordance with § 147 para. 1 AO (German Tax Code) (books, records, management reports, accounting records, commercial and business letters, documents relevant for taxation, etc.).
We treat your personal data with the utmost care. We only transfer the data to third parties if this is necessary for the execution and processing of contractual relationships, if you have given us your consent to do so, or if the transfer is otherwise permitted by relevant statutory provisions.
By means of a bundle of technical and organisational measures in accordance with the current state of the art, we protect both our website and the data stored in our area of responsibility against loss, destruction, unauthorised access, alteration or publication by unauthorised persons.
The input and transmission of personal data is encrypted using the SSL procedure (Secure Socket Layer).
A website encrypted with SSL transmits personal data encrypted to the server so that it is impossible for third parties to intercept or read it. A certificate verifies our identity. Depending on your browser, you can recognize that a secure connection exists by the green address bar and/or the lock. By clicking on the lock or the green address bar you can read our online proof of identity.
B. What does SSL do?
By encrypting the transmission, you can assume that your entered data can only be read by us. You can see from the green address bar that you are connected to our server and that it is not a third-party site.
In order to make visiting our website attractive and to enable the use of certain functions, we use so-called cookies on various pages on the basis of our legitimate interests in accordance with Art. 6 Para. 1 lit. f GDPR.
Cookies are pieces of information that are transferred from our web server or third party web servers to the user's web browser and stored there for later retrieval. Cookies can be small files or other types of information storage.
We use "session cookies, for example, to store your login status or the shopping cart function and thus enable the use of our online services at all. In a session cookie, a randomly generated unique identification number is stored, a so-called session ID. In addition, a cookie contains information about the e-mail address of a visitor and the language selected on our site. These cookies cannot store any other data.
Within the scope of our online offer, we act on the basis of our legitimate interests (i.e. interest in the analysis, optimisation and economic operation of our online offer within the meaning of Art. 6 Para. 1 lit. f. of the German Civil Code). GDPR) content or service offers from third parties in order to integrate their content and services, such as videos or fonts (hereinafter uniformly referred to as "content"). This always presupposes that the third party providers of this content perceive the IP address of the user, since they could not send the content to their browser without the IP address. The IP address is therefore required for the presentation of this content. We make every effort to use only those contents whose respective providers only use the IP address to deliver the contents. Third party providers may also use so-called pixel tags (invisible graphics, also known as "web beacons") for statistical or marketing purposes. Pixel tags can be used to evaluate information such as visitor traffic on the pages of this website. The pseudonymous information may also be stored in cookies on the user's device and may contain, among other things, technical information about the browser and operating system, referring web pages, visit times and other information about the use of our online offering, as well as may be linked to such information from other sources.
* If our customers use the payment services of third parties (e.g. PayPal or Worldpay), the terms and conditions and data protection notices of the respective third parties, which are available within the respective websites or transaction applications, apply.
* Right to object to the processing under Art. 21 GDPR.
You also have the right to complain to a data protection supervisory authority about the processing of your personal data by us. The competent authority is the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen, Postfach 20 04 44, 40102 Düsseldorf, Germany.
If you have given your consent to the processing of your data, you can revoke it at any time. Such a revocation influences the permissibility of the processing of your personal data after you have given it to us.
IF WE PROCESS YOUR PERSONAL DATA ON THE BASIS OF THE BALANCE OF INTERESTS ACCORDING TO ART. 6 ABS. 1 LIT. F GDPR, YOU MAY OBJECT TO THE PROCESSING. IF YOU OBJECT, PLEASE EXPLAIN WHY WE SHOULD NOT PROCESS YOUR PERSONAL DATA AS WE DID. IN THE EVENT OF YOUR REASONABLE OBJECTION, WE WILL EXAMINE THE FACTS AND EITHER DISCONTINUE OR ADAPT DATA PROCESSING OR SHOW YOU OUR COMPELLING REASONS WORTHY OF PROTECTION ON THE BASIS OF WHICH WE WILL CONTINUE PROCESSING.
We reserve the right to change the data protection declaration in order to adapt it to changed legal situations or in the event of changes to the service or data processing. However, this only applies to declarations on data processing. If the user's consent is required or if elements of the data protection declaration contain provisions governing the contractual relationship with the user, the changes will only be made with the user's consent. Users are requested to inform themselves regularly about the content of the data protection declaration.

References: Art. 4
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 7
 Art. 6
 Art. 6
 art. 6
 § 257
 § 147
 Art. 6
 Art. 6
 Art. 21
 ART. 6