Source: https://stevensbikes.de/2018/index.php?cou=DE&lang=sv_SE&url=en/data-privacy.html
Timestamp: 2019-04-24 16:41:27+00:00

Document:
Stevens Vertriebs GmbH is very serious about the protection of your personal data (referred to herein as “data”). In cases described below we will process these data in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR). Personal data are information referring to a natural person.
Visiting our Website is possible without entering any data. Entering data is totally optional. Yet if any data have been provided they will be processed as described below.
When using our website your IP address, the country from which you are accessing our website, date, time of day, and duration of your visit to our website and its subpages, information about the browser and the operating system you are using including display resolution and language settings will be processed. These data are stored in protocol files for the duration of 7 (seven) days.
Data are processed in accordance with Art. 6 par. 1 b) and f) GDPR and Art. 8 par. 1 a) and c) of the ”e-privacy regulation“.
In addition we will use necessary session cookies. Cookies are small files which contain an identification code assigned by us. Cookies are cached on your computer or mobile device when accessing our website. Cookies make it easier for you to navigate our website and help us design our website and to adapt it to your expectations.
We have the right to use session cookies in accordance with Art. 6 par. 1 f) GDPR and Art. 8 par. 1 a) and d) of the ”e-privacy regulation“. Session cookies will be deleted when the bowser is closed.
Permanent cookies are implemented in accordance with Art. 6 par. 1 f) GDPR and Art. 8 par. 1 b) and d) of the ”e-privacy regulation“. Permanent cookies are active for up to 90 days and will then be deleted.
cookie_alert_seen 90 days Visitor has seen and closed the notice about cookies.
PHPSESSID 90 days The session ID is technically necessary to securely send form data and to save the user's selections for a specific period of time, e.g.
- so previously compared bikes can be offered in the bike comparison The PHPSESSID is never linked to personal data at STEVENS.
alert_old_20YY_clicked 1 day Visitor has seen and closed the notice about a former product year.
tabctl_XYZ_tabs only for the browser session Marker for the active tab on different pages.
Our website embeds content from Google Maps. When visiting a subpage of our website that embeds Google Maps, data about your usage of Google Maps will be transmitted to Google and processed by Google. For instance Google will receive the information that you have accessed the respective subpage of our website. Google collects and stores these data as user profiles and uses them for the purpose of market research and/or demand-actuated design of Google Maps. If you are logged-in to a service of Google as a customer of Google these data will directly be linked to your Google account. If you do not want this, you need to log-out of Google before visiting our website. Please find additional information about the data privacy terms of google under: https://www.google.com/intl/en/policies/privacy/.
Data submitted to Google may be transferred to the USA. Google complies with the US-EU Privacy Shield. The European Commission has decided in its adequacy decision (EU) 2016/1250 of July 12 2016 that a sufficient level of data protection can be achieved this way.
You can prevent the storage of cookies by adjusting the appropriate settings of your browser software. If you do not consent to the storage and use of your data you can deactivate storage and use below this paragraph. In this case an opt-out cookie will be placed in your browser to prevent Matomo from storing usage related data. Deleting your cookies will result in the deletion of the Matomo opt-out cookie. This opt-out cookie then needs to be re-activated when you access our website again.
Data you submit by filling out our contact form or bike registration boxes and which are required for the fulfilment of a contract between you and us or to implement measurements precedent to the contract are exclusively subject to section 3. In addition we are allowed to process data entered into our contact form or our bike registration boxes (e.g. e-mail address, if applicable data in the field “your message”, name, title, serial number etc.) in accordance with Art. 6 par. 1 a) GDPR even if they are not in context of a business relation, provided you have given consent to processing by checking the box before submitting.
Data will be processed to handle your request typed into the contact form. These data will be deleted 60 days after receipt. The data entered for bike registration are processed and stored for 5 (five) years. Providing your data by means of registration is neither mandatory by law nor by any contract nor necessary for the conclusion of a contract. Using the contact form, though, requires you to provide an e-mail address because otherwise we will not be able to answer your request. Using the bike registration requires you to provide your name, title, country of residence, e-mail address as well as relevant data about your bike because otherwise we will not be able to register your bike. If provide any further data you do this voluntarily.
We are allowed to process data provided by you during registration in accordance with Art. 6 par. 1 b) GDPR as far as it is necessary to fulfil a contract or to implement measurements that have become necessary due to your request precedent to the contract. In this respect we process your data for the following purposes: Communication between us and you, invoicing.
These data are: Name, billing and shipping address, e-mail address and if applicable phone and fax number and if applicable payment data such as bank data (customer data).
Providing your data by means of registration is neither mandatory by law nor by any contract. Yet for the conclusion of a contract it is necessary to process data such as your or your company’s name, your e-mail address and your address. Without these data sending you an e-mail, stating accounts or the assertion of justified claims would not be possible.
We are allowed to process these data until the particular contract has been finalized and within the period of limitation or warranty period applicable to the purposes mentioned above. If the storage of these data is necessary to fulfil our obligations according to Art. 6 par. 1 c) GDPR in conjunction with § 257 “Handelsgesetzbuch” (German Code of Commerce) or § 147 “Abgabenordnung” (German Fiscal Code), we are authorized to store these data until the retention periods have expired. These periods last up to 10 years.
You can always demand from us to disclose if we process personal data (referred to herein as “data”) and which of your data we are processing. Extent and form of this information derive from Art. 15 GDPR.
You have the right to receive the data submitted to us in a structured, common machine-readable format and to submit them to a third party provided that processing is based on an agreement or on a contract and processing is performed by automated means. If you wish and if it is technically feasible we will submit these data to a third party directly.
You can demand the correction of incorrect data concerning you. As long as it is necessary for the purpose of processing you can also demand us to complete any incomplete data.
You can demand us to delete your data, provided that appropriate conditions according to Art. 17 GDPR are met. Under conditions provided by Art. 18 GDPR you can demand us to block your data.
Provided we process data to safeguard our own interests and solely based on Art. 6 par. 1f) GDPR, you have the right, due to reasons resulting from a particular situation, to object to the processing of your data. If you object, these data will not be processed anymore, unless we can demonstrate legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the purpose of establishment, exercise or defense of legal claims.
If you have consented to the processing of your data you always have the right to withdraw that consent at any time. The withdrawal can be submitted in the form of an e-mail to info@stevensbikes.de. After withdrawal we will not process the respective data anymore. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal. Likewise, processing remains possible despite the revocation of consent, insofar as we are entitled or obliged to do so by virtue of a statutory provision.
If you have any questions regarding data protection, you can contact our data protection representative via e-mail under datenschutz@stevensbikes.de.

References: Art. 6
 Art. 8
 Art. 6
 Art. 8
 Art. 6
 Art. 8
 Art. 6
 Art. 6
 Art. 6
 § 257
 § 147
 Art. 15
 Art. 17
 Art. 18
 Art. 6