Source: https://www.ortovox.com/int-en/privacy
Timestamp: 2020-07-04 01:26:23
Document Index: 66548053

Matched Legal Cases: ['Art. 6', 'Art. 6', 'Art. 21', 'Art. 21', 'Art. 5', 'Art. 21']

ORTOVOX Sportartikel GmbH (in the following: “ORTOVOX”) is firmly committed to data privacy. Therefore, as a matter of course, we strictly adhere to the legal regulations concerning the protection of data privacy (in particular those in GDPR (General Data Protection Regulation) and BDSG [German Data Protection Act] and will do everything possible to ensure the privacy of your data. In addition, it is important for us that you know at any given time which data we store and how we use them. Please take a moment to read the following text informing you about the way we deal with your data. We reserve the right to revise the content of this data privacy statement from time to time, in particular to adapt it to new legal stipulations and technical development so that we can also safeguard data protection in the future. It is therefore advisable to regularly take note of our information and remarks concerning data processing. This Data Privacy Statement refers to the internet presence of ORTOVOX Sportartikel under the domain ortovox.com as well as other subdomains (hereinafter referred to as the „Website”).
1. RESPONSIBLE PERSON AND SCOPE
The responsible person is: ORTOVOX Sportartikel GmbH, Rotwandweg 5, 82024, Taufkirchen, Germany (hereinafter “ORTOVOX”).
Our Data Protection Officer is: Mr. Sebastian Meyer, Schwanweg 1 – 90562 Heroldsberg, Germany. Please refer to our Data Protection Officer if you have any questions regarding data protection issues at our company. You can reach him under the email-address: Datenschutz@schwan-stabilo.com .
Processing of personal data is any operation or set of operations which is performed on personal data or on sets of personal data, whether by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure, or destruction. We process personal data through our Website only if you provide us with this data, ex. when filling out our contact form or sending us an email. We process this data for the named purposes or for the purposes defined in your request. We do not disclose your personal data to third parties, unless otherwise provided by law or you have given us your consent thereto. Apart from that you may use the general information at www.ortovox.com without revealing your personal data. In particular we process your personal data as provided:
3.2.1. REGISTRATION (CUSTOMER ACCOUNT) AND REGISTRATION PROCESS
On our Website, we offer you the possibility to create a customer account with your personal data. The personal data will be entered into the entry screen, transmitted to us, and saved. We do not transmit this data to third parties, apart when this is necessary to fulfill an agreement with you. Following data is collected during the registration process:
- name, address, e-mail address, telephone number as well as a password chosen by you.
Furthermore, we process:
- your IP-Address;
- the date and time of your registration.
With your data we create a personalized Customer Account, with which you may use certain content and services, such as easier orders in our Online Shop on our Website. We process your e-mail address in order to send you new access data, should you have forgotten or lost your password. Should you delete or change the registration data on our Website, such data will be deleted or changed. Any further storage may however be required by law.
You have the possibility to dissolve your registration. In order to do so, please send us an email to the following email-address: info@ortovox.com. You may also correct your data in your customer account.
The data processing described above is carried out in accordance with article 6 (1) lit. b GDPR (processing is necessary for the performance of an agreement or in order to take steps prior to entering into an agreement).
3.2.2. NEWSLETTER
In order to subscribe to our e-mail newsletter, apart from your consent, we will need your first and last name, your country and the preferred language, as well as an e-mail address, to which we will send the newsletter. You may freely decide, whether you want to provide this information to us. Without this information we will however not be able to send you our newsletter. Your first and last name allows us to personalize the newsletter. When subscribing to our newsletter we use your e-mail address for our own advertising purposes until you have unsubscribed. For unsubscribing you can follow the link in each newsletter. Your personal data will be stored for the time you have subscribed to the newsletter.
Upon unsubscribing your personal data will be deleted. You can unsubscribe at any time and for any reasons upon following the link in the newsletter. Any further storage of your data may however take place, if storage is required by law.
In order to improve our newsletter, we may check, how often our readers open certain content and which links do they follow (analysis of user behavior).
The data processing described above is carried out in accordance with article 6 (1) lit. a GDPR (your consent).
We hereby inform you, that with regard to our newsletter, we cooperate with the following service provider: The Rocket Science Group LLC d/b/a Mail Chimp, 675 Ponce de Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA. For more information about Mail Chimp, your privacy and configuration settings, please see mailchimp.com and mailchimp.com/legal/privacy/.
3.2.3. PRESS REVIEW
If you subscribe to our press review, we will use your e-mail address in order to send you the ORTOVOX press review. Other personal data, such as address, language, fax number are voluntary and are used only to personalize the press review, as well as to contact you in the event of inquiries. You may freely decide, whether you want to provide this information to us. Without this information we will however not be able to send you our press review. Your first and last name allows us to personalize the press review. Your personal data will be stored for the time you have subscribed to the ORTOVOX press review.
Upon unsubscribing your personal data will be deleted. You can unsubscribe at any time and for any reasons. For unsubscribing you can follow the link in each press review. No costs are connected with un-subscription. Any further storage may however take place, if storage is required by law.
3.2.4. REGISTRATION TO THE ORTOVOX SAFETY NIGHTS COURSES AND TO THE ORTOVOX SAFETY LAB ROCK
For signing on to the ORTOVOX Safety Night Courses and/or ORTOVOX Safety Academy Lab Rock we will need your first and last name as well as your email address. You may freely decide, whether you want to provide this information to us. Without this information we will however not be able to complete your registration.
If you do not want to take part in the ORTOVOX Safety Night Courses and/or the ORTOVOX Safety Lab Rock any more you may sign out at any time and for any reasons. For signing out please sent an e-mail to: info@ortovox.com. Upon signing out from the ORTOVOX Safety Night Courses and/or the ORTOVOX Safety Lab Rock your data will be deleted. Your data may however be stored after this period, if this is required by law.
The data processing described above is carried out in accordance with article 6 (1) lit. b GDPR (processing is necessary for the performance of a contract or prior to entering into a contract).
3.2.5. COMPETITIONS
In order to take part in our competitions, we will need your name and e-mail address. Furthermore, depending on the prize, it may be necessary to provide us with your size, gender and address. We will use this information only to notify you about the prize and to send you your prize, if you have won the competition. You may freely decide, whether you want to provide this information to us. Without providing ORTOVOX with this information you will however not be able to participate in the competition.
The data processing described above is carried out in accordance with article 6 (1) lit. b GDPR and article 6 (1) lit. f GDPR (processing is necessary for the performance of a contract, or in order to take steps prior to entering into a contract, as well as the processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data).
3.2.6. ORDERING PROCESS IN THE ORTOVOX ONLINE SHOP
In order to process your orders in the ORTOVOX Online Shop we will need the following personal data from you: first and last name, address, e-mail-address, telephone number, date of birth as well as your size. You may freely decide, whether you want to provide this information to us. Without this information we will however not be able to deliver your order.
Please note, that we use third party processors for processing the orders in the ORTOVOX Online Shop. We work with heidelpay GmbH (LINK) in order to provide you with comfortable and practical online payment options.
In order to send your order, we work furthermore with different parcel services, which receive customer data to the extent which is necessary to provide their services.
We give your data to third party processors only upon having an agreement with them (ex. data processing agreement, if such is required by law). Personal data is given only in the scope required for the provision of the services. The service providers are required to comply with all data protection regulations, to keep your personal data confidential and may not use this data for their own business purposes.
3.2.7. CHECKING PRODUCT AVAILABILITY
a) Components from OUTTRA
In order to check the local product availability, we use OUTTRRA components from 81 MEDIA GmbH, Ziegelbrennerstr. 5, 73074 Stuttgart. The components use the IP-Address of the user only for the purposes of sending him/her this information. The IP-Address is therefore essential in order to inform about the product availability close to the user.
Upon choosing “by at a local store” the IP-Address of the user at the servers of OUTTRA is anonymized. With the anonymized IP-Address a consultation with a data bank takes place, which allows for a gross localization of the user on the basis of the not-anonymized part of the IP-Address. Thanks to this process, the user will see the local stores, where the products are available.
The legal basis for processing personal data is Art. 6 (1) lit. f) GDPR. Our legitimate interest lies in advertising and sales of our products, as well as in a functionality of our website.
Should checking the product availability be connected with entering a sales agreement, the legal basis for processing personal data is Art. 6 (1) lit. b) GDPR.
According to Art. 21 (1) GDPR you have a right to object for the future, at any time, the processing of personal data based on Article 6(1) lit. f) GDPR.
After ending your browser session, no personal data from the components will be processed by 81 MEDIA GmbH or ORTOVOX.
To enable the display of certain locations on our website, a connection to the Google server in the USA is established whenever our website is accessed.
Further, according to Art. 21 (1) GDPR you have a right to object for the future, at any time, the processing of personal data based on Article 6(1) lit. f) GDPR.
3.2.8. JOB APPLICATIONS
If you are interested in our job offer, you can send us an application per email using the following email address: personal@ortovox.com or per post to the address: ORTOVOX Sportartikel GmbH, Rotwandweg 5, 82024, Taufkirchen, Germany.
We assure you, that we will process your personal data only for the purposes of carrying out the job application process. Your personal data will be stored for 6 months after concluding the job application process. The data processing described above is carried out in accordance with article 6 (1) lit. b GDPR.
3.2.9. PRODUCT RECALL REGISTRATION
In the event of a product recall, you have the possibility to register via our online form. In such an event, we will need the following personal data: name, e-mail-address, telephone number and address. You may freely decide, whether you want to provide this information to us. Without providing ORTOVOX with this information we will however not be able to carry out the recall for your product. Please note that we may provide your personal data to service partners close to you, in order have optimum handling and settlement of the product recall. Upon settling the product recall and clarifying all its circumstances, your data will be deleted. Your data may however be stored after this period, if this is required by law. The data processing described above is carried out in accordance with article 6 (1) lit. b GDPR and article 6 (1) lit. c GDPR (processing is necessary for the performance of an agreement and processing is necessary for compliance with a legal obligation to which the controller is subject)
3.2.10. REGISTRATION FOR THE PURPOSES OF CHECKING OR REPAIRING ORTOVOX PRODUCTS DURING OR AFTER THE GUARANTEE OR WARRANTY PERIOD
On our website we offer you a possibility to register online in order to check or repair your ORTOVOX product during or after the guarantee or warranty period. For this purpose, we will need your name, email, customer group, telephone number (voluntarily) and address. You may freely decide, whether you want to provide this information to us. Without this information we will however not be able to check or repair your ORTOVOX product. Upon checking and/or repairing your ORTOVOX product your personal data will be deleted. Your data may however be stored after this period, if this is required by law. The data processing described above is carried out in accordance with article 6 (1) lit. b GDPR (processing is necessary for the performance of a contract).
3.2.11. REGISTRATION FOR THE ORTOVOX MEDIA ROOM FOR SPECIAL USERS
On our website we offer special groups of users, like distributors, dealers, press, sport professionals, the possibility to register in our Media Room, in order to have access to certain information regarding ORTOVOX products, as well as photos and videos of ORTOVOX products. For this purpose, we will need your name, email, customer group, telephone number (voluntarily) and address. You may freely decide, whether you want to provide this information to us. Without this information we will however not be able to give you access to our Media Room. If you do not want to have access to the ORTOVOX Media Room any more you may sign out at any time and for any reasons. For signing out please sent an e-mail to: info@ortovox.com. Upon signing out from the ORTOVOX Media Room your data will be deleted. Your data may however be stored after this period, if this is required by law. The data processing described above is carried out in accordance with article 6 (1) lit. b GDPR (processing is necessary for the performance of a contract).
3.2.12. REGISTRATION IN THE ORTOVOX PARTNER SECTION
On our website we offer dealers/partners, who have received from ORTOVOX login data, the possibility to register online, in order to have access to our B2B store. For this purpose, we will need your language, customer number, company name, title and e-mail. You may freely decide, whether you want to provide this information to us. Without this information we will however not be able to check or repair your ORTOVOX product. The data processing described above is carried out in accordance with article 6 (1) lit. b GDPR (processing is necessary for the performance of a contract or prior to entering into a contract).
Collecting and processing your personal data takes generally place upon your consent. Should the data processing be based on your consent, the legal basis for this data processing is Article 6 (1) lit. a GDPR. An exception may occur when obtaining a consent is not possible and/or this is permitted by law.
If processing your data is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract, the legal basis for this data processing is Article 6 (1) lit. b GDPR.
If processing your personal data is necessary for compliance with a legal obligation to which we as the controller are subject, the legal basis for this data processing is Article 6 (1) lit. c GDPR.
If processing your personal data is necessary for the purposes of legitimate interests pursued by us, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, the legal basis for this data processing is Article 6 (1) lit. f GDPR.
Your internet address (IP address) / host name
Agent/browser type and version
Website you were referred from (referrer URL)
Pages viewed on our Website
Session (for registered users)
Session ID (for registered users)
This Website uses Google Analytics, a web analysis service from Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). Google Analytics uses Cookies to make it possible to analyze your use of our Website.
Information about your use of our Website generated by cookies, ex. Time, place and frequency of use of the Website, is usually transferred to a Google server in the USA and saved there. When using Google Analytics, it may not be excluded, that apart from the IP address Google processes further personal data.
Please be informed that such information may be transferred by Google to third parties, if this is required by law or if Google contracts third parties to process such data. Google will use the information gathered by the cookies to evaluate your use of the Website in order to compile reports about Website activities for us and provide additional services associated with the Website and Internet usage. According to Google, Google will not associate your IP address with other personal data collected by Google. You have the option to prevent Google from acquiring and processing data generated by cookies and data related to your use of our Website (including your IP address) by downloading and installing a Google-provided browser plugin. More information about Google Analytics Opt-out function can be found at: tools.google.com/dlpage/gaoptout . Please be informed, that in such an event, not all functions of this Website may be available to you. This plug-in prevents Google Analytics from giving you information about your visit to the site. This plug-in does not prevent any other analysis.
Please note that you cannot use the browser plug-in described above when visiting our website via the browser of a mobile device (smartphone or tablet). When using a mobile device, you can prevent Google Analytics from capturing your usage data by clicking on the following link: deactivate Google Analytics.
By clicking on this link, a so-called opt-out cookie is placed in your browser. This will prevent Google Analytics from giving you information about your visit to the site. Please note that the opt-out cookie is only valid for this browser, and only for this domain. If you delete the cookies in this browser, the opt-out cookie will also be deleted. To continue to prevent Google Analytics from capturing, you must click the link again. The use of the opt-out cookie is also possible as an alternative to the above plug-in when using the browser on your computer. In order to ensure the best possible protection of your personal data, Google Analytics has been extended by the code “anonymizeip” on this website. This code causes the last 8 bits of the IP addresses to be deleted and their IP address is thus collected anonymously (so-called IP-masking). Your IP address will be shortened by Google in principle, even before the transfer within Member States of the European Union or in other contracting States of the Agreement on the European Economic Area and thereby anonymized. Only in exceptional cases will the full IP address be transferred to a Google server in the United States and shortened there.
This Website uses the remarketing tools from Google. Google displays ads to users within the Google advertising network who have visited our websites and online services and are interested in a specific offer. The browser of the visitor uses for this purpose so called cookies, i.e. small text files which are saved on his/her computer and allow for being recognized when visiting sites belonging to the Google advertising network. At these sites the visitor will receive advertising ads, which may refer to content which he/she has visited before at websites which use the Google remarking tools. According to Google no futher personal data is being collected. If you however do not wish to have the Google remarketing functions, you can generally deactivate them under: www.google.com/settings/ads . Alternatively, you can deactivate the usage of cookies for interest related advertisements within the advertising network following the instructions under: www.networkadvertising.org/managing/opt_out.asp. For more information regarding Google Remarketing and the Google Privacy Policy, please visit: www.google.com/privacy/ads/ .
4.5. FACEBOOK PIXEL
This Website uses the Facebook Pixel from „Facebook“ (Facebook Inc., 1601 S. California Ave, Palo Alto, California 94304, USA). Facebook displays ads to users who have visited our websites and online services and are interested in a specific offer. Through the Facebook Pixel on our Website a direct connection to the servers of Facebook take place. Facebook uses cookies for this analysis. Facebook receives the information, that you have visited our website and assigns this information to your personal Facebook account. We have no influence on the scope and type of information including your personal data, which is transmitted to Facebook. For more information regarding your rights and possibilities to protect your data, please visit the Facebook Privacy policy at: www.facebook.com/about/privacy/. We alone do not transfer this data to Facebook. For more information please visits: www.facebook.com/policy.php, www.facebook.com/help/186325668085084 .
4.6. SOCIAL PLUGINS (FACEBOOK, GOOGLE+, TWITTER AND YOUTUBE)
On our Website we use social plugins of the social networks “Facebook” (Facebook Inc., 1601 S. California Ave, Palo Alto, California 94304, USA), “Google +” (Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Irland), “Instagram” (Instagram Inc., 1601 Willow Rd Menlo Park CA 94025 USA) and “Twitter” (Twitter, Inc., 1355 Market St, Suite 900, San Francisco, California 94103, USA) and “Youtube” (YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066 USA) These services are offered by the respective companies (“providers”). As part of our online presence, the social plugins are marked by the respective buttons belonging to the service. Based on the data transmitted via the social plugins to the respective service, this can assign certain personal data you to your Facebook, Google+, Twitter and/or Instagram account. In order to increase the protection of your data on our website, the social plugins are integrated on our website by means of the so-called “2-click-Solution”. This ensures that when you call a page of our website that contains such social plug-ins, no automatic connection to the servers is made by the respective providers.
The scope and purpose of the data collection by the respective service as well as the further processing and use of your data, please refer to the data protection information directly from the website of the service. You will also receive further information about your privacy rights and setting options to protect your privacy.
a) Facebook Inc., 1601 S California Ave, Palo Alto, California 94304, USA www.facebook.com/policy.php www.facebook.com/help/186325668085084
b) Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Irland Https://www.google.com/policies/privacy/partners/?hl=de
c) Twitter Inc., 1355 Market St, Suite 900, San Francisco, California 94103, USA Https://twitter.com/privacy?lang=de
e) Instagram Inc., 1601 Willow Rd Menlo Park CA 94025 USA help.instagram.com/155833707900388
f) Youtube 600 Amphitheater Parkway, Mountain View, California 94043, USA www.youtube.com/t/privacy
4.7. FONTS.COM
This Website uses „fonts.com“, a fonts service from Monotype GmbH, Horexstraße 30, 61352 Bad Homburg („fonts.com“). Every time this Website is accessed, files are uploaded from a “fonts.com” server in order to portray texts in a particular font. In this process, your IP address may be transferred to a “fonts.com” server and stored as part of the usual weblog. Responsibility for further processing this information lies with “fonts.com”; please refer to data protection of “fonts.com” (LINK: www.monotype.com/legal/privacy-policy) for the corresponding conditions and setting options.
4.8. PREVENTION OF COOKIES
4.9. LEGAL BASIS
5. FAN PAGES ON FACEBOOK, INSTAGRAM, YOUTUBE, GOOGLE+, XING AND TWITTER
We operate fan pages on the social media channels: Facebook, Instagram, YouTube, Google+, Xing and Twitter. Operating these fan pages, we are joint controllers within the meaning of Art. 5 Sec. 7 GDPR together with the operators of these networks. If you visit our fan pages, the controllers will process certain personal data. We have agreements with the operators of these networks, which among others regulate the conditions for using these pages. We have integrate separate Data Protection Policies on our fan pages, where you can read more about your personal data.
6. DATA SECURITY AND PRECAUTIONARY MEASURES
6.1. RESPONSIBILITY OF THE USER
6.2. ENCRYPTION
6.3. TECHNICAL SECURITY MEASURES AT ORTOVOX
Encryption of sensitive data transfer with SSL certificates by GMO GlobalSign Ltd., Springfield House, Sandling Road, Maidstone, ME142LP, Great Britain.
• Server security: a firewall system protects our servers against attacks.
• An internal security system and authorisation concept make sure that your sensitive data are not accessible to our employees unless they have a special authorisation.
7. SERVICE PROVIDERS FOR PROCESSING PERSONAL DATA
We employ service providers, who process personal data on our behalf and only on our instruction. The service providers are required to comply with all data protection regulations and to process data in accordance with our instructions. Our service providers have been carefully selected and receive access to your personal data only to the extent and for the time necessary to carry out their services. Service providers in third countries such as the USA and countries outside the European Economic Area are subject to data protection regulations, which do not protect personal data to same extent as in the European Union. Should we process your personal data in countries, which do not provide such a high level of data privacy as in the European Union, then we will ensure by means of contractual regulations and other instruments that your that your personal data is safe and adequately protected.
9. RIGHTS CONCERNED
9.1. RIGHT OF ACCESS
9.2. RIGHT OF OBJECTION
If the processing of personal data is based on your consent, you may object to this processing for the future, at any time and without any reason. To do so please send an email to: info@ortovox.com or a letter to: ORTOVOX Sportartikel GmbH, Rotwandweg 5, 82024 Taufkirchen.
9.3. RIGHT TO RECTIFICATION
9.4. RIGHT TO ERASURE OR RESTRICTION
9.5. RIGHT TO DATA PORTABILITY
9.6. RIGHT TO OBJECT
According to Art. 21 (1) GDPR you have a right to object for the future, at any time, the processing of personal data based on Article 6 (1) lit. (e) and (f) GDPR.
9.7. AUTOMATED INDIVIDUAL DECISION-MAKING, INCLUDING PROFILING
We inform that no automated decision-making, including profiling, as referred to in Article 22 (1) and (4) GDPR is applied
9.8. EXERCISING THE RIGHTS CONCERNED
To exercise the aforementioned rights, please contact us per email at: info@ortovox.com or per mail to: ORTOVOX Sportartikel GmbH, Rotwandweg 5, 82024 Taufkirchen, Germany. Your personal data (possibly your email, name and telephone number) will be processed in order to answer your questions or respond to your concern. This data will be deleted if no longer necessary; in the event of statutory retention periods – the processing may only be limited.
10. COMPLAINT TO A SUPERVISORY AUTHORITY