Data Protection Policy
Preamble
Deuter Sport GmbH is pleased that you are visiting our website. Data protection and data security during the use of our website are very important to us. Therefore, we would like to inform you about which of your personal data we collect during your visit to our website and for which purposes they are used. As legal amendments or changes in our internal processes may require an adaptation of this privacy policy, we ask you to review this privacy policy regularly. The privacy policy applies to the Internet offering of Deuter Sport GmbH, which is accessible under the domain https://www.deuter.com.
1. Name of the Responsible Party
The responsible party and service provider is Deuter Sport GmbH, Daimlerstraße 23, 86368 Gersthofen (hereinafter referred to as "Deuter").
2. Names and Addresses of the Data Protection Officers
Our Data Protection Officer is: Sebastian Meyer, Schwanweg 1, 90562 Heroldsberg. You may contact our Data Protection Officer at any time with all questions concerning data protection. The best way to reach him is via email at Datenschutz@schwan-stabilo.com.
3. General Information on Data Processing
We generally collect and use personal data of our users only insofar as this is necessary for the provision of a functional website as well as our contents and services.
3.1 Personal Data
Personal data is any information relating to an identified or identifiable natural person. This includes information such as your name, age, address, telephone number, date of birth, email address, IP address, or user behavior. Information that cannot be linked to your person, e.g., through anonymization, does not qualify as personal data.
3.2 Processing of Personal Data
Processing is any operation or set of operations performed on personal data, whether by automated means or otherwise, such as collection, recording, organization, structuring, storage, modification, retrieval, consultation, use, disclosure by transmission, dissemination, or otherwise making available, alignment, restriction, erasure, or destruction.
3.3 Legal Basis for Processing Personal Data
The collection and use of personal data of our users generally take place only with the user’s consent. If we obtain consent from the data subject for processing operations of personal data, the legal basis is Art. 6(1)(a) of the General Data Protection Regulation (GDPR).
An exception applies in cases where it is not possible to obtain prior consent for factual reasons and where the processing of the data is permitted by legal provisions. Where processing of personal data is necessary for the performance of a contract to which the data subject is a party, Art. 6(1)(b) GDPR serves as the legal basis. This also applies to processing operations necessary for the implementation of pre-contractual measures.
Where processing of personal data is necessary to fulfill a legal obligation to which we are subject, Art. 6(1)(c) GDPR serves as the legal basis.
Where processing is necessary for the purposes of the legitimate interests pursued by the controller or a third party, and such interests are not overridden by the interests or fundamental rights and freedoms of the data subject, Art. 6(1)(f) GDPR serves as the legal basis.
4. Data Processing Operations
Personal data is collected on this website if you voluntarily provide it to us, for example, by filling out forms or sending emails. We use this data for the purposes specified or resulting from your request, such as providing your email address to contact you. Data is only transferred to third parties if expressly permitted by law or if you have agreed to such transfer in the course of an active business relationship.
4.1 Informational Use of the Website
You can visit our website without disclosing any personal information. If you merely use our website for informational purposes, we do not process any personal data, except for the data transmitted by your browser to enable the visit to the website. For technical provision of our website, it is necessary to process certain information automatically transmitted by you so that your browser can display our website, and you can use the website. This information is automatically collected and stored in our server log files each time our website is accessed. The information relates to the computer system of the accessing computer. The following information is processed:
Host
IP address of the user
Date and time of access
Access method (Get/Post)
Request
Protocol (e.g., https)
Status (e.g., error messages)
Data volume retrieved
Referrer
Browser and operating system of the user
For the data processing mentioned above, Art. 6(1)(f) GDPR serves as the legal basis. The processing of the mentioned data is necessary for the provision of a website and thus serves the legitimate interest of our company.
Once the data mentioned above is no longer required for displaying the website, it will be deleted. Collecting data for providing the website and (temporarily) storing it in log files is essential for operating the website. Further storage may be possible if required by law.
In addition to merely informational use, you may actively use our website to contact us, for instance. In this case, we process the following personal data in addition to the data mentioned above:
Salutation
First name
Last name
Email address
Phone number
Country
4.2 Active Use of the Website – Contact Form
If you choose to contact us via our contact form, we process your first and last name and your email address. You may also voluntarily provide your address and telephone number. Furthermore, you can send us an individual message via the message field. Whether or not to provide this data is up to you; however, without this information, we may not be able to fulfill your request fully.
For accessing stored information on your device, § 25(2) no. 2 of the Telecommunications-Telemedia Data Protection Act (TTDSG) serves as the legal basis.
The legal basis for the subsequent processing of data transmitted in the course of establishing contact is Art. 6(1)(f) GDPR. In the case of contact, the legitimate interest in processing data lies in handling your inquiry.
If the email contact aims to conclude a contract, the legal basis for processing is Art. 6(1)(b) GDPR.
Once your inquiry has been resolved and the matter in question has been clarified, the personal data processed via the contact form will be deleted. Further storage may occur if legally required.
If you consent to the transfer of your data to country representations for faster processing, we reserve the right to pass on your name, email address, and concern to third parties (our partner companies). These may include country representations in the following countries: Argentina, Australia, Belgium, Brazil, Bulgaria, Chile, Denmark, Ecuador, Estonia, Finland, France, Georgia, Greece, United Kingdom, Hong Kong, India, Indonesia, Iran, Ireland, Iceland, Israel, Italy, Japan, Canada, Korea, Latvia, Lithuania, Luxembourg, Malaysia, Mexico, Moldova, New Zealand, Netherlands, Norway, Austria, Peru, Philippines, Poland, Portugal, Romania, Russia, Saudi Arabia, Sweden, Switzerland, Singapore, Slovakia, Spain, South Africa, Taiwan, Thailand, Czech Republic, Turkey, Ukraine, Hungary, United Arab Emirates.
Without your consent, no transfer of your personal data to third parties will take place when using the contact form.
4.3 Registration for a Customer Account and Registration Process
On our website, users can register by providing personal data. Data is entered into an input mask and transmitted to us and stored. Data is generally not transferred to third parties unless necessary to fulfill a contract. The following personal data is collected as part of the registration process:
Mandatory: Salutation, title, first and last name, address, email address, and a password chosen by you
Optional: Telephone number
IP address
Date and time of registration
The processed data creates a personalized user account that allows you to use certain content and services, such as the Deuter online shop, on our website. We process your email address so that we can send you new login details if you forget them.
You can change the data stored about you in the customer account at any time.
The processing of the provided personal data serves to carry out pre-contractual measures under Art. 6(1)(b) GDPR.
Once the registration on our website is canceled or changed, the data processed during the registration process will be deleted. Further storage may occur if legally required.
As a user, you can terminate your registration at any time. To do so, send us an email with your request to privacy@deuter.com.
4.4 Dealer Locator
a) OUTTRA Component
For the dealer locator feature, we use the OUTTRA component by 81 MEDIA GmbH, Ziegelbrennerstr. 5, 73074 Stuttgart. To display this function, the component requires a query of the visitor’s IP address. The component initially uses the IP address only to send corresponding information to the browser or visitor. The IP address is therefore required for displaying this function.
The IP address of the visitor is anonymized on the OUTTRA server for the dealer locator feature. Based on the anonymized IP address, a database query is performed, allowing a rough localization of the visitor based on the non-anonymized part of the IP address. This way, local dealers are displayed to the visitor on the website.
The legal basis for the aforementioned processing of personal data is Art. 6(1)(f) GDPR. Our legitimate interest lies in the sale and promotion of products and services as well as the website's functionality.
If the retrieval of product availability aims at contract initiation, Art. 6(1)(b) GDPR is the legal basis.
In general, you can object to the future processing of your data, which is based on Art. 6(1)(f) GDPR, at any time according to Art. 21 GDPR. In particular, objections may be made against processing for direct marketing purposes.
After the visitor ends the browser session, no personal data is stored by the component, by 81 MEDIA GmbH, or by Deuter Sport GmbH.
b) GOOGLE MAPS
On the website, we use the Google Maps service via an API, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Maps is used to show users where Deuter products are available nearby.
To use Google Maps, Google Ireland Ltd. processes your IP address.
The processing of your personal data takes place based on your explicit consent under Art. 6(1)(a) GDPR. You can withdraw this consent at any time in the future by deactivating the toggle in the dealer locator application.
In this context, personal data may be transferred to countries outside the EU/EEA, particularly the USA. Google LLC and Google Ireland Ltd. are verified under the Data Privacy Framework Program, ensuring an adequacy decision under Art. 45 GDPR for this transfer to third countries.
More information on Google’s data protection policy can be found here: https://policies.google.com/privacy?hl=en
4.5 Ordering Process in the Deuter Online Shop
To process orders in the Deuter online shop, we require the following personal information: first and last name, address, email address, phone number, date of birth, and, where applicable, gender and size. It is up to you whether to provide this data; however, without it, we may not be able to process your order.
We point out that we use third-party companies for this purpose. We cooperate with Unzer GmbH, Schöneberger Str. 21 a, 10963 Berlin, to offer you a convenient internet payment option. The following data is transmitted to the service provider during the payment process:
Name of the billing recipient
Billing address
Name of the recipient of the package
Shipping address
Order number
Order contents (e.g., items, quantity, price, discounts)
Unzer's privacy notice can be viewed here: https://www.unzer.com/en/privacy/.
Your data is then forwarded to the credit institution or online payment service provider responsible for the payment. Some payment service providers also collect this data themselves if you have an account with them. In this case, you will need to log in with your credentials during the order process. The respective privacy policy of the payment service provider applies.
The processing of your personal data required to fulfill a purchase agreement with us, particularly for payment processing, is based on Art. 6(1)(b) GDPR. This also applies to processing required for implementing pre-contractual measures. Additionally, we may be legally obliged to transmit the data concerning you (enforcement of strong customer authentication under Directive EU 2015/2366 (PSD 2) or the German Payment Services Supervision Act (ZAG)). Where legal obligations require transmission, Art. 6(1)(c) GDPR in conjunction with the respective regulations of Directive EU 2015/2366 (PSD 2) or the Payment Services Supervision Act (ZAG) is the legal basis.
Once the contract has been fully executed and the purchase price paid in full, your data will be locked for further use and deleted after the tax and commercial law retention periods have expired unless you have expressly consented to further use of your data. Further storage may occur if legally required.
a) Payment via PayPal
If you choose to pay via "PayPal" during your order process, your personal data will be automatically transmitted to PayPal via the payment service provider PAYONE. PayPal is offered by PayPal (Europe) S.à.r.l. & Cie. S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg. PayPal acts as an online payment service provider and trustee, offering buyer protection services.
The personal data regularly transmitted to PayPal includes: first name, last name, address, email address, IP address, or other data necessary for payment processing. Personal data associated with each order (such as the number of items, item number, invoice amount, taxes, and other invoice information) is also required to process the purchase agreement.
This corresponds to our legitimate interest in offering an efficient and secure payment method (Art. 6(1)(f) GDPR). Accordingly, we forward the mentioned data to PayPal insofar as it is necessary for contract performance (Art. 6(1)(b) GDPR).
PayPal also reserves the right to collect personal data about the buyer. According to PayPal, this may include the following information:
Name
Address
Phone number
Account number
PayPal may forward your personal data to affiliated companies and service providers or subcontractors, provided this is necessary to fulfill contractual obligations or if data is processed on their behalf.
The personal data we transmit to PayPal may be transferred by PayPal to credit reference agencies. This transfer is intended to verify identity and creditworthiness. PayPal uses the creditworthiness check result, taking into account the statistical probability of default, to decide on providing the respective payment method. The credit report may contain probability values (so-called score values), which are based on a scientifically recognized mathematical-statistical process.
You have the option to revoke your consent to the processing of your personal data at any time with PayPal. The legality of the processing based on the consent up to the revocation remains unaffected, provided the personal data must be processed, used, or transmitted to fulfill contractual payment processing.
PayPal's privacy policy can be found at https://www.paypal.com/en/webapps/mpp/ua/privacy-full.
b. Payment via Sofortüberweisung
We offer the option to process the payment transaction via Sofortüberweisung by the payment service provider Klarna Bank AB, Chausseestrasse 117, 10115 Berlin (Klarna). This corresponds to our legitimate interest in providing an efficient and secure payment method (Art. 6(1)(f) GDPR). We forward the following data to Klarna, insofar as necessary for contract fulfillment (Art. 6(1)(b) GDPR):
First name
Last name
Transfer amount
Depending on your bank’s online account management, different verification steps may be required: if your bank only accepts transfer orders when there is sufficient account coverage, no account balance verification is performed by Klarna. In all other cases, Klarna verifies if the sum of the account balance and overdraft limit, less unposted transactions, covers the amount to be transferred.
In cases of heightened fraud risk, Klarna reserves the right to review Sofortüberweisungen from the last 30 days to determine if they were successfully executed. No credit checks are carried out based on historical payment data.
Verification is conducted via your bank’s HBCI interface or the online banking interface as if you were logging in yourself. If you manage multiple accounts, information on non-selected accounts is not stored. Klarna stores your online banking user identification (login name/account number) as a hash value. PIN and TAN codes are not stored.
Klarna, for billing purposes, stores your name, account number, bank code, subject, date, and transfer amount within the statutory retention periods. This is based on § 28(1) sentence 1 no. 1 of the German Federal Data Protection Act (BDSG).
We retain your data until the payment transaction is completed and until the expiry of the commercial and tax retention periods. This also includes the period required to process refunds, claims management, and fraud prevention.
Information on objections and options for deletion against Klarna can be found at: https://www.sofort.com/payment/wizard/getCmsContent/data_protection/DE/0/en.
Your personal data transmitted to the service provider for invoicing purposes will be deleted after 24 months. The service provider then keeps backups of this data for an additional 12 months before deletion. Further storage may occur if legally required, such as for tax and commercial law retention periods.
4.6 Shipping
To fulfill the contract, we use the following shipping providers: DHL Paket GmbH, Sträßchensweg 10, 53113 Bonn, which may pass on your data to local parcel delivery companies. Additionally, we offer shipment tracking for your ordered goods using the service provider PAQATO GmbH, Johann-Krane-Weg 6, 48149 Münster.
To fulfill the contract according to Art. 6(1) sentence 1(b) GDPR, we transmit your data to the delivery company entrusted with the shipment, to the extent necessary for the delivery of ordered goods.
If you have expressly consented to the announcement or coordination of delivery by providing your email address and phone number during or after your order, we will transmit this data to the chosen delivery service provider according to Art. 6(1) sentence 1(a) GDPR so they may contact you before delivery.
You may withdraw consent at any time by contacting privacy@deuter.com or the delivery service provider at the address provided below:
DHL Paket GmbH
Sträßchensweg 10
53113 Bonn
Upon withdrawal, we delete the data provided for this purpose, except where statutory retention obligations require continued storage.
4.7 Applicant Management
If you are interested in a job vacancy posted on our website, you can email us at ichwill@deuter.com or send your application documents to: Deuter Sport GmbH, Daimlerstraße 23, 86368 Gersthofen. In doing so, we process all information you provide.
The legal basis for processing this personal data is Art. 6(1) sentence 1(b) GDPR in conjunction with § 26(1) sentence 1 BDSG.
We assure you that we will process your personal data only for the purpose of conducting the application process. The retention period is six months after the application process concludes to defend against potential claims under the German General Equal Treatment Act (AGG).
If your application cannot be considered at this time, you may agree that we retain the documents and information submitted as part of this application in our applicant database in accordance with Art. 6(1)(a) GDPR, allowing us to contact you in the future if a suitable position becomes available. You must explicitly consent to this use when submitting your application. You can withdraw your consent to store your application data for up to 12 months at any time by emailing ichwill@deuter.com.
4.8 Newsletter
To sign up for our email newsletter, we need your email address to send you the newsletter.
Providing this information is voluntary; however, without it, we may not be able to send you our newsletter.
Please note that we currently work with HubSpot, Inc., 25 First Street, Cambridge, MA 02141, USA, to ensure proper email dispatch. HubSpot processes your data on our behalf. There is no further transmission of your data to third parties for the newsletter. For more information on HubSpot and your related data protection rights and options, please refer to: https://legal.hubspot.com/privacy-policy.
When you subscribe to the newsletter, your email address will be used for our promotional purposes until you unsubscribe. You can cancel your subscription via the link at the end of each newsletter. Newsletter software allows us to track reader reactions. By subscribing to our newsletter, you consent to tracking and processing of personal reactions. You can revoke tracking consent at any time by clicking the link at the end of each newsletter.
To improve the newsletter, we analyze how often it is opened and which links readers click (user behavior analysis).
We use a double opt-in process for newsletter subscriptions, which means that we will only send you the newsletter if you confirm your registration via a link in a confirmation email sent to you for this purpose. This ensures that only the email account owner can sign up for the newsletter. Your confirmation must be completed shortly after receipt of the confirmation email, or your registration will be automatically deleted from our database.
The legal basis for processing data after newsletter registration with user consent is Art. 6(1)(a) GDPR. You may withdraw this consent at any time for future use by clicking the link provided in each newsletter or by emailing privacy@deuter.com.
Your data is retained as long as you subscribe to the newsletter. After unsubscribing, your data will be deleted. Additional storage may occur if legally required.
4.9 Contests
We occasionally offer the opportunity to participate in contests through a form on our website. If you wish to participate, we require your name and email address. Depending on the contest prize, we may also request your address, phone number, size, and gender. Further required data may be specified in the contest’s terms and conditions.
This data is solely used for winner notification and prize delivery. Providing this information is voluntary; however, without it, we may not be able to process your contest participation.
The legal basis for processing data after contest registration is Art. 6(1)(b) GDPR, meaning the processing is necessary to implement pre-contractual measures or fulfill a contract.
Once a contest has ended and the winners have been notified, the personal data processed for the contest will be deleted. However, applicable legal retention periods may apply. During the legal retention period, your personal data will be locked and will not be processed further.
5. Transfer of Personal Data to Third Parties
Your personal data is generally not transferred to third parties. Personal data is only shared or otherwise transmitted to third parties if:
we are legally obliged to do so by an official or court order,
we are entitled to do so, e.g., because it is necessary to pursue criminal offenses or to assert and enforce our rights, or
you have previously consented.
6. Cookies and External Services
Cookies are small files that allow specific, device-related information to be stored on users' devices (PC, smartphone, etc.). They increase the user-friendliness of websites for users. Some features of our website cannot be provided without the use of technically necessary cookies. They may also be used to collect statistical data on website usage to analyze and improve the website. Users can control the use of cookies. For more information on the use of cookies on our website and individual cookie settings, click HERE[LB1] .
7. Social Plugins
Our website contains social plugins for social networks “Facebook” (Facebook Inc., 1601 S. California Ave, Palo Alto, California 94304, USA), “Instagram” (Facebook Inc.), “Pinterest” (Pinterest Inc., 651 Brannan Street, San Francisco, CA 94107, USA), “X” (Twitter International Unlimited Company, One Cumberland Place, Dublin 2, Ireland), “YouTube” (Google Ireland Limited), and “LinkedIn” (LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA). Through these plugins, personal data about website visitors may be collected, transmitted to the respective service, and linked to the visitor’s respective service account. Deuter does not collect personal data through social plugins or their use.
To increase data protection on our website, social plugins are embedded using the “2-click solution.” This ensures that when you access a page on our website that contains such social plugins, no automatic connection to the respective providers' servers occurs. Activating the social plugin requires a two-step process. To activate a social plugin, you must first click the link on our website. This activates the social plugin and establishes a connection between your browser and the respective provider’s servers. A second click allows you to interact with the social plugin and, for instance, share your recommendation.
When you click on a social plugin, the respective service provider receives the information that you have visited the corresponding page of our online offering.
Please note that you do not need an account with the respective service nor to be logged in there for this to happen. However, if you already have an account with the service provider and are logged in to this account while visiting our website, the data collected by the social plugin may be directly associated with your account. If you do not wish the data to be assigned to your profile with the service provider, you must log out of your account before clicking on any of the social plugins.
Note that Deuter has no influence over whether and to what extent the respective service providers collect personal data. We do not know the scope, purpose, and storage duration of the respective data collection. However, we inform you that, at minimum, the IP address and device-related information will likely be processed via social plugins. Additionally, it is possible that the respective service providers use cookies.
With social plugins, personal data may be transferred to countries outside the EU/EEA, especially to the USA. To ensure adequate protection for personal data when transferred to such “third countries,” we have entered into EU Standard Contractual Clauses with the service providers. Additionally, where possible, we communicate with the service provider to ensure data protection with any necessary additional measures.
The legal basis for the use of social plugins, including storing information on your device and subsequently accessing it, is your explicitly granted consent under § 25(1) sentence 1 TTDSG. You can withdraw this consent at any time by deactivating cookies in your browser settings or in our cookie consent manager.
Further processing of your personal data occurs based on your explicitly granted consent according to Art. 6(1)(a) GDPR. You can withdraw this consent at any time in the future by deactivating cookies in your browser settings or in our cookie consent manager.
For more information on the scope and purpose of data collection by the respective service provider, as well as additional information on how they process and use your data, please refer directly to the privacy policies of each provider's website. These links also provide details on your data protection rights and setting options for protecting your privacy:
a) Facebook Inc., 1601 S California Ave, Palo Alto, California 94304, USA
Facebook Privacy Policy
https://www.facebook.com/policy.php
https://www.facebook.com/help/186325668085084
b) Instagram (Facebook Inc.), 1601 S California Ave, Palo Alto, California 94304, USA
c) Pinterest Inc., 651 Brannan Street, San Francisco, CA 94107, USA
https://policy.pinterest.com/de/privacy-policy
d) Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland
https://www.google.com/policies/privacy/partners/?hl=de
e) Twitter International Unlimited Company, One Cumberland Place, Fenian Street, Dublin 2, Ireland
https://twitter.com/privacy?lang=de
f) YouTube (Google), 1600 Amphitheater Parkway, Mountain View, California 94043, USA
http://www.youtube.com/t/privacy
g) LinkedIn Corporation, 2029 Stierlin Court, Mountain View, California 94043, USA
https://de.linkedin.com/legal/privacy-policy
8. Fan Pages on Facebook, Instagram, YouTube, LinkedIn, Xing, Pinterest, and X
We operate fan pages on social networks such as Facebook, Instagram, YouTube, LinkedIn, Xing, Pinterest, and X. As the operator of these fan pages, we are jointly responsible with the operators of these networks in the sense of Art. 4 no. 7 GDPR. When you visit one of our fan pages, personal data is processed by the responsible parties. We, as the operator of the fan pages, have agreements with the social networks regulating the conditions for the use of these pages. We have integrated this privacy policy into the respective fan pages where you can find additional information.
9. Security Measures to Protect Stored Data
We are committed to protecting your privacy and treating your personal data confidentially. To prevent loss or misuse of data stored by us, we have taken extensive technical and organizational security measures, which are regularly reviewed and adapted to technological progress. However, we point out that due to the structure of the internet, it is possible that data protection rules and the aforementioned security measures may not be observed by other persons or institutions outside our control. In particular, unencrypted data disclosed – even by email – can be read by third parties. We have no technical influence on this. It is the user’s responsibility to protect the data they provide by encryption or other means to prevent misuse.
10. Hyperlinks
Our website contains so-called hyperlinks to websites of other providers. When these hyperlinks are activated, you are directly forwarded from our website to the other providers' websites. These can also be the corporate websites of Deuter's partners. You will recognize this by the change in the URL. We cannot accept responsibility for the confidential handling of your data on these other websites. Please refer to the respective websites for information on how your data is handled.
11. External Service Providers
We use service providers to provide services and process your data concerning our services. These service providers process data solely under our instructions and are obligated to comply with applicable data protection regulations. All data processors have been carefully selected and only have access to your data to the extent necessary and for the required time to provide the services or as long as you have consented to data processing and use.
In this context, personal data may be transferred to countries outside the EU/EEA, particularly to the USA. To ensure adequate protection for personal data in such "third countries," we have concluded EU Standard Contractual Clauses with our service providers. Additionally, if possible, we communicate with the service provider to ensure data protection with additional measures as necessary.
12. Storage Duration
Your personal data will be deleted as soon as the respective purpose of processing has been fulfilled or is no longer applicable.
To fulfill contractual obligations, data collected from you may be retained for the duration of the contract and, depending on the contract’s scope, for six or ten years beyond to comply with legal retention obligations and to resolve any inquiries or claims after the contract expires.
Data deemed necessary to verify, reject, or pursue claims against us, you, or third parties may be retained by us as long as a corresponding procedure could be pursued.
For customer care purposes, data collected from you may be retained for three to ten years after collection unless you request deletion and no contractual or legal retention obligations prevent such deletion.
Relevant retention and record-keeping requirements arise, among others, from the German Commercial Code (HGB) and the German Fiscal Code (AO).
In this case, the legal basis for processing is the respective legal provisions in conjunction with Art. 6(1)(c) GDPR.
If no contract is concluded, we will delete your data after three years following the expiration of the statutory limitation period.
13. Rights of Data Subjects
13.1 Right to Information, Art. 15 GDPR
You have the right to obtain information from us at any time regarding the data stored about you, its origin, recipients or categories of recipients to whom this data has been disclosed, and the purpose of storage.
13.2 Right of Withdrawal, Art. 7(3) GDPR
If you have given consent for data use, you may revoke it at any time without stating reasons with effect for the future. The legality of processing based on consent before its withdrawal remains unaffected. You may withdraw consent via email to privacy@deuter.com or by written notification to: Deuter Sport GmbH, Daimlerstraße 23, 86368 Gersthofen.
13.3 Right to Rectification, Art. 16 GDPR
You have the right to request the correction of incorrect or the completion of incomplete personal data stored by us.
13.4 Right to Erasure and Restriction, Art. 17 and 18 GDPR
You have the right to have your personal data stored by us deleted or restricted. If legal retention obligations or other legally anchored reasons prevent deletion, your data may only be restricted instead of deleted.
13.5 Right to Data Portability, Art. 20 GDPR
If you request the personal data you have provided to us, we will transmit or make the data available to you or another controller, if desired, in a structured, commonly used, and machine-readable format, provided it is technically feasible.
13.6 Right to Object, Art. 21 GDPR
You have the right, under the conditions of Art. 21 GDPR, to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you if the data processing is based on our legitimate interests under Art. 6(1)(f) GDPR.
13.7 Contact for Exercising Data Subject Rights
To exercise your rights, please contact us by email at privacy@deuter.com or by post at:
Deuter Sport GmbH
Daimlerstraße 23
86368 Gersthofen
When contacting us, any data you provide (such as your email address, name, and telephone number) will be stored by us to answer your questions or meet your request. The data collected in this context will be deleted once storage is no longer necessary or processing will be restricted if statutory retention obligations exist.
14. Right to Lodge a Complaint with a Supervisory Authority, Art. 77 GDPR
If you believe that your rights under the GDPR are infringed, you have the right to lodge a complaint with the competent supervisory authority.
15. Data Transfer to Affiliated Companies
For operational reasons and to ensure IT operations and IT security, data may be transferred to affiliated companies within the Schwan-STABILO Group.
16. Automated Decision-Making/Profiling
We do not use any automated decision-making or profiling (automated analysis of your personal circumstances).
Effective January 2024
[LB1]Hier link zu der bestehenden Cookie Policy in dem land/sprache