Data Protection Policy
Preamble
Deuter Sport GmbH is pleased that you are visiting our website. The protection of personal data and data security when using our website are very important to us. We would therefore like to inform you at this point which of your personal data we collect when you visit our joint website and for what purposes it is used. Since changes in the law or changes in our internal corporate processes may necessitate an adjustment of this privacy policy, we kindly ask you to read this privacy policy regularly. The privacy policy applies to the online offer of Deuter Sport GmbH, which can be accessed at the domain https://www.deuter.com.
1. Name of the Controller
The responsible entity and service provider is Deuter Sport GmbH, Daimlerstraße 23, 86368 Gersthofen (hereinafter referred to as “Deuter”).
2. Name and Address of the Data Protection Officer
Our Data Protection Officer is: Sebastian Meyer, Schwanweg 1, 90562 Heroldsberg. If you have any questions regarding data protection, you can contact our Data Protection Officer at any time, preferably by email at: Datenschutz@schwan-stabilo.com.
3. General Information on Data Processing
We generally collect and use personal data of our users only insofar as this is necessary to provide a functional website as well as our content and services.
3.1 Personal Data
Personal data means all information relating to an identified or identifiable natural person. This includes, for example, information such as your name, your age, your address, your telephone number, your date of birth, your email address, your IP address, or your user behavior. Information for which we cannot (or can only with disproportionate effort) establish a reference to your person, for example by anonymizing the information, is not considered personal data.
3.2 Processing of Personal Data
Processing means any operation or set of operations performed upon personal data, whether or not by automated means, such as collection, recording, organization, filing, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
3.3 Legal Basis for the Processing of Personal Data
As a rule, the collection and use of personal data of our users takes place only with the user’s consent. Insofar as we obtain the data subject’s consent for processing operations involving personal data, the legal basis is Art. 6 (1) lit. a of the General Data Protection Regulation (GDPR).
An exception applies in cases where obtaining prior consent is not possible for factual reasons and processing of the data is permitted by legal provisions. Where the processing of personal data is necessary for the performance of a contract to which the data subject is a party, Art. 6 (1) lit. b GDPR serves as the legal basis. This also applies to processing operations necessary to carry out pre-contractual measures.
Insofar as a processing of personal data is required to fulfill a legal obligation to which we are subject, Art. 6 (1) lit. c GDPR is the legal basis.
If processing is necessary to protect the legitimate interests of the controller or a third party, and if the interests, fundamental rights, and freedoms of the data subject do not override the first-mentioned interest, Art. 6 (1) lit. f GDPR serves as the legal basis.
4. Data Processing Activities
Personal data is collected via this website if you voluntarily provide it to us, e.g., by filling in forms or by sending emails. We use this data for the stated purposes or those arising from the inquiry, for example, the provision of your email address so that we can contact you. Data is only transferred to third parties if the law expressly permits this or if you have consented to the transfer in the course of an active business relationship.
4.1 Informational Use of the Website
You can visit our website without providing any personal information. If you only use our website for informational purposes and do not transmit any information about your person, we do not process any personal data, with the exception of data transmitted by your browser to enable you to visit the website. For the technical provision of our website, it is necessary that we process certain automatically transmitted information from you so that your browser can display our website and you can use the website. This information is automatically collected each time our website is called up and stored in our server log files. This information relates to the computer system of the requesting computer. The following information is processed:
- Host
- IP address of the user
- Date and time of access
- Access method (GET/POST)
- Request
- Protocol (e.g., HTTPS)
- Status (e.g., error messages)
- Data volume retrieved
- Referrer
- User’s browser and operating system
Art. 6 (1) lit. f GDPR serves as the legal basis for this data processing. The processing of the aforementioned data is necessary for the provision of a website and thus serves the protection of a legitimate interest of our company.
As soon as the aforementioned data is no longer required for displaying the website, it will be deleted. The collection of the data for the provision of the website and the (temporary) storage of the data in log files is mandatory for the operation of the website. Further storage may occur in individual cases if required by law.
In addition to purely informational use of our website, you can also use our website actively, for example, to contact us. In this case, in addition to the data mentioned above, we process the following personal data:
- Salutation
- First name
- Last name
- Email address
- Telephone number
- Country
4.2 Active Use of the Website – Contact Form
If you use the contact form on our website to send inquiries, we process your first and last name and your email address. You can also voluntarily provide your address and telephone number. Furthermore, you can send an individual message to us via the message field. It is your free decision whether you provide us with this data. Without this information, however, we may not be able to fully respond to your contact request.
Section 25 (2) no. 2 of the German Telecommunications-Telemedia Data Protection Act (TTDSG) serves as the legal basis for the possible reading of stored information on your device.
The legal basis for the subsequent processing of data transmitted in the course of contacting us is Art. 6 (1) lit. f GDPR. If contact is made, the necessary legitimate interest in processing the data lies in responding to your inquiry.
If the contact via email aims at concluding a contract, then Art. 6 (1) lit. b GDPR is the legal basis for processing.
Once your inquiry has been dealt with and the matter in question has been conclusively clarified, the personal data processed via the contact form will be deleted. Further storage may occur in individual cases if required by law.
If you agree to the forwarding of your data to country representatives for faster processing, we reserve the right to forward your name, as well as your email address and inquiry, to third parties (our partner companies). These may be country representatives in the following countries: Argentina, Australia, Belgium, Brazil, Bulgaria, Chile, Denmark, Ecuador, Estonia, Finland, France, Georgia, Greece, Great Britain, Hong Kong, India, Indonesia, Iran, Ireland, Iceland, Israel, Italy, Japan, Canada, Korea, Latvia, Lithuania, Luxembourg, Malaysia, Mexico, Moldova, New Zealand, Netherlands, Norway, Austria, Peru, Philippines, Poland, Portugal, Romania, Russia, Saudi Arabia, Sweden, Switzerland, Singapore, Slovakia, Spain, South Africa, Taiwan, Thailand, Czech Republic, Turkey, Ukraine, Hungary, United Arab Emirates.
Without your consent, no transfer of your personal data to third parties will be made when using the contact form.
4.3 Registration for a Customer Account and Registration Process
We offer users the opportunity to register on our website by providing personal data. The data is entered into an input mask and transmitted to us, where it is stored. Data is not passed on to third parties as a rule, unless this is mandatory for the performance of a contract. The following personal data is collected during the registration process:
- Mandatory data: Salutation, title, first name, last name, address, email address, and a password chosen by you
- Optional information: Telephone number
- IP address
- Date and time of registration
Using the processed data, we create a customizable user account for you with which you can use certain content and services on our website, such as the Deuter online shop. We process your email address so that we can send you new login data if you ever forget it.
You may change the data we have stored about you at any time in your customer account.
The processing of the personal data described above is carried out in accordance with Art. 6 (1) lit. b GDPR for the execution of pre-contractual measures.
As soon as the registration on our website is canceled or changed, the data processed during the registration process will be deleted. Further storage may occur in individual cases if required by law.
As a user, you may terminate your registration at any time. To do so, please send us an email stating your request to privacy@deuter.com.
4.4 Retailer Search
a) Use of OUTTRA Component
For the retailer search function, we use the OUTTRA component of 81 MEDIA GmbH, Ziegelbrennerstr. 5, 73074 Stuttgart. To display this function, the component must query the visitor’s IP address. The component uses the IP address solely to send corresponding information to the visitor’s browser. The IP address is therefore required for displaying this function.
For the retailer search function, the visitor’s IP address is anonymized on the OUTTRA server. Using the anonymized IP address, a database query is made to determine a rough localization of the visitor based on the non-anonymized part of the IP address. As a result, local retailers are displayed to the visitor on the website.
Art. 6 (1) lit. f GDPR serves as the legal basis for the aforementioned processing of personal data. Our legitimate interest is in the sale and promotion of products and services and the corresponding functionality of the website.
If the retrieval of product availability serves the initiation of a contract, Art. 6 (1) lit. b GDPR is the legal basis.
You may object at any time, in accordance with Art. 21 GDPR, to the future processing of data relating to you that is carried out on the basis of Art. 6 (1) lit. f GDPR. In particular, you can object to processing for the purpose of direct marketing.
After the end of the browser session by the visitor, no personal data is stored by the component, by 81 MEDIA GmbH, or by Deuter Sport GmbH.
b) GOOGLE MAPS
We use the Google Maps map service via an API, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Maps is used to show users where Deuter products are available nearby.
Using Google Maps requires processing your IP address by Google Ireland Ltd.
The processing of your personal data is based on your explicitly given consent pursuant to Art. 6 (1) lit. a) GDPR. You can revoke this consent at any time for the future by disabling the slider in the retailer search application.
In this context, personal data may be transferred to countries outside the EU/EEA, in particular to the USA. Google LLC and Google Ireland Ltd. are verified under the Data Privacy Framework Program, so that an adequacy decision within the meaning of Art. 45 GDPR exists for this third-country transfer.
You can find more information on Google’s privacy policy here: https://policies.google.com/privacy?hl=en
4.5 Order Process in the Deuter Online Shop
To process orders in the Deuter online shop, we require the following information about you: first and last name, address, email address, telephone number, date of birth, and possibly your gender and size. It is your free decision whether to provide us with this data. Without this information, however, we cannot process your order.
We use Adyen as a payment service provider to process payments in our online shop. Adyen is a provider of payment solutions supporting various payment methods such as credit cards, bank transfers, and other electronic payments.
In the course of payment processing, your payment data is forwarded to Adyen. The processed data includes, among others:
- Name of the billing recipient
- Billing address
- Name of the recipient of the package
- Shipping address
- Order number
- Contents of the order (such as items, quantity, price, discounts, etc.)
The processing of this data is exclusively for the purpose of payment processing and the fulfillment of contractual obligations. Adyen is obliged to protect your data in accordance with applicable data protection regulations and to process it only to the extent necessary.
You can access Adyen’s privacy policy at: https://www.adyen.com/de_DE/privacy-policy
The processing of your data by Adyen is based on Art. 6 (1) lit. b GDPR (contract performance) and Art. 6 (1) lit. f GDPR (legitimate interest). Our legitimate interest lies in providing a secure and efficient payment option.
Your data is then transferred to the financial institution or online payment service provider commissioned with the payment. In some cases, the selected payment service providers also collect this data themselves if you create an account there. In this case, you must log in to the payment service provider’s portal with your access data during the order process. The respective payment service provider’s privacy policy applies accordingly.
For the processing of your personal data necessary to fulfill a purchase contract concluded with us, i.e., in particular for payment processing, Art. 6 (1) lit. b) GDPR serves as the legal basis. This also applies to processing operations necessary for carrying out pre-contractual measures. In some cases, we may also be legally obliged to transfer data concerning you (implementation of strong customer authentication under EU Directive 2015/2366 (PSD 2) or the German Payment Services Supervision Act (ZAG)). Insofar as we are legally obliged to transfer data, Art. 6 (1) lit. c) GDPR in conjunction with the corresponding provisions of EU Directive 2015/2366 (PSD 2) or the Payment Services Supervision Act (ZAG) shall be applied as the legal basis.
Upon complete execution of the contract and full payment of the purchase price, your data will be blocked for further use and deleted after the expiry of the tax and commercial retention periods, unless you have expressly consented to the further use of your data. Further storage may occur in individual cases if required by law.
a. Payment via PayPal
If you choose to pay with “PayPal” during the order process, your personal data will be automatically transmitted to PayPal via the aforementioned payment service provider Adyen. PayPal is offered by PayPal (Europe) S.à.r.l. & Cie. S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg. PayPal acts as an online payment service provider and trustee, offering buyer protection services.
The personal data transmitted to PayPal regularly includes: first name, last name, address, email address, IP address, or other data necessary for payment processing. Also required for executing the purchase contract are those personal data related to the respective order (e.g., number of items, item number, invoice amount and taxes, and other invoice information).
This corresponds to our legitimate interest in offering an efficient and secure payment method (Art. 6 (1) lit. f GDPR). In this context, we transfer the mentioned data to PayPal insofar as it is necessary for contractual fulfillment (Art. 6 (1) lit. b GDPR).
PayPal also reserves the right to collect personal data from the buyer. According to PayPal, this may include:
- Name
- Address
- Telephone number
- Account number
PayPal may forward your personal data to affiliated companies, service providers, or subcontractors if this is necessary to fulfill contractual obligations or if the data is processed on behalf of PayPal.
The personal data we transfer to PayPal may be transmitted by PayPal to credit agencies. This transmission serves the purpose of identity and credit checks. The credit report result is used by PayPal, taking into account the statistical probability of default, to decide on the provision of the respective payment method. The credit report may contain probability values (so-called score values). If score values are included in the credit report result, they are based on a scientifically recognized mathematical-statistical procedure.
You have the option to revoke your consent to the processing of your personal data at any time to PayPal. However, revoking your consent does not affect the lawfulness of the processing carried out based on your consent prior to the revocation if the personal data must be processed, used, or transmitted for the contractual payment processing.
You can access PayPal’s privacy policy at: https://www.paypal.com/de/webapps/mpp/ua/privacy-full
b. Payment via Sofortüberweisung (Instant Transfer)
We offer the possibility to process the payment transaction via Sofortüberweisung, a service of Klarna Bank AB, Chausseestrasse 117, 10115 Berlin (Klarna). This corresponds to our legitimate interest in offering an efficient and secure payment method (Art. 6 (1) lit. f GDPR). In this context, we forward the following data to Klarna to the extent necessary for contractual fulfillment (Art. 6 (1) lit. b GDPR):
- First name
- Last name
- Transfer amount
Depending on how your bank manages online accounts, different verification steps are necessary: if your bank only accepts transfer orders with sufficient account coverage, Klarna will not perform a coverage check. In all other cases, Klarna checks whether the sum of the account balance and overdraft limit minus unbooked transactions covers the amount to be transferred.
In cases of increased risk of misuse, Klarna reserves the right to verify whether Sofortüberweisungen from the last 30 days were successfully carried out. No credit checks based on historical payment data are carried out.
The verification is carried out either via the HBCI interface of your bank or via the user interface of your online banking—just as if you were logging in yourself. If you manage multiple accounts, no information about non-selected accounts is stored. Klarna also stores your online banking user identification (login name/account number) as a hash value. PIN and TAN codes are not stored.
We have no influence on this process and only receive the result of whether the payment was executed or declined, your account number, bank code, reference, amount, and date.
For billing purposes, Klarna stores your name, account number, bank code, reference, date, and transfer amount within the statutory retention periods. The basis for this is Section 28 (1) Sentence 1 No. 1 of the German Federal Data Protection Act (BDSG).
We store your data until the completion of the payment processing and until the expiration of the commercial and tax retention periods. This also includes the period required for handling refunds, claims management, and fraud prevention.
Information on objection and removal options vis-à-vis Klarna can be found at: https://www.sofort.com/payment/wizard/getCmsContent/data_protection/DE/0/de.
Personal data that was transmitted to the service provider in the context of invoice creation will be deleted by the service provider after 24 months. After deletion, the service provider retains backups of these data and deletes them after another 12 months. Further storage may occur if this is required by law, for example, due to tax and commercial law retention obligations.
4.6 Shipping
To fulfill the contract, we use the following shipping service providers: DHL Paket GmbH, Sträßchensweg 10, 53113 Bonn. DHL may forward your data to local parcel delivery agents. In addition, we offer the possibility to track your shipment. We use the service provider PAQATO GmbH, Johann-Krane-Weg 6, 48149 Münster for this purpose.
In accordance with Art. 6 (1) Sentence 1 lit. b GDPR, we forward your data to the shipping company entrusted with the delivery insofar as this is necessary for the delivery of ordered goods.
If you have given us your explicit consent during or after your order to pass on your email address and telephone number to the selected shipping service provider so that they can contact you prior to delivery for the purpose of delivery notification or coordination, we will process this data on the basis of this consent (Art. 6 (1) Sentence 1 lit. a GDPR).
You can revoke your consent at any time by sending a message to privacy@deuter.com or directly to the shipping service provider at the contact address provided below:
DHL Paket GmbH
Sträßchensweg 10
53113 Bonn
After revocation, we will delete your data provided for this purpose, unless legal retention periods prevent deletion.
4.7 Applicant Management
If you are interested in one of the job offers listed on the website, you can send us an email at ichwill@deuter.com at any time or send your application documents to the following address: Deuter Sport GmbH, Daimlerstraße 23, 86368 Gersthofen. We will process all information you have provided.
The legal basis for processing your personal data is Art. 6 (1) Sentence 1 lit. b GDPR in conjunction with Section 26 (1) Sentence 1 of the German Federal Data Protection Act (BDSG).
We assure you that we will only process the personal data you have provided for the purpose of carrying out the application process. The storage period is 6 months after the conclusion of the application procedure to defend against any claims under the German General Equal Treatment Act (AGG).
If your application cannot be considered at the moment, you also have the option of agreeing that we store the documents you submitted as part of this application and the information you provided on these websites in our applicant database in accordance with Art. 6 (1) lit. a GDPR. This would allow us to possibly contact you in the future if a position matching your profile becomes available. You must give explicit consent to such storage of your application data for a maximum of 12 months at the appropriate point when submitting your application. You can withdraw this consent at any time with effect for the future by sending an email to ichwill@deuter.com.
4.8 Newsletter
To register for our email newsletter, we need your email address, to which the newsletter will be sent.
It is your free decision whether you provide us with this data. Without this information, however, we may not be able to send our newsletter to you.
Please note that we currently collaborate with HubSpot, Inc., 25 First Street, Cambridge, MA 02141, USA for sending newsletters. HubSpot processes your data on our behalf and ensures proper email delivery. No additional disclosure of your data to third parties occurs in connection with sending the newsletter. For further information on HubSpot as well as your corresponding data protection rights and settings to protect your privacy, please see: https://legal.hubspot.com/de/privacy-policy.
When you sign up for the newsletter, your email address will be used for our own advertising purposes until you unsubscribe from the newsletter. You can unsubscribe at any time via the link at the end of each newsletter. By using the newsletter software, we can access personal recipient reactions. By registering for our newsletter, you agree to the tracking permission and the processing of personal reactions. You can withdraw your consent to tracking by clicking the link at the end of each newsletter at any time, thus canceling it.
To optimize the newsletter, we evaluate how frequently it is opened and which links are clicked by readers (analysis of user behavior).
We use the so-called double opt-in procedure for sending the newsletter, i.e., we will only send you the newsletter once you have confirmed your registration via a confirmation email sent to you for this purpose by clicking the included link. This is to ensure that only you, as the owner of the specified email address, can sign up for the newsletter. Your confirmation must be made promptly after receiving the confirmation email; otherwise, your newsletter registration will be automatically deleted from our database.
If the user has given consent, the legal basis for processing the data after registration for the newsletter by the user is Art. 6 (1) lit. a GDPR. You can revoke this consent at any time for the future by clicking the link provided in every newsletter email or by emailing privacy@deuter.com.
Your data will be stored as long as you remain subscribed to the newsletter. After you unsubscribe from the newsletter, your data will be deleted. Further storage may occur in individual cases if required by law.
4.9 Competitions
At irregular intervals, we offer you the opportunity to participate in competitions via a form on our website. If you wish to participate in our competitions, we require your name and email address. Depending on the prize of the competition, we may also ask for your address, telephone number, size, and gender. If needed, further required data may be derived from the terms and conditions of the respective competition.
This information is used solely for the purpose of notifying winners and sending or providing the prize. It is up to you whether you provide us with this data. Without this information, we may not be able to consider your participation in the competition.
The legal basis for processing the data after the user’s registration for the competition is Art. 6 (1) lit. b GDPR, i.e., processing is necessary for carrying out pre-contractual measures or fulfilling a contract.
Once a competition has ended and the winners have been drawn and notified, the personal data processed via the competition form will be deleted. Statutory retention periods remain unaffected. During the statutory retention period, your personal data will be blocked and not processed for any other purposes.
5. Disclosure of Personal Data to Third Parties
Your personal data is generally not disclosed. Your personal data will only be disclosed or otherwise transferred to third parties if:
- We are legally obliged to do so by official or judicial order,
- We are authorized to do so, for example, because this is necessary for the prosecution of criminal offenses or to assert and enforce our rights, or
- You have given your prior consent.
6. Cookies and External Services
Cookies are small files that allow specific device-related information to be stored on users’ end devices (PC, smartphone, etc.). They serve to increase the user-friendliness of websites and thus benefit users. Some functions of our website cannot be offered without the use of technically necessary cookies. Additionally, they can be used to collect statistical data about website usage to improve the website. Users can influence the use of cookies. For more detailed information about the use of cookies on our website and to configure your individual cookie settings, please click HERE.
7. Social Plugins
Our websites contain social plugins from the social networks “Facebook” (Facebook Inc., 1601 S. California Ave, Palo Alto, California 94304, USA), “Instagram” (Facebook Inc., 1601 S. California Ave, Palo Alto, California 94304, USA), “Pinterest” (Pinterest Inc., 651 Brannan Street, San Francisco, CA 94107, USA), “X” (Twitter International Unlimited Company, One Cumberland Place, Fenian Street, Dublin 2, Ireland), “YouTube” (Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland), and “LinkedIn” (LinkedIn Corporation, 2029 Stierlin Court, Mountain View, California 94043, USA). It is possible that these plugins may also collect personal data about visitors to the website, transmit it to the respective service, and link it to the user’s respective service. Deuter itself does not collect any personal data via the social plugins or their use.
To increase the protection of your data on our website, the social plugins are integrated into our website using the “2-click solution.” This ensures that when you call up a page of our website that contains such social plugins, no automatic connection is established with the servers of the respective providers. Activating the function of the respective social plugin takes place in two steps. To activate a social plugin, you must first click on the link located on our website. This activates the social plugin, and your browser establishes a connection to the servers of the respective provider. By clicking a second time, you can now interact with the social plugin and, for example, transmit your recommendation.
After clicking on a social plugin, the respective service provider receives the information that you have visited the corresponding page of our online offering. Please note that you do not need to have a user account with the respective service to do this, nor do you need to be logged in there. However, if you already have a user account with the respective service provider and are logged in to that account during your visit to our website, the data collected by the social plugin will be directly assigned to your account. If you do not wish the assignment to your profile at the respective service provider, you must log out of your user account before clicking on one of the social plugins.
Please note that Deuter has no influence on whether and to what extent the respective service providers collect personal data. The scope, purpose, and retention periods of the respective data collection are unknown to us. However, it must be assumed that at least the IP address and device-related information are used and recorded via social plugins. It is also possible that the respective service providers use cookies.
Through the social plugins, personal data may be transferred to countries outside the EU/EEA, in particular to the USA. In order to ensure an adequate level of protection for your personal data in the event of transmission of personal data to such so-called third countries, we have concluded EU standard contractual clauses. Due to the absence of an adequacy decision and without appropriate safeguards, there is in particular a risk that U.S. authorities may process your data for control and surveillance purposes, possibly without legal remedies. Furthermore, where possible, we are in contact with the service provider to ensure the protection of your personal data with any necessary additional measures.
The legal basis for the use of the social plugins for the associated storage of information on your device and its subsequent reading is your explicit consent pursuant to Section 25 (1) Sentence 1 TTDSG. You may revoke this consent at any time for the future by disabling cookies in your browser settings or in our cookie consent manager. The subsequent processing of your personal data is based on your explicitly given consent pursuant to Art. 6 (1) lit. a GDPR. You can revoke this consent at any time for the future by disabling cookies in your browser settings or in our cookie consent manager.
For the scope and purpose of data collection by the respective service as well as further processing and use of your data there, please refer to the data protection notices of the respective service provider. There you will also find further information on your corresponding data protection rights and settings to protect your privacy.
a) Facebook Inc., 1601 S California Ave, Palo Alto, California 94304, USA
https://www.facebook.com/policy.php
https://www.facebook.com/help/186325668085084
b) Instagram, Facebook Inc., 1601 S California Ave, Palo Alto, California 94304, USA
https://help.instagram.com/519522125107875/?helpref=hc_fnav&bc[0]=Instagram-Help&bc[1]=Privacy%20and%20Security
c) Pinterest Inc., 651 Brannan Street, San Francisco, CA 94107, USA
https://policy.pinterest.com/en/privacy-policy
d) Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland
https://www.google.com/policies/privacy/partners/?hl=en
e) Twitter International Unlimited Company, One Cumberland Place, Fenian Street, Dublin 2, Ireland
https://twitter.com/privacy?lang=en
f) YouTube, 1600 Amphitheater Parkway, Mountain View, California 94043, USA
http://www.youtube.com/t/privacy
g) LinkedIn Corporation, 2029 Stierlin Court, Mountain View, California 94043, USA
https://www.linkedin.com/legal/privacy-policy
8. Fan Pages on Facebook, Instagram, YouTube, LinkedIn, Xing, Pinterest, and X
We operate fan pages on the social networks Facebook, Instagram, YouTube, LinkedIn, XING, Pinterest, and X. As operators of these fan pages, we are jointly responsible with the operators of these networks within the meaning of Art. 4 No. 7 GDPR. When you visit one of our fan pages, personal data is processed by the controllers. As the controller of the fan pages, we have agreements with these social networks, which, among other things, regulate the conditions for using these pages. We have integrated this privacy policy into the respective fan pages, from which you can obtain further information or on deuter.com:
- Facebook Data Policy
- Instagram Data Policy
- YouTube Data Policy
- LinkedIn Data Policy
- XING Data Policy
- Pinterest Data Policy
- X Data Policy
9. Security Measures to Protect the Data Stored with Us
We are committed to protecting your privacy and treating your personal data as confidential. To prevent loss or misuse of the data stored with us, we take extensive technical and organizational security precautions, which are regularly reviewed and adapted to technological progress. However, we would like to point out that due to the structure of the internet, it is possible that the rules of data protection and the aforementioned security measures may not be observed by other persons or institutions outside our area of responsibility. In particular, unencrypted data—even if transmitted by email—may be read by third parties. We have no technical influence over this. It is the user’s responsibility to protect the data he or she provides against misuse by encryption or other means.
10. Hyperlinks
Our website contains so-called hyperlinks to websites of other providers. When these hyperlinks are activated, you will be redirected directly from our website to the providers’ websites. This can also apply to the corporate websites of Deuter’s partners. You can recognize this, among other things, by the change of the URL. We cannot assume any responsibility for the confidential handling of your data on other websites. Please inform yourself directly on the respective websites about how your personal data is handled there.
11. External Service Providers
We use service providers to provide services and to process your data in connection with our services. These service providers process the data exclusively on our instructions and have been obliged to comply with the applicable data protection regulations. All processors have been carefully selected and only have access to your data to the extent and for the time required to provide their services or to the extent that you have consented to the data processing and usage.
In this context, personal data may be transferred to countries outside the EU/EEA, in particular to the USA. In order to ensure an adequate level of data protection for your personal data in the case of transferring personal data to such so-called third countries, we have concluded EU Standard Contractual Clauses with our service providers. Furthermore, where possible, we are in contact with the service provider to ensure the protection of your personal data with any additional measures that may be necessary.
12. Storage Period
Your personal data will be deleted as soon as the respective purpose for processing is achieved or subsequently ceases to apply.
To fulfill contractual obligations, the data collected from you can be retained for as long as the contract is in effect, and, depending on the significance of the contract, for 6 or 10 years beyond that in order to comply with legal retention obligations and to clarify any requests or claims after the end of the contract.
If, in our opinion, data is necessary to examine or defend against claims brought against us or to pursue claims against you, us, or third parties, such data may be retained by us for as long as a corresponding procedure could be initiated.
For customer support purposes, the data collected from you may be stored for 3 to 10 years after collection, unless you request the deletion of this data and no contractual or legal retention obligations prevent such deletion.
Relevant proof and retention obligations arise, among other things, from the German Commercial Code and the German Fiscal Code.
In this case, the respective legal provisions in conjunction with Art. 6 (1) lit. c GDPR serve as the legal basis for processing.
If no contract is concluded, we will delete your data after 3 years at the end of the statutory limitation period.
13. Rights of Data Subjects
13.1 Right of Access, Art. 15 GDPR
You have the right to request information from us at any time about the data we have stored about you, as well as its origin, recipients or categories of recipients to whom this data is disclosed, and the purpose of its storage.
13.2 Right of Withdrawal, Art. 7 (3) GDPR
If you have given consent to the use of data, you can withdraw it at any time without giving reasons and with effect for the future. The lawfulness of the processing carried out on the basis of the consent until the withdrawal remains unaffected. A simple email to privacy@deuter.com or written notification to Deuter Sport GmbH, Daimlerstraße 23, 86368 Gersthofen is sufficient.
13.3 Right to Rectification, Art. 16 GDPR
You may request the rectification of incorrect or the completion of your data stored by us at any time.
13.4 Right to Erasure and Restriction, Art. 17 and 18 GDPR
You have the right to have your personal data stored by us deleted or restricted. If there are legal retention obligations or other legally anchored reasons that oppose deletion, your data may only be restricted instead of deleted.
13.5 Right to Data Portability, Art. 20 GDPR
If you request the personal data you have provided to us, we will hand it over to you or another controller in a structured, commonly used, and machine-readable format if you wish. We will only transfer the data directly if it is technically feasible.
13.6 Right to Object, Art. 21 GDPR
You have the right, for reasons arising from your particular situation, to object at any time, in accordance with the requirements of Art. 21 GDPR, to the processing of personal data concerning you, provided that the data processing is based on our legitimate interests pursuant to Art. 6 (1) lit. f GDPR.
13.7 Contact for the Assertion of Data Subject Rights
To assert your data subject rights, you can contact us by email at privacy@deuter.com or by post at Deuter Sport GmbH, Daimlerstraße 23, 86368 Gersthofen.
When you contact us, we will store the data you provide (your email address, if applicable, your name, and your telephone number) in order to answer your questions or respond to your request. We will delete the data arising in this context after storage is no longer necessary or restrict processing if there are statutory retention obligations.
14. Right to Lodge a Complaint with a Supervisory Authority, Art. 77 GDPR
You have the right to lodge a complaint with the competent supervisory authority if you believe that the processing of your personal data violates the GDPR.
15. Data Transfer to Affiliated Companies
For operational reasons and to ensure IT operations and IT security, data may be transferred to affiliated companies of the Schwan-STABILO Group.
16. Automated Decision-Making / Profiling
We do not use automated decision-making or profiling (automated analysis of your personal circumstances).
Status: Dezember 2024
[LB1]Hier link zu der bestehenden Cookie Policy in dem land/sprache