Privacy Policy

This privacy policy applies to our online offering at https://www.sportpaint.de and associated business. It explains the type, scope, and purpose of processing personal data within our online offering.

Definitions

The "responsible party" is any natural or legal person deciding on purposes and means of data processing. "Personal data" means all information relating to an identified or identifiable natural person. "Processing" means any operation concerning personal data.

Legal Basis

Data processing follows Article 13 GDPR: Consent (Art. 6(1)(a) and Art. 7), contract fulfillment (Art. 6(1)(b)), legal obligations (Art. 6(1)(c)), legitimate interests (Art. 6(1)(f)).

Data Controller

sportpaint Werbeball BedruckungsGmbH & Co. KG
Am Voßberg 21
D-23758 Oldenburg i.H., Germany
Phone: +49 (0)4361/5553975
Email: info@sportpaint.de
Managing Director: Oliver Huxholl

Data Types Collected

Master data (names, addresses), contact data (email, phone), content data (texts, photos, videos), usage data (visited pages, access times), meta and communication data (device info, IP addresses).

Processing Purpose

Processing serves contract fulfillment, billing, and customer service. Affected persons include customers, prospects, website visitors, and employees.

Security Measures

We implement appropriate technical and organizational measures pursuant to Art. 32 GDPR to ensure a level of protection appropriate to the risk.

Hosting & Server Logs

Server logs capture: requested page, file, date/time, data volume, browser type, OS, referrer URL, IP address. Storage maximum 7 days per Art. 6(1)(f) GDPR.

Cookies

Session cookies are deleted when the browser is closed. Persistent cookies remain stored. You can configure your browser to reject cookies. Functionality may be limited.

Online Shop & Customer Accounts

We process master, communication, contract, and payment data per Art. 6(1)(b) and (c) GDPR. Customer accounts are not public and cannot be indexed by search engines.

Payment Providers

External payment providers may be used. Data entered is processed and stored only by the payment providers.

Contact

When contacting us via form, email, phone, or social media, information is processed for handling the inquiry per Art. 6(1)(b) GDPR.

Newsletter registration uses double opt-in. Sent via MailChimp (Rocket Science Group, LLC, Atlanta, GA, USA). You can cancel at any time.

Consent Management (Cookie Banner)

On your first visit you are shown a banner asking for your consent to optional cookies and tracking services (in particular Google Analytics 4 and Google Tag Manager). These are only set after your active confirmation; until then Google Analytics runs in "Consent Mode v2" without setting identifying cookies and without collecting personal data. Your choice is stored in a cookie called "cc_cookie" for up to 182 days. You can change or fully withdraw your decision at any time via the "Cookie settings" link in the site footer. The legal basis for processing after consent is Art. 6(1)(a) GDPR and § 25(1) TTDSG.

Google Analytics

This site uses Google Analytics with IP anonymization enabled. IP addresses are shortened within the EU. Users can prevent tracking via browser plugin. Personal data deleted/anonymized after 14 months.

Facebook Social Plugin

We use Facebook Ireland Ltd.'s social plugin. When called, the device connects directly to Facebook servers. More info: facebook.com/about/privacy

Your Rights

Access (Art. 15 GDPR), correction (Art. 16), deletion (Art. 17), restriction (Art. 18), data portability (Art. 20), complaints to supervisory authorities (Art. 77).

Revocation and Objection

You have the right to revoke granted consents per Art. 7(3) GDPR. You can object to processing per Art. 21 GDPR, particularly for direct marketing purposes.

Data Deletion

Processed data is deleted per Art. 17 and 18 GDPR. Commercial records: 6 years, tax records: 10 years retention.

Last updated: 17.07.2024