Privacy Notice

This website is operated by Intersport Olympia, 6094, Lizum 2, Axams (“we” or “us”).
 
We describe here how, as the website operator and therefore the data controller, we process your personal data in connection with this website, which is accessible under this domain (hereinafter referred to as “our website”), in compliance with the applicable data protection regulations, in particular the General Data Protection Regulation (GDPR), as well as any applicable national implementing provisions in German-speaking countries, such as the German Federal Data Protection Act (BDSG), the Austrian Data Protection Act (DSG), and the Swiss Federal Act on Data Protection (FADP). For simplicity, we use the terminology of the GDPR; therefore, the term “personal data” also covers “personal data” as defined in the Swiss FADP.

 

1. What data do we process about you?

When you visit this website, we collect the following information:

  • Date and time of access to a page on our website, your IP address, URL, status and version of your web browser (user agent), the URL of the website you visited before accessing this website (referrer) (so-called server log files, see section 6 below),
  • information obtained through the use of certain cookies and related technologies to present our website and our online advertising in the most effective and appealing way possible (see section 4 below),
  • any information you may provide yourself, in particular by filling out a contact form.

 

2. Purposes and legal bases of processing

Data protection law protects personal data, understood as information that can identify a person (hereinafter: “data”), such as a name. We process your personal data for the following purposes, relying in particular on the legal bases indicated:

  • to provide you with this website, including its basic functions, and to further improve and develop this website (based on our overriding legitimate interests [pursuant to Art. 6(1)(f) GDPR]);
  • to create usage statistics and thereby continuously improve our online offering and the user experience of our website (based on your consent [pursuant to Art. 6(1)(a) GDPR]);
  • to detect, prevent, and investigate attacks on our website (based on our overriding legitimate interests [pursuant to Art. 6(1)(f) GDPR]); and
  • to respond to your inquiries (based on your consent [pursuant to Art. 6(1)(a) GDPR] and our overriding legitimate interests [pursuant to Art. 6(1)(f) GDPR]).

 

3. Disclosure of personal data

If, in the course of the processing activities mentioned above, we disclose personal data to other persons or companies (e.g., processors such as technical service providers for the provision of our website, affiliated companies, or other third parties), transmit such data to them, or otherwise grant them access to the data, this is done only if permitted by law (e.g., disclosure to a payment service provider to fulfill contracts pursuant to Art. 6(1)(a) GDPR), if you have consented, if we are legally obliged to do so (e.g., to authorities in the context of investigations), or on the basis of our legitimate interests (e.g., when using commissioned service providers, etc.). If we commission third parties to process data on the basis of a “data processing agreement,” this is done in accordance with Art. 28 GDPR.


Some of the recipients mentioned above are located outside your country or process your personal data there. The level of data protection in other countries may not correspond to that of your country. We transfer your personal data only to countries or (US) companies for which the EU Commission has decided that they provide an adequate level of data protection (e.g., US companies certified under the EU-US Data Privacy Framework), or we implement measures to ensure that recipients commit to an adequate level of data protection. For this purpose, we conclude, for example, Standard Contractual Clauses for the transfer of personal data to third countries pursuant to Regulation (EU) 2016/679, or ensure that our service providers have concluded them.

 
4. Cookies, similar technologies, and tracking

This website uses so-called cookies. A cookie is a small file—data storage consisting of a name (key) and a value—that can be stored on your device or in your web browser when you visit a website. On your first visit to our website, a “cookie banner” appears. If you select “Reject all,” all cookies and similar technologies—except (technically) necessary cookies—are blocked and, in the absence of your consent, are not loaded, preventing any associated data processing.

Technically necessary cookies are used to provide users with essential functions on a website. For example, they can be used to facilitate navigation on a website, allow you to continue using a website where you left off, store your preferences and settings (e.g., language), or keep items in your shopping cart when you return to the website. Setting these technically necessary cookies does not require your consent, as it is in our legitimate interest as website operator to provide you with a functional website (legal basis: our overriding legitimate interests pursuant to Art. 6(1)(f) GDPR). Therefore, these cookies cannot be deselected in the cookie banner.

Please note that blocking or deleting cookies may impair your website experience and may prevent you from using the full functionality of the website.

Non-essential cookies serve the purposes of (1) functionality, (2) statistics and analytics, or (3) marketing and require your consent (Art. 6(1)(a) GDPR). Functional cookies enable you to use features of our website, such as submitting inquiries, where a third-party provider is used technically. Information obtained from the use of analytics and/or marketing technologies allows us, through aggregated statistics, to learn more about our users’ interests in order to continuously improve our web offering, measure the success of our marketing measures, tailor them to the interests of our users and customers, and show you only advertising that is most likely to be of interest to you.

Links in the footer of the website allow you to adjust your consents at any time under the image link. There you can also see when you last made a corresponding selection.

Most of the cookies on this website are so-called session cookies. They are automatically deleted when you leave our website. Persistent cookies, on the other hand, remain on your computer until you delete them manually in your browser. We use such persistent cookies to recognize you when you visit our website again. The table below provides an overview of the cookies used, including the required information: expiration, type (purpose), provider, and the provider’s privacy notice.

Cookie list (examples as provided):

5. Embedded third-party content

Our contact form

The data you enter via our contact form is transmitted to us by email for processing. The service from Sendgrid (Twilio) is used to send the email notification (for details see https://www.twilio.com/legal/aup and https://www.twilio.com/legal/privacy). Log files are stored for 30 days; however, they do not contain any content submitted via the form.

 

SSL encryption of our website

Our website uses SSL encryption via Let’s Encrypt – SSL Certificates (https://letsencrypt.org/repository/). This encryption is used, for example, for requests you send to us via our website. Please ensure that SSL encryption is active for the relevant activities on your part. The use of encryption is easy to recognize: your browser’s address bar shows “https://”. Data encrypted via SSL cannot be read by third parties.

 

Anti-Spam System

hCaptcha is used to identify and filter out contact requests generated by machines as spam or bots; the use is based on our legitimate interests (pursuant to Art. 6(1)(f) GDPR). The service and associated cookies are provided by Intuition Machines, Inc., based in the USA. Data transfer is safeguarded by EU Standard Contractual Clauses. For more information, see Intuition Machines Inc.’s terms and privacy notices at https://hcaptcha.com/privacy/, https://www.hcaptcha.com/gdpr and https://hcaptcha.com/terms. 

 

Our online presence on social media

We maintain online presences within social networks and platforms to communicate with customers, prospects, and users active there and to inform them about our services. When accessing the respective networks and platforms, the terms and privacy policies of the respective social networks apply. We process users’ data when they communicate with us within the social networks and platforms, e.g., by posting on our profile or sending us messages. Requests for information and the exercise of data subject rights can be most effectively asserted with the providers. Only the providers have access to users’ data and can take appropriate measures and provide information directly.



6. Storage location (hosting and Content Delivery Network) and storage period

The personal data collected on this website is stored on the servers of our hosting provider, an external service provider, on servers in the EU. The use of the hosting provider (mono solutions ApS, Denmark, Amagerfælledvej 106, 2300 Copenhagen) is carried out within the framework of a data processing agreement pursuant to Art. 28 GDPR for the purpose of fulfilling contracts with our potential and existing customers (Art. 6(1)(b) GDPR) and in the interest of providing our online presence in a secure, fast, and efficient manner through a professional provider (Art. 6(1)(f) GDPR). A Content Delivery Network (CDN) is also used to deliver content and secure our digital offerings by making website content (e.g., images, fonts) available on various geographically distributed servers. This shortens website loading times, increases availability, and enhances protection (including protecting your data against unauthorized access); this processing is therefore in our legitimate interests pursuant to Art. 6(1)(f) GDPR. As a rule, we store your data only as long as necessary to fulfill the purposes for which it was collected. Server log files (see section 1 above) are stored for 30 days.



7. Your rights in relation to personal data

Subject to the conditions of applicable law, you have the following rights:

  • Right of access (Article 15 GDPR)
  • Right to rectification (Article 16 GDPR)
  • Right to erasure (“right to be forgotten”) (Article 17 GDPR)
  • Right to restriction of processing (Article 18 GDPR)
  • Right to notification – obligation to communicate rectification or erasure of personal data or restriction of processing (Article 19 GDPR)
  • Right to data portability (Article 20 GDPR)
  • Right to object (Article 21 GDPR)
  • Right not to be subject to a decision based solely on automated processing — including profiling (Article 22 GDPR)
  • Right to lodge a complaint with the competent supervisory authority

 

8. Our contact details

If you have any questions or concerns regarding the processing of your personal data, please contact us:


Intersport Olympia

6094, Lizum 2, Axams

info@intersport-olympia.com

 
Last updated: 01.03.2024