Personal data (usually referred to as “data” in the following) will only be processed by us within the scope of necessity and for the purpose of providing a functional and user-friendly website, including its contents and the services offered there.
Pursuant to Article 4 (1) of Regulation (EU) 2016/679, i.e. the General Data Protection Regulation (hereinafter referred to as “GDPR”), “processing” means any process carried out with or without the aid of automated procedures or any such series of operations relating to personal data; how raising, grasping, the organisation, ordering, the storage, adaptation or modification, readout, query, use, disclosure by transmission, dissemination or any other form of provision; the matching or linking, constraint, deletion, or destruction.
With the following data protection declaration, we inform you in particular about the nature, scope, purpose, duration and legal basis of the processing of personal data, insofar as we decide on the purposes and means of processing either alone or together with others. In addition, we will inform you below about the external components used by us for optimization purposes and to increase the quality of use, insofar as third parties process data in turn under their own responsibility.
Our privacy policy is structured as follows:
Our privacy policy is structured as follows:
II. Rights of users and data subjects
III. Information on data processing
Our privacy policy is structured as follows:
The responsible provider of this website in the sense of data protection law is:
Cunabi Sports GmbH – Stehpaddler SUP Shop
Goerzallee 299, 14167 Berlin-Lichterfelde
E-Mail: datenschutz@cunabi.org
Telephone: +49 (30) 214 613 07
Cunabi Sports GmbH darf also process the data provided for the performance of the contract in order to transfer it to the acquirer of the company in one case of the sale of the company without altering the processing purpose. This consent applies until revocation, which can be declared at any time with effect for the future, e.g. by e-mail to datenschutz@cunabi.org.
II. Rights of users and data subjects
With regard to the data processing described in more detail below, users and data subjects have the right to:
- on confirmation of whether data concerning them are processed, on information about the processed data, on further information about the data processing and on copies of the data (see also Art. 15 GDPR);
- correction or completion of incorrect or incomplete data (see also Art. 16 GDPR);
- immediate deletion of the data concerning them (see also Art. 17 GDPR), or, alternatively, insofar as further processing pursuant to Art. 17 para. 3 GDPR is required to restrict processing in accordance with Art. 18 GDPR;
- 3 GDPR is required to restrict processing in accordance with Article 18 GDPR;
- upon complaint to the supervisory authority, if they consider that the data concerning them are processed by the provider in violation of data protection regulations (see also Art. 77 GDPR).
Furthermore, the provider is obliged to inform all recipients to whom data has been disclosed by the provider of any rectification or deletion of data or the restriction of the processing which arises under Articles 16, 17 para. 1, 18 GDPR. However, this obligation does not exist to the extent that this communication is impossible or involves a disproportionate effort. Without prejudice to this, the user has a right to information about these recipients.
In accordance with Art. 21 GDPR, users and data subjects also have the right to object to the future processing of the data concerning them, provided that the data is provided by the provider in accordance with Art. 6 para. 1 lit. f) GDPR is processed. In particular, an objection to data processing for the purpose of direct advertising is admissible.
III. Information on data processing
Your data processed when we use our website will be deleted or blocked as soon as the purpose of the storage ceases to apply, the deletion of the data does not preclude any legal retention obligations and no other information regarding individual processing procedures will be given below.
Server data
For technical reasons, in particular to ensure a secure and stable Internet presence, data is transmitted by your Internet browser to us or to our webspace provider.. These so-called server log files include the type and version of your Internet browser, the operating system, the website from which you have switched to our Internet presence (referrer URL), the website (s) of our Internet presence that you visit, the date and time of the respective access as well as the IP
These data collected in this way are stored prematurely, but not together with other data from you.
This storage takes place on the legal basis of Art. 6 para. 1 lit. f) DSGVO. Our legitimate interest lies in the improvement, stability, functionality and security of our website.
The data will be deleted after seven days at the latest, unless further storage is required for evidence purposes. Andernfalls sind die Daten bis zur endgültigen Klärung eines Vorfalls ganz oder teilweise von der Löschung ausgenommen.
Cookies
a) Session-Cookies
We use so-called cookies with our website. Cookies are small text files or other storage technologies that are stored and stored on your device by the internet browser you use. These cookies process certain information from you to an individual extent, such as your browser or location data or your IP address.
This processing makes our website more user-friendly, effective and secure, since the processing e.g. the reproduction of our internet presence in different languages or the offer of a shopping cart function.
The legal basis for this processing is Art. 6 para. 1 lit b.) GDPR, insofar as these cookies are processed data for contract initiation or contract execution.
If the processing does not serve to initiate or execute the contract, our legitimate interest lies in improving the functionality of our website. The legal basis is then Art. 6 para. 1 lit. f) DSGVO.
By closing your internet browser, these session cookies are deleted.
b) Third supplier-Cookies
If necessary, our website also uses cookies from partner companies with whom we cooperate for the purpose of advertising, analysis or functionalities of our website.
Please refer to the following information for details, in particular for the purposes and legal bases of the processing of such third-party cookies.
c) Removal possibility
You can prevent or restrict the installation of cookies by setting your internet browser. You can also delete already stored cookies at any time. However, the steps and measures required for this depend on your specific internet browser. If you have any questions, please use the help function or documentation of your internet browser or contact its manufacturer or support. However, in the case of so-called flash cookies, processing cannot be prevented via the settings of the browser. Instead, you need to change the setting of your Flash player. The steps and measures required for this also depend on your specific Flash player. If you have any questions, please also use the help function or documentation of your Flash player or contact the manufacturer or user support.
However, if you prevent or restrict the installation of cookies, this may lead to the fact that not all functions of our website are fully usable.
Contract winding up
The data transmitted by you to make use of our product and/or service offer is processed by us for the purpose of contract processing and is required in this respect. Conclusion of the contract and execution of the contract are not possible without the provision of your data.
The legal basis for processing is Art. 6 para. 1 lit. b) DSGVO.
We delete the data with complete contract processing, but must observe the tax and commercial retention periods.
As part of the execution of the contract, we pass on your data to the transport company commissioned with the delivery of goods or to the financial service provider, insofar as the transfer is necessary for the delivery of goods or for payment purposes.
The legal basis for the disclosure of the data is then Art. 6 para. 1 lit. b) DSGVO.
We also use an external goods management system for order and contract processing. The data transmission or processing that takes place in this respect is based on order processing.
Customer Account/Registration Feature
Falls Sie über unseren Internetauftritt ein Kundenkonto bei uns anlegen, werden wir die von Ihnen bei der Registrierung eingegebenen Daten (also bspw. Ihren Namen, Ihre Anschrift oder Ihre E-Mail-Adresse) ausschließlich für vorvertragliche Leistungen, für die Vertragserfüllung oder zum Zwecke der Kundenpflege (bspw. um Ihnen eine Übersicht über Ihre bisherigen Bestellungen bei uns zur Verfügung zu stellen oder um Ihnen die sog. Merkzettelfunktion anbieten zu können) erheben und speichern. At the same time we store the IP address and the date of your registration together with the time. Of course, this data is not passed on to third parties.
As part of the further registration process, your consent to this processing will be obtained and referenced to this data protection declaration. The data collected by us are used exclusively for the provision of the customer account.
Insofar as you consent to this processing, Art. 6 para. 1 lit. a) GDPR Legal basis for processing.
If the opening of the customer account additionally serves pre-contractual measures or the fulfilment of the contract, then the legal basis for this processing is also Art. 6 para. 1 lit. b) DSGVO.
You are able to do the approval given to us in the opening and the maintenance of the customer account according to article. 7 paragraphs. 3 Revoke GDPR at any time with effect for the future. Hierzu müssen Sie uns lediglich über Ihren Widerruf in Kenntnis setzen.
The data collected in this respect will be deleted as soon as processing is no longer necessary. However, we must observe tax and commercial retention periods.
Contact Enquiries/Contact Possibility
If you contact us via contact form or e-mail, the data you provide will be used to process your request. The data is required for processing and answering your enquiry – without their provision, we cannot answer your enquiry or, if necessary, to a limited extent.
The legal basis for this processing is Art. 6 para. 1 lit. b) DSGVO.
Your data will be deleted if your request has been finally answered and the deletion is not precluded by legal retention obligations, such as. in the case of any subsequent execution of the contract.
User contributions, comments and reviews
We offer you to publish on our website questions, answers, opinions or reviews, hereinafter referred to as “contributions.” If you make use of this offer, we will process and publish your contribution, date and time of submission as well as the pseudonym you may use.
The legal basis for this is Art. 6 para. 1 lit. a) DSGVO. You can obtain your consent in accordance with Art. 7 para. 3 Revoke GDPR at any time with effect for the future. To do this, you only need to inform us about your withdrawal.
We also process your IP and e-mail address. The IP address is processed because we have a legitimate interest in initiating or supporting further steps, provided that your contribution interferes with third-party rights and/or otherwise takes place as unlawfully.
In this case, the legal basis is Art. 6 para. 1 lit. f) DSGVO. Our legitimate interest lies in the possible necessary legal defense.
Subscription to posts
If you publish contributions on our website, we also offer to subscribe to any subsequent contributions from third parties. In order to inform you about these subsequent contributions by e-mail, we process your e-mail address.
The legal basis for this is Art. 6 para. 1 lit. a) DSGVO. You may consent to this subscription pursuant to Art. 7 para. 3 Revoke GDPR at any time with effect for the future. To do this, you only have to inform us of your withdrawal or use the unsubscribe link contained in the respective e-mail.
Google Analytics
We use Google Analytics in our website. This is a web analysis service of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA, hereinafter referred to only as “Google.”
Certification according to the EU-US Privacy Shield
https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active
Google guarantees that the EU’s data protection requirements are also complied with when processing data in the USA.
The Google Analytics service is used to analyse the usage behaviour of our website. The legal basis is Art. 6 para. 1 lit. f) DSGVO. Our legitimate interest lies in the analysis, optimization and economic operation of our website.
Usage and user-related information, such as IP address, location, time or frequency of visit to our website, are transmitted to a Google server in the USA and stored there. However, we use Google Analytics with the so-called anonymization function. Through this function, Google shortens the IP address already within the EU or the EEA.
The data collected in this way are in turn used by Google to provide us with an evaluation of the visit to our website as well as the use activities there. This data can also be used to provide other services related to the use of our website and the use of the Internet.
We use the “demographic features” function of Google Analytics. This allows the creation of reports that contain information on interests, gender, and age of page visitors. The origin of this data is interest-based advertising by Google as well as visitor data from third-party providers. It is not possible to assign this data to a specific person. This function can be disabled at any time via the ad settings in the Google account.
Google states that it does not connect your IP address to other data. In addition, Google keeps at
https://www.google.com/intl/de/policies/privacy/partners
further data protection information is available for you, e.g. also to the possibilities of preventing the use of data.
In addition, Google offers
https://tools.google.com/dlpage/gaoptout?hl=de
a so-called deactivation add-on together with further information on this. This add-on can be installed with the usual internet browsers and offers you further control over the data that Google collects when we access our website. The add-on informs the JavaScript (ga.js) of Google Analytics that information about visiting our website should not be transmitted to Google Analytics. However, this does not prevent information from being transmitted to us or other web analysis services. If and which other web analysis services are used by us, you will of course also find out in this data protection declaration.
Another way to deactivate Google Analytics is by clicking on the following link: [ga-optout text=”Deactivate Google Analytics via cookie”]
Google-Maps
In our website, we use Google Maps to show our location and to create a directions. This is a service of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA, hereinafter referred to as “Google.”
Certification according to the EU-US Privacy Shield
https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active
Google guarantees that the EU’s data protection requirements are also complied with when processing data in the USA.
In order to enable the presentation of certain fonts in our website, a connection to the Google server in the USA is established when our website is called up.
If you access the Google Maps component integrated into our website, Google stores a cookie on your device via your internet browser. Your user settings and data will be processed in order to display our location and to create a directions. We cannot exclude the use of Google servers in the USA.
The legal basis is Art. 6 para. 1 lit. f) DSGVO. Our legitimate interest lies in optimizing the functionality of our website.
By connecting to Google in this way, Google can determine from which website your request has been sent and to which IP address the directions must be transmitted.
If you do not agree with this processing, you have the option of preventing the installation of cookies through the appropriate settings in your internet browser. Details can be found above under the item “Cookies.”
In addition, the use of Google Maps and the information obtained via Google Maps is carried out in accordance with the Google Terms of Use https://policies.google.com/terms?gl=DE&hl=deand the Terms and Conditions for Google Maps https://www.google.com/intl/de_de/help/terms_maps.html.
Furthermore, Google offers
https://adssettings.google.com/authenticated
https://policies.google.com/privacy
further information to.
Google Fonts
In our website, we use Google Fonts to display external fonts. This is a service of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA, hereinafter referred to as “Google.”
Certification according to the EU-US Privacy Shield
https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active
Google guarantees that the EU’s data protection requirements are also complied with when processing data in the USA.
In order to enable the presentation of certain fonts in our website, a connection to the Google server in the USA is established when our website is called up.
The legal basis is Art. 6 para. 1 lit. f) DSGVO. Our legitimate interest lies in optimizing and economically operating our website.
By connecting to Google when you visit our website, Google can determine from which website your request has been sent and to which IP address the presentation of the font is to be transmitted.
Google offers at
https://adssettings.google.com/authenticated
https://policies.google.com/privacy
further information, in particular on the possibilities of preventing the use of data.
Font Awesome
Our website uses so-called web fonts or icons used by Fonticons, Inc. are provided. When you access a page, your browser loads the required web fonts or icons into its browser cache to display text, fonts and icons correctly.
For this purpose, the browser you are using must connect to the servers of Fonticons, Inc. take up. This results in Fonticons, Inc. Knowledge that our website has been accessed via your IP address. The use of Font Awesome is in the interest of a uniform and appealing presentation of our online offers. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR.
If your browser does not support Font Awesome, a default font will be used by your computer. For more information about Font Awesome, see https://fontawesome.com/help and the Privacy Policy of Fonticons, Inc.: Https://fontawesome.com/privacy.
We maintain an online presence at Pinterest to present our company as well as our services and to communicate with customers/prospects. Pinterest is a service of Pinterest Inc., 651 Brannan Street, San Francisco, CA, 94107, USA.
In this respect, we would like to point out that there is the possibility of data being processed by users outside the European Union, in particular in the USA. As a result, there may be increased risks for the users insofar as, for example, later access to the user data can be made more difficult. We also do not have access to this user data. The access is exclusively for Pinterest.
The Pinterest privacy policy can be found at
https://policy.pinterest.com/de/privacy-policy
YouTube
We use YouTube on our website. This is a video portal of YouTube LLC., 901 Cherry Ave., 94066 San Bruno, CA, USA, hereinafter called only “YouTube.”
YouTube is a subsidiary of Google LLC., 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA, hereinafter referred to as “Google.”
Certification according to the EU-US Privacy Shield
https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active
Google, and hence its subsidiary YouTube, guarantees that the EU’s data protection requirements are also complied with when processing data in the USA.
We use YouTube in conjunction with the Advanced Privacy Mode feature to view videos. The legal basis is Art. 6 para. 1 lit. f) DSGVO. Our legitimate interest lies in improving the quality of our website. According to YouTube, the “Advanced Privacy Mode” function causes the data described in more detail below to be transmitted to YouTube’s server only if you actually start a video.
Without this “Advanced Data Protection,” a connection to YouTube’s server will be established in the United States as soon as you access one of our websites, on which a YouTube video is embedded.
This connection is required in order to be able to display the respective video on our website via your internet browser. In the course of this YouTube will collect and process at least your IP address, the date and time as well as the website you visit. In addition, a connection is established to the Google advertising network “Spare Click.”
If you are logged in to YouTube at the same time, YouTube assigns the connection information to your YouTube account. If you want to prevent this, you must either log out of YouTube before visiting our website or make the appropriate settings in your YouTube user account.
For the purpose of functionality and for the analysis of user behaviour, YouTube permanently stores cookies on your device via your internet browser. If you do not agree with this processing, you have the option of preventing the storage of cookies by a setting in your internet browser. For more information, see “Cookies” above.
Google keeps further information about the collection and use of data as well as your rights and protection possibilities in this regard in the
https://policies.google.com/privacy
available data protection notices.
Webanalyse Hotjar
We use Hotjar on our website. This is a web analysis service of Hotjar Ltd., Level 2, St Julians Business Centre, 3, Elia Zammit Street, St Julians STJ 1000, Malta, Europe, hereinafter referred to as “Hotjar.”
Hotjar is used to analyse the usage behaviour of our website. The legal basis is Art. 6 para. 1 lit. f) DSGVO. Our legitimate interest lies in the analysis, optimization and economic operation of our website.
Through Hotjar, we can use your usage behavior on our website, such as for example. Log and evaluate your mouse movements or mouse clicks. However, your visit to our website will be anonymised. In addition, Hotjar evaluates and prepares information about your operating system, your internet browser, incoming or outgoing references (“links”), the geographical origin as well as the type and triggering of the terminal device you are using for statistical purposes. Hotjar can also get direct feedback from you. Hotjar also offers:
https://www.hotjar.com/privacy
further data protection information to.
In addition, you have the possibility to end the analysis of your usage behavior by means of the so-called opt-out. By confirming the link
https://www.hotjar.com/opt-out
a cookie is stored on your device via your internet browser, which prevents further analysis. Please note, however, that you must press the link above again if you delete the cookies stored on your device.
MailChimp – Newsletter
We offer you the opportunity to subscribe to our free newsletters via our website.
We use MailChimp, a service of The Rocket Science Group, LLC, 512 Means Street, Suite 404, Atlanta, GA 30318, USA, hereinafter referred to as “The Rocket Science Group.”
Certification according to the EU-US Privacy Shield
https://www.privacyshield.gov/participant?id=a2zt0000000TO6hAAG&status=Active
guarantees The Rocket Science Group that the EU’s data protection requirements are also complied with when processing data in the USA. The Rocket Science Group also offers:
http://mailchimp.com/legal/privacy/
further data protection information to.
If you subscribe to our newsletter, the data requested during the registration process, such as your e-mail address and, optionally, your name and address, will be processed by The Rocket Science Group.. In addition, your IP address and the date of your registration will be stored together with the time. Within the scope of the further registration process, your consent to the sending of the newsletter is obtained, the content is specifically described and referred to this data protection declaration.
Der anschließend über The Rocket Science Group versandte Newsletter enthält zudem einen sog. Zählpixel, auch Web Beacon genannt“. Mit Hilfe dieses Zählpixels können wir auswerten, ob und wann Sie unseren Newsletter gelesen haben und ob Sie den in dem Newsletter etwaig enthaltenen weiterführenden Links gefolgt sind. Neben weiteren technischen Daten, wie bspw. die Daten Ihres EDV-Systems und Ihre IP-Adresse, werden die dabei verarbeiteten Daten gespeichert, damit wir unser Newsletter-Angebot optimieren und auf die Wünsche der Leser eingehen können. Die Daten werden also zur Steigerung der Qualität und Attraktivität unseres Newsletter-Angebots zu steigern.
The legal basis for sending the newsletter and the analysis is Art. 6 para. 1 lit. a.) DSGVO.
In accordance with Art. 7 para. 3 Revoke GDPR at any time with effect for the future. To do this, you only need to inform us of your withdrawal or to activate the unsubscribe link contained in each newsletter.
Google AdWords with Conversion-Tracking
In our website we use the advertising component Google AdWords and the so-called conversion tracking. This is a service of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA, hereinafter referred to as “Google.”
Certification according to the EU-US Privacy Shield
https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active
Google guarantees that the EU’s data protection requirements are also complied with when processing data in the USA.
We use the conversion tracking for the targeted application of our offer. The legal basis is Art. 6 para. 1 lit. f) DSGVO. Our legitimate interest lies in the analysis, optimization and economic operation of our website.
If you click on an ad sent by Google, the conversion tracking used by us stores a cookie on your device. These so-called conversion cookies lose their validity with the expiry of 30 days and otherwise do not serve your personal identification.
If the cookie is still valid and you visit a specific page of our website, both we and Google can evaluate that you have clicked on one of our ads placed with Google and that you have subsequently been redirected to our website.
Through the information gathered in this way, Google generates statistics about the visit to our website. In addition, we receive information about the number of users who have clicked on our ad (s) as well as about the pages of our website subsequently accessed. However, neither we nor third parties using Google AdWords will be able to identify you in this way.
With the appropriate settings of your Internet browser, you can also prevent or restrict the installation of cookies. At the same time, you can delete already stored cookies at any time. However, the steps and measures required for this depend on your specific internet browser. If you have any questions, please use the help function or documentation of your internet browser or contact its manufacturer or support.
Furthermore, Google also offers
https://services.google.com/sitestats/de.html
http://www.google.com/policies/technologies/ads/
http://www.google.de/policies/privacy/
further information on this topic and in particular on the possibilities of preventing the use of data.
Google Remarketing or “Similar Target Groups” component of Google
In our website we use the remarketing or “similar target groups” function. This is a service of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA, hereinafter referred to as “Google.”
Certification according to the EU-US Privacy Shield
https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active
Google guarantees that the EU’s data protection requirements are also complied with when processing data in the USA.
We use this function to place interest-based, personalized advertising on third-party websites that also participate in Google’s advertising network.
The legal basis is Art. 6 para. 1 lit. f) DSGVO. Our legitimate interest lies in the analysis, optimization and economic operation of our website.
To enable this advertising service, Google stores a cookie with a sequence of numbers on your device during your visit to our website via your internet browser. This cookie collects in anonymised form both your visit and the use of our website. However, personal data will not be passed on. If you subsequently visit the website of a third party, which in turn also uses Google’s advertising network, advertisements that are related to our website or to our offers there may appear.
To permanently disable this feature, Google offers for the most popular Internet browsers via
https://www.google.com/settings/ads/plugin
a Browser-Plugin
Likewise, the use of cookies from certain providers can e.g. over
http://www.youronlinechoices.com/uk/your-ad-choices
or
http://www.networkadvertising.org/choices/
be deactivated by opt-out.
Through so-called cross-device marketing, Google may also be able to track your usage behavior across multiple devices, so that interest-related, personalized advertising may be displayed to you even when you change the device. However, this presupposes that you have agreed to link your browser history to your existing Google account.
Google offers further information on Google remarketing at
http://www.google.com/privacy/ads/
at
Online job applications/publication of job advertisements
We offer you the opportunity to apply to us via our website. In these digital applications, we collect and process your application data electronically to process the application process.
The legal basis for this processing is § 26 para. 1 S. 1 BDSG i.V.m. Art. 88 Abs. 1 DSGVO.
Insofar as an employment contract is concluded after the application procedure, we store your data transmitted during the application in your personnel file for the purpose of the usual organizational and administrative process – this of course in compliance with the further legal obligations.
The legal basis for this processing is also § 26 para. 1 S. 1 BDSG i.V.m. Art. 88 Abs. 1 DSGVO.
When rejecting an application, we automatically delete the data transmitted to us two months after the notification of the rejection. The deletion does not take place, however, if the data due to statutory provisions, e.g. require a longer storage of up to four months, or until the conclusion of a judicial procedure, because of the evidence required by the AGG.
In this case, the legal basis is Art. 6 para. 1 lit. f) DSGVO und § 24 Abs. 1 Nr. 2 BDSG. Our legitimate interest lies in the legal defence or enforcement.
If you expressly consent to longer storage of your data, e.g. for your inclusion in an applicant or stakeholder database, the data will be processed further on the basis of your consent. The legal basis is then Art. 6 para. 1 lit. a) DSGVO. Of course, you can obtain your consent at any time in accordance with Art. 7 para. 3 GDPR by declaring to us with effect for the future.
Sample data protection declaration of the law firm Weiß & Partner