Ortovox Privacy Policy

Preamble

ORTOVOX Sportartikel GmbH (hereinafter referred to as “ORTOVOX”) is pleased that you are visiting its website. Data protection and data security when using our website are very important to us. We would therefore like to inform you about personal data collected during your visit to our website and the purposes its usage. Since changes in law or in our internal company processes may make an adaptation of this Privacy Policy necessary, we ask you to read this policy regularly. The Privacy Policy applies to the internet offer of ORTOVOX Sportartikel GmbH, which can be accessed under the domain www.ortovox.com as well as the various subdomains (hereinafter referred to as “our website”).

 

1. Name and address of the responsible person

The responsible body and service provider is ORTOVOX Sportartikel GmbH, Rotwandweg 5, 82024 Taufkirchen (hereinafter referred to as “ORTOVOX”).

 

2. Names and addresses of the data protection officer

Our data protection officer is: Sebastian Meyer, Schwanweg 1, 90562 Heroldsberg, +49 911-567 4250. You can contact our dta protection officer at any time with regard to all data protection issues. Best by e-mail to: Datenschutz@schwan-stabilo.com.

 

3. General information on data processing

We only collect and use personal data of our users to the extent necessary to provide a functional website, as well as our contents and services.

3.1 Personal data

Personal data is all information that relates to an identified or identifiable natural person. This includes, for example, information such as your name, age, address, telephone number, date of birth, e-mail address, IP address or your user behavior. Information, where we cannot establish a reference to your person (or only with a disproportionate effort), e.g. by anonymized information, is not personal data.

3.2 Processing of personal data

Processing means any operation or set of operations which is performed upon personal data, whether or not by automatic means, such as: collection, recording, organization, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

3.3 Legal basis for processing personal data

The collection and use of personal data of our users is regularly only carried out with the user’s consent. If we obtain the consent of the data subject for processing of personal data, the legal basis is Art. 6 para. 1 a) of the General Data Protection Regulation (GDPR). An exception applies in those cases where prior consent cannot be obtained for factual reasons and the processing of the data is permitted by statutory provisions. In the processing of personal data necessary for the performance of a contract to which the data subject is party, Art. 6 para. 1 b) GDPR serves as the legal basis. This also applies to processing operations that are necessary for carrying out pre-contractual measures. If the processing of personal data is necessary for compliance with a legal obligation to which we are subject, Art. 6 para. 1 c) GDPR serves as the legal basis. If processing is necessary to protect the legitimate interests of the controller or a third party and the interests or fundamental rights and freedoms of the data subject do not outweigh the former interest, Art. 6 para. 1 f) GDPR serves as the legal basis for processing.

 

4. Data processing operations

Personal data is collected through this website only when you provide it to us voluntarily, for example by filling out forms or sending emails. We use this data for the purposes specified or resulting from the request, such as using your email-address to reply to your request. Data is only transmitted to third parties if the law expressly permits this or if you have consented to the transmission.

4.1 Informational use of the website

You can visit our website without providing any personal information. If you only use our website for informational purposes and do not transmit any information about yourself, we do not process any personal data, except for the data that your browser transmits to enable you to visit the website. For the purpose of technically providing our website, it is necessary for us to process certain automatically transmitted information from you so that your browser can display our website and you can use the website. This information is automatically collected each time you access our website and stored in our server log files. This information relates to the computer system of the calling computer. The following information is processed:

• Host
• IP address of the user
• Date and time of access
• Method of access (Get/Post)
• Request
• Protocol (e.g. https)
• Status (e.g. error messages)
• Amount of data retrieved
• Referrer
• Browser and operating system of the user.

For the aforementioned data processing, Art. 6 para. 1 f) GDPR serves as the legal basis. The processing of the aforementioned data is necessary for the provision of a website and thus serves the legitimate interest of our company. As soon as the aforementioned data is no longer required to display the website, it will be deleted, at the latest after one year. Session cookies are automatically deleted after 24 minutes when the browser is closed, all other cookies related to your person are automatically deleted after one year. Cookies from partners, such as Google, have a maximum lifespan of 2 years. The collection of data for the provision of the website and the (temporary) storage of data in log files is absolutely necessary for the operation of the website. Further storage may be carried out in individual cases if this is required by law.

4.2 Active use of the website-registration (customer account) and registration process

On our website, we offer users the opportunity to register by providing personal data. The data is entered into an input mask and transmitted and stored by us. Data is only transmitted to third parties if this is absolutely necessary to fulfill a contract. The following data is collected as part of the registration process:

• Name
• Address
• Email address
• Telephone number
• a password chosen by you.
   

In addition, the following personal data is collected:

• IP address
• date and time of registration.

With the processed data, we create a customizable user account for you, with which you can use certain content and services on our website, such as the ORTOVOX online shop and the ORTOVOX service platform. In particular, you can register your ORTOVOX products via this account and have them checked, serviced, or repaired during or after the guarantee or the statutory warranty period. You can also apply for a warranty extension within the scope of our warranty provisions via this account.

We process your email address so that we can send you new access data if you forget them.

You can change the data stored about you in the customer account at any time.

The processing of the aforementioned personal data serves the purpose of fulfilling a contract or carrying out pre-contractual measures in accordance with Art. 6 para. 1 b) GDPR.

As soon as the registration on our website is cancelled or changed, the data processed during the registration process will be deleted. Further storage may be carried out in individual cases, if this is required by law.

As a user, you have the option to cancel your registration at any time. To do so, please send us an email with your request to the email address: info@ortovox.com

4.3 Contact

a) Contact form (website) / Customer Service

If you send us inquiries via the contact form, we will ask you for your salutation, first and last name, email address, and country. You can also enter your request and your individual message. These are mandatory fields. You can also voluntarily provide your order number. This information is collected for the purpose of processing the request and in case of follow-up questions.

We would like to point out, that we currently use the ticket system of Zendesk Inc., 989 Market St San Francisco, CA 94103, USA for the contact form / customer service. Zendesk Inc. acts as our processor within the meaning of Art. 4 No. 8 GDPR. A contract for order processing in accordance with Art. 28 GDPR has been concluded with the provider, which ensures compliance with data protection regulations.

For the possible reading of stored information on your device, § 25 para. 2 no. 2 of the German Telecommunications and Telemedia Data Protection Act (hereinafter: TTDSG) serves as the legal basis.

The subsequent processing of this data is based on Art. 6 para. 1 b) GDPR, insofar as your request is related to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, processing is based on our legitimate interest in the effective processing of the requests addressed to us (Art. 6 para. 1 f) GDPR).

The data you enter in the contact form will remain with us until you ask us to delete it, revoke your consent to store it, or the purpose for storing the data no longer applies (e.g. after we have completed processing your request). Mandatory legal provisions - in particular retention periods - remain unaffected.

b) Contact via WhatsApp 

You can also send us an inquiry via WhatsApp. We only link to WhatsApp.  WhatsApp is a service of WhatsApp LLC located at 1601 Willow Road Menlo Park, California 94025, USA. You can find further information about WhatsApp, as well as your corresponding data protection rights and options for protecting your privacy at: https://www.whatsapp.com/legal/privacy-policy.  

By linking to WhatsApp, we process your IP address for technical reasons. The legal basis for processing the IP address is our legitimate interest pursuant to Art. 6 para. 1 f) GDPR in simplifying or improving our customer support.  

WhatsApp LLC is verified under the Data Privacy Framework, so that for the transfer of data to a third country, the security of an adequacy decision pursuant to Art. 45 para 1 GDPR is ensured. The data will be deleted as soon as it is no longer necessary for the purpose of its collection. The IP address is necessary for linking to WhatsApp. After clicking on the link and being redirected, the IP address is deleted. The content of your message as well as your mobile number and name are imported into our ticket system by ZenDesk. Please refer to section 4.3.a) for this.  

C) Other contact

In addition, the contact details of our international offices (telephone, fax and email) are also available on our website. You can send us a message via the provided email address. In this case, we process your first and last name and your email address and the personal data transmitted with the email. You can also send us an individual message via the message field.

You can also call us; in this case, we process your telephone number and the personal data transmitted during the call. We use this data exclusively for the purpose of processing your request.

The legal basis for processing the data transmitted in the course of contacting us is Art. 6 para. 1 f) GDPR. In the event of contact, the necessary legitimate interest in processing the data lies in the processing of your request. If the email contact is aimed at concluding a contract, the legal basis for processing is Art. 6 para. 1 b) GDPR. The data will be deleted as soon as it is no longer required to achieve the purpose of its collection. The conversation is deemed to have ended when it can be inferred from the circumstances that the matter in question has been conclusively clarified. Further storage may be carried out in individual cases if this is required by law.

4.4 Order process in the Ortovox Online Shop

For processing orders in the ORTOVOX Online Shop, we require the following information about you: first and last name, address, email address, telephone number, date of birth, and, if applicable, your gender and size. It is up to you to decide whether to provide us with this data. However, without this information, we cannot process your order.

We would like to point out, that we use third-party providers. We work with Unzer GmbH, Vangerowstraße 18, 69115 Heidelberg (formerly heidelpay GmbH) to provide you with a convenient option for payment over the internet. The following data is transmitted to the service provider as part of the payment process:

• name of the invoice recipient
• billing address
• name of the package recipient
• shipping address
• order number
• contents of the order (such as items, quantity, price, discounts, etc.).

You can view Unzer’s Privacy Policy here: https://www.unzer.com/en/data-protection/

Subsequently, your data will be forwarded to the credit institution or online payment service provider commissioned with the payment. In some cases, the selected payment service providers also collect this data themselves if you create an account there. In this case, you must log in to the payment service provider with your access data during the ordering process. The data privacy policy of the respective payment service provider shall apply in this respect.

When processing your personal data, which is necessary for the performance of a contract concluded with us, Art. 6 para. 1 b) GDPR serves as the legal basis. This also applies to processing operations that are necessary for carrying out pre-contractual measures. Insofar as we are legally obliged to transmit data concerning you, this is done in accordance with Art. 6 para. 1 c) GDPR in conjunction with the corresponding regulations of the Directive (EU) 2015/2366 (PSD 2) or the German Payment Services Supervision Act (ZAG).

With the complete processing of the contract and full payment of the purchase price, your data will be blocked for further use and deleted after the tax and commercial retention periods have expired, unless you have expressly consented to the further use of your data. Further storage may be carried out in individual cases, if this is legally prescribed.

Payment via PayPal

If you decide to pay with “PayPal” as part of your order process, your personal data will be automatically transmitted to PayPal via the payment service provider Unzer GmbH described above. PayPal is an offer from PayPal (Europe) S.à.r.l. & Cie. S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg. PayPal assumes the function of an online payment service provider as well as a trustee and offers buyer protection services.

The personal data transmitted to PayPal usually includes first name, last name, address, email address, IP address or other data required for payment processing. Personal data that is necessary for the processing of the purchase contract, such as the number of items, item number, invoice amount and taxes and other invoice information, is also required (such as the number of items, item number, invoice amount and taxes and other invoice information). This corresponds to our legitimate interest in offering an efficient and secure payment method (Art. 6 para. 1 f) GDPR).

In this context, we pass on the abovementioned data to PayPal insofar as this is necessary for the fulfillment of the contract (Art. 6 para. 1 b) GDPR). PayPal also reserves the right to collect personal data from the buyer. This can be the following information according to PayPal:

• Name
• Address
• Phone number
• Email
• Account number

PayPal may pass on your personal data to affiliated companies and service providers or subcontractors, insofar as this is necessary for the fulfillment of contractual obligations or the data is processed on behalf of PayPal.

The personal data transmitted by us to PayPal may be transmitted by PayPal under certain circumstances to credit agencies. This transmission is for the purpose of checking your identity and creditworthiness. PayPal uses the result of the credit check, taking into account the statistical probability of payment default, for the purpose of deciding on the provision of the respective payment method. The credit report may contain probability values (so-called score values). Insofar as score values are incorporated into the result of the credit report, they have their basis in a scientifically recognized mathematical-statistical procedure.

You can find out which credit agencies these are here: https://www.paypal.com/de/webapps/mpp/ua/privacy-full#rAnnex

You have the option of revoking your consent to the processing of your personal data at any time vis-à-vis PayPal. Revocation of consent does not affect the lawfulness of processing based on consent before its withdrawal, provided that the personal data are processed, used or transmitted for the purpose of contractually compliant payment processing.

You can view PayPal’s privacy policy at PayPal Privacy

The personal data collected by the service provider in the context of invoicing will be deleted if it is no longer required for the purposes described or if a user requests deletion. Further storage may be carried out if this is legally prescribed, for example due to tax and commercial retention periods.

4.5 Shipping

Delivery is carried out by the following shipping companies: DHL Paket GmbH, DPD Deutschland GmbH, FedEx Corporation (USA, Canada) and Swiss Post (Switzerland, Luxembourg). In order to fulfill the contract in accordance with Art. 6 para. 1 sentence 1 b) GDPR, we will pass on your data to the shipping company commissioned with the delivery, insofar as this is necessary for the delivery of ordered goods. We only pass on personal data to third-party companies if there is an appropriate contract (e.g. a contract processing agreement, if required by law). Personal data is always only passed on to the extent necessary for the respective purpose. The companies concerned must comply with the applicable data protection laws, treat your personal data confidentially and may not use it for their own business purposes under any circumstances.

The processing of the abovementioned personal data serves the performance of pre-contractual measures or the fulfillment of a contract in accordance with Art. 6 para. 1 b) GDPR. Further information on data protection of the service providers used can be found under the following links:

• DHL Paket GmbH DHL Group | Data protection
• DPD Deutschland GmbH Informationen zum Datenschutz | Datenschutz » DPD
• Post CH Netz AG  PostalNetwork | Swiss Post
• FedEx Corporation Information privacy | Policies | FedEx
   

4.6 Store search

a) Components from OUTTRA

For the “Buy Local” store search function, we use the OUTTRA components of 81 MEDIA GmbH, Ziegelbrennerstr. 5, 73074 Stuttgart. For the display of this function, a query of the visitor’s IP address by the component is required. The component initially uses the IP address solely to send the browser or visitor corresponding information. The IP address is therefore required for the display of this function.

To display the availability of the product selected by the visitor via the “Buy in Store” function, the visitor’s IP address is anonymized on the OUTTRA server. Based on the anonymized IP address, a database query is performed that allows for rough localization of the visitor due to the non-anonymized part of the IP address. As a result, local stores are displayed to the visitor on the website.

The legal basis for the above processing of personal data is Art. 6 para. 1 f) GDPR. Our legitimate interest is in the sale and promotion of products and services as well as the related functionality of the website.

If the retrieval of product availability serves to initiate a contract, the legal basis is Art. 6 para. 1 b) GDPR.

You can generally object to future processing of your data, carried out on the basis of Art. 6 para. 1 f) GDPR, in accordance with Art. 21 GDPR. The objection can be made in particular against processing for the purposes of direct advertising. After the visitor’s browser session has ended, no personal data is stored by the OUTTRAcomponent, 81 MEDIA GmbH or ORTOVOX.

b) GOOGLE-MAPS

To display the location of the local store, “Google Maps” – a component of Google LLC., 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA, hereinafter “Google”- is used.

In order to use Google Maps, Google Ireland Ltd. will processes your IP address.

The processing of your personal data is based on your express consent in accordance with Art. 6 para. 1 a) GDPR. You can revoke this consent at any time for the future by deactivating the slider in the local store search application with a click.

In this context, personal data may be transferred to countries outside the EU/EEA, especially to the USA. Google LLC and Google Ireland Ltd. are verified under the Data Privacy Framework Program, so there is an adequacy decision within the meaning of Art. 45 DSGVO for this transfer to third countries. You can find more information on Google’s privacy policy here:  https://policies.google.com/privacy?hl=en-US

When displaying local stores using the “Google Maps” component, OUTTRA sets cookies to process user settings and data for displaying the map and associated functions. For more information, please refer to our Cookie Policy.

4.7 Job applications 

You can send an email with your job application to career@ortovox.com or send your application documents to the following address: ORTOVOX Sportartikel GmbH, Rotwandweg 5, 82024 Taufkirchen. Alternatively, you can apply through our career portal and applicant management system, which is operated by Personio GmbH & Co. KG, Rundfunkplatz 4, 80335 Munich, as a data processor in accordance with Art. 4 No. 8 GDPR 1. With Personio GmbH & Co. KG we have signed a contract for order processing according to Art. 28 GDPR, which ensures compliance with data protection regulations 

The legal basis for processing the personal data you provide is Art. 6 para. 1 sentence 1 b) GDPR in conjunction with § 26 para. 1 sentence 1 BDSG-new. 

ORTOVOX Sportartikel GmbH assures that the personal data you provide will only be processed for the purpose of conducting the application process. 

After the application process is completed, your data will be stored for 6 months to defend against any claims under the General Equal Treatment Act (AGG). 

If your application cannot be currently considered, you also have the option to agree to storage of your documents and other data you provide in our job applicant database in accordance with Art. 6 para. 1 a) GDPR, so that we can contact you in the future if a suitable position becomes available that matches your application profile. You may explicitly agree to the use of your job application data in the future when you submit an application by means of checking the appropriate field. You can revoke your consent to the storage of your application for a maximum of 12 months at any time, however with effect for the future. To do so, simply send an email to the following email address: career@ortovox.com.

4.8 Product recall registration

You can register on our website for cases of a product recall. For such a registration we require the following information: first and last name, email address, phone number, and address.

It is up to you to decide whether or not to provide this information. However, without this information, we may not be able to process the product recall completely.

Please be informed that your data may be given to service partners in your area to optimize the processing of the product recall.

The legal basis for processing the data in the case of a product recall registration is Art. 6 para. 1 b) GDPR and Art. 6 para. 1 c) GDPR, i.e. processing is necessary for the performance of a contract and to fulfill a legal obligation to which the controller is subject.

Once the product recall action has been fully processed and the matter in question has been conclusively clarified, the personal data processed via the product recall registration will be deleted. Further storage may take place if required by law.

4.9 Product reviews

You can submit and publish on our website product reviews for ORTOVOX products. In this case, we require the following information: first name, country, email address, the individual content of the review, and the rating. The email address will not be published with the review and rating.

It is up to you to decide whether or not to provide this information. However, without providing the aforementioned data, you cannot submit a product review.

The data processing described above for the purpose of submitting a product review is based on your consent according to Art. 6 para. 1 a) GDPR. You can revoke your consent at any time with effect for the future without giving reasons. Revoking your consent does not affect the lawfulness of processing based on consent before its withdrawal. To do so, simply send an email to Datenschutz@schwan-stabilo.com or send us a notification to ORTOVOX Sportartikel GmbH, Rotwandweg 5, 82024 Taufkirchen.

Your data will be stored for as long as the purpose of the review is given and you have not revoked your consent.

4.10 General newsletter and professional-newsletter

To sign up for one of one of our email newsletters, we require your first and last name, email address to which the newsletter should be sent, gender for which product suggestions should be made, your country, and your preferred language. In the profile management, you can also optionally provide information about your birthday, interests, and city.

It is up to you to decide whether or not to provide this information. However, without providing this information, we may not be able to send you our newsletter.

We currently work with InxMail GmbH, Wentzingerstraße 17, 79106 Freiburg, Germany to send our newsletters.

InxMail processes your data on our behalf and ensures the proper delivery of our newsletters. Your data will not be passed on to third parties in connection with the newsletter dispatch. You can find further information about InxMail as well as your corresponding data protection rights and options for protecting your privacy at: Data Conditions (inxmail.com).

When you sign up for the newsletter, your email address will be used for our advertising purposes until you unsubscribe from the newsletter. To unsubscribe, you can cancel via the link at the end of each newsletter. By using the software, we track and analyze the personal recipient reactions. By signing up for our newsletter, you agree to the tracking permission and processing of personal reactions. You can revoke your permission to tracking at any time via the link at the end of each newsletter and thus cancel it.

To optimize our newsletters, we look at how often it is opened by readers, and which links the readers click on (analysis of usage behavior).

For the newsletter dispatch, we use the so-called double opt-in procedure, i.e. we will only send you the newsletter after you have confirmed your registration by clicking on a confirmation e-mail sent to you for this purpose. This is to ensure that only you as the owner of the specified e-mail address can register for the newsletter. Your confirmation must be made promptly after receipt of the confirmation e-mail, otherwise your newsletter registration will be automatically deleted from our database.

The legal basis for processing the data after the user has registered for the newsletter is Art. 6 para. 1 a) GDPR, provided that the user has given his consent. You can revoke this consent at any time by clicking on the link provided in each newsletter e-mail or by sending an e-mail to newsletter@ortovox.com for the future.

Your data will be stored as long as you have subscribed to the newsletter. After unsubscribing from the newsletter dispatch, your data will be deleted. Further storage may take place in individual cases, if this is required by law.

4.11. Press release distribution list

When you sign up to the press releases distribution list, your email address is used by ORTOVOX to deliver press releases. Any additional information, such as address, language, fax number, is voluntary and is used to address you personally and personalize the content of the press releases, as well as to clarify any questions about the email address. It is up to you to decide, whether to provide us with this data. However, without this information, we may not be able to send our press releases to you.

If you no longer wish to receive the press reviews, you can unsubscribe from the press reviews at any time. The cancellation is possible at any time and without giving reasons by clicking on the unsubscribe link, which is located in each press release. There are no costs associated with the revocation.

The legal basis for processing the data after the user has registered for the press reviews is Art. 6 para. 1 lit. a DSGVO, provided that the user has given his consent. You can revoke this consent at any time by clicking on the link provided in each press release or by sending an e-mail to newsletter@ortovox.com for the future.

Your data will be stored as long as you have subscribed to the press distribution list. After unsubscribing, your data will be deleted. Further storage may take place in individual cases if this is required by law.

4.12 Expert Communities (Surveys & Product Tests)

For carry of surveys, we currently use the Microsoft Forms tool from Microsoft, which processes your data on our behalf in an anonymized manner. No further transfer of your data to third parties takes place in connection with participation in surveys. You can find further information about Microsoft Forms as well as your corresponding data protection rights and options for protecting your privacy at: https://privacy.microsoft.com/de-de/privacystatement.

To become part of one of our expert communities, we also need your first and last name, your email address to which surveys should be sent, as well as your country, preferred language, and actively pursued sports. If you would like to participate in product tests, we may also ask you for your address, size, and gender. We generally only collect and process personal data to the extent necessary to participate in surveys or product tests.

It is up to you to decide whether you want to provide us with this data. Without this information, we may not be able to send you specific content such as surveys as part of the expert community.

For registration in an expert community, we use the so-called double opt-in procedure, i.e. we will only send you the surveys after you have confirmed your registration by clicking on a confirmation e-mail sent to you for this purpose. This is to ensure that only you as the owner of the specified e-mail address can register for surveys.

The legal basis for processing the data after the user has registered for the expert community is Art. 6 para. 1 a) DGDPR, provided that the user has given his consent.

Your data will be stored as long as you are part of the expert community. After unsubscribing from an expert community, your data will be deleted. Further storage may take place in individual cases if this is required by law.

4.13. Competitions

If you would like to participate in our competitions, we require your first name, last name, country of origin, name, and email address. Depending on the prize of the competition, we may also ask for your address, size, and gender. We collect and process personal data of the participants only to the extent necessary for participation in the competition or for sending the prize.

This information is used exclusively for the purpose of notifying the winners and sending the prize. It is up to you whether you provide us with this data. However, without this information, we cannot consider your participation in the contest.

Your personal data will generally not be transmitted to third parties. Your personal data will only be passed on or otherwise transmitted to third parties if

• we are legally obliged to do so by official or judicial order, or
• we are entitled to do so, for example because this is necessary for the prosecution of criminal offenses or for the assertion and enforcement of our rights.

The data processing described above for the purpose of participating in our competitions is carried out in accordance with Art. 6 para. 1 b) GDPR.

As soon as a competition is over, the winners have been drawn and notified, and any non-winners have also been informed, the personal data processed in connection with the competition will be deleted. Relevant statutory retention periods remain unaffected. During the statutory retention period, your personal data will be blocked and not used for any other data processing.

4.14 Registration for the Ortovox Media Room for Special User Groups

On our website, we offer special user groups such as dealers, press, and sports professionals the opportunity to register online to access additional and selected information about ORTOVOX products, as well as photos and videos of ORTOVOX products in the so-called Media Room. In this case, we require the following data: first and last name, email address, user group, phone number (optional), and address.

It is up to you whether you want to provide us with this data. However, without this data, you will not be able to access the Media Room.

The legal basis for processing the data when registering for the ORTOVOX Media Room is Art. 6 para. 1 lit. b DSGVO, i.e. processing is necessary for the performance of a contract.

If you are no longer interested in the ORTOVOX Media Room, you can unsubscribe at any time. To do so, simply send an email to: info@ortovox.com. Once you have unsubscribed, your data will be deleted for the purpose of the Media Room. Further storage may take place if required by law.

4.15 Registration for Ortovox Dealers

On our website, we offer dealers who have received access data to the Dealer Area from ORTOVOX the opportunity to register online to access the ORTOVOX B2B shop. In this case, we require the following data: first and last name, language, customer number, company name, salutation, and email address.

It is up to you whether you want to provide us with this data. However, without registration, you will not be able to place orders via the dealer area (ORTOVOX B2B shop).

The legal basis for processing the data when registering for the ORTOVOX dealer area is Art. 6 para. 1 b) GDPR, i.e. processing is necessary for the performance of a contract or for the implementation of pre-contractual measures.

If you are no longer interested in the ORTOVOX dealer area, you can unsubscribe at any time. To do so, simply send an email to: info@ortovox.com. Once you have unsubscribed, your data will be deleted. Further storage may take place if required by law.

4.16 Friendly Captcha

We use “FriendlyCaptcha” on our websites. The provider is Friendly Captcha GmbH, Am Anger 3-5, 82237 Woerthsee, Germany.

FriendlyCaptcha is used to check whether the data input on our websites (e.g. in a contact form) is made by a human or by an automated program. For this purpose, FriendlyCaptcha analyzes the behavior of the website visitor based on various characteristics. This analysis begins automatically as soon as the website visitor enters the website. The FriendlyCaptcha analyses run completely in the background. Website visitors are not informed that an analysis is taking place.

All data is used exclusively for the detection and treatment of potential bots and risks as described above. The purpose of the processing is therefore to ensure the security and functionality of websites. The legal basis for the use of this service is the legitimate interest in protecting our website from abusive access by bots, i.e. spam protection and protection against attacks (e.g. mass requests) in accordance with Art. 6 para. 1 lit. f GDPR.

Friendly Captcha does not set or read any cookies on the visitor's end device. IP addresses are only stored in hashed (one-way encrypted) form and do not allow us or Friendly Captcha to draw any conclusions about an individual person.
If personal data is collected, it is deleted after 30 days at the latest.

Further information on Friendly Captcha privacy policy can be found under the following links: https://friendlycaptcha.com/legal/privacy-end-users/

 

5. Transfer of Personal Data to Third Parties

Generally, a transfer of your personal data to third parties does not take place. Your personal data will only be passed on or otherwise transmitted to third parties if

• we are legally obliged to do so by official or judicial order,
• we are entitled to do so, for example because this is necessary for the prosecution of criminal offences or for the assertion and enforcement of our rights, or
• if you have given your prior consent.

 

6. Cookies and External Services

Cookies are small files that enable specific information related to the device to be stored on the user’s access device (PC or similar). They serve the user-friendliness of websites and thus the users. Some functions of our website cannot be offered without the use of technically necessary cookies. In addition, they can be used to collect statistical data on the use of the website and to analyze it for the purpose of improving the website. Users can influence the use of cookies. For more information on the use of cookies on our website and for individual cookie settings, click our Cookie Consent Manager.

 

7. Fan pages on Facebook, Instagram, TikTok, YouTube, X (formerly Twitter), Outdooractive, Strava, Pinterest, Google+ as well as profiles on LinkedIn, XING and Kununuu

We operate fan pages on the social networks Facebook (Meta), Instagram (Meta), TikTok, X (formerly Twitter), Pinterest and YouTube, as well as profiles on Outdooractive, Strava, LinkedIn, XING and kununuu. As the operator of these fan pages/profiles, we are jointly responsible with the operators of these networks within the meaning of Art. 4 No. 7 GDPR. When you visit one of our fan pages/profiles, personal data is processed by the responsible parties. As the operator of the fan pages, we have concluded agreements with the social networks that regulate, among other things, the conditions for using these pages. We have integrated this privacy policy into the corresponding fan pages, from which you can obtain further information or at https://www.ortovox.com/:

• Meta (Facebook & Instagram) Privacy Policy https://www.facebook.com/privacy/policy/?entry_point=facebook_page_footer

• TikTok Privacy Policy https://www.tiktok.com/legal/page/row/privacy-policy/en

• X (formerly Twitter) Privacy Policy https://twitter.com/en/privacy

• LinkedIn Privacy Policy https://www.linkedin.com/legal/privacy-policy

• XING & Kununuu Privacy Policy  https://privacy.xing.com/en/privacy-policy

• Google (Youtube & Google+) Privacy Policy https://policies.google.com/privacy?hl=en-US

• Pinterest Privacy Policy https://policy.pinterest.com/en/privacy-policy

• Strava Privacy Policy https://www.strava.com/legal/privacy#full_policy

• Outdooractive Privacy Policy https://www.outdooractive.com/en/privacy.html#:~:text=The%20data%20will%20not%20be,section%20of%20this%20privacy%20policy.

 

8. Matomo

To design our website according to your needs, we use the web analysis tool “Matomo”. Information about the use of our website is collected and transmitted to our server for analysis purposes. During this process, the IP address is only processed in a shortened form and thus anonymized. If you do not want your use of our website to be analyzed, you have the right to object to the processing of your data at any time. For this purpose, an opt-out cookie is stored in your browser, which does not contain any usage data and causes Matomo not to collect any session data.

Your visit to this website is currently being recorded by the Matomo analysis. Uncheck this checkbox for opt-out.

 

9. Security Measures for Protecting the Data Stored with us

We are committed to protecting your privacy and treating your personal data confidentially. To avoid loss or misuse of the data stored with us, we take extensive technical and organizational security measures that are regularly reviewed and adapted to technological progress. However, we would like to point out that due to the structure of the Internet, it is possible that the rules of data protection and the above-mentioned security measures may not be observed by other persons or institutions not within our responsibility. In particular, data that is disclosed without encryption - even if this is done by e-mail - can be read by third parties. We have no technical influence on this. It is the responsibility of the user to protect the data provided by him/her against misuse by means of encryption or in any other way.

 

10. Hyperlinks

Our website contains so-called hyperlinks to websites of other providers. When you activate these hyperlinks, you will be redirected from our website directly to the website of the other provider. These can also be the company websites of ORTOVOX partners. You can recognize this, among other things, by the change of the URL. We cannot assume any responsibility for the confidential handling of your data on other websites. Please inform yourself directly on the respective websites about the handling of your personal data on other websites.

 

11. External Service Providers

We use service providers to provide services and process your data around our services. The service providers process the data exclusively within the scope of our instructions and have been obliged to comply with the applicable data protection regulations. All processors have been carefully selected and are only given access to your data to the extent and for the period of time necessary to provide the services or to the extent to which you have consented to the processing and use of the data.

In this context, personal data may be transferred to states outside the EU/ the Fanpages profiles, in particular to the USA. In order to ensure adequate protection of your personal data in the event of the transfer of personal data to such so-called third countries, we have concluded so-called EU-US standard contractual clauses with our service providers. The USA is considered by the European Court of Justice to be a country with an inadequate level of data protection according to EU standards. Furthermore, if possible, we are in contact with the service provider to ensure the protection of your personal data with any additional measures that may be required.

 

12. Storage period

Your personal data will be deleted as soon as the respective purpose of processing is achieved or subsequently lapses.

To fulfill contractual obligations, data collected from you can be stored for as long as the contract exists, and depending on the scope of the contract, 6 or 10 years beyond that to comply with legal retention obligations and to clarify any requests or claims after the contract has expired.

If, in our opinion, data is necessary to examine or defend claims against us or to initiate criminal proceedings against you, us, or third parties, it can be stored by us for as long as a corresponding procedure could be initiated.

For customer service purposes, data collected from you can be stored for 3 to 10 years after collection, unless you request deletion of this data and there are no contractual or legal retention obligations that contradict this deletion request. Relevant proof and retention obligations arise, among other things, from the Commercial Code and the Tax Code. In this case, the respective legal regulations in conjunction with Art. 6 para. 1 c) GDPR serve as the legal basis for processing. If a contract does not materialize, we will delete your data after 3 years at the end of the statutory limitation period.

 

13. Data subject rights

13.1 Right to information, Art. 15 GDPR

You have the right to request information from us at any time about the data we have stored about you, as well as about its origin, recipients or categories of recipients to whom this data is passed on and the purpose for which it is stored.

13.2 Right of revocation, Art. 7 (3) GDPR

If you have given your consent to the use of data, you may revoke this consent at any time without giving reasons with effect for the future. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation. For this purpose, an e-mail to Datenschutz@schwan-stabilo.com or a written notification to Schwan-STABILO Promotion Products GmbH & Co.KG, Schwanweg 1 in 90562 Heroldsberg shall suffice.

13.3 Right of rectification, Art. 16 GDPR

You may request the correction of incorrect or the completion of your data stored by us.

13.4 Right to erasure and blocking, Art. 17 and 18 GDPR

You have the right to block and delete your personal data stored by us. If legal storage obligations or other legally anchored reasons contradict the deletion, only the blocking of your data can be carried out instead of the deletion.

13.5 Right of data transfer, Art. 20 GDPR

Should you request the release of your personal data provided to us, we will release or transfer the data to you or another responsible party in a structured, common and machine-readable format if you so request. The latter, however, only if this is technically possible.

13.6 Right to object, Art. 21 GDPR

You have the right to object to the processing of personal data relating to you at any time on grounds relating to your particular situation within the framework of the requirements of Art. 21 GDPR, provided that the data processing is carried out on the basis of our legitimate interests pursuant to Art. 6 (1) (f) GDPR.

13.7 Contact for the assertion of data subject rights

To assert your data subject rights, you can contact us by e-mail at: Datenschutz@schwan-stabilo.com - or by post to ORTOVOX Sportartikel GmbH, Rotwandweg 5, 82024 Taufkirchen.

When you contact us, the data you provide (your e-mail address, name and telephone number, if applicable) will be stored by us in order to answer your questions or respond to your request. We delete the data collected in this context after the storage is no longer necessary or restrict the processing if there are legal obligations to retain the data.

 

14. Right to file a complaint with the supervisory authority, Art. 77 GDPR

You have the right to file a complaint with the competent supervisory authority against the processing of your personal data if you consider that your rights under the GDPR have been violated.

 

15. Data transfer to affiliated companies

For operational reasons and to ensure IT operations and IT security, data may be transferred to affiliated companies of the Schwan-STABILO Group.

The legal basis is Art. 6 para. 1 (f) GDPR.

 

16. Automated decision-making/profiling

We do not use automated decision making or profiling (an automated analysis of your personal circumstances).

 

January 2024