Data protection

Preamble

In the following, we inform you about the collection of personal data when using our website. Personal data is any data that can be related to you personally, e.g. name, address, email addresses, user behavior.

Controller / DPO

Controller for data processing	Contact details of the Data Protection Officer
killtec Sport- und Freizeit GmbH Zimmererstraße 5 21244 Buchholz Germany Managing Directors: Marcus Killer, Sven Killer	killtec Sport- und Freizeit GmbH Data Protection Officer Zimmererstraße 5 21244 Buchholz Germany datenschutz@killtec.de

General data collection when visiting our website

When using the website for informational purposes only, i.e., if you do not register or otherwise transmit information to us, we only collect the personal data that your browser transmits to our server. If you wish to view our website, we collect the following data, which is technically necessary for us to display our website to you and to ensure its stability and security (legal basis is the legitimate interest according to Art. 6 Para. 1 S. 1 lit. f GDPR):

Data	Purpose of processing	Storage period
Operating system used	Evaluation by device to ensure optimized display of the website	The data will be deleted when the respective session ends.
Information about the browser type and version used	Evaluation of the browsers used to optimize our websites for them
User's Internet Service Provider	Evaluation of Internet Service Providers
IP address	Display of the website on the respective device
Date and time of access	Ensuring the proper operation of the website.
If applicable, manufacturer and type designation of the smartphone, tablet or other end devices	Evaluation of device manufacturers and types of mobile end devices for statistical purposes
Log files	Ensuring the proper operation of the website

The collection of data for the provision of the website and the storage of data in log files is absolutely necessary for the operation of the website. Consequently, there is no possibility for the user to object.

Shopify as hosting provider (processor)

This website is hosted on the platform of Shopify International Ltd., Victoria Avenue, Blackrock, Co. Dublin, D04 NX54, Ireland. Shopify processes technical access data (including IP address, browser type, pages accessed) as a processor within the scope of hosting in accordance with Art. 28 GDPR. A data processing agreement has been concluded with Shopify. The contact form on this website is also processed via the Shopify platform (Shopify Forms); the transmitted data remains within the Shopify infrastructure. The legal basis is the legitimate interest pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR.

A data transfer to the USA or Canada (Shopify Inc., 150 Elgin Street, Ottawa, ON K2P 1L4, Canada) cannot be completely excluded. Shopify uses EU standard contractual clauses for this purpose in accordance with Art. 46 Para. 2 lit. c GDPR. Further information on data protection at Shopify can be found at: https://www.shopify.com/legal/privacy

Cookies – General Information

Our website uses cookies. Cookies are text files that are stored in the internet browser or by the internet browser on the user's computer system. If a user calls up a website, a cookie can be stored on the user's operating system. This cookie contains a characteristic string of characters that enables the browser to be uniquely identified when the website is called up again. You can configure your browser settings according to your wishes and, for example, refuse to accept third-party cookies or all cookies. We would like to point out that you may then not be able to use all functions of this website.

Cookies – Distinction between types of cookies

Technically necessary cookies

We use cookies to make our website more user-friendly. Some elements of our website require that the calling browser can be identified even after a page change.

Cookie Name	Purpose of Processing	Legal Basis for Processing	Storage Duration
_session_id	Shopify – Session management; assigns a unique session ID to the browser to ensure the shop's functionality.	Legitimate interest (Art. 6 para. 1 lit. f GDPR)	Session (max. 24 hrs)
_shopify_fs	Shopify – Records the user's first visit to the shop for internal operating statistics.	Legitimate interest (Art. 6 para. 1 lit. f GDPR)	Persistent
_shopify_s	Shopify – Technical platform cookie to ensure proper page operation; records exclusively platform-internal operational data and is not used for external analysis or advertising.	Legitimate interest (Art. 6 para. 1 lit. f GDPR)	30 minutes
_shopify_y	Shopify – Technical platform cookie to ensure proper page operation; records exclusively platform-internal operational data and is not used for external analysis or advertising.	Legitimate interest (Art. 6 para. 1 lit. f GDPR)	1 year

Technically necessary cookies are not absolutely essential for displaying the website. However, some website functions, such as the contact form, cannot be used properly without these cookies. Consequently, there is no possibility for the user to object. These cookies can be deactivated by adjusting the respective browser settings.

Contact form

You have the option to contact us via our email address or the contact form. We will, of course, use the personal data transmitted to us in this way exclusively for the purpose for which you provided it to us when contacting us.

Data	Purpose of Processing	Legal Basis for Processing	Storage Duration
IP address upon registration	Transmission of form content to the web server	Consent / Initiation/Execution of the contractual relationship	Until connection establishment ends
Name	Direct address	Consent / Initiation/Execution of the contractual relationship	Until purpose achieved / End of retention period
Country	Answering the request	Consent / Initiation/Execution of the contractual relationship	Until purpose achieved / End of retention period
Concern	Answering the request	Consent / Initiation/Execution of the contractual relationship	Until purpose achieved / End of retention period
Email address	Answering the request	Consent / Initiation/Execution of the contractual relationship	Until purpose achieved / End of retention period

You will receive a newsletter from us with news and current information about our products if you subscribe to one when registering for our customer loyalty program.

The only mandatory information for sending the newsletter is your e-mail address. The provision of further, separately marked data is voluntary and is used to address you personally. The legal basis is Art. 6 para. 1 a GDPR.

You can revoke your consent to receive the newsletter and unsubscribe from the newsletter at any time. You can declare your revocation by clicking on the link provided in every newsletter e-mail or by contacting the data protection officer specified above. The data collected for sending the newsletter will be deleted as soon as you revoke your consent. If statutory retention periods exist, deletion will take place at the end of the respective retention period.

Applications

You can apply to our company electronically. We will, of course, only use your information to process your application and will not pass it on to third parties. Please note that unencrypted e-mails are not transmitted with access protection. If you have applied for a specific position and it has already been filled, or if we consider you equally or better suited for another position, we would be happy to forward your application within the company. Please let us know if you do not agree to such forwarding. Your personal data will be deleted immediately after the application process is completed, or after a maximum of 6 months, unless you have expressly given us your consent for longer storage of your data.

The legal basis for the collection and processing of application data are Art. 6 para. 1 lit. a, b and f GDPR and § 26 BDSG.

Data Transfer

Your personal data will not be transferred to third parties for purposes other than those listed below.
We will only transfer your personal data to third parties if:

You have given your express consent to do so,
the transfer is necessary for the assertion, exercise or defense of legal claims and there is no reason to assume that you have an overriding legitimate interest in not disclosing your data,
in the event that there is a legal obligation for the transfer, as well as
this is legally permissible and necessary for the processing of contractual relationships with you.

Data Subject Rights

Every data subject has the right of access under Art. 15 GDPR, the right to rectification under Art. 16 GDPR, the right to erasure under Art. 17 GDPR, the right to restriction of processing under Art. 18 GDPR, the right to object under Art. 21 GDPR, and the right to data portability under Art. 20 GDPR. The restrictions under §§ 34 and 35 BDSG apply to the right of access and the right to erasure.

Right to Complain

You also have the right to complain to the competent data protection supervisory authority about our processing of your personal data.

Information on the Right to Object to Consent

You can revoke any consent given to the processing of personal data at any time. This also applies to the revocation of declarations of consent that were given to us before the GDPR came into force, i.e., before May 25, 2018. Please note that the revocation only takes effect for the future. Processing that took place before the revocation is not affected by this.

Processing Based on Legitimate Interest

If the processing of personal data is based on a legitimate interest (Art. 6 para. 1 lit. f GDPR), the legitimate interest generally arises from the purpose of the respective processing or the legitimate interest lies in the conduct of our business activities.

Data Security

We have taken extensive technical and operational precautions to protect your data from accidental or intentional manipulation, loss, destruction, or access by unauthorized persons. Our security procedures are regularly reviewed and adapted to technological progress.
This site also uses SSL encryption for security reasons and to protect the transmission of confidential content, such as inquiries you send to us as the site operator. You can recognize an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser line.
If SSL encryption is activated, the data you transmit to us cannot be read by third parties.

Links to Other Websites

Our websites may contain links to websites of other providers. We point out that this privacy policy applies exclusively to the websites of killtec Sport- und Freizeit GmbH. We have no influence on and do not control whether other providers comply with the applicable data protection regulations.