Data protection statement
SPORLASTIC GmbH Medizinische Produkte

In the following, we would like to inform you about how your personal data is handled when using our website www.sporlastic.de, in accordance with art. 12, 13 and 21 of the General Data Protection Regulation (GDPR) and sect. 13 German Telemedia Act (TMG).

1. Responsible party

This website is operated by

SPORLASTIC GmbH Medizinische Produkte
Weberstraße 1
72622 Nürtingen
Tel.: +49 7022 705181
E-mail: info@sporlastic.de

as the responsible party in terms of data protection law.

2. Data protection officer

The Data Protection Officer of the responsible party can be reached at:

SPORLASTIC GmbH Medizinische Produkte
For the attention of the Data Protection Officer
Weberstraße 1
72622 Nürtingen
Tel.: +49 7022 705160
E-mail: datenschutz@sporlastic.de

3. Purposes and legal bases for data processing

3.1 General

SPORLASTIC GmbH Medizinische Produkte ('SPORLASTIC') respects the privacy of all visitors to this website. We process your personal data in accordance with the provisions of the General Data Protection Regulation, the Federal Data Protection Act and other applicable data protection regulations.

'Personal information' means any information relating to an identified or identifiable natural person ('data subject'). These include, for example, name, address, telephone number or e-mail address.

This data protection statement explains what information SPORLASTIC collects, stores and how it is used. This statement also explains how you can verify the accuracy of the personal information that SPORLASTIC holds about you and how you can have that personal information deleted or updated.

The privacy policy does not apply to third-party websites of other operators, which are linked from this website.

The purposes of data processing, as well as the corresponding legal bases, are named below.

3.2 Informational use of the website

You can visit our website without providing any personal information. If you use our website for informational purposes only, i.e. if you do not register, log in or otherwise provide us with information about yourself, we will not collect any personal data, with the exception of the data transmitted by your browser to enable you to visit the website and information. This information is transmitted to us within the framework of the cookies used.

3.2.1 Technical provision of the website

3.2.1.1 Purpose

Automated collection of data and processing by the browser
For the purpose of the technical provision of the website, the server of this website automatically and temporarily collects and stores the following information in the server log files transmitted by your browser, provided that this function has not been deactivated by you:

• IP address of the requesting computer
• File request of the client
• The http response code
• The website from which you are visiting this website (referrer-url)
• Date and time of the server request
• Browser type and version
• Operating system that is used by the requesting computer
• Search term with which the website was found, e.g. via Google

An evaluation of the server log files on the basis of personal information does not take place. At no point can these data be assigned to specific persons for SPORLASTIC. This data is not merged with data from other data sources.

Cookies
This website uses so-called session cookies in order to make our website available for you to use. Session cookies are small text files that the provider stores in the memory of the visitor's computer. A randomly generated unique identification number is stored in a session cookie, a so-called session ID. In addition, a cookie contains information about its origin and the retention period. These cookies cannot save other data and do not contain any personal information.

You can set your browser so that no cookies are stored on the hard drive and/or cookies which are already stored are deleted once again. Please follow the instructions in your browser settings in order to prevent and delete cookies. Some features of our website are not available without the use of cookies. The following information is stored in the cookies and transmitted to us:

Date on which the cookie was created
Expiration date of the cookie
Values concerning variables
Information for Google Analytics

Adjust your cookie settings here: adjust cookie settings

Tools

Web fonts by myfonts.com
This website uses so-called web fonts to display fonts in a standardized manner. These web fonts are provided by MyFonts Inc., 600 Unicorn Park Drive, Woburn, MA 01801, USA. When you open a webpage, your browser will load the required web fonts into your browser cache in order to be able to display texts and fonts correctly. For this to happen, the browser you are using has to establish a connection with the MyFonts servers. This makes MyFonts aware of the fact that your IP address has been used to open our website. We use MyFonts to present our online offers in a standardized and attractive manner. If your browser does not support web fonts, your computer will use a standard font. For further information on MyFonts, please refer to: https://www.monotype.com/legal/terms-use and https://www.monotype.com/legal/privacy-policy

MapBox
This website uses the map service MapBox via an API. This service is provided by MapBox Inc., 740 15th St NW, Washington, DC 20005, USA. Your IP address has to be stored to enable the use of the respective MapBox functions. Generally, this information is transferred to a MapBox server in the US and stored there. The provider of this website has no influence on this data transfer. We use MapBox to present our online offers in an attractive manner and to make it easier to find the places we indicate on our website. This represents a legitimate interest within the meaning of Article 6 (1) (f) of the GDPR. For more information on the handling of user data, please refer to the MapBox privacy policy: https://www.mapbox.com/privacy.

3.2.1.2 Legal basis

We process your personal data for the technical provision of our website on the basis of the following legal requirements:

• to fulfil a contract or to carry out pre-contractual measures, in accordance with art. 6 para. 1 letter b GDPR, insofar as you are visiting our website to inform yourself about our product range, especially in the webshop, our events and other offers and
• to safeguard our legitimate interests, in accordance with art. 6 para. 1 letter f GDPR, in order to make the website technically available to you. Our legitimate interest is to provide you with an attractive, technically-functional and user-friendly website for our company.

3.2.2 Statistical analysis of the use of our website

3.2.2.1 Purpose

We use Google Analytics for the purpose of making a statistical analysis of the use of our website. In addition, we use cookies, which enable us to analyse your surfing behaviour. This will help us to improve the quality of our website and its content. We learn how the website is used and in doing so, this enables us to continuously optimise our goods and services.

The information obtained through the statistical analysis of our website will not be merged with any other information you provide which is collected through the website.

Google Analytics
Regarding the web analytics service Google Analytics, SPORLASTIC would like to point out the following in accordance with the privacy regulators' guidelines:

This website uses Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Google Analytics uses socalled cookies, which are text files that are stored on your computer and that allow your use of the website to be analysed. The information generated by the cookie about your use of this website (including your IP address) is usually transmitted to a Google server in the USA and stored there. SPORLASTIC would like to point out that this website 'Google Analytics' has been extended by the code '_anonymizeIp()' in order to ensure an anonymous collection of IP addresses (socalled IP-masking).

Through the process of IP anonymisation on this website, your IP address will be truncated by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area before a transfer takes place. This is done in order to prevent the data from being linked to a specific person The full IP address will only be sent to a Google server in the US and truncated there in exceptional cases.

On behalf of SPORLASTIC, Google will use this information to evaluate your use of the website, compile reports on website activity and provide other services related to website activity and internet usage with respect to SPORLASTIC. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

You can prevent the storage of cookies by setting your browser software accordingly; However, SPORLASTIC would like to point out that in this case, you may not be able to use all the features of this website to the full extent. In addition, by downloading and installing the browser plug-in available under the following link, you may prevent Google from collecting  the data generated by the cookie which is related to your use of the website (including your IP address), as well as their processing of this data: http://tools.google.com/dlpage/gaoptout?hl=de.

If you use our website on a mobile device, you can also prevent Google Analytics from collecting your data by clicking on the following link. An opt-out cookie will be set which prevents your data being collected during future visits to this website. If you delete your cookies, you must click this link again. https://www.google.com/settings/ads/onweb/

For further information about the terms of use and data protection, please visit the URL http://www.google.com/analytics/terms/de.html and/or the URL https://www.google.de/intl/de/policies/ and https://policies.google.com/technologies/partner-sites.

If you deactivate the use of Google Analytics for the future under https://tools.google.com/dlpage/gaoptout?hl=en,  your data will not be used in Google Data Studio. By clicking on the link, SPORLASTIC sets an opt-out cookie in your browser, which signals us to prevent the use of Google Analytics for your device. Please note that you will need to perform this process again if you remove the cookies in your browser.

3.2.2.2 Legal basis

We process your personal data for the statistical analysis of our website on the basis of the following legal requirements:

• on the basis of your consent in accordance with art. 6 para. 1 lit. a GDPR in connection with § 15 para. 3 sentence 1 Telemedia Act if you have given your consent via our banner.
• to safeguard our legitimate interests, in accordance with art. 6 para. 1 letter f GDPR, in connection with sect. 15 para. 3 Telemedia Act; our legitimate interest lies in the needsbased design of our website.

3.2.3  Online Marketing

Google Ads and Remarketing
SPORLASTIC also uses Google Ads remarketing technology and Google Tag Manager, an advertising platform of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ('Google'). Using pseudonyms, users who have visited this site will be redirected through targeted advertising on the pages of the Google Partner network. Cookies may be used for this purpose (see section 3.2.1.1), which enable the recognition of an Internet browser. These usage profiles serve to analyse visitor behaviour and are used for targeted product recommendation and interest-based advertising. The ‘pseudonymised’ user profiles are not merged by SPORLASTIC with personal data about the bearer of the pseudonym. You may opt-out of the collection and storage of data for the purpose of web analytics and advertising control at any time by activating Google's opt-out link https://www.google.com/settings/ads/plugin. For more information about Google Remarketing and Google's data protection policy, please visit: http://www.google.com/privacy/ads/.

In addition, you can also use Google Remarketing and Google Tag Manager, as well as all cookies or other types of tracking (eg, counting pixels) by means of their browser settings and/or via free browser add-ons, such as 'Adblock Plus' (https: // adblockplus.org/de/) in combination with the 'EasyPrivacy' list (https://easylist.to/).

SPORLASTIC also uses the so-called Google Conversion Tracking. If you click on an ad placed by Google and have given us your consent to the setting of cookies via the consent banner, a cookie is set for conversion tracking, which loses its validity after 90 days and does not serve the personal identification of the users.  If the user visits certain pages of this website and the cookie has not yet expired, Google and SPORLASTIC can recognize that the user clicked on the ad and was redirected to this page. Each Google Ads customer receives a different cookie. The cookies cannot be tracked through the websites of Google Ads customers. The information collected using the conversion cookie is used to create conversion statistics for Google Ads customers. Customers get the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag. However, they do not receive any information that personally identifies users.

More information about Google Ads and Google Conversion Tracking can be found in Google's privacy policy: https://policies.google.com/privacy and https://policies.google.com/technologies/partner-sites and in the following help article:  https://support.google.com/google-ads/answer/1722022.

With your consent, SPORLASTIC uses the analysis service Google Data Studio to visualize data regarding user behavior in the form of graphical reports. For this purpose, SPORLASTIC uses data from the web analysis service Google Analytics as well as other data sources (e.g. Google Ads). For more information about using Google Data  Studio, see https://support.google.com/looker-studio/answer/6283323?hl=en.

Range analysis with Matomo

On this website we use trustats, a service of the provider converlytics GmbH, Wandlitzstraße 1-3, in 10318 Berlin, Germany. The web analysis software Matomo collects and stores  the following data within the scope of the trustats service used: the browser type and version you use, the operating system you use, your country/region of origin, the date and time of the server request, the number of visits, your length of stay on the website, the external links you have clicked on and your IP address in anonymous form. The data is collected by converlytics GmbH on our behalf on the basis of a data processing agreement in Germany and never leaves the EU.

We need this data to analyse the surfing behaviour of users and to obtain information about the use of the individual components of our website. This enables us to constantly optimize the website and its user-friendliness. These purposes are the basis for our legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR as the legal basis for this form of data processing. By anonymizing the IP address and excluding recognition beyond 24 hours through appropriate technical measures, we take into account the interest of users in the protection of personal data. The data is never used to personally identify the user of the website and is not merged with other data.

If a corresponding consent has been requested, the processing takes place exclusively on the basis of Art. 6 para. 1 lit. a GDPR and §25 para. 1 TTDSG, insofar as the consent includes the storage of cookies or access to information in the user's terminal device (e.g. device fingerprinting) within the meaning of the TTDSG. The consent can be revoked at any time.

If you do not want your visits to our website to be recorded in this form, you can object to this collection by using the Consent Tool. In this case, trustats will not collect any further data from you.

Facebook Pixel

With your consent, we use the "Facebook Pixel" of Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA ("Facebook") within the  SPORLASTIC website. With its help, we can track the actions of users after they have seen or clicked on a Facebook ad. This allows us to measure the effectiveness of Facebook ads for statistical andresearch purposes. The data collected in this way is anonymous to us, which means that we do not see the personal data of individual users. However, this data is stored and processed by Facebook, about which we inform you according to our level of knowledge. Facebook can connect this data to your Facebook account and also use it for its own advertising purposes, in accordance with Facebook's data usage policy https://www.facebook.com/about/privacy/. You can enable Facebook and its partners to place advertisements on and off Facebook. A cookie may also be stored on your computer for these purposes. This consent may only be given by users who are older than 13 years. If you are younger, please ask your legal guardian for advice. If you do not want data collection via Facebook Pixel, please click here.

LinkedIn Insight Tag

Furthermore, SPORLASTIC uses the so-called conversion tracking with LinkedIn Insight Tag, a tool of LinkedIn Ireland, Wilton Plaza, Wilton Place, Dublin 2, Ireland, on the website. For this purpose, the LinkedIn Insight Tag is integrated on our pages and a cookie is set on your device by LinkedIn. In this way, LinkedIn is informed that you have visited our website, whereby your IP address is also collected. In addition, timestamps and events such as page views are stored. This enables us to statistically evaluate the use of our website in order to constantly optimize it. For example, we learn which LinkedIn ad or interaction on LinkedIn you clicked to come to our website. This allows us to better control the display of our advertising. For more information about conversion tracking, see https://www.linkedin.com/help/lms/answer/a420536/linkedin-conversion-tracking-overview?lang=en Please note that the data may be stored and processed by LinkedIn so that a connection to the respective user profile is possible and LinkedIn can use the data for its own advertising purposes. Further information can be found in LinkedIn's privacy policy under https://www.linkedIn.com/legal/privacy-policy. You can prevent LinkedIn from analyzing your usage behavior and displaying interest-based recommendations via https://www.linkedIn.com/psettings/guest-controls/retargeting-opt-out.

3.2.4  Links to social media Operators

On this website you will find links (hyperlinks) to social media networks and platforms.

For information concerning the purpose and scope of data collection  the further processing of data and its use by the providers of social media networks, as well as your rights regarding this and the options that are available for protecting your privacy, please refer to the provider’s privacy policy:

Data protection policy of Facebook: https://de-de.facebook.com/policy.php

Data protection statement of YouTube/Google: https://www.google.de/intl/de/policies/privacy/

Data protection policies of Instagram: https://help.instagram.com/155833707900388

Data protection policies of LinkedIn:  https://www.linkedin.com/legal/privacy-policy

Data protection statement of XING: https://privacy.xing.com/en

If you do not want a provider to be able to associate the click of a link which links its website presence to your local user account, you must log out of the relevant service before clicking on such a link. Even if you are not registered with the providers, after clicking on a link concerning the use of cookies, data can be sent to the provider.

Our social media presences are intended to ensure the widest possible presence on the Internet. This is a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR. The analysis processes initiated by the social media may be based on different legal bases, which must be specified by the operators of the social networks (e.g. consent within the meaning of Art. 6 para. 1 lit. a DSGVO).

3.2.5 Social Media Management Software

We manage our social media channels with Hootsuite, Hootsuite Media Inc., 37 Dunlevy Ave., Vancouver BC, Canada V6A 3A3. We have a legitimate interest in using this software in accordance with Article 6 (1) (f) GDPR. Hootsuite allows us to manage multiple social media accounts, schedule, publish, and analyze posts. Hootsuite processes data uploaded by users on social media channels or shared and made public by sharing and liking posts. Further information and the currently applicable data protection provisions of Hootsuite can be found under https://hootsuite.com/de/legal/privacy.

3.3 Active use of the Website

In addition to using our website purely for information, you can also actively use our website to buy goods in our online shop or to contact us. In addition to the processing of your personal data for a purely informative use (as described above), we then collect and process further personal data from you which we need in order to process your order and/or to process and answer your enquiry.

3.3.1 Communication via the contact form or e-mail

3.3.1.1 Purpose

In order to process and answer the enquiry you send to us (e.g. via the contact form or to our e-mail address) to the collection, processing and use of your personal data communicated in this context is earmarked exclusively for receiving and answering and/or processing your request as well as for statistical purposes. If SPORLASTIC no longer needs your data for this purpose, your data will be deleted.

3.3.1.2 Legal basis

We process your personal data in order to respond to user enquiries on the basis of the following legal requirements:

• to safeguard our legitimate interests, in accordance with art. 6 para. 1 letter f GDPR; our legitimate interest lies in answering customer enquiries appropriately.

3.3.2 Orders in our SPORLASTIC online shop 

3.3.2.1 Purpose   

Order as a specialist trade partner
As our specialized trade partner you can register with our online store and order goods as a registered store customer. The user name is the e-mail address with which you are registered with us. To become a store customer, please contact our customer service.

If you are an end consumer, SPORLASTIC will use your personal data that you provide during the creation of your customer account and/or your order on the website, such as your first and last name, your address, telephone number, e-mail address and date of birth, only to the extent that this is necessary for the establishment, content or modification of the contractual relationship with you. 

Order handling   
In order to send your ordered goods, we will hand your name and delivery address over to our authorized logistics service provider.

Compliance with legal regulations
We also process your personal data in order to fulfil other legal obligations that we have in connection with the processing of the order. In particular, these include trade-related, commercial or tax-related retention periods.

Legal enforcement
In addition, we process your personal data in order to assert our rights and enforce our legal claims. We also process your personal data in order to defend ourselves against legal claims.

3.3.2.2 Legal basis

We process your personal data in order to process orders in the online shop on the basis of the following legal requirements:

• to fulfil a contract or to carry out pre-contractual measures, in accordance with art. 6 para. 1 letter b GDPR;
• to fulfil a legal obligation, which we are subject to, in accordance with art. 6 para. 1 letter c GDPR in connection with commercial, commercial or tax law, insofar as we are obliged to record and store your data; and
• to safeguard our legitimate interests, in accordance with art. 6 para. 1 letter f GDPR, insofar as we assert legal claims or defend ourselves in legal disputes.

3.3.3 Physician's portal

3.3.3.1 Purpose

As a doctor you will be able to register in our physician's portal and create your profile. Our exclusive portal for doctors offers you direct access to information brochures, information on patients and our guide book on regulations. Upgrade your knowledge with our medical newsletter and various publications. All forthcoming exhibition and congress schedules are shown in our events calendar at all times. You are welcome to join us in conversation on product presentations and to be our partner for product ideas and improvements.
Once you have registered on our physician's portal we will collect your personal data so that we may provide you with the information available. While doing so we will collect the following particulars stated in the entry form (Mandatory details are marked with the “*“ add on):     

• Title/salutation 
• First and last name*      
• Address* (practice address)    
• Postcode*
• Town/city*
• Email address*
• Telephone number
• Subject * (Please select)
• User name*
• Password*

3.3.3.2 Legal basis

We process your personal data in order to provide or send our information on the basis of the following legal requirement: to safeguard our legitimate interests, in accordance with art. 6 para. 1 letter f GDPR; our legitimate interest lies in the appropriate provision of information within the physician's Portal.

3.3.4 Sending of newsletters – only for doctors and specialist traders

3.3.4.1 Purpose

If you subscribe as doctor or specialist trader to the SPORLASTIC newsletter, we will collect personal data. This data is only used in order to communicate with you, within the context of providing the newsletter.
While doing so we will collect the following particulars stated in the entry form (Mandatory details are marked with the “*“ add on):     

• Title/salutation 
• First and last name      
• Address (practice address)    
• Postcode
• Town/city
• Email address*
• Subject * (Please select)

In order to register for the newsletter, SPORLASTIC uses the so-called double-opt-in procedure, i.e. the newsletter will only be sent to you by e-mail if you have previously expressly confirmed to SPORLASTIC that the newsletter service should be activated. Following your registration, you will initially receive an e-mail confirmation at the e-mail address which you have provided, asking you to confirm that you wish to receive the newsletter (by clicking on a link in this e-mail). By clicking on this link, you give your consent to subscribe to the newsletter.

If you purchase goods and services on our website and leave your e-mail address here, this can subsequently be used by us in order to send a newsletter. In such cases, the newsletter will only send direct mail for similar goods or services from our range.

If you don't want to receive any further newsletters, you can revoke your consent for the future at any time, without incurring any costs other than the transmission costs according to the basic rates. A message in writing, sent to the e-mail address datenschutz@sporlastic.de is sufficient for this. Of course, you will also find an unsubscribe link in every newsletter.

3.3.4.2 Legal basis

We process your personal data in order to send newsletters on the basis of the following legal requirements:

• after the user has subscribed to the newsletter and  given his/her consent to this, in accordance with art. 6 para. 1 letter a GDPR;
• for the sending of the newsletter as a result of a sale of goods or services, in accordance with sect. 7 para. 3 UWG (German Act against Unfair Competition).

3.3.5 Registration for online events

3.3.5.1 Purpose

If you have registered for an online event, we process the data you provided at the time of registration for the performance of the contract or for the implementation of precontractual measures in advance of events. In particular, we process your e-mail address so that we can send you a confirmation of registration and, if necessary, further seminar documents. We will also inform you of any changes regarding the date and content of the event. We process your (company) name and address for the exact assignment of your registration to your company and at paid events for invoicing. 
We also use your data to send postal advertising or e-mail advertising for our events, if permitted by law. 

3.3.5.2 Legal basis

The legal basis with regard to data that you have entered in mandatory fields is Art. 6 sec. 1 lit.b GDPR, otherwise your consent in accordance with Art. 6 sec. 1 lit. a GDPR.
The legal basis with regard to advertising is Art. 6 sec. 1 lit. f GDPR. We have a legitimate interest in sending direct mail. If you do not wish to receive information about our events, you can contradict to this use of your data at any time. 

3.3.6 DiGA - Sensor kit order

3.3.6.1 Purpose

In order to use the Digital health application (DiGA) RE.FLEX, an associated sensor kit is required, for the sending of which we process the following categories of personal data:  title, first name, last name, e-mail address, billing address/delivery address, duration of supply, optional telephone number and date of birth 

We obtain the data from the following source:  https://www.sporlastic.de/service/sensorenbestellung

The data is also used for the following purposes:

• Execution or coordination of hardware shipment
• Return of rented equipment
• Technical support
• Traceability of medical devices, in particular in the event of safety corrective actions

3.3.6.2. Legal basis

We process your data based on your consent pursuant to Art. 9 para. 2 lit. a) GDPR, Art. 6 para. 1 lit. a) GDPR, §4 para.2 no. 4 DiGAV

3.3.7 DiGA - Prescription Service

3.3.7.1. Purpose

As part of the prescription service, we only collect the following data if you enter it into the mask and give us the consent shown there: first name, last name, e-mail, telephone, name of your health insurance company. The name of your prescribing doctor can be found on the prescription submitted. On the basis of your consent, we will submit your prescription directly for you to the health insurance company you have specified and, if necessary, support you in setting up the RE.FLEX app.

The performance of the Sporlastic prescription service includes:

• the transmission of your data to Sporlastic,
• the storage of your data by Sporlastic,
• the verification of your data for completeness by Sporlastic, including contacting you by telephone or electronically for any queries
• forwarding your prescription to your health insurance company, and
• If necessary, the processing of your data for queries with you or your health insurance company by telephone or e-mail.

You have been made aware of the risk of using unencrypted communication. The consent is voluntary and can be revoked by you at any time and without giving reasons, e.g. by e-mail to digital@sporlastic.com for the future.

3.3.7.2. Legal basis

We process your data on the basis of your consent in accordance with Art. 9 para. 2 lit. a) GDPR and Art. 6 para. 1 lit. a) GDPR

4. Categories of recipients

Initially, only our staff will be aware of your personal data. In addition, to the extent which is permitted or required by law, we will share your personal information with other recipients who provide services related to our website. We restrict the transfer of your personal data to what is necessary, especially to that which is necessary for processing your order. Sometimes, our service providers receive your personal data as an order processor and are then strictly bound by our instructions when handling your personal data. In part, the recipients act independently with your data which we transmit to them.

The following section lists the categories of recipients of your personal data:

• Payment service providers and banks, for settling payments,
• Providers of logistics services in order to send you the goods,
• IT service providers in the administration and hosting of our website,
• Collection agencies and legal advisors who assert our claims.
• Cooperating retailers and other cooperating service providers
• Health insurance companies for prescription billing

5. Data security

SPORLASTIC is committed to securing your personal information by using appropriate security measures to protect it from loss, misuse or tampering. These security measures will be updated from time to time according to current advances in technology.

SPORLASTIC uses SSL (Secure Sockets Layer) encryption when capturing or transmitting sensitive data. This includes all pages with input boxes into which user data can be entered (e.g. newsletter subscription, contact form, etc.). SSL encryption ensures that no one but SPORLASTIC can read the data. This security standard is active if either the symbol of an intact key or a closed lock (browser-dependent) appears in the status bar or in the lower part of your browser window.

6. Transfer to third countries

If SPORLASTIC processes data in a third country (i.e. outside the European Union or the European Economic Area), or within the context of using third party services or discloses, or transmits data to third parties, this will only be done on the basis of your consent or on the basis of our legitimate interests. SPORLASTIC only allows the data to be processed in a third country if the special conditions of art. 44 GDPR et seq. are met, e.g. the processing takes place on the basis of special guarantees, such as the officially recognised level of data pretection corresponding to EU regulations, or the observance of officially recognised specific contractual obligations (“standard contract clauses").

7. Duration of the storage

7.1 Informational use of the Website

If you use our website solely for the purpose of receiving information, we will only store your personal data on our servers for the duration of your visit to our website. After you have left our website, your personal data will be deleted immediately.
Server log files have been disabled.

7.2 Active use of the Website

In the case of active use of our website, we initially store your personal data for the duration of your enquiry or for the duration of our business relationship. This also includes the initiation of a contract (pre-contractual legal relationship) and the execution of a contract.

In addition, we will then store your personal information until the statute of limitations of any legal claims arising from the relationship with you starts, to use as evidence where appropriate. The limitation period is usually between 12 and 36 months, but can also last up to 30 years.

We will delete your personal data at the start of the limitation period unless there is a statutory storage obligation, e.g. in the German Commercial Code (sects. 238, 257 para. 4 German Commercial Code) or the German Tax Code (sect. 147 para. 3, 4 (German) Tax Code) in front. These storage requirements may be two to ten years.

8. Your rights as a data subject

Under the legal requirements, you are entitled to the following rights as a data subject, which you can assert against us:

• Right to information: Under art. 15 GDPR, you are entitled to demand confirmation from us at any time as to whether we process personal data relating to you; If this is the case, you are also entitled under art. 15 GDPR to receive information about this personal data and certain other information (including among other things, purposes of processing data, categories of personal data, categories of recipients, planned storage period, your rights, the source of the data, the use of automated decision making and in the case of a transfer to a third country the appropriate guarantees) and to obtain a copy of your data.
• Right to rectification: In accordance with art. 16 GDPR, you are entitled to demand that we correct the personal data stored about you if it does not apply or is incorrect. 
• Right to deletion: (‘right to be forgotten’) You are entitled, under the conditions of art. 17 GDPR, to demand that we delete your personal data without delay. Among other things, there is no right to deletion if the processing of  personal data is required for (i) exercising the right to freedom of expression and information, (ii) the fulfilment of a legal obligation to which we are subject (e.g. statutory retention obligations) or (iii) enforcement, exercising or defending legal claims.
• Right to restricting processing: Under the conditions of art. 18 GDPR, you are entitled to demand that we limit the processing of your personal data.
• Right to data transferability: Under the conditions of Art. 20 GDPR, you are entitled to demand that we provide you with the personal data relating to you, which you have provided to us, in a structured, standard, machine-readable format.
• Right of objection: Under the conditions of art. 21 GDPR, you are entitled to object to the processing of your personal data. In such cases, we have to stop the processing of your personal data. The right to objection only exists within the limits provided for in art. 21 GDPR. In addition, our interests may preclude any termination of processing, so we may, despite your opposition, process your personal information.
• Right of appeal to a supervisory authority: If you feel that the processing of your personal data infringes the GDPR, you are entitled to file a complaint with a supervisory authority under the conditions of art. 77 GDPR, especially within the Member State of your place of residence, your place of work or the place of the alleged infringement. The right of appeal is without prejudice to any other administrative or judicial remedy.

You can address your concern to the SPORLASTIC data protection officer by e-mail (datenschutz@sporlastic.de).

The supervisory authority responsible for us is:

State officer for Data Protection and Freedom of Information, Baden-Württemberg
Lautenschlagerstraße 20
70173 Stuttgart

Right of objection
You have the right, for reasons arising from your particular situation, to file an objection against the processing of your personal data by us at any time, which takes place pursuant to art. 6 para. 1 lit. f GCPR (legitimate interest of the responsible person). We will then no longer process your personal information, unless we can demonstrate compelling legitimate grounds for processing it that outweigh your interests, rights and freedoms, or if the processing serves the purpose of enforcing, pursuing or defending legal claims.

If the personal data relating to you is processed in order to send direct mail, you have the right to object to the processing of your personal data for the purposes of such advertising at any time. If you object to processing for direct marketing purposes, your personal data will no longer be processed for these purposes.

9. Obligation to provide data

As a general rule, you are not obliged to provide us with your personal data. However, if you do not, we will not be able to provide you with our website correspond to your enquiries and we will not be able to enter into a contract with you via our online store. Personal data that we do not necessarily need for the above-mentioned processing purposes are marked accordingly as voluntary information.

10. Automated decision making / profiling

SPORLASTIC does not use automated decision making or profiling (an automated analysis of your personal circumstances).

11. Modification of this data protection Statement

SPORLASTIC reserves the right to change this privacy policy in the future. You should therefore regularly review the data protection statement when you visit this website. The current version of this data protection statement applies during your visit.

SPORLASTIC GmbH Medizinische Produkte
Weberstraße 1
72622 Nürtingen
Customer service:
Mon.-Thurs. 08:00 - 17:00
Fri.: 08:00 - 16:00
Tel.: +49 7022 705181
e-mail: info@sporlastic.de

Date: July 2023