Legal notice.

General information

The following information provides an overview of what happens to your personal data when you visit this website. Personal data is any data that can be used to identify you personally.

Data collection on this website

sportimization GmbH is responsible for processing your data. Contact details can be found in the section entitled Controller.

Some data is collected when you provide it to us, for example by email or when placing an order. Other data is collected automatically by our hosting provider's IT systems when you visit the website. This primarily includes technical data such as your IP address, browser, operating system and the time of your visit. YouTube content is loaded only after you have given your express consent.

We process data to provide the website securely and without errors and to handle enquiries, orders and contractual relationships. With your consent, we use Google Analytics to analyse website usage statistically and improve our services.

Your rights

In particular, you have rights of access, rectification, erasure, restriction of processing, data portability and objection. You may withdraw your consent at any time with effect for the future. You also have the right to lodge a complaint with a data protection supervisory authority.

IONOS

We host this website with IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany (IONOS). When you visit the website, IONOS collects server log files. These may include your IP address, the date and time of access, the requested resource, the referrer URL, browser type and version, and operating system.

Processing takes place to provide the website securely, reliably and efficiently on the basis of Article 6(1)(f) GDPR. Our legitimate interest lies in the reliable presentation of the website and its protection against misuse and attacks. Log data is deleted once it is no longer required for these purposes, unless longer retention is necessary to investigate a security incident or to meet statutory obligations.

We have entered into a data processing agreement with IONOS in accordance with Article 28 GDPR. Further information is available in the IONOS privacy policy.

Controller

The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data.

Retention periods

Unless a more specific retention period is stated, we store personal data only until the purpose of processing no longer applies. Following a valid request for erasure or withdrawal of consent, we delete the data unless there are legally permissible grounds for continued storage, in particular statutory retention periods.

Legal bases and recipients

Depending on the circumstances, we process data on the basis of your consent (Article 6(1)(a) GDPR), for the performance of a contract or to take steps prior to entering into a contract (Article 6(1)(b) GDPR), to comply with legal obligations (Article 6(1)(c) GDPR), or on the basis of legitimate interests (Article 6(1)(f) GDPR). Where information is stored on or accessed from your device, Section 25 of the German TDDDG also applies.

Recipients receive personal data only where this is necessary for the performance of a contract, required by law, justified by an overriding legitimate interest, or based on your consent. Processors are engaged only on the basis of a valid agreement.

SSL or TLS encryption

This website uses TLS encryption. You can recognise an encrypted connection by https:// in your browser's address bar. Complete protection against access by third parties cannot be guaranteed when communicating by email.

Withdrawal of consent and objection

You may withdraw your consent at any time with effect for the future. Where processing is based on Article 6(1)(e) or (f) GDPR, you may object at any time on grounds relating to your particular situation. For direct marketing, you have this right at any time without having to state grounds relating to a particular situation. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.

Access, rectification, erasure and restriction

Subject to the statutory requirements, you have the right to access the personal data processed about you, to have inaccurate data rectified, to have data erased, to restrict processing, and to have recipients notified of any rectification, erasure or restriction.

Data portability

You may receive data that we process by automated means on the basis of your consent or in performance of a contract in a structured, commonly used and machine-readable format, or have it transmitted directly to another controller where technically feasible.

Right to lodge a complaint

You may lodge a complaint with a data protection supervisory authority, in particular in the Member State of your habitual residence, place of work or the place of the alleged infringement. The competent authority for Lower Saxony is the State Commissioner for Data Protection of Lower Saxony.

Cookies and similar technologies

Before you give consent, this website does not use cookies or comparable technologies that are not technically necessary. After you give consent, Google Analytics may set cookies to recognise browsers and sessions. YouTube may also set cookies or access information on your device only after you enable YouTube. Details are provided in the sections below.

You can configure your browser to notify you about cookies, allow cookies only in individual cases or delete them automatically. You can remove previously stored data in your browser settings.

Enquiries and orders

When you contact us by email or telephone, we process the data you provide to deal with your enquiry. When you submit the order form, the contact, address and order details you enter are transmitted to our web server, stored there as an order file and forwarded to us by email.

Processing is based on Article 6(1)(b) GDPR where your enquiry concerns a contract or steps prior to entering into a contract; otherwise it is based on our legitimate interest in handling enquiries appropriately under Article 6(1)(f) GDPR. The data is deleted after the enquiry has been resolved unless statutory retention obligations or other legal grounds require otherwise.

Scope and purpose of processing

This website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (Google). Google Analytics helps us understand how visitors use the website and improve its technology and content.

Data processed may include pages visited, the time and duration of visits, interactions, approximate geographical origin, referrer information and technical details about the browser, operating system, device and screen resolution. Google Analytics uses cookies including _ga and _ga_<Container-ID> to distinguish users and sessions. According to Google, these cookies have a default lifetime of up to two years; browser settings may shorten their actual lifetime.

Your IP address is technically transmitted to Google. According to Google, for access from the EU it is used only to derive approximate location information and is discarded before being logged or stored in Analytics.

Legal basis and withdrawal of consent

Google Analytics is activated only after you give consent. The legal basis is Article 6(1)(a) GDPR and, where cookies or comparable technologies are used, Section 25(1) TDDDG. Consent is voluntary and may be withdrawn at any time with effect for the future through this website's privacy settings. Withdrawal does not affect the lawfulness of processing carried out beforehand.

Your decision is stored in your browser's Local Storage together with the time and version of the consent request. This storage is necessary to implement and document your choice and is based on Section 25(2) no. 2 TDDDG. The setting remains stored until you change it or delete your browser data.

Recipients, data processing agreements and third-country transfers

The recipient of the data is Google Ireland Limited. Processing by other Google group companies, in particular Google LLC in the USA, cannot be ruled out. The Google Ads Data Processing Terms apply as the data processing agreement with Google. Google LLC is certified under the EU-US Data Privacy Framework.

In accordance with the configuration of the Google Analytics property, event data is retained for two months and user data for 14 months and is then automatically deleted. These retention settings do not apply to aggregated standard reports which, according to Google, do not allow individual users to be directly identified.

Further information is available in the Google Analytics privacy information, the Google privacy policy and the Data Privacy Framework listing.

The order form uses a self-hosted ALTCHA security check to prevent automated and abusive form submissions. Your browser solves a cryptographic computational challenge and our server verifies the result.

The check is served and evaluated entirely through our web server. No data is transmitted to ALTCHA or other third parties, and the security check does not set cookies. To limit abusive requests, a verification value derived from the IP address using a secret key is stored for a ten-minute blocking window. The IP address itself is not stored as part of the ALTCHA check. Previously used challenges are briefly marked as consumed so they cannot be reused.

Processing is based on our legitimate interest in protecting the order form against spam and misuse under Article 6(1)(f) GDPR.

This website offers videos from YouTube, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (Google). Before you give consent, neither the YouTube player nor YouTube thumbnails are loaded, and no connection to Google is established.

Only when you select Enable all YouTube videos is the player for the selected video loaded from youtube-nocookie.com. Google then receives, in particular, your IP address, technical device and browser data, the time and referrer URL, and information about the page visited. YouTube may use cookies or similar technologies, process usage data and associate playback with your Google account if you are signed in. Google may also use the data for statistical, security, personalisation and advertising purposes.

The legal basis is your consent under Article 6(1)(a) GDPR and, where information is stored on or accessed from your device, Section 25(1) TDDDG. Consent applies to all YouTube videos in this browser tab and is voluntary. It does not automatically load other videos, but they can then be played without a further consent request. Your decision is stored for this purpose in the browser's Session Storage and deleted when the tab is closed. You can use all other website content without giving consent. You may withdraw consent at any time with effect for the future using the Revoke consent control. On the tutorials page, this control is located centrally below the videos; on other pages, it is provided directly alongside each video.

Data may also be transferred to the USA during use. Google LLC is certified under the EU-US Data Privacy Framework. Further information is available in the Google privacy policy and the Data Privacy Framework listing.

Merchant of Record

For orders processed through Paddle Checkout, the Paddle entity responsible under the Paddle Buyer Terms is the authorised reseller and Merchant of Record. The purchase contract for the transaction is concluded between the buyer and Paddle. Paddle is responsible in particular for payment processing, invoicing, applicable taxes, fraud prevention, payment-related customer service, withdrawals and refunds. sportimization GmbH remains the provider and licensor of the videocoach software.

Data processing and shared data

When you open and use Paddle Checkout, the data you enter there is transmitted directly to Paddle. This may include your name, billing address, email address, IP address, device and browser data, payment method, tax information, and order and transaction data. Paddle processes this data as an independent controller under its own privacy policy.

Paddle transmits to sportimization GmbH the buyer and transaction data required to perform the contract and provide the product. This may include name, address, email address, the licence purchased, order status, purchase history and the transaction information available in the Paddle dashboard. We do not receive complete card details or other complete payment details.

Purposes, legal bases and retention periods

We process the data received from Paddle to provide and activate the licence, administer the contract, provide technical support, handle queries and meet statutory retention and documentation obligations. The legal bases are Article 6(1)(b) and (c) GDPR and, where applicable, our legitimate interest in secure order processing, preventing misuse and supporting customers under Article 6(1)(f) GDPR. We retain the data only for as long as required for these purposes or by statutory retention periods.

Paddle and sportimization GmbH each act as independent controllers with respect to the buyer data exchanged between them. The buyer's location and transaction determine which Paddle entity is the contracting party and whether data is transferred to third countries. Details are available in the Paddle privacy policy, the Paddle Buyer Terms and the Paddle Refund Policy.

Technically necessary checkout functions

When you open Paddle Checkout, your browser establishes a direct connection to Paddle. Paddle may use technically necessary cookies or comparable storage technologies to provide checkout, payment processing, security checks and fraud prevention. The connection is made only when you start the ordering process through Paddle. Where storing or accessing information on your device is strictly necessary for the checkout you have expressly requested, this is based on Section 25(2) no. 2 TDDDG.