Privacy Policy

1. An overview of data protection

General information

The following information provides a brief overview of what happens to your personal data when you visit this website. Personal data is any data that can be used to identify you personally. Detailed information on data protection can be found in this Privacy Policy below.

Data collection on this website

Who is the responsible for data collection on this website?

The data collected on this website is processed by the website operator. The operator’s contact details can be found in the section “Information about the controller” in this Privacy Policy.

How do we collect your data?

Some data is collected when you provide it to us, for example by entering information in our contact form.

Other data is collected automatically by our IT systems or after you have given your consent when you visit the website. This primarily includes technical data, such as your web browser, operating system or the time at which you accessed the website. This data is collected automatically when you access this website.

What do we use your data for?

Some of the data is collected to ensure that the website functions correctly and without errors. Other data may be used to analyse how you use the website. If contracts can be concluded or initiated via the website, the data you provide will also be processed for contractual offers, orders or other enquiries relating to contracts.

What rights do you have regarding your data?

You have the right to obtain information, free of charge, about the origin, recipients and purposes of your personal data stored by us. You also have the right to request the rectification or deletion of your personal data. If you have consented to the processing of your data, you may withdraw your consent at any time with effect for the future. Under certain circumstances, you also have the right to request that the processing of your personal data be restricted. Furthermore, you have the right to lodge a complaint with the competent supervisory authority.

Please feel free to contact us at any time if you have any questions about this or any other data protection matters.

Analytics and third-party tools

When you visit this website, your browsing behaviour may be statistically analysed. This is primarily carried out using analytics tools.

Detailed information about these analytics tools can be found in this Privacy Policy below.

2. Hosting

We host the content of our website with the following provider:

External Hosting

This website is hosted externally. Personal data collected on this website is stored on the servers of the hosting provider. This may include, but is not limited to, IP addresses, contact requests, metadata and communication data, contractual data, contact details, names, website access data and other data generated through the use of a website.

External hosting is used for the purpose of fulfilling contracts with our prospective and existing customers (Art. 6(1)(b) GDPR) and in our legitimate interest in providing our online services securely, quickly and efficiently through a professional provider (Art. 6(1)(f) GDPR). Where appropriate consent has been obtained, processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR and Section 25(1) TDDDG, insofar as the consent covers the storage of cookies or access to information on the user’s device (e.g. device fingerprinting) within the meaning of the TDDDG. Consent may be withdrawn at any time.

Our hosting provider(s) will process your data only to the extent necessary to fulfil their contractual obligations and in accordance with our instructions regarding such data.

We use the following hosting provider:

RLS Jakobsmeyer GmbH
Vattmannstr. 4
33100 Paderborn
Germany

3. General and Mandatory Information

Data protection

The operators of this website take the protection of your personal data very seriously. We therefore treat your personal data confidentially and in accordance with the applicable data protection legislation and this Privacy Policy.

When you use this website, various types of personal data are collected. Personal data is data that can be used to identify you personally. This Privacy Policy explains what data we collect, what we use it for, and how and for what purposes it is processed.

Please note that data transmitted via the Internet, for example by e-mail, may be subject to security vulnerabilities. It is not possible to provide complete protection against access by third parties.

Information about the controller

The controller responsible for data processing on this website is:

Ahorn-Sportpark gGmbH
Ahornallee 20
D-33106 Paderborn
Germany

Phone: +49 (0) 5251 13711-0
E-mail:

The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data, such as names or e-mail addresses.

Storage period

Unless a more specific storage period is stated in this Privacy Policy, your personal data will remain with us until the purpose for which it was collected no longer applies. If you submit a legitimate request for deletion or withdraw your consent to data processing, your data will be deleted unless we have other legally permissible grounds for retaining it, for example retention periods required under tax or commercial law. In such cases, the data will be deleted once these grounds no longer apply.

General information on the legal basis for the data processing on this website

If you have consented to data processing, we process your personal data on the basis of Art. 6(1)(a) GDPR or Art. 9(2)(a) GDPR if special categories of personal data within the meaning of Art. 9(1) GDPR are processed.

Where you have expressly consented to the transfer of personal data to third countries, the processing is also based on Art. 49(1)(a) GDPR.

If you have consented to the storage of cookies or to access to information on your device, for example through device fingerprinting, the processing is additionally based on Section 25(1) TDDDG. Consent may be withdrawn at any time.

If your data is required for the performance of a contract or to take steps prior to entering into a contract, we process your data on the basis of Art. 6(1)(b) GDPR. If your data is required to comply with a legal obligation, we process it on the basis of Art. 6(1)(c) GDPR. Data may also be processed on the basis of our legitimate interests pursuant to Art. 6(1)(f) GDPR.

Information about the relevant legal basis in each individual case is provided in the following sections of this Privacy Policy.

Data Protection Officer

We have appointed a Data Protection Officer.

E-mail:

Recipients of personal data

As part of our business activities, we work with various external parties. In some cases, this requires personal data to be transferred to these parties.

We disclose personal data to external parties only where this is necessary for the performance of a contract, where we are legally obliged to do so, for example by disclosing data to tax authorities, where we have a legitimate interest in the disclosure pursuant to Art. 6(1)(f) GDPR, or where another legal basis permits the disclosure.

Where we use processors, we disclose our customers’ personal data only on the basis of a valid data processing agreement. In the case of joint processing, a joint processing agreement is concluded.

Withdrawal of your consent to data processing

Many data processing activities are only possible with your express consent. You may withdraw any consent you have previously given at any time. The withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

Right to object to processing in certain cases and to direkt marketing (Art. 21 GDPR)

IF DATA IS PROCESSED ON THE BASIS OF ART. 6(1)(E) OR (F) GDPR, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME, ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION, TO THE PROCESSING OF YOUR PERSONAL DATA. THIS ALSO APPLIES TO PROFILING BASED ON THESE PROVISIONS. THE RELEVANT LEGAL BASIS FOR PROCESSING CAN BE FOUND IN THIS PRIVACY POLICY.

IF YOU OBJECT, WE WILL NO LONGER PROCESS THE PERSONAL DATA CONCERNED UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING THAT OVERRIDE YOUR INTERESTS, RIGHTS AND FREEDOMS, OR UNLESS THE PROCESSING IS NECESSARY FOR THE ESTABLISHMENT, EXERCISE OR DEFENCE OF LEGAL CLAIMS (OBJECTION PURSUANT TO ART. 21(1) GDPR).

IF YOUR PERSONAL DATA IS PROCESSED FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA FOR SUCH MARKETING. THIS ALSO APPLIES TO PROFILING TO THE EXTENT THAT IT IS RELATED TO SUCH DIRECT MARKETING. IF YOU OBJECT, YOUR PERSONAL DATA WILL NO LONGER BE USED FOR DIRECT MARKETING PURPOSES (OBJECTION PURSUANT TO ART. 21(2) GDPR).

Right to lodge a complaint with the competent supervisory authority

In the event of an infringement of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, in particular in the Member State of their habitual residence, their place of work or the place of the alleged infringement. This right is without prejudice to any other administrative or judicial remedies.

Right to data portability

You have the right to receive data that we process automatically on the basis of your consent or in fulfilment of a contract in a commonly used, machine-readable format, or to have this data transmitted to a third party. If you request the direct transfer of the data to another controller, this will be carried out only where technically feasible.

Access, rectification and deletion

Within the scope of the applicable statutory provisions, you have the right at any time to obtain information about your personal data stored by us, including its origin and recipients and the purpose for which it is processed. You may also have the right to request the rectification or deletion of this data.

If you have any questions about this or any other matter relating to personal data, please feel free to contact us at any time.

Right to restriction of processing

You have the right to request that the processing of your personal data be restricted. You may contact us at any time to exercise this right. The right to restriction of processing applies in the following circumstances:

  • If you dispute the accuracy of your personal data stored by us, we will generally need time to verify its accuracy. While this verification is being carried out, you have the right to request that the processing of your personal data be restricted.
  • If your personal data has been processed unlawfully, you may request restriction of processing instead of deletion.
  • If we no longer need your personal data but you require it for the establishment, exercise or defence of legal claims, you have the right to request restriction of processing instead of deletion.
  • If you have objected to processing pursuant to Art. 21(1) GDPR, your interests and ours must be balanced. Until it has been determined whose interests prevail, you have the right to request restriction of the processing of your personal data.

If the processing of your personal data has been restricted, such data may, apart from storage, be processed only with your consent, for the establishment, exercise or defence of legal claims, for the protection of the rights of another natural or legal person, or for reasons of important public interest of the European Union or an EU Member State.

SSL and/or TLS encryption

For security reasons and to protect the transmission of confidential content, such as orders or enquiries that you send to us as the website operator, this website uses SSL or TLS encryption.

You can recognise an encrypted connection by the fact that the address in your browser changes from “http://” to “https://” and by the padlock symbol in your browser’s address bar.

When SSL or TLS encryption is enabled, data that you transmit to us cannot be read by third parties.

Unsolicited e-mails

We object to the use of contact details published as part of our legal notice obligations for the purpose of sending unsolicited advertising and information materials. The website operators expressly reserve the right to take legal action in the event of unsolicited promotional communications, such as spam e-mails.

4. Data Collection on This Website

Cookies

Our website uses cookies. Cookies are small files that are stored on your device and do not cause any damage to it. They may either be stored temporarily for the duration of a session (session cookies) or remain stored on your device for a longer period (persistent cookies). Session cookies are automatically deleted when you end your browsing session. Persistent cookies remain stored on your device until you delete them or they are automatically deleted by your web browser.

Cookies may be set by us (first-party cookies) or by third-party companies (third-party cookies). Third-party cookies make it possible to integrate certain third-party services into websites, for example payment services.

Cookies perform a variety of functions. Many cookies are technically necessary because certain website functions would not work without them, for example shopping basket functionality or the display of videos. Other cookies may be used to analyse user behaviour or for advertising purposes.

Cookies that are required for electronic communications, for the provision of certain functions that you wish to use, for example shopping basket functionality, or for the optimisation of the website (necessary cookies), for example cookies that provide measurable information about website traffic, are stored on the basis of Art. 6(1)(f) GDPR unless another legal basis is specified. The website operator has a legitimate interest in storing necessary cookies to ensure the technically error-free and optimised provision of its services.

Where consent to the storage of cookies and similar technologies has been requested, processing is carried out exclusively on the basis of the consent given (Art. 6(1)(a) GDPR and Section 25(1) TDDDG). Consent may be withdrawn at any time.

You can configure your browser to notify you when cookies are set and to allow cookies only in individual cases. You can also prevent cookies from being accepted in certain cases or altogether, or enable the automatic deletion of cookies when you close your browser. If cookies are disabled, some features of this website may be restricted.

If other cookies and services are used on this website, further information can be found in this Privacy Policy.

Cookie settings

Server log files

The provider of this website automatically collects and stores information in server log files, which your browser automatically transmits to us. This information includes:

  • Browser type and version
  • Operating system used
  • Referrer URL
  • Host name of the accessing computer
  • Time of the server request
  • IP address

This data is not combined with data from other sources.

This data is collected on the basis of Art. 6(1)(f) GDPR. The website operator has a legitimate interest in ensuring the technically error-free presentation and optimisation of the website. Server log files must be collected for this purpose.

Contact form

If you submit an enquiry using our contact form, the information you provide in the form, including your contact details, will be stored by us for the purpose of processing your enquiry and dealing with any follow-up questions. We will not disclose this information without your consent.

This data is processed on the basis of Art. 6(1)(b) GDPR if your enquiry relates to the performance of a contract or is necessary in order to take steps prior to entering into a contract. In all other cases, processing is based on our legitimate interest in responding effectively to enquiries addressed to us (Art. 6(1)(f) GDPR) or on your consent (Art. 6(1)(a) GDPR), where this has been requested. Consent may be withdrawn at any time.

The information you enter in the contact form will remain with us until you request its deletion, withdraw your consent to its storage, or the purpose for storing the data no longer applies, for example once your enquiry has been fully dealt with. Mandatory statutory provisions, in particular statutory retention periods, remain unaffected.

Enquiries by e-mail, telephone or fax

If you contact us by e-mail, telephone or fax, your enquiry, including any personal data arising from it, such as your name and the content of your enquiry, will be stored and processed by us for the purpose of dealing with your request. We will not disclose this data without your consent.

This data is processed on the basis of Art. 6(1)(b) GDPR if your enquiry relates to the performance of a contract or is necessary in order to take steps prior to entering into a contract. In all other cases, processing is based on our legitimate interest in responding effectively to enquiries addressed to us (Art. 6(1)(f) GDPR) or on your consent (Art. 6(1)(a) GDPR), where this has been obtained. Consent may be withdrawn at any time.

The data you send to us as part of a contact request will remain with us until you request its deletion, withdraw your consent to its storage, or the purpose for storing it no longer applies, for example once your request has been fully dealt with. Mandatory statutory provisions, in particular statutory retention periods, remain unaffected.

5. Analytics and Advertising

Google Analytics

This website uses Google Analytics, a web analytics service provided by Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics enables the website operator to analyse how visitors use the website. For this purpose, the website operator receives various types of usage data, such as the pages visited, time spent on individual pages, the operating system used and the user’s approximate geographical origin. This data is assigned to the user’s device. It is not assigned to a user ID.

Google Analytics also allows us to record mouse and scrolling movements and clicks, among other things. Google Analytics uses various modelling approaches to supplement the data collected and uses machine-learning technologies to analyse the data.

Google Analytics uses technologies that enable users to be recognised for the purpose of analysing their behaviour, for example cookies or device fingerprinting. Information about the use of this website collected by Google is generally transmitted to a Google server in the United States and stored there.

The use of this service is based on your consent pursuant to Art. 6(1)(a) GDPR and Section 25(1) TDDDG. You may withdraw your consent at any time.

Data transfers to the United States are based on the Standard Contractual Clauses (SCCs) issued by the European Commission. Further details can be found at:

https://business.safety.google/adscontrollerterms/sccs/

Google is certified under the EU-US Data Privacy Framework (DPF). The DPF is an agreement between the European Union and the United States intended to ensure compliance with European data protection standards when personal data is processed in the United States. Companies certified under the DPF are required to comply with these data protection standards.

Further information is available at:

https://www.dataprivacyframework.gov/participant/5780

Cookie settings

IP anonymization

Google Analytics IP anonymisation is enabled. This means that your IP address is shortened by Google within Member States of the European Union or other states that are parties to the Agreement on the European Economic Area before being transmitted to the United States. Only in exceptional cases will the full IP address be transmitted to a Google server in the United States and shortened there.

On behalf of the operator of this website, Google will use this information to analyse your use of the website, compile reports on website activity and provide the website operator with other services relating to website and Internet usage. The IP address transmitted by your browser as part of Google Analytics will not be combined with other data held by Google.

Browser plug-in

You can prevent Google from collecting and processing your data by downloading and installing the browser plug-in available at:

https://tools.google.com/dlpage/gaoptout?hl=en

Further information about how Google Analytics handles user data can be found in Google’s privacy information at:

https://support.google.com/analytics/answer/6004245?hl=en

6. Plug-ins and Tools

Google Maps

This website uses the Google Maps mapping service. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland. This service allows us to integrate maps into our website.

To use Google Maps features, your IP address must be processed. As a rule, this information is transmitted to a Google server in the United States and stored there. The operator of this website has no control over this data transfer.

If Google Maps is activated, Google may use Google Fonts to ensure the consistent display of fonts. When you access Google Maps, your browser loads the required web fonts into its browser cache so that text and fonts can be displayed correctly.

We use Google Maps to present our online content in an attractive manner and to make the locations shown on our website easy to find. This constitutes a legitimate interest within the meaning of Art. 6(1)(f) GDPR.

Where appropriate consent has been obtained, processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR and Section 25(1) TDDDG, insofar as the consent covers the storage of cookies or access to information on the user’s device, for example device fingerprinting, within the meaning of the TDDDG. Consent may be withdrawn at any time.

Data transfers to the United States are based on the Standard Contractual Clauses (SCCs) issued by the European Commission. Further details can be found at:

https://privacy.google.com/businesses/gdprcontrollerterms/

https://privacy.google.com/businesses/gdprcontrollerterms/sccs/

Further information on how Google handles user data can be found in Google’s Privacy Policy at:

https://policies.google.com/privacy?hl=en

Google is certified under the EU-US Data Privacy Framework (DPF). The DPF is an agreement between the European Union and the United States intended to ensure compliance with European data protection standards when personal data is processed in the United States. Companies certified under the DPF are required to comply with these data protection standards.

Further information is available at:

https://www.dataprivacyframework.gov/participant/5780

Cookie settings