Data Protection
Privacy
Policy
Unless otherwise stated below, the provision of your personal data is neither required by law nor by contract, nor is it necessary for the conclusion of a contract. You are under no obligation to provide this data. Failure to provide such data will have no consequences. This applies only insofar as no other information is provided in relation to the processing operations described below.
“Personal data” means any information relating to an identified or identifiable natural person.
Server log files
You may visit our website without providing any personal details. Each
time you access our website, usage data is transmitted to us or our web host / IT service provider via your internet browser and stored in log files (so-called server log files). This stored data includes, for example, the name of the page accessed, the date and time of access, the IP address, the volume of data transferred and the requesting internet service provider.
Processing is carried out on the basis of Article 6(1)(f) of the GDPR, in accordance with our overriding legitimate interest in ensuring the smooth operation of our website and in improving our services.
Contact
Data Controller/Data Protection Officer
Please contact us if you wish. The data controller is: Vitali Sobnin, Eugen Klaussner Strasse 18, 77723 Gengenbach, Germany, 0780392648170, vitali.sobnin@staterabikes.de
You can contact our Data Protection Officer directly at: ds-staterabikes@die-dsb-gmbh.de
Unsolicited contact from customers via email
If you contact us on your own initiative via email, we will collect your personal data (name, email address, message text) only to the extent that you provide it. The data processing is carried out for the purpose of handling and responding to your enquiry.
If the contact is made for the purpose of carrying out pre-contractual measures (e.g. providing advice regarding an interest in purchasing, preparing a quotation) or relates to a contract already concluded between you and us, this data processing is carried out on the basis of Article 6(1)(b) of the GDPR.
If the contact is made for other reasons, this data processing is carried out on the basis of Article 6(1)(f) f of the GDPR, based on our overriding legitimate interest in processing and responding to your enquiry. In this case, you have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data based on Article 6(1)(f) of the GDPR.
We use your email address solely to process your enquiry. Your data will subsequently be deleted in accordance with statutory retention periods, provided you have not consented to further processing and use.
Collection and processing when using the contact form
When you use the contact form, we collect your personal data (name, email address, message text) only to the extent that you provide them. The purpose of this data processing is to establish contact.
If establishing contact serves the purpose of carrying out pre-contractual measures (e.g. providing advice in the event of an interest in purchasing, preparing a quotation) or relates to a contract already concluded between you and us, this data processing is carried out on the basis of Article 6(1)(b) of the GDPR.
If contact is made for other reasons, this data processing is carried out on the basis of Article 6(1)(f) of the GDPR, based on our overriding legitimate interest in processing and responding to your enquiry. In this case, you have the right, on grounds relating to your particular situation, to object at any time to the processing of your personal data based on Article 6(1)(f) of the GDPR.
We will only use your email address to process your enquiry. Your data will subsequently be deleted in accordance with statutory retention periods, provided you have not consented to further processing and use.
Collection and processing when using the withdrawal button
If you have concluded a contract via our website, we provide you with a withdrawal function (withdrawal button) at
, via which you can submit your notice of withdrawal immediately.
When you use the withdrawal function, we collect your personal data (name, email address, details identifying the contract or part of the contract at
that you wish to withdraw from, and the time (date and time) of submission of the notice of withdrawal)
only to the extent that you have provided it. The purpose of this data processing is to provide you with the legally required
option to withdraw from your contract and to ensure the proper processing of your withdrawal.
If the contact relates to a contract already concluded between you and us, this data processing is carried out on the
basis of Article 6(1)(b) of the GDPR. Otherwise, data processing is carried out on the basis of Article 6(1)(c) of the GDPR, to
fulfil a legal obligation to provide you with a withdrawal function on our website.
We use your email address solely to process your notice of withdrawal. Your data will subsequently be deleted in accordance with statutory
retention periods, provided you have not consented to further processing and use.
The processing of your personal data serves the purpose of complying with the legal requirements for the design of the withdrawal function in a legally compliant manner and is carried out on the basis of Article 6(1)(c) of the GDPR. This data processing is also carried out on the basis of Article 6(1) 1(f) of the GDPR, based on our overriding legitimate interest in being able to provide you with a user-friendly cancellation option at . In this case, you have the right, on grounds relating to your particular situation, to object at any time to the processing of your personal data based on Article 6(1)( f of the GDPR, to .
Customer Account Orders
Customer Account
When you open a customer account, we collect your personal data to the extent specified there. The purpose of data processing is to improve your shopping experience and to simplify order processing. Processing is carried out on the basis of Article 6(1)(a) of the GDPR with your consent. You may withdraw your consent at any time by notifying us, without this affecting the lawfulness of the processing carried out on the basis of your consent up to the point of withdrawal. Your customer account will then be deleted.
Collection, processing and disclosure of personal data when placing orders
When you place an order, we collect and process your personal data only to the extent necessary to fulfil and process your order and to handle your enquiries. The provision of this data is necessary for the conclusion of the contract. Failure to provide this data means that no contract can be concluded. Processing is carried out on the basis of Article 6(1)(b) of the GDPR and is necessary for the performance of a contract with you.
Your data may be disclosed, for example, to the delivery companies and dropshipping providers you have selected, payment service providers, service providers for order processing and IT service providers. In all cases, we strictly comply with the legal requirements. The scope of data transfer is limited to the minimum necessary.
Reviews and Advertising
Data collection when submitting a comment or review When
you comment on or review an item or a post, we collect your personal data (name, email address, comment text) only to the extent that you provide it. The processing serves the purpose of enabling you to comment on orrating and to display comments and ratings.
By submitting your comment or rating, you consent to the processing of the data provided. Processing is carried out on the basis of Article 6(1)(a) of the GDPR with your consent. You may withdraw your consent at any time by notifying us, without this affecting the lawfulness of the processing carried out on the basis of your consent up until the time of withdrawal. Your personal data will then be deleted.
When your comment is published, only the name you have provided will be displayed.
Use of your email address for sending newsletters
We use your email address, independently of the fulfilment of the contract, exclusively for our own advertising purposes to send newsletters, provided you have expressly consented to this. Processing is carried out on the basis of Article 6(1)(a) of the GDPR with your consent. You may withdraw your consent at any time without this affecting the lawfulness of the processing carried out on the basis of your consent prior to its withdrawal. To do so, you can unsubscribe from the newsletter at any time by using the relevant link in the newsletter or by notifying us. Your email address will then be removed from the mailing list.
Your data will be passed on to an emailas part of data processing on our behalf. Your data will not be passed on to any other third parties.
Shipping service provider, inventory management
Disclosure of your email address to the shipping company to provide information on the dispatch status
We will pass on your email address to the shipping company as part of the fulfilment of the contract, provided you have expressly consented to this during the ordering process. The purpose of this transfer is to inform you of the dispatch status by email. Processing takes place on the basis of Article 6(1)(a) of the GDPR with your consent. You may withdraw your consent at any time by notifying us or the courier company, without this affecting the lawfulness of the processing carried out on the basis of your consent prior to its withdrawal.
Use of an external merchandise management system
We use a merchandise management system for contract fulfilment as part of data processing on behalf of a third party. To this end, your personal data collected as part of the order is transferred to HIW Gesellschaft für Warenwirtschaftssysteme mbH (Berblingerstraße 1, 71254 Ditzingen).
Payment service provider Credit reference
Use of PayPal
We use the PayPal payment service on our website
,
provided by PayPal (Europe) S.à.r.l. et Cie, S.C.A. (22-24 Boulevard Royal L-2449, Luxembourg; “PayPal”). The purpose of this data processing is to enable us to offer you payment via this payment service. When you select and use PayPal as your payment method, the data required for payment processing is transmitted to PayPal so that we can fulfil the contract with you using the selected payment method. This processing is carried out on the basis of Article 6( 1(b) of the GDPR.
All PayPal transactions are subject to the PayPal Privacy Policy. This can be found at https://www.paypal.com/de/webapps/mpp/ua/privacy-full
Use of PayPal Plus
We use the PayPal Plus payment service provided by PayPal (Europe) S.à.r.l. et Cie, S.C.A. (22-24 Boulevard Royal L-2449, Luxembourg; “PayPal”). The purpose of this data processing is to enable us to offer you payment via this payment service. When you select and use payment via PayPal, credit card via PayPal or direct debit via PayPal, the data required for payment processing is transmitted to PayPal so that we can fulfil the contract with you using the selected payment method. This processing is carried out on the basis of Article 6(1)(b) of the GDPR.
For certain payment methods, such as credit card via PayPal or direct debit via PayPal, PayPal reserves the right, where necessary, to obtain a credit check based on mathematical and statistical methods using credit reference agencies. To this end, PayPal transfers the personal data required for a credit check to a credit reference agency and uses the information received regarding the statistical probability of payment default to make a balanced decision on the establishment, performance or termination of the contractual relationship. The credit report may contain probability values (scores) which are calculated on the basis of scientifically recognised mathematical and statistical methods and which incorporate, amongst other things, address data. Your legitimate interests are taken into account in accordance with the statutory provisions. The data processing serves the purpose of a credit check for the initiation of a contract. Processing is carried out on the basis of Article 6(1)(f) of the GDPR, based on our overriding legitimate interest in protecting against non-payment where PayPal makes an advance payment.
You have the right, on grounds relating to your particular situation, to object at any time to the processing of your personal data based on Article 6(1)( GDPR by notifying PayPal. The provision of the data is necessary for the conclusion of the contract using your preferred payment method. Failure to provide the data will mean that the contract cannot be concluded using your chosen payment method.
Use of PayPal Express
We use the PayPal Express payment service provided by PayPal (Europe) S.à.r.l. et Cie, S.C.A. (22–24 Boulevard Royal, L-2449, Luxembourg; “PayPal”) on our website. The purpose of data processing is to enable us to offer you payment via the PayPal Express payment service. In order to integrate this payment service, it is necessary for PayPal to collect, store and analyse data (e.g. IP address, device type, operating system, browser type, location of your device). Cookies may also be used for this purpose. The cookies enable your browser to be recognised.
The processing of your personal data is carried out on the basis of Article 6(1)(f) of the GDPR, based on our overriding legitimate interest in providing a customer-oriented range of payment methods. You have the right, on grounds relating to your particular situation, to object at any time to the processing of your personal data.
By selecting and using PayPal Express, the data required for payment processing is transmitted to PayPal in order to fulfil the contract with you using the selected payment method. This processing is carried out on the basis of Article 6(1)(b) of the GDPR. Further information on data processing when using the PayPal Express payment service can be found in the relevant privacy policy at www.paypal.com/de/webapps/mpp/ua/privacy-full?locale.x=de_DE#Updated_PS.
Data collection and processing when registering for instalment purchases and purchase on account via easyCredit
When paying by instalment or on account via easyCredit, the supplementary privacy notice on instalment purchases from easyCredit applies.
Data collection and processing during credit checks by Creditreform Boniversum
Weregularly check the creditworthiness of customers when contracts are concluded and, in certain cases where there is a legitimate interest, also for existing customers. To this end, we work with Creditreform Boniversum GmbH, Hammfelddamm 13, 41460 Neuss, from whom we receive the data required for this purpose. For this purpose, we transfer your name and contact details to Creditreform Boniversum GmbH. The information pursuant to Article 14 of the GDPR regarding the data processing carried out by Creditreform Boniversum GmbH can be found here: www.boniversum.de/EU-DSGVO
Cookies
Our website uses cookies. Cookies are small text files that are stored in the web browser or by the web browser on a user’s computer system. When a user visits a website, a cookie may be stored on the user’s operating system. This cookie contains a distinctive string of characters that enables the browser to be uniquely identified when the website is visited again.
Cookies are stored on your computer. You therefore have full control over the use of cookies. By selecting the appropriate technical settings in your web browser, you can be notified before cookies are set and decide on a case-by-case basis whether to accept them, as well as prevent the storage of cookies and the transmission of the data they contain. Cookies that have already been stored can be deleted at any time. However, please note that you may then not be able to make full use of all the features of this website.
The links below provide information on how to manage (including disabling) cookies in the most common browsers: :
Chrome: https://support.google.com/accounts/answer/61416?hl=de
Microsoft Edge: https://support.microsoft.com/de-de/microsoft-edge/cookies-in-microsoft-edge-lB6schen-63947406-40ac-c3b8-57b9-2a946a29ae09
Mozilla Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
Safari : https://support.apple.com/de-de/guide/safari/manage-cookies-and-website-data-sfri11471/mac
Technically necessary cookies
Unless otherwise stated in the privacy policy below, we only use these technically necessary cookies for the purpose of make our website more user-friendly, effective and secure. Furthermore, cookies enable our systems to recognise your browser even after you have navigated to another page and to offer you services. Some functions of our website cannot be provided without the use of cookies. For these, it is necessary for the browser to be recognised even after you have navigated to another page.
The use of cookies or similar technologies is based on Section 25(2) of the TTDSG. The processing of your personal data is based on Article 6(1)(f) of the GDPR, based on our overriding legitimate interest in ensuring the optimal functionality of the website and a user-friendly and effective design of our service.
You have the right, on grounds relating to your particular situation, to object at any time to the processing of your personal data.
Use of Cookiebot
We use the consent management tool ‘Cookiebot’ on our website, provided by Cybot A/S, Havnegade 39, 1058 Copenhagen, Denmark; “Cookiebot”).
This tool enables you to give consent to data processing via the website, in particular the setting of cookies, and to exercise your right to withdraw consent that has already been given. The purpose of data processing is to obtain and document the necessary consents for data processing and thereby comply with legal obligations.
Cookies may be used for this purpose. In doing so, the following information, amongst other things, may be collected and transmitted to Cookiebot: anonymised IP address, date and time of consent, URL from which the consent was sent, anonymous, random, encrypted key, consent status. This data is not passed on to any other third parties.
Data processing is carried out to fulfil a legal obligation on the basis of Article 6(1)(c) of the GDPR.
Further information on data protection at Cookiebot can be found at: https://www.cookiebot.com/de/privacy-policy/
Analysis, advertising tracking, communication
Use of Google Analytics
We use the web analytics service Google Analytics, provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; ‘Google’), on our website.
The purpose of data processing is to analyse this website and its visitors, as well as for marketing and advertising purposes. To this end, Google will use the information collected on behalf of the operator of this website to evaluate your use of the website, to compile reports on website activity and to provide the website operator with further services relating to website and internet usage. The following information, amongst other things, may be collected: IP address, date and time of the page visit, click path, information about the browser and device you are using, pages visited, referrer URL (the website via which you accessed our website), location data, and purchasing activities. The IP address transmitted by your browser as part of Google Analytics is not combined with other data held by Google.
Google Analytics uses technologies such as cookies, in-browser storage and web beacons, which enable an analysis of your use of the website. The information generated in this way regarding your use of this website is usually transferred to a Google server in the USA and stored there. An adequacy decision by the European Commission is in place for the USA: the Trans-Atlantic Data Privacy Framework (TADPF). Google has obtained certification under the TADPF and has thereby committed to complying with European data protection principles. Both Google and US government authorities have access to your data. Your data may be linked by Google to other data, such as your search history, your personal accounts, your usage data from other devices and any other data that Google holds about you.
IP anonymisation is enabled on this website. This means that your IP address is truncated by Google within Member States of the European Union or in other signatory states to the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and truncated there.
The use of cookies or similar technologies takes place with your consent on the basis of Section 25( 1(1) of the TTDSG in conjunction with Article 6(1)(a) of the GDPR. The processing of your personal data takes place with your consent on the basis of Article 6(1)(a) of the GDPR. You may withdraw your consent at any time, without this affecting the lawfulness of the processing carried out on the basis of your consent up to the point of withdrawal.
Further information on terms of use and data protection can be found at https://www.google.com/analytics/terms/de.html or at https://www.google.de/intl/de/policies/ and at https://policies.google.com/technologies/cookies?hl=de.
Use of Google Analytics 4
We use the web analytics service Google Analytics, provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; ‘Google’), on our website.
The data is processed for the purpose of analysing this website and its visitors, as well as for marketing and advertising purposes. To this end, Google will, on behalf of the operator of this website, use the information collected to evaluate your use of the website, to compile reports on website activity and to provide the website operator with other services relating to website and internet usage.
The following information, amongst other things, may be collected: IP address, date and time of the page view, click path, information about the browser and device you are using, pages visited, referrer URL (the website via which you accessed our website), location data, purchasing activity. The IP address transmitted by your browser as part of Google Analytics is not combined with other data held by Google.
Google uses technologies such as cookies, in-browser storage and web beacons, which enable an analysis of your use of the website.
The information generated in this way regarding your use of this website is usually transferred to a Google server in the USA and stored there. An adequacy decision by the European Commission is in place for the USA, namely the Trans-Atlantic Data Privacy Framework (TADPF). Google has obtained certification under the TADPF and has thereby committed to complying with European data protection principles. Both Google and US government authorities have access to your data. Your data may be linked by Google to other data, such as your search history, your personal accounts, your usage data from other devices and any other data that Google holds about you.
When using Google Analytics 4, the IP address transmitted by your website is automatically collected and processed in an anonymised form. The IP address is truncated by Google within Member States of the European Union or in other signatory states to the Agreement on the European Economic Area.
The use of cookies or similar technologies is subject to your consent on the basis of Section 25(1), first sentence, of the German Telemedia Act (TTDSG) in conjunction with Article 6(1)(a) of the GDPR. The processing of your personal data is carried out with your consent on the basis of Article 6(1)(a) of the GDPR. You may withdraw your consent at any time without this affecting the lawfulness of the processing carried out on the basis of your consent prior to its withdrawal.
Further information on terms of use and data protection can be found at https://policies.google.com/technologies/partner-sites and at https://policies.google.com/privacy?hl=de&gl=de.
Use of Microsoft Clarity
We use the analytics tool “Microsoft Clarity” provided by Microsoft Ireland Operations Limited (One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland; “Microsoft”) on our website. Microsoft is an affiliate of Microsoft Corporation (One Microsoft Way, Redmond, Washington 98052, USA).
The data is processed for the purpose of tailoring, optimising and analysing our website in line with user needs. The tool records the movements of website visitors on a randomised basis. This generates a log of mouse movements, scrolling behaviour, time spent on the site and clicks on the website (known as a ‘heatmap’).
Cookies or similar technologies are used for this purpose. The following information, amongst other things, may be collected: IP address, time of access, click path, information about the device you are using (device type, screen size and resolution, unique device identifier, operating system), information about the browser you are using (browser type and version), location data, preferred language for displaying the website, subpages visited, duration of visit, content viewed, website or file requested.
User profiles are created from this data under a pseudonym. The data is not used to personally identify visitors to the website and is not combined with the personal data of the person behind the pseudonym. Microsoft is contractually prohibited from selling the collected data to other third parties.
Your data may be transferred to the USA. An adequacy decision by the European Commission is in place for the USA, namely the Trans-Atlantic Data Privacy Framework (TADPF). Microsoft has obtained certification under the TADPF and is therefore obliged to comply with European data protection principles.
The use of cookies or similar technologies takes place with your consent on the basis of Section 25(1), first sentence, of the TDDDG in conjunction with Article 6(1)(a) of the GDPR. The processing of your personal data takes place with your consent on the basis of Article 6(1)(a) of the GDPR. You may withdraw your consent at any time without this affecting the lawfulness of the processing carried out on the basis of your consent prior to its withdrawal.
Detailed information on the cookies used and their functions can be found at https://learn.microsoft.com/en-us/clarity/setup-and-installation/cookie-list. Information on the retention period for the data collected can be found at https://learn.microsoft.com/en-us/clarity/setup-and-installation/data-retention. Further information on data protection when using Microsoft Clarity can be found at https://learn.microsoft.com/en-us/clarity/faq#privacy, https://learn.microsoft.com/en-us/clarity/setup-and-installation/clarity-data and https://clarity.microsoft.com/terms. General information on data protection at Microsoft can be found at https://privacy.microsoft.com/de-de/privacystatement.
Use of the Facebook Pixel
We use the ‘Custom Audiences’ remarketing feature provided by Meta Platforms Ireland Limited (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, ‘Facebook’) on our website.
Meta Platforms Ireland and we are joint controllers for the collection of your data and the transfer of this data to Facebook that takes place when the service is integrated. The basis for this is an agreement between us and Meta Platforms Ireland on the joint processing of personal data, which sets out the respective responsibilities. The agreement can be accessed at https://www.facebook.com/legal/controller_addendum. Under this agreement, we are specifically responsible for fulfilling the information obligations under Articles 13 and 14 of the GDPR, for complying with the security requirements of Article 32 of the GDPR with regard to the correct technical implementation and configuration of the service, and for complying with the obligations under Articles 33 and 34 of the GDPR, insofar as a personal data breach affects our obligations under the joint processing agreement. Meta Platforms Ireland is responsible for facilitating data subjects’ rights in accordance with Articles 15–20 of the GDPR, for complying with the security requirements of Article 32 of the GDPR with regard to the security of the service, and to fulfil the obligations under Articles 33 and 34 of the GDPR, insofar as a personal data breach affects Meta Platforms Ireland’s obligations under the joint processing agreement.
The purpose of this application is to target website visitors with interest-based advertising on the Facebook social network. To this end, Facebook’s remarketing tag has been implemented on the website. When you visit the website, this tag establishes a direct connection to Facebook’s servers. This transmits information to the Facebook server regarding which of our pages you have visited. Facebook associates this information with your personal Facebook user account. When you visit the Facebook social network, you will then be shown personalised, interest-based Facebook adverts.
Your data may be transferred to the USA. An adequacy decision by the European Commission is in place for the USA: the Trans-Atlantic Data Privacy Framework (TADPF). Meta has obtained certification under the TADPF and is therefore committed to complying with European data protection principles.
The use of cookies or similar technologies is subject to your consent on the basis of Section 25(1), first sentence, of the TTDSG in conjunction with Article 6(1)(a) of the GDPR. The processing of your personal data takes place with your consent on the basis of Article 6(1)(a) of the GDPR. You may withdraw your consent at any time without this affecting the lawfulness of the processing carried out on the basis of your consent prior to its withdrawal.
Further information on the collection and use of data by Facebook, your rights in this regard and ways to protect your privacy can be found in Facebook’s privacy policy at https://www.facebook.com/about/privacy/.
Use of Google Ads conversion tracking
We use the online advertising programme ‘Google Ads’ on our website and, as part of this, conversion tracking (visitor action analysis). Google Conversion Tracking is an analytics service provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; Google).
When you click on an advert placed by Google, a conversion tracking cookie is stored on your computer. These cookies have a limited validity period, do not contain any personal data and therefore cannot be used to identify you personally. If you visit certain pages on our website and the cookie has not yet expired, Google and we can recognise that you clicked on the advert and were redirected to that page. Each Google Ads customer is assigned a different cookie. Consequently, it is not possible for cookies to be tracked across the websites of different Ads customers.
The information collected via the conversion cookie is used to compile conversion statistics. This enables us to determine the total number of users who have clicked on one of our adverts and been redirected to a page tagged with a conversion tracking tag. However, we do not receive any information that can be used to personally identify users.
Your data may be transferred to the servers of Google LLC in the USA. An adequacy decision by the European Commission is in place for the USA: the Trans-Atlantic Data Privacy Framework (TADPF). Google has obtained certification under the TADPF and is therefore committed to complying with European data protection principles.
The use of cookies or similar technologies is subject to your consent on the basis of Section 25(1), first sentence, of the TTDSG in conjunction with Article 6(1)(a) of the GDPR. The processing of your personal data is carried out with your consent on the basis of Article 6(1)(a) of the GDPR. You may withdraw your consent at any time without this affecting the lawfulness of the processing carried out on the basis of your consent prior to its withdrawal.
Further information and Google’s privacy policy can be found at: https://www.google.de/policies/privacy/
Use of the remarketing or ‘similar audiences’ function provided by Google Inc.
We use the remarketing or ‘Similar Audiences’ feature provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; ‘Google’) on our website.
This feature is used to analyse visitor behaviour and interests. To analyse website, which forms the basis for the creation of interest-based adverts, Google uses cookies. These cookies are used to record visits to the website and anonymised data on website usage. No personal data relating to website visitors is stored. If you subsequently visit another website within the Google Displaynetwork, you will be shown adverts that are highly likely to take into account product and information sections you have previously viewed.
Your data may be transferred to servers operated by Google LLC in the USA. An adequacy decision by the European Commission is in place for the USA, namely the Trans-Atlantic Data Privacy Framework (TADPF). Google has obtained certification under the TADPF and is therefore obliged to comply with European data protection principles.
The use of cookies or similar technologies takes place with your consent on the basis of Section 25( 1(1) of the TTDSG in conjunction with Article 6(1)(a) of the GDPR. The processing of your personal data takes place with your consent on the basis of Article 6(1)(a) of the GDPR. You may withdraw your consent at any time without this affecting the lawfulness of the processing carried out on the basis of your consent prior to its withdrawal.
Further information on Google Remarketing and the associated privacy policy can be found at: https://www.google.com/privacy/ads/
Use of Microsoft Advertising
We use Microsoft Advertising from Microsoft Corporation (Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA; “Microsoft”) on our website.
Data processing serves marketing and advertising purposes, as well as the purpose of measuring the effectiveness of advertising campaigns (conversion tracking). We are informed of the total number of users who have clicked on one of our adverts and been redirected to a page tagged with a conversion tracking tag. However, this does not allow these users to be personally identified. Microsoft Advertising uses technologies such as cookies and web beacons, which enable an analysis of your use of the website. When you click on an advert placed by Microsoft Advertising, a cookie for conversion tracking is stored on your computer. This cookie has a limited validity period and is not used for personal identification. If you visit certain pages on our website and the cookie has not yet expired, Microsoft and we can recognise that you clicked on the advert and were redirected to that page. The following information, amongst other things, may be collected: IP address, identifiers (tags) assigned by Microsoft, information about the browser you are using and the device you are using, referrer URL (the website via which you accessed our website), and the URL of our website.
Your data may be transferred to the USA. An adequacy decision by the European Commission is in place for the USA, namely the Trans-Atlantic Data Privacy Framework (TADPF). Microsoft has obtained certification under the TADPF and is therefore committed to complying with European data protection principles.
The use of cookies or similar technologies is subject to your consent on the basis of Section 25(1), first sentence, of the TTDSG in conjunction with Article 6(1)(a) of the GDPR. The processing of your personal data is carried out with your consent on the basis of Article 6(1)(a) of the GDPR. You may withdraw your consent at any time without this affecting the lawfulness of the processing carried out on the basis of your consent prior to its withdrawal.
Further information on data protection and the cookies used by Microsoft can be found here:
Use of Criteo
We use technology provided by Criteo SA (32 Rue Blanche, 75009 Paris, France; “Criteo”) on our website.
The purpose of this is to target website visitors with interest-based advertising in the form of personalised advertising banners on other websites (known as ‘publishers’). To do this, Criteo uses technologies such as cookies, which enable your browser to be recognised.
The following information, amongst other things, may be collected and transmitted to Criteo: referrer URL, pages visited on our website, date and time of the visit, your smartphone’s advertising ID, information about the browser and device you are using, and the contents of your shopping basket. Usage profiles may be created from the data collected in this way using pseudonyms. However, this does not allow users to be personally identified.
The use of cookies or similar technologies is subject to your consent in accordance with Section 25(1), first sentence, of the TTDSG in conjunction with Article 6(1)(a) of the GDPR. The processing of your personal data is carried out with your consent on the basis of Article 6(1)(a) of the GDPR. You may withdraw your consent at any time without this affecting the lawfulness of the processing carried out on the basis of your consent prior to its withdrawal.
Further information on data processing and data protection can be found at https://www.criteo.com/de/privacy and https://www.criteo.com/de/privacy/how-we-use-your-data/.
Use of the Freshdesk
ticketing system
We use the Freshdesk ticketing system, a customer service platform provided by Freshworks Inc. (company no: 4861858), 16192 Coastal Highway, Lewes, Delaware 19958, USA.
Freshdesk is fully GDPR-compliant. Its data protection, security and data retention policies are also in line with the objectives and requirements of the GDPR.
Further information on data processing by Freshdesk can be found at https://www.freshworks.com/de/freshdesk/dsgvo/ or https://www.freshworks.com/privacy/. If you have any questions, you can also contact Freshworks’ data protection officers directly: dpo@freshworks.com.
Use of the Smartsupp
live chat system We use the live chat system provided by Smartsupp.com, s.r.o. (Šumavská 31, 602 00 Brno, Czech Republic; “Smartsupp”) on a data processing basis.
The purpose of this data processing is to facilitate direct and efficient communication between you and us as the provider. In doing so, anonymised data is also collected and stored for marketing and optimisation purposes, from which usage profiles may be created under a pseudonym.
When you visit our website, the chat widget is loaded in the form of a JavaScript file from AWS CloudFront, which enables the chat function technically.
To operate the live chat system, cookies are also used to recognise your browser. Among other things, the following information may be collected and processed: IP address, pages visited, information about the browser and device used, as well as personal data provided by you when using the chat system.
The processing of your personal data is carried out on the basis of Article 6(1)(f) of the GDPR, based on our overriding legitimate interest in direct customer communication. You have the right to object at any time to the processing of your personal data on grounds relating to your particular situation.
You can prevent the storage of cookies by selecting the appropriate technical settings in your browser software; however, we would like to point out that, in this case, you may not be able to make full use of all the functions of this website.
Further information on data processing at Smartsupp can be found at https://www.smartsupp.com/help/privacy-policy/ and https://www.smartsupp.com/help/privacy/
Plug-ins and other features
Use of Google Tag Manager
We use Google Tag Manager, provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; “Google”), on our website.
This application manages JavaScript tags and HTML tags, which are used in particular to implement tracking and analytics tools. The purpose of data processing is to tailor the design of our website to users’ needs and to optimise it.
Google Tag Manager itself does not store any cookies, nor does it process any personal data. However, it enables the triggering of other tags that may collect and process personal data.
Further information on the terms of use and data protection can be found here:
Use of Google reCAPTCHA
We use the reCAPTCHA service provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; “Google”). The purpose of this check is to distinguish between input by a human and that generated by automated, machine-based processing. To this end, your input is transmitted to Google and processed there. In addition, your IP address and, where applicable, other data required by Google for the reCAPTCHA service are transmitted to Google. This data is processed by Google within the European Union and, where applicable, may also be transferred to servers operated by Google LLC in the USA. An adequacy decision by the European Commission is in place for the USA: the Trans-Atlantic Data Privacy Framework (TADPF). Google has obtained certification under the TADPF and is therefore obliged to comply with European data protection principles.
The use of cookies or similar technologies takes place with your consent on the basis of Section 25(1), first sentence, of the TTDSG in conjunction with Article 6(1)(a) of the GDPR. The processing of your personal data takes place with your consent on the basis of Article 6(1)(a) of the GDPR. You may withdraw your consent at any time without this affecting the lawfulness of the processing carried out on the basis of your consent prior to its withdrawal.
Further information on Google reCAPTCHA and the associated privacy policy can be found at: https://www.google.com/recaptcha/intro/android.html and https://www.google.com/privacy.
Use of DooFinder
Search technology “doofinder, powering results”
To make your visit to our online shop more appealing and to present you with faster and better search results, we use the “DooFinder” search technology. This serves to safeguard our overriding legitimate interest, following a balancing of interests, in optimising the presentation of our offering in accordance with Article 6(1)(f) of the GDPR.
The operator of this technology is DooFinder S.L., Madrid 28037, Rufino González 23 bis, 1º 1, Spain. In order to use the DooFinder search function, the browser you are using must establish a connection to DooFinder’s servers. This enables DooFinder to recognise that our online shop has been accessed via your IP address.
Use of YouTube
We use the function for embedding YouTube videos provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; “YouTube”) on our website.YouTube is an affiliate of Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”).
This feature displays videos hosted on YouTube within an iFrame on the website. The ‘Enhanced Privacy Mode’ option is enabled. This means that YouTube does not store any information about visitors to the website. Only when you watch a video is information about it transmitted to YouTube and stored there. Your data may be transferred to the USA. An adequacy decision by the European Commission is in place for the USA, namely the Trans-Atlantic Data Privacy Framework (TADPF). YouTube has obtained certification under the TADPF and is therefore committed to complying with European data protection principles.
The processing of your personal data is carried out on the basis of Article 6(1)(f) f of the GDPR, based on our overriding legitimate interest in designing the website in a way that meets users’ needs and is targeted to their interests. You have the right, on grounds arising from your particular situation, to object at any time to the processing of personal data concerning you.
Further information on the collection and use of data by YouTube and Google, your rights in this regard and ways to protect your privacy can be found in YouTube’s privacy policy at https://www.youtube.com/t/privacy.
Use of Paqato
We use the Paqato service, operated by Paqato GmbH, Johann-Krane-Weg 6, 48149 Münster, Germany, for shipping communications and parcel tracking.
Paqato enables us to inform you by email about the current dispatch status of your order and to provide you with personalised parcel tracking. To this end, the following data is transmitted to Paqato: :
- Name,
- email address
- , order and dispatch details (e.g. parcel number, delivery provider, delivery address)
The processing of this data is based on Article 6(1)(b) of the GDPR, as it is necessary for the performance of the contract with you. In certain cases, the processing may also be based on our legitimate interest pursuant to Article 6(1)(f) f of the GDPR, to provide you with convenient and transparent shipping communications.
We have entered into a data processing agreement with Paqato, which ensures that Paqato processes personal data exclusively in accordance with our instructions and in compliance with the GDPR.
Further information on data protection at Paqato can be found in Paqato’s privacy policy: https://www.paqato.com/datenschutz
Use of Klar Attribution
We use the services of Klar (Klar Insights GmbH, Marktstr. 18, 80802 Munich, Germany). Klar collects, processes and stores data on this website and its subpages for the purposes of audience measurement and statistical analysis on our behalf. This data collection is carried out on the following legal basis :
Where the user has given their consent in accordance with Article 6(1), first sentence, point (a) of the GDPR and Section 25(1), first sentence of the TTDSG, the data to be processed is collected on a user-specific basis.
Different cookies are used for the various types of data collection mentioned above in order to ensure the respective type of collection.
Cookie – Objection
To object to the use of Klar in general, please use this link. This will set a cookie named “do_not_track” from the domain “staterabikes.de”. Please do not delete this, as otherwise we cannot guarantee that you will not be tracked by Klar.
Information on data protection and data usage by Klar can be found on the following website: https://www.getklar.com/data-protection
Verwendung by Tracify
We use the web analytics service Tracify on our website or on parts of our website to track how our website is used by its visitors and to evaluate and optimise the effectiveness of our advertising and marketing measures. Tracify is a web analytics service provided by Tracify GmbH in Munich, Germany. Tracify GmbH acts on our behalf as a data processor under a data processing agreement in accordance with Article 28 of the GDPR.
Tracify enables an analysis of website usage and the customer journey without storing cookies or other information on the user’s device, but solely on the basis of browser and device information, such as the user’s IP address, the configuration of the respective user agent (user agent string), usage data, order information, contact details, screen resolution, installed fonts and plugins, and the processor of the respective device.
The information transmitted to Tracify is fully and irreversibly anonymised immediately upon transmission, thereby ruling out any personal identification. Only the anonymised, aggregated information is analysed.
Data processing when using Tracify takes place entirely in Germany; no data is transferred to insecure third countries without an adequate level of data protection.
The legal basis for the use of Tracify is our legitimate interest, in accordance with Article 6(1)(f) of the GDPR, in designing the website to meet user needs and in evaluating and optimising our marketing measures.
Data subjects’ rights and retention period
Retention
period Once the contract has been fully executed, the data initially stored for the duration of the warranty period; thereafter, they are retained in accordance with statutory retention periods, in particular those under tax and commercial law, and are then deleted once these periods have expired, provided you have not consented to further processing and use.
Rights of the data subject
Provided the legal requirements are met, you are entitled to the following rights under Articles 15 to 20 of the GDPR: the right of access, the right to rectification, the right to erasure, the right to restriction of processing, and the right to data portability.
Furthermore, under Article 21(1) of the GDPR, you have the right to object to processing based on Article 6(1)(f) of the GDPR, as well as to processing for the purposes of direct marketing.
Right to lodge a complaint with the supervisory authority
Under Article 77 of the GDPR, you have the right to lodge a complaint with the supervisory authority if you believe that the processing of your personal data is not lawful.
You may, amongst other things, lodge a complaint with the supervisory authority responsible for us, which you can contact using the following details:
:
State Commissioner for Data Protection and Freedom of Information, Baden-Württemberg
Königstrasse 10 a
70173 Stuttgart
Tel.: +49 711 6155410
Fax: +49 711 61554115
Email: poststelle@lfdi.bwl.de
Right
to object If the processing of personal data listed here is based on our legitimate interest pursuant to Article 6(1)(f) of the GDPR, you have the right, for reasons arising from your particular situation, to object to such processing at any time with effect for the future.
Once an objection has been lodged, the processing of the data in question will cease, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or where the processing serves to establish, exercise or defend legal claims.
Last updated: 13 July 2023