privacy

We appreciate your interest in our website. Protecting your privacy is very important to us. Below we inform you in detail about the handling of your data.
The person responsible within the meaning of the General Data Protection Regulation (GDPR) and other national data protection laws as well as other data protection regulations is:

Beach Volleyball Apparel Itzigehl, Itzigehl, Reinicke GbR
Norwegian street 3
10439 Berlin
+49 (0) 173/8311198
info@bva-online.com
www.beachvolleyballapparel.com

1. Provision of the website and storage in log files
1.1. Processing of personal data and its purpose
Beach Volleyball Apparel Itzigehl, Itzigehl, Reinicke GbR (hereinafter "BVA" or "we") only processes personal data of users to the extent that this is necessary to provide a functional website and our content and services. When you visit our website, the following data is processed:

IP address of the user
browser used (type, version, language)
operating system used
Internet service provider of the user
Date and time of access to our website
files retrieved from our website
Website from which the user accessed our website
Website that the user accesses via our website.
The processing and temporary storage of the IP address is necessary to enable delivery of the website to the user's computer. For this purpose, the IP address of the user must be saved for the duration of the session. The log files contain IP addresses or other data that enable the user to be assigned. Storage in log files takes place to ensure the functionality of the website. In addition, the data is used to optimize our websites, personalize and further develop our services and ensure the security of our information technology systems.
Any processing of personal data takes place exclusively for the stated purposes and to the extent necessary to achieve these purposes.

1.2. Legal bases for the processing of personal data
The processing of personal data of our users takes place regularly with the consent of the user. An exception applies in such cases in which it is not possible to obtain prior consent for actual reasons and we are permitted to process the data by statutory provisions. The data and the log files are stored on the basis of Article 6 (1) (f) GDPR.

1.3. Data Erasure and Storage Duration / Website
The personal data of the persons concerned will be deleted or blocked by us as soon as the purpose of storage no longer applies. In the case of data processing for the provision of the websites, deletion takes place when the respective session has ended. If personal data is stored in log files, it will be deleted after seven days at the latest. Storage beyond this is possible if the IP addresses of the users have been deleted or alienated beforehand, so that it is no longer possible to assign the calling client.

2. Data collection and use for contract processing and when opening a customer account
To simplify the ordering process, we offer users the option of registering in our shop system. The data is entered into an input mask and transmitted to us and stored. The following data is collected:

E-mail address
phone number
password
First name
Surname
Address (billing and delivery address)
residence (country)
The user then receives a registration e-mail to the e-mail address provided, which contains a link with which the user can confirm his registration and complete the registration process. After successful registration, the user can open his user account by entering his e-mail address and his password and shop in our online shop. The legal basis for processing the data is Art. 6 (1) (b) GDPR. The user has the option to revoke his consent to the processing of personal data at any time by deactivating his user account. The data will then be deleted by us, unless we are contractually and/or legally obliged to store it for a longer period of time.
3. Ordering Process
If you shop in our online shop, we process the following personal data from you in order to be able to process your order:

Last name First Name
Address (billing and delivery address)
E-mail address
phone number
customer number
payment details
We use the data for order processing and, if necessary, for communication with the user. To the extent permitted by law, we pass on the user's data to our partner companies, which support us in the proper fulfillment of the contract. For their part, these companies are obliged to comply with the applicable data protection regulations. In particular, these companies may only process the data to fulfill their tasks on our behalf and only according to our instructions. Data processing in connection with the ordering process takes place on the basis of Art. 6 Paragraph 1 lit. b GDPR. The data will be deleted by us as soon as the order has been processed, unless we are obliged to store it for a longer period of time due to contractual and/or legal obligations.
4. Use of data when registering for the e-mail newsletter
You can subscribe to a free newsletter on our website. If you register for the newsletter, the following personal data will be processed by us:

Name first Name
Date of birth
E-mail address
IP address of the calling computer
Date and time of dispatch

The legal basis for the processing of personal data in this context is Article 6 (1) (a) GDPR. The consent can be revoked by clicking on the corresponding link contained in each newsletter.

5. Individual product recommendations by email
In connection with our services, we present you with information and offers from BVA based on your interests. You will receive these individual product recommendations from us regardless of whether you have subscribed to a newsletter. For the selection of the individual product recommendations, we primarily use your previous purchase data and interest data in accordance with the legal provisions, from which we derive your product interests, taking into account the interests and preferences and profile data communicated to us.

If you no longer wish to receive individual product recommendations from us, you can deactivate this service at any time:

If you do not wish to receive individual product recommendations from us by e-mail, you can informally object to this at any time without incurring any costs other than the transmission costs according to the basic tariffs (e.g. internet connection costs, postage), e.g. by e-mail to info@bva- online.com. Of course, you will also find an unsubscribe link in every e-mail.
E-mail addresses are only used in the context of BVA and are not passed on to third parties.

6. Contact form
There is a contact form on our website which can be used to contact us electronically. If a user takes advantage of this option, the data entered by him in the input mask will be transmitted to us and stored:

First name
Surname
e-mail
Order number
Regarding
text specified by the user in the space provided
In addition, the following data is stored when the message is sent:
IP address of the user
Date and time of registration
The legal basis for processing the data is Art. 6 (1) (f) GDPR. The data will only be used to process the contact and the subsequent communication. In this context, the data will not be passed on to third parties. If we use the data for other purposes, we will obtain the user's consent in advance. The personal data from the input mask of the contact form and those sent by e-mail will be deleted when the respective communication with the user has ended, ie as soon as it can be inferred from the circumstances that the facts in question have been finally clarified. The additional personal data collected during the sending process will be deleted after a period of seven days at the latest.
The user has the option to revoke his consent to the processing of personal data at any time. If the user contacts us by email, he can object to the storage of his personal data at any time. In such a case, the contact request cannot be processed and the communication cannot be continued. All personal data stored in the course of making contact will be deleted in this case.

7. Use of data to analyze purchasing behavior
We use internal applications to be able to analyze and evaluate the purchasing behavior of customers more precisely. The aim is to be able to make you customized offers and to be able to monitor and optimize our internal processes. The following data can be evaluated:

Salutation/Gender
Name first Name
address
e-mail address
Date of Birth (if provided)
Transaction Data/Purchase History

The legal basis for this is Art. 6 Para. 1 lit. f GDPR.

8. Identity and credit check when choosing Klarna payment services
If you opt for Klarna's payment services, we will transmit the data necessary for processing the payment and an identity and credit check to Klarna.
The legal basis for the credit check is Art. 6 Para. 1 lit. f. GDPR. The following of your data will be transmitted to the credit agency:

First name
Surname
address
Date of birth
phone number
In Germany, the credit agencies mentioned in Klarna's data protection declaration (http://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/privacy) can be used for identity and credit checks. You can revoke your consent to this use of personal data at any time by contacting Klarna.

9. Data processing when using PayPal
If you decide to use PayPal's (PayPal (Europe) S.à rl et Cie, SCA, 22-24 Boulevard Royal, L-2449 Luxembourg) payment services, we will transmit the data necessary for processing the payment and for an identity and credit check PayPal. The legal basis for the credit check is Art. 6 Para. 1 lit. f. GDPR. For the use of payment services via PayPal, the legal basis for processing is Art. 6 (1) (b) GDPR. The following data can be transmitted to PayPal:

Surname
Date of birth
address
phone number
E-mail address

Data for payment processing, e.g. account details
In Germany, the credit agencies mentioned in PayPal's data protection declaration (https://www.paypal.com/de/webapps/mpp/ua/privacy-full) can be used for identity and credit checks. You can revoke your consent to this use of personal data at any time by contacting PayPal.

10. Data processing when using Shopify Payments (Visa/Mastercard, Sofortüberweisung)
If you opt for Shopify payment services, we transmit the data necessary for processing the payment to Shopify. The legal basis for using payment services via Shopify is Art. 6 (1) (b) GDPR. The following data can be transmitted to Shopify:

Surname
Date of birth
address
phone number
E-mail address
Data for payment processing, e.g. account details, credit card information
11. Data processing when using Amazon Pay
If you choose Amazon Pay as your payment service provider, you can use your existing Amazon account and the payment methods stored there without this data being transmitted to us. Further information on paying via Amazon Pay can be found at https://pays.amazon.de. When paying via Amazon Pay, the payment data is communicated or processed by Amazon Pay (Amazon Payments Europe SCA 5, Rue Plaetis - 2338 Luxembourg and Amazon EU SARL, Amazon Services Europe SARL, Amazon Media EU SARL, all three located at 5, Rue Plaetis L 2338, Luxembourg). The legal basis for using payment services via Amazon Pay is Art. 6 (1) (b) GDPR. More information on data processing by Amazon Pay can be found in the Amazon Pay privacy policy: https://pay.amazon.com/de/help/201751600

12. Use of Cookies
We use cookies in several places on our website. If a user calls up one of our websites, a cookie can be stored on the user's operating system. A cookie contains a characteristic character string that enables the browser to be uniquely identified when you visit our website again. The following data is stored and transmitted in the cookies:

language settings
Log-In Information/Sessions
tracking information
The purpose of using cookies is to make our websites user-friendly. The processing of personal data using cookies is based on Article 6 (1) (f) GDPR. Cookies are stored on the user's computer and transmitted from there to our website. Users can deactivate or restrict the transmission of cookies by changing the settings of their Internet browser. Cookies that have already been saved can be deleted at any time. If cookies are deactivated for our websites, it may no longer be possible to use all the functions of our websites to their full extent.

13. Use of Google (Universal) Analytics for web analysis
Our websites use Google Analytics from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. This is software for the statistical evaluation of user access by Google Inc. With web analysis, we aim to improve the quality of our websites and their content. Google Analytics uses cookies (see above), which enable an analysis of the use of our websites. In this context, data processing takes place on the basis of Article 6 (1) (f) GDPR. We have a legitimate interest in analyzing the behavior of users of our website in order to optimize our websites. If information is transferred to Google servers in the USA and stored there, an appropriate level of data protection is guaranteed, since the American company Google LLC is certified under the EU-US Privacy Shield.

The web analysis can be technically prevented by the user of the website by deactivating JavaScript and cookies in his web browser. Details on the settings required for this can be found in the product descriptions or instructions of the various browser providers. Data processing by Google can also be prevented by the user using a browser add-on to deactivate Google Analytics. Further information and the add-on can be found at https://tools.google.com/dlpage/gaoptout?hl=de.

We have activated the IP anonymization function on our website. As a result, the IP address of the user is shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area before it is transmitted to the USA. Only in exceptional cases will the full IP address of the user be sent to a Google server in the USA and shortened there. The transmitted IP address of the user will not be merged with other data from Google. Further information on the terms of use and data protection of Google Analytics can be found at https://www.google.com/analytics/terms/de.html or at https://www.google.de/intl/de/policies/.

14. Facebook Custom Audiences Pixel
Our websites use Facebook Custom Audiences Pixel, a marketing tool from Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. Tracking across websites is possible by using Facebook Custom Audiences Pixel. In this context, data processing takes place on the basis of Article 6 (1) (a) GDPR. An appropriate level of data protection for data processing by Facebook is guaranteed by Facebook's Privacy Shield certification. The processing can be technically prevented by the user of the website by deactivating JavaScript and cookies in his web browser. Details on the settings required for this can be found in the product descriptions or instructions of the various browser providers.


15. Use of social plugins from Facebook, Twitter, Pinterest using the Shariff solution
Our website uses social plugins ("plugins") from social networks. In order to increase the protection of your data when you visit our website, the plugins are not unrestricted, but only integrated into the page using an HTML link (so-called "Shariff solution" from c't). This integration ensures that when you access a page on our website that contains such plugins, no connection is established with the servers of the provider of the respective social network. If you click on one of the buttons, a new window will open in your browser and call up the page of the respective service provider, on which you can (possibly after entering your login data) press the Like or Share button, for example. The purpose and scope of the data collection and the further processing and use of the data by the providers on their websites as well as your rights in this regard and setting options for protecting your privacy can be found in the data protection notices of the providers.

http://www.facebook.com/policy.php
https://twitter.com/privacy
https://about.pinterest.com/de/privacy-policy

16. Rights of the data subject
If BVA processes your personal data, you are the data subject pursuant to Art. 4 No. 1 DS-GVO with the following rights towards BVA:

17.1. right of providing information
In accordance with Art. 15 GDPR, you can request confirmation from us as to whether personal data relating to you will be processed by us. If we process your personal data, you can request information from us about the following:

the processing purposes;
the categories of your personal data that we process;
the recipients or categories of recipients to whom we have disclosed or will disclose your personal information;
(where possible) the planned duration for which we will store your personal data or, if this is not possible, the criteria for determining the storage period;
the existence of a right to rectification or erasure of personal data concerning you, a right to restriction of processing by us or a right to object to such processing;
the existence of a right of appeal to a supervisory authority;
all available information about the origin of the data, unless the personal data was collected from you;
the existence of automated decision-making including profiling (Art. 22 Para. 1 and 4 DS-GVO) and - at least in these cases - meaningful information about the logic involved as well as the scope and intended effects of such processing for you.
You have the right to request information as to whether your personal data is being transmitted to a third country or to an international organization. In this context, you can request to be informed about the appropriate guarantees pursuant to Art. 46 GDPR in connection with the transmission.
17.2. Right to Rectification
In accordance with Art. 16 DS-GVO, you have the right to request us to correct and/or complete incorrect personal data concerning you.

17.3. Right to Erasure
According to Art. 17 DS-GVO, you can demand that your personal data be deleted immediately. We are obliged to delete your data immediately if one of the following reasons applies:

Your personal data are no longer necessary for the purposes for which they were collected or otherwise processed.
You revoke your consent, on which we base the processing in accordance with Article 6 (1) (a) GDPR or Article 9 (2) (a) GDPR, and there is no other legal basis for the processing.
You object to the processing in accordance with Art. 21 (1) GDPR and there are no overriding legitimate reasons for the processing, or you object to the processing in accordance with Art. 21 (2) GDPR.
Your personal data has been processed unlawfully.
Erasure of your personal data is necessary for compliance with a legal obligation under Union or Member State law to which we are subject.
Your personal data was collected in relation to information society services offered in accordance with Art. 8 Para. 1 DS-GVO.
If we have made your personal data public and we are obliged to delete them in accordance with Art. 17 Para. 1 DS-GVO, we shall take appropriate measures, including technical ones, taking into account the available technology and the implementation costs, to inform those who process the personal data that you, as the data subject, have requested them to delete all links to your personal data or copies or replications of your personal data.

The right to erasure does not exist if processing is necessary

to exercise the right to freedom of expression and information;
to comply with a legal obligation to which we are subject or to perform a task that is in the public interest or in the exercise of official authority that has been delegated to us;
for reasons of public interest in the field of public health (Art. 9 Para. 2 lit. h and i and Art. 9 Para. 3 DS-GVO);
for archiving purposes in the public interest, scientific or historical research purposes or for statistical purposes in accordance with Article 89 (1) GDPR, insofar as the law mentioned makes it impossible or seriously impairs the achievement of the objectives of this processing, or
to assert, exercise or defend legal claims.
29.4. Right to restriction of processing
Under the following conditions, you can request the restriction of the processing of your personal data in accordance with Art. 18 DS-GVO:

if you contest the accuracy of your personal data for a period that enables us to verify the accuracy of the personal data;
if the processing is unlawful and you refuse to delete the personal data and instead request that the use of the personal data be restricted;
if we no longer need your personal data for the purposes of processing, but you need them to assert, exercise or defend legal claims, or
if you have lodged an objection to the processing pursuant to Art. 21 Para. 1 DS-GVO and it is not yet clear whether our legitimate reasons outweigh your reasons.
If the processing of your personal data has been restricted, this data - apart from its storage - may only be used with your consent or to assert, exercise or defend legal claims or to protect the rights of another natural or legal person or for reasons of an important public interest of the Union or a Member State are processed. If the restriction of processing has been restricted according to the above conditions, you will be informed by us before the restriction is lifted.

17.5. right to information
If you have asserted the right to correction, deletion or restriction of processing against us, we are obliged under Art. 19 DS-GVO to inform all recipients to whom we have disclosed your personal data of this circumstance, unless this proves to be the case proves to be impossible or involves a disproportionate effort. You have the right to be informed about these recipients.

17.6. Right to data portability
According to Art. 20 DS-GVO, you have the right to receive your personal data that you have provided to us in a structured, common and machine-readable format. You also have the right to transmit this data to another person responsible without hindrance from us, provided that

the processing is based on consent (Art. 6 Para. 1 lit. a DS-GVO or Art. 9 Para. 2 lit. a DS-GVO) or on a contract in accordance with Art. 6 Para. 1 lit. b DS- GMO based and
the processing is carried out using automated procedures.
In exercising this right, you also have the right to have your personal data transmitted directly by us to another person responsible, insofar as this is technically feasible. The freedoms and rights of other people must not be impaired by this. The right to data portability does not apply to the processing of personal data that is necessary for the performance of a task that is in the public interest or in the exercise of official authority that has been delegated to us.
29.7. Right to object
Pursuant to Article 21 GDPR, you have the right, for reasons arising from your particular situation, to object at any time to the processing of your personal data, which is based on Article 6 Paragraph 1 lit. e or f GDPR to file an objection; this also applies to profiling based on these provisions. We will not subsequently process your personal data unless we can demonstrate compelling legitimate grounds for our processing that outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

17.8. Right to revoke the declaration of consent under data protection law
You have the right to revoke your declaration of consent under data protection law at any time. The revocation of consent does not affect the legality of the processing carried out on the basis of the consent up to the point of revocation. Automated decision-making in individual cases including profiling According to Art. to be subject to a decision that produces legal effects concerning you or similarly significantly affects you. This does not apply if the decision

is necessary for the conclusion or performance of a contract between you and us,
is permitted on the basis of legal provisions of the Union or the Member States to which we are subject and these legal provisions contain appropriate measures to protect your rights and freedoms and your legitimate interests or
takes place with your express consent.

17.9. Right to lodge a complaint with a supervisory authority
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the member state of your place of residence, your place of work or the place of the alleged infringement, if you believe that the processing of your personal data carried out by us violates the GDPR.

18. Responsibility for Content and Information
Our websites contain links to websites of external providers. When the link was set, we carefully checked the content of the websites of external providers to determine whether they violate civil or criminal law. However, it cannot be ruled out that this content will subsequently be changed by the respective providers. If you believe that linked external sites violate applicable law or have other inappropriate content, please let us know. We will check your reference and remove the external link if necessary. We are not responsible for the content and availability of the linked external websites.

19. Contact Opportunity
If you have any questions about the collection, processing or use of your personal data, information, correction, blocking or deletion of data and revocation of consent given or objection to a specific use of data, please contact us directly using the contact details given in this data protection declaration.

20. Incorporation and Validity of the Privacy Policy
This data protection declaration only applies to the content of BVA. Other data protection and data security regulations apply to the linked external content. You can find out who is responsible for these offers in the respective imprint or the data protection declaration.

Due to the further development of our websites or the implementation of new technologies, it may become necessary to change this data protection declaration. We therefore reserve the right to change the data protection declaration at any time with effect for the future. The version available at the time of your visit to the website always applies.


Status: 04/09/2019