Information in compliance with the EU General Data Protection Regulation (GDPR)
We are very pleased that you are interested in our business. Data privacy is a top priority for INTERSPORT SCHNEIDER Sportartikel GmbH.
It is fundamentally possible to use the Internet pages of INTERSPORT SCHNEIDER Sportartikel GmbH without providing personally identifiable data. Insofar as a person wishes to take advantage of special services offered by our business by means of our webpage, it may prove necessary to process personally identifiable data. If it is indeed necessary to process personally identifiable data and there is no legal foundation for the processing thereof, as a general principle we will first obtain the consent of the person affected .
The processing of personally identifiable data, for example the name, postal address, email address or telephone number of the affected person, is conducted in compliance with the General Data Protection Regulation as well as those country-specific data privacy provisions which are applicable to INTERSPORT SCHNEIDER Sportartikel GmbH.
INTERSPORT SCHNEIDER Sportartikel GmbH as the entity responsible for the processing of information has implemented numerous technical and organizational measures to ensure to the greatest extent possible the complete security of personally identifiable data processed by means of this website. Nonetheless, security breaches involving Internet-based data transmissions are always possible, which means that we are unable to guarantee total protection. That said, the affected person is encouraged to provide personally identifiable data by alternative means, including by telephone.
a) Personally identifiable data
Personally identifiable data refers to all information that pertains to an identified or identifiable natural person (hereinafter referred to as the “affected person”). A natural person is deemed to be identifiable if they can be identified either directly or indirectly, in particular by means of attribution to an identifier such as a name, code number, location data, online ID or one or several particular attributes that are the expression of said natural person’s physical, physiological, genetic, psychological, commercial, cultural or social identity.
b) Affected person
The affected person is that identified or identifiable natural person whose personally identifiable data is processed by the responsible processing entity.
Processing refers to a procedure or series of procedures conducted, with or without the help of automation, pertinent to personally identifiable data, including collection, compilation, organization, attribution, storage, adaptation or editing, selection, query, usage, disclosure by means of sharing, dissemination or some other form of provision, comparison or linking, as well as restriction, deletion or destruction.
d) Restriction of processing
The restriction of processing refers to the marking of stored personally identifiable data with the specific goal of restricting future processing.
Profiling refers to any kind of automated processing of personally identifiable data which consists of using personally identifiable data in order to evaluate specific personal aspects pertaining to a natural person, in particular in order to analyze or predict aspects with respect to work performance, economic circumstances, health, personal preferences, interests, reliability, behaviors, place of residence or change of location of this natural person.
Pseudonymization refers to the processing of personally identifiable data in such a way that the personally identifiable data cannot be attributed to a specific person without drawing upon additional information, insofar as this additional information is stored separately and technical as well as organizational measures are in place to ensure that the personally identifiable data cannot be attributed to an identified or identifiable natural person.
g) Responsible party or responsible entity
The responsible party or responsible entity is the natural or legal person, authority, institution or other office which, either alone or jointly with others, determines the purposes and means by which personally identifiable data is processed. If the purposes and means of said processing are prescribed by EU law or by the statutes of member states, then the responsible party or entity may stipulate specific criteria of its choosing to be handled in accordance with EU law or the statutes of member states.
h) Contracted processors
A contracted processor is a natural or legal person, authority, institution or other office that processes personally identifiable data at the behest of the responsible party.
The recipient is a natural or legal person, authority, institution or other office to whom personally identifiable data is disclosed, regardless of whether this person is a third-party or not. However, public authorities who might potentially receive personally identifiable data within the scope of a specific investigation in accordance with EU statutes or the laws of member states, are not deemed to be recipients.
A third-party is a natural or legal person, authority, institution or other office other than the affected person, responsible party, contracted processor or persons with immediate responsibility to the responsible party or contracted processor authorized to process the personally identifiable data.
Consent refers to the informed and unambiguous expression of willingness communicated by the affected person with respect to a specific circumstance in the form of a declaration or other unambiguous confirmatory act, by means of which the affected person makes it clearly evident that they are in agreement with the processing of personally identifiable data pertaining to them.
2. Name & address of the responsible party
Consistent with the General Data Protection Regulation, other applicable data privacy laws within member states of the European Union and other regulations pertinent to data privacy protections, the responsible party is:
Tel.: +43 6452 5479
Fax: +43 6452 5479 4
Publisher: Schneider Family
By using cookies, INTERSPORT SCHNEIDER Sportartikel GmbH is able to offer users of this Internet site more user-friendly services that would not be possible without having installed the cookies.
By means of a cookie, the information and offers on our Internet site can be optimized to the user’s benefit. As stated above, cookies make it possible for us to recognize return users of our Internet pages. The purpose of this is to make it easier for users to avail themselves of our Internet services. For example, the user of an Internet page that incorporates cookies doesn’t have to log into the website every time they visit, since this task is completed between the website itself and the cookie which has been stored on the user’s computer system. Another example is the cookie associated with the shopping basket in an online shop. The online shop maintains a record of items placed in a virtual shopping basket by means of cookies.
The affected person may prevent the installation of cookies from our Internet site either temporarily or permanently by adjusting browser settings as appropriate. Furthermore, cookies which have already been installed can be deleted at any time by means of the Internet browser or other software programs. This is possible in all the most current Internet browsers. Should the affected person decide to deactivate cookies within their browser, under certain circumstances not all functions of our website will be available to their fullest extent.
4. Website Analysis
This website uses Google Analytics, a web analytics service provided by Google, Inc. (“Google”). Google Analytics uses “cookies”, which are text files placed on your computer to help the website analyze how users utilize the site. The information generated by the cookie about your use of the website (including your IP address) is generally transmitted to and stored by Google on servers in the United States. Should you activate IP anonymization on this website, however, within member states of the European Union or in other states party to the agreement, Google will first abbreviate your IP address. Only in exceptional cases will the full address first be transmitted by Google to a server in the USA and then abbreviated. On behalf of the operator of this website, Google will use this information in order to evaluate your use of the website, to compile reports about website activities and to provide the website operator with additional services relating to website and Internet use. The IP address obtained from your browser within the scope of Google Analytics will not be associated with other data from Google. You may prevent the storage of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. Furthermore, you can prevent transmission of data generated by cookies relating to your use of the website (incl. your IP address) to Google, as well as the further processing of such data by Google, by downloading and installing the browser plugin which is available by clicking on the following link (http://tools.google.com/dlpage/gaoptout?hl=de). Further information about Google Analytics’ own conditions of use and data privacy can be found at www.google.com/analytics/terms/de.html.
5. Contact opportunities by means of our website
In compliance with our statutory obligations, the INTERSPORT SCHNEIDER Sportartikel GmbH Internet site contains information that enables you to get in touch with our business quickly by electronic means, as well as other less immediate means of communication including postal and email addresses. Insofar as the affected person contacts the responsible party by email or a contact form, the personally identifiable data communicated by the affected person is automatically stored. Such voluntarily provided personally identifiable data pertaining to the affected person will be stored for the purposes of processing the request and maintaining contact. Such personally identifiable data will not be shared with third-parties.
6. Routine deletion & blocking of personally identifiable data
The responsible party only processes and stores personally identifiable data of the affected person for such time as is necessary in order to achieve the storage purpose or insofar as is prescribed by other laws or regulations published by European regulatory authorities or other legislative bodies to which the responsible party is subject. Should the storage purpose lapse or the retention period as prescribed by the European regulatory authorities or another legislative body expire, the personally identifiable data will routinely and in accordance with legal regulations be blocked or deleted .
7. Rights of the affected person
a) Right to confirmation
The European regulatory authorities grant every affected person the right to demand a confirmation from the responsible party as to whether personally identifiable data is being processed. If an affected person wishes to make use of this confirmation right, they are welcome to contact our data privacy officer in this regard at any time.
b) Right to information
The European regulatory authorities grant every affected person the right to obtain at no cost information about personally identifiable data which has been stored pertaining to that person and to receive a copy thereof. Furthermore, European regulatory authorities specifically grant the affected person the right to the following specific information:
- purpose of processing
- the categories of personally identifiable data being processed
- the recipients or categories of recipients to whom the personally identifiable data has been or will be disclosed, in particular with respect to recipients in third-party countries as well as international organizations
- if possible, the planned duration for which the personally identifiable data will be stored, or, if this is not possible, the criteria involved in determining this duration
- confirmation of the existence of a right to have personally identifiable data corrected or deleted, to restrict the processing thereof by the responsible party and to object to the processing thereof in general
- the right to file a complaint with the pertinent oversight authorities
- if the personally identifiable data is not collected directly from the affected person: all available information about the origin of the data
- the existence of any automated decision-making including profiling as addressed in Article 22 par.1 and 4 GDPR and - at a minimum in these cases - clear information about the logic involved as well as the scope and intended purposes of such processing as it impacts the affected person
Furthermore, the affected person has the right to information as to whether their data is transmitted to a third-party country or to an international organization. Insofar as this is the case, the affected person also has the right to receive information about suitable guarantees with respect to said transmission. If the affected person wishes to make use of their information rights in this regard, they are invited to contact our data privacy officer at any time.
c) Right to correction
The European regulatory authorities grant every affected person the right to immediate correction of inaccurate personally identifiable data. Furthermore, the affected person also has the right, in consideration of the purposes of processing, to demand the supplementation of incomplete personally identifiable data – also by means of a declaratory amendment. If the affected person wishes to make use of this right to correction, there are invited to contact our data privacy officer at any time.
d) Right to deletion (Right to be forgotten)
The European regulatory authorities grant every affected person the right to demand that the responsible party delete any personally identifiable data pertaining to them without delay, insofar as one of the following reasons applies and insofar as the processing of said data is not necessary:
- The personally identifiable data was collected or in some other way processed for purposes that are no longer required.
- The affected person revokes their consent subject to which their data is being processed in accordance with Art. 6 par. 1(a) GDPR or Art. 9 par. 2(a) GDPR, and any further legal foundation for the processing thereof is absent.
- The affected person objects to the processing thereof in accordance with Art. 21 par. 1 GDPR, and there do not exist any overriding legal reasons for the processing thereof, or the affected person objects to the processing thereof in accordance with Art. 21 par. 2 GDPR.
- The personally identifiable data was processed illegally.
- The deletion of the personally identifiable data is required in order to meet a legal obligation according to EU statutes or the laws of a member state to which the responsible party is subject.
- The personally identifiable data was collected with reference to services within the scope of the information society in accordance with Art. 8 par. 1 GDPR.
Insofar as one of the aforementioned reasons applies and an affected person wishes to have personally identifiable data stored by INTERSPORT SCHNEIDER Sportartikel GmbH deleted, they may contact our data privacy officer in this regard at any time. The data privacy officer of INTERSPORT SCHNEIDER Sportartikel GmbH or another employee will have the deletion request complied with without delay.
If the personally identifiable data has been disclosed by INTERSPORT SCHNEIDER Sportartikel GmbH and our business, as the responsible party, is obligated to have the personally identifiable data deleted in accordance with Art. 17 par. 1 GDPR, INTERSPORT SCHNEIDER Sportartikel GmbH will take appropriate measures, including those which are technical in nature, in consideration of the available technology as well as implementation costs, in order to notify other persons who are responsible for processing said disclosed data, that the affected person has demanded that the other persons responsible for processing said disclosed data delete all links to said data as well as copies of such data, insofar as the processing thereof is no longer required. In individual cases, the data privacy officer of INTERSPORT SCHNEIDER Sportartikel GmbH or another employee will make the necessary arrangements to ensure this occurs.
e) Right to restriction of processing The European regulatory authorities grant every affected person the right to demand that the responsible party restrict processing if one of the following criteria is met
Jede von der Verarbeitung personenbezogener Daten betroffene Person hat das vom Europäischen Richtlinien- und Verordnungsgeber gewährte Recht, von dem Verantwortlichen die Einschränkung der Verarbeitung zu verlangen, wenn eine der folgenden Voraussetzungen gegeben ist:
- The accuracy of the personally identifiable data is disputed by the affected person, for such time as it takes the responsible party to verify the accuracy of the personally identifiable data.
- The processing is illegal, the affected person rejects the deletion of personally identifiable data and, instead, demands the restriction of usage of the aforementioned personally identifiable data.
- The responsible party no longer requires the personally identifiable data for processing purposes, however the affected person does require it in order to assert a claim, exercise or defend legal rights.
- The affected person has lodged an objection to the processing in accordance with Art. 21 par. 1 GDPR and it is not yet resolved whether the legitimate reasons of the responsible party outweigh said objection.
Insofar as one of the aforementioned criteria is met and an affected person wishes to demand restriction of personally identifiable data stored by INTERSPORT SCHNEIDER Sportartikel GmbH, they are encouraged to contact our data privacy officer at any time. The data privacy officer of INTERSPORT SCHNEIDER Sportartikel GmbH or another employee will make appropriate arrangements to restrict processing.
f) Right to data transferability
The European regulatory authorities grant every affected person the right to receive information provided to them by the responsible entity in a structured, current and machine-readable format. The affected person also has the right to transfer this data to another responsible party without the interference of the responsible entity, insofar as the processing is based upon consent consistent with Art. 6 par. 1 (a) GDPR or Art. 9 par. 2 (a) GDPR or upon a contract consistent with Art. 6 par. 1 (b) GDPR and the processing is conducted by means of automated procedures, insofar as the processing is not required for performance of a duty that is in the public interest or conduct of public enforcement for which the responsible party bears responsibility. Furthermore, in asserting their right to data transferability consistent with Art. 20 par. 1 GDPR, the affected person has the right to effect transmission of the personally identifiable data by the responsible party to another responsible person insofar as this is technically feasible and this does not infringe upon the rights and freedoms of other persons. In order to assert the right to transferability, the affected person is encouraged to contact the data privacy officer of INTERSPORT SCHNEIDER Sportartikel GmbH or another employee at any time.
g) Right to revocation
The European regulatory authorities have granted every person affected by the processing of personally identifiable data the right, due to situation-specific reasons, to object at any time to the processing of personally identifiable data affecting them pursuant to Art. 6 par. 1(e) or (f) GDPR. This also applies to profiling as addressed in these regulations.
In the event of revocation, INTERSPORT SCHNEIDER Sportartikel GmbH will no longer process the personally identifiable data, other than if we are able to demonstrate compelling reasons for the processing thereof which are worthy of protection and predominate over the interests, rights and freedoms of the affected person, or the processing thereof is required for the assertion, exercise or defense of our legal claims.
If INTERSPORT SCHNEIDER Sportartikel GmbH processes personally identifiable data in order to conduct direct marketing, the affected person has the right to object to the processing of their personally identifiable data for such marketing purposes. This also applies to profiling, insofar as it is associated with such direct marketing. If the affected person objects to INTERSPORT SCHNEIDER Sportartikel GmbH about the processing of their information for direct marketing purposes, INTERSPORT SCHNEIDER Sportartikel GmbH will no longer process the personally identifiable data for said purposes.
Furthermore, the affected person has the right, for reasons resulting from their own particular situation, to object to the processing of personally identifiable data which INTERSPORT SCHNEIDER Sportartikel GmbH conducts for scientific or historical research purposes, or for statistical purposes consistent with Art. 89 par. 1 GDPR, other than if such processing is necessary for fulfillment of a duty in the public interest.
In order to exercise this right, the affected person is invited to contact the data privacy officer of INTERSPORT SCHNEIDER Sportartikel GmbH or another employee. The affected person is also free within the context of usage of services of our information society, irrespective of regulation 2002/58/EC, to exercise their revocation right by means of automated processes for which technical specifications are utilized .
h) Individual instances of automated decision-making including profiling
The European regulatory authorities have granted every person affected by the processing of personally identifiable data the right not to be subject to decisions based exclusively on automated processing means – including profiling – that might have legal consequences for them or might otherwise affect them adversely to a substantial degree, insofar as the decision (1) is not essential to the conclusion or fulfillment of a contract between the affected person and the responsible party, or (2) is not permissible according to the regulations of the EU or member states to which the responsible party is subject, and said regulations contain appropriate measures to preserve the rights and freedoms as well as the legitimate interests of the affected person or (3) is not subject to the expressed consent of the affected person. If the decision (1) is required for the conclusion or fulfillment of a contract between the affected person and the responsible party or (2) is made with the expressed consent of the affected person, INTERSPORT SCHNEIDER Sportartikel GmbH will take appropriate measures to preserve the rights and freedoms as well as legitimate interests of the affected person, which will at a minimum include the right to effect intervention by a person on the affected person’s behalf, declaration of the person’s standpoint and contestation of the decision. If the affected person wishes to assert rights with respect to automated decision-making, they are encouraged to contact our data privacy officer in this regard at any time.
i) Right to revocation of data privacy consent
The European regulatory authorities grant every affected person the right to revoke their consent to the processing of personally identifiable data at any time. If the affected person wishes to assert their right to revoke consent, they can do so at any time by contacting our data privacy officer.
8. Legal foundation for processing
Art. 6 I lit. a GDPR serves as the legal foundation for our business’s processing procedures, pursuant to which we obtain consent for specific processing purposes. If the processing of personally identifiable data is for the fulfillment of a contract to which the affected person is a contractual party, as is the case, for example, with respect to processing procedures required for the delivery of goods or provision of another service or consideration, such processing is based upon Art. 6 I lit. b GDPR. This also applies to such processing procedures that are required in order to implement pre-contractual measures, for example with respect to inquiries about our products or services. If our business is subject to statutory obligations that require the processing of personally identifiable data, such as the fulfillment of fiscal obligations, then this processing is pursuant to Art. 6 I lit. c GDPR. In rare cases, the processing of personally identifiable data may be necessary in order to protect the vital interests of the affected person or another natural person. This would be the case, for example, if a visitor to our business was injured, requiring their name, age, insurance data or other vital information be provided to a physician, hospital or other third-party. In such circumstances, data processing would be on the basis of Art. 6 I lit. d GDPR. Finally, our processing procedures may be based upon Art. 6 I lit. f GDPR. This legal foundation applies to processing procedures that are not based upon any of the aforementioned legal foundations, if said processing is required in order to safeguard the legitimate interest of our company or a third-party, insofar as the interests, fundamental rights and fundamental freedoms of the affected person do not outweigh. Such processing procedures are permitted to us in particular because they have been specifically cited by the European regulatory authorities. They took the view that a legitimate interest might exist if the affected person were a customer of the responsible entity (recital 47 sentence 2 GDPR).
9. The responsible party’s or third-party’s legitimate interest in processing information
If personally identifiable data is processed on the basis of Art. 6 I lit. f GDPR, our legitimate interest is the pursuit of business activities for the benefit of all employees as well as our shareholders.
10. Duration for which personally identifiable data is stored
The criterion for determining how long personally identifiable data is stored is the applicable statutory retention requirement. Upon expiration thereof, the applicable data is routinely deleted insofar as it is no longer required in order to fulfill or initiate a contract.
11. Statutory or contractual regulations for the provision of personally identifiable data; Necessity for the conclusion of the contract; Obligation of the affected person to provide personally identifiable data; Potential consequences of failure to provide information
We take this opportunity to point out that the provision of personally identifiable data is prescribed in part by law (e.g. fiscal regulations) or may result from contractual provisions (e.g. information about the contractual party). On occasion, in order to conclude a contract it may be necessary for an affected person to provide us with personally identifiable data which is subsequently processed by us. For example, the affected person is required to provide us with personally identifiable data when our business enters into a contract with them. Failure to provide the personally identifiable data will result in us being unable to enter into a contract with the affected person. Prior to providing personally identifiable data, the affected person must first get in touch with our data privacy officer. Our data privacy officer will explain to the affected person, based on the individual circumstances, whether the provision of personally identifiable data is required for legal or contractual purposes, whether or not there actually is a requirement to provide said information, and what consequences would result from failure to provide the personally identifiable data as required.
12. Existence of automated decision-making
As a conscientious business, we do not utilize any automated decision-making or profiling.
13. Responsible oversight authority
Österreichische Datenschutzbehörde (Austrian Data Privacy Office)
Google Web analysis services (Google Analytics)
This website utilizes functions of the web analysis service Google Analytics provided by Google Inc., 1600 Amphitheatre Parkway Mountain View, CA 94043, USA. We implement the function "activation of anonymization" on this website. As a consequence, within member states of the European Union as well as signatory countries within the European Economic Area your IP address will be truncated by Google prior to processing/storage. At the request of the operator of this website, Google will use this information in order to analyze your use of the website, compile reports about website activity and in order to measure and optimize the effectiveness of online advertising campaigns.
You can prevent Google from collecting data about your usage of the website by means of cookies along with the processing thereof, simply by downloading and installing the browser plug-in available under the following link: https://tools.google.com/dlpage/gaoptout?hl=de
Detailed instructions about how you can prevent Google from storing your data can also be found under the following link: https://developers.google.com/analytics/devguides/collection/gajs/?hl=de#disable Our relationship with this web analysis provider is within the framework of our having contracted with Google Analytics in order to process specific data. Transmission of data to this provider is consistent with the parameters established by the European Commission (self-certification, Privacy Shield). Data is regularly deleted (currently every 26 months).
Use of Google AdWords Conversion-Tracking
Legal foundation for data processing:
On this website, data is processed solely according to statutory requirements (GDPR, TKG 2003).
In the event that analysis tools are used, data is processed on the foundation of Art 6 par. 1 lit f) (legitimate interest) GDPR. Our legitimate interest in the processing of data is in order to improve our web presence as well as determine the success rate of online advertising.
Information about Cookies
This website uses so-called “cookies”. These are small text files that are stored by means of your browser on your electronic device. They do not cause any damage.
Our website utilizes so-called “session cookies”. These are generated when you access our website and are automatically deleted later. They allow us to recognize you if you return to our website in the immediate future, automatically adjusting website settings to reflect your preferences and interests. In doing so, no personally identifiable data is stored or processed.
Cookies are intended to make our websites more user-friendly. Some cookies remain stored on your electronic device until you delete them. They enable the website operator to recognize your browser when you visit again. If you do not wish this to occur, you can set up your browser so that it informs you prior to installing cookies and you can permit this to happen, or not, on a case-by-case basis. If you decide to deactivate cookies, this may restrict the functionality of the website as a whole.
The following cookies are generated/used on the website or within modules embedded on pages:
|PHPSESSID||This cookie consists of a randomly generated series of numbers and letters and is used to accurately assign data to a specific user’s Internet browser. This is a Webserver safety feature.||www.intersport-schneider.at||Session*|
|_ga||Google Analytics: enables compilation of data about visits and visitors.||.intersport-schneider.at|
|_gat_gtag_UA_*||Google Analytics: function-specific cookie with varying tasks. Includes compilation of visitor statistics||.intersport-schneider.at||1 minute|
|_gid||Google Analytics: record visitor statistics||.intersport-schneider.at||24 hours|
|fe_typo_user||This cookie contains an identification key which references our system running in the background. The cookie itself does not contain any personal information.||www.intersport-schneider.at||Session*|
*) expires as soon as the browser window is closed