Data Protection

I. Responsible, scope
This data protection declaration clarifies the type, scope and purpose of the processing of personal data (hereinafter referred to as "data") within our online offer www.shop.urbansportsclub.com

Responsible person

Urban Sports GmbH
 Michaelkirchstrasse 20
10179 Berlin
Germany

Email: shop@urbansportsclub.com

You can contact our data protection officer at:

datenschutz@urbansportsclub.com

Further information can be found in the legal notice within our online offer.

II. General information on data processing
1) Scope of the processing of personal data

In principle, we only process personal data of our users insofar as this is necessary to provide a functional online offer and to provide the services we offer. The processing of personal data of our users takes place regularly only with the consent of the user or on the basis of other legal provisions that allow data processing.

If we process your personal data on the basis of your consent, you have the right to withdraw your consent at any time without giving reasons with effect for the future.

We also process personal data for statistical and market analysis purposes. For example, statistics on industry affiliation, location, market area of the website visitors are created and evaluated in anonymized form. You can find details on this in the respective sections of this data protection declaration.  Additional data protection notices may apply to special services (e.g. sending newsletters). We will inform you about this at the beginning of the process of using the respective service.

2) Data deletion and storage duration

In principle and unless otherwise stated, your personal data will only be stored until the purpose for which it was collected and stored no longer applies. In accordance with your consent, data can also be stored longer as long as you do not withdraw your consent.

Storage can also take place if this has been provided for by the European or national legislator in Union regulations, laws or other provisions to which we are subject. This is the case, for example, with billing data, which generally has to be stored for at least 10 years.

If data is stored on the basis of such a legal regulation, its processing will also be restricted accordingly, ie the data will no longer be processed for any other purpose for which it was collected. The data will also be blocked or deleted if a storage period prescribed by the standards mentioned expires, unless there is a need for further storage of the data for the conclusion or fulfillment of a contract.

3) Use of contract processors

In carrying out the services we offer, we use external service providers who, among other things, also process your personal data exclusively on our behalf. This is the case with content delivery networks, payment service providers, fulfillment and dispatch service providers, accounting service providers, newsletter dispatch service providers, as well as with CRM and hosting service providers. With all such contract processors, we have - if required by law - concluded agreements on the processing of personal data on behalf of Art. 28 GDPR.

4) Transfer to third countries

Unless otherwise stated, all data processing takes place within the EU or the EEA countries.

Data processing operations that are carried out by third-party providers located outside the geographic area mentioned can be carried out partly or completely in the countries of the respective branch or in accordance with the respective data protection regulations.

A transfer of personal data outside the EU or the EEA takes place exclusively on the basis of an adequacy decision by the European Commission, or in accordance with standard contractual clauses of the European Commission. A list of the current adequacy decisions is available on the website of the European Commission.

III. Use of data in general form when providing the website and creating log files
When you visit our website, we automatically save usage-related data about the usage process. This includes in particular the IP address, the URLs visited, the length of stay, the operating system and browser used and the amount of data transferred.

We collect this data in order to ensure that our website is available to you. In addition, they are used to anonymously analyze, save and evaluate user behavior and to continuously improve and further develop the service. Further details on the systems used can be found in the sections below on cookies and social media.

We only store your IP address in the log files for a limited period of time, insofar as this is necessary for security purposes. In addition, your IP address is hashed so that we are unable to draw any conclusions about your connection or your device.

Our legitimate interest, which justifies data processing in accordance with Art. 6 Par. 1 lit. f) GDPR, lies in the stated purposes.

The basis of the processing is Article 6, Paragraph 1, Letter f) GDPR.

III. Data processing when creating a user account
a) Creation of a user account

On our website you have the option of creating a user account in order to place orders and to save information on past orders. The following data is required to register an account: Name, surname, email address and password. Other data, such as B. Telephone number, address, contact details and billing data can be provided voluntarily.

We need the data required above to ensure that the user account functions as intended and can only be assigned to you. The collection and processing of personal data in this context is justified by the usage contract that we conclude with you. If you do not provide us with this data, we will unfortunately not be able to set up a customer account for you and we will not be able to provide our associated services.

Facebook holds further information about the collection and use of data as well as your rights and protection options in this regard in the

https://www.facebook.com/policy.php

available data protection information.

b) Placing an order

On our website you can either place an order via your user account or "as a guest" and purchase the products we offer. In this case, we collect the following personal data in the course of the ordering process: first name, last name, delivery address, billing address (if different). You can provide us with further information voluntarily. If this data is already stored in your user account, it is no longer necessary to provide it.

This information is absolutely necessary in order to carry out the sales contract concluded with you and the associated communication with you. If you do not provide us with this data, we will unfortunately not be able to enter into a contract with you.

Payment data is not collected and stored by us, but directly by the payment service provider you have chosen to carry out the payment. We only receive information from the payment service provider as to whether the payment was successful.

The basis of the processing is Article 6, Paragraph 1, Letter b) GDPR.

c) Further processing based on legal obligations

We also store and process personal data that we collect in connection with your use of our website and the tasks of orders, provided that we are obliged or authorized to do so by the relevant statutory provisions. This is the case, for example, with invoice data that we need for proper bookkeeping.

The basis of the processing is Article 6, Paragraph 1, Letter c) GDPR.

V. Data transmission when using the contact form
If you contact us via the contact form on the website, we will receive the personal data that you voluntarily provide to us, ie name, email address, details of your request. We only use this data to respond to your contact. No further processing takes place. If you do not provide us with this data, we will unfortunately not be able to process your request.

The basis of the processing is Art. 6 Para. 1 lit. b) GDPR.

VI. Market analysis
In order to operate our business economically, to be able to recognize market trends, wishes of the contractual partners and users, we analyze the data available to us on business transactions, contracts, inquiries, etc. We process inventory data, communication data, contract data, payment data, usage data, metadata on the basis of the Art. 6 para. 1 lit. f. GDPR, whereby the persons concerned include contractual partners, interested parties, customers, visitors and users of our online offer.

The analyzes are carried out for the purpose of business evaluations, marketing and market research. In doing so, we can take into account information about users with details, e.g. about the services they use. The analyzes serve us to increase the user-friendliness, the optimization of our offer and the economic efficiency. The analyzes serve us alone and are not disclosed externally, unless they are anonymous analyzes based on aggregated values.

The basis of the processing is Article 6, Paragraph 1, Letter f) GDPR.

VII. Use of cookies and other trackers
a) Description and scope of data processing

In order to make visiting our website attractive and to enable the use of certain functions, we use so-called cookies on various pages. These are small text files that are stored on your device. Some of the cookies we use are deleted again at the end of the browser session, i.e. after you close your browser (so-called session cookies). Other cookies remain on your device and enable us or our partner companies to recognize your browser the next time you visit (persistent cookies).

You can set your browser so that you are informed about the setting of cookies and individually decide whether to accept them or to exclude the acceptance of cookies for certain cases or in general. You can also delete cookies manually from your device at any time.

If you do not accept cookies, the functionality of our website may be restricted.

We use cookies in accordance with Art. 6 Para. 1 Letter c) GDPR, insofar as this is necessary to fulfill a legal obligation to which we are subject, as well as, in accordance with Art. 6 Para a weighing of interests, overriding legitimate interests in an optimized presentation of our offer.

We only set other cookies that allow us to monitor and evaluate user behavior for market analysis purposes if you have given us your consent in accordance with Article 6 (1) (a) GDPR. These are third-party cookies that are used when you use our services. Please refer to the following sections for details. Unless otherwise stated, your data will be transmitted to third parties in the USA, whose cookies are used via our website, within the framework of the EU-USA Privacy Shield. However, there is currently no adequacy decision by the European Commission for the USA.

Unless expressly stated otherwise, we only use the following services with your consent. The basis of the processing is therefore Art. 6 Para. 1 Bay. a) GDPR.

 Instagram
To advertise our products and services and to communicate with interested parties or customers, we operate a company presence on the Instagram platform.

We are jointly responsible for this social media platform with Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbor, Dublin 2 Ireland.

Instagram's data protection officer can be reached using a contact form:

https://www.facebook.com/help/contact/540977946302970

We have regulated joint responsibility in an agreement with regard to the respective obligations within the meaning of the GDPR. This agreement, from which the mutual obligations arise, can be accessed under the following link:

https://www.facebook.com/legal/terms/page_controller_addendum

When you visit our online presence on the Instagram platform, Facebook Ireland Ltd. as the operator of the platform in the EU processes user data (e.g. personal information, IP address, etc.).

This user data is used for statistical information about the use of our company presence on Instagram. Facebook Ireland Ltd. uses this data for market research and advertising purposes and to create user profiles. Based on these profiles, Facebook Ireland Ltd. For example, it is possible to advertise users within and outside of Instagram based on their interests. If the user is logged into their Instagram account at the time of access, Facebook Ireland Ltd. also link the data with the respective user account.

If the user contacts Instagram, the personal data entered by the user on this occasion will be used to process the request. The user's data will be deleted by us, provided that the user's request has been finally answered and there are no legal retention requirements, such as in the case of subsequent contract processing, to the contrary.

Facebook Ireland Ltd. possibly also set cookies.

If the user does not agree to this processing, it is possible to prevent the installation of cookies by setting the browser accordingly. Cookies that have already been saved can also be deleted at any time. The settings for this depend on the respective browser. In the case of Flash cookies, processing cannot be prevented via the settings of the browser, but by the corresponding setting of the Flash player. Should the user prevent or restrict the installation of cookies, this may mean that not all Facebook functions can be used to their full extent.

More information about the processing activities, their prevention and the deletion of the data processed by Instagram can be found in Instagram's data policy:

https://help.instagram.com/519522125107875

It cannot be ruled out that the processing by Facebook Ireland Ltd. also via Facebook Inc., 1601 Willow Road, Menlo Park, California 94025 in the USA.

Linking social media via graphic or text link
We also advertise presences on the social networks listed below on our website. The integration takes place via a linked graphic of the respective network. The use of this linked graphic prevents that when a website that has a social media application is called up, a connection is automatically established to the respective server of the social network in order to display a graphic of the respective network itself. The user is only forwarded to the service of the respective social network by clicking on the corresponding graphic.

After the user has been forwarded, information about the user is recorded by the respective network. It cannot be ruled out that the data collected in this way will be processed in the USA.

This is initially data such as the IP address, date, time and page visited. If the user is logged into their user account of the respective network during this time, the network operator can, if necessary, assign the information collected from the specific visit of the user to the user's personal account. If the user interacts via a “share” button on the respective network, this information can be saved in the user's personal user account and, if necessary, published. If the user wants to prevent the information collected from being directly assigned to his user account, he must log out before clicking on the graphic. It is also possible to configure the respective user account accordingly.

The following social networks are linked to our site:

Facebook
Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland, a subsidiary of Facebook Inc., 1601 S. California Ave., Palo Alto, CA 94304, USA.

Data protection declaration: https://www.facebook.com/policy.php

“Facebook” social plug-in
We use the plug-in of the social network Facebook on our website. Facebook is an internet service provided by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA. In the EU, this service is in turn operated by Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland, hereinafter both referred to as “Facebook”.

Further information about the possible plug-ins and their respective functions is available from Facebook

https://developers.facebook.com/docs/plugins/

ready for you.

If the plug-in is stored on one of the pages you visit on our website, your Internet browser will download a representation of the plug-in from the Facebook servers in the USA. For technical reasons, it is necessary for Facebook to process your IP address. In addition, the date and time of your visit to our website are also recorded.

If you are logged in to Facebook while visiting one of our websites with the plug-in, the information collected by the plug-in about your specific visit will be recognized by Facebook. Facebook may assign the information collected in this way to your personal user account there. If you use the so-called “Like” button on Facebook, for example, this information will be saved in your Facebook user account and possibly published on the Facebook platform. If you want to prevent this, you must either log out of Facebook before visiting our website or use an add-on for your Internet browser to prevent the Facebook plug-in from being blocked.

Facebook holds further information about the collection and use of data as well as your rights and protection options in this regard in the

https://www.facebook.com/policy.php

available data protection information.

Google Analytics
We use Google Analytics on our website. This is a web analysis service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, hereinafter referred to as “Google”.

The Google Analytics service is used to analyze the usage behavior of our website.

Usage and user-related information, such as IP address, location, time or frequency of visits to our website, are transmitted to a Google server in the USA and stored there. However, we use Google Analytics with the so-called anonymization function. With this function, Google shortens the IP address within the EU or the EEA.

The data collected in this way is in turn used by Google to provide us with an evaluation of the visit to our website and of the usage activities there. This data can also be used to provide other services related to the use of our website and the use of the Internet.

Google states that it will not associate your IP address with other data. In addition, Google holds

https://www.google.com/intl/de/policies/privacy/partners

Further data protection information is available for you, for example also on the possibilities of preventing the use of data.

Google also offers

https://tools.google.com/dlpage/gaoptout?hl=de

a so-called deactivation add-on along with further information on this. This add-on can be installed with common internet browsers and offers you further control over the data that Google collects when you visit our website. The add-on informs the JavaScript (ga.js) of Google Analytics that information about visiting our website should not be transmitted to Google Analytics. However, this does not prevent information from being transmitted to us or to other web analysis services. You can of course also find out in this data protection declaration whether and which other web analysis services are used by us.

Google AdWords with conversion tracking
We use the advertising component Google AdWords and so-called conversion tracking on our website. This is a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, hereinafter referred to as “Google”.

If you click on an advertisement placed by Google, the conversion tracking we use saves a cookie on your device. These so-called conversion cookies lose their validity after 30 days and are not used to identify you personally.

If the cookie is still valid and you visit a certain page of our website, both we and Google can evaluate that you clicked on one of our advertisements placed on Google and that you were then redirected to our website.

With the information obtained in this way, Google creates statistics for us about the visit to our website. This also gives us information about the number of users who clicked on our ad (s) and the pages of our website that were subsequently accessed. However, neither we nor third parties who also use Google AdWords are able to identify you in this way.

You can also prevent or restrict the installation of cookies by making the appropriate settings in your Internet browser. At the same time, you can delete cookies that have already been saved at any time. The steps and measures required for this, however, depend on the specific Internet browser you are using. If you have any questions, please use the help function or documentation of your Internet browser or contact its manufacturer or support.

Google also offers

https://services.google.com/sitestats/de.html

https://www.google.com/policies/technologies/ads/

http://www.google.de/policies/privacy/

further information on this topic and in particular on the possibilities of preventing the use of data.

Shopify (shop software + web analysis)
a) Shopify Shop Software

We use “Shopify” to host our shop system as well as to present our offers and to process contracts.

The legal basis is Art. 6 Paragraph 1 lit. b) GDPR (contract initiation / contract processing).

"Shopify" is the service of a group of companies consisting of the companies Shopify Data Processing (USA) Inc., Shopify Payments (USA) Inc., Shopify (USA) Inc., Shopify Commerce Singapore Pte. Ltd., and Shopify International Limited exist.

If we are based in the European Economic Area (EEA), processing is carried out by Shopify International Limited, Victoria Buildings, 2nd floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland, hereinafter referred to as "Shopify".

Due to the group of companies, however, it cannot be ruled out that processing will also take place in Canada and the USA, i.e. outside the EEA. However, when data is transmitted to the Canadian Shopify Inc., an adequate level of data protection is guaranteed by the adequacy decision of the European Commission.

Shopify processes the following data on our behalf:

Name, billing address and, if applicable, delivery address, email address, payment details, company name if applicable, telephone number if applicable, IP address, information about orders, information about the retailer shops supported by Shopify that you visit and information about Your device and your internet browser.

Shopify also offers

https://www.shopify.de/legal/datenschutz

further data protection information.

b) Shopify web analytics

Insofar as we also use the Shopify web analysis service on our website, Shopify stores cookies on your device via your internet browser. These cookies collect further information, such as B. The place, time or frequency of your visit to our website are transmitted to a Shopify server and evaluated.

If you do not agree to this processing, you have the option of preventing the storage of the cookie by setting your Internet browser. You can find more information on this under "Cookies" above.

Klarna "CHECK-OUT"

We use the payment service of Klarna Bank AB, Sveavägen 46, 111 34 Stockholm, Sweden, hereinafter referred to as “Klarna”, to process orders through our online shop.

For this purpose, we have integrated the so-called Klarna check-out into the final order page of our online shop.

The legal basis is the fulfillment of the contract according to Art. 6 Para. 1 lit. b.) GDPR.

By integrating Klarna, your internet browser loads the check-out page from a Klarna server. As a result, the operating system you are using, the type and version of your Internet browser, the website from which the check-out was requested, the date and time of the call and the IP address are transmitted to Klarna - even without you with interact with the check-out page.

As soon as you complete the order in our online shop, the data you entered in the input fields on the check-out page will be processed by Klarna on its own responsibility to process the payment.

With the offered payment methods “PayPal” and “Prepayment”, the processing without your further consent is limited to the transfer of the payment data to us or PayPal.

With the payment methods "purchase on account", "hire purchase", "credit card", "direct debit" or "instant transfer", the following personal data in particular are processed by Klarna for the purpose of payment processing as well as for identity and credit checks:

- Contact information, such as names, addresses, date of birth, gender, email address, telephone number, mobile phone number, IP address, etc.

- Information on processing the order, such as product type, product number, price, etc.

- Payment information, such as debit and credit card details (card number, expiry date and CCV code), billing details, account number, etc.

If you choose the payment method "purchase on account" or "hire purchase", Klarna collects and uses personal data and information about your previous payment history to decide whether you will be granted the desired payment method. In addition, probability values are used for your future payment behavior (so-called scoring). The calculation of the scoring is carried out on the basis of scientifically recognized mathematical-statistical procedures.

Klarna puts under

https://cdn.klarna.com/1.0/shared/content/policy/data/de_de/data_protection.pdf

Further information on the processing described above as well as the applicable data protection regulations are available.

c) Duration of storage, possibility of objection and removal

Cookies are stored on the user's computer and transmitted from there to our site or to the third party mentioned above. As a user, you therefore have full control over the use of cookies. You can deactivate or restrict the transmission of cookies by changing the settings in your internet browser. Cookies that have already been saved can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it is possible that not all functions of the website can be used to their full extent. The storage and lifespan of the individual cookies results from the linked data protection declarations of the third party providers.

VIII. Your Rights
If your personal data is processed, you are affected within the meaning of the GDPR and you have the following rights vis-à-vis the person responsible:

Right to information - you have the right to request information about the personal data processed or stored by us. Right to correction - you have the right to request us to correct or add incorrect or incomplete data concerning you. Right to erasure - you have the right, under certain circumstances, to request that we erase your data. Right to restriction of processing - you have the right to ask us to restrict processing of your data in certain circumstances. Right to object - you have the right to object to the processing of your personal data in certain circumstances. Right to data portability - you have the right to request that we pass on or surrender your personal data to another person responsible or to you under certain circumstances.     

Your right to lodge a complaint  You can also lodge a complaint with a data protection authority.

If the personal data relating to you are processed in order to operate direct mail, you have the right to object at any time without giving reasons to the processing of the personal data relating to you for the purpose of such advertising; this also applies to profiling insofar as it is associated with such direct advertising.

If you object to processing for direct marketing purposes, the personal data relating to you will no longer be processed for these purposes.

IX. Changes to this data protection declaration
Due to the dynamic development of the Internet, new technologies and opportunities are constantly evolving. So that we can also let you benefit from these possibilities and technologies, we reserve the right to change this data protection declaration for the future when new, additional or when changing or expanding existing services or service elements.   Insofar as the change to the data protection declaration only affects the use of data in general and / or the use of data for orders and not also the use of data in the context of a user account, the new data protection declaration applies from the date of its update on the website. A change to the data protection declaration, which relates to the use of the data already collected and stored for sending newsletters, will only be made if this is reasonable for you. If and to the extent that changes to the data protection declaration relate to the use of the data already collected and used for sending newsletters, we will notify you in good time by e-mail, on our website or in another form. If there is no objection within the specified period, you will be deemed to have accepted the amended data protection declaration. In the notification, we will inform you of your right to object and the importance of the objection period.