Data Protection Statement

Data controller in terms of the data protection laws, in particular the EU General Data Protection Regulation (GDPR):

SportA
Sportrechte- und Marketing-Agentur GmbH
Nymphenburger Str. 5
D-80335 Munich
e-mail: info@sporta.de

represented by the Managing Directors Marc Freyberger and Daniel von Busse,

hereafter referred to as “SportA GmbH”, “we” or “us”.

Personal data refers to all information that relates to an identified or identifiable natural person and that you provide to us on a voluntary basis / to the collection of which you have consented in advance.

Your rights

You can exercise the following rights by contacting our Data Protection Officer using the contact details below:

• Information about your data that is stored with us, and how it is processed (Art. 15 GDPR),
• Correction of incorrect personal data (Art. 16 GDPR),
• Right to erasure of your data that is stored with us (Art. 17 GDPR),
• Restrictions on data processing activities if we are not permitted to delete your data due to statutory obligations (Art. 18 GDPR),
• Objection to our processing of your data (Art. 21 GDPR), and
• Data transferability if you have consented to the processing of the data or have concluded an agreement with us (Art. 20 GDPR).

If you have automatically consented to the processing of your data, you can withdraw this consent at any time with future effect.

You can contact the Broadcasting Data Protection Officer at kontakt@rundfunkdatenschutz.de.

Provision of the website and creation of log files

Type and purpose of processing:

Every time our website is accessed, our system will automatically gather data and information from the computer system of the accessing computer.

The following data is collected:
(1) information about the browser type and the version used
(2) the user’s operating system
(3) the user’s internet service provider
(4) the user’s IP address
(5) date and time of access
(6) websites that are accessed by the user’s system via our website

This data is also stored in the log files of our system. It is not stored together with other personal details about the user. Art. 6 para. 1 f GDPR forms the legal basis for the merely temporary storage of the data and the log files. The system must store the IP address on a temporary basis so it can make the website available to the user’s computer. To this end, the user’s IP address must be stored for the duration of the session.

The data is only stored in the log files to warrant the functionality of the requested website. In addition, we also use the data to optimise the website and ensure the security of our IT systems. However, the data is not analysed for marketing purposes in this context. These purposes also give rise to our legitimate interest in data processing pursuant to Art. 6 para. 1 f GDPR.

Retention period:

The data is deleted as soon as it is no longer required for the purpose for which it was collected. In instances where data was collected to make the website available, this will be the case once the respective session has ended,

The same applies after a maximum period of seven days for data stored in log files. It is possible that the data is stored beyond this period. In that case, users’ IP addresses are deleted or modified so that the accessing client can no longer be assigned.

The collection of the data for making the website available, and for storing the data in log files, is an absolute requirement for operating the website. Therefore, users do not have the option to object in this regard.

Cookies

Type and purpose of processing:

Along with many other websites, we also use so-called “cookies”. Cookies are small text files that are placed on your hard drive by a website server. Cookies automatically provide us with certain data such as IP address, browser used, operating system and your connection to the internet.

Cookies cannot be used to start programs or transmit viruses on a computer. The information contained in the cookies allows us to make navigation easier and to ensure that our websites are displayed correctly. In no case will the data we collect be forwarded to third parties or linked to personal data without your consent.
Of course, in most cases you can also use our website without cookies. Internet browsers are usually set up to accept cookies. Usually, you can deactivate cookies by changing the settings in your browser. Please use the help functions of your internet browser to find out how these settings can be changed. Please note that by deactivating the cookies, you may no longer be able to use certain functions on our website.

Retention period and cookies used:

If you consent to the use of cookies via your browser settings or with your consent (Art. 6 para. 1 a GDPR), the following cookies may be used on our website:

• phpSessionID cookie, which remains for the duration of the website visit
• Cookieconsent_status cookie: Stores the user’s consent status for one year

You can use your browser settings to delete some or all cookies. In addition, you also receive information and instructions on how to delete these cookies or to block their storage in advance. Depending on your browser provider, the required information can be found in the links below:

• Mozilla Firefox: https://support.mozilla.org/de/kb/cookies-loeschen-daten- von- websites-entfernen
• Internet Explorer: https://support.microsoft.com/de-de/help/17442/windows- internet- explorer-delete-manage-cookies
• Google Chrome: https://support.google.com/accounts/answer/61416?hl=de
• Opera: http://www.opera.com/de/help
• Safari: https://support.apple.com/kb/PH17191?locale=de DE&viewlocale=de DE

Contact form

Type and purpose of processing:

The data you have entered will be stored for the purpose of communicating with you. For this purpose, you must provide a valid e-mail address and your name. This information is used to assign and respond to the inquiry. The provision of additional data is optional.

Legal basis:

The data entered in the contact form is processed on the basis of a legitimate interest (Art. 6 para. 1 a GDPR). By providing a contact form, we want to make it easy for you to contact us. The information you provide will be stored so the inquiry can be processed, and for possible follow-up questions.

If you contact us to receive an offer, i.e. you wish to enter into a business relationship with us, the data entered in the contact form will be processed in order to implement pre-contractual activities (Art. 6 para. 1 b GDPR).

Recipient:

The data is only received by the unit in charge and possibly by the processor.

No data will be forwarded to third parties in this context. The data is only used to process conversation.

Retention period:

The data is deleted as soon as it is no longer required for the purpose for which it was collected. With regard to personal data that was sent by e-mail, that will be the case if the respective conversation with the user has ended. A conversation has ended if it is evident, based on the circumstances, that the relevant matter has been finally settled. If a contract is established, we are subject to the statutory retention periods pursuant to HGB (German Commercial Code), and we will delete your data following the expiry of these time periods.

Mandatory or required provision:

You provide your personal data on a voluntary basis. We can only process your inquiry if you provide us with your name, e-mail address and the reason for your inquiry.

Forwarding of data to third parties

Data that is provided to SportA GmbH will only be forwarded to service providers for the purposes outlined in this statement. The agreements required under the data protection legislation have been arranged with the service providers (processors). With the selection of data processors, and by entering into the appropriate contractual agreements with the data processors, we ensure that data protection will be ensured during the entire time that your personal data is processed. The respective contracting parties are required to process your personal data solely on our behalf and pursuant to our directives.

For the purpose of maintaining, hosting and supporting the website, we forward services to our data processor WestWing Online GmbH, which is based in Munich.

SSL encryption

We use up-to-date encryption methods (e.g. SSL) via HTTPS to ensure the security of your data during transmission.

Changes to our data privacy provisions

We reserve the right to amend this data privacy statement to ensure it always complies with the current legal requirements, or to implement changes to our services in the data protection statement (e.g. introduction of new services). In that case, the new data protection statement applies the next time you visit.

Questions for the Data Protection Officer

For questions relating to data protection, please write us an e-mail or contact the person in charge of data protection in our organisation:

Dirk Seeburg, BAY GmbH Auditing and Accounting Company – Solicitors
Technopark II | Werner-von-Siemens-Ring 12
85630 Grasbrunn
Telephone: +49 (89) 90 420 49 62
e-mail: datenschutz@sporta.de

The data privacy statement was generated with the help of the data protection statement generator activeMind AG (Version 2018-06-15) and was adapted to the requirements of SportA.