This service (hereinafter referred to as "App") is provided by GSG Great Sports GmbH, Massener Str. 119a, 59423 Unna (hereinafter referred to as "we" or "us") as the party responsible as defined by data privacy laws as amended in each case.
As part of the App, we enable you to call up and display the following information: fitness data which is read into the App via an iVibes product. When using the App, we process personal data about you. Personal data means any information relating to an identified or identifiable natural person. Because protecting your privacy when using the App is important to us, we would like to use the following information to inform you which personal data we process when you use the App and how we handle this data. Furthermore, we will inform you of the legal basis for the processing of your data and, insofar as the processing is necessary to safeguard our legitimate interests.
You can view this data privacy statement at any time under the menu item "_____________"
within the App.
Certain information is already processed automatically as soon as you use the App. In the following we have listed for you exactly which personal data are processed:
1 Information collected during download
When you download the App, certain required information is transmitted to the App Store you have selected (e.g. Google Play or Apple App Store), in particular the user name, e-mail address, customer number of your account, time of download, payment information as well as the individual device identification number can be processed. These data are processed exclusively by the respective App Store and is beyond our control.
2 Information collected automatically
As part of your use of the App, we automatically collect certain data that are necessary for the use of the App. This includes:
These data are automatically transmitted to us, but not stored, (1) to provide you with the service and related features; (2) to improve the functions and features of the App; and (3) to prevent and correct misuse and malfunctions. This data processing is justified by the fact that (1) the processing is necessary for the fulfillment of the contract between you as the person concerned and us pursuant to Article 6 (1) letter b) GDPR for the use of the App, or (2) we have a legitimate interest in ensuring the functionality and error-free operation of the App and to be able to offer a service in line with the market and interests, which here outweigh your rights and interests in the protection of your personal data as defined by Article 6 (1) letter f) GDPR.
3 Creation of a user account and registration
When you create or register a user account, we use your access data (e-mail address and password) to grant you access to your user account and to manage it ("mandatory data"). Mandatory data within the scope of registration is marked with an asterisk and is required for the conclusion of the user contract. If you do not provide this information, you will not be able to create a user account.
In addition, you can provide the following voluntary information as part of the registration:
We use the mandatory data to authenticate you when you log in and to respond to requests to reset your password. We process and use the data you enter during registration or login (1) to verify your authorisation to manage the user account; (2) to enforce the terms of use of the App and all rights and obligations associated therewith; and (3) to contact you in order to send you technical or legal notices, updates, security messages or other messages regarding the management of the user account.
We use voluntary information to display it according to your settings within the App and to make it available to other users of the App at your request.
This data processing is justified by the fact that (1) the processing is necessary for the fulfillment of the contract between you as the person concerned and us pursuant to Article 6 (1) letter b) GDPR for the use of the App, or (2) we have a legitimate interest in ensuring the functionality and error-free operation of the App and to be able to offer a service in line with the market and interests, which here outweigh your rights and interests in the protection of your personal data as defined by Article 6 (1) letter f) GDPR.
4 Using the App
Within the App you can enter, manage and edit various information, tasks and activities. This information includes, but is not limited to, data collected from you using an iVibe product, such as fitness data ________________
The App also requires the following permissions:
– Internet access: this is required to store your entries on our servers.
– Camera access: this is required so that you can take photos of your documents and store them in the App and on our servers and transmit them to third parties.
The processing and use of usage data is carried out to provide the service. This data processing is justified by the fact that the processing is necessary for the fulfilment of the contract between you as the person concerned and us in accordance with Article 6 (1) letter b) GDPR for the use of the App.
Apart from the cases explicitly mentioned in this data privacy statement, your personal data will only be passed on without your express prior consent if it is legally permissible or necessary. This may be the case, among others, if the processing is necessary to protect vital interests of the user or another natural person.
1 If it is necessary for the clarification of an illegal or abusive use of the App or for legal prosecution, personal data will be forwarded to law enforcement authorities or other authorities and, if applicable, to injured third parties or legal advisors. However, this only happens if there are indications of illegal or abusive behaviour. Relaying can also take place if this serves the enforcement of terms of use or other legal claims. We are also legally obliged to provide information to certain public bodies on request. These are law enforcement agencies, authorities that pursue administrative offences for which fines have been imposed, and the tax authorities.
Any relaying of personal data is justified by the fact that (1) the processing is necessary for the fulfilment of a legal obligation which we are obliged to fulfil pursuant to Article 6 (1) letter f) GDPR in connection with national legal specifications on relaying data to law enforcement agencies or (2) we have a legitimate interest in relaying the data to the aforementioned third parties if there are indications of abusive behaviour or in order to enforce our terms of use, other conditions or legal claims and your rights and interests in the protection of your personal data as defined by Article 6 (1) letter f) GDPR do not prevail.
2. We are dependent on the following external companies and external service providers to provide our services:
Relaying of personal data is justified by the fact that we have carefully selected our external companies and external service providers within the framework of Article 28 (1) GDPR as processors, regularly checked them and contractually obliged them to process all personal data exclusively in accordance with our instructions.
3 In the course of the further development of our business, the structure of our company may change as a result of changes in the legal form, the establishment, purchase or sale of subsidiaries, parts of companies or components. In such transactions, customer information may be shared with the part of the business being transferred. Whenever we relay personal data to third parties to the extent described above, we ensure that this is done in accordance with this data privacy statement and the applicable data privacy laws.
Relaying of personal data is justified by the fact that we have a legitimate interest in adapting our company form to the economic and legal circumstances as necessary and that your rights and interests in the protection of your personal data as defined by Article 6 (1) letter f) GDPR do not outweigh our own.
We also process data in states outside the European Economic Area ("EEA"). This concerns in particular:
[Name and member state of the head office of the service provider]
For the USA, the European Commission decided on 12 July 2016 that an adequate level of data protection exists under the provisions of the EU-U.S. Privacy Shield (Decision on Adequacy, Article 45 GDPR). The [service provider] is a company certified according to the EU-U.S. Privacy Shield.
Alternatively: In order to guarantee the protection of the personal rights of the users, also in the context of these data transfers, we make use of the standard contractual clauses of the EU Commission in accordance with Article 46 (2) letter c) GDPR when drafting the contractual relationships with the recipients [service providers] in third countries. These are available at [Internet address] at any time; alternatively you can also request these documents from us using the contact details given below.
Processing of your personal data for purposes other than those described above will only be carried out if permitted by law or if you have consented to the amended purpose of the data processing. In the event of further processing for purposes other than those for which the data were originally collected, we will inform you of these other purposes prior to further processing and provide you with all other relevant information.
Period of data storageWe will delete or make anonymous your personal data as soon as they are no longer required for the purposes for which we have collected or used them in accordance with the above paragraphs. As a rule, we store your personal data for the duration of the usage or contractual relationship via the App plus a period of 7 days, during which we keep backup copies after deletion, as long as these data are no longer required for criminal prosecution or to secure, assert or enforce legal claims. Specific details in this data privacy statement or legal requirements for the storage and deletion of personal data, especially those that we have to store for tax reasons, remain unaffected.
Your rights as the person concerned
1 Right to information
You have the right to obtain from us, at any time and upon request, information on the personal data processed by us and relating to you within the scope of Article 15 GDPR. To do this, you can submit an application by post or by e-mail to the address given below.
2 Right to correction of incorrect data
You have the right to ask us to rectify any personal data concerning you without delay if they are incorrect. Please contact the address below for this purpose.
3 Right to deletion
You have the right, under the conditions described in Article 17 GDPR, to ask us to delete the personal data concerning you. These conditions shall provide in particular for a right to deletion where personal data are no longer necessary for the purposes for which they were collected or otherwise processed and in cases of unlawful processing, opposition or an obligation to delete them under Union law or the law of the Member State to which we are subject. Regarding the period of data storage, please refer to number 5 of this data privacy statement. To exercise your right to deletion, please contact the address given below.
4 Right to restriction of processing
You have the right to demand that we restrict processing in accordance with Article 18 GDPR. This right exists in particular if the accuracy of the personal data is disputed between the user and us, for the period of time required to verify its accuracy, and in the event that the user requests limited processing instead of deletion in the event of an existing right to deletion; also in the event that the data are no longer required for the purposes pursued by us, but the user requires them for the assertion, exercise or defence of legal claims and if the successful exercise of an objection is still disputed between us and the user. To exercise your right to restrict processing, please contact the address as given below.
5 Right to data transferability
You have the right to receive from us the personal data concerning you that you have provided us with in a structured, common, machine-readable format in accordance with Article 20 GDPR. To exercise your right to data transferability, please contact the address as given below.
In accordance with Article 21 GDPR you have the right to object at any time, for reasons arising from your particular situation, to the processing of personal data concerning you, which is carried out on the basis of Article 6 (1) letter e) or f) GDPR. We will stop processing your personal data unless we can prove compelling reasons for processing that are worthy of protection and outweigh your interests, rights and freedoms, or if the processing serves to assert, exercise or defend legal claims.
Right of complaintYou also have the right to address complaints to the competent supervisory authority. The competent supervisory authority is:
ContactIf you have any questions or comments regarding our handling of your personal data or if you wish to exercise the rights mentioned in numbers 6 and 7 as the person concerned, please contact Sven Hüchtmann, s.huechtmann@greatsports.de
Amendments to this data privacy statementWe always keep this data privacy statement up to date. We therefore reserve the right to change it from time to time and to update changes in the collection, processing or use of your data. The current version of the data privacy statement is always available at "__________" within the App
