Privacy Policy

The data controller is:
Thomas Richter
GTSports GmbH, Eiswerderstr. 18, Building 129
13585 Berlin
info@grandtoursports.com
Thank you for your interest in our online shop. The protection of your privacy is very important to us. Below, we provide you with detailed information on how we handle your data.

1. Access Data and Hosting

You can visit our websites without providing any personal information. Each time a website is accessed, the web server automatically stores a so-called server log file, which contains, for example, the name of the requested file, your IP address, date and time of access, amount of data transferred, and the requesting provider (access data), and documents the access.
This access data is evaluated exclusively to ensure the smooth operation of the site and to improve our offerings. This serves our predominantly legitimate interests in a correct presentation of our offer as part of a balancing of interests in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR. All access data will be deleted no later than seven days after the end of your visit to the site.
Hosting services by a third-party provider
As part of processing on our behalf, a third-party provider performs the services for hosting and displaying the website for us. This serves our predominantly legitimate interests in a correct presentation of our offer as part of a balancing of interests. All data collected in the context of using this website or in the dedicated forms in the online shop as described below will be processed on its servers. Processing on other servers will only take place within the scope explained here.
This service provider is located within a country of the European Union or the European Economic Area.

2. Data Collection and Use for Contract Processing, Contact, and Opening a Customer Account

We collect personal data when you voluntarily provide it to us as part of your order, when contacting us (e.g., via contact form or email), or when opening a customer account. Mandatory fields are marked as such, because in these cases we absolutely need the data for contract processing, or for processing your contact or opening the customer account, and you cannot complete the order and/or account opening, or send the contact request, without providing them. Which data is collected is evident from the respective input forms. We use the data you provide in accordance with Art. 6 para. 1 sentence 1 lit. b GDPR for contract processing and handling your inquiries. After complete processing of the contract or deletion of your customer account, your data will be restricted for further processing and deleted after the expiry of tax and commercial retention periods, unless you have expressly consented to further use of your data or we reserve the right to further data use, which is legally permitted and about which we inform you in this statement. The deletion of your customer account is possible at any time and can be done either by sending a message to the contact option described below or by using a dedicated function in the customer account.

3. Data Disclosure

For the purpose of fulfilling the contract in accordance with Art. 6 para. 1 sentence 1 lit. b GDPR, we pass on your data to the shipping company commissioned with the delivery, insofar as this is necessary for the delivery of ordered goods. Depending on which payment service provider you select in the order process, we pass on the payment data collected for this purpose to the credit institution commissioned with the payment and, if applicable, to payment service providers commissioned by us or to the selected payment service. In some cases, the selected payment service providers also collect this data themselves if you create an account there. In this case, you must log in with your access data to the payment service provider during the order process. The privacy policy of the respective payment service provider applies in this respect.

We use a payment service provider located in a country outside the European Union.
The transmission of personal data to this company is only carried out within the scope of necessity for contract fulfillment.

Data disclosure to shipping service providers

If you have given us your express consent during or after your order, we will, based on this, transmit your e-mail address to the selected shipping service provider in accordance with Art. 6 Para. 1 S. 1 lit. a GDPR, so that they can contact you for the purpose of delivery announcement or coordination before delivery.
You can revoke your consent at any time by sending a message to the contact option described below or directly to the shipping service provider at the contact address listed below. After revocation, we will delete the data you provided for this purpose, unless you have expressly consented to further use of your data or we reserve the right to further data use, which is legally permitted and about which we inform you in this statement.
cargo-partner GmbH
Sachsenstraße 6
20097
Hamburg

4. Email Newsletter and Postal Advertising

Email advertising with newsletter subscription
If you subscribe to our newsletter, we use the data required for this or separately provided by you to regularly send you our email newsletter based on your consent in accordance with Art. 6 Para. 1 S. 1 lit. a GDPR.
You can unsubscribe from the newsletter at any time by sending a message to the contact option described below or via a dedicated link in the newsletter. After unsubscribing, we will delete your email address unless you have expressly consented to further use of your data or we reserve the right to further data use, which is legally permitted and about which we inform you in this statement.
The newsletter is sent by a service provider on our behalf, to whom we transmit your email address for this purpose.
This service provider is located in the USA and is certified under the EU-US Privacy Shield. A current certificate can be viewed here. Based on this agreement between the USA and the European Commission, the latter has determined an adequate level of data protection for companies certified under the Privacy Shield.

Postal advertising and your right to object

Furthermore, we reserve the right to use your first and last name and your postal address for our own advertising purposes, e.g., to send you interesting offers and information about our products by post. This serves to protect our legitimate interests in advertising to our customers, which are overriding in the context of a balancing of interests, in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR.

5. Cookies and Web Analytics

To make visiting our website attractive and enable the use of certain functions, to display suitable products or for market research, we use so-called cookies on various pages. This serves to protect our predominantly legitimate interests in an optimized presentation of our offer within the framework of a balancing of interests in accordance with Art. 6 Para. 1 S. 1 lit. f GDPR. Cookies are small text files that are automatically stored on your device. Some of the cookies we use are deleted after the end of the browser session, i.e., after you close your browser (so-called session cookies). Other cookies remain on your device and enable us to recognize your browser on your next visit (persistent cookies). You can find the duration of storage in the overview in the cookie settings of your web browser. You can set your browser so that you are informed about the setting of cookies and decide individually whether to accept them or to exclude the acceptance of cookies for

certain cases or generally. Each browser differs in the way it manages cookie settings. This is described in the help menu of each browser, which explains how

you can change your cookie settings. You can find these for the respective browsers under the following links:

Internet ExplorerTM: https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-
manage-cookies

SafariTM: https://support.apple.com/de-de/guide/safari/sfri11471/12.0/mac/10.14
ChromeTM: https://support.google.com/chrome/answer/95647?hl=de&hlrm=en
FirefoxTM https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
OperaTM : https://help.opera.com/de/latest/web-preferences/#cookies
If cookies are not accepted, the functionality of our website may be limited.

Use of Google (Universal) Analytics for web analysis

Insofar as you have given your consent for this in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR, this
website uses Google (Universal) Analytics for the purpose of website analysis. The web analysis service is
offered by Google Ireland Limited, a company registered and operating under Irish law with its registered
office at Gordon House, Barrow Street, Dublin 4, Ireland (www.google.de). Google (Universal) Analytics
uses methods that enable an analysis of your use of the website, such as cookies. The information
automatically collected about your use of this website is usually transferred to a Google server in the USA
and stored there. By activating IP anonymization on this website, the IP address is shortened before being
transmitted within the member states of the European Union or in other contracting states of the Agreement
on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a
Google server in the USA and shortened there. The anonymized IP address transmitted by your browser
within the scope of Google Analytics is generally not merged with other Google data. After the purpose has
ceased and our use of Google Analytics has ended, the data collected in this context will be deleted.
Insofar as information is transferred to Google servers in the USA and stored there, the American company
Google LLC is certified under the EU-US Privacy Shield. A current certificate can be viewed here. Due to
this agreement between the USA and the European Commission, the latter has determined an adequate
level of data protection for companies certified under the Privacy Shield.
You can revoke your consent at any time with effect for the future by downloading and installing the browser
plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de. This prevents the
collection of data generated by the cookie and related to your use of the website (incl. your IP address) as
well as the processing of this data by Google.
Alternatively to the browser plugin, you can click this link to prevent the collection by Google Analytics on
this website in the future. An opt-out cookie will be placed on your device. If you delete your cookies, you
will be asked to give your consent again.
Alternative to the browser plugin, you can click this link to prevent the collection by Google Analytics on
this website in the future. An opt-out cookie will be placed on your device. If you delete your cookies, you
will be asked to give your consent again.

Live Chat Tool Zendesk

If you use the live chat tool to contact us, the data voluntarily entered by you (name, email address,
message) will be processed by us in accordance with Art. 6 para. 1 sentence 1 lit. b GDPR for the purpose
of answering the request within the framework of contract processing. Furthermore, the use of this tool
serves to protect our legitimate interests, which prevail in the context of a balancing of interests, in
effective and improved customer communication in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR.
The data will then be deleted.
As part of an order processing agreement, the third-party provider Zendesk, Inc. provides us with the
services for providing the live chat tool. All data collected during the use of the chat tool is processed on
its servers.
Zendesk, Inc. is based in the USA and is certified under the EU-US Privacy Shield. A current certificate
can be viewed here. Due to this agreement between the USA and the European Commission, the latter
has determined an adequate level of data protection for companies certified under the Privacy Shield.
The data will then be deleted.

Google Maps

This website uses Google Maps to visually display geographical information. Google Maps is offered by
Google Ireland Limited, a company registered and operating under Irish law with its registered office at
Gordon House, Barrow Street, Dublin 4, Ireland (www.google.de). This serves to protect our legitimate
interests, which prevail in the context of a balancing of interests, in an optimized presentation of our offer
and easy accessibility of our locations in accordance with Art. 6 para. 1 lit. f) GDPR.
When using Google Maps, data about the use of the Maps functions by website visitors, which may
include the IP address and location data, is transmitted or processed by Google. We have no influence on
this data processing.

Insofar as information is transferred to Google servers in the USA and stored there, the American company
Google LLC is certified under the EU-US Privacy Shield. A current certificate can be viewed here. Due to
this agreement between the USA and the European Commission, the latter has determined an adequate
level of data protection for companies certified under the Privacy Shield.
To deactivate the Google Maps service and thus prevent data transfer to Google, you must deactivate the
Java-Script function in your browser. In this case, Google Maps cannot be used or can only be used to a
limited extent.
Further information about data processing by Google can be found in Google's privacy policy. The terms
of use for Google Maps contain detailed information about the map service.
Data processing takes place on the basis of an agreement between jointly responsible parties in accordance
with Art. 26 GDPR, which you can view here.
Further information on data processing by Google can be found in Google's data protection notices. The
terms of use for Google Maps contain detailed information on the map service.
Data processing takes place on the basis of an agreement between jointly responsible parties in
accordance with Art. 26 GDPR, which you can view here.

Google Fonts

The script code "Google Fonts" is integrated on this website. Google Fonts is offered by Google Ireland
Limited, a company registered and operating under Irish law with its registered office at Gordon House,
Barrow Street, Dublin 4, Ireland (www.google.de). This serves to protect our legitimate interests, which
prevail in the context of a balancing of interests, in a uniform presentation of the content on our website
in accordance with Art. 6 para. 1 lit. f) GDPR.
In this context, a connection is established between the browser you use and Google's servers. This allows
Google to know that our website has been accessed via your IP address.
Insofar as information is transferred to Google servers in the USA and stored there, the American company
Google LLC is certified under the EU-US Privacy Shield. A current certificate can be viewed here. Due to
this agreement between the USA and the European Commission, the latter has determined an adequate
level of data protection for companies certified under the Privacy Shield.
Further information about data processing by Google can be found in Google's privacy policy.
Further information on data processing by Google can be found in Google's data protection notices.

6. Social Media Plugin

Use of social plugins from Facebook, Instagram
So-called social plugins ("plugins") from social networks are used on our website.
When you access a page of our website that contains such a plugin, your browser establishes a direct
connection to the servers of Facebook, Google, Twitter or Instagram. The content of the plugin is
transmitted directly from the respective provider to your browser and integrated into the page. By integrating
the plugins, the providers receive the information that your browser has accessed the corresponding page of
our website, even if you do not have a profile or are not currently logged in. This information (including your
IP address) is transmitted directly from your browser to a server of the respective provider (possibly in the
USA) and stored there. If you are logged in to one of the services, the providers can directly assign your visit
to our website to your profile in the respective social network. If you interact with the plugins, for example by
clicking the "Like" or "Share" button, the corresponding information is also transmitted directly to a server of
the providers and stored there. The information is also published in the social network and displayed to your
contacts. This serves to protect our legitimate interests, which prevail in the context of a balancing of
interests, in an optimal marketing of our offer in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR.
For the purpose and scope of data collection and the further processing and use of data by the providers,
as well as contact options and your related rights and settings for the protection of your privacy, please refer
to the data protection notices of the providers.
https://www.facebook.com/policy.php
https://help.instagram.com/155833707900388
If you do not want the social networks to directly assign the data collected via our website to your profile in
the respective service, you must log out of the corresponding service before visiting our website. You can
also completely prevent the loading of the plugins with add-ons for your browser, e.g. with the script blocker
"NoScript" (https://noscript.net/).
You can also completely prevent the loading of the plugins with add-ons for your browser, e.g. with the
script blocker "NoScript" (https://noscript.net/).

Youtube Video Plugins

Content from third-party providers is embedded on this website. This content is provided by Google
("provider").
YouTube is offered by Google Ireland Limited, a company registered and operating under Irish law with its
registered office at Gordon House, Barrow Street, Dublin 4, Ireland (www.google.de).
For YouTube videos embedded on our site, the extended data protection setting is activated. This means
that no information from website visitors is collected and stored by YouTube unless they play the video.
The embedding of the videos serves to protect our legitimate interests, which prevail in the context of a
balancing of interests, in an optimal marketing of our offer in accordance with Art. 6 para. 1 sentence 1 lit. f
GDPR.
For the purpose and scope of data collection and the further processing and use of data by the providers
as well as your related rights and settings for the protection of your privacy, please refer to Google's privacy
policy https://policies.google.com/privacy.

Our online presence on Facebook, Instagram

Our presence on social networks and platforms serves to facilitate better, active communication with
our customers and interested parties. We provide information there about our products and ongoing special offers.
When you visit our online presences on social media, your data may be automatically collected and stored for market research and
advertising purposes. From this data, so-called usage profiles are created using pseudonyms.
These can be used, for example, to display advertisements within and outside the platforms
that presumably match your interests. For this purpose, cookies are generally used on your device.
These cookies store visitor behavior and user interests. This serves, according to Art. 6 Para. 1 lit. f. GDPR, to protect
our overriding legitimate interests, within the framework of a balancing of interests, in an
optimized presentation of our offerings and effective communication with customers and interested parties.
If you are asked by the respective social media platform operators for consent to data processing,
e.g. by means of a checkbox, the legal basis for data processing is Art. 6 Para. 1 lit. a GDPR.
The legal basis for data processing is Art. 6 para. 1 lit. a GDPR.
Insofar as the aforementioned social media platforms are headquartered in the USA, the following applies: For the

USA, there is an adequacy decision by the European Commission. This goes back to the EU-
US Privacy Shield. A current certificate for the respective company can be viewed here.

For detailed information on the processing and use of data by the providers on their sites,
as well as contact options and your related rights and settings for the protection of your privacy,
especially objection options (opt-out), please refer to the data protection notices of the providers
linked below. Should you still require assistance in this regard, you can contact us.
contact us.
Facebook: https://www.facebook.com/about/privacy/
Data processing takes place on the basis of an agreement between jointly responsible parties
pursuant to Art. 26 GDPR, which you can view here:
https://www.facebook.com/legal/terms/page_controller_addendum
Instagram: https://help.instagram.com/519522125107875
Opt-out option:
Facebook: https://www.facebook.com/settings?tab=ads
Instagram: https://help.instagram.com/519522125107875

7. Contact options and your rights

As a data subject, you have the following rights:
• pursuant to Art. 15 GDPR, the right to request information about your personal data processed by us
to the extent specified therein;
• pursuant to Art. 16 GDPR, the right to obtain without undue delay the rectification of inaccurate or the completion
of your personal data stored by us;
• pursuant to Art. 17 GDPR, the right to obtain the erasure of your personal data stored by us,
unless further processing is
– for exercising the right to freedom of expression and information;
– for compliance with a legal obligation;
– for reasons of public interest; or
– for the establishment, exercise or defence of legal claims
is required;

• pursuant to Art. 18 GDPR, the right to obtain restriction of processing of your personal
data, if
– the accuracy of the data is contested by you;
– the processing is unlawful and you oppose the erasure of the personal data;
– we no longer need the data, but you require them for the establishment, exercise or
defence of legal claims; or
– you have objected to processing pursuant to Art. 21 GDPR;
• pursuant to Art. 20 GDPR, the right to receive your personal data, which you have provided to us, in
a structured, commonly used and machine-readable format or to request the transmission
to another controller;
• pursuant to Art. 77 GDPR, the right to lodge a complaint with a supervisory authority. As a rule,
you can contact the supervisory authority of your usual place of residence or workplace
or our company's registered office.
For questions regarding the collection, processing or use of your personal data, for information,
rectification, restriction or erasure of data, as well as withdrawal of any given consents or
objection to a specific data use, please contact:
Thomas Richter
Eiswerderstraße 20 A
13585 Berlin
+49 30 67 945 443
info@grandtoursports.com

********************************************************************
Right to object
Insofar as we process personal data as explained above to safeguard our legitimate interests, which prevail in the context of a balancing of interests,
you can object to this processing with effect for the future. If the processing is carried out for direct marketing purposes, you can
exercise this right at any time as described above. If the processing is carried out for other purposes,
you have a right to object only if there are reasons arising from your particular
situation.
After exercising your right to object, we will no longer process your personal data for
these purposes, unless we can demonstrate compelling legitimate grounds for the
processing which override your interests, rights and freedoms, or if the
processing serves the establishment, exercise or defence of legal claims.
This does not apply if the processing is carried out for direct marketing purposes. In that case, we will not further
process your personal data for this purpose.
process. ********************************************************************