Privacy Policy

With the following information, we aim to provide you, as the “data subject,” with an overview of how we process your personal data and inform you of your rights under data protection laws. Using our website is generally possible without providing personal data. However, if you wish to use special services offered by our company through our website, the processing of personal data may be required. If the processing of personal data is necessary and no legal basis exists for such processing, we will generally obtain your consent.

The processing of personal data, such as your name, address, or email address, is always carried out in compliance with the General Data Protection Regulation (GDPR) and in accordance with the country-specific data protection regulations applicable to “THOMAS SPORTWAGEN GMBH.” Through this Privacy Policy, we aim to inform you about the scope and purpose of the personal data we collect, use, and process.

As the data controller, we have implemented numerous technical and organizational measures to ensure the most comprehensive protection possible of the personal data processed via this website. Nevertheless, internet-based data transmissions may inherently have security vulnerabilities, meaning that absolute protection cannot be guaranteed. For this reason, you are free to transmit personal data to us via alternative means, such as by telephone or postal mail.

You can contact our Data Protection Officer via this form or using the contact details provided above, addressed to the Data Protection Officer. Data subjects can reach out to us or our Data Protection Officer at any time with questions or suggestions regarding data protection.

Article 6(1)(a) GDPR (in conjunction with Section 15(3) TMG) serves as the legal basis for processing operations in our company where we obtain consent for a specific processing purpose.

If the processing of personal data is necessary for the performance of a contract to which you are a party—such as processing required for the delivery of goods or the provision of other services or consideration—the processing is based on Article 6(1)(b) GDPR. The same applies to processing operations necessary to carry out pre-contractual measures, such as inquiries about our products or services.

If our company is subject to a legal obligation requiring the processing of personal data, such as to fulfill tax obligations, the processing is based on Article 6(1)(c) GDPR.

In rare cases, the processing of personal data may be necessary to protect the vital interests of the data subject or another natural person. This could occur, for instance, if a visitor is injured on our premises, and their name, age, health insurance details, or other vital information must be passed on to a doctor, hospital, or other third parties. In such cases, the processing would be based on Article 6(1)(d) GDPR.

Finally, processing operations may be based on Article 6(1)(f) GDPR. This legal basis applies to processing not covered by any of the aforementioned legal grounds, where processing is necessary to protect the legitimate interests of our company or a third party, provided these interests are not overridden by the interests, fundamental rights, and freedoms of the data subject. Such processing operations are permitted, in particular, because the European legislator specifically mentioned them. The legislator considered that a legitimate interest might be assumed if you are a customer of our company (Recital 47 Sentence 2 GDPR).

Your personal data will not be disclosed to third parties for purposes other than those outlined below.

We will only share your personal data with third parties if:

1. You have explicitly consented to this under Article 6(1)(a) GDPR, 2. The disclosure is permissible under Article 6(1)(f) GDPR to protect our legitimate interests, and there is no reason to assume that you have an overriding interest in the non-disclosure of your data, 3. There is a legal obligation for disclosure under Article 6(1)(c) GDPR, or 4. It is legally permissible and necessary under Article 6(1)(b) GDPR for the performance of a contractual relationship with you.

To protect your data and enable data transfers to third countries (outside the EU/EEA) where necessary, we have entered into data processing agreements based on the European Commission’s standard contractual clauses.

This website uses SSL or TLS encryption to ensure the security of data processing and to protect the transmission of confidential content, such as orders, login credentials, or contact inquiries that you send to us as the operator. You can recognize an encrypted connection by the “https://” prefix in the browser’s address bar and the lock symbol in your browser’s toolbar.

We use this technology to safeguard the data you transmit.

When using our website for informational purposes only, i.e., when you do not register or transmit information to us in any other way, we only collect data that your browser transmits to our server (so-called “server log files”). Our website collects a range of general data and information with every page request made by you or an automated system. This general data and information are stored in the server log files. The following data may be recorded:

1. The types and versions of browsers used, 2. The operating system used by the accessing system, 3. The website from which the accessing system reaches our website (so-called referrer), 4. The subpages that are accessed through an accessing system on our website, 5. The date and time of access to the website, 6. A shortened Internet protocol address (anonymized IP address), 7. The Internet service provider of the accessing system.

When using this general data and information, we do not draw conclusions about your identity. Instead, this information is required to:

1. Deliver the content of our website correctly, 2. Optimize the content of our website and the advertising for it, 3. Ensure the permanent functionality of our IT systems and the technology of our website, and 4. Provide law enforcement authorities with the necessary information for prosecution in the event of a cyberattack.

The data and information collected will therefore be evaluated statistically and also with the aim of enhancing data protection and data security in our company, ultimately ensuring an optimal level of protection for the personal data we process. The anonymous data in the server log files are stored separately from any personal data provided by the data subject.

The legal basis for data processing is Article 6(1)(f) GDPR. Our legitimate interest arises from the purposes of data collection listed above.

We use cookies on our website. These are small files that your browser automatically creates and stores on your IT system (laptop, tablet, smartphone, etc.) when you visit our site.

The cookie stores information that is specific to the device being used. However, this does not mean that we gain direct knowledge of your identity.

The use of cookies serves, on the one hand, to make the use of our services more convenient for you. For example, we use so-called session cookies to recognize that you have already visited certain pages of our website. These are automatically deleted after you leave our site.

Additionally, we use temporary cookies to optimize the user experience. These cookies are stored on your device for a set period of time. When you visit our site again to use our services, we automatically recognize that you have been here before and which entries and settings you made, so you don’t have to re-enter them.

On the other hand, we use cookies to statistically track the use of our website and evaluate them in order to optimize our services for you. These cookies allow us to automatically recognize, during a return visit to our site, that you have been here before. These cookies are automatically deleted after a defined period of time.

Die durch Cookies verarbeiteten Daten, die für die ordnungsmäßige Funktion der Webseite benötigt werden, sind damit zur Wahrung unserer berechtigten Interessen sowie der Dritter nach Art. 6 Abs. 1 S. 1 lit. f DSGVO erforderlich.

Für alle anderen Cookies gilt, dass Sie über unser Opt-in Cookie-Banner Ihre Einwilligung hierzu im Sinne von Art. 6 Abs. 1 lit. a DSGVO abgegeben haben.

When contacting us (e.g., via contact form or email), personal data is collected. The data collected in the case of a contact form is outlined in the respective contact form. This data is stored and used exclusively for the purpose of responding to your request, contacting you, and for the associated technical administration. The legal basis for processing the data is our legitimate interest in answering your inquiry according to Article 6(1)(f) GDPR. If your contact aims at concluding a contract, the additional legal basis for processing is Article 6(1)(b) GDPR. Your data will be deleted after your request has been fully processed, which occurs when it is clear from the circumstances that the matter has been finally resolved and provided there are no legal retention obligations preventing this.

We collect and process the personal data of applicants for the purpose of managing the recruitment process. The processing may also take place electronically. This is particularly the case when an applicant submits relevant application documents electronically, for example, via email or through a web form on our website. If we enter into an employment contract with an applicant, the submitted data will be stored for the purpose of managing the employment relationship, in compliance with legal requirements. If we do not enter into an employment contract with the applicant, the application documents will be automatically deleted two months after the rejection decision has been communicated, unless there are other legitimate interests on our part that prevent deletion. An example of such a legitimate interest is the obligation to provide evidence in a procedure under the General Equal Treatment Act (AGG).

The legal basis for processing your data is Article 88 GDPR in conjunction with Section 26(1) of the Federal Data Protection Act (BDSG).

Our website gives you the opportunity to subscribe to our company’s newsletter. The personal data transmitted to us when subscribing to the newsletter can be seen from the input form used for this purpose.

We inform our customers and business partners at regular intervals through a newsletter about our offers. Our company’s newsletter can generally only be received if

1. You have a valid email address, and
2. You have registered for the newsletter subscription.

For legal reasons, a confirmation email is sent to the email address you initially registered for the newsletter. This confirmation email serves to verify that you, as the owner of the email address, have authorized the receipt of the newsletter.

When registering for the newsletter, we also store the IP address assigned to you by your internet service provider (ISP) for the IT system you used at the time of registration, as well as the date and time of the registration. The collection of this data is necessary to trace any potential misuse of your email address at a later time and thus serves our legal protection.

The personal data collected as part of the newsletter registration will only be used to send our newsletter. Furthermore, subscribers to the newsletter may be informed by email if this is necessary for the operation of the newsletter service or for registration-related purposes, such as in the case of changes to the newsletter offer or changes to the technical conditions. The personal data collected as part of the newsletter service will not be shared with third parties. You can unsubscribe from our newsletter at any time. The consent to store personal data you have given for the newsletter subscription can be withdrawn at any time. To withdraw consent, there is a corresponding link in every newsletter. Additionally, you can unsubscribe directly on our website or inform us in another way.

The legal basis for data processing for the purpose of sending the newsletter is Art. 6 para. 1 lit. a GDPR.

In order to communicate with you and inform you about our services on social networks, we are represented there with our own pages. When you visit one of our social media pages, we are jointly responsible with the provider of the respective social media platform for the processing activities triggered thereby, which concern personal data, in accordance with Art. 26 GDPR.

We are not the original provider of these pages, but only use them within the framework of the possibilities offered to us by the respective providers.

Therefore, we would like to inform you in advance that your data may also be processed outside the European Union or the European Economic Area. Such use could therefore present data protection risks for you, as the protection of your rights, e.g. the right to information, deletion, objection, etc., may be more difficult, and processing in social networks often takes place directly for advertising purposes or to analyze user behavior by the providers, which we cannot influence. If the provider creates usage profiles, cookies are often used or the user behavior is directly assigned to your own member profile on the social networks (if you are logged in there).

The described processing activities of personal data are carried out in accordance with Art. 6 para. 1 lit. f GDPR, based on our legitimate interest and the legitimate interest of the respective provider, in order to communicate with you in a contemporary manner and inform you about our services. If you need to give consent for data processing as a user with the respective providers, the legal basis is Art. 6 para. 1 lit. a GDPR in conjunction with Art. 7 GDPR.

Since we do not have access to the providers’ data stocks, we would like to point out that you should exercise your rights (e.g. right to information, correction, deletion, etc.) directly with the respective provider. Further information on the processing of your data in the social networks and the possibility to exercise your right to object or revoke (so-called opt-out) is provided by us below with the respective social network provider we use:

(Joint) controller for data processing in Europe:
Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland

Privacy Policy (Data Policy):
https://www.facebook.com/about/privacy

Opt-Out and Advertising Settings:
https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen
https://de-de.facebook.com/about/privacy/

(Joint) controller for data processing in Europe:
LinkedIn Ireland Unlimited Company Wilton Place, Dublin 2, Ireland

Privacy Policy:
https://www.linkedin.com/legal/privacy-policy

Opt-Out and Advertising Settings:
https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out

(Joint) controller for data processing in Europe:
LinkedIn Ireland Unlimited Company Wilton Place, Dublin 2, Ireland

Privacy Policy:
https://www.linkedin.com/legal/privacy-policy

Opt-Out and Advertising Settings:
https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out

(Joint) controller for data processing in Germany:
XING AG, Dammtorstraße 29-32, 20354 Hamburg, Germany

Privacy Policy:
https://privacy.xing.com/de/datenschutzerklaerung

Disclosure requests for XING members:
https://www.xing.com/settings/privacy/data/disclosure

On our websites, we use Google Analytics, a web analytics service provided by Google Ireland Limited (https://www.google.de/intl/en/about/) (Gordon House, Barrow Street, Dublin 4, Ireland; hereinafter “Google”). In this context, pseudonymized usage profiles are created and cookies (see “Cookies” section) are used. The information generated by the cookie about your use of this website, such as

1. Browser type/version,
2. Operating system used,
3. Referrer URL (the previously visited page),
4. Hostname of the accessing computer (IP address),
5. Time of the server request,

is transmitted to a Google server in the USA and stored there. The information is used to evaluate the use of the website, to compile reports on website activities, and to provide additional services related to website usage and internet usage for market research and tailored design of these websites. This information may also be transferred to third parties if required by law or if third parties process this data on behalf of Google. In no case will your IP address be combined with other Google data. IP addresses are anonymized, so that assignment is not possible (IP masking).

You can prevent the installation of cookies by adjusting the settings of your browser software; however, we point out that in this case, not all features of this website may be fully available.

These processing activities are carried out solely upon obtaining your explicit consent according to Art. 6 (1) (a) GDPR.

Furthermore, you can prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) as well as the processing of this data by Google by downloading and installing a browser add-on (https://tools.google.com/dlpage/gaoptout?hl=en).

Alternatively, especially on mobile devices, you can prevent the collection by Google Analytics by clicking on the following link: Disable Google Analytics. An opt-out cookie will be set, which prevents the future collection of your data when visiting this website. The opt-out cookie is valid only in this browser and for our website and is stored on your device. If you delete the cookies in this browser, you must set the opt-out cookie again.

For more information on data protection related to Google Analytics, you can refer to the Google Analytics Help (https://support.google.com/analytics/answer/6004245?hl=en).

We have integrated Google Remarketing services on this website. Google Remarketing is a feature of Google AdWords that allows a business to display ads to internet users who have previously visited the business’s website. The integration of Google Remarketing enables a company to create user-specific ads and subsequently display interest-relevant advertisements to the internet user.

The operator of the Google Remarketing services is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

The purpose of Google Remarketing is to display interest-relevant advertisements. Google Remarketing allows us to display ads via the Google advertising network or on other websites, which are tailored to the individual needs and interests of internet users.

Google Remarketing sets a cookie on the IT system of the affected person. By setting the cookie, Google enables the recognition of the visitor to our website when they visit other websites that are also members of the Google advertising network. Each time a webpage that has the Google Remarketing service integrated is accessed, your internet browser automatically identifies itself to Google. As part of this technical process, Google obtains personal data, such as your IP address or browsing behavior, which Google uses, among other things, to display interest-relevant advertisements.

The cookie stores personal information, such as the websites you have visited. Therefore, with each visit to our website, personal data, including your IP address, is transmitted to Google in the United States of America. This personal data is stored by Google in the United States of America. Google may transfer the personal data collected through this technical process to third parties.

You can prevent the setting of cookies by our website, as outlined above, at any time by adjusting the settings of the browser you use, thereby permanently objecting to the setting of cookies. Such a setting in the browser you use would also prevent Google from setting a cookie on your IT system. In addition, a cookie already set by Google Analytics can be deleted at any time through the internet browser or other software programs.

Furthermore, you have the option to object to interest-based advertising by Google. To do so, you must open the link www.google.de/settings/ads in your internet browser and make the desired settings there.

These processing activities are carried out solely upon obtaining your explicit consent according to Art. 6 (1) (a) GDPR.

For more information and the applicable privacy policy of Google, please visit https://www.google.de/intl/en/policies/privacy/.

This website uses Google Tag Manager, a cookie-free domain that does not collect personal data.

Through this tool, “website tags” (i.e., keywords that are embedded in HTML elements) can be implemented and managed via an interface. By using Google Tag Manager, we can automatically track which button, link, or personalized image you have actively clicked on, and we can then determine which content of our website is particularly interesting to you.

The tool also triggers other tags that may collect data. Google Tag Manager does not access this data. If you have made a deactivation on a domain or cookie level, it will remain effective for all tracking tags implemented with Google Tag Manager.

These processing activities are carried out solely upon obtaining your explicit consent according to Art. 6 (1) (a) GDPR.

Our website uses so-called web fonts provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, to ensure a consistent display of fonts. When you visit a page, your browser loads the required web fonts into your browser cache to correctly display text and fonts.

For this purpose, the browser you are using must establish a connection to Google’s servers. This allows Google to know that our website has been accessed via your IP address. The use of Google Web Fonts is in the interest of a uniform and visually appealing presentation of our website.

These processing activities are carried out solely upon obtaining your explicit consent according to Art. 6 (1) (a) GDPR.

For more information about Google Web Fonts, visit https://developers.google.com/fonts/faq and Google’s privacy policy: https://www.google.com/policies/privacy/

In accordance with our information obligations under Articles 13 and 14 of the GDPR, we would like to inform you about the video surveillance on our premises and your rights as a data subject.

The video surveillance is carried out exclusively for the purpose of preventing theft, burglary, and vandalism, as well as for the protection of property rights. The processing is necessary for the protection of the legitimate interests of the data controller pursuant to Art. 6(1)(f) GDPR in conjunction with §4 BDSG.

No recording of employees or their work performance takes place. Since the recordings may only be used for specific purposes within a short time frame and are subsequently deleted, the interests or fundamental rights and freedoms of the data subjects do not outweigh.

The recordings will be stored for a maximum of 72 hours. The storage of the video data is considered lawful as long as it is necessary to achieve the intended purpose and it is not assumed that the protected interests of the data subjects outweigh. According to §4 Para. 5 BDSG, the recordings will be immediately deleted after the purpose has been achieved or when there is a risk to the protected interests of the data subjects, and this deletion will be irreversible.

Facilitymanager, IT-Administrators

(see point 14)

You have the right to request confirmation from us as to whether personal data concerning you is being processed.

You have the right to request free information from us at any time about the personal data stored about you, as well as a copy of this data in accordance with the legal provisions.

You have the right to request the correction of inaccurate personal data concerning you. Furthermore, you have the right, taking into account the purposes of the processing, to request the completion of incomplete personal data.

You have the right to request the immediate deletion of personal data concerning you, provided that one of the legally specified reasons applies and as long as the processing or storage is not required.

You have the right to request the restriction of processing from us if one of the legal requirements is met.

You have the right to receive the personal data concerning you, which was provided to us by you, in a structured, commonly used, and machine-readable format. You also have the right to transmit this data to another controller without hindrance from us, to whom the personal data has been provided, provided that the processing is based on consent in accordance with Art. 6 para. 1 lit. a DSGVO or Art. 9 para. 2 lit. a DSGVO, or on a contract in accordance with Art. 6 para. 1 lit. b DSGVO, and the processing is carried out by automated means, unless the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in us.

Furthermore, when exercising your right to data portability in accordance with Art. 20 para. 1 DSGVO, you have the right to request that the personal data be transmitted directly from one controller to another, insofar as this is technically feasible and does not affect the rights and freedoms of other individuals.

You have the right to object at any time to the processing of personal data concerning you, which is based on Art. 6 para. 1 lit. e (processing in the public interest) or f (processing based on a balancing of interests) DSGVO, for reasons related to your particular situation.

This also applies to profiling based on these provisions in accordance with Art. 4 No. 4 DSGVO.

If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms, or the processing is necessary for the establishment, exercise, or defense of legal claims.

In individual cases, we process personal data for the purpose of direct marketing. You can object at any time to the processing of your personal data for such marketing purposes. This also applies to profiling insofar as it is related to such direct marketing. If you object to the processing for direct marketing purposes, we will no longer process your personal data for these purposes.

Furthermore, you have the right, for reasons related to your particular situation, to object to the processing of personal data concerning you that is carried out by us for scientific or historical research purposes or statistical purposes in accordance with Art. 89 para. 1 DSGVO, unless such processing is necessary for the performance of a task carried out in the public interest.

You are free to exercise your right to object in connection with the use of information society services, regardless of Directive 2002/58/EC, through automated means using technical specifications.

You have the right to withdraw your consent to the processing of personal data at any time with effect for the future.

You have the right to lodge a complaint with a supervisory authority responsible for data protection regarding our processing of personal data.

We process and store your personal data only for the period necessary to achieve the storage purpose or as required by the legal regulations to which our company is subject.

If the storage purpose no longer applies or if a prescribed retention period expires, the personal data will be routinely blocked or deleted in accordance with legal regulations.