Data Privacy Policy

The legal regulations for the protection of your data can be found in the General Data Protection Regulation (GDPR).
SR Suntour Europe GmbH, Riedstrasse 31, 83627 Warngau, Germany, is the responsible controller in terms of the GDPR.

Below you will find information about what personal data - that is all data that identifies or makes you identifiable, such as name, address, e-mail address or even user behavior - we collect during your visit to our website and how this data is used. Should you have any further questions, please feel free to contact us at service@srsuntour-cycling.com.
You also have the right to file a complaint to any supervisory authority in the event of unlawful use of the data. The competent supervisory authority for us is:

Bavarian State Office for Data Protection Supervision
PO Box 606
91511 Ansbach
Germany
Phone: +49 (0) 981 53 1300
Fax: +49 (0) 981 53 98 1300
e-mail: poststelle@lda.bayern.de

1. Server Data

When you visit our site, various server statistics are automatically stored, which your browser sends to the server of our provider: IP address, date and time of access, name of the file accessed, subpage as well as anonymous user name, city, region and country of the user, operating system of the user, browser of the user, browser version of the user, interactions of the user on the website, pages visited by the user, duration of the session and number of sessions of the user, date of the first visit to the site, date and time of each interaction of the user, time spent on the site, duration of the user's requests, user's requests, exception errors of the site, date and time and duration of exception errors logged.

This data is used for statistical evaluation of the visits to our site and cannot be assigned to specific persons.

The legal basis for the collection of data is Art. 6 para. 1 lit. f) GDPR. A consolidation of this data with other data sources is not carried out. The IP address will be anonymized. Our legitimate interest in the collection of this data is based on the fact that we can use the data to optimize our offer for users, e.g. by preventing access from malicious sites or by optimizing access via certain browsers, and that the log of the IP address is what makes the delivery of the site to the visitor possible in the first place.

Generally you have the right to object to this collection of data. This is actually not possible in this case, because otherwise the content of this site can´t be carried out and the use of the site would not be possible.

The data will be deleted as soon as they are no longer required for the above-mentioned purposes.

1a. Security of data transmission

For the transmission of your data we use a secure server with SSL technology (Secure Socket Layer) with a 128-bit encryption. Thus your data is transmitted to us securely and unreadable for unauthorized persons.

Your passwords are hashed, i.e. stored cryptologically, and are thus protected from access by third parties as well as the responsible persons.

2. Processing and disclosure of personal data

2a. General information

As far as you have provided us with personal data, we use it to answer your inquiries, to advise you and to process contracts concluded with you and for technical administration. Your personal data will, except in the cases explicitly mentioned in this declaration, only be passed on or otherwise transmitted to third parties if this is necessary for the purpose of contract processing, for billing purposes or if you have given your prior consent. You have the right to revoke your consent with effect for the future at any time, see also section 11 on your rights as a data subject. Where we base the data processing on legitimate interests, you have the right to object.

2b. Performance of a contract

In the context of contracts of sale concluded with you, we collect and store the personal data you provide, such as name, address, for the purpose of contract processing, e.g. also for invoicing.

A passing on of the data takes place in the context of the accounting to banks. The accounting data will be transferred to the tax authorities within the framework of the legal tax requirements.

The legal basis for the collection, processing and transfer of data within the scope of contract processing is Art. 6 Par. 1 lit. b) GDPR. The legal basis for the transfer of the data to the tax authorities is Art. 6 para. 1 lit. c) GDPR.

The deletion of this data is carried out after the expiry of the applicable statutory storage obligations. As far as we are not subject to any legal storage obligations, the deletion of the data is carried out when the purpose of processing the data ceases to apply.

You have the right of information to your data stored by us at any time, see below. Clause 11 on your rights of data subjects.

2c. Request by e-mail

If you send us a contact request by e-mail, we collect and store the e-mail address and the data contained in the e-mail.

Legal basis: Should a contractual relationship develop from the inquiry in the course of contract initiation or should the inquiry refer to an existing contractual relationship, the legal basis is Art. 6 para. 1 lit. b) GDPR, as the storage of the data is necessary for the fulfilment of a pre-contractual or contractual obligation. Furthermore, we also have a legitimate interest according to Art. 6 para. 1 letter f) GDPR in the processing of the data for the purpose of communication and answering your inquiries.

The data will be deleted when the purpose for which it was stored no longer applies, i.e. after your e-mail inquiry has been answered or when the matter associated with the inquiry has been finally clarified. In the case of an existing contractual relationship or a contractual relationship resulting from the inquiry, the data will be deleted after expiry of the statutory retention periods.

3. Cookies

The Internet pages use so-called cookies in several places. They serve to make our offer more user-friendly, more effective and safer. A cookie is a piece of text information that our website places on the user´s device via your web browser. Most of the cookies we use are so-called "session cookies". They are automatically deleted at the end of your visit. We also use cookies that recognize your browser when you log in to your customer account and facilitate access to the stored content.

The legal basis is Art. 6 para. 1 lit. f) GDPR. Our legitimate interest results from the fact that we only use the above-mentioned cookies to make the site easier to access for you, do not collect any tracking data and therefore do not interfere with your personal rights and fundamental freedoms.

You can exclude the acceptance of cookies in your web browser. However, this may possibly lead to impairments in functionality. For your further rights of data subjects, please see section 11 below.

These cookies are only valid for the duration of your browser session and will be deleted when you end your visit to our site.

11. Rights of the data subjects

a. Right to object

If we process your data to protect legitimate interests (Art. 6 Par. 1 lit. f) GDPR), you may object to this processing for reasons arising from your particular situation. We will then no longer process your personal data unless we can prove compelling reasons for processing worthy of protection that outweigh your interests, rights and freedoms or the processing serves to assert, exercise or defend legal claims.

In the event of an objection to data processing for the purpose of direct marketing, processing for this purpose will no longer be carried out.

b. Right of access by the data subject

You have the right to request confirmation from us as to whether we are processing personal data concerning you and, if so, a right to access the personal data and related information in accordance with Article 15 of the GDPR.

c. Right of rectification

You have the right to ask us to correct or complete any incorrect or incomplete personal data concerning you without delay in accordance with Art. 16 GDPR.

d. Right to erasure (‘right to be forgotten’)

You have the right to demand the immediate deletion of personal data concerning you and we are obliged to delete them immediately if one of the reasons mentioned in article 17 GDPR applies.

e. Right to restriction of processing

You have the right to ask us to restrict the personal data concerning you if one of the conditions mentioned in art. 18 GDPR is fulfilled.

f. Right to data transferability

You have the right to receive the personal data concerning you that you have provided us with in a structured, common and machine-readable format and you have the right to request that we transfer the data to another controller, as far as this is technically feasible.