I, Christoph Hartmann, Deitmeiterstr. 17, 12165 Berlin, am the operators of this website and therefore responsible for the collection, processing, and use of personal data in accordance with the General Data Protection Regulation (GDPR) and the applicable data protection regulations.
I attach great importance to the proper handling of your personal data.
With the following information, we would like to provide you, as a „visitor to our website,“ with an overview of how we process your personal data and your rights under data protection laws.
In general, it is possible to use our website without providing personal data. However, if you wish to use special services provided by our company through our website, the processing of personal data may be necessary. If the processing of personal data is necessary and there is no legal basis for such processing, we will generally obtain your consent.
1 DEFINITIONS
This privacy policy is based on the terminology used in the European General Data Protection Regulation (GDPR). The following important terms are explained below for ease of understanding.
Personal Data „Personal data“ refers to any information relating to an identified or identifiable natural person. An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person.
Data Subject A „data subject“ is any identified or identifiable natural person whose personal data is processed by the controller (in this case Christoph Hartmann).
Processing „Processing“ means any operation or set of operations performed on personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure, or destruction of personal data.
Restriction of Processing „Restriction of processing“ is the marking of stored personal data with the aim of limiting their processing in the future.
Profiling „Profiling“ means any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to a natural person, in particular to analyze or predict aspects concerning that natural person’s performance at work, economic situation, health, personal preferences, interests, reliability, behavior, location, or movements.
Pseudonymization „Pseudonymization“ means the processing of personal data in such a manner that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organizational measures to ensure that the personal data is not attributed to an identified or identifiable natural person.
Processor A „processor“ is a natural or legal person, public authority, agency, or other body that processes personal data on behalf of the controller.
Recipient A „recipient“ is a natural or legal person, public authority, agency, or another body to whom the personal data are disclosed, whether a third party or not. However, authorities that may receive personal data in the framework of a particular inquiry in accordance with Union or Member State law shall not be regarded as recipients.
Third Party A „third party“ is a natural or legal person, public authority, agency, or body other than the data subject, controller, processor, and persons who, under the direct authority of the controller or processor, are authorized to process personal data.
Consent „Consent“ of the data subject means any freely given, specific, informed, and unambiguous indication of the data subject’s wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her.
2 LEGAL BASIS
Article 6(1)(a) of the GDPR serves as the legal basis for processing operations for which we obtain consent for a specific processing purpose.
If the processing of personal data is necessary for the performance of a contract to which the data subject is a party, the processing is based on Article 6(1)(b) of the GDPR. The same applies to processing operations that are necessary for carrying out pre-contractual measures, such as inquiries about our products or services.
If the processing of personal data is necessary to fulfill a legal obligation to which our company is subject, the processing is based on Article 6(1)(c) of the GDPR.
In cases where the vital interests of the data subject or another natural person require the processing of personal data, Article 6(1)(d) of the GDPR serves as the legal basis.
Finally, processing operations could be based on Article 6(1)(f) of the GDPR. This legal basis is used for processing operations that are not covered by any of the aforementioned legal grounds, provided that the processing is necessary for the purposes of the legitimate interests pursued by our company or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject.
3 DATA COLLECTION
During informational visits to our website, without using the contact form or registering for the newsletter, we only collect data that your browser transmits to our server (in so-called „server log files“). With each access to a page on our website by you or an automated system, a series of general data and information is collected and stored in the server’s log files.
The following information is collected and stored automatically without your intervention until automated deletion:
The collection and processing of this data is carried out for the purpose of enabling the use of our website (establishing a connection), ensuring the long-term security and stability of the system, facilitating the technical administration of the network infrastructure and optimizing our internet offering, as well as for internal statistical purposes. The IP address is only evaluated in the event of attacks on our network infrastructure and for statistical purposes. The legal basis for data processing is Art. 6(1)(f) of the General Data Protection Regulation (GDPR). Our legitimate interest follows from the purposes of data collection listed above.
Furthermore, we use cookies and tracking tools when you visit our website. You can find explanations regarding this under Section 5 and Section 6 ff. of this privacy policy. Information about the social plug-ins we use can be found in Section 12.
The website operator will provide you with information about the personal data stored about you at any time upon request. Furthermore, we will correct or delete personal data at your request or notification, provided there are no legal retention obligations. All of our employees are available as contact persons in this regard.
3.1 Use of contact forms
You can send inquiries about our products and general inquiries to us using the contact forms provided on our website. In this case, it is necessary to provide your name, a valid email address, and telephone number, as well as details about the desired product and, if applicable, desired customization for product inquiries. Additional information can also be provided voluntarily. If you contact us via email or a contact form, the personal data you transmit will be automatically stored. The personal data voluntarily provided by you will be stored for the purposes of processing or contacting you. The legal basis for storing the data is Art. 6(1)(a) of the GDPR. These personal data will not be disclosed to third parties unless you decide to purchase a product and expressly consent to the disclosure of the data for the purpose of processing the purchase.
The collection of this data is done to identify the source of an inquiry and to be able to respond to it using your preferred method of communication (by mail, phone, or email).
4 COOKIES
We use cookies on our website. These are small files that your browser automatically creates and stores on your IT system (laptop, tablet, smartphone, etc.) when you visit our site. Cookies do not cause any damage to your end device and do not contain viruses, trojans, or other malicious software.
The cookie stores information that is related to the specific end device being used. However, this does not mean that we immediately gain knowledge of your identity.
The use of cookies serves, on the one hand, to make your use of our website more convenient. For example, we use so-called session cookies to recognize that you have already visited individual pages on our website. These are automatically deleted when you leave our site.
Furthermore, we also use temporary cookies to optimize user-friendliness, which are stored on your end device for a specified period of time. If you visit our site again to use our services, it will be automatically recognized that you have previously been with us and what inputs and settings you have made, so you do not have to enter them again.
On the other hand, we use cookies to statistically analyze the use of our website and evaluate it for the purpose of optimizing our offering for you. These cookies enable us to automatically recognize that you have already been to our site when you visit it again. These cookies are automatically deleted after a defined period of time.
The data processed by cookies are necessary for the mentioned purposes to safeguard our legitimate interests and those of third parties, according to Art. 6(1)(f) of the General Data Protection Regulation (GDPR).
Most browsers accept cookies automatically. However, you can configure your browser to prevent cookies from being stored on your computer or to always display a notification before a new cookie is created. However, disabling cookies completely may result in you not being able to use all the functions of our website.
5 YOUR RIGHTS AS A DATA SUBJECT
Below, we outline your rights as a data subject.
5.1 Right to Confirmation
You have the right to obtain confirmation from us, Bikeline GmbH, as to whether or not personal data concerning you is being processed.
5.2 Right to Information (Article 15 of the GDPR)
You have the right to obtain free-of-charge information from us at any time about the personal data stored about you, as well as a copy of this data.
5.3 Right to Rectification (Article 16 of the GDPR)
You have the right to request the correction of inaccurate personal data concerning you. Furthermore, the data subject has the right, taking into account the purposes of the processing, to request the completion of incomplete personal data.
5.4 Right to Erasure (Article 17 of the GDPR)
You have the right to request the immediate erasure of personal data concerning you from us if one of the legally specified grounds applies and provided that the processing is not necessary.
5.5 Right to Restriction of Processing (Article 18 of the GDPR)
You have the right to request the restriction of processing from us if one of the legal conditions is met.
5.6 Right to Data Portability (Article 20 of the GDPR)
You have the right to receive your personal data, which you have provided to us voluntarily, in a structured, commonly used, and machine-readable format. You also have the right to transmit this data to another controller without hindrance from us, to whom the personal data has been provided, if the processing is based on consent pursuant to Article 6(1)(a) of the GDPR or Article 9(2)(a) of the GDPR or on a contract pursuant to Article 6(1)(b) of the GDPR, and the processing is carried out by automated means, provided that the processing is not necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in us.
Furthermore, when exercising your right to data portability pursuant to Article 20(1) of the GDPR, you have the right to have personal data transmitted directly from one controller to another, where technically feasible and provided that this does not adversely affect the rights and freedoms of others.
5.7 Right to Object (Article 21 of the GDPR)
You have the right to object, on grounds relating to your particular situation, at any time to the processing of your personal data based on Article 6(1)(e) (processing in the public interest) or (f) (processing for legitimate interests) of the GDPR, including profiling based on those provisions.
This also applies to profiling based on these provisions. If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms or for the establishment, exercise, or defense of legal claims. In some cases, we process personal data for direct marketing purposes. You have the right to object at any time to the processing of personal data for such marketing purposes. This also applies to profiling to the extent that it is related to such direct marketing. If you object to us processing your personal data for direct marketing purposes, we will no longer process the personal data for these purposes.
Additionally, you have the right, on grounds relating to your particular situation, to object to the processing of personal data concerning you, which is carried out by us for scientific or historical research purposes or for statistical purposes pursuant to Article 89(1) of the GDPR, unless the processing is necessary for the performance of a task carried out for reasons of public interest.
You are free to exercise your right to object in relation to the use of information society services, notwithstanding Directive 2002/58/EC, by automated means using technical specifications.
5.8 Revocation of Data Protection Consent
You have the right to revoke your consent to the processing of personal data at any time with effect for the future.
5.9 Complaint to a Supervisory Authority
You have the right to lodge a complaint with a supervisory authority responsible for data protection regarding our processing of personal data.
6 ROUTINE STORAGE, DELETION & BLOCKING OF PERSONAL DATA
We only process and store your personal data for the period necessary to achieve the purpose of storage or as provided for by laws to which our company is subject.
Once the purpose of storage ceases to exist or a prescribed retention period expires, the personal data will be routinely blocked or deleted in accordance with legal requirements.
7 DURATION OF STORAGE OF PERSONAL DATA
The criterion for the duration of the storage of personal data is the respective statutory retention period. After the expiration of the period, the corresponding data will be routinely deleted unless they are no longer necessary for contract fulfillment or contract initiation.
8 UPDATES AND CHANGES TO THE DATA PROTECTION DECLARATION
This data protection declaration is currently valid and is dated July 2023
Due to the further development of our websites and offerings or changes in legal or regulatory requirements, it may be necessary to amend this data protection declaration. The current data protection declaration can be accessed by you at any time on the website at oboe-masterclass/privacy-policy