This data protection declaration informs you about the type, scope and purpose of the processing of personal data (hereinafter referred to as “data”) within our online offer and the websites, functions and contents connected with it as well as external online presences, such as our social media profiles. (hereinafter collectively referred to as the “Online Offer”). With regard to the terms used, such as “processing” or “controller”, we refer to the definitions in Art. 4 of the General Data Protection Regulation (GDPR).
The responsible body within the meaning of the data protection laws, in particular the EU General Data Protection Regulation (DSGVO), is:
Responsible person(s)
Punta Velo Ltd
Managing Director: Gerd Lemken
Westendstraße 12b
45143 Essen
E-mail: service@puntavelo.com
Phone: +49 (0) 201 – 475 896 00
Company headquarters: Essen
Registration court Essen HRB 32196
VAT ID: DE 27 22 02 345
Imprint: www.convoy-products.de/impressum
Your data subject rights
You can exercise the following rights at any time using the contact details provided by our data protection officer:
- Information about your data stored with us and how it is processed,
- rectification of inaccurate personal data,
- Deletion of your data stored by us,
- Restriction of data processing if we are not yet allowed to delete your data due to legal obligations,
- Objection to the processing of your data by us and
- Data portability, provided you have consented to the data processing or have concluded a contract with us.
If you have given us consent, you can revoke this at any time with effect for the future.
You can contact the supervisory authority responsible for you at any time with a complaint. Your competent supervisory authority depends on the federal state of your residence, your work or the alleged violation. You can find a list of supervisory authorities (for the non-public sector) with addresses at: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html
Purposes of data processing by the controller and third parties
We will only process your personal data for the purposes set out in this privacy policy. Your personal data will not be transferred to third parties for purposes other than those mentioned. We will only share your personal information with third parties if:
- you have given your express consent to this,
- the processing is necessary for the performance of a contract with you,
- the processing is necessary for compliance with a legal obligation,
the processing is necessary to protect legitimate interests and there is no reason to assume that you have an overriding legitimate interest in not disclosing your data.
Provision of chargeable services: chargeable sale and distribution of bicycle accessories as well as bicycle-related services.
For the provision of chargeable services, in this case the chargeable order of bicycle accessories, we request additional data, such as your billing and delivery address, payment details, in order to be able to execute your order. We store this data in our systems until the statutory retention periods have expired.
We process the data of our customers within the scope of our contractual services, which include the sale, distribution, wholesale and retail of bicycles and bicycle accessories as well as the provision of bicycle-related services.
In doing so, we process inventory data (e.g., customer master data, such as names or addresses), contact data (e.g., e-mail, telephone numbers), content data (e.g., text entries, photographs, videos), contract data (e.g., orders, invoices, order confirmations, delivery notes, subject matter of contract, term), payment data (e.g., bank details, payment history), usage data and metadata (e.g., in the context of evaluating and measuring the success of marketing measures). Translated with www.DeepL.com/Translator (free version) As a matter of principle, we do not process special categories of personal data, unless they are part of a commissioned processing operation. Data subjects include our customers, prospective customers and their customers, users, website visitors or employees, and third parties. The purpose of the processing is to provide contractual services, billing and our customer service. The legal basis for the processing results from Art. 6 para. 1 lit. b GDPR (contractual services), Art. 6 para. 1 lit. f GDPR (analysis, statistics, optimization, security measures). We process data that are required for the justification and fulfilment of the contractual services and point out the necessity of their provision. Disclosure to external parties only takes place if it is required as part of an assignment. When processing the data provided to us within the scope of an order, we act in accordance with the instructions of the client as well as the legal requirements of a commissioned processing pursuant to the German Data Protection Act. Art. 28 DSGVO and do not process the data for any other purposes than those specified in the order.
We delete the data after expiry of statutory warranty and comparable obligations. the necessity of retaining the data is reviewed every three years; in the case of statutory archiving obligations, deletion takes place after their expiry (6 years, pursuant to Section 257 (1) HGB, 10 years, pursuant to Section 147 (1) AO). In the case of data disclosed to us by the client within the scope of an order, we delete the data in accordance with the specifications of the order, in principle after the end of the order.
Administration, financial accounting, office organization, contact management
We process data within the scope of administrative tasks as well as organisation of our business operations of Punta Velo GmbH, financial accounting and compliance with legal obligations, such as archiving. In doing so, we process the same data that we process in the course of providing our contractual services. The processing bases are Art. 6 para. 1 lit. c. GDPR, Art. 6 para. 1 lit. f. GDPR. Customers, interested parties, business partners and website visitors are affected by the processing. The purpose and our interest in the processing lies in the administration, financial accounting, office organisation, archiving of data, i.e. tasks that serve the maintenance of our business activities, performance of our tasks and provision of our services. The deletion of data relating to contractual services and contractual communications is in accordance with the information provided in these processing activities.
We disclose or transmit data to the tax authorities, advisors such as tax advisors or auditors as well as other fee offices and payment service providers.
Furthermore, we store details of suppliers, organisers and other business partners on the basis of our business interests, e.g. for the purpose of contacting them at a later date. We generally store this data, which is mostly company-related, permanently.
Deletion or blocking of the data
We adhere to the principles of data avoidance and data economy. We therefore only store your personal data for as long as is necessary to achieve the purposes stated here or as stipulated by the various storage periods provided for by law. After the respective purpose has ceased to exist or these periods have expired, the corresponding data is routinely blocked or deleted in accordance with the statutory provisions.
Collection of general information when visiting our website
When you access our website, information of a general nature is automatically collected by means of a cookie. This information (server log files) includes, for example, the type of web browser, the operating system used, the domain name of your internet service provider and similar. This is exclusively information that does not allow any conclusions to be drawn about your person.
This information is technically necessary in order to correctly deliver the content of web pages requested by you and is mandatory when using the Internet. In particular, they are processed for the following purposes:
- Ensuring a problem-free connection of the website,
- ensuring smooth use of our website,
- Evaluation of system security and stability as well
- for other administrative purposes.
The processing of your personal data is based on our legitimate interest arising from the aforementioned data collection purposes. We do not use your data to draw conclusions about your person. Recipients of the data are only the responsible body and, if applicable, order processors.
Anonymous information of this type may be statistically evaluated in order to optimise our website and the technology behind it.
Use of cookies
This website complies with the obligation to indicate the use of cookies. Through the use of cookies, websites can be made user-friendly, effective and safer. Cookies are small text files that are transferred from a website server to your hard drive. This automatically provides us with certain data such as IP address, browser used, operating system and your connection to the internet.
Cookies cannot be used to launch programmes or deliver viruses to a computer. The information contained in cookies allows us to facilitate your navigation and enable the correct display of our web pages.
Under no circumstances will the data we collect be passed on to third parties or linked to personal data without your consent.
Of course, you can also view our website without cookies. Internet browsers are regularly set to accept cookies. In general, you can deactivate the use of cookies at any time via your browser settings. Please use the help functions of your internet browser to find out how to change these settings. Please note that individual functions of our website may not work if you have deactivated the use of cookies.
Hosting
The hosting services used by us serve to provide the following services: Infrastructure and platform services, computing capacity, storage space and database services, security services and technical maintenance services, which we use for the purpose of operating this online offer.
In doing so, we or our hosting provider process inventory data, contact data, content data, contract data, usage data, meta data and communication data of customers, interested parties and visitors of this online offer on the basis of our legitimate interests in an efficient and secure provision of this online offer pursuant to Art. 6 (1) lit. f DSGVO in conjunction with Art. 28 DSGVO. Art. 28 DSGVO. Translated with www.DeepL.com/Translator (free version) For this purpose, we have concluded an order processing agreement with the hosting provider of our rented web server, 1&1 Internet SE, which we will make available upon request.
Collection of access data and log files
We, or our hosting provider, collect data on the basis of our legitimate interests within the meaning of Art. 6 Para. 1 lit. f. GDPR Data about every access to the server on which this service is located (so-called server log files). The access data includes the name of the website accessed, file, date and time of access, amount of data transferred, notification of successful access, browser type and version, the user’s operating system, referrer URL (the previously visited page), IP address and the requesting provider.
Log file information is stored for security reasons (e.g. to clarify acts of abuse or fraud) for a maximum of 7 days and then deleted. Data whose further retention is required for evidentiary purposes is exempt from deletion until the respective incident has been finally clarified. For this purpose, we have concluded an order processing agreement with the hosting provider of our rented web server, 1&1 Internet SE, which we will make available upon request.
SSL encryption
To protect the security of your data during transmission, we use state-of-the-art encryption methods (e.g. SSL) via HTTPS.
Registration on our website
When registering to use our personalised services, some personal data is collected, such as name, address, contact and communication data such as telephone number and e-mail address. If you are registered with us, you can access content and services that we only offer to registered users. Registered users also have the option of changing or deleting the data provided during registration at any time if required. Of course, we will also provide you with information about the personal data we have stored about you at any time. We will also be happy to correct or delete them at your request, provided that there are no legal storage obligations to the contrary. To contact us in this regard, please use the contact details provided at the end of this privacy policy.
Contact form
If you contact us by e-mail or contact form regarding questions of any kind, you give us your voluntary consent for the purpose of contacting you. This requires the specification of a valid e-mail address. This serves to allocate the request and the subsequent response to it. Providing further data is optional. The information you provide will be stored for the purpose of processing the enquiry and for possible follow-up questions. After completion of your request, personal data will be automatically deleted.
Use of Google Analytics
This website uses Google Analytics, a web analytics service provided by Google Inc. (hereinafter: Google). Google Analytics uses “cookies”, which are text files placed on your computer, to help the website analyse how users use the site. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. However, due to the activation of IP anonymisation on these websites, your IP address will be truncated beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be sent to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.
The purposes of the data processing are to evaluate the use of the website and to compile reports about activities on the website. Based on the use of the website and the internet, other related services shall then be provided. The processing is based on the legitimate interest of the website operator.
You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plugin available under the following link: Browser add-on to deactivate Google Analytics .
In addition to or as an alternative to the browser add-on, you can prevent tracking by Google Analytics on our website by clicking on this link . An opt-out cookie will be installed on your device. This will prevent the collection by Google Analytics for this website and for this browser in the future, as long as the cookie remains installed in your browser.
Use of script libraries (Google Webfonts)
In order to display our content correctly and graphically appealing across browsers, we use script libraries and font libraries such as B. Google Webfonts ( https://www.google.com/webfonts/ ). Google Web Fonts are transferred to your browser’s cache to avoid multiple loading. If the browser does not support Google Web Fonts or prevents access, content is displayed in a standard font.
Calling up script libraries or font libraries automatically triggers a connection to the operator of the library. It is theoretically possible – although it is currently unclear whether and, if so, for what purposes – that operators of such libraries collect data.
The privacy policy of the library operator Google can be found here: https://www.google.com/policies/privacy/
Use of Google Maps
This website uses Google Maps API to visually display geographic information. When using Google Maps, Google also collects, processes and uses data on the use of the map functions by visitors. You can find more information about data processing by Google in the Google data protection information. There you can also change your personal data protection settings in the data protection center.
You can find detailed instructions on how to manage your own data in connection with Google products here: http://www.google.com/privacypolicy.html This website uses Google Maps API to display geographic information visually. When using Google Maps, Google also collects, processes and uses data about the use of the map functions by visitors. You can find more information about data processing by Google in the Google data protection information. There you can also change your personal data protection settings in the data protection center. You can find detailed instructions on how to manage your own data in connection with Google products here: http://www.google.com/privacypolicy.html This website uses Google Maps API to display geographic information visually. When using Google Maps, Google also collects, processes and uses data about the use of the map functions by visitors. You can find more information about data processing by Google in the Google data protection information. There you can also change your personal data protection settings in the data protection center. You can find detailed instructions on how to manage your own data in connection with Google products here: http://www.google.com/privacypolicy.html
Social Plugins
Social plugins from the providers listed below are used on our websites. You can recognise the plugins by the fact that they are marked with the corresponding logo.
Information, which may also include personal data, may be sent to the service provider via these plugins and may be used by the service provider. We prevent the unconscious and unintentional collection and transmission of data to the service provider through a 2-click solution. In order to activate a desired social plugin, it must first be activated by clicking on the corresponding button. The collection of information and its transmission to the service provider is only triggered by this activation of the plugin. We do not collect any personal data ourselves using the social plugins or their use.
We have no influence on what data an activated plugin collects and how it is used by the provider. At present, it must be assumed that a direct connection to the provider’s services is established and that at least the IP address and device-related information is collected and used. There is also the possibility that the service provider will try to save cookies on the computer used. Which specific data is collected and how it is used can be found in the data protection notices of the respective service provider. Note: If you are logged into Facebook at the same time, Facebook can identify you as a visitor to a specific page. We have integrated the social media buttons of the following companies on our website:
Change to our privacy policy
We reserve the right to adapt this data protection declaration so that it always complies with the current legal requirements or in order to implement changes to our services in the data protection declaration, e.g. when introducing new services. The new data protection declaration will then apply to your next visit. Questions to the data protection officer.
If you have any questions about data protection, please send us an email or contact the person responsible for data protection in our organization directly:
Management of Punta Velo GmbH: Gerd Lemken
E-mail: service@puntavelo.com
Telephone: +49 (0) 201 – 475 896 00
Online dispute resolution platform of the EU Commission
The EU Commission offers the possibility of online dispute resolution on an online platform operated by it. This platform can be reached via the external link http://ec.europa.eu/consumers/odr/ .