Privacy Policy

We are pleased that you visit our website. The protection of your privacy and the protection of your personal data, the so-called personal data, in the use of our website is an important concern to us.

Personal data are according to Art. 4 No. 1 GDPR all information that relates to an identified or identifiable natural person. This includes, for example, information such as your first and last name, your address, your telephone number, your email address, but also your IP address.

Data where no reference to your person can be established, such as through anonymization, are not personal data. The processing (e.g., the collection, storage, reading, querying, use, transmission, deletion or destruction) according to Art. 4 No. 2 GDPR always requires a legal basis or your consent. Processed personal data must be deleted as soon as the purpose of processing has been achieved and no statutory retention obligations need to be observed.

Here you will find information about how we handle your personal data when you visit our website. To provide the functions and services of our website, it is necessary that we collect personal data about you.

We also explain to you the type and scope of the respective data processing, the purpose and the corresponding legal basis and the respective storage duration.

This privacy policy applies only to this website. It does not apply to other websites to which we merely refer via a hyperlink. We cannot assume responsibility for the confidential handling of your personal data on these third-party websites, as we have no influence on whether these companies comply with data protection regulations. Please inform yourself directly on these websites about how these companies handle your personal data.

1. Responsible Party

Responsible for the processing of personal data on this website is (cf. Imprint): Kraftathlet (Sanyulo OÜ), represented by Managing Director Sherbil Abu Aqsa, Phone: +498000008929, Email: customersuccess@kraftathlet.de

2. Provision and Use of the Website / Server Logfiles

a) Type and Scope of Data Processing

When you use this website without otherwise (e.g., through registration or use of the contact form) transmitting data to us, we collect technically necessary data via server logfiles that are automatically transmitted to our server, including:

• IP address
• Date and time of the request
• Name and URL of the retrieved file
• Website from which access occurred (referrer URL)
• Access status/HTTP status code
• Browser type
• Language and version of the browser software
• Operating system

b) Purpose and Legal Basis

This processing is technically required to display our website to you. We also use the data to ensure the security and stability of our website.

The legal basis for this processing is Art. 6 para. 1 lit. f) GDPR. The processing of the aforementioned data is necessary for the provision of a website and thus serves to protect a legitimate interest of our company.

c) Storage Duration

As soon as the aforementioned personal data is no longer required to display the website, it will be deleted. The collection of data for the provision of the website and the storage of data in logfiles is mandatory for the operation of the website. Consequently, there is no possibility of objection on the part of the user in this regard. Further storage may take place in individual cases if this is required by law.

3. Use of Cookies

a) Type, Scope and Purpose of Data Processing

We use cookies. Cookies are small files that are sent to the browser of your device during your visit to our website and stored there.

Some functions of our website cannot be offered without the use of technically necessary cookies. Other cookies, however, enable us to conduct various analyses. For example, some cookies can recognize the browser you use upon a subsequent visit to our website and transmit various information to us. We use cookies to facilitate and improve the use of our website. For example, through cookies we can design our internet offering more user-friendly and effective for you by, for example, understanding your use of our website and determining your preferred settings (e.g., country and language settings). If third parties process information via cookies, they collect the information directly via your browser. However, cookies do not cause any damage to your device. They cannot execute programs and do not contain viruses. Various types of cookies are used on our website, the type and function of which are explained below.

Temporary Cookies / Session Cookies

So-called temporary cookies or session cookies are used on our website, which are automatically deleted as soon as you close your browser. This type of cookie makes it possible to capture your session ID. This allows various requests from your browser to be assigned to a common session and makes it possible to recognize your device on later website visits.

Permanent Cookies

So-called permanent cookies are used on our website. Permanent cookies are cookies that are stored in your browser for a longer period and can transmit information. The respective storage duration differs depending on the cookie. You can delete permanent cookies yourself via your browser settings.

Third-Party Cookies

We use analytical cookies to monitor anonymized user behavior on our website.

We also use advertising cookies. With these cookies, user behavior can be tracked for advertising and targeted marketing purposes.

Social media cookies enable you to establish a connection to your social networks and share content from our website within your networks.

Browser Settings Configuration

Most web browsers are preset to automatically accept cookies. However, you can configure your respective browser so that it only accepts certain cookies or no cookies at all. We must point out to you, however, that you may then no longer be able to use all functions of our website.

Via your browser settings, you can also delete cookies already stored in your browser. Furthermore, it is possible to set your browser so that it notifies you before cookies are stored. Since the various browsers may differ in their respective functions, we ask you to use the respective help menu of your browser for the corresponding configuration options.

Disabling the use of cookies may require the storage of a permanent cookie on your computer. If you subsequently delete this cookie, you must disable it again.

b) Legal Basis

Due to the described purposes of use, the legal basis for the processing of personal data using cookies is Art. 6 para. 1 lit. f) GDPR. If you have given us your consent to use cookies based on a notice provided by us on the website ("Cookie Banner"), the legal basis is additionally Art. 6 para. 1 lit. a) GDPR.

c) Storage Duration

As soon as the data transmitted to us via cookies is no longer required for the purposes described above, this information will be deleted. Further storage may take place in individual cases if this is required by law.

4. Data Collection for the Implementation of Pre-Contractual Measures and for Contract Performance

a) Type and Scope of Data Processing

In the pre-contractual area and upon conclusion of a contract, we collect personal data about you. This includes, for example, first and last name, address, email address, telephone number, or bank details.

b) Purpose and Legal Basis of Data Processing

We collect and process this data exclusively for the purpose of contract performance or to fulfill pre-contractual obligations.

The legal basis for this is Art. 6 para. 1 lit. b) GDPR. If there is furthermore consent from you, the additional legal basis is Art. 6 para. 1 lit. a) GDPR.

c) Storage Duration

The data will be deleted as soon as it is no longer required for the purpose of its processing.

Furthermore, statutory retention obligations may exist, for example, commercial or tax retention obligations under the German Commercial Code (HGB) or the Tax Code (AO). If such retention obligations exist, we will block or delete your data at the end of these retention obligations.

5. Order Form

An order form is available on our website, which can be used for electronic pre-orders.

a) Type and Scope of Data Processing

Our data collection is limited to the following data:

• First and last name
• Telephone number
• Email address
• Account details
• Name of the product

b) Purpose and Legal Basis

The purpose of data processing is to enable us to process your order properly.

The legal basis for this is Art. 6 para. 1 lit. b) GDPR. The processing of the data serves to fulfill a contract or is necessary for the implementation of a pre-contractual measure that has been requested by the data subject.

c) Storage Duration

The data will be deleted as soon as it is no longer needed to achieve the purpose of processing.

Furthermore, statutory retention obligations may exist, for example, commercial or tax retention obligations under the German Commercial Code (HGB) or the Tax Code (AO). If such retention obligations exist, we will block or delete your data at the end of these retention obligations.

6. Registration Option

a) Type and Scope of Data Processing

You can register on our website. When you register, we collect and store the data that you enter into the input form (e.g., last name, first name, email address). No transfer to third parties takes place.

b) Purpose and Legal Basis of Data Processing

Your registration is necessary for the use of certain content and services on our website or for the fulfillment of a contract or for the implementation of pre-contractual measures. After registration, you are free to change the personal data you provided during registration at any time or to have it completely deleted from the data inventory of the party responsible for processing.

The legal basis for processing is, in the case of consent, Art. 6 para. 1 lit. a) GDPR. If your registration serves to prepare for the conclusion of a contract, Art. 6 para. 1 lit. b) GDPR is an additional legal basis.

c) Storage Duration

The data collected during registration is stored by us as long as you are registered on our website and is subsequently deleted. Statutory retention periods remain unaffected.

7. Data Transmission

We only pass on your personal data to third parties if:

a) You have given us your express consent pursuant to Art. 6 para. 1 lit. a) GDPR.

b) This is permitted by law and is necessary pursuant to Art. 6 para. 1 lit. b) GDPR to fulfill a contractual relationship with you or to implement pre-contractual measures.

c) There is a legal obligation to transfer pursuant to Art. 6 para. 1 lit. c) GDPR.

We are legally obligated to transmit data to government agencies, e.g., tax authorities, social security carriers, health insurance companies, supervisory authorities, and law enforcement agencies.

d) The transfer is necessary pursuant to Art. 6 para. 1 lit. f) GDPR to protect legitimate business interests as well as to assert, exercise, or defend legal claims and there is no reason to assume that you have a predominant interest worthy of protection in the non-transfer of your data.

e) We use external service providers as data processors pursuant to Art. 28 GDPR in the processing, which have been obligated to handle your data carefully.

We use such service providers in the following areas:

• IT
• Logistics
• Telecommunications
• Sales
• Marketing

When transmitting to external parties in third countries, i.e., outside the EU or the EEA, we ensure that these parties treat your personal data with the same care as within the EU or the EEA. We only transmit personal data to third countries where the EU Commission has confirmed an adequate level of protection or where we ensure careful handling of personal data through contractual agreements or other appropriate safeguards.

8. Application Option

a) Type and Scope of Data Processing

You can apply on our website or by email. When you apply, we collect and store the data that you enter into the input form or that you send to us by email.

b) Purpose and Legal Basis

We process your data only for the purpose of processing your application. No transfer to third parties takes place. The legal basis for processing is Art. 88 para. 1 GDPR in conjunction with § 26 BDSG and additionally Art. 6 para. 1 lit. b) GDPR.

Insofar as you give us consent to be included in our applicant pool, the legal basis is Art. 6 para. 1 lit. a) GDPR.

c) Storage Duration

If we cannot offer you a position, we store your data for a maximum of six months after the end of the application process, taking into account § 61b para. 1 ArbGG in conjunction with § 15 AGG. The start of the period is the receipt of the rejection letter.

If you have given us consent to be included in our applicant pool, we store your data for a maximum of two years.

d) Data Transfer

Your data is received only by the parties involved in the decision (responsible personnel or specialist departments, management, works council).

Furthermore, we are obligated to transmit your data to public authorities and institutions (e.g., public prosecutor's office, police, supervisory authorities, tax office, social security carriers, etc.).

Further data recipients may be those parties for which you have given us your consent to transfer data.

9. Comment Function

a) Type and Scope of Data Processing

You can comment on posts on our website. When you comment on a post, we collect and store the data that you enter into the input form. In addition to the comments you leave, information about the time of comment entry and possibly the username (pseudonym) you chose will be stored and published. Furthermore, the IP address assigned by the Internet Service Provider (ISP) of the data subject is stored. No transfer to third parties takes place.

b) Purpose and Legal Basis

The data you transmit (e.g., the IP address) is done for security reasons and in the event that the data subject violates the rights of third parties through a comment made or posts unlawful content.

There is no transfer of this collected personal data to third parties unless such transfer is required by law or serves the legal defense of the party responsible for processing.

The legal basis for processing the personal data transmitted when using the comment function is, if and insofar as your consent exists, Art. 6 para. 1 lit. a) GDPR. You can revoke this consent at any time. The lawfulness of data processing operations already carried out is not affected by the revocation.

Another legal basis is Art. 6 para. 1 lit. f) GDPR.

We have a legitimate interest in processing if the rights of third parties are violated or unlawful content is posted. This serves security in case someone writes unlawful content in comments and posts (insults, prohibited political propaganda, etc.)

c) Storage Duration

The comments and associated data (e.g., IP address) are stored and remain on our website until the commented content is completely deleted or the comments must be deleted for legal reasons.

10. Contact Form

a) Type and Scope of Data Processing

On our website, we offer you the opportunity to contact us via a provided form. In the process of sending your inquiry via the contact form, this privacy policy is referenced to obtain your consent.

If you use the contact form, the following personal data will be processed by you:

• Salutation
• First name
• Last name
• Company
• Street
• Street number
• Postal code
• City
• Country
• Email address
• Telephone number
• Subject
• Content of the message

b) Purpose and Legal Basis

The provision of your email address serves the purpose of sending you a response to your inquiry by email. When using the contact form, your personal data is not transferred to third parties.

The legal basis for processing is consent pursuant to Art. 6 para. 1 lit. a) GDPR based on the consent declaration you voluntarily provide below and which can be revoked at any time for the future.

c) Storage Duration

The data you enter in the contact form will remain with us until you request deletion, revoke your consent to storage, or the purpose for data storage no longer applies (e.g., after your inquiry has been processed).

Mandatory statutory provisions – in particular retention periods under the German Commercial Code (HGB) or the Tax Code (AO) – remain unaffected.

11. Contact Options via Email

A contact option via email is available to you on our website.

a) Type and Scope of Data Processing

You can contact us by email. Our data collection is limited to the email address of the email account you use to contact us and to the personal data you provide at your discretion in the course of contacting us.

b) Purpose and Legal Basis

The purpose of data processing is to enable us to answer your inquiry appropriately. The legal basis for this is Art. 6 para. 1 lit. f) GDPR. There is a legitimate interest in processing the aforementioned personal data in order to be able to handle your inquiry appropriately.

c) Storage Duration

The duration of storage of the aforementioned data depends on the background of your contact. Deletion of your personal data regularly takes place if the pursued purpose of communication has ceased and storage is no longer required. This may result, for example, from processing your inquiry.

12. Newsletter

a) Type and Scope of Data Processing

On our website there is the possibility to subscribe to a free regular email newsletter. To be able to send you the newsletter regularly, we need your email address from you.

For newsletter distribution, we use the so-called double opt-in procedure.

This means that we will only send you an email newsletter once you have expressly confirmed to us that you consent to the sending of the newsletter. We will then send you a confirmation email asking you to confirm by clicking on a corresponding link that you want to receive newsletters from us in the future.

This serves to ensure that only you as the owner of the specified email address can register for the newsletter. Your confirmation must be made promptly after receiving the confirmation email, otherwise your newsletter registration will be automatically deleted from our database.

When you subscribe to the newsletter, we collect and store the data that you enter into the input form (e.g., last name, first name, email address).

When registering for the newsletter, we also store your IP address as entered by your Internet Service Provider (ISP) as well as the date and time of registration in order to be able to trace any misuse of your email address at a later date. In the confirmation email sent for control purposes (double opt-in email), we also store the date and time of the click on the confirmation link and the IP address as entered by the Internet Service Provider (ISP).

b) Purpose and Legal Basis

The data we collect when registering for the newsletter is used exclusively for the purpose of advertising contact via the newsletter.

The processing of your email address for newsletter distribution is based on Art. 6 para. 1 lit. a) GDPR and § 7 para. 2 No. 3 UWG and the consent declaration you voluntarily provide below and which can be revoked at any time for the future.

Furthermore, processing is based on Art. 6 para. 1 lit. f) GDPR due to our legitimate interests in documenting the required consent.

c) Storage Duration

Your email address will be stored as long as you have subscribed to the newsletter. After unsubscribing from newsletter distribution, your email address will be deleted unless you have expressly consented to further use of your data.

13. Tracking and Analysis Tools

We use tracking and analysis tools to ensure continuous optimization and needs-based design of our website. Through the use of tracking and analysis measures, we are also able to statistically record the use of our website by visitors and further develop our online presence based on the insights gained for you.

We have a legitimate interest in this, which justifies the use of the tracking and analysis tools described below pursuant to Art. 6 para. 1 lit. f) GDPR.

If you have given us your consent to use cookies based on a notice provided by us on the website ("Cookie Banner"), the lawfulness of the use is additionally governed by Art. 6 para. 1 lit. a) GDPR.

The description of the tracking and analysis tools below provides information on the type, scope, and respective processing purposes.

An exact overview of the web analysis and social media tools we use can be found here.

Microsoft Clarity

We use Microsoft Clarity on our website, a web analytics service of Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA ("Microsoft"). Clarity enables us to analyze the behavior of visitors on our website – such as mouse movements, clicks, and scrolling behavior – anonymously in order to draw conclusions about user-friendliness and potential for improvement.

Processing is based on Art. 6 para. 1 lit. f) GDPR – our legitimate interest in economic optimization and improvement of our offering.

Information may also be transmitted to servers in the USA. Microsoft acts as a data processor in this regard. The transmission takes place on the basis of EU Standard Contractual Clauses.

Further information on data protection at Microsoft Clarity can be found at: https://privacy.microsoft.com/de-de/privacystatement

14. Data Security and Security Measures

We are committed to protecting your privacy and treating your personal data confidentially. To this end, we implement comprehensive technical and organizational security measures, which are regularly reviewed and adapted to technological progress.

This includes, among other things, the use of recognized encryption procedures (SSL or TLS). However, data disclosed unencrypted, for example if this is done via unencrypted email, may be read by third parties. We have no influence on this. It is the responsibility of the respective user to protect the data they provide through encryption or otherwise against misuse.

15. Changes to the Privacy Policy

We reserve the right to update this statement as needed at any time.

16. Your Rights

Here you will find your rights regarding your personal data. Details can be found in Articles 7, 15-22, and 77 GDPR. You can contact the responsible party (Section 2) in this regard.

Right to Revoke Your Data Protection Consent pursuant to Art. 7 para. 3 S. 1 GDPR

You can revoke your consent to the processing of your personal data at any time with effect for the future. However, the lawfulness of processing carried out up to the revocation is not affected.

Right to Information pursuant to Art. 15 GDPR

You have the right to request confirmation of whether we are processing personal data concerning you. If this is the case, you have the right to information about this personal data and other information, such as the purposes of processing, the categories of personal data processed, the recipients, and the planned duration of storage or the criteria for determining the duration.

Right to Correction and Completion pursuant to Art. 16 GDPR

You have the right to request immediate correction of incorrect data. Taking into account the purposes of processing, you have the right to request completion of incomplete data.

Right to Deletion ("Right to be Forgotten") pursuant to Art. 17 GDPR

You have a right to deletion insofar as processing is not required.

This is the case, for example, if your data is no longer necessary for the original purposes, you have revoked your data protection consent, or the data has been processed unlawfully.

Right to Restrict Processing pursuant to Art. 18 GDPR

You have a right to restrict processing, for example, if you believe the personal data to be incorrect.

Right to Data Portability pursuant to Art. 20 GDPR

You have the right to receive the personal data concerning you in a structured, commonly used, and machine-readable format.

Right to Object pursuant to Art. 21 GDPR

You have the right to object at any time to the processing of certain personal data concerning you for reasons arising from your particular situation.

In the case of direct marketing, you as the data subject have the right to object at any time to the processing of personal data concerning you for the purpose of such advertising; this also applies to profiling insofar as it is connected with such direct marketing.

Automated Decision-Making in Individual Cases Including Profiling pursuant to Art. 22 GDPR

You have the right not to be subject to a decision based exclusively on automated processing – including profiling – except in the cases mentioned in Art. 22 GDPR.

Complaint to a Data Protection Supervisory Authority pursuant to Art. 77 GDPR

Furthermore, you can lodge a complaint with a data protection supervisory authority at any time, for example, if you believe that data processing is not in compliance with data protection regulations.

17. SMS Marketing

Collection and Use of Telephone Numbers:

If you provide us with your telephone number, we use it exclusively to send you information about our products, services, offers, and promotions via SMS. Your telephone number is stored and processed in accordance with applicable data protection regulations.

Purpose of Data Use:

The telephone number you provide is used to:

• Send you SMS messages with information about our products, offers, promotions, and news.
• Contact you with questions about your orders or in case of a problem.

Your telephone number will not be used for other purposes without your prior express consent.

Consent and Revocation:

By providing your telephone number and confirming your registration (double opt-in), you explicitly agree to receive SMS messages. This consent is voluntary and can be revoked at any time by:

• Replying to one of our SMS messages with "STOP".
• Sending us an email at customersuccess@kraftathlet.de.

After your revocation, we will not send any further SMS messages to you.

Transfer to Third Parties:

We use external service providers to send our SMS messages. These providers process your data exclusively on our behalf and in accordance with GDPR data protection regulations. Your telephone number will not be passed on to or sold to uninvolved third parties.

Security of Your Telephone Number:

Your telephone number is securely stored and protected against unauthorized access, loss, or misuse. We implement technical and organizational measures to secure your data, including encryption during transmission and storage.

Your Rights Regarding Your Telephone Number:

You have the right at any time to:

• Request information about the storage and use of your telephone number.
• Request correction or deletion of your telephone number.
• Object to the processing of your telephone number.

To exercise these rights, you can contact us at customersuccess@kraftathlet.de.

Unsubscribe from SMS Marketing:

You can unsubscribe from our SMS notifications at any time. Simply reply to one of our messages with "STOP" or contact us directly at customersuccess@kraftathlet.de. After your unsubscribe, your data will no longer be used for SMS distribution.

Cookies for Abandoned Cart Messages:

Our website uses cookies to track products in your shopping cart and notify you via SMS if you do not complete your purchase. This data is used exclusively to send you targeted reminders via SMS and to improve your shopping experience.