The protection of your privacy is of paramount importance to us and, below, you will find information on how your data is handled by MBA Markus Schell e.K. trading from 26 Gierlichsstr. 53840 Troisdorf, Germany

We take the protection of your data seriously and make every effort to collect and store as little data as possible. Nevertheless, a certain degree of storage and evaluation of user data is necessary to guarantee and improve the operation of this website. The use of this Internet site is basically possible without having to provide any personal data. Nor is there any assignment of data to a specific person – unless you tell us your name, for example in an e-mail, via one of our forms or as part of an order.

If you use one of the services offered on this website or buy goods, this also regularly requires the collection, processing and storage of personal data, such as your name, your address, your e-mail address or telephone number. This collection, processing and storage takes place either on the basis of your express consent obtained beforehand or on the basis of a corresponding legal approval and on the basis of the provisions of the European Data Protection Basic Regulation and the German Federal Data Protection Act.

We would like to inform you here about the type, scope and purpose of the data collected, processed, stored and used by us via this website as well as about your rights in this context.

We use SSL transport encryption on this site. This serves among other things the protection of confidential contents, for example in the case of inquiries to us. You can see that the connection is actually encrypted in the address line of your browser, which always starts with “https://” and confirms the existing transport encryption with a green lock symbol.

1. Name and address of the controller

The controller within the meaning of the Basic Data Protection Ordinance and other data protection regulations is:

MBA Markus Schell e.K.
Gierlichsstr. 26,  53840 Troisdorf, Germany
info@mba-sport.de

2. Definitions

Data protection law has special terms which we also use in this data protection declaration in accordance with the legal definitions of the basic European data protection regulation. Therefore in this data protection declaration the expression

  • “personal data“any information relating to an identified or identifiable natural person (“data subject”);
  • “data subject“any identified or identifiable natural person whose personal data is processed; an identifiable natural person is one who can be identified, directly or indirectly, in particular by assignment to an identifier such as a name, an identification number, location data, an on-line identifier or one or more special characteristics which express the physical, physiological, genetic, psychological, economic, cultural or social identity of that natural person;
  • “Processing“any operation or series of operations carried out with or without the aid of automated procedures relating to personal data, such as the collection, collection, organisation, classification, storage, adaptation or alteration, reading, consultation, use, disclosure by transmission, dissemination or any other form of provision, comparison or linking, restriction, deletion or destruction;
  • “Restriction of processing“the marking of stored personal data with the aim of restricting its future processing;
  • “Profiling“any automated processing of personal data consisting in the use of such personal data to evaluate certain personal aspects relating to a natural person, in particular to analyse or predict aspects relating to the performance of work, economic situation, health, personal preferences, interests, reliability, conduct, location or relocation of that natural person; as a company committed to data protection, we waive any form of profiling;
  • “Pseudonymisation“the processing of personal data in such a way that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that this additional information is kept separately and is subject to technical and organisational measures which ensure that the personal data is not attributed to an identified or identifiable natural person;
  • “File system“any structured collection of personal data accessible according to specific criteria, whether centralised, decentralised, functional or geographical;
  • “Controller“ (or: “person responsible for the processing“);the natural or legal person, authority, body, office or other body which alone or jointly with others decides on the purposes and means of processing personal data; where the purposes and means of such processing are specified by Union law or by the law of the Member States, the data controller or the specific criteria for his appointment may be laid down by Union law or by the law of the Member States;
  • “Contract processor“a natural or legal person, authority, institution or other body processing personal data on behalf of the controller;
  • “Recipient“a natural or legal person, authority, institution or other body to which personal data is disclosed, whether or not it is a third party. However, authorities which may receive personal data under Union law or the law of the Member States under a particular investigation mandate shall not be considered recipients; the processing of such data by the said authorities shall be carried out in accordance with the applicable data protection rules in accordance with the purposes of the processing;
  • “Third party“a natural or legal person, authority, institution or other body other than the data subject, the data controller, the data processor and the persons authorised to process the personal data under the direct responsibility of the controller or the data processor;
  • “Consent“ of the data subjectany voluntary declaration of intent, made in an informed and unequivocal manner, in the form of a declaration or other clear affirmative act, which the data subject indicates his or her consent to the processing of personal data concerning him or her;
  • “Violation of the protection of personal data“a breach of security resulting in destruction, loss or alteration, whether unintentional or unlawful, or unauthorised disclosure or access to personal data transmitted, stored or otherwise processed;
  • “Cross-border processing“the processing of personal data in the context of the activities of a controller or contract processor in the Union in more than one Member State where the controller or contract processor is established in more than one Member State, or the processing of personal data in the context of the activities of an individual establishment of a controller or contract processor in the Union, but which has or may have a significant impact on data subjects in more than one Member State;
  • “relevant and well-founded objection“an objection as to whether or not there has been an infringement of this Regulation or whether the proposed measure is in conformity with this Regulation against the controller or the processor, where the objection clearly indicates the scope of the risks posed by the draft decision in relation to the fundamental rights and freedoms of data subjects and, where appropriate, the free movement of personal data within the Union.

3. Legal basis of data processing

The processing of personal data by us is carried out on the basis of the provisions of the European Data Protection Basic Regulation and the German Federal Data Protection Act:

  • For processing operations for which we request consent for a specific processing purpose, the processing is carried out on the basis of Article 6(1)(a) of the Basic Data Protection Regulation.
  • Insofar as the processing of personal data is necessary for the performance of a contract to which the data subject is a party (e.g. for the delivery of goods or the rendering of another service or consideration) or for the performance of pre-contractual measures (e.g. for enquiries about our products or services), the processing is based on Article 6 paragraph 1 letter b of the Basic Data Protection Regulation.
  • Insofar as processing of personal data is necessary on the basis of a legal obligation applicable to us, such as for the fulfilment of tax obligations or commercial storage regulations, the processing is carried out on the basis of Article 6 paragraph 1 letter c of the Basic Data Protection Regulation.
  • Where the processing of personal data should exceptionally be necessary to protect the vital interests of the data subject or another natural person, processing would be carried out on the basis of Article 6(1)(d) of the Basic Data Protection Regulation.
  • The processing of personal data necessary to safeguard a legitimate interest of our company or of a third party shall be carried out on the basis of Article 6(1)(f) of the Basic Data Protection Regulation, unless the interests or fundamental rights and freedoms of the data subject which require the protection of personal data prevail. Such a legitimate interest also represents the conduct of our business for the well-being of all our employees and our shareholders.

The provision of personal data may be required for legal (e.g. commercial or tax) reasons or for reasons of contract execution. If such data (such as information on a contractual partner) is not made available to us for processing, we cannot conclude a corresponding contract.

4. Log files

  • As on other web servers, a log file is kept on our Internet server. This log file stores records in which
  • the IP address with which you are travelling on the Internet and the Internet service provider you use
  • date and time of each access to our website,
  • the exact URL of each website you visit
  • the data you requested from the server,
  • general information on the web browser (in particular the browser type and version) and operating system you use to access the website, and
  • in some cases the website from which you accessed our website (the so-called “referrer”)

are listed. This information is required and used by us

  • for the correct delivery of the respective website
  • for statistical purposes,
  • to further improve our Internet offering and to optimise the advertising it contains,
  • to permanently guarantee the functionality and integrity of our information technology systems, including security in the event of attacks on our information technology systems, and
  • in the event of an attack on our information technology systems to provide the necessary information to the law enforcement authorities
  • This data is collected anonymously by us and stored separately from all personal data provided to us by a data subject.

5. Cookies and user profiles

Within the framework of legal regulations we can,

  • to provide user-friendly services that would not be possible without cookies,
  • in our web-shop to remember the items you have placed in your (virtual) shopping cart,
  • as part of a user registration you have made (log-in),
  • for purposes of advertising, market research and
  • to improve our services and Internet offerings,

evaluate use profiles under a pseudonym, but only if you have not made use of your legal right to object to this use of your data. Some of our services require that we use so-called cookies.

These are small (text files) that your web browser stores on your device. Cookies may store information about your visit to our website that enables us to recognise your browser and to distinguish it from the browsers of other persons affected.

Most browsers are set to accept cookies by default. However, you can reconfigure your browser at any time so that it rejects cookies or asks you for confirmation beforehand. If you refuse cookies, however, this may mean that not all offers and functions of this website function or can be used by you without interruption.

Further details on the use of cookies on this website – including the existing opt-out options – can be found in this data protection declaration in the sections

  • on internal visitor statistics and
  • visitor tracking through advertising networks.

6. Internal visitor statistics

This website uses “Google Analytics” for statistical analysis of visitor access. This is a web analysis service offered by Google Inc. Google Inc. acts on our behalf as a contract processor. The data is collected and processed via servers operated by Google Inc, which are usually not located in the European Union but in the USA. Pseudonymous user profiles of visitors to our website are created.

We use the web analysis service “Google Analytics” with activated “IP-Anonymisation”. This shortens the IP address of visitors to our website. This shortening of the IP address is not done by us, but by Google Inc.

Google Inc. uses cookies for “Google Analytics”, whose information is read out by Google, transferred to servers located in the USA and processed and stored there.

Important for you: You can generally prevent the installation of cookies by setting your browser software accordingly. Alternatively, you can prevent Google from collecting, processing and storing the data generated by the cookie by downloading and installing the browser plug-in available at https://tools.google.com/dlpage/gaoptout?hl=en.

The data protection declaration of Google Inc. applicable to the “Google Analytics” service can be viewed at https://support.google.com/analytics/answer/6004245?hl=en .

7. e-mail and contact forms

If you send us an e-mail or contact us via a contact form, the personal data voluntarily transmitted to us will be automatically stored and, if necessary, processed for the purpose of processing or contacting you. This includes – if stated by you – in particular your name, your address or e-mail address, your telephone number and any other information you provide voluntarily. If you contact us via a form provided on this website, your IP address will also be stored. As a matter of principle, we only use the resulting personal data to the extent necessary for processing your inquiries and orders. This data is never passed on to third parties, unless we are legally obliged to do so.

8. Registration

This website offers you the possibility of registration. This registration takes place under indication of personal data, which we inquire in the form provided for this purpose. In addition, the IP address used by you and the date and time of sending the registration form are recorded. This personal data is collected and stored by us for internal use, for the purpose of communicating with you, for processing existing or future contractual relationships (e.g. orders), for protecting our technical system and for preventing misuse and, if necessary, for passing on to one or more contract processors (such as postal, parcel and payment service providers).

As a registered person, you can change or delete your personal data provided at the time of registration at any time, provided there are no legal regulations to the contrary, such as legal retention regulations. You can also obtain information from us at any time about which personal data about you as the person concerned is stored.

9. Google Maps

This website uses the map service provider “Google Maps” of the provider Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. The processed data may in particular include location data and IP addresses of users, which, however, may not be collected without their consent (within the framework of the settings of their mobile devices and browsers). The data may be processed in the USA. You can find the data protection declaration at  https://www.google.com/policies/privacy/. Under https://adssettings.google.com/authenticated you can object to the data processing.

10. Youtube Videos

This website uses “Youtube” videos of the provider Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. We use the extended data protection mode “nocookie”. You can find the data protection declaration at  https://www.google.com/policies/privacy/. Under https://adssettings.google.com/authenticated you can object to the data processing.

11. Data processing for job applications

If we receive personal data – for example via a corresponding application form on the website or by e-mail – within the scope of job applications for the purpose of processing the application procedure, the following also applies:

In the event that an employment contract is concluded with the job applicant, we will store the personal data transmitted to us for the purpose of processing the employment relationship.

Otherwise we will automatically delete the personal data transmitted to us two months after cancellation, insofar as there are no other legitimate interests of the data controller to the contrary. Such a justified interest contrary to deletion may be, for example, a duty of documentation and evidence required due to violation of the General Equal Treatment Act or a legal defence in a legal action brought or threatened by the job applicant against us.

12. Duration of storage, deletion and blocking of personal data

Personal data of data subjects shall be processed or stored by the controller, subject to other legal provisions, only for the period necessary to achieve the storage purpose. A further determining criterion for the duration of the storage of personal data is the respective legal retention period.
After the storage purposes have ceased to apply and existing legal storage periods have expired, the personal data will be blocked or deleted by the data controller in accordance with the statutory provisions and requirements, even without a corresponding request from the data subject.

13. Your rights as a data subject

In the following, we describe the rights that each person affected by the processing of personal data has vis-à-vis the data controller. If you wish to exercise any of these rights, you may contact the controller at any time. We recommend that you inform us of your request either in writing or by e-mail at info@mba-sport.de.

Any person concerned by the processing of personal data must has vis-à-vis the data controller

  1. the right to confirmation,i.e. the right to ask the controller to confirm whether personal data relating to them are being processed;
  2. the right to information,:i.e. in the case of the processing of personal data, a right to information on this personal data and on the following information:
    1. the purposes of processing;
    2. the categories of personal data being processed;
    3. the recipients or categories of recipients to whom the personal data has been or is still being disclosed, in particular recipients in third countries or international organisations;
    4. if possible, the planned duration for which the personal data will be stored or, if this is not possible, the criteria for determining this duration;
    5. the existence of a right to correction or deletion of personal data concerning you, a right to limitation of processing by the controller or a right to object to such processing;
    6. the existence of a right of appeal to a supervisory authority;
    7. if the personal data is not collected from the data subject, all available information on the origin of the data;
    8. the existence of automated decision-making including profiling in accordance with Art. 22 para. 1 and 4 DSGVO and – at least in these cases – meaningful information on the logic involved and the scope and intended effects of such processing for the data subject. (Note: We do not use profiling or other automated decision making methods.
  3. in the case of transfers of personal data to a third country or an international organisation, the right to be informed of the appropriate guarantees in accordance with Article 46 of the basic Regulation on data protection in relation to transfers;
  4. the right to have made availablea copy of the personal data which is the subject of the processing. For all other copies requested by the data subject, the data processor may charge an appropriate fee on the basis of the administrative costs. Where the data subject submits the application electronically, the information shall be provided in a common electronic format, unless otherwise indicated. This right to receive a copy must not prejudice the rights and freedoms of others.
  5. the right to report,i.e. the right to request that the controller correct any inaccurate personal data concerning him/her without delay. Taking into account the purposes of the processing, the data subject has the right to request the completion of incomplete personal data, including by means of a supplementary declaration;
  6. the right to cancellation (“right to be forgotten”),i.e. the right to request that the data controller delete the personal data relating to him/her without delay and the controller is obliged to delete this data without delay if one of the following reasons applies:
    1. The personal data concerning you is no longer necessary for the purposes for which it was collected or otherwise processed.
    2. The data subject revokes his/her consent, on which the processing was based pursuant to Art. 6 para. 1 lit. a or Art. 9 para. 2 lit. a DSGVO, and there is no other legal basis for the processing.
    3. The data subject shall object to processing in accordance with Article 21 para 1  of the basic Regulation on data protection and there are no overriding legitimate grounds for processing or the data subject shall object to processing in accordance with Article 21 para 2 of the basic Regulation on data protection.
    4. The personal data has been processed unlawfully.
    5. The deletion of personal data is necessary to fulfil a legal obligation under Union law or the law of the Member States to which the data controller is subject.
    6. The personal data concerning you was collected in relation to information society services offered pursuant to Article 8 para. 1 DSGVO.
    If the data controller has made the personal data concerning you public and is obliged to delete it pursuant para. 1, he shall take appropriate measures, including technical measures, taking into account the available technology and the implementation costs, to inform data processors that process the personal data that a data subject has requested the deletion of all links to this personal data or of copies or replications of this personal data.
    This does not apply if processing is necessary.
    1. to exercise freedom of expression and information;
    2. for the performance of a legal obligation required for processing under the law of the Union or of the Member States to which the controller is subject or for the performance of a task in the public interest or in the exercise of official authority conferred on the controller;
    3. for reasons of public interest in the field of public health pursuant to Art. 9 para. 2 lit. h and i and Art. 9 para. 3 DSGVO;
    4. for archiving purposes in the public interest, scientific or historical research purposes or for statistical purposes pursuant to Article 89 para 1 DSGVO, insofar as the law referred to is likely to make it impossible or seriously impair the attainment of the objectives of such processing, or
    5. to assert, exercise or defend legal claims.
  7. the right to restrict processing,i.e. the right of a data subject to request that the data controller delete the personal data relating to him/her without delay and the controller is obliged to delete this data without delay if one of the following reasons applies:
    1. the accuracy of the personal data is disputed by the data subject for a period which enables the data controller to verify the accuracy of the personal data,
    2. the processing is unlawful and the data subject refuses to delete the personal data and instead requests that the use of the personal data be restricted;
    3. the data controller no longer needs the personal data for the purposes of the processing, but the data subject does need it to assert, exercise or defend legal claims, or
    4. the data subject has lodged an objection to the processing in accordance with Article 21(1) of the basic Regulation on data protection until it has been established whether the controller’s legitimate reasons outweigh those of the data subject.
    If the processing of personal data has been restricted following this, such data may only be processed – apart from being stored – with the consent of the data subject or for the purpose of asserting, exercising or defending rights or protecting the rights of another natural or legal person or on grounds of an important public interest of the Union or a Member State. A data subject who has obtained a restriction on processing shall be informed by the controller before the restriction is lifted.
  8. The right to data transferability,i.e. the right of the data subject to the processing of personal data to obtain the personal data concerning him which he has provided to a controller in a structured, current and machine-readable format and he has the right to transmit this data to another controller without interference by the controller to whom the personal data have been provided, provided that
    1. processing is based on consent pursuant to Article 6(1)(a) or Article 9(2)(a) of the Basic Data Protection Regulation or on a contract pursuant to Article 6(1)(b) of the Basic Data Protection Regulation, and
    2. processing is carried out by means of automated methods.
    In exercising this right to data transferability, the data subject also has the right to request that the personal data be transferred directly from one data controller to another data controller, insofar as this is technically feasible. This right must not prejudice the rights and freedoms of others.
    The exercise of this right to data transferability does not affect the right to deletion (“right to be forgotten”). The right shall not apply to the processing of personal data necessary for the performance of a task in the public interest or in the exercise of official authority conferred on the controller.
  9. The right of objection,i.e. the right to object at any time, for reasons arising from your particular situation, to the processing of personal data concerning you under Article 6(1)(e) or (f) of the DSBER; this also applies to profiling based on these provisions. The controller no longer processes the personal data concerning you, unless he can prove compelling reasons worthy of protection for the processing, which outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.If the personal data is processed for direct marketing purposes, the data subject has the right to object at any time to the processing of the personal data for the purpose of such advertising; this also applies to profiling, insofar as it is associated with such direct marketing.If the data subject objects to the processing for direct marketing purposes, the personal data will no longer be processed for these purposes.The data subject has the possibility to exercise his/her right of objection in connection with the use of Information Society services by means of automated procedures using technical specifications, notwithstanding Directive 2002/58/EC.The data subject shall have the right to object to the processing of personal data concerning him/her for scientific or historical research purposes or for statistical purposes in accordance with Article 89(1) of the basic Regulation on data protection for reasons arising from his particular situation, unless such processing is necessary for the performance of a task in the public interest.
  10.  the right not to be subject to a decision based exclusively on automated processing – including profiling – that has legal effect against him/her or significantly impairs him/her in a similar manner.This does not apply if the decision
    1. is necessary for the conclusion or performance of a contract between you and the person responsible,
    2. is admissible under the legislation of the Union or of the Member States to which the person responsible is subject and that legislation contains appropriate measures to safeguard your rights, freedoms and legitimate interests; or
    3. is done with the express consent of the data subject.
    In the cases referred to in letters a and c, the person responsible shall take reasonable measures to safeguard your rights, freedoms and legitimate interests, including at least the right to obtain the intervention of a person by the controller, to state his own position and to challenge the decision.
    Automated decisions may not be based on specific categories of personal data, unless the data subject has consented or processing on the basis of Union law or the law of a Member State proportionate to the objective pursued preserves the very essence of the right to data protection and provides for appropriate and specific measures to safeguard the fundamental rights and interests of the data subject on grounds of a substantial public interest.