Data protection declaration in accordance with the GDPR
It is normally possible to use our website without providing any personal data. Insofar as personal data is collected when visiting our websites, we process it exclusively in accordance with the General Data Protection Regulation (Regulation (EU) 2016/679; GDPR) and the Federal Data Protection Act of 30 July 2017 (BDSG-new), as well as the Telemedia Act (TMG). The processing of personal data is undertaken exclusively in accordance with this data protection declaration.
This data protection declaration applies to the use of the website at the address https://www.kreidler-motorrad.com/en. The data protection declaration provided at the linked website is decisive for linked contents of other providers.
We would like to point out that security loopholes may occur in the course of data transmission via the Internet, which cannot be prevented by the technical design of this website. Complete protection of personal data is not possible when using the Internet.
I. Name and address of the responsible party
The responsible party within the meaning of the General Data Protection Regulation and other national data protection laws of the member states as well as other data protection regulations is:
II. Name and address of the data protection officer
The responsible party's data protection officer is:
III. Web hosting
1. Hosting of the website
Our website is operated on a web server of xdot GmbH (xdot GmbH, Feldstiege 78, 48161 Münster, Germany, www.x-serv.de).
2. Collected data
When accessing our websites, data is automatically collected and stored in log files on our hoster's server. This data may contain personal references. The collected data includes:
- Name of the accessed website
- Date and time of the access
- The amount of data transmitted
- Notification of successful access
- Internet browser type
- Internet browser version
- The operating system the browser is running on with patch level
- Previously visited page
- Accessed provider
- IP addresses
3. Purpose of collection by the hoster
The hoster uses the collected data to operate the website and to ensure IT security. In the event of specific indications, the log data will be analysed later if necessary.
4. Duration of storage by the hoster
Data stored by the hoster will be automatically deleted after four weeks.
IV. Maintenance of the website
Our website is maintained by bgp e.media (bgp e.media GmbH, Max-Planck-Ring 62a, 46049 Oberhausen, NRW, Germany, Phone: + 49 208 - 409 630 0, Fax: + 49 208 - 409 630 29, E-Mail: email@example.com, website: www.bgp-emedia.de). Employees of bgp e.media may have access to the data you have entered on our site.
This includes the following data categories:
- Personal master data
- Communications data
- Log data
The data can be accessed exclusively on behalf of Cycle Union GmbH within the framework of the technical support of the website. Your data will not be disclosed under any circumstances. With regard to secure order processing of your personal data in the newsletter tool, there is a legally binding agreement for order data processing with bgp e.media.
V. General information on data processing
This site uses SSL encryption for security reasons and for the protection of the transmission of confidential content, such as the enquiries you send to us as the site operator. You can recognise an encrypted connection in your browser's address line when it changes from "http://" to "https://" and the lock icon in your browser line is visible.
If SSL encryption is activated, the data which you transfer to us cannot be read by third parties.
1. Scope of the personal data processing
We collect and utilise our users' personal data only insofar as this is necessary for provision of an operational site and of our content and services. Collection and utilisation of our users' personal data is only undertaken periodically with the user's consent. An exception applies in those cases where prior consent cannot be obtained for legal or factual reasons and the processing of the data is permitted by law.
2. Legal basis for processing personal data
Insofar as we obtain the consent of the data subject for processing personal data, Art. 6 Para. 1 lit. a of the EU General Data Protection Regulation (GDPR) applies as the legal basis for processing personal data.
In processing personal data necessary for performance of a contract to which the data subject is a party, Art. 6 para. 1 lit. b GDPR applies as the legal basis. This also applies to processing operations that are necessary for carrying out pre-contractual measures.
Insofar as the processing of personal data is necessary to fulfil a legal obligation to which our company is subject, Art. 6 Para. 1 lit. c GDPR applies as the legal basis.
In the event that vital interests of the data subject or another natural person require a processing of personal data, Art. 6 1 lit. d GDPR applies as the legal basis.
If processing is necessary to safeguard a legitimate interest of our company or a third party and if the interests, fundamental rights and freedoms of the data subject do not outweigh the first-mentioned interest, Art. 6 Para. 1 lit. f GDPR applies as the legal basis for processing.
3. Data deletion and storage duration
The data subject's personal data will be deleted or blocked as soon as the purpose of storage ceases to apply. Furthermore, data may be stored if this has been provided for by the European or national legislator in EU regulations, laws or other provisions to which the responsible party is subject. Blocking or deletion of data will be carried out even if a storage deadline prescribed by the above-mentioned standards expires, unless data storage is a necessity for concluding or performing a contract.
VI. Provision of the website and creation of log files
1. Description and scope of data processing
Every time you visit our website, our system automatically collects data and information from the computer system of the accessing computer.
The following data is collected:
- Information regarding the used browser type and version
- The user’s operating system
- The user's IP address
- Date and time of access
- Websites from which the user's system accesses our website
- Websites accessed by the user's system via our website
The data is also stored in the log files of our system. This data is not stored together with other personal data of the user.
2. Legal basis for data processing
The legal basis for temporary storage of data and log files is Art. 6 Para. 1 lit. f, GDPR).
3. Purpose of the data processing
Temporary storage of IP address by the system is necessary to enable delivery of the website to the user's computer. To this end, the user's IP address must remain stored for the duration of the session.
The data is stored in log files to ensure the website's functionality. The data is also used to optimise the website and to ensure the security of our information technology systems. No evaluation of the data for marketing purposes is undertaken in this context.
These purposes also encompass our legitimate interest in data processing in accordance with Ar. 6 Para. 1 lit. f, GDPR).
4. Duration of storage
Collected customer data shall be deleted after completion of the order or termination of the business relationship. Legal retention periods remain unaffected. In the case of data collection for provision of the website, this will be undertaken once the respective session has ended.
5. Objection and removal option
Collection of data for provision of the website and storage of data in log files is absolutely necessary for operation of the website. Consequently, there is no option to object on the part of the user.
a) Description and scope of data processing
The user's session ID is stored in the cookies.
The following data can be transmitted in this way:
(1) Origin (country and city)
(3) Operating system of the accessing computer
(4) Device (PC, Tablet or Smartphone)
(5) Browser and used add-ons
(6) Computer resolution
(7) Visitor source (e.g. Facebook, search engine or referring site)
(8) Entered search terms
(9 Frequency of page views
(10) Use of website functions
(11) Total visit time and length of stay on the individual pages
(12) The original source of the visitor
(13) Other websites visited
The user data collected in this way is pseudonymised via technical precautions. It is therefore no longer possible to assign the data to the accessing user. The data is not stored together with users' other personal data.
b) Legal basis for the data processing
The legal basis for processing personal data using technically necessary cookies is Art. 6 Para. 1 lit. f, GDPR).
The legal basis for processing personal data by using cookies for analytical purposes, if the user's consent to this has been obtained, is Art. 6 Para. 1 lit. a GDPR.
c) Purpose of the data processing
The user data collected by technically necessary cookies is not used to create user profiles.
The analysis cookies are used to improve the quality of our website and its content. Using analysis cookies, we learn how the site is used and can constantly optimise our service.
For these purposes, our legitimate interest also lies in the processing of personal data pursuant to Art. 6 Para. 1 lit. f, GDPR).
d) Duration of storage, objection and removal option
VIII. Contact form and email contact
1. Description and scope of data processing
There is a contact form on our website that can be used for electronic contact. If a user accepts this option, the data entered in the input screen will be transmitted to us and stored. This data may include:
2. First name
3. Last name
4. Company name
5. Street address
6. Postal code
9. Phone number
10. Mobile number
11. Email address
13. Product purchase date
15. Subject of the request
16. Content of the request
17. Reference number
18. Attached files/documents
The following data is also stored at the time the message is sent:
- The user's IP address (anonymous)
- Date and time of registration
During the sending process, your consent is obtained for processing data and reference is made to this data protection declaration.
In order to ensure sufficient data security when submitting forms, we use Google Inc.'s reCAPTCHA service. This is mainly used to distinguish whether the entry has been made by a natural person or abusively by a machine and via automated processing.
For more information, please see the Google Services section of this data protection declaration.
Alternatively, you can contact us via the provided email address. In this case, the user's personal data that is transmitted along with the email will be stored.
2. Legal basis for data processing
The legal basis for processing the data, if the user's consent to this has been obtained, is Art. 6 para. 1 lit. a GDPR.
The legal basis for processing the data transferred in the course of sending an email is Art. 6 Para. 1 lit. f, GDPR). If the email contact aims at the conclusion of a contract, then an additional legal basis for the processing is Art. 6 Abs. 1 lit. b, GDPR).
3. Purpose of the data processing
The processing of personal data in the input screen is used by us only for processing the contact. In the event of contact by email, this also constitutes the necessary legitimate interest in processing the data.
The other personal data processed during the sending process is for preventing misuse of the contact form and to ensure the security of our information technology systems.
4. Duration of storage
The data will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. For the personal data from the contact form input screen and the data that was sent by email, this is the case when the respective conversation with the user has been completed. The conversation will have ended when it is evident from the circumstances that the matter at hand has been conclusively resolved.
Personal data that was additionally collected during the sending procedure will be deleted at the latest after a period of seven days.
5. Objection and removal option
The user has the option of revoking his or her consent to the processing of personal data at any time. A user who has contacted us by email can object at any time to the storage of his or her personal data. It will not be possible to continue the conversation in this case.
If you would like to revoke your consent to the storage of your data, please contact us using the following contact details:
All personal data stored in the course of contacting us will be deleted as a result.
IX. Use of Google services
Our website uses the services of the company Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043 (hereinafter: Google). Google has become subject to the Privacy Shield agreement, thereby offering a guarantee of compliance with European data protection law (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active)
See below for more information with respect to Prophete GmbH & Co. KG's use of Google services and the scope of personal data processing
1. Google Services
a.) Google Analytics
This website uses Google Analytics, a web analysis service provided by Google Inc. ("Google"). Google Analytics uses "cookies", which are text files that are stored on your computer and which help analyse your use of the website. This is to allow cookies from Google itself (Google Analytics cookies) and so-called third-party cookies (double click cookies). The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. We wish to point out that on this website Google Analytics has been extended with the code "gat._anonymizeIp();" in order to ensure the anonymous collection of IP addresses (IP masking). With anonymisation active, Google IP addresses are shortened within Member States of the European Union or in other States party to the European Economic Area, which is why no conclusions as to your identity are possible. The full IP address will only be transferred to a Google server in the USA and shortened in exceptional cases.
In the context of our use of Google Analytics, we have concluded a legally valid agreement with Google for order processing.
1. Legal basis for processing personal data
The legal basis for the use of Google Analytics is § 15 Para. 3 TMG (Telemedia Act) and Art. 6 Para. 1 li. F GDPR.
2. Purpose of the data processing
On behalf of the operator of this website, Google will use the collected information to evaluate your use of the website, to compile reports on website activity and to provide the website operator with other services associated with website and Internet use, in particular also functions for display advertising, such as Google Analytics reports on performance according to demographic characteristics and interests. Google may also transfer this information to third parties as required by law or if said third parties process this data on behalf of Google. Google's analytics reports on performance in accordance with demographic characteristics and interests use information and visitor data from third parties (such as age, gender and interests) obtained through interest-based advertising from Google. Google will not under any circumstances associate your IP address with any other data held by Google.
3. Duration of storage
4. Objection and removal option
You can prevent these cookies from being stored by selecting the appropriate settings in your browser; however, we wish to point out that doing so may mean you will not be able to enjoy the full functionality of this website. You can also prevent cookie-generated data about your use of the website (including your IP address) being passed on to Google, and prevent this data from being processed by Google, by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de
Opt-out cookies prevent future acquisition of your data when you visit this website. In order to prevent data acquisition by Universal Analytics across multiple devices, you need to perform the opt-out on all systems you are using. Click here to set the opt-out cookie:
b.) Google Maps
This website uses a service to display an interactive map with the product Google Maps from Google Inc.. By using this website, you consent to the collection, processing, and use of data collected automatically by Google Inc., its representatives, and third parties.
Google will not under any circumstances associate your IP address with any other data held by Google. However, it would be technically possible for Google to identify at least individual users based on the data collected. For example, it would be possible that personal data and personality profiles of users of the Google website could be processed for other purposes. We have no influence over this.
c.) Google WebFonts
d.) Google reCAPTCHA
2. Deactivating Google cookies
Changes to the advert settings can be made at https://www.google.de/settings/ads.
1. Description and scope of data processing
As part of their application, we offer users the opportunity to apply on our website by providing personal data. The data is entered into an input screen, transmitted to us, and stored. The following data may be collected during the registration process:
adapt this accordingly
- Personal data (first and last name, date of birth, address, graduation credential)
- Communication data (telephone number, mobile phone number, fax number, email address)
- Report data (from third parties such as credit bureaus, or from public directories)
- Data on assessment and evaluation in the application procedure
- Data on education (school, vocational training, civil/military service, studies, degree)
- Data on previous professional career, training and job references
- Information on other qualifications (e.g., language skills, PC skills, volunteer activities)
- Application photos
- Information on the salary expectation and earliest employment start
- Application history
2. Legal basis for data processing
The legal basis for processing data after the user registers for the newsletter is, if the user's consent to this has been obtained, Art. 6, Para. 1 lit. a) GDPR.
3. Purpose of the data processing
We use the information you submit solely to process your application for the position, unless you have actively agreed to a longer term of storage in the application process.
Only persons who are involved in the application process are informed of your personal data. All employees entrusted with data processing are obliged to maintain the confidentiality of your data. We do not share your personal information with third parties, unless you have consented to the transfer of data or we are obliged by law and/or official or judicial orders to a data transfer. With an application an account is created in our career portal, where you can view and manage your application.
4. Duration of storage
Within TIME PERIOD after completion of the specific application process, your data will be automatically deleted. This does not apply if statutory provisions preclude deletion, continued storage for the purpose of evidence is required, or you have expressly agreed to a longer storage duration.
We take all necessary technical and organisational security measures to protect your personal data from loss or misuse. All data is transmitted in encrypted form and protected by appropriate technology.
6. Objection and removal option
In accordance with Article 15 of the GDPR, you have the right to request information from us at any time about the data we stored about you, its origin, recipients and categories of recipients to whom this data has been disclosed. Furthermore, you have the right to request information about the purpose of storage.
You can object to the use of your data for the above-mentioned purposes at any time with effect for the future.
All information requests, requests for information or objections to data processing should be directed to us by email:
XI. Rights of the data subject
If your personal data is processed, you are a data subject within the meaning of the GDPR and you have the following rights with respect to the responsible party:
1. The right to information
You can request that the responsible party confirm whether we will process personal data that concerns you.
If such processing is taking place, you can request to be informed by the responsible party regarding the following information:
(1) the purposes for processing the personal data;
(2) the categories of personal data being processed;
(3) the recipients or categories of recipients to whom the personal data concerning you has been or will be disclosed;
(4) the planned storage duration of personal data concerning you or, if specific information in this respect is not possible, criteria for determining the storage period;
(5) the existence of a right of rectification or deletion of personal data that concerns you or of a restriction on processing by the responsible party or of a right to object to such processing;
(6) the existence of a right of appeal to a supervisory authority;
(7) any available information on the origin of the data if the personal data has not been collected from the data subject;
(8) the existence of automated decision-making, including profiling in accordance with Art. 22 Par. 1 and 4, GDPR and – at least in these cases – meaningful information on the logic involved and the scope and intended effects of such processing for the data subject.
You have the right to request information regarding whether your personal information will be transmitted to a third-party country or an international organisation. In this respect, you can request the appropriate guarantees in accordance with Art. 46 GDPR in connection with the transmission.
2. The right of rectification
You have a right of rectification and/or completion with respect to the responsible party if the personal data processed concerning you is incorrect or incomplete. The responsible party must make the correction immediately.
3. The right to restriction of processing
Under the following conditions, you may request that the processing of personal data concerning you be restricted if:
(1) you dispute the accuracy of the personal data concerning you for a period that enables the responsible party to verify the accuracy of the personal data;
(2) the processing is unlawful and you refuse to delete the personal data and instead request that the use of the personal data be restricted;
(3) the responsible party does not need the personal data for longer than the processing's purposes, but you need it for the assertion, exercise or defence of legal claims, or
(4) you object to the processing in accordance with Art. 21, Para. 1, GDPR and it is not yet clear whether the legitimate reasons of the responsible party outweigh your reasons.
Where processing of the personal data that concerns you has been restricted, such data – apart from being stored – may be processed only with your consent or for the purpose of asserting, exercising or defending rights or protecting the rights of another natural or legal person or on the grounds of an important public interest of the Union or of a Member State.
If the processing restriction has been restricted in accordance with the above conditions, you will be informed by the responsible party before the restriction has been lifted.
4. The right to deletion
a) Deletion obligation
You may request that the responsible party delete the personal data that concerns you immediately, and the responsible party will be obliged to delete this data immediately if one of the following reasons applies:
(1) the personal data that concerns you is no longer necessary for the purposes for which it was collected or otherwise processed;
(2) you revoke your consent to the processing pursuant to Art. 6 Para. 1 lit. a or Art. 9 Para. 2 lit. a GDPR and there is no other legal basis for processing;
(3) pursuant to Art. 21 Para. 1 GDPR, you object to the processing and there are no overriding justifiable reasons for the processing, or Art. 21 Para. to the processing pursuant to Art. 21 Para. 2 GDPR;
(4) the personal data that concerns you has been processed unlawfully;
(5) the deletion of personal data is required to comply with legal obligations according to Union law or the laws of the Member States to which the responsible party is subject;
(6) the personal data that concerns you has been collected in connection with offered information society services pursuant to Art. 8 Para. 1, GDPR.
b) Passing information to third parties
If the responsible party has made the personal data that concerns you public and if the responsible party is obliged for its deletion pursuant to Art. 17, Para. 1 of the GDPR, that responsible party shall take appropriate measures, including technical means, while taking into account available technology and implementation costs, to inform the parties responsible for data processing who process the personal data, that you as the person concerned have requested deletion of all links to such personal data or of copies or replications of such personal data.
The right to deletion does not exist insofar as the processing is necessary
(1) to exercise the right of freedom of expression and information;
(2) for the performance of a legal obligation required for processing under the law of the Union or of the Member States to which the responsible party is subject or for the performance of a task in the public interest or in the exercise of official authority conferred to the responsible party;
(3) for reasons of public interest in the field of public health in accordance with Art. 9 Para. 2 lit. h and i, as well as Art. 9 Para. 3, GDPR;
(4) for archiving purposes in the interest of public, scientific or historical research purposes or for statistical purposes in accordance with Art. 89 Para. 1 GDPR, to the extent that the law referred to in (a) is likely to render impossible or seriously prejudicial the attainment of the objectives of such processing; or
(5) to assert, exercise or defend legal claims.
5. Right to information
If you have exercised your right to have the responsible party correct, delete or limit the processing, this party is obliged to inform all recipients to whom the personal data that concerns you has been disclosed of this correction or deletion of the data or restriction on processing, unless this proves impossible or involves a disproportionate effort.
It is your right to have the responsible party inform you regarding such recipients.
6. The right of data portability
You have the right to obtain your personal data, which you have provided to the responsible party, in a structured, conventional and machine-readable format. In addition, you have the right to pass this data on to another responsible party without obstruction by the responsible party to whom the personal data was provided, insofar as
(1) the processing is based on consent pursuant to Art. 6 Para. 1 lit. a, GDPR or Art. 9 Para. 2 lit. a GDPR or on a contract pursuant to Art. 6 Para. 1 lit. b GDPR and
(2) the processing is undertaken using automated procedures.
In exercising this right, you also have the right to request that the personal data concerning you be transferred directly from one responsible party to another responsible party, insofar as this is technically feasible. The freedoms and rights of other persons must not be affected by this.
The right to data portability shall not apply to the processing of personal data necessary for the performance of a task in the public interest or in the exercise of official authority conferred on the responsible party.
7. The right of objection
You have the right, for reasons arising from your specific situation, to object to the processing of personal data concerning you at any time, which is carried out in accordance with Art. 6 Para. 1 lit. e or lit. f, GDPR; the same applies to profiling based on these provisions.
The responsible party will no longer process the personal data that concerns you, unless the party can prove compelling legitimate reasons for the processing, which outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.
If the personal data that concerns you is being processed for direct marketing purposes, you have the right to object at any time to the processing of the personal data that concerns you for the purpose of such marketing; this also applies to profiling, insofar as it is associated with such direct marketing.
If you object to processing that is for direct marketing purposes, the personal data that concerns you will no longer be processed for these purposes.
You have the option of exercising your right of objection in connection with the use of Information Society services by means of automated procedures using technical specifications, notwithstanding Directive 2002/58/EC.
8. The right to revoke the data protection declaration of consent
You have the right at any time to revoke your data protection declaration of consent. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its revocation.
9. Automated decision in individual cases, including profiling
You have the right not to be subject to a decision based exclusively on automated processing - including profiling - that has legal effect against you or significantly impairs you in a similar manner. This does not apply if the decision
(1) is necessary for the conclusion or fulfilment of a contract between you and the responsible party;
(2) is permissible on the basis of legislation of the Union or the Member States, to which the responsible party is subject, and these laws contain adequate measures to safeguard your rights and freedoms, as well as your legitimate interests, or
(3) is undertaken with your express consent.
However, these decisions may not be based on special categories of personal data pursuant to Art. 9, Para. 1 GDPR, unless Art. 9 Para. 2 lit. a or g applies and appropriate measures have been taken to protect your rights and freedoms as well as your legitimate interests.
In the cases referred to in (1) and (3), the responsible party shall take reasonable measures to safeguard your rights, freedoms and legitimate interests, including at least the right to obtain the intervention of a person on the part of the responsible party, to state his or her own position and to challenge the decision.
10. The right of appeal to a supervisory authority
Without prejudice to any other administrative or judicial remedy, you have the right of appeal to a supervisory authority, in particular in the Member State where you reside, work or where the infringement is suspected, if you believe that the processing of personal data that concerns you is in contravention of GDPR.
The supervisory authority with which the appeal has been lodged shall inform the appellant of the status and results of the appeal, including the possibility of a judicial remedy under Article 78 GDPR.
Please contact the competent supervisory authority:
Land Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia
Phone: 02 11/384 24-0
Fax: 02 11/384 24-10