Privacy policy

This is a translation. The German version is legally binding.

This policy explains which personal data we process when you visit our website or contact us, for what purposes and on what legal basis we do so, and which rights you have.

1. Controller

The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:

AO Sports GmbH (brand: Cachena Sport), represented by the managing director Amer Osmanhodzic

Illerstraße 23, 89171 Illerkirchberg, Germany

Phone: +49 176 61956732 · Email: info@cachena-sport.de

If you have questions about data protection or wish to exercise your rights, an informal message to the contact details above is sufficient.

2. General information on data processing

We only process personal data where a legal basis permits it. The relevant legal bases are in particular:

• Art. 6(1)(a) GDPR – your consent, in the case of access to your device in conjunction with § 25(1) TDDDG;
• Art. 6(1)(b) GDPR – steps prior to entering into a contract or performance of a contract, for example when handling your enquiry;
• Art. 6(1)(c) GDPR – compliance with legal obligations, for example retention obligations under commercial and tax law;
• Art. 6(1)(f) GDPR – our legitimate interests, provided that your interests or fundamental rights do not override them.

We delete personal data as soon as the purpose of processing no longer applies and no statutory retention obligations prevent deletion. We state the specific retention periods for each processing activity below.

3. Hosting

This website is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA. Vercel provides the server infrastructure and the content delivery network through which the pages are delivered to your browser. In doing so, Vercel necessarily processes the connection data listed in section 4.

We have concluded a data processing agreement with Vercel pursuant to Art. 28 GDPR. Vercel is certified under the EU-US Data Privacy Framework; transfers to the USA are therefore covered by an adequacy decision of the European Commission (Art. 45 GDPR). In addition, the European Commission's standard contractual clauses have been agreed (Art. 46(2)(c) GDPR). The legal basis for hosting is our legitimate interest in providing our website reliably, quickly and securely (Art. 6(1)(f) GDPR).

4. Server log files

Each time you access our website, your browser automatically transmits technical information, which is recorded in server log files:

• IP address of the requesting device
• date and time of access
• page or file requested and amount of data transferred
• HTTP status code
• referrer URL (the previously visited page)
• browser type and version and operating system (user agent)

We need this data to deliver the website technically, to ensure its stability and security and to detect attacks or errors. The legal basis is Art. 6(1)(f) GDPR. This data is not combined with other data sources. Vercel stores the log files only for a limited period and then deletes them automatically.

5. SSL/TLS encryption

For security reasons, this website uses SSL/TLS encryption. You can recognise an encrypted connection by “https://” in the address bar and the padlock symbol in your browser. Data you send to us – for example via the enquiry form – therefore cannot be read by third parties while in transit.

6. Enquiry form

If you contact us via the enquiry form, we process the information you provide there. Depending on your enquiry, this includes:

• Project details: requested service, type of premises, floor area, postcode and town, time frame, project stage, branding request, event date
• Contact details: name, company or club, email address, phone number, preferred method of contact
• Your message to us

Together with your enquiry, we also transmit technical information on how you reached our website: campaign parameters in the address (UTM parameters), click identifiers from Google or Meta (gclid, fbclid), the referring page (referrer), the landing page and the page from which you submitted the form. This information is collected without cookies and is transmitted only together with your enquiry. It helps us understand how prospective customers find us.

We use your information to handle your enquiry, prepare a quote and get in touch with you. The legal basis is Art. 6(1)(b) GDPR, as the enquiry is aimed at concluding a contract. For the origin information and for general enquiries, we rely on our legitimate interest in handling enquiries efficiently and in evaluating our marketing channels (Art. 6(1)(f) GDPR). Mandatory fields are marked in the form; without this information we cannot process your enquiry.

Form data is not stored in a database on the website but forwarded by email to our mailbox. For sending email and for the mailbox, we use IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany, as a processor (Art. 28 GDPR).

Your enquiry remains in our mailbox for as long as necessary to handle it and to deal with any follow-up questions. If no order results, we delete the enquiry once it is clear that it is no longer needed. If a contract is concluded or the enquiry constitutes business correspondence, we retain the documents for the statutory retention periods (in particular § 257 HGB and § 147 AO; up to ten years depending on the type of document; Art. 6(1)(c) GDPR).

7. Contact by email or phone

If you contact us by email or phone, we process the data you provide (e.g. name, email address, phone number, content of your request) in order to respond to you. The legal basis is Art. 6(1)(b) GDPR where your request relates to a contract or its initiation, and otherwise Art. 6(1)(f) GDPR. Emails are processed via our provider IONOS SE. The retention rules described for the enquiry form apply accordingly.

8. Contact via WhatsApp

Our website contains a link that lets you message us on WhatsApp (wa.me). As long as you do not click this link, no data is transmitted to WhatsApp. Only when you click it does WhatsApp or the WhatsApp website open; in the EU the service is operated by WhatsApp Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland, a Meta group company.

If you contact us via WhatsApp, WhatsApp and Meta process your phone number, profile name, message content and metadata under their own terms. Data may be transferred to the USA in this context; Meta is certified under the EU-US Data Privacy Framework. We use the data only to respond to your enquiry (Art. 6(1)(b) or (f) GDPR). If you do not want this, please use the form, email or phone instead. Further information can be found in WhatsApp's privacy policy: https://www.whatsapp.com/legal/privacy-policy-eea

9. Audience measurement with Vercel Web Analytics

To understand which pages are visited and how often, we use Vercel Web Analytics provided by Vercel Inc. (address in section 3). The service works without cookies and does not store any information on your device. Data recorded includes the page visited, the referring page, browser, operating system, device type and approximate country. To distinguish visits, a short-lived, anonymised value is derived from the request and discarded after about 24 hours; your IP address is not stored for this purpose. There is no tracking across websites and no creation of user profiles.

The legal basis is our legitimate interest in privacy-friendly statistical analysis and in improving our services (Art. 6(1)(f) GDPR). Regarding transfers to third countries, the information in section 3 applies.

10. Cookies and consent management

We only use cookies and similar technologies that are not strictly necessary for operating the website with your consent (§ 25(1) TDDDG). On your first visit, a banner asks whether you agree to analytics and marketing services. Before you consent, the Google and Meta services described below are not loaded; no corresponding cookies are set and no data is transmitted to these providers.

We store your choice in the cookie cs_consent so that we do not have to ask you again on every page view. This cookie contains only your consent decision and is deleted after six months. It is technically necessary to implement your choice (§ 25(2) no. 2 TDDDG); the legal basis for the associated processing is Art. 6(1)(c) GDPR in conjunction with Art. 7(1) GDPR (proof of consent) and Art. 6(1)(f) GDPR.

You can withdraw or change your consent at any time with effect for the future by clicking “Cookie settings” in the footer (Art. 7(3) GDPR). This does not affect the lawfulness of processing carried out before withdrawal.

11. Meta Pixel

With your consent, we use the Meta Pixel provided by Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland (“Meta”). It allows us to measure whether visitors come to our website and send an enquiry after clicking an ad on Facebook or Instagram, and to show ads more specifically to people interested in our services. Meta may link the data collected to your Facebook or Instagram account and also use it for its own purposes.

We and Meta are joint controllers for the collection of data on our website and its transmission to Meta (Art. 26 GDPR). The agreement concluded for this purpose is available at https://www.facebook.com/legal/controller_addendum. Meta alone is responsible for any further processing after transmission. Information on data protection at Meta: https://www.facebook.com/privacy/policy

Legal basis and transfers to the USA (Google and Meta)

The legal basis for Google Analytics, Google Ads conversion tracking and the Meta Pixel is your consent (Art. 6(1)(a) GDPR; for access to your device § 25(1) TDDDG). Google and Meta may transfer data to their parent companies in the USA. Google LLC and Meta Platforms, Inc. are certified under the EU-US Data Privacy Framework (Art. 45 GDPR); standard contractual clauses are also in place. You can withdraw your consent at any time via “Cookie settings” in the footer.

12. Fonts

The fonts used on this website are hosted locally on our server. No connection to servers of Google or other font providers is established when the pages are loaded.

13. Google Maps, Google reviews and Instagram

We do not embed Google Maps. Using the “Plan route” link, you can open Google Maps in a new window; data is transmitted to Google only once you click it, and Google's privacy policy applies (https://policies.google.com/privacy).

We refer to our Instagram profile with a simple link only. No data is transmitted to Instagram when you visit our website. Only when you click the link are you taken to Instagram, a service of Meta Platforms Ireland Limited, to which its own privacy terms apply.

On the home page, we show images from our latest Instagram posts. Our server retrieves them via the Instagram interface (Meta Platforms Ireland Limited) and delivers them from our own domain. Your browser does not load any content from Instagram or Meta, and no data about you is transmitted to Meta.

We also show our Google reviews (overall rating, reviewers' names, text and date of the review). Our server retrieves them via the Google Places API; your browser does not connect to Google in the process. Only when you click a link to Google (e.g. “All reviews on Google”) are you taken to Google, and Google's privacy policy applies (https://policies.google.com/privacy). The reviews were published publicly on Google by their authors; we show them unchanged with the name given there. The legal basis is our legitimate interest in showing prospective customers genuine customer feedback (Art. 6(1)(f) GDPR). If an author deletes or changes their review on Google, it is removed or updated here within 24 hours at the latest.

14. Your rights

You have the following rights against us with regard to your personal data:

• right of access (Art. 15 GDPR)
• right to rectification (Art. 16 GDPR)
• right to erasure (Art. 17 GDPR)
• right to restriction of processing (Art. 18 GDPR)
• right to data portability (Art. 20 GDPR)
• right to object to processing (Art. 21 GDPR, see below)
• right to withdraw consent with effect for the future (Art. 7(3) GDPR)

To exercise your rights, simply send a message to info@cachena-sport.de or to our postal address.

Right to object under Art. 21 GDPR

Where we process your data on the basis of Art. 6(1)(f) GDPR (legitimate interest), you may object to this processing at any time on grounds relating to your particular situation. We will then no longer process your data unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.

Where your data is processed for direct marketing purposes, you may object at any time without giving reasons; we will then no longer process your data for this purpose.

Right to lodge a complaint with a supervisory authority

You have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your data infringes the GDPR (Art. 77 GDPR). The authority responsible for us is:

Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg (State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg), Lautenschlagerstraße 20, 70173 Stuttgart, Germany, https://www.baden-wuerttemberg.datenschutz.de

15. No automated decision-making

We do not use automated decision-making, including profiling, within the meaning of Art. 22 GDPR.

16. Changes to this privacy policy

We update this privacy policy when our website, our services or the legal situation change. The version published here applies.