Privacy Protection Statement
1. Data Protection at a glance
The following information provides a simple guide on what personal data we collect from you and what happens to it when you visit our website. For more detailed information, please refer to the text below from point 2 onwards.
Data collectin on oour website
Who is responsible for the data collected on this website? Data on this website is processed by the website operator, the contact details for which are provided on the website in the “Imprint" section.
How do we collect your data?
Your data is collected when you provide it, for example data that you yourself enter when setting up your account or when completing a contact form. Other data is automatically collected by our IT systems when you visit the website. This is mainly technical data (e.g. internet browser, operating system or time of visit). This data is recorded automatically as soon as you access our website or open the app. Server log files are required for the website to function properly and optimally. These files are automatically deleted again after 10 days.
What do we use your data for?
Some of the data is collected to guarantee that the website works properly. Other data can be used to analyze user behavior.
What are your rights in relation to your data?
You have the right at any time to request, free of charge, information on the origin, recipients and purpose of the data about you that we have stored. You also have the right to request the rectification, blocking or erasure of this data. You may contact us via the address provided in the “How to contact us” section at any time with questions about this or about data protection. You also have the right to complain to the responsible supervisory authority.
Analysis tools and tools provided by third parties
Your browsing behavior when you visit our website may be statistically evaluated, mainly using cookies and analysis software. Your browsing behavior will generally be analyzed anonymously; it is not possible for your browsing behavior to be traced back to you. You may object to this analysis or prevent it by avoiding using certain tools. Detailed information is available in the following Data Privacy Statement. You may object to this analysis. Information on your right to object is provided in this Data Privacy Statement.
Further information on this Data Privacy Statement
2. General Information and Mandatory Information
Data protection is very important to us. We handle your personal data in confidence and in accordance with the statutory data protection regulations, in particular the General Data Protection Regulation (the “GDPR”) and this Data Privacy Statement. Whenever you use this website, various pieces of personal data are collected. Personal data comprises any data that can be used to identify you. This Data Privacy Statement explains what data we collect and what we use it for. It also explains how and for what purpose this processing is carried out. You should note that data transfer via the Internet (e.g. via e-mail communications) may represent a security vulnerability. It is not possible to completely protect data against access by third parties.
Information about the data controller
The responsible data controller for this website is:
represented by the managing directors:
Rebecca Bolger, Kelly Michelle Kaiser, Andreas Fischer, Franciscus van de Ven, Amelia Dorothy Legutki
Happurger Str. 84-88
Commercial Register of Nuremberg Local Court, HRB 15928
Tel: +49 (0)911 / 54 44 50
Our data protection officer can also be contacted using these details.
Withdrawing your consent to data processing
Many data processing actions can only be carried out with your express consent. You can withdraw your previously granted consent at any time. This can be done simply by notifying us by e-mail. The lawfulness of any data processing carried out before you withdraw your consent is not affected by this action.
Right to data portability
You have the right to receive data that we process by automated means on the basis of your consent or in fulfillment of a contract in a commonly used machine-readable format or to request it to be transmitted to a third party. If you request that we transmit the data directly to another data controller, this will only be done if it is technically feasible.
Data security (SSL/TLS encryption)
For reasons of security and to protect the transmission of confidential content, such as purchase orders or inquiries that you submit to us as the website operator, this website uses SSL or TLS encryption. The encrypted connection is indicated by the padlock icon in the browser address bar and the use of “https://” instead of “http://” in the web address. When SSL/TLS encryption is enabled, the data that you transmit to us cannot be intercepted by third parties.
Information, blocking and erasure
According to the applicable legal regulations, you have the right at any time to request at no charge information about the personal data that we store, where we collected it, who we share it with and the purpose of processing; you also have the right to rectification of incorrect data, as well as the blocking and erasure of this data. You may contact us via the address provided above at any time with questions about personal data.
Objection to advertising
We herewith object to the use of the contact information published in line with our statutory requirements to provide such information for the purpose of sending us any advertising or information materials that we have not expressly requested. The website operator expressly reserves the right to take legal steps in the case that unrequested advertising such as spam e-mail is sent.
The legal provisions governing the above can be found in particular in Article 15 GDPR (right to information), Article 16 GDPR (right to rectification), Article 17 GDPR (right to erasure), Article 18 GDPR (right to restriction of processing), Article 21 GDPR, Article 6 (1) (f) and Article 7 (3) GDPR (right to object), Article 20 GDPR (right to data portability) and Article 77 GDPR (right to lodge a complaint).
3. Data Collection on our website
Server log files
When you access our website, your web browser software automatically sends information to our web server (server log files). The following information is collected and stored until it is automatically deleted:
• Type and version of the web browser software
• Operating system
• Referrer URL
• Host name of the accessing computer
• Time of the query sent to the server
• IP address
This data will not be merged with other sources of data.
The basis for the processing of this data is Article 6 (1) (b) GDPR, which permits the processing of data for the fulfillment of a contract or to take steps prior to entering into a contract. Server log files are required for the website to function properly and optimally. These files are automatically deleted again after 10 days.
If you send us an inquiry using the Contact Form, your information in the Contact Form including the contact information that you enter there will be saved by us for the purpose of handling your inquiry and any follow-up questions. We will not share this data without your permission. Therefore, the processing of the data entered in the Contact Form is done exclusively on the basis of your consent (Article 6 (1) (a) GDPR). You can withdraw this consent at any time. This can be done simply by notifying us by e-mail. The lawfulness of any data processing carried out before you withdraw your consent is not affected by this action. We will retain the data entered by you in the Contact Form until you request us to erase it, withdraw your consent to it being stored, or the purpose of storage is no longer applicable (for example because we have finished handling your inquiry). Mandatory statutory provisions, especially regarding retention periods, are not affected by this.
Registering on this website
You can register on our website in order to use its advanced functions. We will only use the data you enter when doing this for the purpose of your use of the corresponding offer or service for which you have registered. Any mandatory fields requested when registering must be completed. Otherwise we will reject your registration. For important changes such as to the scope of our offering or where technically necessary we will use the e-mail address supplied at registration in order to inform you by this means. The processing of the data entered at registration is done on the basis of your consent (Article 6 (1) (a) GDPR). You can withdraw your previously granted consent at any time. This can be done simply by notifying us by e-mail. The lawfulness of any data processing previously carried out is not affected by this action. We will continue to store the data collected at registration for as long as you remain registered on our website and will then delete it. Statutory retention periods are not affected by this.
Data processing (customer and contract data)
We only collect, process and use personal data to the extent that it is necessary for the creation, arrangement or modification of the legal relationship (existing data). This is done on the basis of Article 6 (1) (b) GDPR, which permits the processing of data for the fulfillment of a contract or to take steps prior to entering into a contract. We only collect, process and use personal data regarding the use of our website (usage data) to the extent that is necessary to enable the user to make use of the service or for billing of this usage. The customer data that is collected will be deleted on conclusion of the order or termination of the business relationship. Statutory retention periods are not affected by this.
Data transmission on conclusion of contracts for web shops, merchants and goods shipment
We only transmit personal data to third parties if this is necessary for the fulfillment of a contract, for example to companies engaged in the shipment of goods or banks engaged in the processing of payments. Additional data transmission will not occur unless you have given your express consent to the transmission. Your data will not be shared with third parties, for example for the purpose of marketing, without your express permission. The basis for the data processing is Article 6 (1) (b) GDPR, which permits the processing of data for the fulfillment of a contract or to take steps prior to entering into a contract.
Data transmission on conclusion of contracts for services and digital content
We only transmit personal data to third parties if this is necessary for the fulfillment of a contract, for example to banks engaged in the processing of payments. Additional data transmission will not occur unless you have given your express consent to the transmission. Your data will not be shared with third parties, for example for the purpose of marketing, without your express permission. The basis for the data processing is Article 6 (1) (b) GDPR, which permits the processing of data for the fulfillment of a contract or to take steps prior to entering into a contract.
4. Plugins and tools
Facebook plugins (Like & Share button)
Our website integrates plugins from the Facebook social media platform, provided by Facebook Inc., 1 Hacker Way, Menlo Park, California 94025, USA. The Facebook plugin takes the form of the Facebook logo or the “Like” button on our website. An overview of the Facebook plugin can be found here: https://developers.facebook.com/docs/plugins/. When you visit our website, the plugin establishes a direct connection between your web browser software and the Facebook server. Via this connection, Facebook receives information that you have visited our website from your IP address. If you click on the Facebook “Like” button while you are logged in to your Facebook account, the content on our website can be linked to on your Facebook profile. This allows Facebook to connect your visit to our website with your user account. As the website provider, we have no knowledge of the content of the data that is transmitted or how it is used by Facebook. Further information can be found in the Facebook Data Policy at: https://www.facebook.com/policy.php. If you do not wish Facebook to be able to connect your visit to our website with your Facebook user account, you should log out of Facebook before visiting our website. You can also use a browser add-on such as the “NoScript” script blocker (http://noscript.net) to prevent the Facebook plugin being loaded.
Transmission of fitness training activity information to associated connected accounts
Strava. We enable your fitness training activities to be automatically imported to the Strava platform. You must expressly state your agreement to the connection of your Strava account with your Cytech account in order for the data to be shared. The following data is sent to your Strava account: Calories, distance, duration and name of the workout.
Apple HealthKit. We enable your fitness training activities to be automatically imported to the Apple HealthKit platform. You must expressly state your agreement to the connection of your Apple HealthKit account with your Cytech account in order for the data to be shared. The following data is sent to your Apple HealthKit account: Calories, distance, duration and name of the workout.
Google Fit. We enable your fitness training activities to be automatically imported to the Google Fit platform. You must expressly state your agreement to the connection of your Google Fit account with your Cytech account in order for the data to be shared. The following data is sent to your Google Fit account: Calories, distance, duration and name of the workout.
5. Analysis tools and advertising
This website uses functions provided by the Google Analytics web analytics service. This is provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
We have enabled the IP Anonymization function on this website. This means that your IP address is truncated by Google within the Member States of the European Union or the European Economic Area before being transmitted to the USA. The full IP address will only be sent to a Google server in the USA before being truncated there in exceptional circumstances. Google will use the information that is sent in order to evaluate your usage of the website on behalf of the website operator, in order to compile reports about the website activities and provide other associated services regarding website usage and Internet usage to the website operator. The IP address transmitted by your web browser in the scope of Google Analytics will not be combined with other data held by Google.
You can prevent the storage of cookies by means of a corresponding setting in your web browser software. However, we would like to inform you that such action can prevent full use of some of the functionality of this website. You can also prevent the collection of data regarding your usage of the website generated by the cookie (including your IP address) and its transmission to and processing by Google by downloading and installing the browser plugin from the following link: https://tools.google.com/dlpage/gaoptout?hl=de.
Objection to data collection
Google AdWords and Google Conversion Tracking
If you wish to receive one of the newsletters offered on the website, we require your e-mail address and information that allows us to verify that you are the owner of the e-mail address and that you agree to receipt of the newsletter. Further data is not collected or is provided voluntarily. We use this data exclusively to send the requested information and we do not share it with third parties. The processing of the data is done exclusively on the basis of your consent (Article 6 (1) (a) GDPR). The consent you grant for us to store the data, e-mail address and to use this to send the newsletter can be withdrawn at any time, for example using the “Unsubscribe” link in the newsletter. The lawfulness of any data processing previously carried out is not affected by this action. We will store the data you provide to use for the purpose of subscription to the newsletter until you unsubscribe from the newsletter and after which time we will delete it. This does not affect data stored by us for other purposes (e.g. e-mail addresses for the members’ area).
7. Payment service providers
We support payment by services including PayPal on our website. This payment service is operated by PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (“PayPal”). If you choose to pay using PayPal, the payment data you enter is sent to PayPal. The transmission of your data to PayPal is done on the basis of Article 6 (1) (a) GDPR (consent) and Article 6 (1) (b) GDPR (processing for fulfillment of a contract). You have the right to withdraw your consent to data processing at any time. Withdrawing your consent does not affect the validity of data processing carried out in the past.