In this privacy policy V2 we shall inform you on what type of personal data we collect in the context of your use of sigma.bike and how and for what purpose the data is used by us and what are your rights in this respect. You can call up this information at any time at https://sigma.bike/data-privacy/.
Summary
- We store web server log files.
- We have a newsletter, and to send this to you, we need your e-mail address. Since the newsletter delivery is undertaken by Episerver GmbH, it may be necessary to pass on the e-mail addresses to them.
- We pass on your data only for the purpose of prosecution of crimes or for asserting own claims to third parties or if we are legally obliged to do so.
- We use different categories of cookies. These include the essential cookies that are necessary for the operation of the website and therefore cannot be deselected. However, you can decide for yourself via our “Cookie banner” (“Privacy settings”) whether you want to allow cookies for “Statistics” and “Marketing”. Further information on the cookies used can be found below in this privacy statement.
Legal basis for the processing of personal data
Insofar as we obtain the consent of the concerned person for the processing of personal data, Art. 6 para. 1 lit. (a) EU General Data Protection Regulation (GDPR) will serve as legal basis.
In the processing of personal data necessary for the fulfillment of a contract to which the concerned person is a party, Art. 6 para. 1 lit. (b) GDPR will serve as legal basis. This also applies to processing operations required to carry out pre-contractual actions.
Insofar as processing of personal data is required to fulfil a legal obligation that is subject to our company, Art. 6 para. 1 lit. (c) GDPR will serve as legal basis.
In the event that vital interests of the concerned person/s or another natural person require the processing of personal data, Art. 6 para. 1 lit. (d) GDPR will serve as legal basis.
If processing is necessary to safeguard the legitimate interests of our company or a third party, and if the interests, fundamental rights and freedoms of the concerned party do not outweigh the interest mentioned first, Art. 6 para. 1 lit. (f) GDPR will serve as legal basis for processing.
The object of data protection
The object of data protection is personal data. According to Art. 4 No. 1 GDPR, these are all information relating to an identified or identifiable natural person; this includes, for example, names or identification numbers.
Collection of web server log files
Description and purpose
When accessing our website, our system automatically saves various data and information from the computer system of the calling computer. The storage of the following data together with other personal data of the user does not take place.
These are the following data:
- Internet browser: type, version and functionality (e.g. cookies, Java, Flash, PDF, etc.)
- Operating system, used terminal device and screen resolution
- IP address of the user
- Date and time of the visit to the website
- Website referrer (when linking through another website)
- Outbound links of our website
- Statistical data of the website visit (frequency, duration, URLs, country of origin of the visitor)
The purpose of the data collection is:
- To enable the delivery of the website to the computer of the website visitor
- Ensuring and optimising the functionality of the website
- Ensuring the safety of the IT infrastructure
Legal basis
This collection of data is carried out on the basis of our legitimate interest in a safe and error-free operation of our IT infrastructure, the fight against abuse, the prosecution of criminal offences and the securing, assertion and enforcement of claims, Art. 6 para. 1 lit. (f) GDPR.
Duration
The stored data will be irretrievably deleted after 14 days. An exceptionally extended storage occurs only if any personal assignment such as IP addresses have been alienated, shortened, or otherwise anonymised. An assignment is thereby no longer possible.
Cookies
General description, purpose and options
Our website uses cookies. These are small text files that are stored by the browser on your device. If you do not want to use cookies, you can deactivate the automatic saving in the appropriate settings of your browser. In addition, except for the technically necessary cookies, you can use our “Cookie banner” (“Privacy settings”). Here, all other cookies can be selected separately for the categories “Statistics cookies”, “Marketing cookies” and “External media cookies”.
You can also change your selection at any time by clicking on the following button. Stored cookies can be deleted at any time on the device. This can, for example, be done automatically using various software solutions.
Further settings and objections to the use of data for advertising purposes are possible via the US site www.aboutads.info or the EU site www.youronlinechoices.com. The settings are platform-independent, which means that they are applied to all devices, such as desktop computers or mobile devices.
A.) The following technically necessary cookies are used:
- Designation: PHPSESSID
- Deletion: after each session
- Purpose: This cookie refers to a unique session for a current browser session, thus defining the session.
- The legal basis is Art. 6 para. 1 lit. (b) GDPR.
- Designation: StoreApiNonce
- Deletion: after each session
- Purpose: Provide functions across pages
- The legal basis is Art. 6 para. 1 lit. (b) GDPR.
- Designation: StoreApiNonce
- Deletion: after each session
- Purpose: Provide functions across pages
- The legal basis is Art. 6 para. 1 lit. (b) GDPR.
- Designation: ti_wishlist_data_*
- Deletion: undetermined
- Purpose: Store user preferences
- The legal basis is Art. 6 para. 1 lit. (b) GDPR.
- Designation: wordpres_test_cookie
- Deletion: after each session
- Purpose: Test if cookie can be set. WordPress also sets wordpress_test_cookie cookie to check if the cookies are enabled on the browser to provide appropriate user experience to the users. This cookie is used on the front-end, even if you are not logged in.
- The legal basis is Art. 6 para. 1 lit. (b) GDPR.
- Designation: wp-postpass_{hash}
- Deletion: after 10 days
- Purpose: Used to maintain session if a post is password protected
- The legal basis is Art. 6 para. 1 lit. (b) GDPR.
- Designation: woocommerce_cart_hash
- Deletion: after each session
- Purpose: Helps WooCommerce determine when cart contents/data changes.
- The legal basis is Art. 6 para. 1 lit. (b) GDPR.
- Designation: woocommerce_items_in_cart
- Deletion: after each session
- Purpose: Helps WooCommerce determine when cart contents/data changes.
- The legal basis is Art. 6 para. 1 lit. (b) GDPR.
- Designation: wc_cart_hash_*
- Deletion: after each session
- Purpose: Store items in shopping cart.
- The legal basis is Art. 6 para. 1 lit. (b) GDPR.
- Designation: wp_woocommerce_session_
- Deletion: after 2 days
- Purpose: Contains a unique code for each customer so that it knows where to find the cart data in the database for each customer.
- The legal basis is Art. 6 para. 1 lit. (b) GDPR.
- Designation: woocommerce_recently_viewed
- Deletion: after each session
- Purpose: Powers the Recent Viewed Products widget.
- The legal basis is Art. 6 para. 1 lit. (b) GDPR.
- Designation: store_notice[notice id]
- Deletion: after each session
- Purpose: Allows customers to dismiss the Store Notice.
- The legal basis is Art. 6 para. 1 lit. (b) GDPR.
- Designation: wp-wpml_current_language
- Deletion: 13 months after the session
- Purpose: Stores the current language. This cookie is enabled by default on sites that use the Language filtering for AJAX operations feature.
- The legal basis is Art. 6 para. 1 lit. (b) GDPR.
- Designation: sigma-default
- Deletion: after the session
- Purpose: Help adjusting the language based on the browser language.
- The legal basis is Art. 6 para. 1 lit. (b) GDPR.
- Designation: _icl_visitor_lang_js
- Deletion: 13 months after the session
- Purpose: Stores the redirected language. This cookie is enabled for all site visitors if you use the Browser language redirect feature.
- The legal basis is Art. 6 para. 1 lit. (b) GDPR.
- Designation: wpml_browser_redirect_test
- Deletion: 13 months after the session
- Purpose: Tests if cookies are enabled. This cookie is enabled for all site visitors if you use the Browser language redirect feature.
- The legal basis is Art. 6 para. 1 lit. (b) GDPR.
- Designation: rank-math-option-titles-index
- Deletion: undetermined
- Purpose: Provide admin functions
- The legal basis is Art. 6 para. 1 lit. (b) GDPR.
- Designation: acf
- Deletion: after the session
- Purpose: Provide functions across pages.
- The legal basis is Art. 6 para. 1 lit. (b) GDPR.
B.) The following Statistics cookies are used:
- Matomo
- _Designation: pk_ref*
- Deletion: 6 months after the session
- Purpose: Identification of the country of origin of the visitor.
- The legal basis is Art. 6 para. 1 lit. (a) GDPR
- Further information: https://matomo.org/gdpr/
- _Designation: pk_cvar*
- Deletion: 30 minutes after the session
- Purpose: Preparation of internal statistics.
- The legal basis is Art. 6 para. 1 lit. (a) GDPR
- Further information: https://matomo.org/gdpr/
- _Designation: pk_id*
- Deletion: 13 months after the session
- Purpose: Identification of clear visits
- The legal basis is Art. 6 para. 1 lit. (a) GDPR
- Further information: https://matomo.org/gdpr/
- _Designation: pk_ses*
- Deletion: 30 minutes after the session
- Purpose: Session cookie for tracking active sessions.
- The legal basis is Art. 6 para. 1 lit. (a) GDPR
- Further information: https://matomo.org/gdpr/
- Universal Analytics (Google Analytics)
- Designation: _ga*
- Deletion: 14 months after the end of the session
- Purpose: This cookie is used to distinguish users on the site and generate statistical information about their use of the site
- The legal basis is Art. 6 para. 1 lit. (a) GDPR
- Further information: https://www.google.com/intl/de/policies/privacy/partners and https://support.google.com/analytics/answer/6004245
C.) The following Marketing cookies are used:
- Facebook Pixel (Facebook)
- Designation: _fbq*
- Deletion: 180 days after the session.
- Purpose: This cookie is used by Facebook in conjunction with the use of the Facebook pixel to connect your visit to the Facebook servers.
- The legal basis is Art. 6 para. 1 lit. (a) GDPR
- Further information: https://www.facebook.com/about/basics/privacy-principles. Further settings and objections to the use of data for advertising purposes are possible within the Facebook profile settings .
- Facebook Conversion Pixel (Facebook)
- Designation: _fbq*
- Deletion: 28 days after the end of the session.
- Purpose: This cookie helps us to display ads, assess the performance of advertising campaigns, display and assess ads in different browsers and devices used by the same person.
- The legal basis is Art. 6 para. 1 lit. (a) GDPR
- Further information: https://www.facebook.com/about/basics/privacy-principles. Further settings and objections to the use of data for advertising purposes are possible within the Facebook profile settings.
- Google Ads Conversion Tracker (Google Adwords)
- Designation: _ga*
- Deletion: 30 days after the end of the session.
- Purpose: This cookie helps us to display ads, assess the performance of advertising campaigns, display and assess ads in different browsers and devices used by the same person.
- The legal basis is Art. 6 para. 1 lit. (a) GDPR
- Further information: https://www.google.com/intl/de/policies/privacy/partners and google.de/intl/de/policies/technologies/ads. Further settings and objections to the use of data for advertising purposes are possible under https://www.google.de/settings/ads.
D.) The following cookies of external media are used:
- Youtube
- Designation: yt-remote-*
- Deletion: Session / persistent
- Purpose: Saves the user settings when retrieving a YouTube video integrated on other websites
- The legal basis is Art. 6 para. 1 lit. (a) GDPR
- Further information: https://www.cookiebot.com/de/cookie-declaration/
Newsletter
Description and purpose
We offer a free newsletter for retailers and end consumers, by which you can learn about products and actions of SIGMA-ELEKTRO GmbH. The newsletter contains no third-party advertisements and is voluntary. You can register for the newsletter by entering your contact details in the registration form. These data will not be transmitted to third parties. The e-mail address will be used by our processor Episerver Campaign for the purpose of sending the e-mail. After registration you will receive an e-mail. This contains the link for confirming your registration. You will receive the newsletter only when you have confirmed this.
Legal basis
In this case, the collection and processing of your personal data takes place in order to be able to offer you the newsletter ordered by you, Art. 6 para. 1 lit. (b) GDPR. The forwarding of your e-mail address to our partner Episerver Campaign is also to enable our partner Episerver Campaign to send you the newsletter (Art. 6 para. 1 lit. (b) GDPR).
Duration and deletion
The data will be deleted as soon as it is no longer necessary for the achievement of the purpose. The user’s e-mail address will be stored by us as long as the subscription to the respective newsletter is active.
Objection
You can unsubscribe from the newsletter at any time. Each newsletter contains information on how you can unsubscribe from the newsletter with effect for the future.
Contact forms
Description and purpose
Our contact forms are used for the purpose of making contact electronically. The data entered in the input mask are transmitted to us encrypted and stored. These are the following data: first name, last name, if necessary company, street, post code and place of residence, country, e-mail address, telephone and fax number and message. A contact is alternatively possible via our contact address info@sigma.bike. In such a case, the data specified in the e-mail as well as the submitted personal data of the user are stored. There is no disclosure to third parties in both contexts. We use the data exclusively for processing the request.
Legal basis
The processing of the data entered in the contact form or transmitted by e-mail is for the purpose of fulfilling the contract or carrying out pre-contractual measures that are carried out at the request of the concerned party (Art. 6 para. 1 lit. (b) GDPR), provided that the contact has relevant content. Otherwise, the processing is carried out to safeguard our legitimate interests (Art. 6 para. 1 lit. (f) GDPR).
Duration and deletion
The personal data in the input mask of the contact form and those alternatively provided via e-mail will be irretrievably deleted as soon as the conversation is over. A conversation is deemed to have ended when it can be deduced from the circumstances that the facts have been finally clarified.
Test and Wow
The data entered in the test and wow contact form will be used exclusively for processing delivery, offer and invoice. The data is stored until the job is completed. Afterwards all data will be irrevocably deleted.
Disclosure of data
Unless otherwise stated in the privacy policy, your personal data will be disclosed without your express prior consent only in the following cases:
If it is necessary to investigate the unlawful use of our services or for purposes of prosecution, personal data will be forwarded to law enforcement authorities and, where appropriate, to third parties who have been harmed. However, this only happens if there are concrete indications of unlawful or abusive behaviour. A transfer can also take place if it serves to enforce Terms of Use or other agreements. We are also required by law to provide information to certain public authorities upon request. These are law enforcement agencies, authorities prosecuting administrative offences that involve fines and the tax authorities.
The transfer of this data is based on our legitimate interest in the fight against abuse, the prosecution of criminal offenses and the protection, assertion and enforcement of claims, if in this case the balancing of interests to be carried out by us has revealed that the interests or fundamental rights and fundamental freedoms of the concerned party, which needs the protection of personal data, are not outweighed (Art. 6 para. 1 lit. (f) GDPR)
Your rights as the affected party
Right to information
You have the right to request from us any time information about the personal data processed by us in the scope of Art. 15 GDPR by post or e-mail to datenschutz@sigma.bike. We will then provide you with a copy of the personal data that is the subject of the processing in accordance with Art. 15 para. 5 GDPR. For this you can submit an application by post or by e-mail to the address given above.
Right to rectify/complete incorrect data
You have the right to request immediate correction or completion of personal data concerning you if it is incorrect. Please contact the above-mentioned addresses.
Right to delete
You have the right to demand the deletion of your personal data under the conditions described in Art. 17 GDPR. In particular, these requirements provide for a right to delete if the personal data are no longer necessary for the purposes for which they were collected or otherwise processed, and in cases of unlawful processing, the right to object or obligation to delete under Union law or the law of the Member State to which we are subject. To assert your right, please contact the below-mentioned addresses.
Right to restriction of processing
You have the right to demand from us that we restrict processing in accordance with Art. 18 GDPR. This right exists in particular if the accuracy of the personal data is disputed between you and us, for the period of time required to verify correctness, and in the case you ask for limited processing instead of deletion in the case of an existing right of deletion; and furthermore in the event that the data is no longer required for the purposes we are pursuing, but which you or us require in order to assert, exercise or defend legal claims, and if the successful exercise of an objection between you and us is still disputed. To assert your right, please contact the below-mentioned addresses.
Right to data portability
You have the right to receive from us the personal data relating to you which you have provided to us in a structured, standard, machine-readable format in accordance with Art. 20 GDPR. To assert your right, please contact the below-mentioned addresses.
Right to object
You have the right at any time, for reasons arising out of your particular situation, to object in accordance with Art. 21 GDPR against the processing of personal data relating to you on the basis of Art. 6 para. 1 lit. (e) or (f) GDPR. We will then stop the processing of your personal information, unless we can demonstrate compelling legitimate grounds for processing that outweigh your interests, rights and freedoms, or the processing is for the purpose of asserting, exercising or defending legal claims.
Right to lodge complaints to a data protection supervisory authority
You have the right to lodge a complaint with our Data Protection Officer (contact details below, at the end of this Privacy Policy) or with a data protection supervisory authority. The contact details of the responsible data protection supervisory authority are as follows:
The State Commissioner for Data Protection and Freedom of Information Rhineland-Palatinate
Prof. Dr. Dieter Kugelmann
Hintere Bleiche 34
55116 Mainz, Germany
Change in purpose
Processing of your personal data for purposes other than those described will only take place if a legal provision allows this or if you have consented to the revised purpose of the data processing. In the event of further processing for purposes other than those for which the data was originally collected, we will inform you of these other purposes before further processing and provide you with all other relevant information.
Deletion of your data
We will delete or anonymise your personal information as soon as it is no longer necessary for the purposes for which we collected or used it in accordance with the preceding paragraphs. The data will be irrevocably deleted as far as these data are not subject to statutory retention periods, or are not required for a longer period for prosecuting offences or for securing, asserting or enforcing legal claims. The data is then no longer available for further use.
Responsible for data processing
SIGMA-ELEKTRO GmbH
Dr.-Julius-Leber-Str. 15
67433 Neustadt a. d. Weinstraße
Contact details of the Data Protection Officer
You can reach our data protection officer by post at the above address with the addition “Data Protection Officer” or by e-mail at datenschutz@sigma.bike
As at: 29.09.2022