(Version 1.0 - 01 July 2020)
Translated - original version available in german
(hereinafter: "website"), our web application (hereinafter: "web app") and our mobile app (hereinafter: "app"; collectively referred to as "services"). If information relates exclusively to our website, web application, or app, we expressly draw your attention to this fact.
Further information about the Kurabu GmbH (hereinafter: "Kurabu") can be found in the imprint.
Kurabu has appointed a data protection officer, who can be reached at firstname.lastname@example.org.II. Purpose of the data processing and legal basis
We process your data by the provisions of the EU Data Protection Basic Regulation (DSGVO) and the Federal Data Protection Act (BDSG):- To fulfill contractual obligations (Art. 6 para. 1 b DSGVO)
Personal data is processed to provide our services on our website, the web app, or in the app within the scope of our contractual relationship with you or to carry out pre-contractual measures that are carried out at your request. Pre-contractual measures usually include the provision of personal data by you, which we need to incorporate into our services. For this purpose, a separate contract for data processing will be concluded by Art. 28 DSGVO.
The purpose of processing is to be able to provide you with our services. This includes in particular the personal data mentioned in section IV. - Agreement (Art. 6 para. 1 a DSGVO)
We process your data based on your consent. You can revoke your consent at any time, the revocation is only effective for the future. Processing operations to which you have consented before your revocation are not affected. You can request information at any time about the consents you have given us. - Consideration of interests (Art. 6 para. 1 f DSGVO)
As far as necessary, we process your data beyond the actual fulfillment of the contract to protect legitimate interests of us or third parties. Examples:The assertion of legal claims and defense in legal disputesEnsuring IT security and IT operationMeasures for business management and further development of services and products- Compliance with legal obligation (Article 6(1)(c))
Kurabu is subject to legal obligations, which we must comply with. This concerns in particular data processing that is justified by commercial and tax law (see also section IX). The purpose of the processing in this respect is to fulfill the requirements of a prudent businessman in the sense of the German Commercial Code (HGB) and the corresponding bookkeeping as well as fiscal control and reporting obligations according to the German Fiscal Code (AO).III. Data processing within the context of our website1. Cookies
2. Google Maps
We use on our website the function for embedding GoogleMaps maps from Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; "Google"). If you are habitually resident in the European Economic Area or Switzerland, Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) is the data controller. Google Ireland Limited is therefore the company affiliated with Google which is responsible for processing your data and for ensuring compliance with the applicable data protection laws. The feature allows the visual display of geographical information and interactive maps. Google also collects, processes, and uses data from visitors to the website when they call up the pages in which Google Maps maps are integrated. Your data may also be transferred to the USA. Google has certified itself by the US-EU data protection agreement "Privacy Shield" and has thus committed itself to comply with the European data protection guidelines.
IV. Data processing within the context of the web app and app
As part of the provision of our services, we require certain personal data from you as our customer and contractual partner, such as:
- Membership information (name, address, gender, date of birth, membership number, memberships, group details, phone number, and email address);
- Payment information (payment method and billing information such as the amount billed, billing date and billing period);
- QR Code Checkin (optional) - where a club can download a QR Code via Kurabu. Members of the club can take a picture of the QR Code via the app. The member can then track his check-ins. The club can see which team has checked in at which time and on which layout. The club can also view the member profiles of the people who have checked in at the club's site. These data can only be viewed by the club, not by Kurabu. The use of the QR Code Checkin is voluntary.
Furthermore, your club can write notes in the web app, which may contain personal data. The club determines the content of these notes. Kurabu does not see your notes. V. E-Mail-Newsletter
With our e-mail newsletter, we inform you about our offers. If you would like to receive the e-mail newsletter, we need an e-mail address from you. Our newsletter will only be sent to you if you expressly agree to this within the scope of your registration. We will check whether you are the owner of the given e-mail address or whether the owner agrees to receive the e-mail newsletter (so-called Double-Opt-In). You can revoke your consent at any time without affecting the legality of the processing that has taken place based on the consent until the revocation. You can unsubscribe from the newsletter at any time using the corresponding link in the newsletter or by informing us. Your e-mail address will then be removed from the distribution list. Your data will be passed on to a service provider for e-mail marketing within the scope of order processing. Your data will not be passed on to other third parties. The service provider we use to send you the newsletter is Mailchimp (The Rocket Science Group, LLC 675 Ponce de Leon Ave NE, Suite 5000 Atlanta, GA 30308, USA; "Mailchimp"). The sending of the newsletter is subject to your prior consent, which can be revoked at any time, by Art. 6 para. 1 lit. a DSGVO. Your data will be transferred to a third country for which an adequacy decision of the European Commission according to Art. 45 DSGVO exists. You can find further information under https://mailchimp.com/de/help/about-mailchimp-the-eu-swiss-privacy-shield-and-the-gdpr/
. VII. Transfer of personal data abroad
If Kurabu transfers personal data to countries outside the scope of the DSGVO, Kurabu will ensure that the recipient of the data guarantees an appropriate level of data protection. For transfers to the USA, Kurabu will, to ensure an adequate level of protection, either use service providers for which an adequacy finding has been issued by the European Commission (see, for example, for Google in Section III and Mailchimp Section V) or conclude the current version of the model contracts of the European Union for the transfer of data to other EU countries with the recipients.
VIII. Your rights and the control of your personal data
If the legal requirements are met, you are entitled to the following rights by Art. 15 to 20 DSGVO: the right to information, correction, deletion, restriction of processing, and data transferability. Furthermore, according to Art. 21 para. 1 DSGVO you have the right to object to the processing of data based on Art. 6 para. 1 f DSGVO as well as to the processing for direct advertising.
Please address your requests in text form:
Kurabu UG (haftungsbeschränkt)
Data protection officer
There is also a right of appeal to a data protection supervisory authority (Article 77 DSGVO in conjunction with Section 19 BDSG).
IX. Business transfers
If we or our assets are acquired, or in the unlikely event that we cease trading or go bankrupt, we would include information about the assets that will be transferred to all parties acquiring us. You acknowledge that such transfers may take place and that all parties acquiring us may continue to process your Personal Information by this Policy.X. Storage of your personal data
In principle, we process your data only as long as it is necessary for the provision of our services and thus for the fulfillment of our contract with you. Furthermore, we process personal data within the scope of our legal obligations. This means that if the data is no longer necessary for the fulfillment of contractual or legal obligations, it is regularly deleted. Temporary processing may be necessary for the following purposes:
- Fulfillment of commercial and tax law retention periods, which result from the following laws: Commercial Code, Tax Code. The periods of retention or documentation specified there are two to ten years;
- Preservation of evidence under the rules of prescription and limitation. According to §§ 195 et seq. of the German Civil Code (BGB), these limitation periods can be up to 30 years, whereby the regular limitation period is three years. The legal basis for this arises from Art. 17 para. 3 e DSGVO, Art. 6 para. 1 f DSGVO. XI. Changes to this Directive
I. About cookies used by Kurabu
What are cookies? A cookie is a method by which we remember something about you as a customer of Kurabu. Cookies are small text modules with information that is stored on your end device. Cookies allow website operators like us to provide you with the best possible user experience on our website. Without cookies, the use of our website may be restricted, because without cookies it would lose its data memory. However, by deleting your cookies you can also ensure that you cannot be traced. So you can decide for yourself how we may handle your data. All cookies listed below will only be processed if you give us your consent by Art. 6 Para. 1 lit. a DSGVO. You give us your consent via the cookie banner on our website, which is displayed the first time you visit or after deleting your cookies. To withdraw your consent, please read Section III. II. The cookies used by Kurabu
1. Necessary data for the operation of the website
Our website is static, i.e. we do not process any personal data of yours, such as IP address or browser data, which are necessary for the operation of dynamic websites.
2. Google Analytics
. 5. HubSpot
and more information about the pixel itself at https://www.facebook.com/business/help/742478679120153?id=1205376682832142
.III. Cancellation of your consent
You give us your consent via the cookie banner on our website, which is displayed the first time you visit or after deleting your cookies. You can withdraw your consent by deleting your cookies in your browser. By Art. 7 para. 3 sentence 2 DSGVO, the revocation does not apply to consents granted before revocation, but only to future data processing.