Data protection
Data protection information for the website www.sponsorights.de
We are pleased that you are visiting our website. The protection of your privacy and the protection of your personal data when using our website is important to us. Here you will find information about how we handle your personal data when you visit our website. In order to provide the functions and services of our website, it is necessary for us to process personal data.
1. Responsible body
The responsible body for data processing on this website is:
Sponsor Rights GmbH,
Else-Lasker-Schüler-Strasse 8,
64625 Bensheim, Germany
Telephone 0049 179-117 5550,
E-mail: buchhaltung@sponsoRights.de
2. Data Protection Officer
If you have any questions about data protection, you can also contact our data protection officer at any time at the following e-mail address: Daniel.Kluge @INTARGIA.COM.
3. Definitions
The data protection declaration of SponsoRights GmbH is based on the terms used by the European legislator for the adoption of the General Data Protection Regulation (GDPR). Our data protection declaration should be legible and understandable for the general public as well as for our customers and business partners. To ensure this, we would like to explain the terms used in advance. We use the following terms, among others, in this data protection declaration:
a) Personal Data
Personal data is any information relating to an identified or identifiable natural person (hereinafter "data subject"). A natural person is considered to be identifiable if, directly or indirectly, in particular by means of assignment to an identifier such as a name, an identification number, location data, an online identifier or to one or more special features, the expression of the physical, physiological, genetic, psychological, economic, cultural or social identity of this natural person can be identified.
b) Data Subject
Data subject is any identified or identifiable natural person whose personal data is processed by the data controller.
c) Processing
Processing is any process carried out with or without the help of automated procedures or any such series of processes in connection with personal data such as collecting, recording, organizing, arranging, storing, adapting or changing, reading out, querying, using, disclosure by transmission, distribution or any other form of making available, matching or linking, restriction, deletion or destruction.
d) Restriction of Processing
Restriction of Processing is the marking of stored personal data with the aim of restricting their future processing.
e) Profiling
Profiling is any type of automated processing of personal data, which consists in using this personal data to evaluate certain personal aspects relating to a natural person, in particular aspects relating to work performance, economic situation, health, personal Analyze or predict that natural person’s preferences, interests, reliability, behavior, whereabouts or relocation.
f) Pseudonymization
Pseudonymization is the processing of personal data in such a way that the personal data can no longer be assigned to a specific data subject without the use of additional information, provided that this additional information is kept separately and is subject to technical and organizational measures that ensure that the personal data not assigned to an identified or identifiable natural person.
g) Controller or Data Dontroller
The person responsible or responsible for processing is the natural or legal person, authority, institution or other body that alone or jointly with others decides on the purposes and means of processing personal data. If the purposes and means of this processing are specified by Union law or the law of the Member States, the person responsible or the specific criteria for his naming can be provided for by Union law or the law of the Member States.
h) Processors
Processor is a natural or legal person, public authority, institution or other body that processes personal data on behalf of the person responsible.
i) Recipient
Recipient is a natural or legal person, authority, institution or other. Any entity to which personal information is disclosed, whether a third party or not. However, authorities that may receive personal data in the context of a specific investigation mandate under Union or Member State law are not considered recipients.
j) Third party
Third party is a natural or legal person, public authority, agency or body other than the data subject, the controller, the processor and the persons who, under the direct responsibility of the controller or the processor, are authorized to process the personal data.
k) Consent
Consent is any expression of will voluntarily given by the data subject in an informed manner and unequivocally for the specific case in the form of a declaration or other clear confirmatory action with which the data subject indicates that they consent to the processing of their personal data is.
4. Processing purposes and legal bases for processing your personal data on the website
We collect, process and use your personal data for the following purposes: Calling up the website When you visit our website and each associated retrieval of data from a server, the browser used on your device sends general information to our website server. This data transfer is automatic and is a fundamental part of communication between devices on the Internet. The data transmitted by default includes the following information: your IP address, product and version information about the browser used and the operating system (so-called user agent), the website from which you accessed (so-called referrer), date and time of the request (so-called timestamp). In addition, the http status and the amount of data transferred are recorded as part of this request. This information is logged by the server, stored in a table and stored there for a short time (so-called server log files). By analyzing these log files, we can identify and then eliminate errors on the website, determine the utilization of the website at certain times and make adjustments or improvements based on this. We can also guarantee the security of the server by being able to understand the IP address from which attacks on our server were carried out. We do not combine this data with other data sources. We also cannot identify you personally from this information. Your IP address will only be stored for the time you are using the website and will then be deleted immediately or partially made unrecognizable by shortening it. The remaining data is stored for a limited period of time (max. 7 days). The legal basis for the use of the server log files is Article 6 Paragraph 1 Clause 1 Letter f) GDPR (legitimate interest in data processing). The legitimate interest arises from the need for the operation and maintenance of our website, as we have explained above. A processing of your data in server log files is mandatory within the meaning of Art. 21 Para. 1 Sentence 2 DS-GVO, since otherwise our website cannot be operated at all and because we are obliged according to Art. 32 DS-GVO To ensure the confidentiality, availability and integrity of our systems. In addition to the aforementioned data, cookies are stored on your computer when you use our website. Cookies are small text files that are stored on your hard drive, assigned to the browser you are using and through which certain information flows to the place that sets the cookie (here from us). Cookies cannot run programs or transmit viruses to your computer. They serve to make the Internet offer more user-friendly and effective overall. This website uses the following types of cookies, the scope and functionality of which are explained below:
–Transient Cookies (see b)
– Persistent Cookies (see c).
Transient Cookies are automatically deleted when you close your browser. These include in particular the session cookies. These store a so-called session ID, with which various requests from your browser can be assigned to the joint session. This allows your computer to be recognized when you return to our website. The session cookies are deleted when you log out or close the browser. Persistent cookies are automatically deleted after a specified period, which can vary depending on the cookie. You can disable cookies in the security settings of your browser
delete at any time. You can configure your browser settings according to your wishes and e.g. B. refuse to accept third-party cookies or all cookies. We would like to point out that you may not be able to use all the functions of this website. contact form Data transmitted via the contact form will be stored, including your contact details, in order to be able to process your request or to be available for follow-up questions. This data will not be passed on without your consent. The data entered in the contact form is processed exclusively on the basis of your consent (Article 6 (1) (a) GDPR). You can revoke your consent that you have already given at any time. An informal message by e-mail is sufficient for the revocation. The legality of the data processing operations carried out up to the revocation remains unaffected by the revocation. Data transmitted via the contact form will remain with us until you ask us to delete it, revoke your consent to storage or there is no longer any need for data storage. Mandatory legal provisions - in particular retention periods - remain unaffected.
Newsletter
For the time beeing we do not publish Newsletters
​
5. Purposes of processing and legal bases for processing your personal data in the Sponsoring Management System
​
Google Analytics
The person responsible for processing has integrated the Google Analytics component (with anonymization function) on this website. Google Analytics is a web analysis service. Web analysis is the collection, collection and evaluation of data on the behavior of visitors to websites. A web analysis service collects, among other things, data about the website from which a person concerned came to a website (so-called referrer), which subpages of the website were accessed or how often and for how long a subpage was viewed. A web analysis is mainly used to optimize a website and for the cost-benefit analysis of internet advertising. The operating company of the Google Analytics component is Google Ireland Limited, Gordon House, Barrow Street, Dublin, D04 E5W5, Ireland. The person responsible for processing uses the addition "_gat._anonymizeIp" for the web analysis via Google Analytics. With this addition, the IP address of the Internet connection of the person concerned is shortened and anonymized by Google if our website is accessed from a member state of the European Union or from another state party to the Agreement on the European Economic Area. The purpose of the Google Analytics component is to analyze visitor flows on our website. Google uses the data obtained andInformation, among other things, to evaluate the use of our website, to compile online reports for us that show the activities on our website, and to provide other services related to the use of our website. Google Analytics places a cookie on the information technology system of the data subject. What cookies are has already been explained above. By setting the cookie, Google is able to analyze the use of our website. Each time one of the individual pages of this website is called up, which is operated by the person responsible for processing and on which a Google Analytics component has been integrated, the Internet browser on the information technology system of the person concerned is automatically activated by the respective Google Analytics component to transmit data to Google for online analysis. As part of this technical process, Google gains knowledge of personal data, such as the IP address of the person concerned, which Google uses, among other things, to trace the origin of visitors and clicks and subsequently to enable commission statements. The cookie is used to store personal information, such as access time, the location from which access was made and the frequency of visits to our website by the person concerned. Each time you visit our website, this personal data, including the IP address of the Internet connection used by the person concerned, is transmitted to Google in the United States of America. This personal data is stored by Google in the United States of America. Google may pass on this personal data collected via the technical process to third parties. The person concerned can prevent the setting of cookies by our website, as already described above, at any time by means of a corresponding setting in the Internet browser used and thus permanently object to the setting of cookies. Such a setting of the Internet browser used would also prevent Google from setting a cookie on the information technology system of the person concerned. In addition, a cookie already set by Google Analytics can be deleted at any time via the Internet browser or other software programs. Furthermore, the data subject has the option of objecting to and preventing the collection of data generated by Google Analytics relating to the use of this website and the processing of this data by Google. To do this, the data subject must download and install a browser add-on from the link https://tools.google.com/dlpage/gaoptout. This browser add-on tells Google Analytics via JavaScript that no data and information about visits to websites may be transmitted to Google Analytics. The installation of the browser add-on is evaluated by Google as a contradiction. If the information technology system of the data subject is later deleted, formatted or reinstalled, the data subject must reinstall the browser add-on in order to deactivate Google Analytics. If the browser add-on is uninstalled or deactivated by the person concerned or another person who is attributable to their sphere of influence, there is the possibility of reinstalling or reactivating the browser add-on. Further information and Google's applicable data protection regulations can be found at https://www.google.de/intl/de/policies/privacy/ and at http://www.google.com/analytics/terms/de.html. Google Analytics is explained in more detail under this link https://www.google.com/intl/de_de/analytics/.
SalesViewer®
This website uses SalesViewer® technology from SalesViewer® GmbH on the basis of the website operator’s legitimate interests (Section 6 paragraph 1 lit.f GDPR) in order to collect and save data on marketing, market research and optimisation purposes.
In order to do this, a javascript based code, which serves to capture company-related data and according website usage. The data captured using this technology are encrypted in a non-retrievable one-way function (so-called hashing). The data is immediately pseudonymised and is not used to identify website visitors personally
The data stored by Salesviewer will be deleted as soon as they are no longer required for their intended purpose and there are no legal obligations to retain them.
The data recording and storage can be repealed at any time with immediate effect for the future, by clicking on https://www.salesviewer.com/opt-out in order to prevent SalesViewer® from recording your data. In this case, an opt-out cookie for this website is saved on your device. If you delete the cookies in the browser, you will need to click on this link again.
​
Google Firebase
We provide you with the Sponsorship Management System and the media files it contains using third-party services. To do this, we use the Google Firebase Hosting service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). When you use the system, this service can record and, if necessary, save the IP address of your end device. However, we do not receive the IP addresses directly and only exceptionally inspect the IP addresses recorded by these services and only if there is a legal basis, in particular to the extent that this is necessary to protect legitimate interests (e.g. for maintenance work or in the case of the investigation of technical problems). We use this service and the aforementioned data to provide the system efficiently and with as little susceptibility to errors as possible, thus ensuring smooth use of the system functions. Legal basis of the dam The related data processing is Art. 6 Paragraph 1 S. 1 lit. f) GDPR, whereby our legitimate interest is an optimal, technically flawless provision of the system. Further information and Google's applicable data protection guidelines can be found at http://google.de/intl/de/policies/privacy. Further information on data processing within the framework of Google Firebase hosting (https://firebase.google.com/terms/data-processing-terms) and on the agreements concluded with Google can be found under the relevant link. We would like to point out that Google reserves the right to process the data at other locations, e.g. in the USA. The transmission of data to servers used by Google LLC in the USA may pose additional risks, for example enforcing your rights to this data may be more difficult. In order to counter these risks, we have agreed the standard data protection clauses of the EU Commission with Google LLC for this data transmission and have also defined appropriate protective measures therein, which, depending on the need for protection of the data, also include their encryption and in accordance with the legal and technical conditions for appropriate protection of the data can be improved. If data is transmitted to Google LLC in the USA, this is based on Article 46 (2) (c) GDPR.
Google Maps
This site uses the map service Google Maps. The provider is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland. In order to use the functions of Google Maps, it is necessary to save your IP address. This information is usually transmitted to a Google server in the USA and stored there. The provider of this site has no influence on this data transfer. If Google Maps is activated, Google can use Google Fonts for the purpose of uniform display of fonts. When you call up Google Maps, your browser loads the required web fonts into your browser cache in order to display text and fonts correctly. Google Maps is used in the interest of an attractive presentation of our online offers and to make it easier to find the places we have indicated on the website. This represents a legitimate interest within the meaning of Article 6 Paragraph 1 Letter f GDPR. If a corresponding consent has been requested, the processing takes place exclusively on the basis of Article 6 Paragraph 1 Letter a GDPR and Article 25 Paragraph 1 TTDSG, insofar as the consent includes the storage of cookies or access to information in the user's device (e.g. device fingerprinting) within the meaning of the TTDSG. The consent can be revoked at any time. Data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://privacy.google.com/businesses/gdprcontrollerterms/ and https://privacy.google.com/businesses/gdprcontrollerterms/sccs/. You can find more information on handling user data in Google's data protection declaration: https://policies.google.com/privacy?hl=de:
​
MongoDB Atlas
We provide the Sponsoring Management System and the associated database to you using third-party services. We use the MongoDB Atlas service offered by Mongo DB Inc., 1633 Broadway, 38th Floor, New York, NY 10019, USA. The legal basis for the associated data processing is Article 6 Paragraph 1 Sentence 1 Letter f) GDPR, whereby our legitimate interest is an optimal, technically flawless provision of the system. For more information and MongoDB Atlas' applicable privacy policy, visit https://www.mongodb.com/legal/dpa. We would like to point out that MongoDB reserves the right to process the data at other locations, e.g. in the USA. The transmission of data to servers used by MongoDB in the USA may pose additional risks, for example enforcing your rights to this data may be more difficult. In order to counter these risks, we have agreed the standard data protection clauses of the EU Commission with MongoDB Inc. for this data transmission and have also defined appropriate protective measures therein, which, depending on the need for protection of the data, also include their encryption and in accordance with the legal and technical conditions for an appropriate Protection of data can be improved. If data is transmitted to MongoDB Inc. in the USA, this is based on Article 46 (2) (c) GDPR.
WIX
The provider is Wix.com Ltd., 40 Namal Tel Aviv St., Tel Aviv 6350671, Israel (hereinafter "WIX"). WIX a tool for creating and hosting websites. When you visit our website, WIX analyzes user behavior, visitor sources, website visitor regions and visitor numbers. WIX stores cookies on your browser that are required for the presentation of the website and to ensure security (necessary cookies). The data collected via WIX may be stored on various servers around the world. The WIX servers are available i.a. in the USA. Details can be found in the WIX data protection declaration: https://de.wix.com/about/privacy. According to WIX, data transfer to the USA and other third countries is based on the standard contractual clauses of the EU Commission or comparable guarantees under Art. 46 GDPR. Details can be found here: https://de.wix.com/about/privacy-dpa-users. WIX is used on the basis of Article 6 (1) (f) GDPR. We have a legitimate interest in our website being displayed as reliably as possible. If a corresponding consent was requested, the processing takes place exclusively on the basis of Art. 6 Para. 1 lit. a DSGVO and § 25 Para B. device fingerprinting) within the meaning of the TTDSG. The consent can be revoked at any time. order processing We have concluded an order processing contract (AVV) with the above-mentioned provider. This is a contract required by data protection law, which ensures that the personal data of our website visitors is only processed according to our instructions and in compliance with the GDPR.
6. Revocation of your consent to data processing
Some data processing operations are only possible with your express consent. You can revoke your consent that you have already given at any time. An informal message by e-mail is sufficient for the revocation. The legality of the data processing that took place up until the revocation remains unaffected by the revocation.
7. Right to lodge a complaint with the competent supervisory authority
As a data subject, you have the right to lodge a complaint with the competent supervisory authority in the event of a breach of data protection law. The competent supervisory authority with regard to data protection issues is the state data protection officer of the federal state in which our company is based. The following link provides a list of data protection officers and their contact details: The Hessian Commissioner for Data Protection and Freedom of Information PO Box 3163 65021 Wiesbaden
8. Rights of the data subject
a) Right to Confirmation
Every data subject has the right, granted by the European directive and regulation giver, to request confirmation from the person responsible for processing as to whether personal data relating to them are being processed. If a data subject wishes to exercise this right to confirmation, they can contact an employee of the data controller at any time.
b) Right to information
Every person affected by the processing of personal data has the right, granted by the European directive and regulation giver, to receive free information about the personal data stored about him and a copy of this information from the person responsible for processing at any time. Furthermore, the European legislator for directives and regulations has granted the data subject access to the following information:
• the processing purposes
• the categories of personal data being processed
• the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organizations
• if possible, the planned duration for which the personal data will be stored or, if this is not possible, the criteria used to determine that duration
• the existence of a right to correction or deletion of the personal data concerning you or to restriction of processing by the person responsible or a right to object to this processing
• the existence of a right of appeal to a supervisory authority
• if the personal data are not collected from the data subject: all available information about the origin of the data • the existence of automated decision-making including profiling in accordance with Article 22 (1) and (4) GDPR and - at least in these cases - meaningful information about the logic involved and the scope and intended effects of such processing for the data subject
Furthermore, the data subject has a right to information as to whether personal data has been transmitted to a third country or to an international organization. If this is the case, the person concerned has the right to information about the appropriate guarantees in connection with met receive the transmission. If a data subject wishes to exercise this right to information, they can contact an employee of the data controller at any time.
c) Right to rectification
Every person affected by the processing of personal data has the right granted by the European directive and regulation giver to demand the immediate correction of incorrect personal data concerning them. Furthermore, the data subject has the right, taking into account the purposes of the processing, to request the completion of incomplete personal data - also by means of a supplementary declaration. If a data subject wishes to exercise this right to rectification, they can contact an employee of the data controller at any time.
d) Right to erasure (right to be forgotten)
Every person affected by the processing of personal data has the right granted by the European directive and regulation giver to demand that the person responsible delete the personal data concerning them immediately if one of the following reasons applies and if the processing is not necessary:
• The personal data were collected for purposes or otherwise processed for which they are no longer necessary.
• The data subject revokes their consent on which the processing was based pursuant to Art. 6 Para. 1 Letter a DS-GVO or Art. 9 Para. 2 Letter a DS-GVO and there is no other legal basis for the processing.
• The data subject objects to the processing in accordance with Art. 21 (1) GDPR and there are no overriding legitimate reasons for the processing, or the data subject objects in accordance with Art. 21 (2) GDPR the processing.
• The personal data have been processed unlawfully.
• The personal data must be erased for compliance with a legal obligation in Union or Member State law to which the controller is subject.
• The personal data was collected in relation to information society services offered in accordance with Art. 8 Para. 1 DS-GVO.
If one of the above reasons applies and a data subject wishes to have personal data stored at SponsoRights GmbH deleted, they can contact an employee of the data controller at any time. The employee will ensure that the request for deletion is complied with immediately. If the personal data was made public by SponsoRights GmbH and our company, as the person responsible, is obliged to delete the personal data in accordance with Art. 17 Para. 1 DS-GVO, SponsoRights GmbH shall take appropriate measures, including technical ones, taking into account the available technology and the implementation costs to notify other data controllers processing the published personal data that the data subject has requested those other data controllers to delete any links to, or copies or replications of, that personal data , insofar as the processing is not necessary. The employee of SponsoRights GmbH will take the necessary steps in individual cases.
e) Right to restriction of processing
Any person affected by the processing of personal data has the right, granted by the European directive and regulation giver, to demand that the person responsible restrict the processing if one of the following conditions is met:
• The accuracy of the personal data is contested by the data subject, for a period enabling the controller to verify the accuracy of the personal data.
• The processing is unlawful, the data subject refuses to have the personal data deleted and instead requests that the use of the personal data be restricted.
• The person responsible no longer needs the personal data for the purposes of processing, but the data subject needs them to assert, exercise or defend legal claims.
• The data subject has lodged an objection to the processing pursuant to Article 21(1) of the GDPR pending the verification whether the legitimate grounds of the controller override those of the data subject.
If one of the above conditions is met and a data subject wishes to request the restriction of personal data stored at SponsoRights GmbH, they can contact an employee at any time contact the person responsible for processing.
f) Right to data portability
Every person affected by the processing of personal data has the right, granted by the European directive and regulation giver, to receive the personal data relating to them, which the person concerned has provided to a person responsible, in a structured, common and machine-readable format. You also have the right to transmit this data to another person responsible without hindrance from the person responsible to whom the personal data was provided, provided that the processing is based on the consent in accordance with Art. 6 Para. 1 Letter a DS-GVO or Art. 9 Para 2 letter a DS-GVO or on a contract according to article 6 paragraph 1 letter b DS-GVO and the processing is carried out using automated procedures, provided that the processing is not necessary for the performance of a task that is in the public interest or takes place in the exercise of official authority, which has been transferred to the person responsible. Furthermore, when exercising their right to data portability in accordance with Art. 20 Para the rights and freedoms of other persons are not impaired by this.
g) Right to object
Every person affected by the processing of personal data has the right granted by the European directive and regulation giver, for reasons arising from their particular situation, at any time against the processing of personal data concerning them, which is based on Art. 6 para. 1 letter e or f DS-GVO to file an objection. This also applies to profiling based on these provisions. SponsoRights GmbH will no longer process the personal data in the event of an objection, unless we can demonstrate compelling legitimate grounds for the processing which outweigh the interests, rights and freedoms of the data subject, or the processing serves to assert, exercise or defend legal claims. If SponsoRights GmbH processes personal data in order to operate direct advertising, the person concerned has the right to object at any time to the processing of personal data for the purpose of such advertising. In addition, the data subject has the right, for reasons arising from their particular situation, against the processing of personal data relating to them at SponsoRights GmbH for scientific or historical research purposes or for statistical purposes in accordance with Art. 89 Para. 1 DS-GVO to object, unless such processing is necessary to fulfill a task in the public interest. In order to exercise the right to object, the data subject can contact any employee of SponsoRights GmbH or another employee directly. The data subject is also free, in connection with the use of information society services, notwithstanding Directive 2002/58/EC, to exercise their right to object by automated means using technical specifications.
h) Right to data portability
You have the right to have data that we process automatically on the basis of your consent or in fulfillment of a contract handed over to you or to third parties. It is provided in a machine-readable format. If you request the direct transfer of the data to another person responsible, this will only be done to the extent that it is technically feasible.
Profiling
As a responsible company, we do not use automatic decision-making or profiling.