Welcome to our website and thank you for your interest in our company. We - that is ALPINA SPORTS GmbH and its affiliated companies (hereinafter collectively referred to as "uvex group") - take the protection of your personal data very seriously. We process your data in accordance with the applicable legal provisions on the protection of personal data, in particular the EU General Data Protection Regulation (EU GDPR) and the country-specific implementing laws applicable to us. With the help of this data protection declaration, we will inform you comprehensively about the processing of your personal data by the uvex group and the rights to which you are entitled.
Personal data is information that makes it possible to identify a natural person. This includes in particular name, date of birth, address, telephone number, e-mail address but also your IP address.
Anonymous data exists when no personal reference to the user can be established.
1. responsible body
2. contact data protection
The contact details of the data protection officer for all uvex group companies based in Germany are:
3. rights as a data subject
First of all, we would like to inform you about your rights as a data subject. These rights are standardised in Art. 15 - 22 EU-DS-GVO. This includes:
- The right to information (Art. 15 EU-DS-GVO),
- The right to erasure (Art. 17 EU-DS-GVO),
- The right to rectification (Art. 16 EU GDPR),
- The right to data portability (Art. 20 EU GDPR),
- The right to restriction of data processing (Art. 18 EU-DS-GVO),
- The right to object to data processing (Art. 21 EU-DS-GVO).
To exercise these rights, please contact: email@example.com .
The same applies if you have questions about data processing in our company or would like to revoke a granted consent. You also have the right to lodge a complaint with a data protection supervisory authority.
4. rights of objection
Please note the following in connection with rights of objection: If we process your personal data for the purpose of direct marketing, you have the right to object to this data processing at any time without giving reasons.
This also applies to profiling insofar as it is related to direct advertising. If you object to processing for direct marketing purposes, we will no longer process your personal data for these purposes. The objection is free of charge and can be made form-free, if possible to: firstname.lastname@example.org .
In the event that we process your data to protect legitimate interests, you may object to this processing at any time on grounds relating to your particular situation; this also applies to profiling based on these provisions.
We will then no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing is for the assertion, exercise or defence of legal claims.
5. purposes and legal bases of the data processing
When processing your personal data, we comply with the provisions of the EU Data Protection Regulation and all other applicable data protection regulations. Legal bases for data processing result in particular from Art. 6 EU-DSGVO. We use your data to initiate business, to fulfil contractual and legal obligations, to implement the contractual relationship, to offer products and services and to strengthen the customer relationship, which may also include analyses for marketing purposes and direct advertising. Your consent to data processing may also constitute a permission requirement under data protection law. Before giving your consent, we will inform you about the purpose of the data processing and about your right of revocation. If the consent also refers to the processing of special categories of personal data, we will expressly point this out to you in the consent. Special categories of personal data pursuant to Art. 9 EU-DS-GVO will only be processed if this is necessary due to legal provisions and there is no reason to assume that your legitimate interest in the exclusion of the processing outweighs this. In certain cases, we also base the processing of your data on a legitimate interest pursuant to Art. 6 para. 1 lit. f EU-DS-GVO. In this case, data is only processed if this serves to protect our own legitimate interests or the legitimate interests of third parties and a weighing of interests has not shown that your interests, fundamental rights and freedoms are overridden.
6. disclosure to third parties
We will only pass on your data to third parties within the framework of the legal provisions or with the corresponding consent. Otherwise, we will not disclose your data to third parties unless we are obliged to do so by mandatory legal provisions (e.g. disclosure to external bodies such as supervisory authorities or law enforcement agencies).
7. recipients of the data / categories of recipients
Within the UVEX Group, we ensure that only those persons receive your data who need it to fulfil contractual and legal obligations. Within the UVEX Group, this concerns the following companies:
- UVEX WINTER HOLDING GmbH & Co KG
- UVEX SPORTS GmbH & Co. KG
- UVEX ARBEITSSCHUTZ GmbH
- FILTRAL GmbH & Co. Vertriebs KG
The transfer may be necessary, e.g. if you apply for a job advertised by an affiliated company via our central applicant portal. For the purpose of analysing our internal processes and technical support, data is passed on to UVEX WINTER HOLDING GmbH & Co.KG. Furthermore, marketing analysis data is passed on to the above-mentioned companies. It cannot be ruled out that personal data will also be transferred in this process. In certain cases, other service providers support our specialist departments in the fulfilment of their tasks. The necessary data protection contracts have been concluded with all service providers.
8. transfer to third countries / intention to transfer to third countries
Data is only transferred to third countries (outside the European Union or the European Economic Area) if this is necessary for the performance of the contractual relationship or is required by law or if you have given us your consent to do so. We transfer your personal data to service providers and group companies outside the European Economic Area, including to the USA. You can find a list of the tools / service providers together with details of the processing location under point 14.1 "Tools used". The contract required by data protection law has been concluded with all service providers.
9. Duration of data storage
We store your data for as long as it is needed for the respective processing purpose. Please note that numerous retention periods require that data continue to be stored. This applies in particular to retention obligations under commercial or tax law (e.g. German Commercial Code, German Fiscal Code, etc.). If there are no further storage obligations, the data is routinely deleted once the purpose has been achieved. In addition, we may retain data if you have given us permission to do so or if legal disputes arise and we use evidence within the framework of statutory limitation periods, which can be up to thirty years; the regular limitation period is three years.
10. secure transfer of your data
In order to protect the data stored with us in the best possible way against accidental or intentional manipulation, loss, destruction or access by unauthorised persons, we use appropriate technical and organisational security measures. The security levels are continuously reviewed in cooperation with security experts and adapted to new security standards. The exchange of data to and from our website is always encrypted. We offer HTTPS as the transmission protocol for our website, in each case using the current encryption protocols. There is also the option of using alternative communication channels (e.g. by post).
11. obligation to provide the data
Various personal data are necessary for the establishment, implementation and termination of the contractual relationship and the fulfilment of the associated contractual and legal obligations. The same applies to the use of our website and the various functions it provides. In certain cases, data must also be collected or made available due to legal requirements. Please note that it is not possible to process your enquiry or carry out the underlying contractual relationship without providing this data.
12. categories, sources and origin of the data
Which data we process is determined by the respective context: this depends on whether, for example, you place an order online or enter an enquiry in our contact form, whether you send us an application or submit a complaint. Please note that we may also provide information for special processing situations separately in a suitable place, e.g. when you upload application documents or submit a contact enquiry.
12.1 When you visit our website, we collect and process the following data:
- Name of the Internet service provider
- Information about the website from which you are visiting us (so-called "referrer")
- Web browser and operating system used
- The IP address assigned by your Internet Service Provider.
- Files requested, amount of data transferred, downloads/file export
- Information about the web pages you visit on our site including date and time
This data processing is technically necessary so that the content of our website can be delivered to your end device. Your IP address must therefore also be collected and stored for the duration of the respective session. The same applies to the other data whose processing is necessary for the correct display of our website. The storage of data in the so-called log files also serves to further optimise the site, to ensure its functionality, to guarantee the security of our applications and for legal protection (e.g. detection and defence against attacks on our website). The legal basis for this data processing and temporary data storage is our legitimate interest as website operator (Art. 6 para. 1 lit. f EU-DS-GVO). The storage period of the data is limited and deletion takes place as soon as the data no longer need to be kept for the processing purposes. In the case of collection for the correct display of our website, this is the case after the session has ended. When data is stored in log files, it is deleted or made anonymous after 7 days.
12.2 In the context of a contact request, we collect and process the following data:
There is a contact form on our website that can be used to contact us electronically. If you write to us via the contact form, we will process the data you provide in the contact form in order to contact you and answer your questions and requests.
We collect the following data via the contact form:
- E-mail address
- Telephone number (for a possible callback in case of a telephone enquiry)
- Content of the request
The principle of data economy and data avoidance is observed in that you only have to provide the data that we absolutely need to contact you (mandatory data). These are your name, your e-mail address and your request itself. These mandatory details are marked with an asterisk (*).
In addition, your IP address is processed due to technical necessity and for legal protection. All other data are voluntary fields and can be entered optionally (e.g. to answer your questions more individually).
To protect the security and confidentiality of your data as best as possible, we implement appropriate security measures. Your request is transmitted to us in encrypted form.
If you contact us by e-mail, we will process the personal data provided in the e-mail solely for the purpose of processing your enquiry. If you do not use the forms offered for contacting us, no further data collection will take place.
12.3 We process the following data as part of the registration process:
On our website, we offer users the opportunity to register by providing personal data. In doing so, we collect the following data:
- First name
- E-mail address
Registration is therefore necessary either for the fulfilment of a contract (via our online shop) with you or for the implementation of pre-contractual measures.
The principle of data economy and data avoidance is observed, as only the data required for registration is marked with an asterisk (*). These are your name, e-mail address and password, including password repetition.
For the order in our online shop, we also require information on the billing address (title, first name, last name, address) for delivery. If the delivery address differs from the invoice address, the above information for the delivery address must also be provided.
By registering on our website, the user's IP address, the date and time of registration are also stored (technical background data). By clicking the "Register now" button, you consent to the processing of your data.
Please note: The password you enter is stored in encrypted form. Employees of our company cannot read this password. They can therefore not give you any information if you have forgotten your password.
In this case, please use the "Forgotten password" function, which will send you an automatically generated new password by e-mail. No member of staff is authorised to request your password from you by telephone or in writing. Therefore, please never give your password if you receive such requests.
Upon completion of the registration process, your data is stored with us for use of the protected customer area. As soon as you log on to our website with your e-mail address as your user name and password, this data is made available for actions you carry out on our website (e.g. for orders in our online shop). Completed orders can be traced in the order history. You can enter changes to the billing or delivery address here.
Registered persons are free to make changes / corrections to the billing or delivery address in the order history on their own. Our customer service will also be happy to make changes / corrections if you contact them. Of course, you can also cancel or delete the registration or your customer account.
12.4 For newsletters, we collect and process the following data:
You can subscribe to a free newsletter on our website. The following data is collected as part of the newsletter registration:
- Name, first name
- E-mail address
- The IP address assigned by your Internet Service Provider.
- Analysis data of the embedded pixel-code (time of opening the newsletter, links called up)
The principle of data economy and data avoidance is observed here, as only the e-mail address is marked as a mandatory field. Providing your name is voluntary; if you do provide it, it will be used for sending the personalised newsletter.
For technical necessity and for legal protection, your IP address is also processed when you order the newsletter.
We use the so-called double opt-in procedure for sending newsletters by e-mail. This means that you will only receive advertising by e-mail if you have previously expressly confirmed that you want us to activate the newsletter service. This is done by sending you a notification e-mail and asking you to confirm that you would like to receive our newsletter at this e-mail address by clicking on a link contained in this e-mail.
You can of course unsubscribe at any time using the unsubscribe option provided in the newsletter and thus revoke your consent.
13. automated individual case decisions
We do not use purely automated processing to reach a decision.
14. technologies for the evaluation of your usage behaviour on our website (Art. 6 para. 1 lit. a EU-DS-GVO)
Our website uses technologies in several places to evaluate your usage behaviour and to optimise the website. Cookies, third-party calls and local storage are used for this purpose. Cookies are small text files that are stored on your computer and saved by your browser (locally on your hard drive).
We only use these technologies with your consent (Art. 6 para. 1 lit. a EU-DS-GVO). This enables us to analyse how users use our websites. This enables us to design the website content according to visitor needs. In addition, the cookies enable us to measure the effectiveness of a particular advertisement and to place it, for example, depending on the thematic interests of the user.
If you have given your consent here, you can revoke it at any time for the future by calling up the Consent banner again HERE and making the corresponding setting there.
We use the Google Tag Manager to control the various cookies and tools integrated into this website.
We use the tools and services described in section 14.1 on our website. The legal basis for their use is your consent, which you declare via the consent banner displayed when you first visit our website. Details on the tools and services used can be found in the following paragraphs.
You can, of course, revoke your consent at any time by either deleting the stored opt-in cookie in your Internet browser manually or using appropriate software and then reloading our website or by clicking on the following link.
14.1 Tools used
15. links to other providers
Our website also contains - clearly recognisable - links to the websites of other companies. Insofar as there are links to websites of other providers, we have no influence on their content. Therefore, no guarantee or liability can be assumed for these contents. The respective provider or operator of the pages is always responsible for the content of these pages.
The linked pages were checked for possible legal violations and recognisable infringements at the time of linking. Illegal contents were not recognisable at the time of linking. However, permanent monitoring of the content of the linked pages is not reasonable without concrete indications of a legal violation. Such links will be removed immediately if infringements become known.
16. links to social media
On our website you will find links to the social media services of Meta / Facebook, Instagram, TikTok, YouTube, Vimeo, komoot and LinkedIn. You can recognise links to the websites of the social media services by the respective company logo. If you follow these links, you will reach UVEX's corporate presence on the respective social media service. When you click on a link to a social media service, a connection is established to the servers of the social media service. This transmits to the servers of the social media service that you have visited our website. In addition, further data is transmitted to the provider of the social media service. These are, for example:
- Address of the website on which the activated link is located
- Date and time the website was accessed or the link was activated
- Information about the browser and operating system used
- IP address
If you are already logged in to the corresponding social media service at the time of activating the link, the provider of the social media service may be able to determine your user name and possibly even your real name from the transmitted data and assign this information to your personal user account with the social media service. You can exclude this possibility of assignment to your personal user account if you log out of your user account beforehand. The servers of the social media services are located in the USA and other countries outside the European Union. The data may therefore also be processed by the provider of the social media service in countries outside the European Union. Please note that companies in these countries are subject to data protection laws that do not generally protect personal data to the same extent as they do in the Member States of the European Union.
17. online services for children
Persons under the age of 16 are not permitted to submit any personal data to us or to give a declaration of consent without the consent of their legal guardians. We encourage parents and guardians to actively participate in their children's online activities and interests.