Data protection information SIGMA CLOUD
- Introduction
With the following information, we would like to give you as a “data subject” an overview of the processing of your personal data by us and your rights under data protection laws. It is generally possible to use our website without entering personal data. However, if you wish to make use of special services of our company via our website, it may be necessary to process personal data.
The processing of personal data, such as your name, address or e-mail address, is always carried out in accordance with the General Data Protection Regulation (GDPR) and in accordance with the country-specific data protection regulations applicable to “SIGMA-ELEKTRO GmbH”. By means of this data protection declaration, we would like to inform you about the scope and purpose of the personal data collected, used and processed by us.
- Person responsible
The controller within the meaning of the GDPR is
SIGMA-ELEKTRO GmbH
Dr.-Julius-Leber-Straße 15
67433 Neustadt
Representatives of the controller are: Sven Kageler, Klaus-Peter Schendel
- Data protection officer
You can contact our data protection officer as follows
E-mail: Datenschutz@sigmasport.com
You can contact our data protection officer directly at any time with any questions or suggestions regarding data protection.
- Legal basis of the processing
Art. 6 para. 1 lit. a) GDPR (in conjunction with § 25 para. 1 TTDSG) serves our company as the legal basis for processing operations for which we obtain consent for a specific processing purpose.
If the processing of personal data is necessary for the fulfilment of a contract to which you are a party, as is the case, for example, with processing operations that are necessary for the delivery of goods or the provision of another service or consideration, the processing is based on Art. 6 para. 1 lit. b) GDPR. The same applies to such processing operations that are necessary for the performance of pre-contractual measures, for example in cases of enquiries about our products or services.
If our company is subject to a legal obligation which requires the processing of personal data, such as for the fulfilment of tax obligations, the processing is based on Art. 6 para. 1 lit. c) GDPR.
In rare cases, the processing of personal data may become necessary in order to protect the vital interests of the data subject or another natural person. This would be the case, for example, if a visitor were injured on our premises and their name, age, health insurance details or other vital information would have to be passed on to a doctor, hospital or other third party. The processing would then be based on Art. 6 para. 1 lit. d) GDPR.
Ultimately, processing operations could be based on Art. 6 para. 1 lit. f) GDPR. Processing operations that are not covered by any of the aforementioned legal bases are based on this legal basis if the processing is necessary to safeguard a legitimate interest of our company or a third party, provided that the interests, fundamental rights and freedoms of the data subject do not prevail. We are permitted to carry out such processing operations in particular because they have been specifically mentioned by the European legislator. In this respect, it took the view that a legitimate interest could be assumed if you are a customer of our company (Recital 47 Sentence 2 GDPR).
- Technology
5.1 SSL/TLS encryption
This site uses SSL or TLS encryption to ensure the security of data processing and to protect the transmission of confidential content, such as orders, login data or contact requests that you send to us as the operator. You can recognise an encrypted connection by the fact that the address line of the browser contains a “https://” instead of a “http://” and by the lock symbol in your browser line.
We use this technology to protect your transmitted data.
5.2 Hosting by Amazon Web Services – AWS
We host our website with Amazon Web Services (AWS). The provider is Amazon Web Services EMEA SARL, 38 Avenue John F. Kennedy, 1855 Luxembourg.
When you visit our website, your personal data is processed on the servers of AWS. Personal data may also be transmitted to the parent company of AWS in the USA.
The use of AWS is based on Art. 6 para. 1 lit. f) GDPR. We have a legitimate interest in displaying our website as reliably as possible.
We have concluded an order processing contract with AWS. This is a contract required by data protection law, which ensures that AWS processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.
This US company is certified under the EU-US Data Privacy Framework. This constitutes an adequacy decision pursuant to Art. 45 GDPR, meaning that personal data may be transferred without further guarantees or additional measures.
You can find more information on AWS’s data protection provisions at: https://aws.amazon.com/de/privacy/?nc1=f_pr
- Contents of our website
6.1 Registration as a user of the SIGMA CLOUD
You have the option of registering for the SIGMA CLOUD on our website by providing personal data.
When registering, personal data will be processed in accordance with Art. 6 para. 1 lit. b) GDPR
collected and processed for the fulfilment of the contract or customer account. This is the case if you provide it to us for the performance of a contract or when opening a customer account.
Which data is collected can be seen from the respective input forms. It is possible to delete your customer account at any time, for example by sending a message to the above address of the controller. We store and use the data provided by you to fulfil the contract. After complete processing of the contract or deletion of your customer account, your data will be blocked, taking into account tax and commercial law retention periods, and deleted after these periods have expired, unless you have expressly consented to further use of your data or we have reserved the right to further use of your data as permitted by law, about which we will inform you accordingly below.
- Plugins and other services
7.1 Google reCAPTCHA
We use the reCAPTCHA function on this website. The operating company of Google reCAPTCHA is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Ireland Limited is part of the Google group of companies headquartered at 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. The main purpose of the reCAPTCHA function is to differentiate whether an entry is made by a natural person or is misused by machine and automated processing. The service also includes sending the IP address and any other data required by Google for the reCAPTCHA service to Google.
These processing operations are only carried out with express consent in accordance with Art. 6 para. 1 lit. a) GDPR.
The parent company Google LLC is certified as a US company under the EU-US Data Privacy Framework. This constitutes an adequacy decision pursuant to Art. 45 GDPR, meaning that personal data may be transferred without further guarantees or additional measures.
Further information on Google reCAPTCHA and Google’s privacy policy can be found at: https://www.google.com/intl/de/policies/privacy/.
7.2 YouTube (videos)
We have integrated YouTube components on this website. The operating company of YouTube is YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, USA. YouTube, LLC is a subsidiary of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
YouTube is an Internet video portal that enables video publishers to post video clips free of charge and other users to view, rate and comment on them free of charge. YouTube allows the publication of all types of videos, which is why complete film and television programmes as well as music videos, trailers or videos made by users themselves can be accessed via the Internet portal. Each time you access one of the individual pages of this website, which is operated by us and on which a YouTube component (YouTube video) has been integrated, the Internet browser on your IT system is automatically prompted by the respective YouTube component to download a representation of the corresponding YouTube component from YouTube. The services Google WebFonts, Google Video and Google Photo can also be downloaded from YouTube. Further information about YouTube can be found at https://www.youtube.com/yt/about/de/. As part of this technical process, YouTube and Google receive information about which specific subpage of our website you are visiting.
If you are logged in to YouTube at the same time, YouTube recognises which specific sub-page of our website you are visiting when you access a sub-page containing a YouTube video. This information is collected by YouTube and Google and assigned to your YouTube account.
YouTube and Google always receive information via the YouTube component that you have visited our website if you are logged in to YouTube at the same time as accessing our website; this occurs regardless of whether you click on a YouTube video or not. If you do not want this information to be transmitted to YouTube and Google, you can prevent it from being transmitted by logging out of your YouTube account before accessing our website.
These processing operations are only carried out with your express consent in accordance with Art. 6 para. 1 lit. a) GDPR.
The parent company Google LLC is certified as a US company under the EU-US Data Privacy Framework. This constitutes an adequacy decision pursuant to Art. 45 GDPR, meaning that personal data may also be transferred without further guarantees or additional measures.
You can view YouTube’s privacy policy at https://www.google.de/intl/de/policies/privacy/.
- Your rights as a data subject
8.1 Right to confirmation
You have the right to request confirmation from us as to whether personal data concerning you is being processed.
8.2 Right to information Art. 15 GDPR
You have the right to receive information from us at any time free of charge about the personal data stored about you and a copy of this data in accordance with the statutory provisions.
8.3 Right to rectification Art. 16 GDPR
You have the right to request the rectification of inaccurate personal data concerning you. You also have the right to request the completion of incomplete personal data, taking into account the purposes of the processing.
8.4 Erasure Art. 17 GDPR
You have the right to obtain from us the erasure of personal data concerning you without undue delay where one of the grounds provided for by law applies and insofar as the processing or storage is not necessary.
8.5 Restriction of processing Art. 18 GDPR
You have the right to demand that we restrict processing if one of the legal requirements is met.
8.6 Data portability Art. 20 GDPR
You have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format. You also have the right to transmit this data to another controller without hindrance from us to whom the personal data has been provided, provided that the processing is based on consent pursuant to Art. 6 para. 1 lit. a) GDPR or Art. 9 para. 2 lit. a) GDPR or on a contract pursuant to Art. 6 para. 1 lit. b) GDPR and the processing is carried out by automated means, unless the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in us.
Furthermore, in exercising your right to data portability pursuant to Art. 20 (1) GDPR, you have the right to have the personal data transmitted directly from one controller to another, where technically feasible and provided that this does not adversely affect the rights and freedoms of others.
8.7 Objection Art. 21 GDPR
YOU HAVE THE RIGHT TO OBJECT, ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION, AT ANY TIME TO PROCESSING OF PERSONAL DATA CONCERNING YOU WHICH IS BASED ON ART. 6 ABS. 1 LIT. E) (DATA PROCESSING IN THE PUBLIC INTEREST) OR F (DATA PROCESSING ON THE BASIS OF A BALANCING OF INTERESTS) OF THE GDPR.
THIS ALSO APPLIES TO PROFILING BASED ON THESE PROVISIONS WITHIN THE MEANING OF ART. 4 NO. 4 GDPR.
IF YOU OBJECT, WE WILL NO LONGER PROCESS YOUR PERSONAL DATA UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING WHICH OVERRIDE YOUR INTERESTS, RIGHTS AND FREEDOMS OR IF THE PROCESSING SERVES THE ESTABLISHMENT, EXERCISE OR DEFENCE OF LEGAL CLAIMS.
IN INDIVIDUAL CASES, WE PROCESS PERSONAL DATA FOR THE PURPOSE OF DIRECT MARKETING. YOU CAN OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA FOR THE PURPOSE OF SUCH ADVERTISING AT ANY TIME. THIS ALSO APPLIES TO PROFILING INSOFAR AS IT IS ASSOCIATED WITH SUCH DIRECT ADVERTISING. IF YOU OBJECT TO PROCESSING FOR DIRECT MARKETING PURPOSES, WE WILL NO LONGER PROCESS YOUR PERSONAL DATA FOR THESE PURPOSES.
IN ADDITION, YOU HAVE THE RIGHT, FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION, TO OBTAIN PROCESSING OF PERSONAL DATA CONCERNING YOU WHICH WE PERFORM FOR SCIENTIFIC OR HISTORICAL RESEARCH PURPOSES OR FOR STATISTICAL PURPOSES IN ACCORDANCE WITH ARTICLE. 89 ABS. 1 GDPR, UNLESS SUCH PROCESSING IS NECESSARY TO PERFORM A TASK IN THE PUBLIC INTEREST.
YOU ARE FREE TO EXERCISE YOUR RIGHT TO OBJECT IN RELATION TO THE USE OF INFORMATION SOCIETY SERVICES, NOTWITHSTANDING DIRECTIVE 2002/58/EC, BY AUTOMATED MEANS USING TECHNICAL SPECIFICATIONS.
8.8 Withdrawal of consent under data protection law
You have the right to withdraw your consent to the processing of personal data at any time with effect for the future.
8.9 Complaint to a supervisory authority
You have the right to complain to a supervisory authority responsible for data protection about our processing of personal data.
- Topicality and amendment of the data protection declaration
This privacy policy is currently valid and was last updated in March 2024.
It may be necessary to amend this privacy policy due to the further development of our website and services or due to changes in legal or official requirements. You can access and print out the current privacy policy at any time on the website at “https://sigma-data-cloud.com/portal/info_privacy_de.html”.
