Data protection information
The operators of these sites take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this data protection declaration. When you use this website, various personal data is collected. Personal data is data that can be used to personally identify you. This data protection declaration explains what data we collect and what we use it for. It also explains how and for what purpose this happens. We would like to point out that data transmission over the Internet (e.g. when communicating via email) can have security gaps. Complete protection of data from access by third parties is not possible.
We inform you about the processing of data from almost all groups of people, such as customers, applicants, suppliers, business partners and website visitors. For the sake of clarity, we divide this detailed data protection declaration into the following sections:
- General information and mandatory information for everyone
- Information on the processing of personal data for our own business purposes
- Information about the processing of data on this website
This data protection declaration is continually updated.
Version: 20260729-3.6
As of: July 14, 2026
1. General information and mandatory information
Who is responsible for data collection on this website?
Data processing on this website is carried out by the website operator. You can find their contact details in the imprint of this website.
How do we collect your data?
On the one hand, your data is collected when you provide it to us. This can be e.g. This could, for example, be data that you enter into a contact form. Other data is collected automatically or with your consent by our IT systems when you visit the website. This is primarily technical data (e.g. internet browser, operating system or time of page access). This data is collected automatically as soon as you enter this website.
What do we use your data for?
Some of the data is collected to ensure that the website is provided error-free. Other data may be used to analyze your user behavior.
What rights do you have regarding your data?
You have the right at any time to receive information free of charge about the origin, recipient and purpose of your stored personal data. You also have the right to request the correction or deletion of this data. If you have given your consent to data processing, you can revoke this consent at any time in the future. You also have the right to request that the processing of your personal data be restricted in certain circumstances. You also have the right to lodge a complaint with the responsible supervisory authority. You can contact us at any time at datenschutz@polo-motorrad.de if you have any further questions about data protection.
SSL or TLS encryption
This site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as orders or inquiries that you send to us as the site operator. You can recognize an encrypted connection by the browser address line changing from “http://” to “https://” and by the lock symbol in your browser line. If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.
Encrypted payment transactions on this website
If there is an obligation to provide us with your payment data (e.g. account number for direct debit authorization) after concluding a paid contract, this data will be required for payment processing. Payment transactions using common payment methods (Visa/MasterCard, direct debit) are carried out exclusively via an encrypted SSL or TLS connection. You can recognize an encrypted connection by the browser address line changing from “http://” to “https://” and by the lock symbol in your browser line. With encrypted communication, the payment details you transmit to us cannot be read by third parties.
Analytics and Third Party Tools
When you visit this website, your surfing behavior can be statistically evaluated. This happens primarily with cookies and with so-called analysis programs. Detailed information about these analysis programs can be found in the following data protection declaration.
Note on the responsible body
The responsible body for data processing on this website is:
POLO Motorcycle and Sportswear GmbH
Polostrasse 1
41363 Jüchen
Telephone: 02165 / 84 40 200
Email: info@polo-motorrad.de
The responsible body is the natural or legal person who, alone or jointly with others, decides on the purposes and means of processing personal data (e.g. names, email addresses, etc.).
Statutory data protection officer
We have appointed a data protection officer for our company.
Fabio Pastars
DPN Data Protection GmbH & Co. KG
Helmholtzstrasse 26
41747 Viersen
Telephone: 02162/3618690
Email: datenschutz@polo-motorrad.de
Revocation of your consent to data processing
Many data processing operations are only possible with your express consent. You can revoke any consent you have already given at any time. All you need to do is send an informal email to datenschutz@polo-motorrad.de. The lawfulness of the data processing carried out until the revocation remains unaffected by the revocation.
Right to object to data collection in special cases and to direct advertising (Art. 21 GDPR) IF THE DATA PROCESSING IS BASED ON ART. 6 ABS. 1 LITER. E OR F GDPR, YOU HAVE THE RIGHT TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA AT ANY TIME FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION; THIS ALSO APPLIES TO PROFILING BASED ON THESE TERMS. THE APPLICABLE LEGAL BASIS ON WHICH PROCESSING IS BASED CAN BE FOUND IN THIS DATA PROTECTION POLICY. IF YOU OBJECT, WE WILL NO LONGER PROCESS YOUR PERSONAL DATA AFFECTED UNLESS WE CAN PROOF COMPULSORY REASONS FOR THE PROCESSING THAT OUTWEIGH YOUR INTERESTS, RIGHTS AND FREEDOM OR THE PROCESSING IS USED TO ASSERT, EXERCISE OR DEFENSE OF LEGAL CLAIMS (OBJECTION PURSUANT TO ARTICLE 21 (1) GDPR).
IF YOUR PERSONAL DATA IS PROCESSED FOR DIRECT ADVERTISING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR THE PURPOSE OF SUCH ADVERTISING; THIS ALSO APPLIES TO PROFILING TO THE EXTENT IT IS CONNECTED WITH SUCH DIRECT ADVERTISING. IF YOU OBJECT, YOUR PERSONAL DATA WILL NO LONGER BE USED FOR THE PURPOSE OF DIRECT ADVERTISING (OBJECTION PURSUANT TO ARTICLE 21 (2) GDPR). Please send your objection by email to datenschutz@polo-motorrad.de.
Right to lodge a complaint with the responsible supervisory authority
In the event of violations of the GDPR, those affected have the right to lodge a complaint with a supervisory authority, in particular in the member state of their habitual residence, their place of work or the place of the alleged violation. The right to lodge a complaint exists without prejudice to any other administrative or judicial remedies.
Right to data portability
You have the right to have data that we process automatically based on your consent or in fulfillment of a contract handed over to you or to a third party in a common, machine-readable format. If you request the data to be transferred directly to another person responsible, this will only be done if it is technically feasible.
Information, deletion and correction
Within the framework of the applicable legal provisions, you have the right to free information at any time about your stored personal data, its origin and recipients and the purpose of data processing and, if necessary, a right to correction or deletion of this data. You can contact us at any time at the address given in the legal notice for this purpose or for further questions on the subject of personal data.
Right to restriction of processing
You have the right to request that the processing of your personal data be restricted. You can contact us at any time at the address given in the legal notice. The right to restriction of processing exists in the following cases:
If you dispute the accuracy of the personal data we hold about you, we will generally need time to verify this. For the duration of the review, you have the right to request that the processing of your personal data be restricted. If the processing of your personal data was/is occurring unlawfully, you can request that data processing be restricted instead of deletion. If we no longer need your personal data, but you need it to exercise, defend or assert legal claims, you have the right to request that the processing of your personal data be restricted instead of deletion. If you have lodged an objection in accordance with Article 21 Para. 1 GDPR, a balance must be made between your interests and ours. As long as it is not yet clear whose interests prevail, you have the right to request that the processing of your personal data be restricted.
If you have restricted the processing of your personal data, these data - with the exception of their storage - may only be processed with your consent or to assert, exercise or defend legal claims or to protect the rights of another natural or legal person or for reasons of important public interest of the European Union or a Member State.
2. Information on the processing of personal data for our own business purposes
1. Purposes and legal basis of processing
We collect and process your personal data for the following purposes:
Applicant data
We collect and process applicant data for the purpose of carrying out application procedures, to the extent that this is necessary for the decision to establish an employment relationship with us. The legal basis for this is Article 88 GDPR in conjunction with Section 26 Paragraph 1 in conjunction with Paragraph 8 Sentence 2 BDSG. If we hire applicants, we can further process the personal data we have already received in accordance with Section 26 Paragraph 1 BDSG if this is necessary for the purposes of the employment relationship. We store the data of rejected applicants in text form for up to 6 months after receipt of the rejection in text form on the basis of Art. 6 Para. 1 f) GDPR in order to possibly defend against any legal claims asserted from the application process. Our legitimate interest is a possible burden of proof in proceedings under the General Equal Treatment Act (AGG). Any further storage will only take place with the express consent of the applicant.
Processing of personal data in the online shop and in our stores
- To prepare offers (initiation of a purchase contract) as well as to conclude and execute purchase contracts and orders. This processing is based on Article 6 Paragraph 1 b) GDPR, which allows the processing (including transmission) of data to fulfill the contract.
- In the case of installment purchase, also to carry out inquiries about installment purchase and create installment purchase contracts. This processing is carried out exclusively on the basis of your consent in accordance with Art. 6 Para. 1 a) GDPR. As part of the installment purchase, based on our legitimate interest, we will obtain credit information based on mathematical and statistical methods using your address data.
- Verification of your address to check whether shipments can be delivered. For this purpose, we transmit your full name, address and, if applicable, your communication data to Deutsche Post Direkt GmbH, Junkersring 57, 53844 Troisdorf. This processing is carried out on the basis of the legitimate interest in accordance with Article 6 Paragraph 1 f) GDPR, whereby the legitimate interest lies in avoiding unnecessary costs for undeliverable shipments of goods.
- We also process personal data to carry out promotions and competitions. This processing is based on your consent in accordance with Article 6 Paragraph 1 a) GDPR. After the competition has ended, all data that you have sent to us to participate in the competition will be deleted, unless other legal or contractual retention requirements apply.
- We can also use the addresses of our existing customers for mail advertising for brochures, catalogs and the like; this processing is based on Article 6 Paragraph 1 f) GDPR. Our legitimate interest lies in personal direct advertising. You have the right to object to the use of your data for direct advertising purposes at any time. Please send your objection by email to datenschutz@polo-motorrad.de.
- We use our customers' email addresses for advertising via email in the form of offers, reminders about abandoned shopping carts and the like. A customer is someone who has already bought something from us - online or offline. This processing is based on Article 6 Paragraph 1 f) GDPR in conjunction with Section 7 Paragraph 3 UWG, of course taking into account the high requirements of Section 7 Paragraph 3 UWG, which legitimizes the use of customers' email addresses under certain conditions. Our legitimate interest lies in the simple and cost-effective advertising approach to our customers and the improvement of their shopping experience. You have the right to object to the use of your email address for these purposes at any time. Please send your objection by email to datenschutz@polo-motorrad.de.
- We also use our customers' email addresses to send satisfaction surveys after a purchase and for other customer surveys that are not related to a purchase. This processing is based on Article 6 Paragraph 1 f) GDPR in conjunction with Section 7 Paragraph 3 UWG. Our legitimate interest lies in obtaining feedback on the quality of our products, the purchasing experience and other impressions of us and our services through the customer's evaluation. You have the right to object to the use of your email address for these purposes at any time. Please send your objection by email to datenschutz@polo-motorrad.de.
2. Transmission of data
We only transmit personal data to third parties if this is necessary as part of contract processing, such as to the companies entrusted with the delivery of the goods or the service provider responsible for processing payments. Further transmission of data will only take place if you have expressly agreed to the transmission. Your data will not be passed on to third parties without your express consent, for example for advertising purposes. The basis for data processing is Article 6 Paragraph 1 Letter b GDPR, which allows the processing of data to fulfill a contract or pre-contractual measures.
3. Storage of data
Your personal data will only be stored as long as knowledge of the data is necessary for the purposes of the contractual relationship or the purposes for which it was collected, or as long as legal or contractual retention requirements exist. Statutory retention periods arise from, among other things, social law and tax law regulations and extend up to ten years for documents and receipts relevant to tax law.
4. Automated decision making
In order to carry out deliveries using a downstream payment method (invoice, direct debit or installment purchase), it may be necessary to obtain credit information about you. To do this, we will transmit your data (name, address, date of birth if applicable) to SCHUFA Holding AG, Kormoran Weg 5, 65201 Wiesbaden and/or to Creditreform Boniversum GmbH, Hellersbergstraße 11, 41460 Neuss. This processing is based on our legitimate interest in accordance with Article 6 (1) (f) GDPR in conjunction with Article 22 (2) (a) GDPR. Our legitimate interest lies in avoiding the financial risk of non-payment for goods that have already been delivered. We would like to point out that as part of risk management we collect or use probability values for your future behavior and address data is also used to calculate these probability values. This processing is based on Section 31 Paragraph 1 BDSG (new). You can object to or prevent this processing of your data by not selecting a downstream payment method during the purchase process. As a result, we can only offer you payment methods in advance.
3. Data collection on this website
External hosting
This website is hosted by an external service provider (hoster). The personal data collected on this website is stored on the host's servers. This can be v. a. These include IP addresses, contact requests, meta and communication data, contract data, contact details, names, website access and other data generated via a website. The host is used for the purpose of fulfilling the contract with our potential and existing customers (Art. 6 Para. 1 lit. b GDPR) and in the interest of a secure, fast and efficient provision of our online offering by a professional provider (Art. 6 Para. 1 lit. f GDPR). Our hoster will only process your data to the extent necessary to fulfill its service obligations and follow our instructions regarding this data.
Conclusion of a contract for order processing
In order to ensure data protection-compliant processing, we have concluded a contract for order processing with our host.
Cookies
Our websites use so-called “cookies”. Cookies are small text files and do not cause any damage to your device. They are stored on your device either temporarily for the duration of a session (session cookies) or permanently (permanent cookies). Session cookies are automatically deleted at the end of your visit. Permanent cookies remain stored on your device until you delete them yourself or your web browser automatically resolves them.
In some cases, cookies from third-party companies may also be stored on your device when you enter our site (third-party cookies). These enable us or you to use certain third-party services (e.g. cookies to process payment services).
Cookies have various functions. Numerous cookies are technically necessary because certain website functions would not work without them (e.g. the shopping cart function or the display of videos). Other cookies are used to evaluate user behavior or display advertising.
Cookies that are necessary to carry out the electronic communication process (necessary cookies) or to provide certain functions you want (functional cookies, e.g. for the shopping cart function) or to optimize the website (e.g. cookies to measure the web audience) are stored on the basis of Art. 6 Para. 1 lit. f GDPR, unless another legal basis is specified. The website operator has a legitimate interest in storing cookies in order to provide its services in a technically error-free and optimized manner. If consent to the storage of cookies has been requested, the cookies in question will be stored exclusively on the basis of this consent (Art. 6 Para. 1 lit. a GDPR); consent can be revoked at any time.
You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general, and activate the automatic deletion of cookies when closing the browser. If cookies are deactivated, the functionality of this website may be restricted.
If cookies are used by third-party companies or for analysis purposes, we will inform you separately in this data protection declaration and, if necessary, request your consent.
Cookie consent with ConsentManager
Our website uses ConsentManager's consent technology to obtain your consent to store certain cookies on your device or to use certain technologies and to document this in accordance with data protection regulations. The provider of this technology is Jaohawi AB, Håltegelvägen 1b, 72348 Västerås, Sweden, website: https://www.consentmanager.de (hereinafter “ConsentManager”).
When you enter our website, a connection is established to ConsentManager's servers to obtain your consent and other declarations regarding cookie use. ConsentManager then stores a cookie in your browser in order to be able to assign you the consent given or its revocation. The data collected in this way will be stored until you request us to delete it, delete the consent manager provider cookie yourself or the purpose for storing the data no longer applies. Mandatory legal retention obligations remain unaffected.
ConsentManager is used to obtain the legally required consent for the use of cookies. The legal basis for this is Article 6 Paragraph 1 Letter c GDPR.
Order processing
We have concluded an order processing contract (AVV) with the above-mentioned provider. This is a contract required by data protection law, which guarantees that the personal data 9 / 18 of our website visitors will only be processed in accordance with our instructions and in compliance with the 6 / 9 GDPR.
Using the POLO Bike database
You can use the POLO Bike database to save your bike(s) and receive more specific offers based on them.
Visitors with customer accounts
If you are logged in as a customer, you can save up to five bikes in your account and manage them there (create, edit and delete). We store this data in our customer database and add it to your customer account. In addition, a cookie is stored on your device in which the stored bikes are stored. This cookie does not contain any personal data, but only the bike you have stored (manufacturer/type/model). This allows us to always show you the right parts for your bike, even without you being logged in to the online shop. We can also use this cookie to make you suitable offers for your bike outside of our web shop. If you do not wish this, you can set your browser so that this cookie is not set. We also use this data to send you personalized offers (via email, post or online). If you do not wish this, you can object to the use of this information at any time.
Visitors without a customer account
If you use our bike database as a non-logged in visitor, a cookie will be set for 365 days. This allows us to show you the right parts for your motorcycle even without a customer login. This cookie does not contain any personal data, but only the bike you have stored (manufacturer/type/model). We can also use this cookie to make you suitable offers for your bike outside of our web shop. If you do not wish this, you can set your browser so that this cookie is not stored.
Server log files
The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are:
Browser type and browser version
operating system used
Referrer URL
Host name of the accessing computer
Time of server request
IP address
This data will not be merged with other data sources.
This data is collected on the basis of Article 6 Paragraph 1 Letter f GDPR. The website operator has a legitimate interest in the technically error-free presentation and optimization of his website - for this purpose the server log files must be recorded.
Contact form
If you send us inquiries using the contact form, your details from the inquiry form, including the contact details you provided there, will be stored by us in order to process the inquiry and in case of follow-up questions. We will not pass on this data without your consent. This data is processed on the basis of Article 6 Paragraph 1 Letter b of the GDPR, provided that your request is related to the fulfillment of a contract or is necessary to carry out pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective processing of the inquiries addressed to us (Art. 6 Para. 1 lit. f GDPR) or on your consent (Art. 6 Para. 1 lit. a GDPR) if this has been requested. The data you enter in the contact form will remain with us until you request us to delete it, revoke your consent to storage or the purpose for data storage no longer applies (e.g. after your request has been processed). Mandatory legal provisions – in particular retention periods – remain unaffected.
Inquiries by email, telephone or fax
If you contact us by email, telephone or fax, your request including all resulting personal data (name, request) will be stored and processed by us for the purpose of processing your request. We will not pass on this data without your consent. This data is processed on the basis of Article 6 Paragraph 1 Letter b of the GDPR, provided that your request is related to the fulfillment of a contract or is necessary to carry out pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective processing of the inquiries addressed to us (Art. 6 Para. 1 lit. f GDPR) or on your consent (Art. 6 Para. 1 lit. a GDPR) if this has been requested. The data you send to us via contact requests will remain with us until you request us to delete it, revoke your consent to storage or the purpose for data storage no longer applies (e.g. after your request has been processed). Mandatory legal provisions – in particular statutory retention periods – remain unaffected.
Registration on this website
You can register on this website to use additional functions on the site. We only use the data entered for the purpose of using the respective offer or service for which you have registered. The mandatory information requested during registration must be provided in full. Otherwise we will reject the registration. For important changes, such as the scope of the offer or technically necessary changes, we use the email address provided during registration to inform you in this way.
The data entered during registration is processed for the purpose of implementing the usage relationship established by registration and, if necessary, to initiate further contracts (Art. 6 Para. 1 lit. b GDPR). The data collected during registration will be stored by us for as long as you are registered on this website and will then be deleted. Statutory retention periods remain unaffected.
4. Analytics tools and advertising
Profiling
We also create usage profiles using certain analysis tools on our website using pseudonymization. However, usage profiles will not be combined with data about the bearer of the pseudonym without the visitor's express consent. Further details can be found in the explanations below.
Google Enhanced Conversion Tracking
For our online offering we use Google Enhanced Conversion Tracking from Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). Google Enhanced Conversions complement the previous conversion tags. Conversion tracking is used to create statistics to find out the total number of website users and to obtain information about what actions they have carried out. With the help of advanced conversions, conversions can be recorded even more precisely. Conversion data from our online offering collected by us as those responsible for the online offering and provided by the user can be sent to Google in encrypted form through extended conversions. The data of website visitors is encrypted using a one-way hash algorithm SHA256; no conclusions can be drawn about the person. Advanced conversions are used for customers who have provided data such as their email address, name, home address or telephone number, for example as part of a customer account. Based on this information, customers are assigned to the corresponding Google accounts in which they were logged in when an interaction with the online offer took place. In this context, it cannot be ruled out that data will be transferred to the USA and that US security authorities may thereby have access to this data. Further information can be found in the Google data protection regulations at https://policies.google.com/privacy?gl=de and at https://support.google.com/google-ads/answer/9888656?hl=de. The use of this service is subject to your express consent. The legal basis for the use of the service is Article 6 Paragraph 1 Letter a) GDPR. You can revoke your consent at any time with future effect.
Google Analytics
This website uses functions of the web analysis service Google Analytics. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics uses so-called “cookies”. These are text files that are stored on your computer and enable your use of the website to be analyzed. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. The storage of Google Analytics cookies and the use of this analysis tool are based on Art. 6 Para. 1 lit. f GDPR. The website operator has a legitimate interest in analyzing user behavior in order to optimize both its website and its advertising. If appropriate consent has been requested (e.g. consent to the storage of cookies), processing is carried out exclusively on the basis of Art. 6 Para. 1 lit. a GDPR; consent can be revoked at any time.
IP anonymization
We have activated the IP anonymization function on this website. This means that your IP address will be shortened by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area before it is transmitted to the USA. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide other services related to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics is not merged with other Google data.
Browser plugin
You can prevent the storage of cookies by setting your browser software accordingly; However, we would like to point out that in this case you may not be able to use all functions of this website to their full extent. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de.
Objection to data collection
You can prevent Google Analytics from collecting your data by clicking on the following link. An opt-out cookie will be set to prevent your data from being collected on future visits to this website: deactivate Google Analytics. You can find more information about how Google Analytics handles user data in Google's privacy policy: https://support.google.com/analytics/answer/6004245?hl=de.
Order processing
We have concluded an order processing contract with Google and fully implement the strict requirements of the German data protection authorities when using Google Analytics.
Demographic characteristics in Google Analytics
This website uses the “demographic characteristics” function of Google Analytics. This allows reports to be created that contain information about the age, gender and interests of site visitors. This data comes from interest-based advertising from Google and third-party visitor data. This data cannot be assigned to a specific person. You can deactivate this function at any time via the ad settings in your Google account or generally prohibit the collection of your data by Google Analytics as described in the section “Objection to data collection”.
Storage period
User and event-level data stored by Google that is linked to cookies, user identifiers (e.g. User ID) or advertising IDs (e.g. DoubleClick cookies, Android advertising ID) is anonymized or deleted after 14 months. Details can be found at the following link: https://support.google.com/analytics/answer/7667196?hl=de
Google Analytics Remarketing
This website uses the functions of Google Analytics Remarketing in conjunction with the cross-device functions of Google Ads and Google DoubleClick. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
This function makes it possible to link the advertising target groups created with Google Analytics Remarketing with the cross-device functions of Google Ads and Google DoubleClick. In this way, interest-based, personalized advertising messages that have been adapted to you on one device (e.g. cell phone) depending on your previous usage and surfing behavior can also be displayed on another of your devices (e.g. tablet or PC).
If you have given your consent, Google will link your web and app browser history with your Google account for this purpose. In this way, the same personalized advertising messages can be displayed on every device on which you log in with your Google account.
To support this feature, Google Analytics collects Google-authenticated user IDs, which are temporarily linked to our Google Analytics data to define and create audiences for cross-device advertising.
You can permanently opt out of cross-device remarketing/targeting by opting out of personalized advertising; To do this, follow this link: https://www.google.com/settings/ads/onweb/.
The summary of the data collected in your Google account is based solely on your consent, which you can give or revoke at Google (Art. 6 Para. 1 lit. a GDPR). For data collection processes that are not merged in your Google account (e.g. because you do not have a Google account or have objected to the merger), the collection of data is based on Art. 6 Para. 1 lit. f GDPR. The legitimate interest arises from the fact that the website operator has an interest in the anonymized analysis of website visitors for advertising purposes.
Further information and the data protection regulations can be found in Google's data protection declaration at: https://policies.google.com/technologies/ads?hl=de.
Google Optimizer
We can also use the “Google Optimizer” service. Google Optimizer allows us to use so-called “A/B testing” to understand the impact of various changes to a website (e.g. changes to input fields, design, etc.). Cookies are stored on users’ devices for these testing purposes. Only pseudonymous user data is processed.
Google Ads and Google Conversion Tracking
This website uses Google Ads. Google Ads is an online advertising program from Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
As part of Google Ads, we use so-called conversion tracking. If you click on an ad placed by Google, a cookie is set for conversion tracking. Cookies are small text files that the Internet browser stores on the user's computer. These cookies expire after 30 days and are not used to personally identify users. If the user visits certain pages on this website and the cookie has not yet expired, Google and we can recognize that the user clicked on the ad and was redirected to this page. Each Google Ads customer receives a different cookie. The cookies cannot be tracked across Google Ads customers' websites. The information collected using the conversion cookie is used to create conversion statistics for Google Ads customers who have opted for conversion tracking. Customers learn the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag. However, you will not receive any information that can be used to personally identify users. If you do not want to participate in tracking, you can object to this use by easily deactivating the Google Conversion Tracking cookie via your Internet browser under user settings. You will then not be included in the conversion tracking statistics. The storage of “conversion cookies” and the use of this tracking tool are based on Art. 6 Para. 1 lit. f GDPR. The website operator has a legitimate interest in analyzing user behavior in order to optimize both its website and its advertising. If appropriate consent has been requested (e.g. consent to the storage of cookies), processing is carried out exclusively on the basis of Art. 6 Para. 1 lit. a GDPR; consent can be revoked at any time. You can find more information about Google Ads and Google Conversion Tracking in Google's data protection regulations: https://policies.google.com/privacy?hl=de.
You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general, and activate the automatic deletion of cookies when closing the browser. If cookies are deactivated, the functionality of this website may be restricted.
Facebook pixels
This website uses Facebook's visitor action pixel to measure conversions. The provider of this service is Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. However, according to Facebook, the data collected will also be transferred to the USA and other third countries. This allows the behavior of site visitors to be tracked after they have been redirected to the provider's website by clicking on a Facebook ad. This allows the effectiveness of Facebook advertisements to be evaluated for statistical and market research purposes and future advertising measures to be optimized. The data collected is anonymous for us as the operator of this website; we cannot draw any conclusions about the identity of the users. However, the data is stored and processed by Facebook so that a connection to the respective user profile is possible and Facebook can use the data for its own advertising purposes in accordance with the Facebook data usage guidelines. This allows Facebook to enable the placement of advertisements on Facebook pages as well as outside of Facebook. As the site operator, we cannot influence this use of data. The use of Facebook pixels is based on Art. 6 Para. 1 lit. f GDPR. The website operator has a legitimate interest in effective advertising measures, including social media. If appropriate consent has been requested (e.g. consent to the storage of cookies), processing is carried out exclusively on the basis of Art. 6 Para. 1 lit. a GDPR; consent can be revoked at any time. You can find further information on protecting your privacy in Facebook's data protection information: https://de-de.facebook.com/about/privacy/.
You can also deactivate the “Custom Audiences” remarketing function in the ad settings area at https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen. To do this you must be logged in to Facebook. If you do not have a Facebook account, you can deactivate Facebook usage-based advertising on the European Interactive Digital Advertising Alliance website: http://www.youronlinechoices.com/de/praferenzmanagement/.
Criteo
This website uses functions from Criteo. The provider is Criteo SA, 32 Rue Blanche, 75009 Paris (hereinafter “Criteo”). Criteo is used to show you interest-based advertisements within the Criteo advertising network. Your interests are determined based on your previous usage behavior. For example, Criteo records which products you have viewed, added to your shopping cart or purchased. Further details about the data collected by Criteo can be found here: https://www.criteo.com/de/privacy/how-we-use-your-data/. In order to show you interest-based advertising, we or other Criteo partners need to be able to recognize you. For this purpose, a cookie is stored on your device or a comparable identifier is used, which links your user behavior with a pseudonymous user profile. Details can be found in Criteo's privacy policy at: https://www.criteo.com/de/privacy/.
Your personal data and the Criteo cookies stored in your browser will be stored for a maximum of 13 months from the date of collection. Criteo is used in the interest of targeted advertising measures. This represents a legitimate interest within the meaning of Art. 6 Para. 1 lit. consent can be revoked at any time. You can set your browser so that it no longer stores cookies. However, this may result in a restriction on the accessible website functions. It should also be noted that Criteo may also use other technologies to create user profiles. Switching off cookies therefore does not guarantee that user profiles will no longer be created. Criteo and we are jointly responsible within the meaning of Art. 26 GDPR. An agreement on joint processing has been concluded between Criteo and us, the essential contents of which Criteo describes under the following link: https://www.criteo.com/de/privacy/how-we-use-your-data/.
Microsoft Bing Ads
On our pages we use conversion tracking from Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA. Microsoft Bing Ads stores a cookie on your computer if you came to our website via a Microsoft Bing ad. In this way, Microsoft Bing and we can recognize that someone clicked on an ad, was redirected to our website and reached a predetermined landing page (conversion page). We only find out the total number of users who clicked on a Bing ad and were then redirected to the conversion page. No personal information about the user's identity is shared.
If you do not want information about your behavior to be used by Microsoft as explained above, you can refuse the necessary setting of a cookie - for example by using a browser setting that generally deactivates the automatic setting of cookies. You can also prevent Microsoft from collecting the data generated by the cookie and relating to your use of the website and from processing this data by declaring your objection using the following link: https://account.microsoft.com/privacy/ad-settings/signedout?lang=de-DE. Further information about data protection and the cookies used by Microsoft and Bing Ads can be found on the Microsoft website at https://privacy.microsoft.com/de-de/privacystatement
WEBGAINS
We use the affiliate technology of Webgains, a service of Webgains GmbH, Frankenstraße 150C, 90461 Nuremberg. Webgains offers us the opportunity to publish advertising for our products via so-called publishers on the Internet via a platform. Webgains has concluded contracts with both us and the publishers for the use of the affiliate marketing platform. We are then obliged to pay Webgains a fee for using the platform. Webgains is obliged to pay the publisher a commission for successful placement activities. In order for Webgains to be able to calculate the remuneration for the sales brokered by a publisher, we must be able to understand from which website an interested party or buyer was directed to our website. For this purpose, we use cookies that enable the brokered business to be assigned to the publisher. A cookie only contains information about when a specific advertising medium was clicked on by a device. The WEBGAINS tracking cookies store an individual number sequence that cannot be assigned to the individual user and is used to document an advertiser's partner program, the publisher, and the time of the user's action (click or view). WEBGAINS also collects information about the device from which a transaction is carried out, e.g. B. the operating system and the accessing browser.
Cookies are only used if you have given us your consent via the consent manager. The legal basis for the use of these cookies is Article 6 Paragraph 1 Sentence 1 Letter a GDPR and Section 25 TDDDG. You can revoke your consent at any time with future effect.
We are responsible under data protection law for this data processing - including the storage of cookies after the consent of the person concerned - and webgains acts as the processor here. We have concluded a contract for order processing in accordance with Art. 28 GDPR with Webgains GmbH. This is a contract required by data protection law that ensures that the processor only processes the personal data of our website visitors in accordance with our instructions and in compliance with the GDPR.
In order to fulfill the contract with Webgains, we also process the following necessary information for the conclusion of the contract:
- A metric that represents a buyer/purchase;
- An indicator that enables the brokered business to be assigned to the publisher;
- Contract and billing data (product, value, currency and comparable);
We transmit this data to Webgains so that Webgains can fulfill its obligation to pay commission to the publisher. Further personal data, in particular name and/or contact details, will not be transmitted to Webgains. This transfer takes place in relation to the affected customers on the basis of Art. 6 Para. 1, S. 1 lit.f GDPR, as we have a legitimate interest in fulfilling our contractual obligations towards Webgains.
There are different responsibilities with regard to the data processing described above:
With regard to the forwarding of the interested party's data after linking to our website, there is a joint responsibility between us and the publisher in accordance with Art. 26 GDPR. We have - via the platform - concluded an agreement with the publishers in accordance with Art. 26 GDPR and provide independent information about the scope of data processing in accordance with Art. 12 ff. GDPR.
We and Webgains are responsible for this forwarding of data from the mediated conclusion of the contract within the meaning of Art. 26 GDPR.
Webgains also creates reporting for publishers under its own responsibility based on the data transmitted. This should enable publishers to optimize their own sales activities. In addition, based on the data transmitted, Webgains creates recommendations for us as advertisers regarding potentially suitable publishers and, conversely, for publishers regarding potentially suitable products. The data processing on which the reports and recommendations are based is carried out on the basis of Art. 6 Para. 1, S. 1 lit. f) GDPR. The legitimate interest is to optimize business activities.
And finally, Webgains processes the data we transmit under its own responsibility for its own statistical purposes. This includes, for example, an anonymized evaluation of the data in order to carry out capacity planning. In addition, data is evaluated in order to record and clarify any attacks or unfair use of the affiliate marketing platform (combating fraud and abuse). This data processing is also carried out on the basis of Art. 6 Para. 1, S. 1 lit. f) GDPR.
The legal basis for processing your personal data is our legitimate interest in fulfilling the contract with Webgains, Article 6 Paragraph 1 Sentence 1 lit. c., lit. f GDPR.
Webgains deletes all data after a period of 3 months after collection.
Further information on all cookies set by Webgains as well as useful information on how to remove them can be found at: https://www.webgains.com/public/de/datenschutzerklaerung/.
AWIN partner program
We use components from AWIN on our website based on your express consent in accordance with Article 6 Paragraph 1 Letter a of the GDPR. AWIN is a German affiliate network and serves as an interface between retailers (merchants) and sales partners (affiliates). Affiliate marketing is an Internet-based form of sales that enables commercial operators of Internet sites, the so-called merchants or advertisers, to display advertising, which is usually paid for through click or sale commissions, on third-party Internet sites, i.e. sales partners, who are also called affiliates or publishers. The merchant provides an advertising medium via the affiliate network, i.e. an advertising banner or other suitable means of internet advertising, which is subsequently integrated by an affiliate on its own website or promoted via other channels, such as keyword advertising or email marketing. AWIN's operating company is AWIN AG, Eichhornstrasse 3, 10785 Berlin, Germany. AWIN sets a cookie on the information technology system of the data subject. What cookies are has already been explained above. AWIN's tracking cookie does not store any personal data. Only the identification number of the affiliate, i.e. that of the partner referring potential customers, as well as the serial number of the visitor to a website and the advertising medium clicked on are stored. The purpose of storing this data is to process commission payments between a merchant and the affiliate, which are processed via the affiliate network, i.e. AWIN.
The person concerned can prevent the setting of cookies through our website, as already described above, at any time by means of a corresponding setting on the Internet browser used and thus permanently object to the setting of cookies. Such a setting of the Internet browser used would also prevent AWIN from setting a cookie on the information technology system of the data subject. In addition, cookies already set by AWIN can be deleted at any time using an internet browser or other software programs. AWIN's applicable data protection regulations can be accessed at https://www.awin.com/de/rechts/privacy-policy.
newsletter
If you would like to receive our newsletter, we need an email address from you, which you can send to us when registering for the newsletter. We will verify your email address as part of the double opt-in process. We will only send you our regular newsletter after confirming our first opt-in email. No further data is collected or only collected on a voluntary basis. We use this data exclusively to send the newsletter; the processing is carried out exclusively on the basis of your consent in accordance with Article 6 Paragraph 1 Letter a GDPR. You can revoke your consent to the newsletter at any time, for example via the unsubscribe link in each newsletter or by email to service(at)polo-motorrad.com. If you have a customer account, you can manage your newsletter subscription at any time in the “My POLO” area. The legality of the data processing operations that have already taken place remains unaffected by the revocation. We store your data until you unsubscribe from the newsletter. If you have unsubscribed from the newsletter, your email address may be stored in a blacklist by us or the newsletter service provider in order to prevent future mailings. The data from the blacklist will only be used for this purpose and will not be merged with other data. This serves both your interest and our interest in complying with legal requirements when sending newsletters (legitimate interest within the meaning of Art. 6 Para. 1 lit. f GDPR). The storage in the blacklist is not limited in time. You can object to the storage if your interests outweigh our legitimate interests.
If you subscribe to the POLO newsletter, you agree that we may use the data you provide us as well as personalized usage data to present you with personalized advertising and/or special offers and services. You also agree that we may send you emails about general surveys, e.g. about products or about ourselves. To do this, we use the automatically generated information you provide, such as receipt and read confirmations of emails, the date and time of your visit to our online shops, products you are interested in, or your order history. We explicitly use this information in a personalized form. They help us to improve our websites and our offerings for you and to send you individual emails. This processing is carried out on the basis of Article 6 Para. 1 lit. f GDPR; our legitimate interest lies in a better and personalized design of our newsletter. At the same time, personalization also improves your shopping experience by primarily sending you information that matches your preferences and areas of interest. At the same time, we avoid randomly sending you unnecessary advertising. If you no longer wish to receive personalized advertising or newsletters from us in general, you can object to this at any time in general or for specific measures. You will of course find an unsubscribe link in every newsletter.
Klaviyo
We have integrated Klaviyo on this website. The provider is Klaviyo Inc., 125 Summer Street, Floor 6, Boston, MA, 02110, USA (hereinafter Klaviyo). Klaviyo is a marketing automation tool for sending emails, SMS, push notifications and collecting customer reviews for eCommerce retailers. For this purpose, Klaviyo stores your consent to email marketing. In particular, the following data may be processed: name, telephone number, email address, address data, IP address, device identification, usage data (such as interactions between a user and Klaviyo's online system, website or email, browser used, operating system used, referrer URL). The use of Klaviyo is based on Article 6 Paragraph 1 Letter a GDPR and Section 25 Paragraph 1 TDDDG. Consent can be revoked at any time.
Further details can be found in the provider's privacy policy at https://www.klaviyo.com/legal/privacy.
The company is certified according to the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the USA that is intended to ensure compliance with European data protection standards when data is processed in the USA. Every DPF certified company undertakes to comply with these data protection standards. Further information on this can be obtained from the provider at the following link: https://www.dataprivacyframework.gov/participant/6149.
The provider applies standard contractual clauses for the transfer of personal data to third countries. Details can be found here: https://www.klaviyo.com/legal/data-processing-agreement.
Order processing
We have concluded an order processing contract (AVV) for the use of the above-mentioned service. This is a contract required by data protection law, which ensures that we only process the personal data of our website visitors in accordance with our instructions and in compliance with the GDPR.
Using customer recovery via uptain
We use the uptain plugin from the provider uptain GmbH, (Obergrünewalder Str. 8 a, 42103 Wuppertal; “uptain”) on our website. The data processing serves the purpose of analyzing this website and its visitors as well as for marketing and advertising purposes and to improve customer communication (e.g. through a dialog window). For this purpose, uptain will use the information obtained on behalf of the operator of this website to evaluate your use of the website and to compile reports on website activity.
Uptain uses technologies such as cookies. The following information, among other things, can be collected: IP address, date and time of page access, mouse movement and click path, movement of the cursor, length of stay, pages visited. The use of cookies or comparable technologies takes place with your consent on the basis of Section 25 Paragraph 1 Sentence 1 TTDSG in conjunction with Article 6 Paragraph 1 Letter a GDPR. Your personal data will be processed with your consent on the basis of Article 6 (1) (a) GDPR. You can revoke your consent at any time. The lawfulness of processing based on consent until its revocation remains unaffected.
Further information on data protection at uptain can be found at: https://uptain.de/datenschutz/
Order processing
We have concluded an order processing contract (AVV) with uptain GmbH for the use of the above-mentioned service. This is a contract required by data protection law, which ensures that we only process the personal data of our website visitors in accordance with our instructions and in compliance with the GDPR.
Converify GmbH in conjunction with HQ GmbH as a technical service provider
This page contains functions from converify.com (converify GmbH, Spindlerstr. 13, D-81477 Munich), which enable us to make you the right offer at the right time. We would like to permanently improve your shopping experience and make it customer-friendly and individual for you.
converify.com and HQ GmbH use cookies for this purpose. This automatically collects technical device and access data that is transmitted by your browser when you interact with our website. The data collected is used for so-called onsite optimization in order to be able to present you with relevant recommendations and content when you visit our website. This data is not used for your personal identification, but rather for a pseudonymous evaluation of your use of the website (e.g. scrolling, clicking, mouse-over) or when you leave the page. At no time will the data be permanently merged with other personal data we have stored about you. converify.com and HQ GmbH use both so-called session cookies, which are automatically deleted when you close your browser, and permanent cookies, which remain on your device until they are deleted.
Examples of information we collect and analyze include the Internet Protocol (IP) address that connects your computer to the Internet, logins, information about your computer and connection to the Internet such as: B. Browser type, version, and extensions, time zone settings, operating system and platform, including date and time, cookie or Flash cookie number, products you viewed or searched for. We may also collect technical information that makes it easier for us to identify your device and thereby prevent misuse or to diagnose errors.
You can deactivate the cookies used by converify.com and HQ GmbH at any time using the following link: https://www.polo-motorrad.com/#ConvOptOut
Address verification by Endereco UG
On our website we offer you the opportunity to check certain entries in address forms in our webshop in real time for input errors. This is to avoid problems with the delivery of the products you have ordered due to incorrect information.
We would also like to ensure that your contact details are valid for sending information about your order or for any necessary queries.
To provide these functions, we use the service provider Endereco, Balthasar-Neumann-Straße 4b, 97236 Randersacker. The service provider processes the data exclusively according to our instructions. The legal basis for the transmission, processing and temporary storage of the data by the service provider is Art. 6 Para. 1 lit. b GDPR, as it is absolutely necessary for the fulfillment of the contract or to carry out pre-contractual measures that some of the data you enter into the input mask is checked for accuracy. The following data is processed by the service provider:
- Address (country, city, zip code, street, house number if applicable)
The data is processed separately by the service provider and not combined. The requests will be deleted by the service provider as soon as the status of the data entered has been determined and storage in the online shop has been completed, but no later than after 30 days.
Browser settings
You can set the Internet browser you use so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general, and activate the automatic deletion of cookies when closing the browser. As a rule, the help function in the menu bar of your web browser will show you how you can reject new cookies and switch off those you have already received. We would simply like to point out that if cookies are deactivated, the functionality of this website may be restricted.
5. Plugins and tools
Google Web Fonts
This site uses so-called web fonts, which are provided by Google, for the uniform display of fonts. When you access a page, your browser loads the required web fonts into your browser cache in order to display texts and fonts correctly. For this purpose, the browser you use must connect to Google's servers. This gives Google knowledge that this website was accessed via your IP address. The use of Google WebFonts is based on Art. 6 Para. 1 lit. f GDPR. The website operator has a legitimate interest in the uniform presentation of the typeface on his website. If appropriate consent has been requested (e.g. consent to the storage of cookies), processing is carried out exclusively on the basis of Art. 6 Para. 1 lit. a GDPR; consent can be revoked at any time. If your browser does not support web fonts, your computer will use a standard font. Further information about Google Web Fonts can be found at https://developers.google.com/fonts/faq and in Google's privacy policy: https://policies.google.com/privacy?hl=de.
Google Maps
This site uses the Google Maps map service via an API. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland. In order to use the functions of Google Maps, it is necessary to save your IP address. This information is usually transferred to a Google server in the USA and stored there. The provider of this site has no influence on this data transfer. The use of Google Maps is in the interest of an attractive presentation of our online offers and to make it easy to find the places we indicate on the website. This represents a legitimate interest within the meaning of Article 6 Paragraph 1 Letter f of the GDPR. If appropriate consent has been requested, processing is carried out exclusively on the basis of Article 6 Paragraph 1 Letter a of the GDPR; consent can be revoked at any time.
You can find more information on how to handle user data in Google's privacy policy: https://policies.google.com/privacy?hl=de.
Use of our chat function
If you contact us via chat, your personal data will be processed. The data that you have provided to us is processed, e.g. the name of your company, your name, your function, your email address and your request. In addition, the time of receipt of the request is documented. Mandatory information is marked with an asterisk (*).
We process this data exclusively to implement your request (e.g. providing information about a product, supporting contract processing such as returning products, incorporating your feedback into improving our service). To provide the chat function, we use a tool from GUURU Solutions GmbH, Rothusstrasse 21, 6331 Hünenberg, Switzerland. Your data will be stored in a database of GUURU Solutions GmbH, which may enable it to access your data if this is necessary to provide the software and to support you in using the software.
Contact us via Guuru Live Chat
To contact us, you can send us inquiries using the “Guuru” live chat function (e.g. providing information about a product, providing support with contract processing such as returning products, including your feedback in improving our service). These inquiries are answered by a smartbot, i.e. by a technical system, or directly by experienced end customers (so-called “Guurus”). Guurus are people who have registered on the Guuru platform and want to share their experiences with others.
If you contact us via Guuru live chat, we process your data, e.g. the content of your messages and technical information such as your IP address. The purpose of this processing is to make the chat available and to correctly process your request. The legal basis for processing the data is our legitimate interest in accordance with Article 6 Paragraph 1 Letter f of the GDPR to offer our potential and existing customers the most comprehensive information and advice possible. If your contact is aimed at concluding a purchase contract, the legal basis is Article 6 (1) (b) GDPR.
When the Guuru widget is loaded (i.e. before starting a conversation), no cookies are set - including no functional or marketing cookies. Only after you actively start the chat will minimal local storage be made (e.g. session token). This storage occurs exclusively for the technical maintenance of the chat during a session. After the session ends, these session cookies are deleted.
For the Guuru chat service, we use the service provider Guuru AG, Bösch 67, 6331 Hüneberg, Switzerland, with whom an order processing agreement (AVV) has been concluded in accordance with Art. 28 GDPR. Further information on data protection at Guuru AG can be found at: https://www.guuru.com/de/privacy-policy/ For your own protection of your personal data, please refrain from informing us about special categories of personal data within the meaning of Art. 9 Para. 1 GDPR (for example: health data).
Contact us via Guuru Live Chat
To contact us, you can send us inquiries using the “Guuru” live chat function (e.g. providing information about a product, providing support with contract processing such as returning products, including your feedback in improving our service). These inquiries are answered by a smartbot, i.e. by a technical system, or directly by experienced end customers (so-called “Guurus”). Guurus are people who have registered on the Guuru platform and want to share their experiences with others.
If you contact us via Guuru live chat, we process your data, e.g. the content of your messages and technical information such as your IP address. The purpose of this processing is to make the chat available and to correctly process your request. The legal basis for processing the data is our legitimate interest in accordance with Article 6 Paragraph 1 Letter f of the GDPR to offer our potential and existing customers the most comprehensive information and advice possible. If your contact is aimed at concluding a purchase contract, the legal basis is Article 6 (1) (b) GDPR.
When the Guuru widget is loaded (i.e. before starting a conversation), no cookies are set - including no functional or marketing cookies. Only after you actively start the chat will minimal local storage be made (e.g. session token). This storage occurs exclusively for the technical maintenance of the chat during a session. After the session ends, these session cookies are deleted.
For the Guuru chat service, we use the service provider Guuru AG, Bösch 67, 6331 Hüneberg, Switzerland, with whom an order processing agreement (AVV) has been concluded in accordance with Art. 28 GDPR. Further information on data protection at Guuru AG can be found at: https://www.guuru.com/de/privacy-policy/ For your own protection of your personal data, please refrain from informing us about special categories of personal data within the meaning of Art. 9 Para. 1 GDPR (for example: health data).
6. eCommerce, payment providers and shipping service providers
Processing data (customer and contract data)
We collect, process and use personal data only to the extent that it is necessary for the establishment, content or change of the legal relationship (inventory data). This is done on the basis of Article 6 Paragraph 1 Letter b GDPR, which allows the processing of data to fulfill a contract or pre-contractual measures. We only collect, process and use personal data about the use of this website (usage data) to the extent necessary to enable the user to use the service or to bill for it. The customer data collected will be deleted after the order has been completed or the business relationship has ended. Statutory retention periods remain unaffected.
Data transmission when concluding a contract for online shops, retailers and shipping of goods
We only transmit personal data to third parties if this is necessary as part of the contract processing, for example to the company entrusted with the delivery of the goods or the credit institution entrusted with the payment processing. The data will not be transmitted further or will only be transmitted if you have expressly agreed to the transmission. Your data will not be passed on to third parties without your express consent, for example for advertising purposes. The basis for data processing is Article 6 Paragraph 1 Letter b GDPR, which allows the processing of data to fulfill a contract or pre-contractual measures.
Data transmission for the purpose of shipping processing
When shipping goods, the service provider parcelLab GmbH is used to take over the shipping notifications for customers and to send them the shipping status and tracking number of their shipment by email. For this purpose, the personal data required for the shipment information (title, name, address, email, order details, shipping service provider and shipment number) are forwarded to parcelLab. The legal basis for the transfer of personal data is Article 6 Paragraph 1 Sentence 1 Letter f GDPR, which allows the processing of data based on legitimate interest. Our legitimate interest is to inform customers of the current shipping status. Parcel information emails sent by parcelLab receive a so-called tracking pixel, which allows parcelLab to document the opening and clicking behavior of the recipients. This data is collected exclusively for service, evaluation and statistical purposes. We have concluded a contract with parcelLab for order processing in accordance with Article 28 GDPR. Data that was forwarded to parcelLab is automatically deleted after 90 days. You can find more information in parcelLab’s privacy policy: https://parcellab.com/de/datenschutz/
Payment services
We integrate payment services from third-party companies on our website. If you make a purchase from us, your payment data (e.g. name, payment amount, account details, credit card number) will be processed by the payment service provider for the purpose of payment processing. The respective contractual and data protection regulations of the respective providers apply to these transactions. The use of payment service providers is based on Art. 6 Para. 1 lit. b GDPR (contract processing) and in the interest of making the payment process as smooth, comfortable and secure as possible (Art. 6 Para. 1 lit. f GDPR). If your consent is requested for certain actions, Art. 6 Para. 1 lit. a GDPR is the legal basis for data processing; Consent can be revoked at any time in the future.
We use the following payment services/payment service providers on this website:
PayOne
We use the services of PayOne, which handles payment transactions for our shop, unless you select the payment methods “invoice”, “installment purchase” or “advance payment”. No personal data is transmitted to PayOne and we do not receive any personal data from PayOne.
Payments with credit card, Sofort and PayPal are processed via BS PAYONE GmbH, Lyoner Straße 9, D-60528 Frankfurt/Main, which is certified according to the Payment Card Industry Data Security Standard (PCI DSS). Your credit card details are collected and processed directly by BS PAYONE and are not stored by us.
When paying with Sofort, the online payment system from SOFORT GmbH, Theresienhöhe 12, D-80339 Munich, the online banking data (PIN and TAN) you entered into the digital transfer form provided by SOFORT GmbH during the ordering process will be transmitted encrypted by SOFORT GmbH to your bank to carry out the transfer. Your online banking data is stored neither by us nor by SOFORT GmbH.
When paying with PayPal (Europe), S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg, the bank details you provide to PayPal will be used by PayPal for payment. We have no access to this data.
Your payment data will only be transmitted to the respective payment service company if this is necessary for payment processing. The legal basis is Article 6 Paragraph 1 Sentence 1 b GDPR. The terms and conditions and data protection declarations of the respective providers apply to the use of the above-mentioned payment services. You will be informed of this separately before using the respective service.
You can access the data protection declaration of BS PAYONE GmbH via the following link: https://www.payone.com/datenschutz/
Sofort GmbH is part of the Klarna Group (Klarna Bank AB (publ), Sveavägen 46, 111 34 Stockholm, Sweden). You can access the data protection declaration via the following link: https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/privacy
You can access PayPal's privacy policy via the following link: https://www.paypal.com/de/webapps/mpp/ua/privacy-full
Klarna
The provider is Klarna AB, Sveavägen 46, 111 34 Stockholm, Sweden (hereinafter “Klarna”). Klarna offers various payment options (e.g. installment purchase). If you choose to pay with Klarna (Klarna checkout solution), Klarna will collect various personal data from you. Klarna uses cookies to optimize the use of the Klarna checkout solution. Details on the use of Klarna cookies can be found at the following link: https://cdn.klarna.com/1.0/shared/content/policy/cookie/de_de/checkout.pdf.
You can read details about this in Klarna's privacy policy at the following link: https://www.klarna.com/de/datenschutz/.
7. Information on data processing with regard to online presences in social media
Our social media presence This data protection declaration applies to the following social media presence
https://www.facebook.com/polomotorrad
https://twitter.com/polo_motorrad
https://www.instagram.com/polo_motorrad
https://www.xing.com/pages/polomotorradundsportsweargmbh
https://de.linkedin.com/company/polo-motorrad-und-sportswear-gmbh
https://www.youtube.com/@POLOMotorrad2010
https://www.tiktok.com/@polo_motorrad
Data processing through social networks
We maintain publicly accessible social media profiles. You can find the social networks we use in detail below. Social networks such as Facebook, Twitter, etc. can usually comprehensively analyze your user behavior when you visit their website or a website with integrated social media content (e.g. like buttons or advertising banners). Visiting our social media presence triggers numerous data protection-relevant processing operations. Specifically: If you are logged into your social media account and visit our social media presence, the operator of the social media portal can assign this visit to your user account. However, your personal data may also be collected if you are not logged in or do not have an account on the respective social media portal. In this case, this data is collected, for example, via cookies that are stored on your device or by recording your IP address. With the help of the data collected in this way, the operators of the social media portals can create user profiles in which your preferences and interests are stored. In this way, interest-based advertising can be shown to you inside and outside of the respective social media presence. If you have an account with the relevant social network, interest-based advertising can be displayed on all devices on which you are logged in or were logged in. Please also note that we cannot understand all processing processes on the social media portals. Depending on the provider, further processing operations may therefore be carried out by the operators of the social media portals. Details can be found in the terms of use and data protection regulations of the respective social media portals.
Legal basis
Our social media presence is intended to ensure the broadest possible presence on the Internet. This is a legitimate interest within the meaning of Article 6 (1) (f) GDPR. The analysis processes initiated by the social networks may be based on different legal bases that must be specified by the operators of the social networks (e.g. consent within the meaning of Art. 6 Para. 1 lit. a GDPR).
Responsible person and assertion of rights
If you visit one of our social media sites (e.g. Facebook), we are responsible, together with the operator of the social media platform, for the data processing operations triggered by this visit. In principle, you can exercise your rights (information, correction, deletion, restriction of processing, data portability and complaint) both. us as well as against the operator of the respective social media portal (e.g. Facebook). Please note that despite our shared responsibility with the social media portal operators, we do not have full influence on the data processing operations of the social media portals. Our options depend largely on the corporate policy of the respective provider.
Storage period
The data we collect directly via the social media presence will be deleted from our systems as soon as you request us to delete it, revoke your consent to storage or the purpose for data storage no longer applies. Saved cookies remain on your device until you delete them. Mandatory legal provisions – especially retention periods – remain unaffected. We have no influence on the storage period of your data, which is stored by the operators of the social networks for their own purposes. For details, please contact the operators of the social networks directly (e.g. in their data protection declaration, see below).
Your rights
You have the right at any time to receive information free of charge about the origin, recipient and purpose of your stored personal data. You also have the right to object, to data portability and to lodge a complaint with the responsible supervisory authority. You can also request the correction, blocking, deletion and, under certain circumstances, the restriction of the processing of your personal data.
Social networks in detail
We have a profile on Facebook. The provider of this service is Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (hereinafter Meta). According to Meta, the collected data will also be transferred to the USA and other third countries. You can adjust your advertising settings yourself in your user account. To do this, click on the following link and log in: https://www.facebook.com/settings?tab=ads. Data transfer to the USA is based on the EU Commission's standard contractual clauses. Details can be found here: https://www.facebook.com/legal/EU_data_transfer_addendum and https://de-de.facebook.com/help/566994660333381. Details can be found in Facebook's privacy policy: https://www.facebook.com/about/privacy/. The company is certified according to the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the USA that is intended to ensure compliance with European data protection standards when data is processed in the USA. Every DPF certified company undertakes to comply with these data protection standards. Further information on this can be obtained from the provider at the following link: https://www.dataprivacyframework.gov/s/participant-search/participant-detail?contact=true&id=a2zt0000000GnywAAC&status=Active
We use the short message service Twitter. The provider is Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Ireland. You can adjust your Twitter privacy settings yourself in your user account. To do this, click on the following link and log in: https://twitter.com/personalization. Data transfer to the USA is based on the EU Commission's standard contractual clauses. Details can be found here: https://gdpr.twitter.com/en/controller-to-controller-transfers.html. Details can be found in Twitter's privacy policy: https://twitter.com/de/privacy.
We have a profile on Instagram. The provider of this service is Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. Data transfer to the USA is based on the EU Commission's standard contractual clauses. Details can be found here: https://www.facebook.com/legal/EU_data_transfer_addendum, https://privacycenter.instagram.com/policy/ and https://de-de.facebook.com/help/566994660333381. Details on how they handle your personal data can be found in Instagram's privacy policy: https://privacycenter.instagram.com/policy/. The company is certified according to the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the USA that is intended to ensure compliance with European data protection standards when data is processed in the USA. Every DPF certified company undertakes to comply with these data protection standards. Further information on this can be obtained from the provider at the following link: https://www.dataprivacyframework.gov/s/participant-search/participant-detail?contact=true&id=a2zt0000000GnywAAC&status=Active
We have a profile on XING. The provider is New Work SE, Dammtorstraße 30, 20354 Hamburg, Germany. Details on how they handle your personal data can be found in XING's privacy policy: https://privacy.xing.com/de/datenschutzerklaerung.
We have a profile on LinkedIn. The provider is LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland. LinkedIn uses advertising cookies. If you would like to deactivate LinkedIn advertising cookies, please use the following link: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out. Data transfer to the USA is based on the EU Commission's standard contractual clauses. Details can be found here: https://www.linkedin.com/legal/l/dpa and https://www.linkedin.com/legal/l/eu-sccs. Details on how they handle your personal data can be found in LinkedIn's privacy policy: https://www.linkedin.com/legal/privacy-policy.
YouTube
We have a profile on YouTube. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Details on how they handle your personal data can be found in YouTube's privacy policy: https://policies.google.com/privacy?hl=de. The company is certified according to the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the USA that is intended to ensure compliance with European data protection standards when data is processed in the USA. Every DPF certified company undertakes to comply with these data protection standards. Further information on this can be obtained from the provider at the following link: https://www.dataprivacyframework.gov/s/participant-search/participant-detail?contact=true&id=a2zt000000001L5AAI&status=Active
TikTok
We have a profile on TikTok. The provider is TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland. Details on how they handle your personal data can be found in TikTok's privacy policy: https://www.tiktok.com/legal/privacy-policy?lang=de. Data transfer to non-secure third countries is based on the EU Commission's standard contractual clauses. Details can be found here: https://www.tiktok.com/legal/privacy-policy?lang=de.