security information

Data Protection Declaration

Thank you for visiting our website and for your interest in our company and products. Due to legal regulations, we are obligated to inform you about our handling of personal data. Please note the information below:

Responsible body

Responsible body for data protection issues is the

Fitmart GmbH & Co. KG, Werner-von-Siemens-Straße 8, 25337 Elmshorn

Phone: +49 (0) 4121 830 31 00
Fax: +49 (0) 4121 830 31 09

E-mail: info@esn.com

Collection of data while accessing our website

We process personal user data, as far as necessary to provide a functional website as well as our content and services. The following data is processed when accessing our website:

  • the user’s IP-address,
  • used browser, (type, version, language),
  • used operating system,
  • the user’s internet service provider,
  • date and time of access to our website,
  • files retrieved from our website,
  • websites from which the user accessed our website,
  • websites which are accessed by the user through our website.

The processing and temporary storage of the IP-address is necessary in order to supply the website to the user’s computer. The storage in logfiles takes place to ensure the functionality of the website.  In addition, the data is used to optimize our websites and to ensure the security of our IT-systems.

The storage of data and logfiles take place in accordance with article 6, clause 1, littera f General Data Protection Regulations (DS-GVO).

We will delete or disable the personal data of the concerned person as soon as the purpose of storage is omitted. In the case of data processing for the provision of the website, the deletion takes place when the respective session has ended. In the case of storage of personal data in logfiles, deletion takes place after 90 days at the latest.

Collecting data via contact forms

If you use the opportunity to contact us via the provided forms, for example for inquiries about our services, we will collect, process and store the personal data necessary to process your request. The necessary data consists of, your name, gender and your e-mail address. This also includes data you provide voluntarily.

The processing of the data entered in the contact form, occurs on the basis of article 6, clause 1, littera f General Data Protection Regulations (DSGVO), to which you must consent before dispatching the form.  You can revoke this consent at any time.  The legality of the data processing operations carried out until revocation remains unaffected by the revocation. Please note, it is not possible to process your contact inquiry after revocation.

We will store your data until you request us to delete, revoke your consent or the purpose of storage is omitted (e.g. after processing of your inquiry has been concluded).  Mandatory legal provisions - in particular tax and commercial retention periods - remain unaffected.

Collection of data when subscribing to our newsletter

You have the opportunity to subscribe to our free newsletter on our website. Here, the data from the input mask is transmitted to us when registering for the newsletter.

(1)     name,
(2)     e-mail address,
(3)     gender.

You declare your consent for the data to be processed during the registration process. This data protection declaration is then referred to.

No data is disclosed to a third party in connection with the data processing for the newsletter mailings. The data is used explicitly for the newsletter mailing.

Article 6, clause 1, littera a General Data Protection Regulations (DSGVO) is the legal basis for processing of data after registering for the  newsletter by the user and after the user’s consent is  present.

The collection of the user’s e-mail address is used to deliver the newsletter. 

The data will be deleted as soon as it is no longer needed for the purpose of its collection. Therefore, the user’s data is stored as long as the newsletter subscription is active. 

The newsletter subscription can be cancelled by the concerned user at any time.  For this purpose there is a respective link in every newsletter. This also allows objection to the consent of storage of the personal data collected during the registration process.

Establishing a user’s account

On our website we offer users the opportunity to register by providing personal information. Here, the data is entered into an input mask and transmitted to us and stored.  Disclosure to a third party does not take place. The following data is collected in the course of the registration process:

(1)     gender, name, address,    
(2)     e-mail address,
The data you gave us voluntarily is also collected.

You declare your consent to data processing during the registration process. This data protection declaration is then referred to.

Article 6, clause 1, littera a General Data Protection Regulations (DSGVO) is the legal basis for processing after the user’s consent is present. If the registration serves the fulfillment of a contract, of which the user is a contractual party or is the implementation of pre-contractual measures, an additional legal basis for the processing of the data is article 6, clause 1, littera b General Data Protection Regulations (DSGVO).

By registering the user can centrally manage his orders using the online shop.

The data will be deleted as soon as it is no longer needed for the purpose of its collection. This is the case for the data collected during the registration process when the registration on our website is canceled or modified.

All users have the opportunity to cancel the registration at any time.  You can have your stored personal data amended resp. amend it yourself in your user’s account at any time.

Purchasing using our online shop

If you use the opportunity to place orders using our online shop, then we will collect, process and store the necessary personal data in the context of processing your order.  This especially consists of:

(1)     your name and address,
(2)     your delivery address,
(3)     your e-mail address.

Your data will be saved to process your order, for any future warranty claims, and for advertising purposes.

Legal basis for processing the data is article 6, clause 1, littera b General Data Protection Regulations (DSGVO). For the purpose of advertisement, the further legal basis is article 6, clause 1, littera f General Data Protection Regulations (DSGVO).

To process your order, we work together with service providers which support us in processing concluded contracts.  Specific personal data is transmitted to these service providers in accordance with the following information.

We transmit your name as well as your delivery address to the selected shipping partner, explicitly for the purpose of delivery.  
Payment information such as credit card numbers or bank details will not be collected or saved when making a payment. You only give these directly to the respective payment service provider specified in the order process.

The data will be deleted as soon as it is no longer needed for the purpose of its collection. This is the case for the processing of the contract when the contract obligations are fulfilled and warranty claims no longer exist. Mandatory legal provisions - in particular tax and commercial retention periods - remain unaffected. The data is stored for advertisement purposes until you object to the purpose of this usage.

Advertisement

Due to legal regulations (article 7, clause 3 Unfair Competition Law UWG) we are entitled to send you information about your own, similar goods and services to your e-mail address specified during a purchase even without your consent. You may opt out of your email address being used for this purpose at any time at no charge other than the base rates incurred for transmission.

Integration of the Trusted Shops Trustbadge

To show our ratings collected with Trusted Shops, the Trusted Shops Trustbadge is included on this website.

This serves to protect our legitimate interests, which predominate in the context of balancing interests of an optimal marketing of our offer. The Trustbadge and the related advertised services is an offer of the Trusted Shops GmbH, Subbelrather Str. 15C, 50823 Köln.

When accessing the Trustbadge, the webserver automatically stores so called server logfiles, which record the access and contain for example your IP-address, date and time of access, transferred volume of data and the requesting provider (access data).  The access data is not evaluated and is deleted at the latest seven days after you accessed the website.

Further personal data is only transferred to Trusted Shops, as far as you decide after the conclusion of an order for the use of Trusted Shops products or have already registered for the use. In this case, the contractual agreements concluded between you and Trusted Shops are valid.

Customer reviews of Trusted Shops

With your express consent, during or after placing your order, by ticking the respective box or clicking the designated button, your email address will be disclosed to Trusted Shops so you may receive a reminder email to rate your order or us through the Trusted Shops customer review system. In addition, if applicable, the shop URL, order number, and product descriptions and article numbers of the products ordered will be transmitted so you may then rate these where allowed. You may opt out of this for future transactions at any time.

Use of cookies

Our website uses cookies.  Cookies are text files which are stored in the internet browser resp. from the internet browser onto the user’s computer. When a user accesses a website, a cookie may be stored on the user's operating system. This cookie contains a characteristic string, that allows the browser to be uniquely identified when the website is reopened.

We use cookies to create a user friendly website. Some elements of our website require that the accessing browser can be identified even after the page has been changed. 

Here, the following data is stored and transmitted in the cookies:

(1)    language settings,
(2)    products in the shopping cart,     
(3)    log- in information.

Article 6, clause 1, littera f General Data Protection Regulations (DSGVO) is the legal basis for processing of personal data while using cookies.

The purpose of using technically needed cookies is to simplify the usage of websites for users. Some of our website features cannot be offered without the usage of cookies. Here, it is necessary that the browser is recognized after the page has been changed.
We require cookies for the following application:

(1)     shopping cart,
(2)     acceptance of language settings,
(3)     search term memory.

The user data collected through technically needed cookies will not be used to create user profiles.

Cookies are stored on the user’s computer and transmitted to us from this computer. Therefore, you as a user, have full control over the usage of cookies.  By changing the settings of your internet browser, you can deactivate or restrict the transmittance of cookies.  Already stored cookies can be deleted at any time.  This can take place automatically. If cookies are deactivated for our website, then possibly not all features of our website may be fully usable.

Usage of Criteo

Our website uses cookies resp. advertising IDs for the purpose of advertisement.  This enables us to show our ads to the users of partner websites and apps, who are interested in our products. Retargeting technology uses cookies or advertising IDs to show advertisements based on your browsing habits.

Cookies are stored in accordance with article 6, clause 1, littera f General Data Protection Regulations (DSGVO). We have a legitimate interest in the anonymous analysis of user behavior in order to optimize both our website and our advertising.
You can oppose to the data usage on this page by clicking the following link to opt out: Criteo privacy policy and opt out (https://www.criteo.com/de/privacy/). There you will also find additional information about Criteo technology.

Usage of Affilinet Cookies

This website participates in the affilinet partner program. To ensure sales and/or leads are recorded correctly, affilinet adds a cookie to the customer’s computer (user). This Cookie is added by the domain partners.webmaster-plan.com or banners.webmasterplan.com.

Affilinet Tracking Cookies do not save any personal information, but only the ID of the referring partner and the serial number of the advertisement (banner, text link, etc.) the user clicked on required for payment processing. When completing a transaction the partner ID is used to be able to match the commission with the referring partner.

The default settings of the internet browser will accept the cookies used by affilinet. If you do not wish to save these cookies, please block cookies from the respective domain on your internet browser.

Usage of Facebook Tracking-Pixels

This website uses the so called “Facebook-Pixel” of the social network Facebook which is operated by the Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA, resp. in case you are located within the EU, Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (“Facebook”).

With the help of the Facebook pixels, we can retrace the effectiveness of our Facebook ads, by seeing if users were redirected to our site after clicking on a Facebook ad (so called “Conversion”).

The data processing of Facebook takes place within the scope of the data use policy of Facebook: https://www.facebook.com/policy.php. You can find special information and details about the Facebook pixel and how it operates at the help section of Facebook: https://www.facebook.com/business/help/651294705016616.

You can object to the collection of data by the Facebook pixel. To set which types of ads are displayed within Facebook, you can go to the site provided by Facebook and follow the instructions on the user-based advertising settings: https://www.facebook.com/settings?tab=ads. The settings are platform independent; this means they are adopted for all devices, such as desktop computers or mobile devices.

The usage of pixels is based on the regulations of article 6, clause 1, littera f General Data Protection Regulations (DSGVO). The storage takes place without time limitations as far as you do not utilize your opt-out possibilities.

Usage of Google Analytics for web analyzation

This website uses Google Analytics, a web analyzation service of the Google LLC (“Google”).

Google Analytics uses so called “Cookies” text files which are stored on your computer and also enable analyzation of website usage. Usually the information created by the cookie regarding website usage is transmitted and stored on a Google server located in the USA. IP anonymization is activated on this website, so your IP address is shortened by Google beforehand within member states of the European Union or in other contracting states of the Agreement on the European Economic Area.

On behalf of the website operator, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide other services related to website activity and internet usage to the website operator. The IP-address provided by your browser within the scope of Google analytics is not merged with other Google files.  You may configure your browser settings to block Cookies; however, please note in this case you may not be able to make full use of all functions of this website.

In addition, you may prevent the collection by Google of the data generated by the cookie and related to your use of the website as well as the processing of this data by Google by downloading and installing the following browser plugin:  Browser-Plugin (http://tools.google.com/dlpage/gaoptout?hl=de).

The storage of Google Analytics Cookies is based on article 6, clause 1, littera f General Data Protection Regulations (DSGVO). The storage takes place without time limitations as far as you do not utilize your opt-out possibilities.

Usage of Google AdWords

We also use the Google advertising tool “Google AdWords”, to advertise for our website. In this context, on our website we use the analysis service "Conversion-Tracking" of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA, in the following mentioned as "Google". If you were redirected to our website by a Google ad, a Cookie will be added to your computer. Cookies are small text files your internet browser adds and saves to your computer. These so-called “conversion cookies” expire after 30 days and are not used for purposes of personal identification. If you visit certain pages of our website and the Cookie has not yet expired, we and Google are able to recognise that you as a user clicked our ad on Google and were redirected to our site.

The information collected with the help of “conversion cookies” allows Google to collect visitor statistics for our website. These statistics provide us with the total number of users who clicked on the ad, along with which page of our website the respective user then visited. However, we or other “Google AdWords” advertisers do not receive any information, which can be used to personally identify users.

Cookies are stored in accordance with article 6, clause 1, littera f General Data Protection Regulations (DSGVO). We have a legitimate interest in the anonymous analysis of user behavior in order to optimize both our website and our advertising.
You can prevent the installation of the “conversion cookies” using the respective setting in your browser, for instance via the browser setting, which generally deactivates cookies from being automatically added or which specifically blocks cookies for the “googleadservices.com” domain.

For the Google privacy policy please visit: https://www.google.de/policies/privacy/

Klarna

We have integrated the possibility to pay by using the services of Klarna on our website. This refers to the Klarna AB, Sveavägen 46, 111 34 Stockholm, Sweden (in the following mentioned as “Klarna”).

Klarna offers various payment possibilities (e.g. installment payments). As part of the check-out, we offer to use Klarna for payments, then Klarna will collect various personal data.  Details can be found under Klarna’s privacy policy using the following link: https://www.klarna.com/de/datenschutz/.

Your data is transmitted to Klarna on the basis of article 6, clause 1, littera a General Data Protection Regulations (DSGVO). You have the opportunity to revoke your consent to data processing at any time. Revocation does not affect the effectiveness of prior data processing operations.

Social Media

Facebook-Plugins (Like & Share-Button)

On our site, plugins of the social network Facebook are integrated, provider Facebook Inc., 1 Hacker Way, Menlo Park, California 94025, USA. You will recognize the Facebook plugins by the Facebook logo or the “Like-Button” on our site.  You can find a overview of Facebook plugins here: https://developers.facebook.com/docs/plugins/.

When you access our site, a direct connection is established by the plugin between your browser and the Facebook server.  As a result, Facebook receives the information that you visited our site with your IP address. If you click on the Facebook "Like-Button" while you are logged into your Facebook account, you can link the contents of our pages to your Facebook profile. Facebook can then assign the access to our site to your user account.  We would like to point out that we as the provider of the site are not aware of the content of the data transmitted as well as its use by Facebook. For more information, please see the Facebook’s privacy policy at: https://de-de.facebook.com/policy.php.

If you do not wish for Facebook to associate your visit to our site with your Facebook user account, please log out of your Facebook user account.

Google+ Plugin

Our sites uses features of Google+ Provider is the Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Collection and disclosure of information: With help of Google+ buttons, you can publish information globally. By using the Google+ buttons you and other users will receive personalized contents from Google and our partners. Google stores both the information that you entered for contents +1 as well as information about the site you viewed when you clicked +1. Your + 1 may appear alongside your profile name and photo in Google services, such as search results or in your Google profile, or elsewhere on websites and ads on the web.

Google records information concerning your +1 activities to improve the Google services for you and others.  To use the Google+ button, you need a globally visible, public Google profile that must contain at least the name chosen for the profile. This name is used in all Google services. In some cases, this name can replace another name, which you used as you shared contents using your Google account. The identity of your Google profile may be displayed to users who know your e-mail address or have other identifying information about you.

Usage of the collected information: In addition to the purposes of use as stated above, the information you provide will be used in accordance with the applicable Google privacy policy. Google may publish summarized statistics about users' + 1 activity or share it with users and partners, such as publishers, advertisers, or affiliate websites.

Our company is also active within social networks and other platforms, in order to interact with the users of these platforms. We inform these users about our range of products and services. These platforms are also operated by companies that are based outside of the European Union. As a result, users’ data could be processed outside of the territory of the European Union. For operators from the USA, the European Commission has issued an adequacy decision based on the basis of the privacy shield, assuming the respective operator is certified as such. Upon visiting social networks, user data can be collected and processed for market research and advertising purposes. This data enables the creation of user profiles on the basis of user behaviour and the resulting interests of users. These can in turn be used, for example, to place advertisements inside and outside the platforms that presumably correspond to the interests of the users. Cookies are generally used for these purposes, in which the user's usage behaviour and interests are stored. The processing of users' personal data is carried out on the basis of our legitimate interests in effective information and communication with users in accordance with Art. 6 Paragraph 1 (f) of the GDPR. If the users are requested by the respective providers of the platforms to consent to the aforementioned data processing, the legal basis for the processing is Art. 6 Paragraph 1 (a) GDPR. For a detailed description of the respective processing operations and the possibility to reject, you will find an overview of the individual providers below.


Facebook (Facebook, Inc., 1601 Willow Road, Menlo Park, CA 94025, USA):

Data processing is carried out on the basis of an agreement between jointly responsible parties pursuant to Art. 26 GDPR, which you can view here: https://www.facebook.com/legal/terms/page_controller_addendum
Facebook Privacy Policy: https://www.facebook.com/about/privacy/
Privacy Policy specifically for pages: https://www.facebook.com/legal/terms/information_about_page_insights_data
Opt-Out-Possibilities: https://www.facebook.com/settings?tab=ads
Privacy Shield-Certification: https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active


Google/ YouTube (Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA)

Privacy Policy: https://policies.google.com/privacy
Opt-Out-Possibility: https://adssettings.google.com/authenticated
Privacy Shield-Certification: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active


Instagram (Instagram Inc., 1601 Willow Road, Menlo Park, CA 94025, USA) Privacy Policy & Opt-Out: http://instagram.com/about/legal/privacy/


Twitter (Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA)

Privacy Policy: https://twitter.com/de/privacy
Opt-Out-Possbilities: https://twitter.com/personalization
Privacy Shield-Certification: https://www.privacyshield.gov/participant?id=a2zt0000000TORzAAO&status=Active


Your rights

At any time, you can exercise your right of information in accordance with article 15 General Data Protection Regulations (DSGVO), if we have processed your personal data.

At any time, you can exercise your right of rectification in accordance with article 16 General Data Protection Regulations (DSGVO) and request the correction of your incorrect personal data.

At any time, you can exercise your right of deletion in accordance with article 17 General Data Protection Regulations (DSGVO) and request that your personal data is deleted immediately if the data are no longer needed for the purposes for which they were collected or otherwise processed.

At any time, you can exercise your right to restriction of processing in accordance with article 18 General Data Protection Regulations (DSGVO) and to demand the restriction of the processing, provided that the legal requirements for this are given.

At any time, you can exercise your right of information in accordance with article 19 General Data Protection Regulations (DSGVO). If you have a right to rectifying, deleting or restricting the processing towards us, we are obliged to notify all recipients to whom your personal data has been disclosed of this correction or deletion of the data or restriction of processing, unless this proves to be impossible or involves a disproportionate effort. You have the right to be informed of these recipients.

At any time you can exercise your right of data transmission towards us in accordance with article 20 General Data Protection Regulations (DSGVO). You have the right to receive your personal information you have provided to us, in a structured, common and machine-readable format or to request transmission to another responsible party if technically feasible.

At any time, you can exercise your right to revoke your consent in accordance with article 7, clause 3 General Data Protection Regulations (DSGVO). You have the right to revoke your previously given consent to data processing at any time for the future.  In the case of objection we will delete the data concerned immediately, as far as the legal basis for further processing cannot be based on processing without consent. The legality of the data processing carried out until the revocation remains unaffected by the objection.

In the case of violations of data protection law, you have the right of appeal to the competent supervisory authority in accordance with article 77 General Data Protection Regulations (DSGVO). The competent supervisory authority for data protection issues is the state data protection officer of the federal state in which our company is located. A list of data protection officers and their contact details can be found at following link: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.

Newsletter