When you visit our website, your IP address, beginning and end of session will be recorded for the duration of this session. This is technically conditioned and thus represents a legitimate interest within the meaning of Article 6 (1) (f) GDPR. Unless otherwise provided below, we do not process this data further.
If you contact us by means within a form on the website or by e-mail, your data will be stored to process the request and in case of follow-up questions. We will not share this information without your consent.
We point out that for the purpose of easier shopping and subsequent contract processing by the web shop operator in the context of cookies, the IP data of the connection owner are stored, as well as the name, address and credit card number of the buyer.
In addition, for the purpose of the contract, the following data is also saved: E-mail address, telephone number. The data provided by you are required to fulfill the contract or to carry out pre-contractual measures. Without this data we can not conclude the contract with you. A transfer of data to third parties does not take place, with the exception of the transmission of the credit card data to the processing bank / payment service provider for the purpose of debiting the purchase price, to the transport company / shipping company commissioned by us to deliver the goods and to our tax advisor to fulfill our tax obligations.
After termination of the shopping process, the data stored with us will be deleted. In the case of a contract, all data from the contractual relationship are stored until the expiry of the tax retention period (7 years). The data name, address, purchased goods and date of purchase are also stored until the end of product liability (10 years). The data processing takes place on the basis of the legal regulations of § 96 Abs. 3 TKG as well as of Art. 6 Abs. 1 lit a (Consent) and / or lit b (necessary for fulfillment of the contract) of the GDPR.
We will store your profile information in the app as long as you have an account with us. In addition, we only store data if required by law (due to warranty, statute of limitations or retention periods) or otherwise.
If you delete your account, all data that Crossbox Lap Timing stored will be deleted, with the following exceptions:
The tracks you have created
Data required to fulfill contractual obligations or to comply with Crossbox’s statutory retention requirements will not be deleted, but minimized to the extent necessary.
A delete assignment has no effect on the data if storage is legally necessary.
During order processing, your personal data is encrypted via 128 bit SSL v3, RSA with 1024 Bit. Credit card data is not stored but directly collected and processed from our payment services provider PAYONE GmbH & Co. KG.
We employ technical and organisational measures in order to safeguard our website and other systems against loss, destruction, access, changes or the distribution of your data by unauthorised persons. The access to your customer account is possible only after input of your personal password. We ask you to handle your login data with care and close the browser window after you are finished with the communication, especially when using the computer together with others.
To manage the cookies and similar technologies used (tracking pixels, web beacons, etc.) and related consents, we use the consent tool “Real Cookie Banner”. Details on how “Real Cookie Banner” works can be found at <a href=”https://devowl.io/rcb/data-processing/” rel=”noreferrer” target=”_blank”>https://devowl.io/rcb/data-processing/</a>.
The legal bases for the processing of personal data in this context are Art. 6 (1) lit. c GDPR and Art. 6 (1) lit. f GDPR. Our legitimate interest is the management of the cookies and similar technologies used and the related consents.
The provision of personal data is neither contractually required nor necessary for the conclusion of a contract. You are not obliged to provide the personal data. If you do not provide the personal data, we will not be able to manage your consents.
Use of Google Analytics
We use Google Analytics to analyze website usage. The resulting data is used to optimize our website and advertising. Google Analytics is a web analytics service operated and provided by Google Inc. (1600 Amphitheater Parkway, Mountain View, CA 94043, United States). Google processes the website usage data on our behalf and is contractually committed to taking steps to ensure the confidentiality of the processed data. The data is transmitted to a Google server in the USA. Google complies with the data protection provisions of the EU-US Privacy Shield Agreement. Google Analytics stores cookies in your web browser for a period of two years since your last visit. These cookies contain a randomly generated user ID that will allow you to be recognized during future website visits.
Facebook Custom Audiences
We use the remarketing function “Custom Audiences from your Website” from Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA (“Facebook”). We have included the so-called “Facebook-Pixel” on our website for this purpose. When you visit our website, the Facebook-Pixel creates a connection between your browser and the Facebook server and sets a cookie. Thus, Facebook receives the information that our website has been visited by your IP address. In case that you are a member of Facebook, Facebook can connect this information – unless you have disabled the function in the privacy settings of your Facebook profile – with your Facebook profile and use it for targeted ads through Facebook Ads. Detailed information about the collection and use of your data through Facebook and your rights and possibilities in regards to this can be found in the data protection information from Facebook at the URL https://www.facebook.com/about/privacy/.
Youtube Video Plugins
We implement Videos from Youtube in our website. This content is provided by Google LLC (“provider”). YouTube is a service from Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA („Google“).
The extended data protection is activated for all YouTube videos that are integrated on our website. This means that no information about you is collected and saved by YouTube unless you play the video. The integration of videos serves to protect our, within the framework of balancing interests predominant, legitimate interests in optimally marketing our offers according to art. 6 par. 1 p. 1 lit. f GDPR. Purpose and scope of the data collected and the further processing and use by the provider as well as your rights concerning this matter. More information of Google can be found here: https://developers.google.com/+/web/buttons-policy.
You are able to subscribe to our newsletter via our website. For this, we need your e-mail address and your declaration that you agree to receive the newsletter.
Once you have signed up for the newsletter, we will send you a confirmation email with a link to confirm your registration.
You can cancel the subscription to the newsletter at any time. Please send us your cancellation to the following e-mail address: firstname.lastname@example.org. We will immediately delete your data in connection with the newsletter dispatch. This revocation shall not affect the legality of the processing effected on the basis of the consent until the revocation.
Identity data: First and last name, date of birth, e-mail address, gender, profile picture, social media identification and information forwarded to us via your Facebook account, as well as the fingerprint of your device. We use this information to verify your identity.
Contact details: Your phone number, delivery and billing address, email address, messenger ID, social media handle, other communication channels you used to request more information from us. We use this information to contact you for various reasons, depending on the purpose.
Location information: Your place of residence, the place you’re logging in from [IP address] and / or GPS location or other location data (such as Wi-Fi or Bluetooth) or the Crossbox Lap Timing website that you visited and that could give us a hint about your location.
Purchase information: Payment service provider, duration of your Crossbox subscription, price, currency, VAT (based on country-specific information). We use payment service providers to process payments. Even if we do not save credit card information ourselves, we store a payment number that the respective service provider assigns (eg Apple, Google, PayPal) and which can be assigned to you. We use this information to process your payments.
Community Information: Information about friends in the Crossbox app, such as photos, feedback, leaderboards, and registration details.
Social Media Information: Information we receive through your interaction with us on various social media such as Facebook or Instagram, including any social media information that is publicly available, such as your social media handles, social media interactions and public postings, your “likes” and other responses, your social media contacts, your photos that have been posted or that you send to us by mentioning us or using our “social media” posts via “Handles” or ” Hashtags “. We receive this information from social networks (eg, Facebook, Instagram, etc.), either directly or through third party agencies with whom we have agreements.
Device Information: Information about your device or browser that gives us an idea of your search behavior or device usage. Your device information is collected through our app and your browser information through our cookies, tags, and pixels. These are often needed for network security. This information includes, for example: IP address, date and time of the visit, how long you stayed on our website, the amount of data transferred, the referrer URL (if you came to our website through another website or ad), the pages visited on our website, your browser type (including the language and version of the browser software) and add-ons, device IDs and functions, device type, versions and operating system.
Activity Information: Training data, sensor data (eg, heart rate, pace, duration, distance, speed, jump distance/height, and other data (eg, tracks and photos, including location data) related to your app.) We use this information to operate and maintain our product to improve your user experience
Registration via Facebook
If you set up a crossbox account via login to Facebook, we get the following information:
Facebook Inc. (1601 South California Avenue, Palo Alto, CA 94304, USA, “Facebook”): first and last name, email address, gender, date of birth, profile picture
Facebook friends list
We’ll get information about your friends on Facebook if you explicitly allow us to access it. We use this information to make friend’s suggestions in the app, but we do not store them.
Profile: By default, your profile is visible to your friends on Crossbox. That means, as you add friends, these people can see your profile and your analyzed race data. Keep in mind that your first name, last name and profile picture are always visible to all. This is necessary for others to send you a friend request.
Tracks: When you create a new track, it will automatically be shown to other users. You can always disable this in your privacy/track settings.
Rankings: When you record a session, you automatically appear in the track leaderboard, which contains your fastest lap time. You can always disable this in your privacy/track settings.
LIVE Run: Our product includes a “LIVE Run” feature that allows others to see your lap and section times, including heart rate. By activating the feature, you take responsibility for activation at your own risk. If you do not want to give third parties access to your training tracks and data, you should not use the live run.
Heart rate: Personal health information collected and stored by Crossbox and subsequently shared by the user via the heart rate monitor may not be protected by the American Health Insurance Portability and Accountability Act (HIPAA).
You have the right for information, correction, deletion, restriction, data portability, revocation and objection regarding your stored data. If you believe that the processing of your data violates data protection law or your privacy claims have otherwise been violated in any way, you can complain to us at email@example.com or the Data Protection Authority.
You can reach us under the following contact details:
CrossBox Lap Timing e.U.
Last updated: February 2020
DON'T MISS AN UPDATE!
Receive the latest Crossbox News and special deals.
No spam, promise!
Receive the latest Crossbox News and special deals.No spam, promise!