Data Protection

Table of Contents

I. General Information

II. Responsible Party

III. Your Rights

IV. Processing Of Personal Data for Informational Use Of Our Website

V. Processing Of Personal Data By Cookies

VI. Further Functions And Services Of Our Website

VII. Contacting Us

VIII. Registration

IX. Server Location

X. Purchase Or Order

XI. Payment Service Provider

XII. Merchandise Management And Fulfilment Service Providers

XIII. Transport And Logistics

XIV. Evaluation System

XV. Google Analytics

I. General Information

(1) In the following we inform you about the collection of personal data when using our website.

(2) The term "personal data", with reference to the definition in Art. 4 No. 1 of Regulation (EU) 2016/679 (hereinafter referred to as "Basic Data Protection Regulation" or "GDPR" for short), refers to all data that can be related to you personally. This includes, for example, name, address, e-mail address, user behavior. With regard to other terms, in particular the terms "processing", "responsible party", "processor" and "consent", we refer to the statutory data protection definitions of Art. 4 GDPR.

(3) On principle, we process personal data only to the extent necessary to provide a functional website and the contents and services offered by us. The processing of personal data is regularly only carried out if you have given us your consent within the meaning of Art. 6 para. 1 lit. a) GDPR or if processing is permitted by legal regulations, in particular by one of the legal bases mentioned in Art. 6 para. 1 lit. b) to f) GDPR.

(4) Your personal data will be deleted or blocked as soon as the purpose for which it was stored ceases to apply. A storage beyond that may take place if this was provided for by national or European regulations to which we are subject. In this case, the data will be blocked or deleted when the storage period prescribed by the respective regulations has expired. The latter does not apply if further storage of the data is necessary for the conclusion or performance of a contract.

(5) If we use contracted service providers for individual functions on our website or wish to use your data for advertising purposes, we will inform you in detail about the respective processes below.

II. Responsible Party

(1) Responsible in the sense of Art. 4 No. 7 GDPR, of other data protection laws applicable in the member states of the European Union, and of other legal requirements as well as regulations with data protection character:

THE FORCE CT GmbH

which in turn is represented by Tanja Reischl-Stenske, Christian Stenske

Wildstr. 20

89522 Heidenheim

Germany

Phone: +49 7321 7578150

Email: shop@the-force.org

Registernumber: HRB Ulm 735250

(2) You can find more details on the responsible party in our Legal Notice.

III. Your Rights

(1) You have the following rights in relation to the personal data concerning you:

· the right to information,

· the right to correction and deletion,

· the right to restriction of the processing of personal data,

· the right to object to the processing of personal data,

· the right to data transferability.

(2) You also have the right to complain to a data protection supervisory authority about the processing of your personal data by us.

IV. Processing of personal data for informational use of our website

(1) If you access our website without registering or otherwise providing us with information ("Informational Use"), we only collect the personal data that your web browser sends to our server. If you wish to view our website, we collect the following data, which is technically necessary for us to enable you to view our website and to ensure its stability and security: IP address, date and time of the request, time zone difference to GMT, content of the website, access status (HTTP status), amount of data transferred, request website, web browser, operating system, language and version of the browser

(2) The aforementioned data is also stored in so-called log files on our servers. This data is not stored together with other personal data of yours.

(3) The storage of the above-mentioned data in log files serves to ensure the functionality and optimization of our website and to ensure the security of our information technology systems.

(4) This data is not evaluated for marketing purposes. In the above-mentioned purposes lies our legitimate interest in data processing. The legal basis for the collection and temporary storage of the aforementioned data and log files is Art. 6 para. 1 p. 1 lit. f) GDPR. The aforementioned data for the provision of our website will be deleted when the respective session has ended. The collection of the above-mentioned data for the provision of our website is absolutely necessary for the operation of our website. There is no possibility of objection.

V. Processing of personal data by cookies

(1) We use so-called cookies on our website. Cookies are small text files which are stored on the storage medium of your terminal device, for example on a hard disk, and through which we, as the site that sets the cookie, receive certain information. Cookies cannot execute programs or transfer viruses to your terminal device. This website uses the following types of cookies, the scope and function of which are explained below.

(2) Cookies that are stored in association with your web browser:

· Transient Cookies: These cookies are automatically deleted when you close your web browser. These include in particular session cookies. These store a so-called session ID, which can be used to assign various requests from your web browser to the shared session. This enables us to recognize your terminal device when you return to our website. Session cookies are deleted as soon as you log out or close your web browser.

· Persistent cookies: These cookies are automatically deleted after a specified period of time, which may vary depending on the cookie. You can delete these cookies at any time in the settings of your web browser.

(3) The processing of personal data by the above-mentioned cookies serves to make the offer of our website altogether more user-friendly and effective for you. Some functions of our website cannot be offered without the use of these cookies. In particular, some functions of our website require that your web browser can still be identified after a page change. If you have an account, we use the cookies to identify you for subsequent visits. This prevents you from having to log in again each time you visit our website. The data processed by cookies are necessary for providing the functions of our website are not used to create user profiles. If cookies are used for analysis purposes, they serve to improve the quality and user-friendliness of our website, its content and functions. They enable us to understand how the website, which functions and how often they are used. This enables us to continuously optimize our services.

(4) Our legitimate interest in data processing lies in the above-mentioned purposes. The legal basis is Art. 6 para. 1 lit. f) GDPR.

(5) The above-mentioned cookies are stored on your terminal device and transmitted from it to our server. You can therefore configure the processing of data and information by cookies yourself. You can make appropriate configurations in the settings of your web browser, which allow you to reject third-party cookies or cookies altogether, for example. In this context, we would like to point out that you may then not be able to use all the functions of our website properly. In addition, we recommend that you delete cookies and your browser history on a regular basis.

I. further functions and services of our website

(1) In addition to the aforementioned informational use of our website, we offer various services which you can use if you are interested. For this purpose it is usually necessary to provide further personal data. We need these data to provide the respective service. The above-mentioned principles of data processing apply.

(2) In some cases, we use external service providers who have been carefully selected and commissioned by us to process this data. These service providers are bound by our instructions and are regularly checked by us.If personal data is passed on to third parties in the course of services that we offer together with partners, you can find more detailed information in the following descriptions of the individual services. If these third parties are located in a country outside the European Economic Area, you can find more detailed information about the consequences of this circumstance in the following descriptions of the individual services.

VII. Contacting Us

(1) If you contact us by e-mail, the personal data you send us with your e-mail will be stored.

(2) In addition, we provide a contact form on our website, which you can use to contact us. The data you enter in the input mask will be transmitted to us and stored: Salutation, first name, last name, e-mail address, address, telephone, subject, message.

(3) The data will be used exclusively to answer your questions. Unless explicitly stated in this privacy policy, the data will not be passed on to third parties. In addition, we record your IP address and the time of dispatch.

(4) The processing of the aforementioned personal data serves solely to process your inquiries.

(5) The processing of further personal data generated by using the contact form provided on our website serves to prevent misuse and to ensure the security of our information technology systems.

(6) This is also our legitimate interest in processing your personal data. If you have given us your consent for this, the legal basis for the processing of this data is Art. 6 para. 1 lit. a) GDPR. Otherwise, the legal basis for the processing of this data is Art. 6 para. 1 lit. f) GDPR, in particular in case you send us your data by e-mail. Insofar as you wish to work towards the conclusion of a contract through your e-mail, Art. 6 para. 1 lit. b) GDPR represents an additional legal basis.

(7) Subject to statutory retention periods, the data will be deleted as soon as we have conclusively processed your inquiry. If you contact us by e-mail, you can object to the storage of your personal data at any time. We would like to point out that in this case your request cannot be processed further. You can declare your revocation or objection by sending an e-mail to our e-mail address given in our legal notice.

VIII. Registration

(1) In order to use additional functions of our website, we offer the possibility to register, providing personal data. The data will be entered into an input mask, transmitted to us, and stored. The data will not be passed on to third parties. The mandatory information requested during registration is marked accordingly and must be provided in full. Otherwise we will refuse the registration. The following data is collected during the registration process: Salutation, first name, last name, e-mail address, address, telephone, password.

(2) At the time of registration, the IP address and the date and time of registration are also stored. As part of the registration process, the user's consent to the processing of this data is obtained.

(3) Registration is necessary for the provision of certain content and services on our website. We use the data entered for this purpose only for the purpose of using the respective offer or service or for providing the services for which you have registered. In the event of important changes to our offers, services or performances, for example regarding the scope of our services or in the event of technically necessary changes, we will use the e-mail address provided during registration to inform you of these changes. The legal basis for the processing of data is Art. 6 para. 1 sentence 1 lit. a) GDPR. Insofar as the registration serves the conclusion or execution of a contract, Art. 6 para. 1 sentence 1 lit. b) GDPR constitutes an additional legal basis.

(4) You may revoke any consent you have given at any time. The legality of the data processing already carried out remains unaffected by the revocation.

(5) The data will be deleted as soon as they are no longer necessary for the purpose of their collection. This is the case if the registration on our website is cancelled or changed. You have the possibility to cancel the registration at any time. You can have the data stored about you changed at any time. Legal retention periods remain unaffected.

(6) We only transfer personal data to third parties if this is necessary for the execution of the contract. Any further transmission of data will not take place or only if you have explicitly agreed to the transmission. Your data will not be passed on to third parties, for example for advertising purposes, without your explicit consent.

(7) If you have given us your consent, the legal basis for the processing of the data is Art. 6 Par. 1 S. 1 lit. a) GDPR. In all other respects the legal basis is Art. 6 para. 1 sentence 1 lit. b) GDPR.

IX. Server Location

We process and/or store your personal data on a server of an external provider in the European Union. This ensures that the standards and regulations of European data protection law are adhered to.

X. Purchase Or Order

(1) We offer you services on our website for payment. For this purpose we process personal data provided by you.

(2) The processing is carried out for the purpose of establishing and implementing a contractual relationship with you. If you have given us your consent for this, the legal basis for processing is Art. 6 Para. 1 S. 1 lit. a) GDPR. Otherwise, the legal basis for processing is Art. 6 para. 1 sentence 1 lit. b) GDPR.

(3) You may revoke any consent you have given at any time. You may object to the processing of your personal data at any time. We would like to point out, however, that without this data a conclusion of contract is not possible.

(4) The data will be deleted as soon as they are no longer required for the purpose of their collection. This is the case if we no longer require your personal data for the execution of the contractual relationship. We will not delete your personal data if we are obliged by law to continue storing your personal data.

(5) We offer you services on our website against payment without the need to register or create a customer account. For this purpose you must enter your personal data in an entry mask. This data is transmitted to us. Mandatory information is marked accordingly and must be entered in full. The following data will be collected: Salutation, first name, surname, e-mail address, postal address.

(6) In addition, the IP address and date and time are stored.

(7) The processing is carried out for the purpose of establishing and implementing a contractual relationship with you. If you have given us your consent, the legal basis for the processing is Art. 6 para. 1 p. 1 lit. a) GDPR. Otherwise, the legal basis for processing is Art. 6 para. 1 sentence 1 lit. b) GDPR.

(8) You may revoke any consent you have given at any time. You may object to the processing of your personal data at any time. We would like to point out, however, that without this data a conclusion of contract is not possible.

(9) The data will be deleted as soon as it is no longer required for the purpose of its collection. This is the case if we no longer require your personal data for the execution of the contractual relationship. We will not delete your personal data if we are obliged by law to continue storing your personal data.

XI. Payment Service Provider

(1) For the execution of the payment processing we transmit the payment data provided by you to PAYONE GmbH, Daniel-Goldbach-Str. 17 - 19, 40880 Ratingen, Germany.

(2) The transmission of the payment data as well as the processing by the aforementioned payment service provider(s) takes place for the purpose of payment processing. The use of external payment service providers enables us to offer you a selection of different payment methods and thus to make the types of payment processing more flexible for both you and us. This represents our legitimate interest. If you have given us your consent, the legal basis for the processing of data is Art. 6 para. 1 sentence 1 lit. a) GDPR. Insofar as the processing of the aforementioned data is carried out for the purpose of processing and implementing the contractual relationship, the legal basis is Art. 6 para. 1 sentence 1 lit. b) GDPR. Otherwise, the legal basis is Art. 6 para. 1 sentence 1 lit. f) GDPR.

(3) You may revoke any consent you have given at any time. You may object to the processing of your personal data at any time. We would like to point out, however, that without the transmission of payment data and/or processing by the payment service provider, none or at least not all payment methods can be made available to you and, if applicable, the execution of the contract is not possible.

(4) Your payment data will be transmitted to and processed on servers of our payment service provider in the European Union. This ensures that the standards and regulations of European data protection law are adhered to.

XII. Merchandise Management And Fulfilment Service Providers

(1) For the logistical processing of the contract and preparation of the shipment, if it applies, we will transfer the personal data you provide us with for this purpose, such as name and address, to MBE Heidenheim Bruchhäser Business-Services e.K., Bahnhofsplatz 11, 89518 Heidenheim, Germany.

(2) The transmission of this data and the processing by the merchandise management and/or fulfillment service provider is carried out for the purpose of the logistical processing of the contract and preparation for shipment. The use of external merchandise management and/or fulfillment service providers enables us to logistically handle and process your order. This represents our legitimate interest. If you have given us your consent, the legal basis for the processing of data is Art. 6 para. 1 p. 1 lit. a) GDPR. As far as the processing of the above mentioned data for the handling and execution of the contractual relationship takes place, the legal basis is Art. 6 para. 1 p. 1 lit. b) GDPR. Otherwise, the legal basis is Art. 6 para. 1 sentence 1 lit. f) GDPR.

(3) You may revoke any consent you have given at any time. You may object to the processing of your personal data at any time. We would like to point out, however, that without the transmission of this data and the processing by the merchandise management and/or fulfillment service provider(s), we will not be able to process your order of physical products logistically and therefore the execution of the contract will not be possible.

(4) Your data will be transferred to and processed on servers of our merchandise management and/or fulfillment service provider in the European Union. This ensures that the standards and regulations of European data protection law are adhered to.

XIII. Transport And Logistics

(1) For the logistical processing of the contract and for the shipment of physical products, we will transfer the necessary personal data provided by you for this purpose, such as name and address, to the transport and logistics service provider(s) commissioned by us with the shipment of the goods: DPD Deutschland GmbH, Wailandtstr. 1, 63741 Aschaffenburg, Germany.

(2) Contact data such as telephone number or e-mail will only be passed on if you have given us your consent.

(3) The transmission of this data to transport and logistics service providers is carried out for the purpose of the logistical processing of the contract and the shipment of the goods. The use of external transport and logistics service providers enables us to logistically handle and process your order. This is also where our legitimate interest lies. If you have given us your consent, the legal basis for processing the data is Art. 6 para. 1 p. 1 lit. a) GDPR. As far as the processing of the aforementioned data for the handling and execution of the contractual relationship takes place, the legal basis is Art. 6 para. 1 sentence 1 lit. b) GDPR. Otherwise, the legal basis is Art. 6 para. 1 sentence 1 lit. f) GDPR.

(4) You may revoke any consent you have given at any time. You may object to the processing of your personal data at any time. We would like to point out, however, that without the transmission of this data we cannot logistically process your order and therefore the execution of the contract is not possible.

(5) Your data will be transferred to servers of our transport and logistics service provider in the European Union and processed there. This ensures that the standards and regulations of European data protection law are adhered to.

XIV. Evaluation System

(1) We offer you the opportunity to rate your order. For this purpose, we use the technologiesprovided to us by Shopware. With your consent following your purchase, we transmit order data such as name, e-mail address, order number and article number to this service provider.

(2) The transmission and processing of the above data by the service provider is carried out for the purpose of enabling you to evaluate your order, to ensure the authenticity of a purchase evaluation, and to prevent cases of abuse. The processing of the above data is therefore also for quality assurance and optimization purposes. This is also where our legitimate interest lies. If you have given us your consent, the legal basis for processing the data is Art. 6 para. 1 p. 1 lit. a) GDPR. In all other respects the legal basis is Art. 6 para. 1 sentence 1 lit. f) GDPR.

(3) You may revoke any consent you have given at any time. You may object to the processing of your personal data at any time. We would like to point out, however, that you cannot use the evaluation system without processing this data.

(4) The data will be deleted as soon as it is no longer required for the purpose of its collection. This is the case if your rating is deleted.

XV. Google Analytics

Our website uses Google Analytics, a web analysis service provided by Ireland Limited, Google Building Gordon House, Barrow St, Dublin 4, Irland ("Google").

Google uses cookies, i.e. small text files that are stored on your terminal device and which enable an analysis of your use of our website. The information generated by the cookie about your use of our website is usually transferred to a Google server and stored there.

If anonymisation of the IP address to be transmitted by the cookie is activated on the website ("IP anonymisation"), your IP address will be shortened by Google within member states of the European Union or in other states which are party to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transferred to a Google server outside the EU and shortened there.

Google will use this information to evaluate your use of our website on our behalf, compile reports on website usage and provide other services to us in connection with website and Internet usage. Pseudonymous user profiles can be created from the processed data. The IP address transmitted when using Google Analytics is not merged with other data from Google.

We only use Google Analytics with the activated IP anonymization described above. This means that your IP address is only processed by Google in abbreviated form. A personal reference can thus be excluded.

We use Google Analytics for the purpose of analyzing the use of our website and to continuously improve individual functions and offers as well as the user experience. Through the statistical evaluation of user behavior, we can improve our offer and make it more interesting for you as a user. The legal basis is Art. 6 para. 1 sentence 1 lit. a) GDPR (consent).

You can also prevent the storage of cookies generated by Google Analytics by making the appropriate settings in your web browser. Please note that in this case you may not be able to use all the functions of our website. If you wish to prevent the collection of data generated by the cookie and related to your user behaviour (including your IP address) and the processing of this data by Google, you can also download and install the web browser plugin available under the following link: https://tools.google.com/dlpage/gaoptout.

In order to oblige Google to process the transmitted data only according to our instructions and to comply with the applicable data protection regulations, we have concluded a contract with Google.

Information provided by the third-party provider: Google Ireland Limited, Google Building Gordon House, Barrow St, Dublin 4, Ireland

Further information on data use by Google, on setting and objection possibilities as well as on data protection can be found on the following Google websites:

· Terms of use: https://marketingplatform.google.com/about/analytics/terms/de/

· Data protection overview: https://support.google.com/analytics/answer/6004245?hl=de&ref_topic=2919631

· Privacy policy: https://policies.google.com/privacy?hl=de&gl=de

· Data usage by Google when you use websites or apps of our partners: https://policies.google.com/technologies/partner-sites?hl=de

· Use of data for marketing purposes: https://policies.google.com/technologies/ads?hl=de

· Settings for personalized advertising by Google: https://adssettings.google.de

The data will be deleted as soon as it is no longer necessary for the purpose of its collection.

Deletion of user and event-level data associated with cookies, user IDs (e.g., User ID), and advertising IDs (e.g., DoubleClick cookies, Android Advertising ID, IDFA) will occur no later than 26 months after collection.

You can prevent the collection of your data by Google Analytics by clicking on the following link. An opt-out cookie will be set to prevent the collection of your information on future visits to this site: https://tools.google.com/dlpage/gaoptout/?hl=de

Data Security For Credit Card Payments

The transmission of your payment data is done via SSL (https) encryption.