Política de privacidad
Effective: May 2025
EVOC SPORTS GmbH respects your privacy and is committed to fair and transparent handling of your personal data. In this privacy notice, we explain how we collect, store, protect, and eventually delete your personal data in compliance with applicable data protection regulations, including the European General Data Protection Regulation (GDPR) and the German Telecommunications Telemedia Data Protection Act (TTDSG). This privacy policy applies in particular to our website and Shopify webshop. You can access this statement at any time via our homepage or in the footer of every subpage.
1. CONTROLLER CONTACT DETAILS
EVOC SPORTS GmbH
Tegernseer Landstraße 37a
D-81541 Munich, Germany
Phone: +49 89 54041140
Email: info@evocsports.com
Website: www.evocsports.com
2. DATA PROCESSING WHEN VISITING OUR WEBSITE
When you visit and use our website, we collect the personal data that your browser automatically sends to our server. This information is stored temporarily in a log file. When you use our website, we collect the following data which we require for technical reasons so that we can display our website to you and ensure its stability and security:
(1) information about the browser type, the version used and the language and version of the browser software: this is for analytical purposes to ensure optimum presentation of our websites;
(2) the operating system and its interface: this is for analytical purposes to ensure optimum presentation of our websites;
(3) the internet service provider: this is for analytical purposes to ensure optimum presentation of our websites;
(4) the IP address so that our website can be shown when accessed;
(5) date and time of access and the time zone difference in relation to GMT, content of the request, access status and respective volume of data transmitted, in order to ensure the smooth operation of our offer;
(6) website from which the request is made;
(7) clickstream data (i.e. the pages you access, the links you click on and other actions relating to EVOC websites) and product information.
Legal basis:
The legal basis for the temporary storage of the data and log files is Article 6(1)(f) GDPR. We collect this data in order to be able to show you our website and to ensure the security of our IT systems. Collection of this data is necessary for the operation of our website.
Retention period:
As soon as this data is no longer necessary for the purpose of displaying the website, it is erased. The recording of data in order to make the website available and the storage of data in log files is absolutely necessary for the operation of the website. Consequently, users do not have the option of objecting to this. More extensive storage may occur in a specific case where provided for by law.
3. CONTACT VIA FORM OR EMAIL
Nature and scope of data processing
On our website we offer you the possibility of contacting us using a form provided for this purpose. During the process of sending your inquiry via the contact form, reference is made to this privacy statement in order to obtain your consent. If you make use of the contact form, the following personal data concerning you will be processed:
Your name, email address, subject line and message. If the inquiry is in relation to a warranty, specifically an inquiry regarding FREE PROTECTOR CRASH REPLACEMENT, the following additional data is requested: postal address, post code, town, telephone number, country, body size.
When you send your message, the following data is also stored:
your IP address, and date and time the message is sent. Alternatively, you can contact us using the email address provided. In that case, the user’s personal data sent with the email is saved.
The processing of personal data from the input mask is for the sole purpose of handling the contact request. Similarly, if you get in touch by email, the required legitimate interest in processing the data is also met. The rest of the personal data processed during the sending procedure serves to prevent misuse of the contact form and to ensure the security of our IT systems. The data is not passed on to third parties during this process. The data is used exclusively to process the conversation.
Legal basis for data processing
The legal basis for collecting and sending a contact inquiry is Article 6(1)(b) and (f) GDPR. The legal basis for processing your Personal Data is Article 6(1)(a) when you provided us with your consent.
Retention period
The data is erased as soon as it is no longer required in order to fulfil the purpose for which it was collected. This is the case with the personal data from the input mask of the contact form and data sent by email once the conversation with the user has ended. The conversation has ended when it can be assumed from the circumstances that the relevant situation has been definitively resolved. The additional personal data collected during the sending procedure is erased after seven days at the latest.
4. SHOPIFY SHOP PLATFORM
Our website is hosted via Shopify. The provider is Shopify International Ltd., Dublin, Ireland. Shopify provides infrastructure, manages order and payment processing, and acts as a data processor under Art. 28 GDPR.
More information: https://www.shopify.com/legal/privacy
5. CONSENT MANAGEMENT WITH PANDECTES GDPR
When first visiting our site, you can manage your cookie and data processing preferences via the Pandectes GDPR consent tool. Your decision is stored and can be changed at any time.
Provider: Pandectes Ltd., Cyprus
Privacy Policy: https://www.pandectes.io/privacy-policy/
6. THIRD-PARTY SERVICES AND TOOLS
We use the following services based on your consent or legitimate interests:
6.1 Meta (Facebook & Instagram)
Use of Meta Pixel for reach measurement and targeted advertising.
https://www.facebook.com/privacy/policy
6.2 Google (Analytics, Ads, YouTube)
Analytics and video embedding, advertising activities.
https://policies.google.com/privacy
6.3 Klaviyo
Email newsletter and campaign tracking.
https://www.klaviyo.com/legal/privacy
6.4 Zendesk
Customer service tool (chat and support).
https://www.zendesk.com/company/agreements-and-terms/privacy-notice/
6.5 8returns
Return handling (address and order data).
https://www.8returns.com/privacy-policy
6.6 Flowbox
Display of user-generated content from social media.
https://getflowbox.com/privacy-policy/
6.7 MAPPY Store Locator
Enables dealer search based on user location. Data only processed with consent.
6.8 Rechnungsprinter Pro
Invoice generation and DATEV export (name, address, order data).
6.9 ShipZip & Shipfy
Logic-based shipping options based on user input.
7. COOKIES AND SIMILAR TECHNOLOGIES
Our website uses cookies. Cookies are text files stored in the user’s internet browser and/or by the internet browser on the user’s computer system. When a user visits a website, a cookie may be stored on the user’s operating system. This cookie contains a characteristic sequence of signs which enables the browser to be clearly identified when it accesses the website again.
We use different types of cookies on the website. These cookies serve different purposes. According to their purpose, cookies may generally be assigned to one of the following categories:
“Strictly Necessary Cookies”, i.e. cookies that are strictly necessary for your shopping and your visit on our website;
“Functional Cookies”, i.e. cookies that enable you to move around our website and use its features, record information about choices that you have made, and tailor the Website to your needs. Without these cookies, we will not be able to provide certain features, such as remembering details you entered and saving your preferred language; and
“Analytical Cookies”, i.e. analytics/statistical cookies that help to improve the performance of our website, and to provide a better user experience. Via Analytical Cookies, we obtain information about the quality and/or effectiveness of our services. It helps us to understand how our visitors use our website, which enables us to improve how we present our content to you.
We employ cookies in order to make the design of our EVOC website more user-friendly. Some elements in our website require that the accessing browser can be identified even after changing page.
a) Strictly Necessary Cookies
Legal basis
Strictly Necessary Cookies will be set by us on your device without us explicitly asking for your consent. The legal basis for processing of personal data using cookies is Article 6(1)(f) GDPR.
Retention period
Cookies are stored on your computer, from where they are sent to us. Therefore, you as user also have complete control over the use of cookies. By changing the settings of your internet browser, you can block or limit the transmission of cookies. Cookies that have already been stored can be deleted at any time. This can also be done automatically. If cookies are blocked for our website, it is possible that not all of the website’s functions can continue to be used in full.
Objection and elimination options
Not all functions of the website can be used without these cookies. If you do not accept the use of Strictly Necessary Cookies, please disable cookies or refrain from visiting our website. You can block the cookies in your browser settings. There are no further possibilities of objection.
b) Analytical Cookies
We further use analytical cookies which allow us to analyse the use of our website by the visitors.The following data can be transmitted in this way:
Data and purpose of processing:
(1) search term entered
(2) frequency of site visits
(3) use of website functions
Analysis cookies are used for the purpose of improving the quality and content of our website. From the analysis cookies we can find out how the website is used and thus constantly optimise our offer. The user data collected in this way is pseudonymised by technical means. Consequently, it is not possible to match the data to the accessing user. The data is not stored together with other personal data of the user. When visiting our website, an info banner informs users of the use of cookies for analytical purposes and refers them to this privacy statement. Users are also informed about how to prevent the storage of cookies in their browser settings.
Legal basis
We collect and process the data based on your consent pursuant to Article 6(1)(a) GDPR.
Retention period
The data will be used until you withdraw your consent. Cookies are stored on the user’s computer, from where they are sent to our website. Therefore, you as user also have complete control over the use of cookies. By changing the settings of your internet browser, you can block or limit the transmission of cookies. Cookies that have already been stored can be deleted at any time.
Objection and elimination options
You may withdraw your consent at any time. By changing the settings of your internet browser, you can block or limit the transmission of cookies and also delete cookies that have been stored.
8. NEWSLETTER
In order to be able to subscribe to our e-mail newsletter, we need your e-mail address where the newsletter is to be sent. You are completely free to decide whether you communicate these data to us. However, without this information, we might not be able to send our newsletter to you. If you subscribe to the newsletter, your e-mail address will be used for our own advertising purposes until you unsubscribe from the newsletter. In order to unsubscribe, you can carry out a cancellation via the link on our website. Your data are stored as long as you subscribe to the newsletter. After unsubscribing from the newsletter, your data are erased. Further storage can take place in individual cases if required by law.
Legal basis
The legal basis for processing the data after subscription to the newsletter by the user upon consent of the user is Art. 6 para. 1 lit. a of the GDPR.
Processor
Klaviyo (see Section 6.3)
9. YOUR RIGHTS
If your personal data is processed, you are a data subject within the meaning of the GDPR and have the following rights with respect to the controller:
Right to information
You may request from the controller confirmation as to whether or not we are processing personal data concerning you. If this is the case, you may request from the controller access to the following information:
(1) the purposes for which the personal data is processed;
(2) the categories of personal data processed;
(3) the recipients or categories of recipient to whom the personal data concerning you have been or will be disclosed;
(4) the envisaged period for which the personal data concerning you will be stored, or, if specific information about this is not possible, the criteria used to determine that period;
(5) the existence of the right to request from the controller rectification or erasure of personal data concerning you or the right to restrict personal data concerning you or to object to such processing;
(6) the right to lodge a complaint with a supervisory authority;
(7) where the personal data is not collected from the data subject, any available information as to its source;
(8) the existence of automated decision-making, including profiling, referred to in Article 22(1) and (4) GDPR and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject.
You have the right to request information about whether or not personal data concerning you is sent to third countries or international organisations. In relation to the transfer, you may request to be informed of the appropriate safeguards pursuant to Article 46 GDPR.
Right of rectification
You have the right to obtain from the controller rectification and/or completion where the personal data processed concerning you is inaccurate or incomplete. The controller must undertake the rectification without undue delay.
Right to restriction of processing
Subject to the following conditions, you may request restriction of the processing of the personal data concerning you:
(1) if you contest the accuracy of the personal data concerning you, for a period enabling the controller to verify the accuracy of the personal data;
(2) if the processing is unlawful and you oppose the erasure of the personal data and request the restriction of their use instead;
(3) if the controller no longer needs the personal data for the purposes of the processing, but you require the data for the establishment, exercise or defence of legal claims; or
(4) if you have objected to processing pursuant to Article 21(1) GDPR and it has not yet been verified whether the legitimate grounds of the controller override your grounds.
Where processing of the personal data concerning you has been restricted, with the exception of storage, such data will only be processed, with your consent, for the establishment, exercise or defence of legal claims, for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State. Where processing has been restricted in accordance with the above conditions, you will be informed by the controller before the restriction on processing is lifted.
Right to erasure
a) Obligation to erase
You may request that the controller erase personal data concerning you without undue delay and the controller will be obliged to erase this data without undue delay where one of the following grounds applies:
(1) The personal data concerning you is no longer necessary in relation to the purposes for which it was collected or otherwise processed.
(2) You withdraw the consent on which the processing is based according to point (a) of Article 6(1), or point (a) of Article 9(2) GDPR, and where there is no other legal ground for the processing.
(3) You object to the processing pursuant to Article 21(1) GDPR and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Article 21(2) GDPR.
(4) The personal data concerning you was unlawfully processed.
(5) The personal data concerning you has to be erased to ensure compliance with a legal obligation in Union or Member State law to which the controller is subject.
(6) The personal data concerning you was collected in relation to the offer of information-society services referred to in Article 8(1) GDPR.
b) Information to third parties
Where the controller has made personal data concerning you public and is obliged pursuant to Article 17(1) GDPR to erase the personal data, the controller, taking account of available technology and the cost of implementation, shall take reasonable steps, including technical measures, to inform controllers which are processing the personal data that you, as the data subject, have requested the erasure by such controllers of any links to, or copy or replication of, those personal data.
c) Exceptions
There will be no right to erasure where the processing is necessary
(1) for exercising the right of freedom of expression and information;
(2) for compliance with a legal obligation which requires processing by Union or Member State law to which the controller is subject or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
(3) for reasons of public interest in the area of public health in accordance with points (h) and (i) of Article 9(2) as well as Article 9(3) GDPR;
(4) for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes in accordance with Article 89(1) GDPR in so far as the right referred to in part (a) is likely to render impossible or seriously impair the achievement of the objectives of that processing; or
(5) for the establishment, exercise or defence of legal claims.
Right of notification
Where you have exercised your right of rectification, erasure or restriction of processing to the controller, the controller is under an obligation to communicate any rectification or erasure of data or restriction of processing to each recipient to whom the personal data concerning you have been disclosed, unless this proves impossible or involves disproportionate effort. You have the right to be informed about these recipients by the controller
Right to data portability
You have the right to receive the personal data concerning you, which you provided to a controller, in a structured, commonly used and machine-readable format. You also have the right to transmit those data to another controller without hindrance from the controller to which the personal data have been provided, where
(1) the processing is based on consent pursuant to point (a) of Article 6(1) GDPR or point (a) of Article 9(2) GDPR or on a contract pursuant to point (b) of Article 6(1) GDPR; and
(2) the processing is carried out by automated means.
In exercising this right, you also have the right to have the personal data concerning you transmitted directly from one controller to another, where technically feasible. This may not adversely affect the freedoms and rights of other persons. The right to data portability does not apply to processing of personal data necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.
Right to object
You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on point (e) or (f) of Article 6(1) GDPR, including profiling based on those provisions. The controller may no longer process the personal data concerning you unless the controller demonstrates compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defence of legal claims. Where personal data concerning you are processed for direct marketing purposes, you have the right to object at any time to processing of personal data concerning you for such marketing. This also applies to profiling, to the extent that it is related to such direct marketing. Where you object to processing for direct marketing purposes, the personal data concerning you will no longer be processed for such purposes. In the context of the use of information-society services, and notwithstanding Directive 2002/58/EC, you have the option of exercising your right to object by automated means using technical specifications.
Right to withdraw the data protection declaration of consent
You have the right to withdraw your data protection declaration of consent at any time. The withdrawal of consent will not affect the lawfulness of processing based on consent before its withdrawal.
Automated decision-making in individual cases, including profiling
You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or significantly affects you in some similar way. This does not apply if the decision:
(1) is necessary for the entry into, or performance of, a contract between you and a data controller;
(2) is authorised by Union or Member State law to which the controller is subject and which also lays down suitable measures to safeguard your rights and freedoms and legitimate interests; or
(3) is based on your explicit consent.
However, these decisions must not be based on special categories of personal data referred to in Article 9(1) GDPR, unless point (a) or (g) of Article 9(2) applies and suitable measures to safeguard your rights and freedoms and legitimate interests are in place.
With regard to the cases referred to points (1) and (3), the data controller shall implement suitable measures to safeguard your rights and freedoms and legitimate interests, including at least the right to obtain human intervention from the controller, to express your point of view and to contest the decision.
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or the place of the alleged infringement if you consider that the processing of personal data relating to you infringes the GDPR. The supervisory authority with which the complaint has been lodged shall inform the complainant of the progress and outcome of the complaint including the possibility of a judicial remedy pursuant to Article 78 GDPR.
Right to lodge a complaint with a supervisory authority
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or the place of the alleged infringement if you consider that the processing of personal data relating to you infringes the GDPR. The supervisory authority with which the complaint has been lodged shall inform the complainant of the progress and outcome of the complaint including the possibility of a judicial remedy pursuant to Article 78 GDPR.
EVOC APP (COMMUTE A.I.R. PRO)
WHAT DATA DO WE COLLECT?
We collect personal information that you voluntarily provide to us when you register with the Services, express an interest in receiving information about us or our products and services, when you participate in activities on the Services, or when you otherwise contact us. The personal information we collect may include:
- Names
- e-mail addresses
- mailing addresses
- Application Data.
When you use our application(s), we may also collect the following information if you give us access or permission to:
Mobile Device Access. We may request access or permission to certain features of your mobile device, including Bluetooth, memory, and other features of your mobile device. If you want to change our access or permissions, you can do so in your device's settings.
Mobile device data. We automatically collect device information (such as 1D, model, and manufacturer of your mobile device), operating system, version information, and system configuration information, device and application identification numbers
Push Notifications. We may ask you to send push notifications about your account or certain features of the application(s). You can disable them in the settings of your device. This information is primarily needed to maintain the security and operation of our Application(s), to troubleshoot issues, and to provide internal analysis and reporting. Any personal information you provide to us must be true, complete and accurate, and you must notify us of any changes to such personal information.
HOW DO WE PROCESS YOUR INFORMATION?
We process your information to provide, improve and administer our services, to communicate with you, to prevent security and fraud, and to comply with legal requirements. We may also process your information for other purposes with your consent. We process your personal information for a variety of reasons depending on how you interact with our Services, including;
To facilitate user account creation and authentication and to otherwise manage user accounts. We may process your information to allow you to create and log in to your account.
To enable the provision of services to the user.
We may process your information to provide you with the requested services.
Retention Period
We will retain your personal information only for as long as is necessary for the purposes stated in this Privacy Policy, unless a longer retention period is required or permitted by law (such as accounting or other legal requirements).
App Provider
Provider of the APP is EVOC SPORTS GmbH in cooperation with MINERVA AS GmbH.