Privacy Policy

This translation is provided solely for your convenience and is not legally binding. In the event of any discrepancy or dispute, only the original German version shall prevail.

1. Controller

The controller responsible for data processing on this website and in our online shop is:

TK Sports GmbH
Gutenbergstraße 23–25
68167 Mannheim
Germany

Represented by: Axel Schröder
Email: info@tk-sports.eu
Phone: +49 (0)621 84230-0

We have not appointed a data protection officer, as we are not legally required to do so. For any questions regarding data protection, please contact us using the details above.

2. Overview and legal bases

We process personal data only where a legal basis under the General Data Protection Regulation (GDPR) or the German Federal Data Protection Act (BDSG) permits it. For each processing activity, this policy states the relevant legal basis. The following legal bases may apply:

• Art. 6(1)(a) GDPR – your consent, e.g. for the newsletter and for analytics and marketing cookies
• Art. 6(1)(b) GDPR – performance of a contract or pre-contractual measures, e.g. your order
• Art. 6(1)(c) GDPR – legal obligations, e.g. retention obligations under commercial and tax law
• Art. 6(1)(f) GDPR – our legitimate interests, e.g. the secure and stable operation of this website

Under Section 25(1) of the German Telecommunications Digital Services Data Protection Act (TDDDG), information is stored on or accessed from your device (e.g. cookies) only with your consent. This does not apply to cookies that are strictly necessary for the service you have requested (Section 25(2) TDDDG).

You may withdraw your consent at any time with effect for the future. Processing carried out before the withdrawal remains lawful. We do not sell or rent your data.

3. Hosting and server log files

Our website is hosted by ALL-INKL.COM, Bautzener Str. 56, 02742 Neusalza-Spremberg, Germany. The host processes data exclusively on our behalf and on servers within the EU. We have concluded a data processing agreement with the host pursuant to Art. 28 GDPR.

Each time our website is accessed, the server automatically records the following data:

• IP address
• date and time of access
• page or file accessed
• referrer URL (the previously visited page)
• browser and operating system used

We need this data to deliver the website and to ensure its security and stability, e.g. to fend off attacks. The legal basis is Art. 6(1)(f) GDPR. Log files are deleted after 30 days unless they are needed for longer to investigate a security incident.

4. Orders and customer account

Orders. When you place an order with us, we process the data we need for the contract:

• name
• billing and delivery address
• email address
• phone number
• items ordered and payment method

Mandatory fields are marked in the order form. Without this information we cannot process your order. We use the data to perform the contract, to inform you about the status of your order or enquiry and to handle your warranty rights. The legal basis is Art. 6(1)(b) GDPR. We transfer the order data to our enterprise resource planning system for accounting purposes.

Customer account. You may choose to create a customer account. In it we store your login details, addresses and previous orders so that you can order faster in future and view your orders. The legal basis is Art. 6(1)(b) GDPR. You can have your customer account deleted at any time, e.g. by email to info@tk-sports.eu. Statutory retention obligations remain unaffected.

Order history of registered customers. We analyse the purchase history of registered customers in order to improve our product range and offers. The legal basis is our legitimate interest in improving our offering (Art. 6(1)(f) GDPR). You may object to this at any time (see Section 15).

5. Payment service providers

We do not collect or store credit or debit card data ourselves. Card payments and other online payments are processed directly by the payment service providers named below, which are PCI DSS certified. We pass on to them the data required for the payment, e.g. name, address, email address and invoice amount. The legal basis is Art. 6(1)(b) GDPR. The payment service providers are themselves responsible for their processing.

Payment in advance. If you pay in advance, we process the payment data we receive from our bank (name, bank details, amount, payment reference) in order to match your payment to your order.

PayPal. The provider is PayPal (Europe) S.à r.l. et Cie, S.C.A., 22–24 Boulevard Royal, L-2449 Luxembourg. PayPal may also transfer data to PayPal group companies outside the EU. Further information: PayPal Privacy Statement.

Klarna. The provider is Klarna Bank AB (publ), Sveavägen 46, 111 34 Stockholm, Sweden. For purchases on invoice and instalment purchases, Klarna checks your identity and creditworthiness and may involve credit reference agencies for this purpose. Further information: Klarna privacy notice.

6. Shipping

For delivery, we pass on your name and delivery address to DHL Paket GmbH, Sträßchensweg 10, 53113 Bonn, Germany. The legal basis is Art. 6(1)(b) GDPR.

We pass on your email address and, where applicable, your phone number to DHL only if you have expressly consented to this during the ordering process. DHL uses this information to notify you of the delivery date and to coordinate delivery. The legal basis is Art. 6(1)(a) GDPR. You may withdraw this consent at any time by notifying us or DHL.

If you collect your order from our shop, we use your phone number or email address to arrange a collection appointment with you.

7. Contacting us

If you contact us via the contact form, by email or by phone, we process your details (e.g. name, email address, your message) in order to answer your enquiry. The contact form is operated with WooCommerce, and the data is stored on our server.

If your enquiry relates to an order or a contract, the legal basis is Art. 6(1)(b) GDPR. In all other cases, we rely on our legitimate interest in answering enquiries (Art. 6(1)(f) GDPR). We delete the data once your enquiry has been dealt with, unless statutory retention obligations apply.

8. Newsletter

With your consent, we send you our newsletter by email with news, offers and promotions relating to our products. The legal basis is Art. 6(1)(a) GDPR. Only your email address is mandatory; further details such as your name are voluntary.

Double opt-in. After signing up, you will receive an email in which you must confirm your subscription. We store the time of sign-up and confirmation as well as your IP address in order to be able to prove your consent (Art. 6(1)(c) GDPR in conjunction with Art. 7(1) GDPR).

Email service provider. The newsletter is sent via Rapidmail, a service of rapidmail GmbH, Augustinerplatz 2, 79098 Freiburg im Breisgau, Germany. Rapidmail processes the data on our behalf on servers in Germany. We have concluded a data processing agreement with Rapidmail.

Performance tracking. Our newsletters contain tracking pixels and tracked links. These show us whether and when a newsletter was opened and which links were clicked. This tracking is part of your consent to the newsletter.

Unsubscribing. You can unsubscribe from the newsletter at any time via the link in every email or by email to info@tk-sports.eu. After you unsubscribe, we remove your email address from the mailing list. We may store it on a suppression list so that you do not receive any further newsletters (Art. 6(1)(f) GDPR).

9. Cookies and consent management

Cookies are small text files that your browser stores on your device. We distinguish between two types:

• Strictly necessary cookies are needed for the shop to work, e.g. for the shopping cart, logging in to your customer account and saving your cookie preferences. The legal basis is Section 25(2) TDDDG and Art. 6(1)(b) or (f) GDPR.
• Optional cookies for statistics and marketing are only set if you have consented in the cookie banner (Section 25(1) TDDDG, Art. 6(1)(a) GDPR).

Cookie banner. We manage your consents with a cookie tool we developed ourselves. The tool stores your choice in a cookie so that we can prove it and you are not asked again on every visit. The legal basis is Art. 6(1)(c) GDPR.

You can change or withdraw your choice at any time. You can also delete or block cookies in your browser. Some features of the shop may then no longer work.

10. Google Analytics 4

If you have consented, we use Google Analytics 4 to understand how visitors use our shop and to improve content and design. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics sets cookies and records, for example, pages viewed, time spent on the site, device and browser information, approximate location and purchases in the shop. Your IP address is not stored by Google Analytics 4, but it is processed for transmission. The data may be transferred to Google LLC in the USA (see Section 13). Google processes the data on our behalf; we have concluded a data processing agreement with Google.

The legal basis is your consent (Section 25(1) TDDDG, Art. 6(1)(a) GDPR). The data is deleted after 12 months. Further information: Google Privacy Policy.

11. Meta Pixel and social media

Meta Pixel. If you have consented, we use the Meta Pixel of Meta Platforms Ireland Ltd., Merrion Road, Dublin 4, D04 X2K5, Ireland. This allows us to measure how effective our advertising on Facebook and Instagram is and to show visitors to our shop relevant advertising there. Meta may link the data to your Facebook or Instagram account and analyse it across devices. The data may be transferred to Meta Platforms Inc. in the USA (see Section 13).

We are jointly responsible with Meta for the collection and transmission of the data to Meta (Art. 26 GDPR). Meta alone is responsible for any further processing. Meta provides the joint controller agreement. The legal basis is your consent (Section 25(1) TDDDG, Art. 6(1)(a) GDPR). Further information: Meta Privacy Policy.

Social media content. We only load embedded content from Instagram, Facebook or X once you have agreed to this. Only then is data such as your IP address transmitted to the respective provider. Links to our social media profiles are simple links. When you click on them, the privacy policy of the respective network applies.

12. Google Fonts, Google Maps and YouTube

Google Fonts. The fonts on our website are hosted locally on our server. No connection to Google is established when a page is loaded.

Google Maps. Maps from Google Maps may be embedded on our website (provider: Google Ireland Limited). The map is only loaded once you agree. In doing so, your IP address and location, among other things, are transmitted to Google, possibly also to the USA. The legal basis is your consent (Art. 6(1)(a) GDPR, Section 25(1) TDDDG).

YouTube. We embed videos from YouTube (provider: Google Ireland Limited) using the enhanced privacy mode (youtube-nocookie.com). The video is only loaded once you agree. When the video is played, YouTube receives your IP address, among other things, and may set cookies. The legal basis is your consent (Art. 6(1)(a) GDPR, Section 25(1) TDDDG). Further information: Google Privacy Policy.

13. Recipients and transfers to third countries

Recipients. We only pass on your data to the extent necessary for the purposes set out in this policy. Recipients are:

• hosting and IT service providers
• payment service providers
• shipping service providers
• newsletter service providers
• analytics and advertising partners, where you have consented
• tax advisers and authorities, where we are legally obliged to do so

Service providers that process data on our behalf are contractually bound to comply with the GDPR (Art. 28 GDPR).

Third countries. Some service providers (Google, Meta and possibly PayPal) may transfer data to the USA. The transfer is based on the European Commission’s adequacy decision on the EU-US Data Privacy Framework, insofar as the recipient is certified under it. Otherwise, it is based on the European Commission’s standard contractual clauses (Art. 46(2)(c) GDPR).

14. Storage period

We store personal data only for as long as is necessary for the respective purpose or required by law.

Data	Storage period
Invoices, accounting records	8 years (Section 147 German Fiscal Code, AO)
Commercial and business letters, e.g. order confirmations	6 years (Section 257 German Commercial Code, HGB)
Customer account	until deleted by you or after 5 years of inactivity
Newsletter data	until you unsubscribe
Contact enquiries	until the enquiry has been dealt with
Server log files	7 days
Google Analytics	12 months

Retention periods begin at the end of the calendar year in which the document was created. As long as data is retained solely for legal reasons, we restrict its processing.

15. Your rights

You have the following rights with respect to us:

• access to the data we hold about you (Art. 15 GDPR)
• rectification of inaccurate data (Art. 16 GDPR)
• erasure of your data (Art. 17 GDPR)
• restriction of processing (Art. 18 GDPR)
• data portability (Art. 20 GDPR)
• withdrawal of consent given, with effect for the future (Art. 7(3) GDPR)

To exercise your rights, an informal message to info@tk-sports.eu is sufficient.

Right to object (Art. 21 GDPR). Where we process your data on the basis of legitimate interests (Art. 6(1)(f) GDPR), you may object at any time on grounds relating to your particular situation. You may object to the processing of your data for direct marketing at any time without giving reasons.

Right to lodge a complaint. You may lodge a complaint with a data protection supervisory authority. The authority responsible for us is: Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg (State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg), Lautenschlagerstraße 20, 70173 Stuttgart, Germany, www.baden-wuerttemberg.datenschutz.de.

16. Data security and changes

Our website uses SSL/TLS encryption. You can recognise it by the padlock symbol and “https://” in the address bar. We also protect your data against loss, manipulation and unauthorised access through technical and organisational measures (Art. 32 GDPR). Before providing information about your data, we verify your identity in an appropriate manner.

We will update this privacy policy if our services or the legal situation change. The version published here at any given time applies.

Last updated: September 2026