Privacy Polic

SwimSalabim AG
De-Saint-Exupéry-Str. 10
D-60549 Frankfurt am Main

Phone: +49 69 50 60 28 222
Email: This email address is being protected from spambots. You need JavaScript enabled to view it.
Homepage: www.swim-salabim.com

Managing Director: Michael Langelage

Security and Protection of Your Data

It is our primary responsibility to maintain the confidentiality of your personal data and protect it from unauthorized access. Therefore, we apply the utmost care and the latest security standards to ensure maximum personal data protection.

As a private company, we are subject to the provisions of the European General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG) regulations. We have implemented technical and organizational measures to ensure that we and our external service providers comply with data protection regulations.

Definitions

The legislator requires that personal data be processed lawfully, fairly, and transparently by the data subject ("Lawfulness, Fairness, and Transparency"). To ensure this, we provide you with the legal definitions of key terms in this Privacy Policy.

Personal Data

"Personal data" refers to any information relating to an identified or identifiable natural person (hereinafter referred to as the "data subject"). A natural person is considered identifiable if they can be directly or indirectly identified, particularly by reference to an identifier such as a name, an identification number, location data, an online identifier, or one or more specific characteristics that express the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person.

Processing

"Processing" refers to any operation or set of operations performed on personal data, whether or not by automated means. This includes activities such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure, or destruction of data.

Restriction of Processing

"Restriction of processing" refers to marking of stored personal data to limit its future processing.

Profiling

"Profiling" refers to any form of automated processing of personal data that involves using personal data to evaluate certain personal aspects related to a natural person. In particular, this includes analysing or predicting aspects concerning work performance, economic situation, health, personal preferences, interests, reliability, behaviour, location, or movements of that person.

Pseudonymization

"Pseudonymization" refers to the processing of personal data in such a way that the data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organizational measures ensuring that the personal data is not assigned to an identified or identifiable natural person.

File System

A "file system" is any structured collection of personal data that is accessible according to specific criteria, regardless of whether this collection is managed centrally, peripherally, or organized based on functional or geographical considerations.

Controller

The "controller" is a natural or legal person, public authority, agency, or other body that, alone or jointly with others, determines the purposes and means of processing personal data. If the purposes and means of processing are determined by Union or Member State law, the controller or the specific criteria for its designation may be provided for by Union or Member State law.

Processor

A "processor" is a natural or legal person, public authority, agency, or other body that processes personal data on behalf of the controller.

Recipient

A "recipient" is a natural or legal person, public authority, agency, or other body to whom personal data is disclosed, regardless of whether it is a third party. However, authorities that may receive personal data in the framework of a specific investigation under Union or Member State law are not considered recipients; the processing of such data by these authorities is carried out in accordance with applicable data protection regulations and the purposes of the processing.

Third Party

A "third party" is a natural or legal person, public authority, agency, or body other than the data subject, controller, processor, and persons who, under the direct authority of the controller or processor, are authorized to process personal data.

Consent

A "Consent" of the data subject is any freely given, specific, informed, and unambiguous indication of the data subject's wishes by which they, through a statement or an explicit affirmative action, signify agreement to the processing of personal data relating to them.

Lawfulness of Processing

The processing of personal data is only lawful if there is a legal basis for the processing. According to Article 6(1) (a–f) of the GDPR, the legal basis for processing can include:

1. The data subject has consented to the processing of their data for one or more specific purposes.
2. Processing is necessary to perform of a contract to which the data subject is a party or to take steps at the data subject’s request prior to entering into a contract.
3. Processing is necessary for compliance with a legal obligation to which the controller is subject.
4. Processing is necessary to protect the vital interests of the data subject or another natural person.
5. Processing is necessary to perform a task carried out in the public interest or to exercise the controller´s official authority.
6. Processing is necessary for the legitimate interests pursued by the controller or a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject that require personal data protection, particularly when the data subject is a child.

Information on the Collection of Personal Data

1) Collection of Personal Data on Our Website
Below, we provide information on how we collect personal data when you use our website. Personal data refers to your name, address, email address, and user behaviour.

2) Contacting Us
If you contact us via email or through a contact form, we store the data you provide (such as your email address, name, and phone number) to answer your inquiries. We delete the data once it is no longer needed or restrict the processing if legal retention obligations apply.

Collection of Personal Data When Visiting Our Website

If you visit our website solely for informational purposes, meaning without registering or submitting any data, we only collect personal data transmitted by your browser to our server. This data is necessary to display our website and ensure stability and security (legal basis: Article 6(1)(f) GDPR):

1. IP address
2. Date and time of request
3. Time zone difference from Greenwich Mean Time (GMT)
4. Specific page accessed
5. Access status/HTTP status code
6. Amount of data transferred
7. Referring website
8. Browser type
9. Operating system and interface
10. Language and version of browser software

Use of Cookies

1) In addition to the above data, our website uses cookies. Cookies are small text files stored on your device that help improve your browsing experience and efficiency.

2) Types of cookies we use:

1. Transient cookies: These are automatically deleted when you close your browser. They include session cookies, which assign a session ID to recognize your browser across multiple requests.
2. Persistent cookies: These remain on your device for a set period before being automatically deleted. You can manually delete cookies in your browser settings.
3. You can configure your browser settings to reject third-party or all cookies. However, this may limit website functionality.
4. If you have an account with us, cookies help us recognize you for future visits, so you do not have to log in repeatedly.
5. We may also use Flash cookies or HTML5 storage objects. You can manage Flash cookies using browser add-ons such as "Better Privacy" for Firefox or Adobe’s Flash cookie manager for Chrome. To avoid HTML5 storage objects, use private browsing mode and clear cookies manually.

Additional Functions and Services on Our Website

1) In addition to purely informational use, we offer various services that may require you to provide personal data. These data processing activities follow the same principles outlined in this privacy policy.

2) We may use external service providers for data processing, who have been carefully selected, instructed, and regularly monitored.

3) We may share your personal data with third parties when conducting joint promotions, contests, contractual agreements, or similar services. More details will be provided when you submit your data.

4) If our service providers or partners are based outside the European Economic Area (EEA), we will inform you about the implications in the service description.

Children’s Data

Our services are intended for adults. Individuals under 18 should not provide personal data without parental or guardian consent.

Rights of Data Subjects

You have the following rights regarding your personal data:

1) Widerruf der Einwilligung

Sofern die Verarbeitung der personenbezogenen Daten auf einer erteilten Einwilligung beruht, haben Sie jederzeit das Recht, die Einwilligung zu widerrufen. Durch den Widerruf der Einwilligung wird die Rechtmäßigkeit der aufgrund der Einwilligung bis zum Widerruf erfolgten Verarbeitung nicht berührt.

Für die Ausübung des Widerrufsrechts können Sie sich jederzeit an uns wenden.

1. Right to Withdraw Consent – You can withdraw your consent at any time, though this does not affect the lawfulness of processing before withdrawal.

2. Right to Confirmation – You can request confirmation of whether we process your personal data.

3. Right to Access – You may request information about the purposes of processing, categories of data, recipients, storage periods, and your rights.

4. Right to Rectification – You can request the correction of inaccurate data or the completion of incomplete data.

5. Right to Erasure ("Right to be Forgotten") – You can request deletion of your data if:

   • It is no longer needed for the original purpose.

   • You withdraw consent, and no other legal basis exists.

   • The data has been unlawfully processed.

6. Right to Restriction of Processing – You can request limited data processing under specific conditions.

7. Right to Data Portability – You can receive your data in a structured, commonly used, machine-readable format and request its transfer to another controller.

8. Right to Object – You can object to data processing for legitimate interests or direct marketing purposes.

9. Right to Lodge a Complaint – You may file a complaint with a supervisory authority if you believe your data is being unlawfully processed.

Use of OpenStreetMap

Our website integrates OpenStreetMap via an API. The OpenStreetMap Foundation may collect and store your IP address. We use OpenStreetMap to enhance user experience and provide location-based services (legal basis: Article 6(1)(f) GDPR). More information can be found in OpenStreetMap’s privacy policy