Privacy Protection Statement
1. Data Protection at a glance
General information
The following information provides a simple guide on what personal data we collect from you and what happens to it when you visit our website. For more detailed information, please refer to the text below from point 2 onwards.
Data collection on our website
Who is responsible for the data collected on this website? Data on this website is processed by the website operator, the contact details for which are provided on the website in the “Imprint" section.
How do we collect your data?
Your data is collected when you provide it, for example data that you yourself enter when setting up your account or when completing a contact form. Other data is automatically collected by our IT systems when you visit the website. This is mainly technical data (e.g. internet browser, operating system or time of visit). This data is recorded automatically as soon as you access our website or open the app. Server log files are required for the website to function properly and optimally. These files are automatically deleted again after 10 days.
What do we use your data for?
Some of the data is collected to guarantee that the website works properly. Other data can be used to analyze user behavior.
What are your rights in relation to your data?
You have the right at any time to request, free of charge, information on the origin, recipients and purpose of the data about you that we have stored. You also have the right to request the rectification, blocking or erasure of this data. You may contact us via the address provided in the “How to contact us” section at any time with questions about this or about data protection. You also have the right to complain to the responsible supervisory authority.
Analysis tools and tools provided by third parties
Your browsing behavior when you visit our website may be statistically evaluated, mainly using cookies and analysis software. Your browsing behavior will generally be analyzed anonymously; it is not possible for your browsing behavior to be traced back to you. You may object to this analysis or prevent it by avoiding using certain tools. Detailed information is available in the following Data Privacy Statement. You may object to this analysis. Information on your right to object is provided in this Data Privacy Statement.
Further information on this Data Privacy Statement
This Statement was originally written in German. In the event of any contradictions introduced in a translated version compared with the German version, the German will take precedence. Unless otherwise indicated, this Privacy Policy does not apply to the products and services offered by third parties or to the practices of companies that we have no controlling influence over, including other companies that you may interact with when using this website. We reserve the right to make changes to this Data Privacy Statement. This will be required in particular if the manner and methodology of our data processing changes.
2. General Information and Mandatory Information
Data protection
Data protection is very important to us. We handle your personal data in confidence and in accordance with the statutory data protection regulations, in particular the General Data Protection Regulation (the “GDPR”) and this Data Privacy Statement. Whenever you use this website, various pieces of personal data are collected. Personal data comprises any data that can be used to identify you. This Data Privacy Statement explains what data we collect and what we use it for. It also explains how and for what purpose this processing is carried out. You should note that data transfer via the Internet (e.g. via e-mail communications) may represent a security vulnerability. It is not possible to completely protect data against access by third parties.
Information about the data controller
The responsible data controller for this website is:
CY-TECH GmbH
represented by the managing directors:
Rebecca Bolger, Kelly Michelle Kaiser, Andreas Fischer, Franciscus van de Ven, Amelia Dorothy Legutki
Happurger Str. 84-88
90482 Nuremberg
Commercial Register of Nuremberg Local Court, HRB 15928
Tel: +49 (0)911 / 54 44 50
E-Mail: info@indoorcycling.com
Our data protection officer can also be contacted using these details.
Withdrawing your consent to data processing
Many data processing actions can only be carried out with your express consent. You can withdraw your previously granted consent at any time. This can be done simply by notifying us by e-mail. The lawfulness of any data processing carried out before you withdraw your consent is not affected by this action.
Right to data portability
You have the right to receive data that we process by automated means on the basis of your consent or in fulfillment of a contract in a commonly used machine-readable format or to request it to be transmitted to a third party. If you request that we transmit the data directly to another data controller, this will only be done if it is technically feasible.
Data security (SSL/TLS encryption)
For reasons of security and to protect the transmission of confidential content, such as purchase orders or inquiries that you submit to us as the website operator, this website uses SSL or TLS encryption. The encrypted connection is indicated by the padlock icon in the browser address bar and the use of “https://” instead of “http://” in the web address. When SSL/TLS encryption is enabled, the data that you transmit to us cannot be intercepted by third parties.
Information, blocking and erasure
According to the applicable legal regulations, you have the right at any time to request at no charge information about the personal data that we store, where we collected it, who we share it with and the purpose of processing; you also have the right to rectification of incorrect data, as well as the blocking and erasure of this data. You may contact us via the address provided above at any time with questions about personal data.
Objection to advertising
We herewith object to the use of the contact information published in line with our statutory requirements to provide such information for the purpose of sending us any advertising or information materials that we have not expressly requested. The website operator expressly reserves the right to take legal steps in the case that unrequested advertising such as spam e-mail is sent.
Statutory basis
The legal provisions governing the above can be found in particular in Article 15 GDPR (right to information), Article 16 GDPR (right to rectification), Article 17 GDPR (right to erasure), Article 18 GDPR (right to restriction of processing), Article 21 GDPR, Article 6 (1) (f) and Article 7 (3) GDPR (right to object), Article 20 GDPR (right to data portability) and Article 77 GDPR (right to lodge a complaint).
3. Data Collection on our website
Server log files
When you access our website, your web browser software automatically sends information to our web server (server log files). The following information is collected and stored until it is automatically deleted:
• Type and version of the web browser software
• Operating system
• Referrer URL
• Host name of the accessing computer
• Time of the query sent to the server
• IP address
This data will not be merged with other sources of data.
The basis for the processing of this data is Article 6 (1) (b) GDPR, which permits the processing of data for the fulfillment of a contract or to take steps prior to entering into a contract. Server log files are required for the website to function properly and optimally. These files are automatically deleted again after 10 days.
Cookies
Web pages sometimes use cookies. Cookies do not cause any harm to your computer and do not contain viruses. Cookies are used to make our offering more user-friendly, more effective and more secure. Cookies are small text files that are stored on your computer by your web browser software. Most of the cookies used by our website are “session cookies”. These are deleted automatically at the end of your visit. Other cookies may remain on your device until your delete them. These cookies allow us to recognize your web browser software the next time you visit. You can configure your web browser software to notify you when cookies are sent and to only allow specific cookies, to reject cookies in certain situations or to prevent all cookies from being stored; you can also set the browser to automatically delete all cookies when the browser window is closed. Disabling cookies can cause the functionality of this website to be restricted. Cookies that are necessary to carry out electronic communications or to provide specific functions requested by you (e.g. a shopping cart function) will be stored on the basis of Article 6 (1) (f) GDPR. The website operator has a legitimate interest in the storage of cookies to ensure that its services are provided in a technically error-free and optimized way. If other cookies (e.g. cookies that analyze your browsing behavior) are stored, these will be explained separately in this Data Privacy Statement.
Contact form
If you send us an inquiry using the Contact Form, your information in the Contact Form including the contact information that you enter there will be saved by us for the purpose of handling your inquiry and any follow-up questions. We will not share this data without your permission. Therefore, the processing of the data entered in the Contact Form is done exclusively on the basis of your consent (Article 6 (1) (a) GDPR). You can withdraw this consent at any time. This can be done simply by notifying us by e-mail. The lawfulness of any data processing carried out before you withdraw your consent is not affected by this action. We will retain the data entered by you in the Contact Form until you request us to erase it, withdraw your consent to it being stored, or the purpose of storage is no longer applicable (for example because we have finished handling your inquiry). Mandatory statutory provisions, especially regarding retention periods, are not affected by this.
Registering on this website
You can register on our website in order to use its advanced functions. We will only use the data you enter when doing this for the purpose of your use of the corresponding offer or service for which you have registered. Any mandatory fields requested when registering must be completed. Otherwise we will reject your registration. For important changes such as to the scope of our offering or where technically necessary we will use the e-mail address supplied at registration in order to inform you by this means. The processing of the data entered at registration is done on the basis of your consent (Article 6 (1) (a) GDPR). You can withdraw your previously granted consent at any time. This can be done simply by notifying us by e-mail. The lawfulness of any data processing previously carried out is not affected by this action. We will continue to store the data collected at registration for as long as you remain registered on our website and will then delete it. Statutory retention periods are not affected by this.
Data processing (customer and contract data)
We only collect, process and use personal data to the extent that it is necessary for the creation, arrangement or modification of the legal relationship (existing data). This is done on the basis of Article 6 (1) (b) GDPR, which permits the processing of data for the fulfillment of a contract or to take steps prior to entering into a contract. We only collect, process and use personal data regarding the use of our website (usage data) to the extent that is necessary to enable the user to make use of the service or for billing of this usage. The customer data that is collected will be deleted on conclusion of the order or termination of the business relationship. Statutory retention periods are not affected by this.
Data transmission on conclusion of contracts for web shops, merchants and goods shipment
We only transmit personal data to third parties if this is necessary for the fulfillment of a contract, for example to companies engaged in the shipment of goods or banks engaged in the processing of payments. Additional data transmission will not occur unless you have given your express consent to the transmission. Your data will not be shared with third parties, for example for the purpose of marketing, without your express permission. The basis for the data processing is Article 6 (1) (b) GDPR, which permits the processing of data for the fulfillment of a contract or to take steps prior to entering into a contract.
Data transmission on conclusion of contracts for services and digital content
We only transmit personal data to third parties if this is necessary for the fulfillment of a contract, for example to banks engaged in the processing of payments. Additional data transmission will not occur unless you have given your express consent to the transmission. Your data will not be shared with third parties, for example for the purpose of marketing, without your express permission. The basis for the data processing is Article 6 (1) (b) GDPR, which permits the processing of data for the fulfillment of a contract or to take steps prior to entering into a contract.
4. Plugins and tools
Facebook plugins (Like & Share button)
Our website integrates plugins from the Facebook social media platform, provided by Facebook Inc., 1 Hacker Way, Menlo Park, California 94025, USA. The Facebook plugin takes the form of the Facebook logo or the “Like” button on our website. An overview of the Facebook plugin can be found here: https://developers.facebook.com/docs/plugins/. When you visit our website, the plugin establishes a direct connection between your web browser software and the Facebook server. Via this connection, Facebook receives information that you have visited our website from your IP address. If you click on the Facebook “Like” button while you are logged in to your Facebook account, the content on our website can be linked to on your Facebook profile. This allows Facebook to connect your visit to our website with your user account. As the website provider, we have no knowledge of the content of the data that is transmitted or how it is used by Facebook. Further information can be found in the Facebook Data Policy at: https://www.facebook.com/policy.php. If you do not wish Facebook to be able to connect your visit to our website with your Facebook user account, you should log out of Facebook before visiting our website. You can also use a browser add-on such as the “NoScript” script blocker (http://noscript.net) to prevent the Facebook plugin being loaded.
Instagram plugins
Our website uses Instagram social plugins (“plugins”) operated by Instagram LLC., 1601 Willow Road, Menlo Park, California 94025, USA (“Instagram”). The plugins are identified by an Instagram logo, for example in the form of an Instagram camera icon. You can find an overview of the Instagram plugins and what they look like: http://blog.instagram.com/post/36222022872/introducing-instagram-badges. When you visit a page on our website that contains one of these plugins, your browser establishes a direct connection with the Instagram servers. The content of the plugin is sent directly from Instagram to your web browser software and integrated into the page. This integration provides Instagram with the information that your web browser has accessed the corresponding page on our website, even if you do not have an Instagram profile or are not currently logged in to Instagram. This information (including your IP address) is sent directly by your web browser to a server of Instagram in the USA, where it is stored. If you are logged in to Instagram, Instagram is able to connect your visit to our website with your Instagram account directly. If you interact with the plugins, for example by clicking the “Instagram” button, this information is also sent directly to an Instagram server where it is stored. The information is also published on your Instagram account and displayed for your contacts there to see. For information on the purpose and scope of the data collection and further processing and use of your data by Instagram and your associated rights and settings that can be used to protect your privacy please see the Instagram data privacy policy: https://help.instagram.com/155833707900388/. If you do not wish Instagram to connect the data collected about our website directly with your Instagram account you must log out of your Instagram account before visiting our website. You can also use a browser add-on such as the “NoScript” script blocker (http://noscript.net) to prevent the Instagram plugins being loaded.
YouTube plugins
This website contains at least one plugin from YouTube, which belongs to Google Inc. and is based in San Bruno, California, USA. If you are registered with YouTube: As soon as you access a page on this website on which a YouTube video is embedded and you start to play the video, a connection is established with the YouTube servers. This causes the YouTube server to be notified of which specific page of this website you have visited. If you are logged in, your browsing behavior is automatically connected to your profile. You can prevent this from happening by first logging out of YouTube. Further information on the collection and use of your data by YouTube can be found in the corresponding sections of the Privacy Policy at www.youtube.com. Further information on YouTube’s data protection can be found in their Privacy Policy at https://www.google.de/intl/de/policies/privacy/
Transmission of fitness training activity information to associated connected accounts
Strava. We enable your fitness training activities to be automatically imported to the Strava platform. You must expressly state your agreement to the connection of your Strava account with your Cytech account in order for the data to be shared. The following data is sent to your Strava account: Calories, distance, duration and name of the workout.
Apple HealthKit. We enable your fitness training activities to be automatically imported to the Apple HealthKit platform. You must expressly state your agreement to the connection of your Apple HealthKit account with your Cytech account in order for the data to be shared. The following data is sent to your Apple HealthKit account: Calories, distance, duration and name of the workout.
Google Fit. We enable your fitness training activities to be automatically imported to the Google Fit platform. You must expressly state your agreement to the connection of your Google Fit account with your Cytech account in order for the data to be shared. The following data is sent to your Google Fit account: Calories, distance, duration and name of the workout.
5. Analysis tools and advertising
Google Analytics
This website uses functions provided by the Google Analytics web analytics service. This is provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
Google Analytics makes use of cookies. These are text files that are saved to your computer and allow your usage of the website to be analyzed. The information about your usage of the website that is generated by the cookie is generally transmitted to and stored on a server operated by Google in the USA. The storage of Google Analytics cookies is done on the basis of Article 6 (1) (f) GDPR. The website operator has a legitimate interest in analyzing the usage behavior in order to optimize its web offering and its marketing.
IP Anonymization
We have enabled the IP Anonymization function on this website. This means that your IP address is truncated by Google within the Member States of the European Union or the European Economic Area before being transmitted to the USA. The full IP address will only be sent to a Google server in the USA before being truncated there in exceptional circumstances. Google will use the information that is sent in order to evaluate your usage of the website on behalf of the website operator, in order to compile reports about the website activities and provide other associated services regarding website usage and Internet usage to the website operator. The IP address transmitted by your web browser in the scope of Google Analytics will not be combined with other data held by Google.
Browser Plugin
You can prevent the storage of cookies by means of a corresponding setting in your web browser software. However, we would like to inform you that such action can prevent full use of some of the functionality of this website. You can also prevent the collection of data regarding your usage of the website generated by the cookie (including your IP address) and its transmission to and processing by Google by downloading and installing the browser plugin from the following link: https://tools.google.com/dlpage/gaoptout?hl=de.
Objection to data collection
You can prevent Google Analytics from collecting your data by clicking on the link below. This creates an opt-out cookie that then prevents the collection of your data when you next visit the website. Disable Google Analytics. More information on how Google Analytics handles user data can be found in the Google privacy policy: https://support.google.com/analytics/answer/6004245?hl=de.
Google AdWords and Google Conversion Tracking
This website uses Google AdWords AdWords is a web advertising program operated by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States (“Google”). We use the Conversion Tracking feature of Google AdWords. When you click on an advert served by Google, a Conversion Tracking cookie is created. Cookies are small text files that are stored on the user’s computer by the web browser software. These cookies expire after 30 days and are not used to personally identify the user. When the user visits specific pages of this website and the Cookie has not expired, Google and we can determine that the user has clicked on the advert and arrived at this page. Each Google AdWords customer is served a different cookie. Cookies cannot be traced by other websites run by AdWords customers. The information collected using the Conversion Cookie is used to create conversion statistics for AdWords customers who have opted to use Conversion Tracking. The customers are able to find out the total number of users who have clicked on the advert and have been forwarded to a page with a Conversion Tracking tag. However, they do not receive any information that would allow them to personally identify the user. If you wish to opt out of tracking you can object to this usage by simply disabling the Google Conversion Tracking cookie in the user settings of your web browser software. You will then not be included in the Conversion Tracking statistics. The storage of Conversion Cookies is done on the basis of Article 6 (1) (f) GDPR. The website operator has a legitimate interest in analyzing the usage behavior in order to optimize its web offering and its marketing. More information on Google AdWords and Google Conversion-Tracking can be found in the Google privacy policy: https://www.google.de/policies/privacy/. You can configure your web browser software to notify you when cookies are sent and to only allow specific cookies, to reject cookies in certain situations or to prevent all cookies from being stored; you can also set the browser to automatically delete all cookies when the browser window is closed. Disabling cookies can cause the functionality of this website to be restricted.
6. Newsletter
Newsletter data
If you wish to receive one of the newsletters offered on the website, we require your e-mail address and information that allows us to verify that you are the owner of the e-mail address and that you agree to receipt of the newsletter. Further data is not collected or is provided voluntarily. We use this data exclusively to send the requested information and we do not share it with third parties. The processing of the data is done exclusively on the basis of your consent (Article 6 (1) (a) GDPR). The consent you grant for us to store the data, e-mail address and to use this to send the newsletter can be withdrawn at any time, for example using the “Unsubscribe” link in the newsletter. The lawfulness of any data processing previously carried out is not affected by this action. We will store the data you provide to use for the purpose of subscription to the newsletter until you unsubscribe from the newsletter and after which time we will delete it. This does not affect data stored by us for other purposes (e.g. e-mail addresses for the members’ area).
7. Payment service providers
PayPal
We support payment by services including PayPal on our website. This payment service is operated by PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (“PayPal”). If you choose to pay using PayPal, the payment data you enter is sent to PayPal. The transmission of your data to PayPal is done on the basis of Article 6 (1) (a) GDPR (consent) and Article 6 (1) (b) GDPR (processing for fulfillment of a contract). You have the right to withdraw your consent to data processing at any time. Withdrawing your consent does not affect the validity of data processing carried out in the past.
8. Usage of Google Health Connect Data
Our app "ICG Training" allows users to sync their workout data with Google Health Connect. Users need to enable synchronization in the settings. This includes the following data transfers:
Calories Burned: Transfer of calories burned during a workout to Google Health Connect. These data are collected and stored to enable users to better monitor their fitness activities and make the data available in other compatible apps.
- Workouts: Transfer of workout data performed during a session to Google Health Connect. These data are collected and stored to document and evaluate the training in detail.
- Distance: Transfer of the distance covered during a workout to Google Health Connect. These data help monitor and analyze training performance.
- Cycling Pedal Cadence: Transfer of the pedal cadence during a workout to Google Health Connect. These data are used to assess and improve cycling efficiency.
- Heart Rate: During a workout, we can read users' heart rate data from Google Health Connect. These data are used to display advanced training information and are stored in the app.
Data Storage and Deletion
The collected workout data, including heart rate data, are stored on our servers and can be viewed and deleted by the user at any time. When the user deletes their workout data, all associated heart rate data are also completely removed from our database. The data transferred to Google Health Connect can be deleted at any time in the Health Connect app.
Deactivation and Revocation of Permissions
Users can revoke the permissions for using Google Health Connect or disable synchronization with Google Health Connect in our app settings at any time. This can be done through the respective options in the app or in the operating system.