Privacy Policy
Please find the Privacy Policy for our FAZUA App here.
Introduction
With the following information we want to give you an overview of the processing of your personal data on our website https://www.fazua.com/ (hereinafter referred to as "website"). We also want to inform you about your rights under data protection laws. The processing of your personal data by us is always in accordance with the Basic Data Protection Regulation (hereinafter referred to as "GDPR") and all applicable country-specific data protection regulations.
Table of Contents
- Controller
- Data Protection Officer
- Use of Third-Party Tools
- Provision of the Website
- General Information
- Purpose of Processing
- Legal Basis
- Retention Period
- Recipients of Personal Data
- Cookies
- General Information
- Technically Necessary Cookies
- Purpose of Processing
- Legal Basis
- Retention Periods
- Recipients of Personal Data
- Specifically used technically necessary cookies
- Analysis and Marketing-Cookies
- Purpose of Processing
- Legal Basis
- Retention Periods
- Recipients of Personal Data
- Specifically used optional cookies
- Contact
- General Information
- Purpose of Processing
- Legal Basis
- Retention Periods
- Recipients of Personal Data
- Newsletter
- General Information
- Newsletter Registration
- Newsletters for Existing Customers
- Newsletter Tracking
- Purpose of Processing
- Legal Basis
- Retention Periods
- Recipients of Personal Data
- Application
- General Information
- Purpose of Processing
- Legal Basis
- Retention Period
- Recipients of Personal Data
- Social Networks
- General Information
- Purpose of Processing
- Legal Basis
- Recipients of Personal Data
- Using online marketplaces for e-commerce
- General information
- Purpose of Processing
- Legal Basis
- Retention Period
- Recipients of Personal Data
- Your Rights
- Right to Confirmation
- Right to Access (Art. 15 GDPR)
- Right to Rectification (Art. 16 GDPR)
- Right to Erasure (Art. 17 GDPR)
- Right to Restriction of Processing (Art. 18 GDPR)
- Right to Data Portability (Art. 20 GDPR)
- Right to Object (Art. 21 GDPR)
- Withdrawing Consent
- Right to Lodge a Complaint
- Status of Privacy Policy
Controller
The party responsible for processing data on this website is:
CTDI GmbH
Stephanstr. 4-8
76316 Malsch
Telephone: +49 7246 80-0
Email: datenschutz@ctdi.eu
The responsible party is the natural or legal person who alone or jointly with others decides on the purposes and means of processing personal data (names, email addresses, etc.).
Data Protection Officer
We have appointed a data protection officer for our company.
Datenschutzbeauftragter CTDI GmbH
Bernhard Veeck
Data Protection Officier (TÜV)
Bockenheimer Landstraße 51-53
60325 Frankfurt am Main
Telefon: +49 69 153 919190
E-Mail: veeck@byte.law
You can contact our data protection officer any time to ask questions and make suggestions regarding data protection and the exercise of your rights.
Use of Third-Party Tools
We use third-party services to provide certain functions and services on our website. The specific services can be found in the corresponding chapters.
In some cases, we use service providers that are based in a third country, i.e., outside the European Union. We only transfer data to a third country with an adequate level of data protection or where appropriate safeguards pursuant to Art. 44-49 GDPR have been concluded. You have the right to request a copy of the appropriate safeguards we have put in place. For this purpose, please send us an e-mail to the e-mail address mentioned in this privacy policy.
Provision of the Website
General Information
When you visit our website, data that your browser transmits to our serve, is automatically processed. This data is stored in the log files of the server (in so-called "server log files"). The following personal data is processed:
- Browser type and browser version
- Operating system used
- Referrer URL (previously visited website)
- Host name of the accessing computer
- Date and time of server request
- IP address
- Language settings
Purpose of Processing
We do not use the data stored in server log files to draw any conclusion about your person. The purposes pursued by us include:
- the guarantee of a smooth connection set-up of the website,
- the clarification of acts of abuse or fraud,
- problem analysis in the network, and
- the evaluation of system security and stability
- the processing of service requests
Legal Basis
The legal basis for processing your personal data is our legitimate interest pursuant to Art. 6 (1) (f) GDPR. We have an overriding interest in being able to offer our a technically functioning service.
Retention Period
The log files are stored for security reasons (e.g., to clarify acts of abuse or fraud) for a maximum of 7 days and then deleted. Data whose further retention is required for evidentiary purposes will be retained until the matter has been finally clarified.
Recipients of Personal Data
We use the following service providers:
Service Provider
Google Ireland Limited
Address
Gordon House, Barrow Street
Dublin 4
Irland
Third Country
on a case-by-case basis USA and other third countries
Appropriate Safeguard
SCC, adequacy decisions
Further Information
Privacy Policy
Service Provider
Team Viewer
Address
Bahnhofsplatz 2
73033 Göppingen
Deutschland
Third Country
-
Appropriate Safeguard
-
Further Information
Datenschutzhinweise
Cookies
General Information
We use cookies to give you the best browsing experience on our website. The data we collect with the use of cookies help us to optimize our website. We differentiate between technically necessary and non-necessary cookies.
Technically Necessary Cookies
These cookies are absolutely necessary to enable the basic functions of the website, like page navigation. The website will not run as it is intended to without these cookies. You can block or delete them by changing your browser settings. The technically necessary cookies cannot be blocked, otherwise the proper use f the website can no longer be guaranteed.
Purpose of Processing
We use technically necessary cookies for the following purposes:
- to provide services,
- to enable the use of our website functions, as well as
- to offer different languages.
Legal Basis
The legal basis for processing your personal data is our legitimate interest pursuant to Art. 6 (1) (f) GDPR. We have an overriding interest in being able to offer our a technically functioning service.
Retention Periods
We delete your personal data as soon as they are no longer required to achieve the purpose for which they were collected. Technically necessary cookies are only stored for the respective session. When you leave our website and close your browser, the cookies are deleted.
Recipients of Personal Data
We use the following service providers:
Service Provider
Google Ireland Limited
Address
Gordon House, Barrow Street
Dublin 4
Irland
Third Country
on a case-by-case basis USA and other third countries
Appropriate Safeguard
SCC, adequacy decisions
Further Information
Privacy Policy
Specific, technical necessary cookies used
Description
GA-consent
Purpose
Storage of the user’s optional cookie consent value
Description
GA-consent-revision
Purpose
Storage of the current version of the cookie policy
Description
sessionid
Purpose
Storage of a session token used by the server to identify the user’s session
Description
csrftoken
Purpose
Token to prevent CSRF attacks
Analysis and Marketing-Cookies
We also use analysis and marketing cookies. These are cookies that are not technically necessary. We use them to understand your behaviour on our website and to improve our offer.
Purpose of Processing
We use technically necessary cookies for the following purposes:
- to measure and track our reach,
- to evaluate the behavior of visitors on our website,
- to optimize our offer on our website, and
- to publish targeted advertising
Categories of Personal Data
Some functions of our website can be used without providing any personal data. However, certain services require the use of personal data. We process three main categories of personal data:
- Information provided directly by the user
- Information we receive from third parties
- Information collected automatically
Legal Basis
The legal basis for processing your personal data is your consent pursuant to Art. 6 (1) (a) GDPR. The cookies are set only after you have given your consent via our cookie banner.
Retention Periods
We delete your personal data as soon as they are no longer required to achieve the purpose for which they were collected. The storage period of personal data depends on the providers used.
Recipients of Personal Data
We use the following service providers:
Service Provider
Semrush Inc.
Address
800 Boylston Street, Suite 2475
Boston, MA, 02199
U.S.A.
Attention: General Counsel
Third Country
In individual cases: USA and other third countries
Appropriate Safeguard
Standard Contractual Clauses (SCC), Adequacy Decisions
Further Information
Privacy Policy
Category of Data Subjects
Website Visitors
Category of Recipients
- Internal departments of CTDI GmbH and Porsche eBike Performance GmbH
- Service Provider = SEMRUSH
Internal Recipients
SEMRUSH
External Recipients
SEMRUSH
Service Provider
Google Ireland Limited
Address
Gordon House, Barrow Street
Dublin 4,
Irland
Third Country
on a case-by-case basis USA and other third countries
Appropriate Safeguard
SCC, adequacy decisions
Further Information
Privacy Policy
Service Provider
Meta Platforms Ireland Ltd.
Address
4 Grand Canal Square, Grand Canal Harbour, D2 Dublin, Ireland
Third Country
on a case-by-case basis USA and other third countries
Appropriate Safeguard
SCC, adequacy decisions
Further Information
Privacy Policy
Specific optional cookies used
Description
XXXXX
Purpose
Cookie placed by Semrush Inc. to store the user’s optional cookie consent value.
Description
_fbp
Purpose
Cookie placed by Facebook with the function of storing and tracking visits on the website
Description
_gid
Purpose
Cookie placed by Google analytics with the function of storing and counting page views
Description
_ga
Purpose
Cookie placed by Google Analytics with the function of reading and filtering requests made by bots
Description
_gat_UA-78448920-1 (_gat_UA-*)
Purpose
Cookie placed by Google Analytics with the function of technical monitoring
Contact
General Information
Through our website you can contact us by e-mail or via our form. To contact you and to answer your request, we process the following personal data from you:
- First and last name
- E-mail address
- Telephone number (optional)
- Country
- Date and time of the inquiry
- IP address
- If applicable, images or videos uploaded by you
- Other personal data that you provide to us while contacting us.
Purpose of Processing
We process your data to respond to your inquiry and other matters arising from it.
Legal Basis
If your request is connected to pre-contractual measures or in relation to an existing contract with us, the legal basis is the performance of the contract and implementation of pre-contractual measures pursuant to Art. 6 (1) (b) GDPR.
If your request is made independently of contractual or pre-contractual measures, our overriding legitimate interests pursuant to Art. 6 (1) (f) GDPR constitute the legal basis. The overriding legitimate interest corresponds to the above-mentioned purposes.
Retention Periods
We delete your personal data as soon as they are no longer required to achieve the purpose for which they were collected. In the context of contact inquiries, this is usually the case when it is clear from the circumstances that the specific matter has been conclusively processed.
Recipients of Personal Data
We use the following service providers:
Service Provider
Quality Bicycle Products
Address
6400 W. 105th Street, 55438, Bloomington
Third Country
USA
Appropriate Safeguard
Adequacy decision
Further Information
Privacy Policy
Service Provider
Ampere Plus AG
Address
Roschbrunnen 3, 5053 Staffelbach
Third Country
Switzerland
Appropriate Safeguard
Adequacy decision
Further Information
Privacy Policy
Service Provider
VIMM Ltd.
Address
25 Autumn Blaze Street, NZ 0616 Hobsonville, Auckland
Third Country
New Zealand
Appropriate Safeguard
Adequacy decision
Further Information
-
Social Networks
General Information
We maintain presences in social networks to communicate with you and inform you about our services.
Purpose of Processing
The purpose of the processing is the maintenance of presences in social media.
Legal Basis
The legal basis for the processing of personal data is our overriding legitimate interest pursuant to Art. 6 (1) (f) GDPR. The overriding interest corresponds to the above-mentioned purposes.
Recipients of Personal Data
We have company presences in the following social networks:
Social Network
Facebook
Address
Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Irland
Third Country
on a case-by-case basis USA and other third countries
Appropriate Safeguard
SCC, adequacy decisions
Further Information
Privacy Policy
Contradiction settings
Joint Controller Agreement
Social Network
LinkedIn
Address
LinkedIn Ireland Unlimited Company Wilton Place, Dublin 2, Irland
Third Country
on a case-by-case basis USA and other third countries
Appropriate Safeguard
SCC, adequacy decisions
Further Information
Privacy Policy
Opt-out and retargeting opt-out
Joint Controller Agreement
Social Network
Instagram
Address
Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Irland
Third Country
on a case-by-case basis USA and other third countries
Appropriate Safeguard
SCC, adequacy decisions
Further Information
Privacy Policy
Contradiction settings
Social Network
XING
Address
New Work SE, Dammtorstraße 29-32, 20354 Hamburg
Third Country
on a case-by-case basis USA and other third countries
Appropriate Safeguard
SCC, adequacy decisions
Further Information
Privacy Policy
Contradiction settings
Social Network
YouTube
Address
Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland
Third Country
on a case-by-case basis USA and other third countries
Appropriate Safeguard
Adequacy decisions
Further Information
Privacy Policy
Contradiction settings
Social Network
TikTok
Address
TikTok Information Technologies UK Limited, WeWork, 125 Kingsway, London, WC2B 6NH, London, England ("TikTok UK") und TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland ("TikTok Ireland") as Joint Controllers (“TikTok“)
Third Country
on a case-by-case basis USA and other third countries
Appropriate Safeguard
Adequacy decisions
Further Information
Privacy Policy
Using online marketplaces for e-commerce
General information
We offer our services on online platforms hosted by other service providers. In this context, data privacy policies of the respective platforms apply in addition to our privacy policy. This applies with regard to the range measurement and interest-based marketing processes used on the platforms.
In context of using online marketplaces, we process the following personal data:
- Inventory data (e.g. names, addresses)
- Payment data (e.g. bank details, bills, payment history)
- Contact data (e.g. e-mail, telephone numbers)
- Contract data (e.g. subject-matter of a contract, term, customer category)
- User data (e.g. visited websites, interest in content, access times)
- Meta/ communication data (e.g. device information, IP adress)
Purpose of Processing
The purpose of processing is to provide contract performances and customer service.
Legal Basis
The legal basis for the processing of personal data is the fulfillment of the contract and pre-contractual requests (Art. 6 (1) (b) GDPR, legitimate interests (Art. 6 (1) (f) GDPR).
Retention Period
We delete your personal data as soon as they are no longer required to achieve the purpose for which they were collected.
Recipients of Personal Data
We use the following service providers:
Service Provider
Shopify
Address
Shopify International Limited , Victoria Buildings, 1-2 Haddington Road, Dublin 4, Ireland
Third Country
-
Appropriate Safeguard
-
Further Information
Privacy Policy
Your Rights
Right to Confirmation
You have the right to request confirmation from us as to whether personal data concerning you is being processed.
Right to Access (Art. 15 GDPR)
You have the right to obtain from us - at any time and free of charge - information about the personal data stored about you, as well as a copy of this data in accordance with the statutory provisions.
Right to Rectification (Art. 16 GDPR)
You have the right to request the rectification of inaccurate personal data concerning you. Furthermore, you have the right to request the completion of incomplete personal data, considering the purposes of the processing.
Right to Erasure (Art. 17 GDPR)
You have the right to demand that personal data concerning you be deleted immediately if one of the reasons provided for by law applies and insofar as the processing or storage is not necessary.
Right to Restriction of Processing (Art. 18 GDPR)
You have the right to demand that we restrict the processing if one of the legal requirements is met.
Right to Data Portability (Art. 20 GDPR)
You have the right to receive the personal data concerning you that you have provided to us in a structured, common and machine-readable format. Furthermore, you have the right to transfer this data to another controller without hindrance from us, to whom the personal data was provided, provided that the processing is based on consent pursuant to Art. 6 (1) (a) GDPR or Art. 9 (2) (a) GDPR or on a contract pursuant to Art. 6 (1) (b) GDPR and the processing is carried out by automated means, unless the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in us.
In addition, when exercising your right to data portability pursuant to Art. 20 (1) GDPR, you have the right to have the personal data transferred directly from one controller to another controller, insofar as this is technically feasible and insofar as this does not adversely affect the rights and freedoms of other persons.
Right to Object (Art. 21 GDPR)
You have the right to object at any time, on the basis of reasons arising from your particular situation, to the processing of personal data relating to you which is carried out on the basis of data processing in the public interest pursuant to Art. 6 (1) e GDPR or on the basis of our legitimate interest pursuant to Art. 6 (1) f GDPR.
If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.
Withdrawing Consent
You have the right to withdraw your consent to the processing of personal data at any time with effect for the future.
Right to Lodge a Complaint
If there has been a breach of data protection legislation, the person affected may file a complaint with the competent regulatory authorities. The competent regulatory authority for matters related to data protection legislation is the data protection officer of the German state in which our company is headquartered. A list of data protection officers and their contact details can be found at the following link: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.
Status of Privacy Policy
This privacy policy is currently valid and has the following status: October 2026.
If we continue to develop our website and our offers or if legal or regulatory requirements change, it may be necessary to amend this privacy policy. You can access the current privacy policy at any time here.
