Privacy Policy
Information on the processing of personal data at Sportschule Senshu – transparent, comprehensive, and in accordance with GDPR requirements.
Controller
The controller within the meaning of data protection laws, in particular the EU General Data Protection Regulation (GDPR), is:
Sportschule Senshu GmbH
- Wismarer Str. 42
12207 Berlin
Deutschland
- +49 (30) 84 72 31 04
- Fax: +49 (30) 84 72 31 05
- info@senshu.de
Your data subject rights
Using the contact details of our data protection officer provided below, you may exercise the following rights at any time:
- •Access to the data we hold about you and how it is processed (Art. 15 GDPR),
- •Rectification of inaccurate personal data (Art. 16 GDPR),
- •Erasure of the data we hold about you (Art. 17 GDPR),
- •Restriction of data processing where we are not yet permitted to erase your data due to statutory obligations (Art. 18 GDPR),
- •Objection to the processing of your data by us (Art. 21 GDPR), and
- •Data portability, provided you have consented to the data processing or have concluded a contract with us (Art. 20 GDPR).
Where you have granted us consent, you may revoke it at any time with effect for the future.
You may lodge a complaint with the supervisory authority competent for your place of residence, workplace, or the alleged infringement at any time (Art. 77 GDPR in conjunction with § 19 BDSG). A list of supervisory authorities (for the non-public sector) with their addresses can be found at: bfdi.bund.de/Anschriften_Links.
Collection of general information when visiting our website
Nature and purpose of processing
When you access our website – i.e. without registering or otherwise submitting information – information of a general nature is collected automatically. This information (server log files) includes the type of web browser used, the operating system, the domain name of your internet service provider, and similar data. This information does not allow any conclusions to be drawn about your identity.
It is processed in particular for the following purposes:
- •Ensuring a smooth connection to the website,
- •Ensuring comfortable use of our website,
- •Evaluating system security and stability, and
- •for other administrative purposes.
We do not use your data to draw any conclusions about your person.
Anonymous information of this kind may be statistically evaluated by us in order to optimise our web presence and the underlying technology.
Legal basis
Processing is carried out pursuant to Art. 6(1)(f) GDPR on the basis of our legitimate interest in improving the stability and functionality of our website.
Recipients
Recipients of the data are only the controller and, where applicable, technical service providers acting as processors for the operation and maintenance of our website.
Retention period
Data is deleted as soon as it is no longer necessary for the purpose for which it was collected. For data used to provide the website, this is generally when the session in question has ended.
Provision mandatory or required
The provision of the aforementioned personal data is neither required by law nor by contract. However, without the IP address and cookie identifier the functionality of our website cannot be guaranteed, and individual services and features may be unavailable or restricted. For this reason, an objection is excluded.
Contact form
Nature and purpose of processing
The data you enter is stored for the purpose of individual communication with you. A valid email address is required to allocate your enquiry and provide a response. The provision of any further data is optional.
Legal basis
The processing of data entered in the contact form is carried out on the basis of a legitimate interest (Art. 6(1)(f) GDPR).
By providing the contact form, we aim to make it easy for you to get in touch with us. The information you provide is stored for the purpose of handling the enquiry and any follow-up questions.
Where you contact us to request a quotation, the data entered in the contact form is processed for the purpose of taking pre-contractual measures (Art. 6(1)(b) GDPR).
Recipients
Recipients of the data are only the controller and, where applicable, processors.
Retention period
Data is deleted no later than six months after the enquiry has been dealt with.
Where a contractual relationship arises, we are subject to the statutory retention periods under the German Commercial Code (HGB) and will delete your data after six years.
Provision mandatory or required
The provision of your personal data is voluntary and based solely on your consent. Without your consent we are unfortunately unable to contact you.
Customer management with HubSpot
Nature and purpose of processing
When you submit a trial class or contact form on our website, we also transfer the data you have entered to our customer relationship management system HubSpot. The provider is HubSpot Ireland Limited, 1 Sir John Rogerson's Quay, Dublin 2, Ireland (part of HubSpot, Inc., headquartered in the USA).
Specifically, we transfer: first name, last name, email address, and – if provided by you – telephone number, age, selected course/area, and your message. We also record which page the form was submitted from and what type of form it was (e.g. trial training or booking card). We use this data to process your enquiry in a structured way, to prepare subsequent consultations, and to identify you unambiguously.
Legal basis
Processing is carried out on the basis of Art. 6(1)(b) GDPR for the performance of pre-contractual measures (arranging a trial class, consultation prior to concluding a contract) and on the basis of Art. 6(1)(f) GDPR on account of our legitimate interest in the efficient and traceable handling of enquiries.
Recipients
The recipient of the data is HubSpot Ireland Limited as processor pursuant to Art. 28 GDPR. A data processing agreement (DPA) with HubSpot ensures that your data is protected to GDPR standards. Within our team, only authorised staff members have access to the data.
Retention period
Data is stored in HubSpot for as long as is necessary for the processing of your enquiry and any subsequent contract with us. Where no contractual relationship arises from your enquiry, we will delete your data no later than 24 months after the last contact. Where a contract is concluded, the statutory retention periods apply (e.g. 6 years under the German Commercial Code).
Third-country transfer
HubSpot is part of a US group and may in individual cases transfer data to its parent company HubSpot, Inc. (USA) for technical processing. Transfer to the USA is carried out on the basis of EU Standard Contractual Clauses (SCCs) and – where certified – the EU-US Data Privacy Framework, to which HubSpot, Inc. has acceded (dataprivacyframework.gov). We apply supplementary safeguards where required.
Withdrawal / data subject rights
You may have your data stored in HubSpot deleted or restricted at any time by emailing info@senshu.de In addition, all rights listed in the section 'Your data subject rights' are available to you (access, rectification, erasure, data portability, objection).
Provision mandatory or required
The provision of data is voluntary. Without a first name, last name, and email address we are unable to process your enquiry – these are technically and substantively required in order to contact you.
Further information
Comprehensive information on data protection at HubSpot can be found at: legal.hubspot.com/de/privacy-policy.
Trial system (digital.senshu.de)
Nature and purpose of processing
When you submit a trial class or contact form, your enquiry is also forwarded in parallel to our internal trial system at digital.senshu.de. This system is owned by us (Sportschule Senshu GmbH) and serves the internal administration of trial class enquiries, appointment scheduling, and the preparation of your first training session. This is not an external service provider but our own technical infrastructure operated by the same controller.
The following data is transferred: first name, last name, email address, and – if provided – telephone number, age, course interest, and message/notes.
Legal basis
Processing is carried out on the basis of Art. 6(1)(b) GDPR (performance of pre-contractual measures).
Recipients
The sole recipient is the controller (Sportschule Senshu GmbH). The data does not leave our own server infrastructure. No transfer to third parties takes place.
Retention period
Data is retained in the trial system for as long as is necessary for the processing of your trial class enquiry and, where applicable, the initiation of membership. Data is deleted no later than 24 months after your enquiry, provided no contractual relationship has arisen and no statutory retention obligations apply.
Third-country transfer
Does not take place. The system runs on a server within the EU.
Provision mandatory or required
The provision of data is voluntary. Without the required fields we are however unable to prepare your trial class and contact you.
Use of Google Analytics
Nature and purpose of processing
This website uses Google Analytics, a web analytics service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter 'Google'). Google Analytics uses so-called 'cookies', which are text files stored on your computer that enable analysis of your use of the website. The information generated by the cookie about your use of this website is generally transferred to a Google server in the USA and stored there. Due to the activation of IP anonymisation on this website, your IP address is, however, truncated by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area before being stored. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and truncated there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity, and to provide other services relating to website and internet use to the website operator. The IP address transmitted by your browser within the framework of Google Analytics will not be merged with other data held by Google.
The purposes of data processing are the evaluation of website usage and the compilation of reports on website activity. On the basis of website and internet usage, further related services are then to be provided.
Legal basis
Processing is carried out on the basis of the user's consent (Art. 6(1)(a) GDPR).
Recipients
Recipients of the data are the controller and Google as processor. We have concluded the relevant data processing agreement with Google for this purpose.
Retention period
Data is deleted as soon as it is no longer necessary for our recording purposes.
Third-country transfer
Google processes your data in the USA and has submitted to the EU-US Privacy Shield privacyshield.gov/EU-US-Framework. We have also concluded Standard Data Protection Clauses with Google for the use of Google Analytics.
Provision mandatory or required
The provision of your personal data is voluntary and based solely on your consent. If you prevent access, this may result in functional restrictions on the website.
Withdrawal of consent
You may prevent the storage of cookies by adjusting the settings in your browser software; please be aware, however, that in this case you may not be able to use all functions of this website to their full extent. You may also prevent the collection by the cookie of data relating to your use of the website (including your IP address) and its transmission to Google, as well as the processing of this data by Google, by downloading and installing the browser plugin available at the following link: Browser add-on to disable Google Analytics.
In addition to or as an alternative to the browser add-on, you can prevent tracking by Google Analytics on our pages by clicking this link. An opt-out cookie will be installed on your device. This will prevent data collection by Google Analytics for this website and this browser in the future, for as long as the cookie remains installed in your browser.
Profiling
Google Analytics can be used to evaluate the behaviour of website visitors and analyse their interests. For this purpose we create a pseudonymous user profile.
Fonts (Google Fonts – self-hosted)
Nature and purpose of processing
For uniform rendering of fonts, we use the typeface 'Yuji Mai' on this website, which originates from the Google Fonts project. We host this font exclusively on our own server – accessing our website does not result in any connection to Google servers, neither to fonts.googleapis.com nor to fonts.gstatic.com.
This approach satisfies the requirements arising from the ruling of the Munich Regional Court (case no. 3 O 17493/20, January 2022), which classified the embedding of Google Fonts via the Google CDN without consent as an unlawful transmission of IP addresses.
Legal basis
Since no personal data is transmitted to Google, consent is not required. The delivery of the fonts is carried out on the basis of our legitimate interest in a uniform, professional presentation of our content (Art. 6(1)(f) GDPR).
Recipients
The sole recipient is our controller or our hosting provider, on whose servers the font files are stored. No transfer to Google or other third parties takes place.
Retention period
We do not collect any personal data through the embedding of the font. Server log files of our hosting provider are processed in accordance with the section 'Collection of general information'.
Third-country transfer
Does not take place, as the font files are delivered locally.
Source & licence
The font 'Yuji Mai' is available under the SIL Open Font License (OFL) 1.1 and may be freely downloaded, used locally, and employed in commercial projects. The project can be viewed at fonts.google.com/specimen/Yuji+Mai.
Use of Google Maps
Nature and purpose of processing
On this website we use the service Google Maps. Google Maps is operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter 'Google'). This enables us to display interactive maps directly on the website and allows you to conveniently use the map function.
When you visit the website, Google receives information that you have accessed the relevant sub-page of our website. This occurs regardless of whether Google provides a user account through which you are logged in, or whether no user account exists. If you are logged in to Google, your data will be assigned directly to your account. If you do not want your data to be associated with your Google profile, you must log out of Google before activating the button. Google stores your data as user profiles and uses them for the purposes of advertising, market research, and/or the customised design of its website. Such evaluation is carried out in particular (even for users who are not logged in) to provide targeted advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, and you must contact Google directly to exercise this right.
If you do not want Google to collect, process, or use data about you via our website, you can disable JavaScript in your browser settings. In that case, however, you may not be able to use our website at all or only to a limited extent.
Further information on data processing by Google can be found in Google's privacy notices. You can also change your personal privacy settings in the Privacy Centre. Detailed guidance on managing your own data in connection with Google products can be found here.
Legal basis
The legal basis for embedding Google Maps and the associated data transfer to Google is your consent (Art. 6(1)(a) GDPR).
Recipients
When you visit the website, Google receives information that you have accessed the relevant sub-page of our website. Further information on the purpose and scope of data collection and processing by the plug-in provider can be found in the provider's privacy policy (policies.google.com/privacy).
Retention period
We do not collect any personal data through the embedding of Google Maps.
Third-country transfer
Google processes your data in the USA and has submitted to the EU-US Privacy Shield privacyshield.gov/EU-US-Framework.
Withdrawal of consent
If you do not want Google to collect, process, or use data about you via our website, you can disable JavaScript in your browser settings. In that case, however, you may not be able to use our website at all or only to a limited extent.
Provision mandatory or required
The provision of your personal data is voluntary and based solely on your consent. If you prevent access, this may result in functional restrictions on the website.
YouTube videos
Nature and purpose of processing
On this website we embed videos from the YouTube platform. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google").
We use YouTube in extended privacy mode (youtube-nocookie.com). Before you give your consent, only a local placeholder is displayed – no data is transmitted to YouTube or Google. Only when you actively load a video via our consent dialog is a connection to Google/YouTube servers established. In doing so, your IP address, among other data, is transmitted to Google, and YouTube may use cookies or comparable technologies.
Legal basis
The embedding of YouTube videos and the associated data transfer take place exclusively on the basis of your consent pursuant to Art. 6(1)(a) GDPR, which you grant via our consent dialog and can revoke at any time with effect for the future.
Recipients
The recipient of the data is Google Ireland Limited and, where applicable, Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
Storage period
The specific storage period of the data processed by Google/YouTube is beyond our knowledge and is determined by Google.
Third-country transfer
When using YouTube, your data may be transferred to the USA.
Withdrawal of consent
You can withdraw your consent at any time with effect for the future via our consent dialog. Further information on the handling of user data can be found in Google’s privacy policy at policies.google.com/privacy.
Google AdWords
Nature and purpose of processing
Our website uses Google Conversion Tracking. The operating company of Google AdWords services is Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. If you have reached our website via a Google advertisement, a cookie is placed on your computer by Google AdWords. The conversion tracking cookie is set when a user clicks on an advertisement placed by Google.
If the user visits certain pages of our website and the cookie has not yet expired, we and Google can recognise that the user clicked on the advertisement and was directed to that page. Each Google AdWords customer receives a different cookie. Cookies cannot therefore be tracked across the websites of AdWords customers. The information obtained using the conversion cookie is used to compile conversion statistics for AdWords customers who have opted for conversion tracking. Customers learn the total number of users who clicked on their advertisement and were directed to a page tagged with a conversion tracking tag. They do not, however, receive any information that can be used to personally identify users.
Legal basis
The legal basis for embedding Google AdWords and the associated data transfer to Google is your consent (Art. 6(1)(a) GDPR).
Recipients
Personal data, including your IP address, is transferred to Google in the USA with every visit to our website. This personal data is stored by Google. Google may in certain circumstances pass on personal data collected via this technical process to third parties.
Our company does not receive any information from Google by means of which the data subject could be identified.
Retention period
These cookies expire after 30 days and are not used for personal identification.
Third-country transfer
Google processes your data in the USA and has submitted to the EU-US Privacy Shield privacyshield.gov/EU-US-Framework.
Withdrawal of consent
If you do not wish to participate in tracking, you may decline the placement of the cookie required for this purpose – for example by adjusting your browser settings to generally disable the automatic placement of cookies, or by setting your browser to block cookies from the domain 'googleleadservices.com'.
Please note that you must not delete the opt-out cookies for as long as you do not want any recording of measurement data. If you have deleted all cookies in your browser, you must set the respective opt-out cookie again.
Provision mandatory or required
The provision of your personal data is voluntary and based solely on your consent. If you prevent access, this may result in functional restrictions on the website.
Mouseflow
This website uses Mouseflow, a web analytics tool provided by Mouseflow ApS, Flaesketorvet 68, 1711 Copenhagen, Denmark.
Mouseflow records random individual visits (so-called session replays). Mouse movements, clicks, scrolling behaviour, and keyboard inputs are captured in anonymised form. The aim is to better understand how our website is used and to make our offering more user-friendly.
The following data may be processed:
- •Truncated IP address (anonymisation)
- •Device and browser information
- •Screen resolution
- •Visit duration and interactions on the website
Inputs in form fields are not recorded, or are automatically anonymised prior to storage. Mouseflow uses cookies and similar technologies to recognise users and analyse sessions.
Processing is carried out exclusively on the basis of your consent pursuant to Art. 6(1)(a) GDPR, which you may grant or withdraw via our cookie consent tool.
Mouseflow processes data within the EU. A data processing agreement pursuant to Art. 28 GDPR has been concluded with Mouseflow.
Further information on data protection at Mouseflow can be found at: mouseflow.com/privacy.
eTracker web analytics
Nature and purpose of processing
This website uses the web analytics service of eTracker GmbH, Erste Brunnenstraße 1, 20459 Hamburg, Germany ('eTracker'). eTracker helps us to analyse the reach and usage behaviour of our website in order to improve content and functionality.
This website uses etracker in cookieless mode: no cookies are set and no personal data is processed. The usage data collected is evaluated anonymously and is not used to personally identify individual visitors. etracker stores the data exclusively in Germany on its own servers and, as a German provider, is fully GDPR-compliant.
Legal basis
As no personal data is processed in a way that requires consent in cookieless mode, the anonymous reach measurement is carried out on the basis of our legitimate interest in privacy-friendly analytics pursuant to Art. 6(1)(f) GDPR. Consent via the cookie banner is not required for this.
Recipients
The recipient of the data is eTracker GmbH as processor pursuant to Art. 28 GDPR. A data processing agreement has been concluded.
Retention period
The retention period is governed by the retention periods documented by eTracker. Data is anonymised or deleted as soon as it is no longer required for our analytics purposes.
Objection
You can object to the anonymous reach measurement at any time with effect for the future. You can find the opt-out option and further information on data protection at etracker at: etracker.com/datenschutz.
Google Tag Manager
Nature and purpose of processing
This website uses the Google Tag Manager (GTM) of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Tag Manager is a tag management system that allows website tags to be integrated and managed centrally via a single interface.
Google Tag Manager itself does not process any personal data of users; however, it triggers other tags that may in turn collect data. Google Tag Manager does not access this data. Where a deactivation has been applied at domain or cookie level, this remains in effect for all tracking tags implemented via Google Tag Manager.
Legal basis
The legal basis for using Google Tag Manager is your consent pursuant to Art. 6(1)(a) GDPR.
Recipients
The recipient of the processing triggered via the container is Google Ireland Ltd. or Google LLC. Where data is transferred to the USA, this transfer is based on the EU Standard Contractual Clauses (SCCs) issued by the European Commission and/or the EU-US Data Privacy Framework, to which Google has acceded.
Retention period
Google Tag Manager itself does not store any personal data. Storage and retention periods depend on the individual tags triggered.
Withdrawal of consent
You may withdraw your consent at any time via our cookie banner. Further information can be found in Google's privacy notices: policies.google.com/privacy.
Image credits
On this website we use – in addition to photographs taken by our own team of our premises – stock imagery from the following providers:
- •Pexels · pexels.com/lizenz — Used in accordance with the Pexels licence; free commercial use permitted.
- •Unsplash · unsplash.com/lizenz — Used in accordance with the Unsplash licence; free commercial use permitted.
Both providers permit free use of their content for commercial and non-commercial purposes without any attribution requirement. No personal data of visitors to our website is transferred to Pexels or Unsplash during normal page visits – the images are stored on and delivered from our server.
Should any content be identifiable as being subject to third-party rights, please send a brief note to info@senshu.de – we will remove the relevant content without delay.
Changes to this Privacy Policy
We reserve the right to adapt this Privacy Policy so that it always reflects current legal requirements or to implement changes to our services in the Privacy Policy, e.g. when introducing new services. Your next visit will then be subject to the new Privacy Policy.
Questions to the data protection officer
If you have questions about data protection, please write to us by email or contact the person responsible for data protection in our organisation directly:
info@senshu.deThis Privacy Policy was created with the privacy policy generator of activeMind AG (version 2018-06-12).