Privacy policy

1. Controller

KörperExklusiv Sports KG
Neue Poststr. 15, 53721 Siegburg
Represented by: Denis Oster (Managing Director)
Phone: 02241 1270853
Email: info@ems-mobile.eu

We are not required by law to appoint a data protection officer. Please send data protection enquiries to the contact details given above.

2. Processing when the website is accessed (hosting & log files)

This website is provided via Vercel; DNS and security run through Cloudflare. When the site is accessed, technically necessary data is processed in server log files (including IP address, date/time, page requested, volume of data transferred, referrer, browser/device type). The purpose is secure and stable delivery as well as protection against misuse. The legal basis is our legitimate interest (Art. 6(1)(f) GDPR). Log files are deleted or anonymised after a short time.

3. Cookies & storage on your device

Necessary: We store your cookie decision locally in your browser (entry “ems-consent”) and – if you log in to the corporate client area – a session cookie. This storage is technically necessary (§ 25(2) TDDDG, Art. 6(1)(f) GDPR) and does not require consent.

Subject to consent: The conversion tracker described in section 5 sets a pseudonymous cookie (“ems_sid”). It is set only after your express consent.

4. Consent & withdrawal (consent banner)

On your first visit we ask for your consent to non-necessary services via a banner. Until you agree, no cookies or scripts subject to consent are loaded. You are free to choose between “Decline” and “Accept” and can change or withdraw your choice at any time via the “Cookie settings” link in the footer. The lawfulness of the processing carried out up to the withdrawal remains unaffected.

5. Conversion tracking

Once you have given consent, we load a conversion tracker operated by us (delivered via crm.ems-mobile.eu). The following are processed: page views, clicks on phone and WhatsApp links, interactions with forms (start, submission, abandonment), a pseudonymous session identifier (cookie “ems_sid”) and – where present – advertising parameters (e.g. Google Click ID, UTM parameters). The purpose is to measure and optimise our reach and our marketing (conversion measurement). The legal basis is your consent (Art. 6(1)(a) GDPR, § 25(1) TDDDG). A consent signal passes your decision on to any marketing tags. You can withdraw your consent at any time (section 4).

6. Contact & enquiry forms

If you use a form (e.g. trial session, JOB-EMS enquiry, contact, campaign pages), we process the data you provide (e.g. name, email, phone, company where applicable, postcode/city, message) in order to handle your enquiry and to get in touch with you. The legal bases are the performance of pre-contractual measures (Art. 6(1)(b) GDPR) and our legitimate interest in efficient processing (point (f)). To handle it, we transmit the enquiry in signed form to our own CRM system. We send a confirmation email via Resend. To protect against spam and misuse we use Cloudflare Turnstile and Arcjet (Art. 6(1)(f) GDPR). Where present, advertising parameters are transmitted as well in order to attribute the campaign.

7. Recipients & processors

We use carefully selected service providers with whom – where required – data processing agreements pursuant to Art. 28 GDPR are in place: Vercel (hosting), Cloudflare (DNS, security, Turnstile), Resend (email delivery), Arcjet (protection against misuse) and our CRM for lead management. Where data is transferred to third countries (in particular the USA), this is done on the basis of the EU-US Data Privacy Framework or the EU standard contractual clauses.

8. Storage period

We store personal data only for as long as is necessary for the respective purposes or as long as statutory retention periods require. Server log files are deleted at short notice; enquiry data is deleted once the enquiry has been dealt with or once statutory periods have expired; processing based on consent ends when you withdraw it.

9. Your rights

You have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and the right to object (Art. 21); you can withdraw consent you have given at any time with effect for the future (Art. 7(3)). To do so, contact info@ems-mobile.eu. You also have the right to lodge a complaint with a data protection supervisory authority; the authority responsible for us is the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (LDI NRW), the data protection supervisory authority of the state of North Rhine-Westphalia.

10. Currency of this policy

We adapt this privacy policy as soon as the processing or the legal situation changes. The current version published here applies in each case.