Privacy Notice

As revised on 21 February 2022.

You can find the German version of the Privacy Notice here.

1 Preamble

Data protection is of a particularly high priority of Olympia Wednesday ("Olympia Wednesday", "we" or "us") and we are committed to protecting your privacy and personal data. With the following Privacy Notice, we inform you in detail about how we use your personal data and what rights you have.

2 Scope of application

This Privacy Notice applies to the use of your personal data when you visit our website and online shop available at https://olympiawednesday.com/ or our social media profiles on Instagram or Facebook. In addition, this Privacy Notice applies when you contact us by e-mail or telephone, when you order products or when you create a personal account on the website.

3 Who is responsible and to whom can I reach out?

The controller of the data processing operations described in this Privacy Notice is: 

Popis & Herrmann GbR, Ritterstraße 2A, 10969 Berlin, Germany

E-Mail: privatepolicy@olympiawednesday.com 

You can contact the data controller at any time in relation to all data protection inquiries, in particular the exercise of your rights as a data subject (Section 9). In particular, the following e-mail address is available for such requests: privatepolicy@olympiawednesday.com.

4. Which data do we process from you, for what purposes and on what legal basis do we process your data?

We collect and process various personal data from you depending on the specific processing situation.

We process your personal data exclusively in accordance with the provisions of the General Data Protection Regulation ("GDPR") and the Federal Data Protection Act (Bundesdatenschutzgesetz) ("BDSG").

Below you will find a list of which personal data we process depending on the processing situation, the purposes of this data processing and the legal basis on which we process the data.

4.1 Visiting our Olympia Wednesday website

In this section 4.1 we describe how your personal data is processed in connection with your visit to our website at: https://olympiawednesday.com/.

4.1.1 Visiting our website

4.1.2 Subscription to our newsletter

To receive information and news about our products, such as announcements of product launches or current offers, you can sign up for our newsletter on our website.

4.2 Olympia Wednesday online-shop

In this section 4.2 we describe how your personal data is processed in connection with your visit to our online shop at: https://olympiawednesday.com/.

4.2.1 Orders

Via our online shop, visitors can order our products directly to their homes.

4.2.2 Registration, login and user account

You can register as a user in our online shop and create a user account. Such a user account allows you to order products in our online store more easily, as your personal data is permanently stored in a password-protected user account.

The creation of the user account is optional. After setting up a user account, no new data entry is required. You can view and change the data stored about you in your user account at any time. You also have the option to delete your user account at any time.

4.3 Contacting us via e-mail, contact form, telephone or by mail

Depending on your request, you can contact us via our websites, by e-mail, by telephone or in writing.

4.4 Social media presentations

We maintain publicly accessible profiles on various social networks. Your visit to these profiles initiates a variety of data processing operations. In the following, we provide an overview of which personal data is collected, used and stored by us when you visit our profiles.

When you visit our profiles, your personal data is collected, used and stored not only by us, but also by the operators of the respective social network ("providers"). This happens even if you yourself do not have a profile in the respective social network. The individual data processing operations and their scope differ depending on the provider and they are not necessarily traceable for us. For details about the collection and storage of your personal data as well as the type, scope and purpose of their use by the provider, please refer to the privacy notices of the respective provider:

- the privacy notice for Instagram, which is operated by Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Dublin, can be viewed at https://help.instagram.com/519522125107875/?maybe_redirect_pol=0. 

- the privacy notice for Facebook, which is operated by Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Dublin, can be viewed at https://de-de.facebook.com/policy.php.

As the operator of a social media presentation, we can only view the information stored in your public profile, and only if you have such a profile and are logged into it while you visit our site. In addition, the providers provide us with partly anonymous usage statistics, which we use to improve the user experience when visiting our pages. We do not have access to the usage data that the providers collect to create these statistics.

Nevertheless, there is a joint controllership pursuant to Art. 26 GDPR between us and the providers who create such usage statistics with regard to the data processing operations that take place. As "joint controllers", we are jointly responsible for the processing and must ensure compliance with the applicable data protection law.

In this context, providers have committed to us to assume primary responsibility under the GDPR for the processing of such data, to comply with all obligations under the GDPR with respect to such data, and to provide data subjects with the essence of this commitment.

The data processing in connection with the social media presentation serves our and your legitimate interest in improving the user experience when visiting our social media pages in a target group-specific manner. The legal basis for the data processing is therefore Art. 6 (1) lit. f GDPR.

In addition, the providers use so-called cookies (see section 4.5), which are stored on your terminal device when you visit our pages, even if you do not have your own profile or are not logged into it during your visit to our site. These cookies allow the providers to create user profiles based on your preferences and interests and to show you advertising tailored to these. Cookies remain on your terminal device until you delete them. Details on this can be found in the privacy notices of the providers.

If you use our profiles on social networks to contact us (for example, by creating your own posts, responding to one of our posts or by sending us private messages), the data you provide us with will be processed by us solely for the purpose of contacting you. The legal basis for the collection of data is Art. (1) lit. b GDPR.

We delete stored data as soon as their storage is no longer necessary or you request us to delete them. In the event of statutory retention obligations, we limit the processing of stored data accordingly.

In the context of data processing in connection with the social media sites, your personal data may be transferred to third countries. In this respect, we refer to section 7.

4.5 Cookies and tracking technologies

4.5.1 General information about cookies

We use cookies on our websites. Cookies are small text files that are assigned to the browser you are using and stored on your hard drive by means of a characteristic character string and through which certain information flows to the entity that sets the cookie. Cookies cannot execute programs or transfer viruses to your computer and therefore cannot cause any damage. They serve to make the Internet offer as a whole more user-friendly and effective, i.e. more pleasant for you.

Cookies can contain data that makes it possible to recognize the device used. In some cases, however, cookies only contain information about certain settings that are not personally identifiable. However, cookies cannot directly identify a user. A cookie is primarily used to store information about a user during or after his visit within an online offer. The stored information may include, for example, the language settings on a website, the login status, a shopping cart, or where a video was watched.

A distinction is made between session cookies, which are deleted again as soon as you close your browser, and permanent cookies, which are stored beyond the individual session. In addition, a distinction is made between first-party cookies (these are set by ourselves) and third-party cookies (these are mainly used by advertisers, i.e. third parties) to process user information.

In terms of their function, cookies are again distinguished between:

- Mandatory cookies: These cookies are essential for the functioning of our websites and allow you to navigate our websites and use their features. Without these cookies, certain services that are necessary for the full functioning of our websites cannot be provided. 

- Analytics/Performance Cookies: we use these cookies to collect information about how our users use our websites, such as which pages are viewed and read most frequently or how users move from one link to the next. All information collected through these types of cookies does not relate to an individual user, but is aggregated and processed with information from other users. Cookies provide us with analytical data about how our websites work and how we can improve them. 

- Functionality-related cookies: these cookies allow us to remember a particular choice you have made and to customize our website to provide you with enhanced functionality and content. For example, these cookies may be used to store your language selection or country selection. 

- Marketing cookies: These cookies store your visit to our website, the pages you have visited and the links you have followed. We use this information to better tailor our website and the advertising displayed on it, as well as the marketing messages we send to you, to your interests. We may also share this information with third parties who provide a service to us for this purpose. 

- Social network cookies: to facilitate the exchange of content on the Internet, some of our web pages may contain small software applications from third-party providers, e.g. Instagram, to exchange data. In this case, the cookies are not stored by us, but by the third-party provider on your device. We cannot control these cookies. For more information, you should therefore visit the third-party provider's website.

Any use of cookies that is not absolutely technically necessary constitutes data processing that is only permitted with your explicit and active consent pursuant to Section 25 (1) TTDSG, Art. 6 (1) lit. a GDPR.

Consent is always freely given. The refusal of consent or a revocation of the same has no negative impact on you. Furthermore, we will only share your personal data processed by cookies with third parties if you have given your express consent to do so in accordance with Art. 6 (1) lit. a GDPR. The provision of consent is not required if the use of cookies is necessary for the website offer. The legal basis for this is Section 25 (2) No. 2 TTDSG. Such a necessity is given, for example, with regard to ensuring certain functionalities, such as:

- Display of the shopping cart,

- Enabling and maintaining the log-in,

- guaranteeing system security.

General information on revocation and objection: Depending on whether the processing is based on consent or legal permission, you have the option at any time to revoke any consent you have given or to object to the processing of your data by cookie technologies (collectively referred to as "opt-out"). You can initially declare your objection by means of your browser settings, e.g. by deactivating the use of cookies (whereby this may also restrict the functionality of our online offer).

An objection to the use of cookies for online marketing purposes can also be declared by means of a variety of services, especially in the case of tracking, via the websites https://optout.aboutads.info and https://www.youronlinechoices.com. In addition, you can obtain further instructions on how to object in the context of the information on the service providers and cookies used.

4.5.2 Third-party cookies (especially Google Analytics)

In order to be able to offer you a comfortable website, we use, inter alia, Google Analytics.

4.5.2.1 Google Analytics

We create pseudonymous usage profiles with the help of Google Analytics for the needs-based design of our websites. Google Analytics uses targeting cookies that are stored on your terminal device and can be read by us. In this way, we are able to recognize and count returning visitors as such and to learn how often our web pages have been accessed by different users.

The information generated by the cookie about your use of our website is usually transmitted to a Google server in the USA and stored there. However, since we have activated IP anonymization on our website, your IP address will be shortened by Google beforehand within member states of the EU. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and only shortened there (for more information on the purpose and scope of data collection, see e.g. https://policies.google.com/privacy?hl=de&gl=de).

For information on the transfer of data to third countries, please refer to section 7.

With respect to the data processing operations by Google Analytics, we act together with Google LLC as joint controllers according to Art. 26 GDPR. As "joint controllers", we are jointly responsible for the processing and must ensure compliance with applicable data protection law. We have therefore entered into a joint responsibility agreement with Google LLC (USA) pursuant to Art. 26 GDPR. The main contact for data protection issues is Google.

You can find more information under: https://support.google.com/policies/answer/9581826?p=privpol_privts&hl=de&visit_id=637655779858103449-2238882241&rd=1.

Google sets the following cookies when you visit our website and consent to the use of Google Analytics:

The legal basis is Section 25 (1) TTDSG, Art. 6 (1) lit. a GDPR (consent). Consent is always freely given. The refusal of consent or a revocation of the same has no negative impact on you.

You can revoke your consent once given at any time. Please use one of the following options for this purpose:

- You inform us that you wish to revoke your consent.

- You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website.

- You can also prevent the collection of data generated by the cookie and related to your use of our websites (including your IP address) to Google, as well as the processing of this data by Google, by downloading and installing the browser plugin available at the following link (https://tools.google.com/dlpage/gaoptout?hl=de).

4.5.2.2 Sleekcommerce

Our website uses the e-commerce services of Sleekcommerce. Sleekcommerce is an e-commerce provider from Germany (sleekcommerce UG (haftungsbeschränkt), Max-Brauer-Allee 218, 22769 Hamburg, e-mail: info@sleekshop.io). To provide the online store and to offer you the best possible shopping experience, Sleekcommerce sets cookies in your browser. In particular, your visits are recorded via these cookies.

Sleekcommerce sets the following cookies when you visit our website and consent to Sleekcommerce's use of them:

You can view more detailed information on data protection at Sleekcommerce at: https://www.sleekshop.io/en/privacy. Here you can also assert the data subject rights to which you are entitled against Sleekcommerce (e.g. right to deletion).

The legal basis is Section 25 (1) TTDSG, Art. 6 (1) lit. a GDPR (consent). Consent is always freely given. The refusal of consent or a revocation of the same has no negative impact on you.

You can deactivate the use of cookies by Sleekcommerce and thus revoke the consent given by you to us for the use of the service.

5 From whom do we collect your personal data?

Personal data is collected directly from you, e.g., by visiting our websites or online shop or subscribe to our newsletter.

6 To whom do we transfer your data?

Olympia Wednesday only shares your personal data if this is permitted pursuant to European data protection law, for example, because the data transfer is necessary for the performance of a contract or because you have given us your consent to share the data. We work with some service providers, such as technical service providers (e.g., hosting services, maintaining the website, support our marketing activities, provide communication tools) or logistics companies (e.g. postal companies such as DHL).

When you order products in our online store, we pass on certain data from you to our partners (e.g. your name and address) so that they can offer you the service or deliver the ordered goods.

6.1 Disclosure due to legal obligations or to protect legitimate interests

Insofar as we are obliged to do so by law, by court order or due to an enforceable official order, we must disclose your personal data to bodies entitled to receive information (e.g. supervisory or financial authorities). The legal basis for the transfer is then Art. 6 (1) lit. c GDPR.

6.2 Data processors and other recipients

It may happen that external service providers ("processors") are used for individual servicess. These will only act according to our instructions and have been contractually obligated to comply with the data protection provisions within the meaning of Art. 28 GDPR. This does not apply if these service providers themselves act as data controllers (e.g. payment service providers, legal and tax advisors, and shipping and distribution services for the delivery of goods ordered by you). The processors are also contractually obligated, for example, to either delete or return the personal data after completion of the order.

The following categories of recipients, which are usually processors, may receive access to your personal data:

- IT and web service providers or companies contracted as part of the support of our website or platform and internal company IT infrastructure (software, hardware).

        - Our main technical service providers are: Sleekcommerce UG (haftungsbeschränkt), Max-Brauer-Allee 218, 22769 Hamburg for the cloud-based operation of the webshop; webgo GmbH, Heidenkampsweg 81, 20097 Hamburg for hosting services (with servers in Germany); Sendinblue GmbH, Köpenicker Str. 126, 10179 Berlin for marketing services, in particular newsletter sending.

- Payment service providers to process payment for the goods you have ordered. Your payment data may be transmitted to payment service providers with whom we cooperate. For more information about the processing of personal data by payment service providers, please refer to their data protection notices: 

        - Mollie B.V., Keizersgracht 126, 1015 CW Amsterdam, the Netherlands.

- Shipping and Distribution Companies: We work with the following shipping companies to deliver our products.

        - DHL Paket International, DHL Paket GmbH, Sträßchensweg 10, 53113 Bonn, Germany.

        - UNITED PARCEL SERVICE (UPS) Deutschland S.à r.l. & Co. OHG, Head Office: United Parcel Service Deutschland S.à r.l. & Co. OHG, Görlitzer Straße 1, 41460 Neuss, Germany.

For more information about the processing of personal data by our service providers, please refer to their privacy notices.

The legal basis for the transfer to entities that are not processors is Art. 6 (1) lit. b or lit. f GDPR. In addition, we will only disclose your personal data to third parties if you have given your express consent to do so in accordance with Art. 6 (1) lit. a GDPR.

7 Do we transfer your data to third countries?

In the course of our business relationships, your personal data may be transferred or disclosed to third party companies. These may also be located outside the European Union ("EU") or the European Economic Area ("EEA"), in so-called third countries. Such processing will only take place to fulfill contractual and business obligations and to maintain your business relationship with us.

The European Commission certifies data protection comparable to the EU standard for some third countries by means of so-called adequacy decisions (a list of these countries and a copy of the adequacy decisions can be obtained here: http://ec.europa.eu/justice/data-protection/international-transfers/adequacy/index_en.html).

However, other third countries to which personal data may be transferred may not have a level of data protection comparable to the EU due to a lack of legal requirements. This may mean that your personal data is processed in a jurisdiction that offers a level of protection that, in certain cases, provides less protection for your personal data than the jurisdiction in which you normally reside. Where this is the case, we ensure that data protection is adequately guaranteed and that appropriate safeguards are in place. This means, for example, that we conclude the European Commission's standard contractual clauses for the protection of personal data.

Please contact us (see contact details in section 3) if you would like more information on this.

8 How long do we store your personal data?

Unless an explicit storage period is specified in section 4, we will only store your personal data for as long as we need the data for the purposes for which we collected it and for the fulfillment of legal requirements and obligations.

Your data will generally only be stored on our servers in Germany, subject to any transfer that may take place in accordance with the provisions in sections 6 and 7.

However, storage may take place beyond the specified time in the event of a (threatened) legal dispute with you or other legal proceedings or if storage is provided for by statutory provisions to which we are subject as the responsible party (e.g. Section 257 HGB or Section 147 AO). If the storage period prescribed by the legal regulations expires, the personal data will be blocked or deleted unless further storage by us is necessary and there is a legal basis for this.

9 What rights do you have as a data subject?

If you wish to exercise your data subject rights as described below, please contact us informally at privatepolicy@olympiawednesday.com or use the postal address given in section 3.

- According to Article 15 GDPR, you have the right to obtain confirmation from us as to whether or not personal data concerning you is being processed by us. Where that is the case, you have a right to access the personal data and obtain further information.

- According to Article 16 GDPR, you may have the right to obtain the rectification of inaccurate personal data concerning you without undue delay.

- According to Article 17 GDPR, you may have the right to obtain erasure of personal data concerning you if (i) it is no longer necessary in relation to the purpose for which it is collected, (ii) you have withdrawn your consent on which the processing is based, (iii) you have objected to the processing pursuant to Article 21 (1) GDPR and there are no overriding legitimate grounds for the processing, or the data subject objects to the processing pursuant to Article 21 (2) GDPR, (iv) your personal data has been unlawfully processed; (v) the personal data has to be erased for compliance with a legal obligation to which we are subject , or (vi) the personal data has been collected in relation to the offer of information society services pursuant to Article 8 (1) GDPR.

- According to Article 18 GDPR, you may have the right to obtain the restriction of processing. Such right shall exist if (i) you contested the accuracy of the personal data, (ii) the processing is unlawful and you oppose the erasure of the personal data and request the restriction of its use instead, (iii) the personal data is no longer needed for the purposes of the processing, but it is required by you for the establishment, exercise or defense of legal claims, or (iv) you have objected to processing pursuant to Article 21(1) GDPR pending the verification of whether our grounds legitimately override yours. • According to Article 19 GDPR, you have the right to obtain information about the recipients of data to whom the rectification, erasure, or restriction of processing has been communicated.

- According to Article 20 GDPR, you have the right to obtain personal data concerning you in a structured, commonly used and machine-readable format and to transmit the data to another controller.

- Right of withdrawal: If we process personal data on the basis of consent given by you, you are also entitled to withdraw your consent at any time in accordance with Article 7 (3) GDPR. Your withdrawal has the consequence that we will no longer continue the data processing based on this consent for the future. The lawfulness of the processing carried out on the basis of your consent until the withdrawal remains unaffected by your revocation.

- Right to complain: If you believe that the processing of your personal data by us violates data protection law, you have the right to complain to a supervisory authority pursuant to Art. 77 GDPR. In Berlin, the Berlin Commissioner for Data Protection and Freedom of Information (BInBDI) is the competent supervisory authority (Friedrichstr. 219, 10969 Berlin, mailbox@datenschutz-berlin.de).

10 Is there any obligation on your side to provide personal data?

There is neither a contractual nor a legal obligation to provide us with your personal data for the use of our websites. However, if you wish to contact us or to use one of our services, certain information may be required to enable us to process your request and provide our services to you.

11 Is the processing based on automated decision-making or profiling?

You have a right not to be subject to a decision based solely on automated processing, including profiling, if the decision is not necessary for the conclusion or performance of a contract, is not required by mandatory law, or is not based on your explicit consent. We do not use automated decision-making procedures, including profiling, unless we have explicitly informed you of them.

12 Do technical security measures exist?

We implement appropriate technical and organizational security measures to protect your personal data against accidental or intentional manipulation, partial or complete loss, destruction or against unauthorized access by third parties, taking into account the state of the art, implementation costs and the nature, scope, context and purpose of the processing, as well as the existing risks of a data breach (including its probability and impact) for the data subject. Our security measures are continuously improved in line with technological developments.

To protect your data transmitted via our online offer, we use, for example, SSL encryption. You can recognize such encrypted connections by the prefix https:// in the address bar of your browser.

We will be happy to provide you with more information on our security measures upon request.

13 Status and update of the Privacy Notice

Please note that this Privacy Notice may be amended by us at any time to the extent necessary to provide you with adequate information about the processing of your personal data. Please therefore check this privacy notice at regular intervals, insofar as you regularly use our services. Insofar as we provide addresses and contact information of companies and organizations in this Privacy Notice, please note that the addresses may change over time and please check the information before contacting us.

Status: 21.02.2022