هذه المعلومات القانونية متاحة باللغة الإنجليزية. تُحرَّر العقود والفواتير للعملاء الدوليين باللغة الإنجليزية.
Privacy Policy
1. Controller
The controller under the General Data Protection Regulation (GDPR) is Stephan Walkowiak, sole proprietorship.
Business address: Wettersteinstr. 1, 82024 Taufkirchen, Germany.
Postal address: Wettersteinstraße 1, 82024 Taufkirchen, Germany.
Email: info@sportlager-muc.de
Phone: +49 152 34340294
Sportlager München is an offer by PARAMANIACSHOP – Paragliding & Paramotoring Shop.
2. Overview of processing
We process personal data only as required to provide our website and services. Processing is based on applicable legislation, in particular the GDPR and the German Federal Data Protection Act (BDSG).
Google Analytics 4 is used only with your explicit consent. Without consent, no tracking cookies are set.
3. Hosting and server logs
We operate this website on our own server infrastructure. It is no longer delivered from the former IONOS web hosting.
When pages are requested, the web server processes connection and access data. Access logs include the connection address, date and time, requested address, HTTP status, amount of data transferred and browser-provided referrer and browser information.
Purpose and legal basis: providing the website, diagnosing errors and preventing abuse under Article 6(1)(f) GDPR.
Retention: data is retained for as long as necessary for technical operation, error analysis or investigation of a security incident. Longer retention requires a legal basis.
4. Contact by email and phone
You can contact us through the linked email address or by phone. The email link opens your email application with a suggested subject. You choose what information to send.
We process your contact details and message to answer your enquiry. Contract-related enquiries are processed under Article 6(1)(b) GDPR; other enquiries under Article 6(1)(f), based on our interest in responding to your message.
Contacting us does not automatically subscribe you to a newsletter.
Retention: enquiry data is kept as needed to handle the enquiry and any resulting contract, taking account of statutory retention obligations and the establishment or defence of claims.
5. WhatsApp, Signal and Telegram
Contact links open the selected messenger or its website. You contact us through that service only when you send a message there. We process the contact details, messages and any images or documents you send to handle your enquiry.
Article 6(1)(b) GDPR applies to contract-related messages and Article 6(1)(f) to other enquiries. You may use email or phone instead. A messenger enquiry is not newsletter consent.
The selected messenger processes data under its own privacy policy. Details about providers, processing locations, transfers and retention are available here:
Communication stored by us is subject to the retention criteria in section 4.
6. Email communication and newsletters
We use Brevo for transactional emails, including confirmations and invoices, and for newsletters.
Brevo (formerly Sendinblue)
Sendinblue GmbH
Köpenicker Str. 126
10179 Berlin, Germany
Transactional emails
We send enquiry confirmations, contractual documents, invoices, reminders and notifications concerning your storage agreement through Brevo. The legal basis is Article 6(1)(b) GDPR (performance of a contract).
Newsletters
With your consent, we occasionally send offers, sports equipment storage tips and news. Data includes your email address, name if supplied, and opening and click rates for optimisation. The legal basis is Article 6(1)(a) GDPR (opt-in consent).
You can unsubscribe at any time using the link in each email or by emailing info@sportlager-muc.de.
Processing on our behalf
A data processing agreement under Article 28 GDPR is in place with Brevo. Brevo processes data exclusively in the EU.
Retention: email addresses are retained until consent is withdrawn or deletion is requested.
7. Map embedding (OpenStreetMap)
The location map loads only when you select “Load map”. Your browser then connects to the OpenStreetMap Foundation, St John’s Innovation Centre, Cowley Road, Cambridge CB4 0WS, United Kingdom.
Loading the map establishes a connection to the provider’s servers and may transmit your IP address to OpenStreetMap. The legal basis is Article 6(1)(f) GDPR, our legitimate interest in showing our location.
9. Google Analytics 4
The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. With consent, page views, scrolling, internal searches, browser/device information, referrers and cookie identifiers are processed for usage statistics.
Your IP address is transmitted to Google during the connection. Google states that it uses it to determine approximate location during collection and then discards it. Our website does not truncate it before transmission. Google’s regional data collection information.
Our website code disables Google Signals and advertising personalisation signals. Consent to the analytics offered here does not include personalised advertising. Processing by Google in the United States is possible. Google’s international data transfer information.
Google privacy policy. Section 8 explains the validity of your choice and how to withdraw it.
10. Contract data
When you enter into a storage agreement, we process your first and last name, address, email address, phone number, bank details for SEPA direct debit and details of stored items.
Handover report and photographs
At drop-off, we prepare a handover report with photographs documenting the condition of your items. These photographs are used solely as evidence and are not published or disclosed to third parties.
Invoices and bookkeeping
You receive invoices according to the agreed billing arrangement, showing VAT. Invoice data is processed in our accounting system (ERPNext) on our server in Germany and retained in accordance with statutory retention periods.
Collection and acknowledgement of receipt
At collection, you acknowledge receipt of your items. This confirmation is archived with the handover report.
The legal bases are Article 6(1)(b) GDPR (contract performance) and Article 6(1)(c) GDPR (bookkeeping obligations).
Retention: contractual data, reports and invoices are kept for the duration of the business relationship and then for ten years, based on statutory retention obligations under the German Commercial Code (HGB) and Fiscal Code (AO).
11. Your rights
Under the GDPR you have the following rights:
- Access (Article 15): request information about your data stored by us.
- Rectification (Article 16): request correction of inaccurate data.
- Erasure (Article 17): request deletion unless retention obligations prevent it.
- Restriction of processing (Article 18): request restrictions on processing your data.
- Data portability (Article 20): receive your data in a machine-readable format.
- Objection (Article 21): object to processing based on legitimate interests.
- Withdrawal: withdraw consent at any time for future processing.
To exercise your rights, email info@sportlager-muc.de.
12. Complaints to the supervisory authority
You may complain to a data protection supervisory authority about our processing. The authority responsible for us is the Bavarian State Office for Data Protection Supervision (Bayerisches Landesamt für Datenschutzaufsicht, BayLDA), Promenade 18, 91522 Ansbach, Germany. Phone: +49 (0) 981 180093-0. www.lda.bayern.de.
13. Data security
We use technical and organisational security measures to protect your data against accidental or intentional manipulation, loss, destruction and unauthorised access. These include SSL/TLS website encryption, encrypted transmission of form data, regular security updates and access controls for personal data.
14. Changes to this notice
We may update this policy to reflect changes in legislation, our services or data processing. The current version is available on this page.
Last updated: 14 September 2026