Skip to content

Privacy policy

Only the German version of this privacy policy is legally binding.

1. Data protection at a glance

General information

The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data is any data by which you can be personally identified.

This website serves to provide information about CAP Teamwear, to enable you to contact us and to present location and company information. Depending on the function used, technical access data, contact data and the content of communications may be processed.

How do we collect your data?

Some of your data is collected when you provide it to us, for example by e-mail, by telephone or via one of our enquiry forms. Other data is collected automatically by the server infrastructure when you visit the website. This is primarily technical data such as your IP address, browser, operating system, time of the page request and the URL accessed.

What do we use your data for?

Some of the data is collected to ensure that the website is provided without technical errors, to guarantee security and to monitor performance. We use data from contact enquiries to deal with your request.

2. Controller

The controller responsible for data processing on this website is:

Monika Raith
Kagerstraße 1
93426 Roding
Germany

Phone: +49 9461 / 914 88 60
E-mail: info@cap-teamwear.de

The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data.

3. Hosting and technical operation

Scaleway Dedibox

This website is hosted on Dedibox server infrastructure provided by Scaleway. The provider is Scaleway S.A.S., 8 rue de la Ville l'Eveque, 75008 Paris, France. The servers are used to provide the website and to ensure its technical security and availability.

For further information, please refer to Scaleway’s privacy policy: https://www.scaleway.com/en/privacy-policy/ and Scaleway’s list of sub-processors: https://www.scaleway.com/en/subprocessorlist/ .

Technical operation and server administration are carried out by eSoul s.r.o., Company ID (IČO) 17582571, Kurzova 2222/16, 155 00 Praha - Stodůlky, Czech Republic.

The hosting and operating infrastructure is used on the basis of Art. 6(1)(f) GDPR. Our legitimate interest lies in the reliable, secure and high-performance provision of the website. Where providers act as processors, the processing is carried out on the basis of a data processing agreement.

Server log files

When you access this website, information is automatically processed in server log files. This may include, in particular, the following data:

  • IP address of the accessing device
  • date and time of the request
  • URL or file accessed
  • referrer URL
  • browser type and browser version
  • operating system used
  • HTTP status code
  • amount of data transferred
  • response time and technical performance metrics

The log data is processed for technical provision, error analysis, security monitoring and performance optimisation. It is stored for 180 days. This data is not combined with other data sources unless this is necessary to investigate security incidents.

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in the secure and technically error-free provision of the website.

Grafana monitoring

To evaluate website performance, availability and technical errors, server and performance logs are analysed in a Grafana instance operated locally on the same Dedibox. Grafana is not used as an external cloud service.

This processing serves exclusively the purposes of technical operation, error diagnosis, performance monitoring and system security. The legal basis is Art. 6(1)(f) GDPR.

4. General and mandatory information

Data protection

We treat your personal data as confidential and in accordance with the statutory data protection regulations and this privacy policy.

Please note that data transmission over the internet (e.g. when communicating by e-mail) may be subject to security vulnerabilities. Complete protection of data against access by third parties is not possible.

Storage period

Unless a more specific storage period has been stated in this privacy policy, your personal data will remain with us until the purpose for which it was processed no longer applies. If you assert a legitimate request for erasure or withdraw your consent to data processing, your data will be erased unless we have other legally permissible reasons for continuing to store it, such as statutory retention periods.

Legal bases for processing

Where you have consented to data processing, we process your data on the basis of Art. 6(1)(a) GDPR. Where processing is necessary for the performance of a contract or to take steps prior to entering into a contract, it is carried out on the basis of Art. 6(1)(b) GDPR. Where we are legally obliged to process data, we do so on the basis of Art. 6(1)(c) GDPR. In other cases, processing may be carried out on the basis of our legitimate interest pursuant to Art. 6(1)(f) GDPR.

Your rights

Within the scope of the applicable statutory provisions, you have the right at any time to obtain information about your stored personal data, its origin, its recipients and the purpose of the processing. You also have the right to rectification, erasure, restriction of processing and data portability, and the right to object to certain processing.

If you have given your consent to data processing, you may withdraw this consent at any time with effect for the future. The lawfulness of the processing carried out before the withdrawal remains unaffected.

Right to lodge a complaint with the competent supervisory authority

In the event of infringements of the GDPR, you have the right to lodge a complaint with a data protection supervisory authority, in particular in the Member State of your habitual residence, your place of work or the place of the alleged infringement.

SSL/TLS encryption

For security reasons and to protect the transmission of confidential content, this website uses SSL/TLS encryption. You can recognise an encrypted connection by the fact that the browser’s address bar begins with “https://”.

5. Contacting us

Enquiries by e-mail or telephone

If you contact us by e-mail or by telephone, your enquiry, including any personal data arising from it, will be processed by us for the purpose of dealing with your request. We do not pass on this data without your consent unless there is a legal obligation or contractual necessity to do so.

This data is processed on the basis of Art. 6(1)(b) GDPR if your enquiry relates to the performance of a contract or is necessary to take steps prior to entering into a contract. In all other cases, the processing is based on our legitimate interest in the effective handling of enquiries addressed to us pursuant to Art. 6(1)(f) GDPR, or on your consent pursuant to Art. 6(1)(a) GDPR if this has been requested.

Enquiry forms

On this website you can send us an enquiry using forms (contact form, project enquiry on product and topic pages, and partner enquiry). We process the information you enter in the respective form: name or contact person, e-mail address, company, club or team, depending on the form telephone number, country/location, desired quantity, topic or product, and your message. The form also transmits the title and address of the page on which you submitted it and the language of the page.

Purpose: We use this data exclusively to process your enquiry, to reply to you and, where applicable, to prepare a quotation.

Legal basis: Art. 6(1)(b) GDPR where your enquiry is aimed at entering into or performing a contract; otherwise our legitimate interest in answering the enquiries addressed to us pursuant to Art. 6(1)(f) GDPR. The confirmation of the privacy policy in the form serves to inform you.

Transmission and recipients: The form data is transmitted to our server in encrypted form (HTTPS), stored there in the administration of this website and forwarded by e-mail to the CAP Teamwear staff responsible for enquiries. For sending e-mails we use an e-mail server operated on our behalf. The website and its administration are operated by the service providers named in section 3 (Scaleway, eSoul s.r.o.) as processors. The data is not passed on to any other third parties.

Storage period: Enquiries are stored until your request has been finally dealt with and are then erased after 12 months at the latest, unless statutory retention obligations (e.g. for business letters under commercial and tax law) prevent this or the enquiry results in a contractual relationship.

Protection against abuse: To protect against automated spam submissions, the forms contain a check field that is invisible to humans; in addition, the server limits the number of submissions per IP address within a short period. The IP address is processed only briefly for this limit and is not stored together with your enquiry. No captcha and no external service is used.

Providing the fields marked with * is required so that we can process your enquiry. All other information is voluntary.

6. Cookies, local storage and consent

This website does not set any cookies itself and only uses your browser’s local storage (localStorage, sessionStorage). We only load non-essential services after your consent in the consent banner. No analytics, tracking or marketing services are currently used.

We store your choice in the consent banner in your browser’s local storage (localStorage, key “cap-consent”): the selected categories, the time, the version of the service list and a random consent ID (shown in the banner settings). If the list of services changes, we will ask you again.

In addition, we store your choice on our server so that we can prove that and how you gave your consent: consent ID, selected categories, how the consent was given (button chosen), language, version of the service list, time, the page visited, a shortened IP address and information about your browser (user agent). Until the server has confirmed receipt, the record is kept in your browser’s local storage (key “cap-consent-pending”) and sent again if necessary. The data is retained for three years and then deleted. The legal basis is Art. 6(1)(c) GDPR in conjunction with Art. 7(1) GDPR (obligation to be able to demonstrate the consent given).

You can withdraw or change your consent at any time with effect for the future by clicking “Cookie settings” in the footer of any page. When you withdraw, the cookies and stored items of the affected category set on this website’s domain are deleted and the page is reloaded. Cookies set by third parties on the providers’ own domains are governed by those providers’ privacy policies.

Strictly necessary storage

This storage is strictly necessary to run the website and is used without consent.

Einwilligungsverwaltung Provider: Conzept Outfits (CAP Teamwear), Kagerstraße 1, 93426 Roding, Deutschland. Purpose: Stores your choice in the consent banner (categories, time, version of the service list and a random consent ID) and holds the record of it until it has been transmitted to our server. Legal basis: § 25(2) no. 2 TDDDG (strictly necessary), for the subsequent processing Art. 6(1)(f) GDPR. No consent is required.

  • cap-consent (localStorage): Storage period until you change your choice or delete browser data
  • cap-consent-pending (localStorage): Storage period until the server has confirmed receipt

Ladeanimation Provider: Conzept Outfits (CAP Teamwear), Kagerstraße 1, 93426 Roding, Deutschland. Purpose: Prevents the brief intro on your first page view from reappearing on every page change. Legal basis: § 25(2) no. 2 TDDDG (strictly necessary), for the subsequent processing Art. 6(1)(f) GDPR. No consent is required.

  • cap-loader-seen (sessionStorage): Storage period until you close the browser tab

External media

This content is only loaded after your consent (category “External media”).

Google Maps Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland. Purpose: Shows the map with our location on the contact page. Legal basis: Art. 6(1)(a) GDPR and § 25(1) TDDDG (your consent, which you can withdraw at any time with effect for the future). Data may be transferred to the USA. Where the provider is certified under the EU-US Data Privacy Framework, the transfer is based on the European Commission’s adequacy decision; otherwise on standard contractual clauses. Provider’s privacy policy: https://policies.google.com/privacy?hl=en.

No cookies are set on our domain. When the map loads, Google may set its own cookies on google.com (e.g. NID); their purpose and duration are governed by Google’s privacy policy.

7. External content

Google Maps

A Google Maps map can be embedded on the contact page. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. When the map is loaded, personal data, in particular your IP address and technical device information, may be transmitted to Google. Google may also process this data on servers outside the European Union.

The map is only loaded after you have given your consent (in the consent banner or via the “Load map” button on the contact page). Until then, no connection to Google is made. The legal basis is Art. 6(1)(a) GDPR and § 25(1) TDDDG. You can withdraw your consent at any time via “Cookie settings” in the footer. Our address can also be found directly on the contact page.

For further information, please refer to Google’s privacy policy: https://policies.google.com/privacy?hl=en .

Videos

All videos on this website are loaded from our own web server. Video platforms such as YouTube or Vimeo are not embedded.

8. Locally hosted fonts

This website uses locally hosted web fonts to ensure consistent display of typefaces. The font files are loaded from our own web server. No connection is made to Google Fonts servers or those of other external font providers when the page is accessed.

9. Objection to advertising e-mails

We hereby object to the use of contact data published as part of our legal notice obligations for the purpose of sending advertising and information material that has not been expressly requested. The operators of this website expressly reserve the right to take legal action in the event of unsolicited advertising material being sent, for example by spam e-mail.