1) Introduction and contact details of the controller

1.1 We are pleased that you are visiting our website and thank you for your interest. Below, we inform you about the handling of your personal data when you use our website. Personal data comprise all data by which you can be personally identified.

1.2 The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Adnan Imamovic, Aao Fighting, Schmalegger Str. 16, 88213 Ravensburg, Germany, Tel.: 01776426702, Email: aaosport@web.de. The controller responsible for the processing of personal data is the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data.

2) Data collection when visiting our website

When you use our website for information purposes only, that is, if you do not register or otherwise transmit information to us, we only collect the data that your browser transmits to the web server (so-called "server log files"). When you access our website, we collect the following data, which are technically necessary for us to display the website to you:

• The page on our website visited
• Date and time at the moment of access
• Amount of data transmitted in bytes
• Source/referrer from which you reached the page
• Browser used
• Operating system used
• IP address used (where applicable, in anonymized form)

Processing is carried out pursuant to Art. 6 Abs. 1 lit. f GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. No disclosure or other use of the data takes place. However, we reserve the right to check the server log files retrospectively should there be concrete indications of unlawful use.

3) Hosting & Content Delivery Network

Shopify

For hosting our website and displaying the page content, we use the system of the following provider: Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland ("Shopify")

Data are also transmitted to: Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada

All data collected on our website are processed on the provider's servers. We have concluded a data processing agreement with the provider that ensures the protection of our site visitors' data and prohibits unauthorized disclosure to third parties.

In the case of data transfers to Canada, an adequate level of data protection is ensured by an adequacy decision of the European Commission.

4) Cookies

In order to make visiting our website attractive and to enable the use of certain functions, we use cookies, i.e., small text files that are stored on your end device. Some of these cookies are automatically deleted after you close the browser (so-called "session cookies"), while others remain longer on your end device and enable the saving of page settings (so-called "persistent cookies"). In the latter case, you can find the storage duration in the overview of your web browser's cookie settings.

Insofar as personal data are also processed by individual cookies we use, processing takes place pursuant to Art. 6 Abs. 1 lit. b GDPR either for the performance of the contract, pursuant to Art. 6 Abs. 1 lit. a GDPR in the event of consent given, or pursuant to Art. 6 Abs. 1 lit. f GDPR to safeguard our legitimate interests in the best possible functionality of the website as well as a customer-friendly and efficient design of the visit to the site.

You can set your browser to inform you about the setting of cookies and to decide individually on their acceptance, or to exclude the acceptance of cookies for certain cases or in general.

Please note that if you do not accept cookies, the functionality of our website may be limited.

5) Contacting us

In the context of contacting us (e.g., via contact form or email), personal data are processed—exclusively for the purpose of handling and responding to your request and only to the extent necessary for this.

The legal basis for processing these data is our legitimate interest in responding to your request pursuant to Art. 6 Abs. 1 lit. f GDPR. If your contact aims at concluding a contract, the additional legal basis for processing is Art. 6 Abs. 1 lit. b GDPR. Your data will be deleted when the circumstances indicate that the matter in question has been conclusively clarified and provided there are no statutory retention obligations to the contrary.

6) Data processing when opening a customer account

Pursuant to Art. 6 Abs. 1 lit. b GDPR, personal data are further collected and processed to the required extent when you provide them to us upon opening a customer account. Which data are required for opening the account can be seen from the input fields of the corresponding form on our website.

You may delete your customer account at any time by sending a message to the controller's address mentioned above. After deletion of your customer account, your data will be deleted provided all contracts concluded via it have been fully settled, there are no statutory retention periods to the contrary, and we have no legitimate interest in further storage.

7) Use of customer data for direct advertising

Subscribing to our email newsletter

If you subscribe to our email newsletter, we will regularly send you information about our offers. The only mandatory information for sending the newsletter is your email address. The provision of further data is voluntary and is used to address you personally. For sending the newsletter, we use the so-called double opt-in procedure, which ensures that you will only receive newsletters after you have expressly confirmed your consent to receive the newsletter by activating a verification link sent to the email address provided.

By activating the confirmation link, you grant us your consent to use your personal data pursuant to Art. 6 Abs. 1 lit. a GDPR. In this context, we store the IP address entered by your Internet Service Provider (ISP) as well as the date and time of registration in order to be able to trace any possible misuse of your email address at a later date. The data we collect during newsletter registration are used strictly for the intended purpose.

You can unsubscribe from the newsletter at any time via the link provided in the newsletter or by sending a corresponding message to the controller mentioned at the beginning. After successful unsubscription, your email address will be promptly deleted from our newsletter distribution list, unless you have expressly consented to further use of your data or we reserve the right to use data beyond this which is permitted by law and about which we inform you in this declaration.

8) Data processing for order handling

8.1 Insofar as necessary for contract processing for delivery and payment purposes, the personal data collected by us are transmitted pursuant to Art. 6 Abs. 1 lit. b GDPR to the commissioned transport company and the commissioned credit institution.

If, on the basis of a corresponding contract, we owe you updates for goods with digital elements or for digital products, we process the contact data you provided when placing the order (name, address, email address) in order to inform you personally, within the statutory period, about upcoming updates via an appropriate communication channel (e.g., by post or email) pursuant to our statutory information obligations under Art. 6 Abs. 1 lit. c GDPR. Your contact data are used strictly for the purpose of notifications about updates owed by us and are processed by us for this purpose only to the extent necessary for the respective information.

To process your order, we also work with the following service provider(s), who support us in whole or in part in the execution of concluded contracts. Certain personal data are transmitted to these service providers in accordance with the following information.

8.2 Use of payment service providers (payment services)

9) Site functionalities

9.1 Instagram plugins

Plugins of the social network of the following provider are used on our website: Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland

These plugins enable direct interactions with content on the social network.

To increase the protection of your data when visiting our website, the plugins are initially deactivated and integrated into the page using the so-called "two-click" or "Shariff" solution.

This integration ensures that when a page of our website containing such plugins is accessed, no connection is yet established with the provider's servers.

Only when you activate the plugins and thereby grant your consent to data transmission pursuant to Art. 6 Abs. 1 lit. a GDPR does your browser establish a direct connection to the provider's servers. In this context, irrespective of a login to an existing user profile, certain information about your end device (including your IP address), your browser, and your page history is transmitted to the provider and may be further processed there.

If you are logged into an existing user profile on the provider's social network, information about interactions carried out via the plugins will also be published there and displayed to your contacts.
You may withdraw your consent at any time by deactivating the activated plugin again by clicking it anew. The withdrawal does not affect data that have already been transmitted to the provider.

Data may also be transmitted to: Meta Platforms Inc., USA

We have concluded a data processing agreement with the provider that ensures the protection of our site visitors' data and prohibits unauthorized disclosure to third parties.

For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which, on the basis of an adequacy decision of the European Commission, ensures compliance with the European level of data protection.

9.2 YouTube

This website uses plugins to display and play videos from the following provider: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland

Data may also be transmitted to: Google LLC, USA

When you access a page of our website that contains such a plugin, your browser establishes a direct connection to the provider's servers in order to load the plugin. Certain information, including your IP address, is transmitted to the provider in this process.

If playback of embedded videos is started via the plugin, the provider also uses cookies to collect information about user behavior, to create playback statistics, and to prevent abusive behavior.

If you are logged into a user account with the provider during your page visit, clicking on a video will associate your data directly with your account. If you do not want the association with your account, you must log out before pressing the play button.

All of the above processing, in particular the setting of cookies for reading information on the end device used, takes place only if you have given us your express consent pursuant to Art. 6 Abs. 1 lit. a GDPR. You can withdraw your consent at any time with effect for the future by deactivating this service via the "cookie consent tool" provided on the website.

For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which, on the basis of an adequacy decision of the European Commission, ensures compliance with the European level of data protection.

10) Tools and miscellaneous

Cookie-Consent-Tool

This website uses a so-called "cookie consent tool" to obtain effective user consents for cookies and cookie-based applications that require consent. The "cookie consent tool" is displayed to users when the page is accessed in the form of an interactive user interface, on which consents for certain cookies and/or cookie-based applications can be granted by ticking boxes. In this process, through the use of the tool, all cookies/services requiring consent are only loaded when the respective user grants the corresponding consents by ticking the boxes. This ensures that such cookies are set on the respective end device of the user only in the event of consent granted.

The tool sets technically necessary cookies to store your cookie preferences. Personal user data are generally not processed in this context.

If, in individual cases, personal data (such as the IP address) are nevertheless processed for the purpose of storing, assigning, or logging cookie settings, such processing is carried out pursuant to Art. 6 Abs. 1 lit. f GDPR on the basis of our legitimate interest in lawful, user-specific, and user-friendly consent management for cookies and thus in a lawful design of our online presence.

Another legal basis for processing is Art. 6 Abs. 1 lit. c GDPR. As controllers, we are legally obliged to make the use of non-technically necessary cookies dependent on the respective user consent.

Where required, we have concluded a data processing agreement with the provider that ensures the protection of our site visitors' data and prohibits unauthorized disclosure to third parties.

Further information about the operator and the setting options of the cookie consent tool can be found directly in the corresponding user interface on our website.

11) Rights of the data subject

11.1 The applicable data protection law grants you the following rights against the controller with regard to the processing of your personal data (rights of access and intervention), whereby the legal basis cited refers to the respective conditions for exercising these rights:

• Right of access pursuant to Art. 15 GDPR;
• Right to rectification pursuant to Art. 16 GDPR;
• Right to erasure pursuant to Art. 17 GDPR;
• Right to restriction of processing pursuant to Art. 18 GDPR;
• Right to notification pursuant to Art. 19 GDPR;
• Right to data portability pursuant to Art. 20 GDPR;
• Right to withdraw consent given pursuant to Art. 7 Abs. 3 GDPR;
• Right to lodge a complaint pursuant to Art. 77 GDPR.

11.2 RIGHT TO OBJECT

IF WE PROCESS YOUR PERSONAL DATA ON THE BASIS OF OUR OVERRIDING LEGITIMATE INTEREST FOLLOWING A BALANCING OF INTERESTS, YOU HAVE THE RIGHT AT ANY TIME, ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION, TO OBJECT TO THIS PROCESSING WITH EFFECT FOR THE FUTURE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED. FURTHER PROCESSING IS RESERVED, HOWEVER, IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING WHICH OVERRIDE YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FREEDOMS, OR IF THE PROCESSING SERVES THE ESTABLISHMENT, EXERCISE OR DEFENSE OF LEGAL CLAIMS.

IF YOUR PERSONAL DATA ARE PROCESSED BY US FOR THE PURPOSE OF DIRECT ADVERTISING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR THE PURPOSE OF SUCH ADVERTISING. YOU CAN EXERCISE THE OBJECTION AS DESCRIBED ABOVE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED FOR DIRECT ADVERTISING PURPOSES.

12) Duration of storage of personal data

The duration of the storage of personal data is determined on the basis of the respective legal basis, the purpose of processing and—if relevant—additionally on the basis of the respective statutory retention period (e.g., commercial and tax law retention periods).

When processing personal data on the basis of express consent pursuant to Art. 6 Abs. 1 lit. a GDPR, the data concerned are stored until you withdraw your consent.

If statutory retention periods exist for data that are processed on the basis of Art. 6 Abs. 1 lit. b GDPR within the scope of contractual or quasi-contractual obligations, these data are routinely deleted after the retention periods have expired, provided they are no longer required for the performance of the contract or initiation of a contract and/or there is no legitimate interest on our part in further storage.

When processing personal data on the basis of Art. 6 Abs. 1 lit. f GDPR, these data are stored until you exercise your right to object pursuant to Art. 21 Abs. 1 GDPR, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms, or the processing serves the establishment, exercise, or defense of legal claims.

When processing personal data for the purpose of direct advertising on the basis of Art. 6 Abs. 1 lit. f GDPR, these data are stored until you exercise your right to object pursuant to Art. 21 Abs. 2 GDPR.

Unless otherwise stated in the other information in this declaration regarding specific processing situations, stored personal data will otherwise be deleted when they are no longer necessary for the purposes for which they were collected or otherwise processed.