Privacy policy

Status: 09.11.2024


 

1. Scope of application

This privacy policy applies to all business areas of MSR Prime Sports Management GmbH, which is responsible for the data collected in accordance with this privacy policy. It applies in particular to personal data collected via our website https://tomluethi.ch/.

Data protection is a matter of trust and your trust is important to us. We respect your privacy and ensure that your personal data is protected and processed in accordance with the law. In this privacy policy, you will find out what data we collect, what purposes we pursue with it and how you can update, manage, export and delete your data.

For personal data that falls within the scope of the EU General Data Protection Regulation (GDPR), we base our data processing on your consent (Art. 6 (1) (a) GDPR), which you can withdraw at any time, on the necessity in connection with the performance of a contract (Art. 6 (1) (b) GDPR) or on our legitimate interests (Art. 6 (1) (f) GDPR).

When this Privacy Policy refers to the processing of your personal data, this means any handling of your personal data. This includes, for example

    • the collection,
    • storage,
    • administration,
    • utilization,
    • transmission,
    • announcement or
    • deletion of your personal data.

By using the website, you agree to the data protection provisions listed here. By “use” and “utilize” we mean all interaction on our website, e.g. entering data, surfing, clicking on buttons, etc.

 

2. Collection and storage of data

a) Allgemeines

When you use the website, we collect both personal and non-personal data (collectively “data”). Personal data (“personal data”) is data relating to an identified or identifiable natural person and therefore allows conclusions to be drawn about your identity. Insofar as we process data about legal entities, their handling is equivalent to that of natural person data.

b) Calling up our website

When you visit our website, our servers temporarily store every access in a log file. The following technical data is recorded without any action on your part – as is generally the case with every connection to a web server – and stored by us until it is automatically deleted after 12 months at the latest:

    • the IP address of the requesting computer
    • the name of the owner of the IP address range (usually your Internet access provider)
    • the date and time of access
    • the website from which the access was made
    • the name and URL of the retrieved file
    • the status code (e.g. error message)
    • the operating system of your computer
    • the browser you are using (type, version and language)
    • the transmission protocol used (e.g. HTTP/1.1).

This data is collected and processed on the basis of our legitimate interests for the purpose of enabling the use of our website (connection establishment), ensuring system security and stability in the long term and enabling the optimization of our website as well as for internal statistical purposes.

c) Use of the contact form

For questions of any kind, we offer the option of contacting us via a form provided on the website. It is necessary to provide a valid e-mail address so that we know who sent the request and can answer it. Further information can be provided voluntarily. For this data processing, we rely on your consent (Art. 6 para. 1 (a) GDPR) and our legitimate interests (Art. 6 para. 1 (f) GDPR) to enable you as a customer to communicate with us easily.

The personal data collected by us for the use of the contact form will be deleted after your request has been dealt with.

When processing this data, we rely on the necessity in connection with the fulfillment of a contract (Art. 6 para. 1 (b) GDPR) or on our legitimate interests (Art. 6 para. 1 (f) GDPR).

 

3. Use of the data

In addition to the aforementioned purposes, data is generally collected for the purpose of operating the website and for the processing and administration of the services offered. The data is also collected in particular with regard to the establishment, content design, processing and amendment of the contractual relationships concluded with the individual partners and for proper invoicing in the event of the use of chargeable services. The data collected is also used to improve our services and to analyze the usage behavior of partners and visitors to our websites.

In addition, we also use the data collected for our own marketing purposes. In this context, you agree that we may send information about the website and our services to your e-mail address. You have the option to object to the use of your personal data for marketing purposes at any time by writing to MSR Prime Sports Management GmbH, Gübsenstrasse 90, 9015 St. Gallen, Switzerland or by sending an e-mail to sportsmanagement@msrprime.com or to withdraw your consent.

By entering your personal data and other data on the website, you consent to the processing of all data collected about you in the manner and for the purposes described in this privacy policy.

 

4. Disclosure of data to third parties

We only pass on your personal data if you have expressly consented to this, if there is a legal obligation to do so or if this is necessary to enforce our rights, in particular to enforce claims arising from the contractual relationship. In addition, we pass on your data to third parties insofar as this is necessary in the context of using the website and processing the contract (including outside the website), i.e. processing your order.

The data is passed on for the purpose of providing and maintaining the functionalities of our website on the basis of our legitimate interests (Art. 6 para. 1 (f) GDPR) and for contract processing (Art. 6 para. 1 (b) GDPR). In addition, we reserve the right to have the data collected processed or passed on to commissioned third parties in Germany and abroad for the purposes stated in this privacy policy.

The respective data recipients who have access to the data collected by us are obliged to use the data exclusively for order processing and not for any other purposes and to observe data protection.

Legal disclosure obligations: Disclosure of data to supervisory authorities, judicial authorities or other competent persons is also expressly permitted if required by applicable law.

Business Transfers: We reserve the right to transfer information, including your Personal Data, to third parties in connection with a reorganization, restructuring, merger, sale or other type of asset transfer, provided that the recipient agrees to respect the Personal Data transferred in a manner consistent with this Privacy Policy.

 

5. Transfer of data abroad

The website is hosted on servers in Switzerland. We are entitled to transfer your personal data to third-party companies (contracted service providers) abroad for the purpose of the data processing described in this privacy policy. These companies are obliged to protect data to the same extent as we are. If the level of data protection in a country does not correspond to the Swiss or European level, we contractually oblige commissioned third parties to comply with a level of data protection that largely corresponds to that in Switzerland or the EU.

 

6. Data security

We take suitable and appropriate measures to prevent personal data from being viewed, destroyed, misused or manipulated by unauthorized third parties. All personal data is stored in encrypted form on servers within Switzerland.

Communication via the website is carried out using TLS encryption (Transport Layer Security). Nevertheless, it is possible that data transmitted to us via the internet or an email service may be viewed by third parties without authorization. Furthermore, due to the nature of the Internet, it is possible that data may circulate across borders via servers in third countries, i.e. countries that do not offer the same level of data protection. Very confidential information should therefore not be passed on via the Internet (e.g. e-mail).

Although we take technical precautions to ensure the secure transmission and storage of data, we cannot completely rule out the possibility of unauthorized third parties gaining possession of data, e.g. by hacking our servers. We therefore exclude liability in this context to the extent permitted by law.

 

7. Your rights

You have the right to request information about the personal data that we store about you. In addition, you have the right to rectification of incorrect data, the right to data portability and the right to restrict and object to the processing and erasure of your personal data, provided that this does not conflict with any statutory retention obligation or permission that allows us to process the personal data. If not evident in this privacy policy, we will also inform you on request how long we store individual personal data about you.

You can contact us for the aforementioned purposes either by letter post to MSR Prime Sports Management GmbH, Gübsenstrasse 90, 9015 St. Gallen, Switzerland or via the e-mail address sportsmanagement@msrprime.com. We generally require proof of identity in order to process your application.

It is our aim to process data protection complaints as quickly and effectively as possible. You also have the right to lodge a complaint with the competent supervisory authority in your country of residence.

 

8. Consent and right of withdrawal

If consent is required for the processing of your personal data, we will only process it with your express consent.

We would like to point out that you can revoke your consent to the future processing of your personal data at any time. Please inform us of your revocation either in writing to MSR Prime Sports Management GmbH, Gübsenstrasse 90, 9015 St. Gallen, Switzerland or by e-mail to sportsmanagement@msrprime.com.

 

9. Deletion of data

Unless otherwise stated in this privacy policy, personal data will generally be deleted if there is no need for further storage. A requirement may exist in particular if the data is still needed to fulfill contractual services, to check and grant or defend against warranty and guarantee claims.

In the case of statutory retention obligations, deletion will only be considered after the respective retention obligation has expired. Data will not be deleted if the underlying contractual relationship has not yet been fully terminated. This may be the case, for example, if there are still outstanding claims.

 

10. Web analysis tools

In order to continuously optimize our offer and improve advertising measures, we collect so-called tracking data on the basis of our legitimate interests (Art. 6 para. 1 (f) GDPR), which provide information about the use of our website and allow us to compile reports on website activity. We currently use the following for this:

As part of the use of Google Analytics, data including truncated IP addresses (prevents the identification of individual devices) is transmitted to Google. Google complies with the data protection provisions of the “Swiss-U.S. Privacy Shield” and the “EU-US Privacy Shield” agreements and has registered with the US Department of Commerce for these agreements (information on the agreements can be found here: Swiss-U.S. Privacy Shield and EU-US Privacy Shield). The (shortened) IP address transmitted to Google will not be merged with other Google data. In order to ensure an adequate level of data protection when transferring data to the USA, Google has also contractually bound itself to the EU standard contractual clauses.

Google Analytics uses cookies. The information generated by cookies, such as browser type, time, location and frequency of your website visit, including your (shortened) IP address, is transferred to Google in the USA and stored there. Cookies used to collect tracking data do not contain any personal data, i.e. the IP address is shortened immediately on your access device and thus anonymized. This ensures anonymized transmission and storage of the data.

Google offers a deactivation add-on for the most common browsers that gives you more control over what data Google collects about the website you visit. The add-on informs the JavaScript (ga.js) of Google Analytics that no information about the website visit should be transmitted to Google Analytics. However, the deactivation add-on for browsers from Google Analytics does not prevent information from being transmitted to us or to other web analysis tools that we may use. Further information on installing the browser add-on can be found via the following links:

https://tools.google.com/dlpage/gaoptout?hl=de or https://support.google.com/analytics/answer/6004245?hl=de.

 

11. Cookies


Cookies are used for the operation and optimization of our website and to determine page views on the basis of our legitimate interests (Art. 6 para. 1 (f) GDPR) and for contract processing (Art. 6 para. 1 (b) GDPR). The cookies we use are generally so-called “session cookies”. They are automatically deleted at the end of your visit. Individual cookies remain stored on your end device, so-called “permanent cookies”, until you delete them. These cookies enable us to recognize your browser on your next visit. Google Analytics also uses permanent cookies (Section 10).

Cookies are small files that make it possible to store specific, device-related information on the user’s access device (PC, smartphone, etc.). On the one hand, they serve to make the website more user-friendly (e.g. storage of login data) and for marketing purposes. On the other hand, they are used to collect statistical data on website usage and to analyze it for the purpose of improving the offer.

When you visit our website, you will be asked to consent to the use of cookies. Your consent relates to the collection of usage data, its storage, use and, to a limited extent, the transfer of anonymized data to third parties. In addition, you consent to this data being stored in cookies beyond the end of a browser session and being retrieved when you visit the site again. You can exclude cookies for marketing purposes. We consider the other cookies used on our website to be necessary for the proper functioning of the website, which is why they cannot be excluded.

Most browsers accept cookies automatically. You can influence the use of cookies. In addition to the option of excluding cookies for marketing purposes, most browsers have an option that can be used to restrict or completely prevent the storage of cookies. However, it should be noted that the use and in particular the ease of use is restricted without cookies. Below you will find a list of the most common browsers, which we have linked to the respective instructions for influencing the browser settings:

 

12. Interaction with social networks

Our website uses functions and content from social networks such as Instagram, Facebook and YouTube to offer you a comprehensive user experience and to interact with our community. Below we inform you about the collection, processing and use of your data when interacting with these networks:

a) Note on your rights and settings
You have the right to access your dataa at any time and, if necessary, to request its erasure or restriction of processing. Further details on your data protection rights can be found in our privacy policy unter “Your rights”. Please also refer to the privacy policies of the respective social networks for detailed information and how to manage your privacy settings directly on their platforms.

b) Links and social icons
There are social media icons on our website that you can click on to redirect you to our Instagram, Facebook and YouTube profiles. When you access these pages, the respective data protection provisions of the corresponding provider apply. Please note that simply displaying these icons or clicking on them does not transfer any data to the respective social networks.

c) Integration of the Instagram feed
Our Instagram feed is embedded to provide you with up-to-date content directly on our website. This function is provided by the social network Instagram (Instagram LLC., 1601 Willow Road, Menlo Park, CA 94025, USA). Embedding the feed may result in a direct data connection between your browser and Instagram’s servers. Instagram thereby receives information that you have accessed our site. Further information on Instagram’s data protection can be found in the Instagram privacy policy.

d) Embedding of YouTube videos
YouTube videos hosted by YouTube (YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, USA), a subsidiary of Google LLC, are embedded on our website. When you play a YouTube video on our site, a connection is established to YouTube’s servers, which provides YouTube with information about your activity on our website. If you are logged into your YouTube or Google account, YouTube can assign your surfing behavior directly to your personal profile. Further information on data processing by YouTube can be found in Google’s privacy policy.

e) Purpose and Scope of Data Collection
The integration of these social media elements is based on our legitimate interest in improving our online presence and user experience (Art. 6 para. 1 lit. f GDPR). The data collected by these social networks may also be used for the analysis and optimization of our content. However, personal data will only be transmitted if you actively use these platforms and consent to it.

 

13. Changes to the privacy policy

Due to adjustments to our website and the services offered, the implementation of new technologies or changes to the legal framework, it may become necessary to amend this privacy policy. We reserve the right to amend this privacy policy at any time without prior notice. The current version published on our website applies. This can be accessed and printed out at any time on our website. If the privacy policy is part of an agreement with you, we will inform you of the change by e-mail or other suitable means in the event of an update.

***