← Back to Home
Data protection and privacy information for our clients and partners.

Privacy Policy | WITISI Sport GmbH

Official Privacy Policy of WITISI Sport GmbH. Learn how we collect, process, and protect your personal data in accordance with GDPR, including information on Zoho CRM and your rights.
Privacy Policy
Last Updated: 10.04.2026

1. Controller

The collection, processing, and use of personal data in connection with the use of the following websites and all herein described data processing is carried out by Witisi sport GmbH:
Contact Information:
Witisi sport GmbH
Hohler weg 21, 53343 Wachtberg
E-Mail: info@witisi.com

2. Collection, processing and use of personal data

We collect, process and/or use personal data only if you have consented or if this is permitted by law. Processing is carried out on the basis of consent (Art. 6 para. 1 lit. a GDPR), for the fulfillment of contractual obligations (Art. 6 para. 1 lit. b GDPR), or based on our legitimate interests such as analysis, marketing, and product development (Art. 6 para. 1 lit. f GDPR).
Marketing, Contact Forms and CRM (Zoho CRM)
When you submit an inquiry via our contact forms on Tilda or other platforms, we process your name, contact details, and the content of your message to respond to your request.
  • Zoho CRM: We store and manage this data in our CRM system, Zoho CRM (Zoho Corporation B.V., Netherlands), based on a Data Processing Agreement (DPA) pursuant to Art. 28 GDPR.
  • Marketing Consent: If you provide explicit consent (e.g., via a checkbox), we use your data for advertising purposes across all Witisi sport GmbH brands. This includes sending personalized offers, product news, and the "Race-letter."
  • Revocation: You may revoke your marketing consent at any time with effect for the future.

3. Type of data and purpose of processing

A. Informational use

When using our website for information purposes only, i.e. if you do not register or otherwise provide us with information, we only collect the personal data that your browser transmits to our servers. When you call up our website, we collect the following data on the basis of our legitimate interests pursuant to Art. 6 Para. 1 lit. f GDPR, which is technically necessary for us to display our website to you and to guarantee data security as well as the stability and security of our IT systems:
  • IP address
  • the domain name of the website from which you came
  • the websites you have visited in our offer
  • the names of the retrieved files
  • Date and time of a retrieval
  • the name of your Internet Service Provider
  • and, if applicable, the operating system and browser version of your PC.

B. Contact by e-mail

When you contact us by e-mail, we process the data you provide us with (your e-mail address, your name, telephone number if applicable, and other details) in order to process and answer your questions; the legal basis is Art. 6 Para. 1 lit. f GDPR.

C. Online Shop

We process stock data (e.g., names and addresses as well as contact data of users), contract data (e.g., services used, names of contact persons, payment information) for the purpose of fulfilling our contractual obligations and services pursuant to Art. 6 Para. 1 lit b. GDPR.
The user accounts are not public and cannot be indexed by search engines. It is incumbent upon the users to secure their data before the end of the contract in the event of termination. In the event of termination of the user account, we are entitled to irretrievably delete all user data stored during the term of the contract.
As use of our online services, we store the IP address and the time of the respective user action. The storage is based on our legitimate interests, as well as the user's protection against misuse and other unauthorized use. A passing on of these data to third parties does not take place in principle, unless it is necessary for the pursuit of our claims or there is a legal obligation according to Art. 6 para. 1 lit. c GDPR.
Within the scope of the image search, users can upload their own photo to verify their identity. We use these uploaded photos to display and offer for sale the relevant photos with images of the user from the respective sporting event via assignment. This data is collected and stored on the basis of our legitimate interests in displaying and advertising our photos in a targeted and individual manner, as well as the user's interest in obtaining a compilation of the photos collected at the event through the simplest possible measures. The photos uploaded for identity verification purposes are not stored by us beyond the assignment.
We process usage data (e.g., the websites visited on our website, interest in our products) and content data (e.g., entries in the contact form or user profile) for advertising purposes in a user profile in order to display the user, e.g. product information based on the services they have previously used.

D. Newsletter/Race-letter

We offer all interested parties the opportunity to register for the Race letter newsletter. The newsletter appears at irregular intervals and deals with everything the race heart desires!
  • Purpose of data processing, legal basis and content of consent: Within the scope of registration, only your e-mail address is required. We send our newsletter only on the basis of the consent of the recipient according to Art. 6 Para. 1 lit. a, Art. 7 GDPR. By subscribing to our newsletter, you agree to receive information and promotional materials regarding witisi.photo offers and promotions.
  • Double Opt-In procedure: We use the so-called double opt-in procedure when registering for the newsletter. After registration, the interested party receives an e-mail with a confirmation link to the given e-mail address, which he must click to confirm registration for the newsletter. We log the registrations for the newsletter in order to be able to prove the registration process according to the data protection requirements. In this context, we store the time of registration and confirmation as well as the IP address.
  • Information about the service provider: The newsletter is sent via "SendPulse", a newsletter dispatch platform of the US provider, 220 E 23rd St #401, New York, NY 10010. You can view the privacy policy of the shipping service provider here: https://sendpulse.com/legal/pp. Furthermore, according to its own information, the shipping service provider may use this data in pseudonymous form, i.e. without allocation to a user, to optimize or improve its own services, e.g. for the technical optimization of the shipping and presentation of the newsletter or for statistical purposes, in order to determine from which countries the recipients come. However, the dispatch service provider does not use the data of our newsletter recipients to contact them or pass them on to third parties. The use of the dispatch service provider, the performance of statistical surveys and analyses as well as the logging of the registration procedure are carried out on the basis of our legitimate interests pursuant to Art. 6 Para. 1 lit. f GDPR. Our interest is directed to the use of a user-friendly and secure newsletter system, which serves our business interests as well as the expectations of the users.
  • Statistical survey and analysis: The newsletters contain a so-called "web-beacon", i.e. a file the size of a pixel, which is called up by the server of the dispatch service provider when the newsletter is opened. Within the scope of this retrieval, technical information, such as information about the browser and your system, as well as your IP address and time of retrieval are first collected. This information is used for the technical improvement of the services on the basis of the technical data or the target groups and their reading behavior on the basis of their retrieval locations (which can be determined with the help of the IP address) or the access times. The statistical surveys also include determining whether the newsletters are opened, when they are opened and which links are clicked. For technical reasons, this information can be assigned to the individual newsletter recipients. However, it is neither our nor the shipping service provider's intention to observe individual users. The evaluations serve us much more to recognize the reading habits of our users and to adapt our contents to them or to send different contents according to the interests of our users.
  • Termination/revocation: You can cancel the receipt of our newsletter at any time, i.e. revoke your consent. At the same time, your consent to its dispatch by the dispatch service provider and the statistical analyses will expire. A separate revocation of the dispatch by the dispatch service provider or the statistical evaluation is unfortunately not possible. You will find a link to cancel the newsletter at the end of each newsletter. If users have only subscribed to the newsletter and cancelled their subscription, their personal data will be deleted.
E. Photography at sports events

If you take part in an event at which we have been commissioned by the organizer as an exclusive photo service, we may collect photographic material on which you can be identified personally, possibly with your participant number of the event (e.g. start number).
We use the data collected at the sporting events to fulfil our obligation as a photo service provider under the underlying contract with the organizer and in our own economic interest to market the photos of the event to the interested participants via our website https://witisi.photo/. Based on our many years of experience in the field of event photography, we can state that on the one hand, the participants of sporting events will be informed transparently that witisi.photo will be used as an exclusive photo service provider and, on the other hand, every participant of such an event must expect that the organizer or his cooperation partner will market photos of such events as souvenirs. We determine with the help of an algorithm, independent of the start number, whether several photos of a participant of the corresponding event can be assigned.
Legal basis are our aforementioned legitimate interests according to Art. 6 para. 1 lit. f GDPR. You can object to this processing in accordance with section 12. Your data will not be passed on to third parties. For the collection of the corresponding photos, we exclusively use photographers, whom we have obligated under data protection law according to the EU data protection basic regulation.

F. Google Analytics

  • Functionality: This website uses Google Analytics, a web analytics service provided by Google Inc. ("Google"). Google Analytics uses "cookies", which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of the website will generally be transmitted to and stored by Google on servers in the United States. However, if IP anonymisation is activated on this website, your IP address will be shortened beforehand by Google within member states of the European Union or in other signatory states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA where it will be shortened. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide other services relating to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics is not combined with other data from Google.
  • You may refuse the use of cookies, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent Google from collecting the data generated by the cookie and related to your use of the website (including your IP address) and Google from processing this data by downloading and installing the browser plug-in available under the following link: http://tools.google.com/dlpage/gaoptout?hl=en.
  • This website uses Google Analytics with the extension "_anonymizeIp()". This shortens the processing of IP addresses, thus excluding the possibility of personal references. If the data collected about you is related to a person, this is excluded immediately and the personal data is deleted immediately.
  • Purpose: We use Google Analytics to analyse and regularly improve the use of our website. The statistics obtained allow us to improve our services and make them more interesting for you as a user. This website also uses Google Analytics for a cross-device analysis of visitor flows, which is carried out via a user ID. In the exceptional cases where personal data is transferred to the United States, Google has adopted the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework. The legal basis for the use of Google Analytics is Art. 6 Para. 1 Cl. 1 lit. a GDPR.
  • Third party information: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland. Fax: +353 (1) 436 1001. Terms of use: www.google.com/analytics/terms/us.html. Privacy policy: https://policies.google.com/privacy.
  • Right of revocation: The person concerned has the right to revoke his/her declaration of consent under data protection law at any time. The revocation of the consent does not affect the legality of the processing carried out on the basis of the consent up to the revocation. You can revoke your consent by calling up the cookie settings on our website.
G. witisi.photo search feature

We offer various search functions that participants can use to search our databases for their pictures of a particular event. The primary and recommended method is to search by entering the participant's start number. This allows users to fully utilize our service without the need for facial recognition or processing of biometric data.
In addition, as an optional feature, we offer the possibility that participants can upload a selfie/picture of themselves to our platform, on the basis of which we search our database with the help of an algorithm in order to provide pictures of the participant. The uploaded face is compared with our database with regard to biometric features (especially face vectors).
In the case of a corresponding request via the witisi.photo search function, the IP address of the user will be processed, as this is technically necessary. If you choose to upload pictures of yourself for comparison purposes, the data will be processed solely for the purpose of identifying and providing your own pictures.
The legal basis for the processing of facial biometric data is the user's explicit consent in accordance with Art. 9 para. 2 lit. a GDPR. This explicit consent is actively obtained from the user (e.g., by clicking a dedicated consent button) before any selfies/images are uploaded. The consent can be revoked at any time, with effect for the future.

H. Cookies and Consent Management

We use cookies and similar tracking technologies on our website. Technically necessary cookies are essential for the operation of the website and are set based on our legitimate interest in providing a functional and secure website (Art. 6 para. 1 lit. f GDPR). For non-essential cookies, such as those used for analytics (e.g., Google Analytics) or marketing purposes, we process your data only if you have given us your explicit consent (Art. 6 para. 1 lit. a GDPR). You can manage your preferences, and grant or withdraw your consent at any time via our Cookie Banner settings.

4. Duration of storage

Data is deleted as soon as it is no longer required for its intended purpose. Statutory retention periods apply:
  • 6 years: For commercial books and accounting records according to § 257 para. 1 HGB.
  • 10 years: For tax-relevant documents according to § 147 para. 1 AO.
5. Data Security, Hosting and Third Parties

Hosting
We host our websites with external service providers. The personal data collected on our websites (such as IP addresses, meta and communication data, website access logs, and other data generated through the use of the website) is stored on the servers of these hosters.
The use of our hosting providers is based on our legitimate interest in providing a secure, fast, and reliable infrastructure for our online services pursuant to Art. 6 para. 1 lit. f GDPR. Furthermore, we use these services to fulfill our contractual obligations towards our existing and potential customers pursuant to Art. 6 para. 1 lit. b GDPR. In order to guarantee processing in compliance with data protection regulations, we operate with these providers on the basis of a Data Processing Agreement (DPA) in accordance with Art. 28 GDPR.
General Security and Third-Party Services
  • No Unauthorized Disclosure: We only transfer data to third parties if necessary for contract execution, if you have consented, or if legally permitted.
  • SSL Encryption: Input and transmission of personal data is encrypted using the SSL procedure (Secure Socket Layer).
  • Third-Party Services: We act on our legitimate interests (Art. 6 para. 1 lit. f GDPR) to integrate services like Stripe (payments) and Google Fonts.
6. GDPR Compliance and Your Rights

You have the following rights regarding your personal data:
  • Right of access (Art. 15 GDPR).
  • Right to rectification or erasure (Art. 16/17 GDPR).
  • Right to restriction of processing (Art. 18 GDPR).
  • Right to data portability (Art. 20 GDPR).
  • Right to object (Art. 21 GDPR).
  • Right to lodge a complaint with a supervisory authority (Art. 77 GDPR): If you believe that the processing of your personal data violates data protection laws, you have the right to lodge a complaint with a supervisory authority. The competent authority for our company is the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (LDI NRW).
Data Protection Officer (DPO):
A&L Datenschutz UG
67659 Wilhelm-Kittelberger-Str. 41, Kaiserslautern
Email: alexger@t-online.de

7. Objection or revocation

If you have given consent, you can revoke it at any time. YOU MAY OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA FOR ADVERTISING AND DATA ANALYSIS PURPOSES AT ANY TIME. Please use the contact data listed in Section 1 to inform us of your objection.

8. Changes to the Privacy Policy

We reserve the right to change this declaration to adapt to legal situations or service changes. Changes requiring consent will only be made with your approval.
Questions, comments, hints:
We are happy to answer your questions at info@witisi.com.

ADDRESS
Email: sales@best-medals.com

Working hours

Monday – Friday

9:00 – 17:00 (CEST)

+4922897453990