Privacy Policy
1. Controller
thesportgroup GmbH, Jean-Pierre-Jungels-Str. 6, 55126 Mainz, Germany. Phone: +49 6131 240 53 17, email: info@thesportgroup.de. Managing Directors: Robert Erbeldinger, Joachim Messner.
2. Legal bases & storage
We process personal data under the GDPR, the German BDSG and the TDDDG. Legal bases are in particular Art. 6(1)(a), (b) and (f) GDPR and § 25 TDDDG. Data is deleted once the purpose ceases and no statutory retention period applies.
3. Hosting
This website is hosted by ALL-INKL.COM – Neue Medien Münnich, Hauptstraße 68, 02742 Friedersdorf, Germany; servers are located in Germany. A data processing agreement (Art. 28 GDPR) is in place. Legal basis: Art. 6(1)(f) GDPR.
4. Server log files
The provider automatically collects server logs (IP address, date/time, file requested, browser/OS, referrer) for operation and security. Legal basis: Art. 6(1)(f) GDPR.
5. Cookies & consent management
Necessary cookies (e.g. „pll_language“, „tsa_consent“, 180 days) are used for operation (§ 25(2) TDDDG). Services requiring consent (e.g. statistics) load only after your active consent via our banner (Google Consent Mode v2, default „denied“). Consent is logged server-side as proof (timestamp, scope, version, language, hashed identifiers). Withdraw any time via „Cookie settings“ in the footer.
6. Google Analytics 4
After your consent we use Google Analytics 4 (Google Ireland Ltd., Ireland; Google LLC, USA), ID G-ZN8SECWWCF. The script loads and cookies are set only after consent. Transfers to the USA may occur (Google is EU-US Data Privacy Framework certified; SCC apply). Legal basis: Art. 6(1)(a) GDPR, § 25(1) TDDDG.
7. Self-hosted fonts
The „Outfit“ typeface is served locally from our server. No connection to Google Fonts or other third parties is made; your IP is not transmitted for fonts.
8. Online booking (Amelia)
We use the integrated Amelia booking system. We process data required for booking (name, email, phone, selected service, appointment). Legal basis: Art. 6(1)(b) GDPR.
9. Video calls (Google Meet, Microsoft Teams)
1:1 sessions take place via Google Meet (Google Ireland Ltd.) and/or Microsoft Teams (Microsoft Ireland Operations Ltd.). Connection/metadata and audio/video are processed; sessions are not recorded. Transfers to the USA may occur (providers DPF-certified; SCC apply). Legal basis: Art. 6(1)(b) GDPR.
10. Payment (Stripe)
Payments are handled via Stripe (Stripe Payments Europe Ltd., Ireland; Stripe Inc., USA). You enter payment data directly with the provider. Transfers to the USA may occur (DPF/SCC). Legal basis: Art. 6(1)(b) GDPR.
11. Disclosure to instructors
To deliver the booked session we pass the necessary data to the respective instructor, who acts as a separate controller/contract partner. Legal basis: Art. 6(1)(b) GDPR.
12. Embedded magazine content (sportärztezeitung)
Preview images for sportärztezeitung teasers are cached on and served from our server; viewing them does not connect to sportaerztezeitung.com. Only clicking „Read more“ forwards you to the external site.
13. Contact & inquiry forms
When you use our forms we process the data provided to handle your request. Legal basis: Art. 6(1)(b)/(f) GDPR.
14. Your rights
You have the right to access, rectification, erasure, restriction, portability, objection (Art. 21 GDPR) and to withdraw consent, plus the right to lodge a complaint with a supervisory authority (for us: the State Commissioner for Data Protection of Rhineland-Palatinate).
15. SSL/TLS
This site uses TLS encryption for security.