Information about Data Protection (“Data Privacy Statement”)

Stevens Vertriebs GmbH is very serious about the protection of your personal data (referred to herein as “data”). In cases described below we will process these data in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR). Personal data are information referring to a natural person.

1. Responsible Party in Accordance with Data Protection Law

Responsible Party for the processing of your data is:

Asbrookdamm 35
D -22115 Hamburg
Tel: +49 40 71 60 70-0
Fax: +49 40 46 53 14

2. Visiting our Website

Visiting our Website is possible without entering any data. Entering data is totally optional. Yet if any data have been provided they will be processed as described below.

a) General Information

When using our website your IP address, the country from which you are accessing our website, date, time of day, and duration of your visit to our website and its subpages, information about the browser and the operating system you are using including display resolution and language settings will be processed. These data are stored in protocol files for the duration of 7 (seven) days.

Data are processed in accordance with Art. 6 par. 1 b) and f) GDPR and Art. 8 par. 1 a) and c) of the ”e-privacy regulation“.

b) Cookies

In addition we will use necessary session cookies. Cookies are small files which contain an identification code assigned by us. Cookies are cached on your computer or mobile device when accessing our website. Cookies make it easier for you to navigate our website and help us design our website and to adapt it to your expectations.

We have the right to use session cookies in accordance with Art. 6 par. 1 f) GDPR and Art. 8 par. 1 a) and d) of the ”e-privacy regulation“. Session cookies will be deleted when the bowser is closed.
Permanent cookies are implemented in accordance with Art. 6 par. 1 f) GDPR and Art. 8 par. 1 b) and d) of the ”e-privacy regulation“. Permanent cookies are active for up to 90 days and will then be deleted.

The following chart lists the cookies we use:

Cooky-Übersicht (Name, Gültigkeit, Zweck)
Cookie Name Cookie‘s Validity or duration of storage Purpose Remark
cookie_alert_seen 90 days Visitor has seen and closed the notice about cookies.  
PHPSESSID 90 days The session ID is technically necessary to securely send form data and to save the user's selections for a specific period of time, e.g.
- so that the visitor can remember interesting bikes
- so previously compared bikes can be offered in the bike comparison
The PHPSESSID is never linked to personal data at STEVENS.
_pk_id.X.YYYY 30 days ID for Matomo (Piwik) visitors statistics  
_pk_ses.X.YYYY 30 minutes Matomo (Piwik) session-ID  
alert_old_20YY_clicked 1 day Visitor has seen and closed the notice about a former product year.  
tabctl_XYZ_tabs only for the browser session Marker for the active tab on different pages.  

You can also visit our website without cookies, yet in this case you might not be able to use all functions of the site. There is neither a legal nor a contractual obligation to use cookies. Most browsers accept cookies automatically, to prevent this you need to change the settings of your browser accordingly. You need to perform these changes separately for every browser and every computer you are using.

c) Google Maps

Our website embeds content from Google Maps. When visiting a subpage of our website that embeds Google Maps, data about your usage of Google Maps will be transmitted to Google and processed by Google. For instance Google will receive the information that you have accessed the respective subpage of our website. Google collects and stores these data as user profiles and uses them for the purpose of market research and/or demand-actuated design of Google Maps. If you are logged-in to a service of Google as a customer of Google these data will directly be linked to your Google account. If you do not want this, you need to log-out of Google before visiting our website. Please find additional information about the data privacy terms of google under:

Data submitted to Google may be transferred to the USA. Google complies with the US-EU Privacy Shield. The European Commission has decided in its adequacy decision (EU) 2016/1250 of July 12 2016 that a sufficient level of data protection can be achieved this way.

Data are processed in accordance with Art. 6 par. 1 f) GDPR and in case you are a customer of Google in in accordance with Art. 6 par. 1 a) or 1 b) GDPR. We have a strong interest to provide you with the location of our dealers and to make getting there easier for you. Providing these data is neither mandatory by law nor by contract and is not required to conclude a contract with us. If you don’t consent to submitting your data to Google you should not access those subpages of our website in which Google Maps is embedded. As an alternative you can deactivate ”JavaScript“ in your browser. In both cases you will not be able to use Google Maps.

d) Matomo (formerly Piwik)

This website uses the open source web analytics service Matomo. Matomo uses cookies which will be cached on your computer and enable to analyse your usage of the site. This way the information about the usage created by the cookie is stored on our server. The IP address will be made anonymous prior to storage. Matomo cookies will remain on your device for 30 days if you do not delete them earlier.

You can prevent the storage of cookies by adjusting the appropriate settings of your browser software. If you do not consent to the storage and use of your data you can deactivate storage and use below this paragraph. In this case an opt-out cookie will be placed in your browser to prevent Matomo from storing usage related data. Deleting your cookies will result in the deletion of the Matomo opt-out cookie. This opt-out cookie then needs to be re-activated when you access our website again.

3. Usage of our Contact Form, Bike Registration

Data you submit by filling out our contact form or bike registration boxes and which are required for the fulfilment of a contract between you and us or to implement measurements precedent to the contract are exclusively subject to section 3. In addition we are allowed to process data entered into our contact form or our bike registration boxes (e.g. e-mail address, if applicable data in the field “your message”, name, title, serial number etc.) in accordance with Art. 6 par. 1 a) GDPR even if they are not in context of a business relation, provided you have given consent to processing by checking the box before submitting.

Data will be processed to handle your request typed into the contact form. These data will be deleted 60 days after receipt. The data entered for bike registration are processed and stored for 5 (five) years. Providing your data by means of registration is neither mandatory by law nor by any contract nor necessary for the conclusion of a contract. Using the contact form, though, requires you to provide an e-mail address because otherwise we will not be able to answer your request. Using the bike registration requires you to provide your name, title, country of residence, e-mail address as well as relevant data about your bike because otherwise we will not be able to register your bike. If provide any further data you do this voluntarily.

4. Data Processing in the context of business relations

We are allowed to process data provided by you during registration in accordance with Art. 6 par. 1 b) GDPR as far as it is necessary to fulfil a contract or to implement measurements that have become necessary due to your request precedent to the contract. In this respect we process your data for the following purposes: Communication between us and you, invoicing.

These data are: Name, billing and shipping address, e-mail address and if applicable phone and fax number and if applicable payment data such as bank data (customer data).

Providing your data by means of registration is neither mandatory by law nor by any contract. Yet for the conclusion of a contract it is necessary to process data such as your or your company’s name, your e-mail address and your address. Without these data sending you an e-mail, stating accounts or the assertion of justified claims would not be possible.

We are allowed to process these data until the particular contract has been finalized and within the period of limitation or warranty period applicable to the purposes mentioned above. If the storage of these data is necessary to fulfil our obligations according to Art. 6 par. 1 c) GDPR in conjunction with § 257 “Handelsgesetzbuch” (German Code of Commerce) or § 147 “Abgabenordnung” (German Fiscal Code), we are authorized to store these data until the retention periods have expired. These periods last up to 10 years.

5. Recipients of Data

Data will not be forwarded to third parties without your permission. Yet, we contract data processing companies. Data processing companies handle data only in accordance with instructions on our behalf and not for their own purposes. This applies to the following category of data processing companies:

  • IT service providers (maintenance/installation of servers and systems, maintenance/installation of software as well as web hosting)
  • Public authorities (fiscal authorities, police) in the presence of a legal or regulatory obligation

6. Information about Your Rights

You can always demand from us to disclose if we process personal data (referred to herein as “data”) and which of your data we are processing. Extent and form of this information derive from Art. 15 GDPR.

You have the right to receive the data submitted to us in a structured, common machine-readable format and to submit them to a third party provided that processing is based on an agreement or on a contract and processing is performed by automated means. If you wish and if it is technically feasible we will submit these data to a third party directly.

You can demand the correction of incorrect data concerning you. As long as it is necessary for the purpose of processing you can also demand us to complete any incomplete data.
You can demand us to delete your data, provided that appropriate conditions according to Art. 17 GDPR are met. Under conditions provided by Art. 18 GDPR you can demand us to block your data.

Provided we process data to safeguard our own interests and solely based on Art. 6 par. 1f) GDPR, you have the right, due to reasons resulting from a particular situation, to object to the processing of your data. If you object, these data will not be processed anymore, unless we can demonstrate legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the purpose of establishment, exercise or defense of legal claims.

If you have consented to the processing of your data you always have the right to withdraw that consent at any time. The withdrawal can be submitted in the form of an e-mail to . After withdrawal we will not process the respective data anymore. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal. Likewise, processing remains possible despite the revocation of consent, insofar as we are entitled or obliged to do so by virtue of a statutory provision.

You have the right to lodge data protection complaints, e.g. at:

Hamburg Representative for Data Protection and Freedom of Information
(„Der Hamburgische Beauftragte für Datenschutz und Informationsfreiheit“)

Prof. Dr. Johannes Caspar
Klosterwall 6 (Block C), 20095 Hamburg
Tel.: 040 / 428 54 - 4040
Fax: 040 / 428 54 - 4000

7. Data Protection Representative

If you have any questions regarding data protection, you can contact our data protection representative via e-mail under .

Per: May 2018