Privacy
Privacy Policy as well as information on any consent you may have given
As the data controller within the meaning of the data protection regulations, we will inform you below about how we process your personal data.
I. The definition of personal data and other important definitions
Put simply, personal data is any information that relates to you personally as the data subject. Art. 4 of the GDPR (General Data Protection Regulation) contains provisions on what the term “personal data” means and what other important terms mean for the following data protection information.
II. Name and contact details of the data controller; contact details of the data protection officer
Put simply, the person responsible is the person who alone or jointly with others decides on the purposes and means of processing personal data. The name and contact details of the data controller (and if a data protection officer has been appointed, the contact details of the data protection officer) can be found in our provider identification/our imprint.
III. Purposes of processing your personal data; legal bases for processing
We process your personal data as part of our activities for the purposes listed below in accordance with the legal bases mentioned in each case.
1. In order to safeguard our legitimate interest in maintaining the proper operation of our website, in providing the most user-friendly functions possible and in analyzing the use of our website, your personal data is processed on the basis of Art. 6 para. 1 lit. f) GDPR.
2. In order to carry out pre-contractual measures that are based on a request from you, your personal data is processed on the basis of Art. 6 para. 1 lit. b) GDPR.
3. In order to protect our legitimate interest in answering inquiries and in taking other measures that are based on an inquiry from you, your personal data is processed on the basis of Art. 6 para. 1 lit. f) GDPR.
4. In order to fulfil a contract to which you are a party, your personal data will be processed on the basis of Art. 6 para. 1 lit. b) GDPR.
5. To implement measures for advertising purposes, your personal data is processed either on the basis of the consent you have given in accordance with Art. 6 para. 1 lit. a) GDPR or on the basis of Art. 6 para. 1 lit. f) GDPR.
6. In order to fulfil legal obligations to which we are subject, your personal data is processed on the basis of Art. 6 (1) (c) GDPR.
7. In order to safeguard our legitimate interest in enforcing our rights and in defending against claims made against us, your personal data will be processed on the basis of Art. 6 para. 1 lit. f) GDPR.
Our systems are secured using state-of-the-art technical and organizational measures to protect your personal data from being accessed, modified or disseminated by unauthorized persons and from loss and destruction.
Information on the processing of your personal data for the individual processing purposes can be found in the corresponding further information within the framework of this privacy policy.
IV. Transfer of your personal data to third parties; categories of recipients of your personal data
Insofar as is necessary to achieve the purposes of processing your personal data, we transfer your personal data to third parties within the framework of the legal requirements. Detailed information on the transfer of your personal data to third parties for the individual processing purposes can be found in the corresponding further information within the framework of this privacy policy. In cases where your personal data is transferred to third parties, the amount of data disclosed is limited to the minimum necessary.
V. Scope of processing of your personal data for the individual processing purposes
In the following, we inform you in detail about the processing of your personal data for the various processing purposes.
Your personal data will be deleted when it is no longer required for processing for the respective processing purpose, unless we are allowed to continue processing the data for another processing purpose within the framework of the legal requirements and in accordance with the information in this privacy policy.
1. Use of our website for informational purposes
If you visit our website without sending us any information, we only process the personal data that your browser sends to our server. This comprises the following data that is technically required to help you view our website and to ensure its stability and security:
- page you accessed
- date and time of the request
- amount of data transferred
- browser you are using
- operating system you are using
- your IP address
Your personal data is processed on the basis of Art. 6 para. 1 lit. f) GDPR to safeguard our legitimate interest in maintaining the proper operation of our website, in providing the most user-friendly functions possible and in analyzing the use of our website.
Your personal data will be deleted after 6 months, unless it is still required to assert rights or enforce claims due to measures against the proper operation of our website. In this case, the deletion takes place immediately after the corresponding process has been completed.
You are not required to provide your personal data. However, failure to provide your personal data would mean that you would not be able to view our website.
2. Inquiries processing
If you contact us with an inquiry or concern, we will process the personal data and information/documents you have transmitted. Regardless of how you send us your request or issue, this may comprise:
- date and time of contact
- name details
- contact details
- inquiry/issue details
- submitted information/documents
Your personal data is processed and the information/documents are transmitted – depending on the content of your inquiry or your issue – on the basis of Art. 6 para. 1 lit. b) GDPR for the implementation of pre-contractual measures or on the basis of Art. 6 para. 1 lit. b) GDPR for the fulfillment of a contract to which you are a party or on the basis of Art. 6 para. 1 lit. f) GDPR to safeguard our legitimate interest in answering inquiries/issues and in carrying out other measures in connection with the processing of inquiries/issues.
Insofar as this is necessary for the processing of your inquiry/issue, we will transmit your personal data to third parties within the framework of the legal requirements. In cases where your personal data is transferred to third parties, the amount of data disclosed is limited to the minimum necessary.
Your personal data will be deleted when your inquiry/issue has been clarified, but at the earliest after the tax and commercial law retention periods of 6 or 10 years have expired, unless we are allowed to use the data for another processing purpose within the framework of the legal requirements and continue to process it in accordance with the information in this privacy policy.
You are not required to provide your personal data. However, failure to provide your personal data would mean that we would not be able to process your inquiry or issue.
3. Credit check
If you wish to pay by invoice in connection with an order from us, we will forward the personal data you have transmitted,
- name details
- postal address
- VAT ID number
to our credit insurer for the purpose of a credit check. In this context, we carry out automated decision-making. If the credit insurer secures the claim, you can purchase by invoice. If the credit insurer refuses to secure the claim, you will not be able to purchase by invoice.
Your personal data is processed on the basis of Art. 6 para. 1 lit. f) GDPR to protect our legitimate interest in fraud prevention and the avoidance of payment defaults.
Your personal data will be deleted at the earliest after the tax and commercial law retention periods of 6 or 10 years have expired, unless we are allowed to use the data for another processing purpose within the framework of the legal requirements and continue to process it in accordance with the information in this privacy policy.
The provision of your personal data is required for the credit check. You are not required to provide your personal data. Failure to provide your personal data would mean, however, that we would not be able to offer you payment by invoice.
4. Performance of contracts
If you transmit personal data to us for the purpose of concluding a contract or in connection with a contract, we process the data transmitted by you for the execution of the contract. This comprises your customer data (e.g. your name and address) and the contract data (e.g. information on the contractual products as well as payment and delivery information).
Your personal data is processed on the basis of Art. 6 para. 1 lit. b) GDPR for the performance of a contract to which you are a party.
Insofar as this is necessary for the fulfillment of the contract with you, we transfer your personal data to third parties within the framework of the legal requirements. This transmission takes place to the service providers involved in the execution of the contract. These are the providers of the processing tools we use, the companies commissioned with the transport and the payment service providers commissioned with payment matters.
In cases where your personal data is transferred to third parties, the amount of data disclosed is limited to the minimum necessary.
Your personal data will be deleted at the earliest after the tax and commercial law retention periods of 6 or 10 years have expired, unless we are allowed to use the data for another processing purpose within the framework of the legal requirements and continue to process it in accordance with the information in this privacy policy.
The provision of your personal data is necessary for the conclusion of a contract with us. You are not required to provide your personal data. However, failure to provide your personal data would mean that we would not be able to conclude a contract with you.
5. Advertising via newsletter
If you register for our newsletter, we process the email address you provide – and if you transmit other personal data as well – to send you information about our offers by email. In this respect, only providing your email address is obligatory. If you voluntarily submit further personal data, we may process this data in order to address you personally in the newsletter.
If you register for our newsletter, you give your consent as follows: “I agree to being informed about interesting offers by email and therefore consent to the processing of my email address and other personal data I have provided for the purpose the sending of the newsletter. I may withdraw this consent at any time and without giving reasons with future effect. The legality of the processing that took place up to the point of withdrawal remains unaffected in the event of withdrawal.”
The registration for our newsletter takes place using what is known as the double opt-in procedure. This means: After registering, you will first receive an email informing you that you have registered for the newsletter and asking you to confirm your registration. Your confirmation of registration is required in order to document the necessary consent to the sending of the newsletter and to be able to recognize registrations to third-party email addresses. In connection with the registration for the newsletter and the confirmations, the IP address as well as the date and time are logged in order to be able to prove the granting of consent in accordance with the legal requirements.
Your personal data will be processed on the basis of the consent you have given in accordance with Art. 6 para. 1 lit. a)GDPR.
You can withdraw your consent at any time and without stating reasons with effect for the future. A corresponding message to the data controller is sufficient for this, whose contact details can be found in the information on the data controller. The legality of the processing that took place up to the point of withdrawal remains unaffected in the event of withdrawal.
If you withdraw your consent or unsubscribe from our newsletter, your email address and any other transmitted data will be deleted immediately, unless we are allowed to continue processing the data for another purpose within the framework of the legal requirements and in accordance with the information in this privacy policy.
In order to receive our newsletter, you must at least provide your email address. You are not obliged to provide your email address. However, failure to provide your email address would mean that you would not be able to sign up for our newsletter.
6. Postal advertising
If necessary, we process the personal data transmitted by you regarding first and last name and address for the purpose of sending information about our offers by post.
The processing of your personal data takes place on the basis of Art. 6 para. 1 lit. f) GDPR to safeguard our legitimate interest in carrying out advertising measures by post.
You can object at any time to the processing of your personal data for the purpose of carrying out advertising measures by post. A corresponding message to the data controller is sufficient for this, whose contact details can be found in the information on the data controller.
If you object to the processing of your personal data for the purpose of carrying out advertising measures by post, the personal data you have transmitted with your first and last name and address will be deleted immediately, unless we are allowed to continue processing the data for another purpose within the framework of the legal requirements and in accordance with the information in this privacy policy.
You are not obliged to provide your personal data for the implementation of advertising measures by post. However, failure to provide your personal data would mean that we would not be able to send you any advertising by post.
7. Compliance with legal obligations to which we are subject
Within the framework of the relevant requirements, we process your personal data to fulfill legal obligations to which we are subject.
In order to fulfil legal obligations to which we are subject, your personal data is processed on the basis of Art. 6 para. 1 lit. c) GDPR.
Insofar as this is necessary to fulfill legal obligations to which we are subject, we transfer your personal data to third parties within the framework of the legal requirements. In cases where your personal data is transferred to third parties, the amount of data disclosed is limited to the minimum necessary.
Your personal data will be deleted when it is no longer required to fulfill legal obligations to which we are subject, unless we are allowed to continue processing the data for another processing purpose within the framework of the legal requirements and in accordance with the information in this privacy policy.
8. Enforcement of our rights and defense against claims directed against us
If necessary, we process your personal data to protect our legitimate interest in enforcing our rights and in defending against claims made against us.
In this case, your personal data will be processed on the basis of Art. 6 para. 1 lit. f) GDPR.
Insofar as this is necessary to safeguard our legitimate interest, we will transfer your personal data to third parties within the framework of the legal requirements. This transmission takes place to the providers of debt collection services involved or our lawyers.
In cases where your personal data is transferred to third parties, the amount of data disclosed is limited to the minimum necessary.
Your personal data will be deleted after the proceedings have been concluded but at the earliest after the tax and commercial law retention periods of 6 or 10 years have expired, unless we are allowed to use the data for another processing purpose within the framework of the legal requirements and continue to process it in accordance with the information in this privacy policy.
VI. Duration for which your personal data is stored or criteria for determining this duration
Your personal data will be deleted when it is no longer required for processing for the respective processing purpose, unless we are allowed to continue processing the data for another processing purpose within the framework of the legal requirements and in accordance with the information in this privacy policy. Information on the period for which your personal data is stored and the criteria for determining this period can be found in the information on the processing of your personal data for the individual processing purposes in this privacy policy.
VII. Your rights
1. Introduction:
In order to ensure fair and transparent processing of personal data, you as the data subject have the following rights in accordance with data protection regulations:
the right of access under Art. 15 GDPR,
the right to rectification under Art. 16 GDPR,
the right to erasure under Art. 17 GDPR,
the right to restrict processing under Art. 18 GDPR,
the right to data portability under Art. 20 GDPR
the right to withdraw consent at any time according to Art. 7 para. 3 GDPR,
the right to object to processing under Art. 21 GDPR, about which we will inform you separately below
and the right to lodge a complaint with the supervisory authority in accordance with Art. 77 GDPR, about which we will inform you separately below.
2. Right to object to processing
THE PROCESSING OF PERSONAL DATA IS PERMITTED IF THE PROCESSING IS NECESSARY TO PROTECT THE REASONABLE INTERESTS OF THE CONTROLLER OR A THIRD PARTY, UNLESS THE INTERESTS OR FUNDAMENTAL RIGHTS AND FUNDAMENTAL FREEDOM OF THE DATA SUBJECT WHICH REQUIRE THE PROTECTION OF PERSONAL DATA PREVAIL, IN PARTICULAR WHEN THE DATA SUBJECT IS A CHILD, ART 6 PARA. 1 LIT. F) GDPR.
YOU, AS THE DATA SUBJECT, HAVE THE RIGHT, FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION, TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU THAT IS PERFORMED ON THE BASIS OF ART 6 PARA. 1 LIT. F) GDPR; THIS ALSO APPLIES TO PROFILING BASED ON THESE PROVISIONS.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL NO LONGER PROCESS YOUR PERSONAL DATA UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE REASONS FOR THE PROCESSING THAT OVERRIDE YOUR INTERESTS, RIGHTS AND FREEDOMS AS A DATA SUBJECT, OR THE PROCESSING IS FOR THE PURPOSE, EXERCISE OR DEFENSE OF LEGAL CLAIM.
WHERE WE PROCESS YOUR PERSONAL DATA FOR DIRECT MARKETING PURPOSES, YOU AS THE DATA SUBJECT HAVE THE RIGHT AT ANY TIME TO OBJECT TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR THE PURPOSES OF SUCH ADVERTISING, INCLUDING PROFILING TO THE EXTENT IT IS RELATED TO SUCH DIRECT MARKETING. IF YOU AS THE DATA SUBJECT OBJECT TO THE PROCESSING FOR DIRECT MARKETING PURPOSES, THE PERSONAL DATA WILL NO LONGER BE PROCESSED FOR THESE PURPOSES.
3. Right to lodge a complaint with the supervisory authority
As a data subject, without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your place of residence, your place of work or the place of the alleged infringement, if you believe that the processing of your personal data violates the requirements of the GDPR.
VIII. Information on the basis for providing your personal data and the possible consequences of non-provision
Insofar as this is necessary to ensure fair and transparent processing, you will find information on the basis for the provision of your personal data and the possible consequences of non-provision in the information on the processing of your personal data for the individual processing purposes.