Privacy policy

3.2.1.2 Legal basis

We process your personal data for the technical provision of our website on the basis of the following legal bases:

• For the performance of a contract or for the implementation of pre-contractual measures in accordance with Art. 6 (1) (b) GDPR, insofar as you visit our website to find out about our range of goods, in particular in the webshop, and our events; and

• to safeguard our legitimate interests in accordance with Art. 6 (1) (f) GDPR in order to be able to provide you with the technical provision of the website. Our legitimate interest is to be able to provide you with an appealing, technically functional and user-friendly website.

3.2.2 Statistical analysis of the use of the website

3.2.2.1 Purpose and scope of data processing

For the purpose of static analysis of the use of our website, we use Google Analytics and thus cookies that enable an analysis of your surfing behaviour. This allows us to improve the quality of our website and its content. We learn how the website is used and can thus constantly optimize our offer. For this purpose, our webshop system generates a user ID that can be used to analyze surfing behavior on both the website.

The information obtained in the course of the static analysis of our website, in particular the user ID, will not be merged with your other data collected in the context of the website.

Adobe Analytics

....

3.2.2.2 Legal basis

We process your personal data for statistical analysis of the use of our website on the basis of the following legal basis:

• Your consent

3.3 Active use of the website

In addition to using our website purely for informational purposes, you can also actively use our website to purchase goods in our online shop or to get in touch with us. In addition to the processing of your personal data described above in the case of purely informational use, we then also collect and process other personal data from you that we need to process your order or to process and respond to your enquiry.

3.3.1 Creating a Customer Account

3.3.1.1 Purpose and scope of data processing

On our site you have the option to create a customer account. As part of the creation of a customer account, we check whether you or Your company operates a business, as we only deliver to commercial customers. The creation of a customer account is necessary for ordering our catalogues, for placing orders in our online store, for submitting complaints and downloading certain documents that we offer only to our registered customers. When registering, you must provide the following data:

• Company*
• Company Tax No./VAT ID No./Company ID.
• Internet address
• Street, house number*
• Postal code*
• City/Sub-town*
• Land*
• Salutation of the contact person*
• Name and surname of the contact person*
• Telephone number*
• Mobile phone
• Fax number
• E-mail address*
• Email address for invoices
• Excerpt from the commercial register or your business registration

The mandatory information is marked with an asterisk "*".

3.3.1.2 Legal basis

We process your personal data when you create a customer account on the basis of the following legal basis:

• Performance of a contract or for the implementation of pre-contractual measures in accordance with Art. 6 (1) (b) GDPR.

3.3.2 User enquiries/call centres

3.3.2.1 Purpose and scope of data processing

In order to be able to process and answer your inquiries (also in the event of transport damage) to us, e.g. via the contact form or to our email address, telephone or fax number, we process the personal data you provide in this context. In each case, this includes your name and e-mail address in order to send you a response, as well as the other information you send us as part of your communication

3.3.2.2 Legal basis

We process your personal data to respond to user inquiries on the basis of the following legal basis:

• Safeguarding our legitimate interests in accordance with Art. 6 (1) (f) GDPR; our legitimate interest is to respond appropriately to customer enquiries.

3.3.3 Orders in the online shop

3.3.3.1 Purpose and scope of data processing

Order

If you order our goods in our online shop, we collect personal data from you in order to be able to receive and process the order within the framework of online trading and to send you the ordered goods. In doing so, we collect the information evident from the respective input forms, which is essentially the data of the ordering company. The following data can have a personal reference:

• E-mail address of a contact person
• Company
• Street
• Address
• Vat
• Telephone number of the contact person.

Order processing

In order to be able to send you the ordered goods, we pass on the company name, the name of the contact person, contact details and the delivery address to the delivery service commissioned by us.

Regulatory Compliance

We also process your personal data in order to comply with other legal obligations that apply to us in connection with the processing of the order. These include, in particular, retention periods under commercial, commercial or tax law.

Enforcement

We also process your personal data in order to be able to assert our rights and enforce our legal claims. We also process your personal data in order to be able to defend ourselves against legal claims. Finally, we process your personal data to the extent necessary to defend against or prosecute criminal offences.

3.3.3.2 Legal basis

We process your personal data to process orders in the online shop on the basis of the following legal bases:

• for the performance of a contract or for the implementation of pre-contractual measures in accordance with Art. 6 (1) (b) GDPR;
• to comply with a legal obligation to which we are subject pursuant to Art. 6 (1) (c) GDPR in connection with commercial, industrial or tax law, insofar as we are obliged to record and store your data; and
• to protect our legitimate interests in accordance with Art. 6 (1) (f) GDPR, insofar as we assert legal claims or defend ourselves in legal disputes or we prevent or investigate criminal offences.

3.3.4 Newsletter

3.3.4.1 Purpose and scope of data processing

We send a newsletter by e-mail to customers registered in our online shop, in which we refer to other goods in our range. You can object to the sending of the newsletter at any time by clicking on the corresponding link at the end of the newsletter or by unsubscribing from the newsletter in the Customer Center.

3.3.4.2 Legal basis

We process your personal data for the purpose of sending the newsletter on the following legal basis:

• Safeguarding our legitimate interest in accordance with Art. 6 (1) (f) GDPR in conjunction with Section 7 (3) UWG; our legitimate interest is based on our economic interests in the implementation of advertising measures and target-group-oriented advertising.

3.3.5 Applications

3.3.5.1 Purpose and scope of data processing

If you send us your application for a job offer on our careers page or an unsolicited application, we will process the information you send as part of your application and, if applicable, the information you send as part of your application. Personal data provided during a job interview to make a decision about whether we want to offer you a job.

3.3.5.2 Legal basis

We process your personal data to process your application on the basis of the following legal bases:

• To establish an employment relationship pursuant to Art. 88 (1) GDPR in conjunction with Section 26 (1) BDSG.
• If you provide us with special personal data in accordance with Art. 9 GDPR (e.g. application photo, information on religion/denomination or severe disability), we process it on the basis of your consent expressed with the communication of this data in accordance with § 26 (2) and (3) BDSG.
• If you provide us with information about severe disabilities, we process it to comply with legal obligations in accordance with Section 26 (3) sentence 1 GDPR.

4. Categories of recipients

Initially, only our employees will be aware of your personal data. In addition, to the extent permitted or required by law, we will share your personal data with other recipients who provide services to us in connection with our website. We limit the disclosure of your personal data to what is necessary, in particular to be able to process your order. In some cases, our service providers receive your personal data as processors and are then strictly bound by our instructions when handling your personal data. In some cases, the recipients act independently with your data, which we transmit to them. Below we list the categories of recipients of your personal data:

• banks, in the processing of the payment,
• Logistics service providers to deliver the goods to you,
• IT service providers in the administration and hosting of our website as well as in the operation of our administrative software,
• external service providers in sending invoices by post,
• Legal advisor in the enforcement of our claims.

5. Transfer to third countries

As part of the use of Google Analytics, we transmit your shortened IP address to the USA. The data transfer is based on Implementing Decision (EU) 2016/1250 of the EU Commission of 12 July 2016 pursuant to Directive 95/46/EC of the European Parliament and of the Council on the adequacy of the protection afforded by the EU-US Privacy Shield.

In addition, we do not transfer your personal data to countries outside the EU/EEA or to international organisations.

6. Duration of storage

6.1 Informational use of the website

6.2 Active use of the website

If you actively use our website, we will initially store your personal data for the duration of the response to your enquiry or for the duration of our business relationship. This also includes the initiation of a contract (pre-contractual legal relationship) and the execution of a contract.

In addition, we will then store your personal data until the statute of limitations for any legal claims arising from the relationship with you has expired, in order to use it as evidence if necessary. The statute of limitations is usually between 12 and 36 months, but it can be up to 30 years.

We delete your personal data when the statute of limitations expires, unless there is a statutory obligation to retain data, for example from the Commercial Code (§§ 238, 257 para. 4 HGB) or from the Tax Code (§ 147 para. 3, 4 AO). These retention obligations can range from two to ten years.

6.3 Data of applicants

If you have applied to us and we have not offered you a job, we will delete your data three months after we have notified you of the decision. If an employment relationship is established, the application documents become part of our personnel file.

7. Your rights as a data subject

Under the legal requirements, you are entitled to the following rights as a data subject, which you can assert against us:

• Right: You are entitled at any time within the framework of Art. 15 GDPR to request confirmation from us as to whether we are processing personal data concerning you; if this is the case, you are also entitled within the framework of Art. 15 GDPR to obtain information about this personal data as well as certain other information (including processing purposes, categories of personal data, categories of recipients, planned storage period, your rights, the origin of the data, the use of automated decision-making and, in the case of a third-country transfer, the appropriate safeguards) and a copy of your data.
• Right to rectification: In accordance with Art. 16 GDPR, you are entitled to demand that we correct the personal data stored about you if it is inaccurate or incorrect.
• Right to erasure: Under the conditions of Art. 17 GDPR, you are entitled to demand that we delete personal data concerning you without undue delay. The right to erasure does not exist, among other things, if the processing of the personal data is necessary for (i) the exercise of the right to freedom of expression and information, (ii) for the fulfilment of a legal obligation to which we are subject (e.g. statutory retention obligations) or (iii) for the establishment, exercise or defence of legal claims.
• Right to restriction of processing: You are entitled to demand that we restrict the processing of your personal data under the conditions of Art. 18 GDPR.
• Right to data portability: Under the conditions of Art. 20 GDPR, you are entitled to demand that we provide you with the personal data concerning you that you have provided to us in a structured, common and machine-readable format.
• Right to object: You have the right to object to the processing of your personal data under the conditions of Art. 21 GDPR, so that we must stop processing your personal data. The right to object exists only within the limits provided for in Art. 21 GDPR. In addition, our interests may prevent us from terminating the processing, so that we are entitled to process your personal data despite your objection.
• Right to lodge a complaint with a supervisory authority: You have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your residence, your place of work or the place of the alleged infringement, under the conditions of Art. 77 GDPR, if you believe that the processing of personal data concerning you violates the GDPR. The right to lodge a complaint exists without prejudice to any other administrative or judicial remedy.

The supervisory authority responsible for us is:
State Commissioner for Data Protection and Freedom of Information Baden-Württemberg
Königstraße 10 a
70173 Stuttgart

8. Obligation to provide data

In principle, you are not obliged to provide us with your personal data. However, if you do not do so, we will not be able to provide you with our website, we will not be able to answer your inquiries to us and we will not be able to enter into a contract with you in our online store. Personal data that we absolutely need for the above-mentioned processing purposes are marked with an asterisk "*".

9. Automated decision-making / profiling

We do not use automated decision-making or profiling (an automated analysis of your personal circumstances).

Right to object

You have the right to object, on grounds relating to your particular situation, at any time to the processing of personal data concerning you by us on the basis of Art. 6 (1) (e) (performance of a task in the public interest) or Art. 6 (1) (f) GDPR (legitimate interest of the controller); this also applies to profiling based on these provisions. We will no longer process the personal data concerning you unless we can demonstrate compelling legitimate grounds for the processing that outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

If the personal data concerning you is processed for the purpose of direct advertising, you have the right to object at any time to the processing of the personal data concerning you for the purpose of such advertising. If you object to the processing for direct marketing purposes, the personal data concerning you will no longer be processed for these purposes.