1. INFORMATION ON COLLECTION OF PERSONAL DATA AND CONTACT DETAILS OF THE CONTROLLER
1.1 Responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:
3 Cserfa street
1.2 We use SSL or TLS encryption on our website to ensure the secure transmission of personal data and other confidential contents (e.g. contact information, orders or inquiries). You can recognize an encrypted connection by the character sequence "https://" and the lock icon in your browser’s address bar.
2. DATA COLLECTION WHEN YOU VISIT OUR WEBSITE
If you visit our website without registering or otherwise conveying information to us, we will only store such data that your browser transmits to our server ("server log files"). When accessing our website, the following non-personal data will be transmitted to us:
The individual pages of our website (URL)
Date and time at the time of the access
Amount of data in bytes
Source/link from which you reached the page
Operating system used
IP address used (generally anonymized)
Collection and storage shall take place according to sect. 6 para. 1 lit. f GDPR based on our legitimate interest in improving stability and function of our website. However, we reserve the right to subsequently review the log files if any specific indications suggest illegal use. Non-anonymized server log files (error log) will be deleted automatically after 14 days.
Our website is hosted by a service provider supplying infrastructure and platform services, computing capacity, storage capacity and database, security and technical maintenance services to us. We have concluded a data processing agreement (DPA) with them. Data processing shall take place for the purpose of ensuring readiness for operation of our website in which we have a legitimate interest, sect. 6 para. 1 lit. f GDPR.
Additionally such data is collected by web analytics services (see Google Analytics).
Our own cookies are a technical requirement to perform the ordering process.
As far as personal data stored in individual cookies implemented by us is processed, it is done in accordance with sect. 6 para. 1 lit. b GDPR either to execute the contract or in accordance with sect. 6 para. 1 lit. f GDPR to maintain our legitimate interests in providing a customer-friendly and effective use of our website.
Cookies will remain on your device and enable us to recognize your browser on your next visit. The maximum validity can be viewed in the table below. After this, they will be deleted depending on your individual browser setting.
Please note that you can configure your browser to inform you about cookies and let you decide individually about accepting or declining cookies for specific cases or in general. Every browser is different in how it manages cookie settings. This is described in the help menu of every browser, which explains how you can change your cookie settings.
Cookies that we generally use on this page:
Cookie Necessity Function Validity
frontend Technology Session management 1 week
Currency Technology Storage of the selected currency 180 days
external_no_cache Technology Controls use of the cache for the shop 1 hour
filters Technology Settings of the product filters 80 minutes
downtime-msg Technology Refrain from re-displaying maintenance announcement End of day
cookie_banner Technology Refrain from re-displaying cookie banner 180 days
quote_edit_info Technology Refrain from re-displaying quote edit info box 180 days
Cookies used by Google:
Cookie Necessity Function Validity
_ga Statistics To distinguish visitors 2 years
_gat Statistics Control of call frequency 1 minute
_gid Statistics To distinguish visitors 24 hours
For more details on cookies of Google, see section Google Analytics.
4. ELECTRONIC CONTACT
To execute our e-mail communication we have commissioned a service provider which supplies infrastructure, platform, security and technical maintenance services to us.
We have concluded a data processing agreement (DPA) with them. Data processing shall take place for the purpose of ensuring readiness for operation of our email communication in which we have a legitimate interest, sect. 6 para. 1 lit. f GDPR.
CONTACT FORM / EMAIL
Personal data will be collected if you contact us electronically by contact form or email. Your name and email address must be entered in the contact form to enable us to address you individually. This data will only be stored and used for the purpose of answering your request or contacting you and for the required technical administration. We cannot process your query without this mandatory information. Any further information is voluntary.
The legal basis for processing this data is our legitimate interest in answering your query in accordance with sect. 6 para. 1 lit. f GDPR. If your inquiry is targeted at a conclusion of a contract, sect. 6 para. 1 lit. b GDPR shall be an additional legal basis for processing. The legal basis for your voluntary information is sect. 6 para. 1 lit. a GDPR.
Your data will be deleted after final processing of your query. This is also the case if the circumstances show that the affected subject matter has been finally clarified and that there are no statutory archiving obligations in this respect.
If you submit a PO request, personal data will be collected. Your name and email address must be entered when you use our form to enable us to address and advise you individually. This data will only be stored and used for the purpose of answering your request or contacting you and for the required technical administration. We cannot process your query without this mandatory information. Any further information is voluntary.
If you submit a support request, personal data will be collected. Your name and email address must be entered to enable us to address and advise you individually. This data will only be stored and used for the purpose of your support request or execution of the support contract concluded with you and the required technical administration. This contract is concluded when you submit a support request. We cannot process your support request without this mandatory information. Any further information is voluntary.
The legal basis for processing of the data is sect. 6 para. 1 lit. a GDPR. Your data will be stored for as long as we have a support contract with you. In case of termination of the support contract, your data will be erased if this is not prevented by any statutory archiving obligations.
5. DATA COLLECTION UPON POSTING BLOG COMMENTS
If you use the comment function, we will collect and process your personal data based on your voluntary consent in accordance with sect. 6 para. 1 lit. a GDPR. Your data will be stored permanently. You can withdraw your consent at any time by emailing us effective for the future. We will then erase your comments.
6. DATA PROCESSING WHEN OPENING AND USING THE CUSTOMER PLATFORM
If you create a personal customer account on our customer platform, we will collect and process your personal data. It must include the company name, complete postal address, VAT ID if present, as well as the name, phone number and email address of your contact. Without this mandatory information, we will be unable to provide you with access to our customer platform. Any further information is voluntary.
Data processing will take place to perform the contract with you in accordance with sect. 6 para. 1 lit. b GDPR. Your data will remain stored for as long as the contract for the customer account with us exists. Erasure of the customer account is possible at any time. The legal basis for your voluntary information is sect. 6 para. 1 lit. a GDPR.
If you use your personal customer account to submit any quote requests, we will collect and process your personal data. Beyond the data named, we also need the contract data in order to make a personalized offer to you.
7. DATA PROCESSING UPON ORDERS
If you order any goods or services from us, we will collect and process your personal data to perform and process the contract with you in accordance with sect. 6 para. 1 lit. b GDPR. The mandatory information is evident from the order form. We cannot perform your order without your information. The legal basis for your voluntary information is sect. 6 para. 1 lit. a GDPR.
We cooperate with external service providers that wholly or partially support us in execution of the contracts concluded with you.
With the complete processing of the contract and complete payment of the open claims, the usage of your personal data which is no longer needed will be prohibited for further use and erased after the end of the archiving period under tax and commercial law if you have not expressly consented to further use of your data.
SHIPPING SERVICE PROVIDER
We cooperate with external shipping partners in order to meet our contractual obligations. We will provide your names, delivery address and phone number (if required for delivery by the logistics partner) only for purposes of goods deliveries, sect. 6 para. 1 lit. b GDPR to a chosen shipping partner.
We will pass on the payment data required for payment processing to the commissioned payment service provider or banks.
If you order on account, we reserve the right to perform a credit assessment in order to preserve our justified interest in determination of our customers' solvency. We will transmit the personal data required for credit assessments to the following service provider in accordance with sect. 6 para. 1 lit. f GDPR:
8. WEB ANALYSIS SERVICES
Our website uses Google Analytics, a web analysis service of Google LLC, Amphitheatre Parkway, Mountain View, CA 94043, USA (Google). Google Analytics uses "cookies", i.e. text files that are stored on the user's computer and that permit analysis of their use of the website. The information produced by the cookie regarding use of this website by the users is usually transferred to a server of Google in the USA and saved there.
Our website uses Google Analytics in its version as "Universal Analytics", but without user analysis based on a pseudonymized user ID (cross-device tracking). We use Google Analytics only with the extension «_anonymizeIp()», which ensures anonymization of the IP address by abbreviation and excludes direct personal references. Due to the extension, your IP address will be abbreviated first by Google within member states of the European Union or in other contracting states of the convention on the European Economic area. Only in exceptions will your full IP address be transferred to a server of Google in the USA and abbreviated there. In such exceptions, this processing will take place in accordance with sect. 6 para. 1 lit. f GDPR based on our legitimate interest in the statistical analysis of the user behavior for purposes of optimization and marketing. On our order, Google will use this information to evaluate your use of the website, in order to compile reports on the website activities and to render further services connected to website use and internet use towards the website operator. The IP address submitted by your browser in the scope of Google Analytics will not be combined with any other data of Google.
You may prevent saving of the cookies by making the corresponding settings in your browser software; however, note that you may be unable to fully use all functions of the website in such a case. You may furthermore prevent recording of the data generated by the cookie and referring to your use of the website (incl. your Internet Protocol address) and processing of these personal data by Google by downloading and installing the browser plug-in available under the following link:
As an alternative for the browser plugin or for browser on mobile devices, you can click the following link in order to set an opt-out cookie that will prevent recording within this website by Google Analytics in the future (this opt-out cookie will only work in this browser and only for this domain. You need to click the link again if you delete your cookies in this browser):
Deactivating Google Analytics
The determined anonymized data will be stored for up to 14 months. The data will be erased automatically after this.
Google, headquartered in the USA, is certified for the US-European data protection treaty "Privacy Shield", which ensures compliance with the data protection level applicable in the EU.
For more information on handling of user data by Google Analytics, see the usage terms for Google Analytics http://www.google.com/analytics/terms/de.html, the data protection statement of Google https://policies.google.com/privacy?hl=en or here: https://support.google.com/analytics/answer/6004245?hl=en
9. YOUR RIGHTS
As an affected person, you have the following rights:
Confirmation of data processing: You have the right to demand our confirmation of whether we process any personal data concerning you. The prerequisites for this can be found in sect. 15 GDPR.
Information: You have the right to demand information on your personal data processed by us. The prerequisites for this can be found in sect. 15 GDPR.
Rectification: You have the right to demand rectification of inaccurate personal data concerning you without undue delay at any time. The prerequisites for this can be found in sect. 16 GDPR.
Erasure: You have the right to demand erasure of personal data concerning you without undue delay at any time. The prerequisites for this can be found in sect. 17 GDPR.
Restriction of processing: You have the right to demand restriction of processing of your personal data. The prerequisites for this can be found in sect. 18 GDPR.
Data portability: You have the right to receive the personal data concerning you that you have provided to us in a structured, common and machine-readable format. You further have the right to have these data transmitted to another controller by us. The prerequisites for this can be found in sect. 20 GDPR.
Withdrawal of consent: You have the right to withdraw your given consent at any time if processing is based on sect. 6 (1) lit. a or sect. 9 (2) lit. a GDPR. Data processing until your withdrawal remains legal. The revocation shall only apply for the future. The prerequisites for this can be found in sect. 7 (3) GDPR.
Complaint: You have the right, notwithstanding any other legal remedy under administrative law or in court, to complain to a supervisory authority if you believe that processing of the personal data concerning you violates the GDPR. The prerequisites for this can be found in sect. 77 GDPR.
10.2 RIGHT TO OBJECT
YOU HAVE THE RIGHT TO OBJECT TO PROCESSING OF PERSONAL DATA CONCERNING YOU FOR REASONS RESULTING FROM YOUR SPECIFIC SITUATION THAT WE PROCESS DUE TO OUR OVERRULING LEGITIMATE INTEREST AT ANY TIME (SECT. 6 (1) LIT. E OR F GDPR), EFFECTIVE FOR THE FUTURE. FOR THE PREREQUISITES, SEE SECT. 21 GDPR.
10. STORAGE PERIOD OF PERSONAL DATA AND ERASURE
If no deviating storage period is stated otherwise, we will store the data for as long as this is required for their purpose and statutory archiving obligations apply. According to the legal specifications, storage shall continue for 6 years (§ 257 para. 1 German Commercial Code - trade logs, inventory, opening balance sheets, annual statements, commercial letters, booking evidence, etc.) and for 10 years ( § 147 para. 1 AO - accounts, records, management reports, booking evidence, commercial and business letters, documents relevant for taxation, etc.).
After the end of the archiving period, the corresponding data will be routinely deleted if they are no longer required for performing the contract or preparing the contract and/or we do not have any legitimate interest in further storage anymore.