We are pleased about your visit to our website and your interest in our company. Protecting your privacy is very important to us. We will provide you with detailed information on the handling of your data.
General information concerning data processing
1. Scope of the processing of personal data
As a rule, we only process personal data of our users if this is necessary to provide a functional website and our content and services. The processing of the personal data of our users generally takes place only with their consent. An exception applies in cases where the prior obtaining of consent is not possible for actual reasons and the processing is permitted by statutory regulations.
2. Legal basis for the processing of personal data
Should we obtain the consent of the data subject for the processing of personal data, Article 6 Paragraph 1 Letter a) GDPR forms the legal basis for this.
When processing personal data which is necessary to fulfil a contract where the contracting party is the data subject, Article 6 Paragraph 1 Letter b) GDPR forms the legal basis for this. This also applies to processing which is necessary to carry out pre-contractual measures. Should the processing of personal data be necessary to fulfil a legal obligation which our company is subject to, Article 6 Paragraph 1 Letter c) GDFPR forms the legal basis for this. In case that vital interests of the data subject or of another natural person make the processing of personal data necessary, Article 6 Paragraph 1 Letter d) GDPR forms the legal basis for this.
Should the processing be necessary in order to safeguard a legitimate interest of our company or of a third party and should the interests, basic rights and basic freedoms of the data subject not outweigh our legitimate interest, Article 6 Paragraph 1 Letter f) forms the legal basis of the processing.
3. Data deletion and duration of the saving
The personal data of the data subject will be deleted or blocked, once the purpose of the saving no longer applies. Saving can take place beyond this time if this was provided for by the European or national legislator in EU directives, laws or other regulations to which the controller is subject. The data will also be blocked or deleted if a saving period prescribed by the named norms expires unless it is necessary to continue saving the data in order to conclude or fulfil a contract.
Provision of the website and creation of logfiles
1. Description and scope of the data processing
Each time our Internet site is accessed, our system automatically records data and information from the accessing computer. During this process, the following data is gathered:
(1) Information concerning the browser type and version used
(2) The operating system of the user
(3) The Internet service provider of the user
(4) The IP address of the user
(5) Date and time of the access
(6) Websites from which the system of the user accesses our Internet site
(7) Websites which are accessed by the system of the user via our website
The data is also saved in the log files of our system. This data is not saved together with other personal data of the user.
2. Legal basis for the data processing
The legal basis for the temporary saving of the data and the log files is Article 6 Paragraph 1 Letter f) GDPR.
3. Purpose of the data processing
The temporary saving of the IP address by the system is necessary to deliver the website to the computer of the user. For this purpose, the IP address of the user must remain saved for the duration of the session.
The saving in logfiles takes place in order to ensure the functionality of the website. In addition, the data allows us to optimize the website and ensure the security of our IT systems. The data is not evaluated for marketing purposes during this process.
These purposes also represent our legitimate interest in data processing in accordance with Article 6 Paragraph 1 Letter f) GDPR.
4. Duration of the saving
The data will be deleted, once it is no longer necessary for the purpose for which it was gathered. In case of the recording of the data in order to provide the website, this is the case once the respective session has come to an end.
In case of the saving of the data in logfiles, this is the case after a maximum of seven days. It is possible for the data to be saved beyond this period. In such a case, the IT addresses of the user will be deleted or disguised, so that it is no longer possible to assign this to the accessing client.
5. Right of objection and correction
The recording of the data to provide the website and the saving of the data in log files is essential for the operation of the Internet site. As a result, the user does not have a right of objection.
Use of cookies
1. Description and scope of the data processing
Our website uses cookies. Cookies are text files which are saved in or by the Internet browser on the computer system of the user. Should a user access a website, a cookie can be saved in the operating system of the user. This cookie contains a character sequence, which enables a clear identification of the browser next time the website is accessed.
We use cookies in order to make our website more user friendly.
Certain elements of our Internet site require the accessing browser to also be identified following a change of site.
Thereby the following data is saved and transferred in the cookies:
(1) Language settings
(2) Items in a shopping basket
(3) Login information
On our website, we also use cookies which enable an analysis of the surfing behaviour of the users. In this way, the following data can be transferred:
(1) Search terms entered
(2) Frequency of site access
(3) Use of website functions
The data of the users which is gathered in this way is pseudonymised by means of technical precautions. Therefore, it is no longer possible to assign the data to the accessing user. The data is not saved together with other personal data of the users.
When accessing our website, the user is informed of the use of cookies for analysis purposes by means of an info banner and referred to this data protection declaration. During this process, information is provided as to how the saving of cookies can be prevented in the browser settings.
2. Legal basis for the data processing
The legal basis for the processing of personal data using cookies is Article 6 Paragraph 1 Letter f) GDPR.
3. Purpose of the data processing
The purpose of the use of technically necessary cookies is to simplify the use of websites for the users. Certain functions of our Internet site cannot be provided without the use of cookies. For these, it is necessary for the browser to be recognized again after a change of site. For the following applications, we require cookies:
(1) Shopping basket
(2) Implementation of language settings
(3) Marking of search terms
The user data gathered by means of the technically necessary cookies is not used to create user profiles.
The purpose of the use of the analysis cookies is to improve the quality of our website and its content. By means of the analysis cookies, we are informed of how the website is used and therefore we can constantly optimize our service.
These purposes also represent our legitimate interest in the processing of personal data in accordance with Article 6 Paragraph 1 Letter f) GDPR.
4. Duration of the saving, right of objection and correction
Cookies are saved on the computer of the user and are transferred by this to our site. Therefore, you as the user have full control over the use of cookies. By changing the settings in your Internet browser, you can de-activate or restrict the transfer of cookies. Cookies which have already been saved can be deleted at any time. This can also take place in automated form. Should cookies be de-activated for our website, it may be the case that certain functions of the website cannot be fully used.
Newsletter
1. Description and scope of the data processing
Should you purchase goods or services on our Internet site and should you deposit your email address with us, this can then be used by us in order to send a newsletter. In such a case, only direct advertising for similar products or services of ours will be sent via the newsletter.
On our website, it is possible to subscribe to a free-of-charge newsletter. During the registration for the newsletter, the following data is transferred to us:
(1) Email address
(2) Gender
(3) First name
(4) Last name
The following data is also gathered during the registration:
(1) IP address of the accessing computer
(2) Date and time of the registration
For the processing of the data, your consent is obtained during the registration process and you are referred to this data protection declaration.
No data is disclosed to third parties in connection with the data processing for the sending of newsletters. The data is only used in order to send the newsletter.
2. Legal basis for the data processing
The legal basis for the processing of the data following the registration for the newsletter by the user is Article 6 Paragraph 1 Letter a) GDPR, should the consent of the user be present.
The legal basis for the sending of the newsletter following a purchase of goods or services is § 7 Paragraph 3 of the German Law against Unfair Competition (UWG).
3. Purpose of the data processing
The purpose of gathering the email address of the user is the delivery of the newsletter.
4. Duration of the saving
The data will be deleted, once it is no longer necessary for the purpose for which it was gathered. The email address of the user will however remain saved for as long as the newsletter subscription is active.
5. Right of objection and correction
The subscription to the newsletter can be terminated by the user concerned at any time. For this purpose, a relevant link can be found in each newsletter.
Disclosure of personal data to third parties
1. Shipping companies
a) Description and scope of the disclosure of the data
In the course of the delivery, we pass personal data onto the engaged shipping company, DHL or FedEx. During this process, the following data is passed on:
(1) Name
(2) Address
(3) Telephone number
(4) E-mail Address
b) Legal basis for the disclosure
The data is only disclosed in order to fulfil the contract where the contracting party is the user, therefore the legal basis is Article 6 Paragraph 1 Letter b) GDPR.
c) Purpose of the data disclosure
The disclosure of the personal data of the contracting partner is necessary in order to fulfil a contract with him or her or to carry out pre-contractual measures.
d) Duration of the disclosure
The disclosure comes to an end, once this is no longer necessary to perform the contract. Also following conclusion of the contract, it may be necessary to pass on personal data of the contracting partner in order to comply with contractual or statutory obligations.
e) Right of objection and correction
As a user, you have the option of objecting to the disclosure of the personal data. You can have the data relating to you which has been saved altered at any time.
Should the data be necessary in order to fulfil a contract or carry out pre-contractual measures, it is only possible to prematurely delete or block the data if contractual or statutory obligations do not prevent the deletion or blocking.
2. Banks
a) Description and scope of the disclosure of the data
During the course of processing of payments, we pass on personal data to Commerzbank and HSBC. During this process, the following data is passed on:
(1) Name
(2) Account details
b) Legal basis for the disclosure
The data is only disclosed in order to fulfil the contract where the contracting party is the user, therefore the legal basis is Article 6 Paragraph 1 Letter b) GDPR.
c) Purpose of the data disclosure
The disclosure of the personal data of the contracting partner is necessary in order to fulfil a contract with him or her or to carry out pre-contractual measures.
d) Duration of the disclosure
The disclosure comes to an end, once this is no longer necessary to perform the contract. Also following conclusion of the contract, it may be necessary to pass on personal data of the contracting partner in order to comply with contractual or statutory obligations.
e) Right of objection and correction
As a user, you have the option of objecting to the disclosure of the personal data. You can have the data relating to you which has been saved altered at any time.
Should the data be necessary in order to fulfil a contract or carry out pre-contractual measures, it is only possible to prematurely delete or block the data if contractual or statutory obligations do not prevent the deletion or blocking.
3. Other third parties
No transfer, processing or use of the data you have provided to us will take place for advertising and marketing purposes.
Contact form and email contact
1. Description and scope of the data processing
Our Internet site contains a contact form, which can be used to get in touch with us electronically. Should a user make use of this option, the data entered into the entry mask is transferred to us and saved. This data includes:
(1) Last name
(2) First name
(3) Address (if applicable)
(4) Company or association (if applicable)
(5) Email address
(6) Telephone number (if applicable)
(7) Message
At the time of sending of the message, the following data is also saved:
1. Date and time of the registration
For the processing of the data, your consent is obtained during the sending process and you are referred to this data protection declaration.
Alternatively, you can get in touch with us via the email address provided. In this case, the personal data of the user which is sent with the email will be saved.
No data will be passed on to third parties during this process. The data is only used in order to process the conversation.
2. Legal basis for the data processing
The legal basis for the processing of the data is Article 6 Paragraph 1 Letter a) GDPR, should the consent of the user be present.
The legal basis for the processing of the data which is transferred when sending an email is Article 6 Paragraph 1 Letter f) GDPR. Should the purpose of the email contact be the conclusion of a contract, the additional legal basis for the processing is Article 6 Paragraph 1 Letter b) GDPR.
3. Purpose of the data processing
The sole purpose of the processing of the personal data from the entry mask is the processing of the contact initiation. In case of contact by email, this also represents the necessary legitimate interest in the processing of the data.
The purpose of the other personal data which is processed during the sending process is the prevention of misuse of the contact form and ensuring the security of our IT systems.
4. Duration of the saving
The data will be deleted, once it is no longer necessary for the purpose for which it was gathered. For the personal data from the entry mask of the contact form and the personal data sent by email, this is the case once the respective conversation with the user is closed. The conversation is closed once it can be assumed from the circumstances that the matter at hand has been finally clarified.
The additional personal data gathered during the sending process is deleted at the latest after a period of seven days.
5. Right of objection and correction
At all times, the user has the option of revoking his or her consent to the processing of the personal data. Should the user get in touch with us by email, he or she can object to the saving of his or her personal data at any time. In such a case, the conversation cannot be continued.
A description follows concerning how the revocation of the consent and the objection to the saving are enabled.
In such a case, all personal data which was saved in the course of the contact initiation will be deleted.
Sample Service
1. Description and scope of the data processing
Our Internet site contains a contact form for the ordering of visual samples, which can be used to get in touch with us electronically. Should a user make use of this option, the data entered into the entry mask is transferred to us and saved. This data includes:
(1) Last name
(2) First name
(3) Address
(4) Company or association (if applicable)
(5) Email address
(6) Telephone number
(7) List of visual samples ordered
At the time of sending of the ordering of visual samples, the following data is also saved:
(1) Date and time of the registration
For the processing of the data, your consent is obtained during the sending process and you are referred to this data protection declaration.
In the course of the delivery of the samples, we pass personal data onto the engaged shipping company, DHL or FedEx. The scope and duration of the disclosure of the data are listed in Chapter IX of this data protection declaration.
2. Legal basis for the data processing
The legal basis for the processing of the data is Article 6 Paragraph 1 Letter a) GDPR, should the consent of the user be present.
The legal basis for the processing of the data which is transferred when sending an email is Article 6 Paragraph 1 Letter f) GDPR. Should the purpose of the email contact be the conclusion of a contract, the additional legal basis for the processing is Article 6 Paragraph 1 Letter b) GDPR.
3. Purpose of the data processing
The sole purpose of the processing of the personal data from the entry mask is the processing of the ordering of the samples.
The purpose of the other personal data which is processed during the sending process is the prevention of misuse of the sample service and ensuring the security of our IT systems.
4. Duration of the saving
The data will be deleted, once it is no longer necessary for the purpose for which it was gathered. For the personal data from the entry mask of the sample service, this is the case once the respective conversation with the user is closed. The conversation is closed once it can be assumed from the circumstances that the matter at hand has been finally clarified.
The additional personal data gathered during the sending process is deleted at the latest after a period of seven days.
5. Right of objection and correction
At all times, the user has the option of revoking his or her consent to the processing of the personal data. Should the user get in touch with us by email, he or she can object to the saving of his or her personal data at any time. In such a case, the conversation cannot be continued.
A description follows concerning how the revocation of the consent and the objection to the saving are enabled.
In such a case, all personal data which was saved in the course of the contact initiation will be deleted.
Offer service
1. Description and scope of the data processing
Our Internet site contains an offer service, which can be used to get in touch with us electronically. Should a user make use of this option, the data entered into the entry mask is transferred to us and saved. This data includes:
(1) Last name
(2) First name
(3) Address (if applicable)
(4) Company or association (if applicable)
(5) Email address
(6) Telephone number (if applicable)
(7) Products and quantities which should be issued for an offer
At the time of sending of the form, the following data is also saved:
(1) Date and time of the registration
For the processing of the data, your consent is obtained during the sending process and you are referred to this data protection declaration.
No data will be passed on to third parties during this process. The data is only used in order to process the conversation.
2. Legal basis for the data processing
The legal basis for the processing of the data is Article 6 Paragraph 1 Letter a) GDPR, should the consent of the user be present.
The legal basis for the processing of the data which is transferred when sending an email is Article 6 Paragraph 1 Letter f) GDPR. Should the purpose of the email contact be the conclusion of a contract, the additional legal basis for the processing is Article 6 Paragraph 1 Letter b) GDPR.
3. Purpose of the data processing
The sole purpose of the processing of the personal data from the entry mask is the processing of the contact initiation. The purpose of the other personal data which is processed during the sending process is the prevention of misuse of the contact form and ensuring the security of our IT systems.
4. Duration of the saving
The data will be deleted, once it is no longer necessary for the purpose for which it was gathered. For the personal data from the entry mask of the offer service, this is the case once the respective conversation with the user is closed. The conversation is closed once it can be assumed from the circumstances that the matter at hand has been finally clarified.
The additional personal data gathered during the sending process is deleted at the latest after a period of seven days.
5. Right of objection and correction
At all times, the user has the option of revoking his or her consent to the processing of the personal data. In such a case, the conversation cannot be continued.
A description follows concerning how the revocation of the consent and the objection to the saving are enabled.
In such a case, all personal data which was saved in the course of the contact initiation will be deleted.
Rights of the data subject
Should your personal data be processed, you are a data subject under the GDPR and have the following rights in relation to the controller:
1. Right of information
You can request confirmation from the controller as to whether personal data relating to you is processed by us.
Should such processing take place, you can request the following information from the controller:
(1) the purposes for which the personal data is processed;
(2) the categories of personal data which are processed;
(3) the recipients or categories of recipients to whom the personal data relating to you has been disclosed or will be disclosed;
(4) the planned duration of the saving of the personal data relating to you or, should concrete information not be possible in this respect, the criteria for determining the duration of the saving;
(5) the existence of a right to have the personal data relating to you corrected or deleted, a right to have the processing by the controller restricted and a right to raise an objection to this processing;
(6) the existence of a right to complain to a supervisory authority;
(7) all available information concerning the origin of the data, should the personal data not be obtained from the data subject;
(8) the existence of automated decision making, including profiling in accordance with Article 22 Paragraphs 1 and 4 GDPR and, at least in these cases, detailed information concerning the involved logic and the breadth and intended effects of such processing for the data subject. You have the right to request information as to whether the personal data relating to you is transferred to a third country or an international organisation. In this respect, you can request to be notified of the suitable guarantees in connection with the transfer in accordance with Article 46 GDPR.
2. Right of rectification
You have the right of rectification and/or completion in relation to the controller, should the personal data being processed which relates to you be incorrect or incomplete. The controller must carry out the correction immediately.
3. Right of restriction
Under the following conditions, you can request that the processing of the personal data relating to you be restricted:
(1) if you dispute the correctness of the personal data relating to you for a period of time which enables the controller to check the correctness of the personal data;
(2) if the processing is unlawful and you reject the deletion of the personal data and instead you request that the use of the personal data be restricted;
(3) if the controller no longer requires the personal data for the purposes of the processing, however you require it in order to assert, exercise or defend legal claims, or
(4) if you have raised an objection to the processing in accordance with Article 21 Paragraph 1 GDPR and it is not yet clear whether the legitimate reasons of the controller outweigh your reasons. Should the processing of the personal data relating to you have been restricted, this data, apart from its saving, may only be processed with your consent or for the assertion, exercising or defense of legal claims, to protect the rights of another natural or legal person or for reasons connected to the public interest of the EU or a Member State.
Should the processing be restricted in accordance with the conditions above, you will be informed by the controller before the restriction is lifted.
4. Right of erasure
a) Deletion obligation
You can request that the controller immediately deletes the personal data relating to you and the controller is obliged to immediately delete this data, should one of the following reasons be present:
(1) the personal data relating to you is no longer necessary for the purpose for which it was gathered or otherwise processed;
(2) you revoke your consent on which the processing was based in accordance with Article 6 Paragraph 1 Letter a) or Article 9 Paragraph 2 Letter a) GDPR and no other legal basis for the processing is present;
(3) you raise an objection to the processing in accordance with Article 21 Paragraph 1 GDPR and no legitimate reasons for the processing which take priority are present or you raise an objection to the processing in accordance with Article 21 Paragraph 2 GDPR;
(4) the personal data relating to you has been processed unlawfully;
(5) the deletion of the personal data is necessary to fulfil a legal obligation under EU law or the laws of the Member States to which the controller is subject;
(6) the personal data relating to you was gathered in relation to the services offered by the information company in accordance with Article 8 Paragraph 1 GDPR.
b) Information to third parties
Should the controller have made the personal data relating to you public and should it be obliged to delete this in accordance with Article 17 Paragraph 1 GDPR, then taking the available technology and implementation costs into account, it will take reasonable measures, also of a technical nature, in order to inform the responsible body which processes the personal data that you as a data subject have requested the deletion of all links to this personal data or the deletion of all copies or reproductions of this personal data.
c) Exceptions
The right of erasure does not apply, should the processing be necessary:
(1) to exercise the right of freedom of expression of one's opinion or information;
(2) to fulfil a legal obligation which makes the processing necessary according to EU law or the laws of the Member States to which the controller is subject or in order to fulfil a task which is in the public interest or which took place in the course of the exercising of official powers which were transferred to the controller;
(3) for reasons connected to the public interest in the area of public health in accordance with Article 9 Paragraph 2 Letter h) and Letter i), as well as Article 9 Paragraph 3 GDPR;
(4) for archiving purposes, scientific or historical research purposes or for statistical purposes which are in the public interest in accordance with Article 89 Paragraph 1 GDPR, should the right named under Section a) be expected to make the attainment of the objectives of this processing impossible or be expected to significantly impair this, or
(5) in order to assert, exercise or defend legal claims.
5. Right of notification
Should you have claimed the right of rectification, erasure or restriction of the processing against the controller, it is obliged to notify all recipients to whom the personal data relating to you was disclosed of this rectification or deletion of the data or processing restriction, unless this is shown to be impossible or would lead to disproportionately high expenses.
You have the right to be informed of these recipients by the controller.
6. Right of data portability
You have the right to receive the personal data which you have provided to the controller in a structured, up-to-date and machine readable format. You also have the right to transfer this data to another responsible body without being hindered by the controller to whom the personal data was provided, should:
(1) the processing take place with your consent in accordance with Article 6 Paragraph 1 Letter a) GDPR or Article 9 Paragraph 2 Letter a) GDPR or be based on a contract in accordance with Article 6 Paragraph 1 Letter b) GDPR and
(2) the processing take place with the assistance of automated procedures. When exercising this right, you also have the right to have the personal data relating to you transferred directly from one controller to another responsible body, should this be possible in technical terms. Freedoms and rights of other persons may not be impaired as a result.
The right of data portability does not apply to the processing of personal data which is necessary in order to fulfil a task which is in the public interest or which takes place in the course of the exercising of public powers which have been transferred to the controller.
7. Right of objection
For reasons connected to your specific situation, you have the right at any time to raise an objection to the processing of the personal data which relates to you which takes place in accordance with Article 6 Paragraph 1 Letter e) or f) GDPR; this also applies to any profiling which is based on these provisions.
The controller will no longer process the personal data relating to you, unless it can prove mandatory protectable reasons for the processing which outweigh your interests, rights and freedoms or if the purpose of the processing is the assertion, exercising or defense of legal claims.
Should the personal data relating to you be processed in order to carry out direct advertising, you have the right to raise an objection at any time against the processing of the personal data relating to you for the purposes of such advertising; this also applies to the profiling, should it be connected to such direct advertising.
Should you object to the processing for purposes connected to direct advertising, the personal data relating to you will no longer be processed for these purposes.
Regardless of Directive 2002/58/EC, you have the option of exercising your right of objection in connection with the use of services of the information company by means of automated procedures, where technical specifications are used.
8. Right to revoke the declaration of consent under data protection laws
You have the right to revoke your declaration of consent under data protection laws at any time. The lawfulness of the processing which took place prior to the issuing of the revocation of consent is not affected.
9. Automated decision-making in individual cases, including profiling
You have the right not to be subjected to a decision which is based exclusively on automated processing, including profiling, which has a legal effect on you or significantly affects you in a similar manner. This does not apply, should the decision:
(1) be necessary in order to conclude or fulfil a contract between yourself and the controller;
(2) be permitted under legal regulations of the EU or the Member States to which the controller is subject and these legal regulations contain reasonable measures to safeguard your rights and freedoms, as well as your legitimate interests, or
(3) take place with your express consent.
However, these decisions may not be based on special categories of personal data under Article 9 Paragraph 1 GDPR, unless Article 9 Paragraph 2 Letter a) or Letter g) applies and reasonable measures have been taken to protect the rights and freedoms, as well as your legitimate interests.
In relation to the cases named in (1) and (3), the controller will take reasonable measures to protect the rights and freedoms and your legitimate interests, where as a minimum this includes the right to have a person intervene on the part of the controller, the right to set out one's own opinion and the right to contest the decision.
10. Right to complain to a supervisory authority
Regardless of any legal remedies elsewhere under administrative laws or through a court, you have the right to complain to a supervisory authority, in particular in the Member State of your place of residence, your place of work or the location of the alleged breach, should you be of the opinion that the processing of the personal data relating to you breaches the GDPR. The supervisory authority to which the complaint was submitted will inform the complainant of the status and results of the claim, including the option of legal remedy before a court in accordance with Article 78 GDPR.
