Data protection information

3.2.1.2 Legal basis

We process your personal data for the technical provision of our website on the basis of the following legal bases:

• For the fulfilment of a contract or for the implementation of pre-contractual measures in accordance with Art. 6 para. 1 lit. b GDPR, insofar as you visit our website to find out about our range of goods, in particular in the web shop, and our events; and

• to safeguard our legitimate interests in accordance with Art. 6 para. 1 lit. f GDPR in order to make the website technically available to you. Our legitimate interest is to be able to provide you with an appealing, technically functioning and user-friendly website.

•  

3.2.2 Statistical analysis of the use of the website

3.2.2.1 Purpose and scope of data processing

For the purpose of statically analysing the use of our website, we use Google Analytics and thus cookies, which enable an analysis of your surfing behaviour. This enables us to improve the quality of our website and its content. We learn how the website is used and can thus constantly optimise our offering. For this purpose, our webshop system generates a user ID that can be used to analyse your surfing behaviour on the website.
The information obtained as part of the static analysis of our website, in particular the user ID, is not merged with your Other data collected on the website.

Adobe Analytics

....

3.2.2.2 Legal basis

We process your personal data to statistically analyse the use of our website on the following legal basis:

• Your consent

3.3 Active use of the website

In addition to the purely informational use of our website, you can also actively use our website to purchase goods in our online shop or to contact us. In addition to the processing of your personal data described above for purely informational use, we also collect and process other personal data from you that we need to process your order or to process and respond to your enquiry.

3.3.1 Creation of a customer account

3.3.1.1 Purpose and scope of data processing

On our website, you have the option of creating a customer account. Frames of the creation of a customer account, we check whether you or your company operates a business, as we only deliver to commercial customers. Creating a customer account is necessary for ordering our catalogues, placing orders in our online shop, submitting complaints and downloading certain documents that we only offer to our registered customers. When registering, you must provide the following data:

• Company*
• Company tax no./USt ID no./company ID
• Internet address
• Street, house number*
• Postcode*
• City/suburb*
• Country*
• Address of the contact person*
• First name and surname of the contact person*
• Phone number*
• Mobile phone number
• Telefax number
• E-mail address*
• E-mail address for invoices
• Excerpt from the commercial register or your business registration

The mandatory information is marked with an asterisk "*"

3.3.1.2 Legal basis

We process your personal data when creating a customer account on the basis of the following legal basis:

• Fulfilment of a contract or for the implementation of pre-contractual measures pursuant to Art. 6 para. 1 lit. b GDPR.

3.3.2 User enquiries/call centre

3.3.2.1 Purpose and scope of data processing

In order to be able to process and answer your enquiries (including in the event of transport damage) to us, e.g. via the contact form or to our email address, telephone or fax number, we process the personal data you provide in this context. In any case, this includes your name and your e-mail address in order to send you a reply, as well as other information that you send us in the frames of your message

3.3.2.2 Legal basis

We process your personal data to respond to user enquiries on the basis of the following legal basis:

• Protection of our legitimate interests in accordance with Art. 6 (1) (f) GDPR; our legitimate interest lies in responding appropriately to customer enquiries.

3.3.3 Orders in the online shop

3.3.3.1 Purpose and scope of data processing

Order

When you order our goods in our online shop, we collect personal data from you in order to accept and process the order in the frames of online commerce and to be able to send you the ordered goods. In doing so, we collect the information evident from the respective input forms, which is essentially the data of the company placing the order. The following data may have a personal reference:

• E-mail address of a contact person
• Company
• Street
• Additional address
• Sales tax number
• Telephone number of the contact person
• .

Order processing

In order to be able to send you the ordered goods, we pass on the company name, the name of the contact person, contact details and the delivery address to the delivery service commissioned by us.

Compliance with legal regulations

We also process your personal data in order to fulfil other legal obligations that apply to us in connection with the processing of the order. These include, in particular, retention periods under commercial, trade or tax law.

Law enforcement

We also process your personal data in order to assert our rights and enforce our legal claims. We also process your personal data in order to be able to defend ourselves against legal claims. Finally, we process your personal data insofar as this is necessary for the defence or prosecution of criminal offences.

3.3.3.2 Legal basis

We process your personal data to process orders in the online shop on the basis of the following legal bases:

• for the fulfilment of a contract or for the implementation of pre-contractual measures pursuant to Art. 6 para. 1 lit. b GDPR;
• to fulfil a legal obligation to which we are subject pursuant to Art. 6 para. 1 lit. c GDPR in connection with commercial, trade or tax law, insofar as we are obliged to record and store your data; and
• to safeguard our legitimate interests in accordance with Art. 6 para. 1 lit. f GDPR, insofar as we assert legal claims or defend ourselves in legal disputes or we prevent or investigate criminal offences
• .

3.3.4 Newsletter

3.3.4.1 Purpose and scope of data processing

We send customers registered in our online shop a newsletter by email in which we draw attention to other goods in our range. You can unsubscribe from the newsletter at any time by clicking on the corresponding link at the end of the newsletter or by unsubscribing from the newsletter in the customer centre.

3.3.4.2 Legal basis

We process your personal data to send the newsletter on the following legal basis:

• Preserving our legitimate interest in accordance with Art. 6 para. 1 lit. f) GDPR in conjunction with Section 7 para. 3 UWG; our legitimate interest is based on our economic interests in the implementation of advertising measures and target group-oriented advertising.

3.3.5 Applications

3.3.5.1 Purpose and scope of data processing

If you send us your application for a job vacancy on our careers page or an unsolicited application, we will process the personal data you send us as part of your application and any personal data you provide during an interview in order to make a decision as to whether we would like to offer you a position.

If you send us your application for a job vacancy on our careers page or an unsolicited application, we will process the personal data you send us as part of your application and any personal data you provide during an interview in order to make a decision as to whether we would like to offer you a position.

3.3.5.2 Legal basis

We process your personal data to process your application on the basis of the following legal bases:

• To establish an employment relationship pursuant to Art. 88 (1) GDPR in conjunction with Section 26 (1) BDSG
• .
• If you provide us with special personal data in accordance with Art. 9 GDPR (e.g. application photo, information on religion/denomination or severe disability), we process this data on the basis of your consent expressed by providing this data in accordance with Section 26 (2) and (3) BDSG.
• If you provide us with information on severe disabilities, we process this to fulfil legal obligations in accordance with Section 26 (3) sentence 1 GDPR.

4. categories of recipients

In the first instance, only our employees receive knowledge of your personal data. In addition, we share your personal data with other recipients who provide services for us in connection with our website, insofar as this is permitted or required by law. We limit the disclosure of your personal data to what is necessary, in particular to process your order. In some cases, our service providers receive your personal data as processors and are then strictly bound by our instructions when handling your personal data. In some cases, the recipients act independently with your data that we transfer to them. Below we list the categories of recipients of your personal data:

• Banks, for the processing of payment,
• Logistics service providers, in order to be able to deliver the goods to you,
• IT service providers for the administration and hosting of our website and the operation of our administration software,
• external service providers for sending invoices by post,
• legal advisors in the assertion of our claims
• .

5. third country transfer

Frames in which Google Analytics is used, we transfer your truncated IP address to the USA. The data transfer is based on the EU Commission Implementing Decision (EU) 2016/1250 of 12 July 2016 pursuant to Directive 95/46/EC of the European Parliament and of the Council on the adequacy of the protection provided by the EU-US Privacy Shield.

Otherwise, we do not transfer your personal data to countries outside the EU or the EEA or to international organisations.

6. duration of storage

6.1 Informational use of the website

6.2 Active use of the website

When you actively use our website, we initially store your personal data for the duration of the response to your enquiry or for the duration of our business relationship. This also includes the initiation of a contract (pre-contractual legal relationship) and the fulfilment of a contract.

In addition, we then store your personal data until any legal claims arising from the relationship with you become time-barred in order to use it as evidence if necessary. The limitation period is usually between 12 and 36 months, but can also be up to 30 years.

We delete your personal data when the limitation period expires, unless there is a legal obligation to retain it, for example under the German Commercial Code (Sections 238, 257 (4) HGB) or the German Fiscal Code (Section 147 (3), (4) ABS). These retention obligations can range from two to ten years.

6.3 Data from applicants

If you have applied to us and we have not offered you a position, we will delete your data three months after we have informed you of the decision. If an employment relationship is established, the application documents will become part of our personnel file.

7. your rights as a data subject

You are entitled to the following rights as a data subject under the legal requirements, which you can assert against us:

• Right to information: You are entitled to request confirmation from us at any time within the framework of Art. 15 GDPR as to whether we are processing personal data concerning you; if this is the case, you are also entitled within the framework of Art. 15 GDPR to request information about this personal data and certain other information (e.g. processing purposes, categories of personal data).If this is the case, you are also entitled to receive information about this personal data and certain other information (including the purposes of processing, categories of personal data, categories of recipients, planned storage period, your rights, the origin of the data, the use of automated decision-making and, in the case of transfer to a third country, the appropriate guarantees) and a copy of your data.
• Right to rectification: You are entitled to request that we rectify the personal data stored about you in accordance with Art. 16 GDPR if it is inaccurate or incorrect.
• Right to erasure: You are entitled, under the conditions of Art. 17 GDPR, to demand that we erase personal data concerning you without undue delay. The right to erasure does not exist, among other things, if the processing of personal data is necessary for (i) the exercise of the right to freedom of expression and information, (ii) to fulfil a legal obligation to which we are subject (e.g. statutory retention obligations) or (iii) for the assertion, exercise or defence of legal claims.
• Right to restriction of processing: You are entitled to demand that we restrict the processing of your personal data under the conditions of Art. 18 GDPR.
• Right to data portability: You have the right to request that we provide you with the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format, subject to the requirements of Art. 20 GDPR.
• Right to object: You are entitled to object to the processing of your personal data under the conditions of Art. 21 GDPR, which means that we must stop processing your personal data. The right to object exists only within the limits provided for in Art. 21 GDPR. In addition, our interests may conflict with the termination of processing, so that we are authorised to process your personal data despite your objection.
• Right to lodge a complaint with a supervisory authority: You have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of personal data relating to you infringes the GDPR, subject to the conditions of Art. 77 GDPR. The right to lodge a complaint is without prejudice to any other administrative or judicial remedy.

• 
  
  The supervisory authority responsible for us is:
  State Commissioner for Data Protection and Freedom of Information Baden-Württemberg
  Königstraße 10 a
  70173 Stuttgart

8. Obligation to provide data

In principle, you are not obliged to provide us with your personal data. However, if you do not do this, we will not be able to make our website available to you, answer your enquiries to us or enter into a contract with you in our online shop. Personal data that we absolutely need for the above-mentioned processing purposes is marked with an asterisk "*".

9. Automated decision-making / profiling

We do not use automated decision-making or profiling (an automated analysis of your personal circumstances).

Right of objection

You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you by us which is based on Article 6(1)(e) (performance of a task carried out in the public interest) or Article 6(1)(f) GDPR (legitimate interest of the controller); this also applies to profiling based on these provisions. We will no longer process the personal data concerning you unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.
If the personal data concerning you are processed for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for the purpose of such advertising. If you object to the processing for direct marketing purposes, the personal data concerning you will no longer be processed for these purposes.