Privacy Policy

Thank you for visiting our website and for your interest in our company. We view data protection as a customer-oriented aspect of quality. The protection of your personal data and the safeguarding of your right of personality are important to us.

With this Data Protection Policy, we would like to inform all visitors to our website transparently about the nature, scope and purpose of the personal data we collect, use and process, as well as to explain to you the rights to which you are entitled.

As a rule, it is possible to use our website without providing personal data. However, should you use services of our company through our website, it may become necessary to process your personal data.

The data automatically collected when visiting our website, as well as the personal data entered by you when using our services, are processed pursuant to the currently applicable statutory provisions on the protection of personal data.

If the processing of your personal data is necessary, and if there is no statutory basis for such processing, we always obtain consent for the required purpose of processing.

As the company responsible for processing, we have established technical and organizational measures in order to ensure a level of protection for your personal data that is a high as possible.

However, please be advised that as a general rule, transferring data on the World Wide Web may be associated with security gaps.

If you would like to use our company’s services and do not wish to use the path of data transfer via the World Wide Web in doing so, you can also contact us by phone.

1. Contact details of the party responsible for data processing

The party responsible according to the General Data Protection Regulation is:
Neuland GmbH & Co. KG
Am Kreuzacker 7
36124 Eichenzell / Germany
Phone: +49 6659 88-0
Email: [email protected]

The appointed data protection officer is:
Stephan Hartinger
Coseco GmbH
Phone: +49 8232 80988-70
Email: [email protected]

2. Collection of general access information

Each time our website is accessed, we automatically collect server log file information that your browser transmits to us. This includes:

IP (Internet Protocol) address of the accessing computer
the website that you came from to visit us (referrer)
our web page that you visit
the date and duration of the visit
the browser type and browser settings
the operating system

Please be advised that these data cannot be attributed to a specific person. We use this technical information solely for the following purposes:

to make our website more attractive and easier to use,
to identify technical problems on our website early on,
to correctly deliver the content of our website and
to provide law enforcement authorities with the information necessary to investigate a crime in the event of a cyber attack.
As a technical precaution, these data are stored for at most 14 days in order to protect data processing systems against unauthorized access.

3. Collection and transfer of personal data

We use your personal data only for the purposes of data protection listed on this information page.
Our website has the following input screens for the collection of personal data:

3.1. Shop system (customer account)
We use your personal data that you enter in connection with registering for shop access in order to establish password-protected, direct access to your personal customer account. In order to establish shop access, we require the following details from you:

Industry (B2B)
Salutation
First and last name
Email address
Company name (B2B)
Company notation (B2B)
Department (B2B)
Address
Postal code and town, state/province if applicable
Country

After registering, you will receive a confirmation email.

The personal data entered by you are collected and stored for creating the customer account, for internal processing and for our own purposes. Depending on the purpose of processing, data may be transferred to one or more processors, such as shipping companies, if they are used to render the service you desire.

Where we process personal data for which we have obtained the consent of the data subject, Article 6(1)(a) GDPR serves as the legal basis.
Where the processing of personal data is necessary for the performance of a contract to which the data subject is party, the legal basis is Article 6(1)(b) GDPR. This also covers processing operations that are necessary in order to take steps prior to entering into a contract.
Where the processing of personal data is necessary for compliance with a legal obligation to which our company is subject, the legal basis is Article 6(1)(c) GDPR.

After setting up your customer account, you can enter and manage your contact and address data and your preferred payment method, as well as view data about your completed, open and recently shipped orders. You undertake to treat your personal access credentials in confidence and not to make them accessible to unauthorized third parties. You can at any time correct/supplement the personal data provided when registering.

Once you have finished communicating with us, you should always log out of your customer account.

Transfer of data for the purpose of contract performance
For the purpose of contract performance, we transfer your data to the shipping company handling delivery, to the extent that this is necessary in order to deliver the ordered goods.

Depending on which payment service provider you selected in the ordering process, we transfer the payment data to the credit institution handing payment for the purpose of processing payment and, where necessary, payment service providers we have engaged, or to the selected payment service.

In some cases, the selected payment service providers also collect these data themselves if you set up an account with them. In such case, during the ordering process, you must log in to the payment service provider with your access credentials.

The data protection policy of the payment service provider concerned is then applicable.

Transfer of data for the purpose of checking credit
If we perform in advance, e.g. in the case of a purchase on account, we reserve the ability to obtain identity and credit information from service providers specializing in this (credit reporting agencies) for the purposes of the legitimate interests pursued by us.
In this regard, we transfer your personal data needed for a credit check to the following company:

Creditsafe Deutschland GmbH
Schreiberhauer Straße 30
10317 Berlin

Where the processing of personal data is necessary for the purposes of the legitimate interests pursued by our company or by a third party, and such interests are not overridden by the interests or fundamental rights and freedoms of the data subject, the legal basis is Article 6(1)(f) GDPR. The legitimate interest of our company is the performance of our business activity and the analysis, optimization and maintenance of the security of our website.

3.2 Sending of the newsletter
On our website, we offer you the ability to subscribe to our newsletter, in which we inform you at regular intervals about offers and products of our company and provide you with information about it.
In order to be able to receive our newsletter, you must have a valid email address.
In order to send a personalized newsletter, we require the following details from you:

First and last name
Email address

After registering, you will, for legal reasons, receive a confirmation email in order to finalize your registration order for sending the newsletter.
The data listed here are used solely for sending the newsletter.

We use SendinBlue for sending our newsletter. The provider is Sendinblue SAS, 47, rue de la Chaussée d’Antin, 75009 Paris, France.
SendinBlue is a service that can be used, inter alia, to organize and analyze the sending of newsletters. The data you enter for the purpose of receiving the newsletter are stored on servers of SendinBlue. The hosting server on which SendinBlue processes and stores the data bases are located exclusively in the European Union. SendinBlue undertakes not to transfer data outside the European Union.
If you do not want any analysis by SendinBlue, you must unsubscribe from the newsletter.
SendinBlue enables us to analyze newsletter campaigns.
Processing was agreed to for this purpose.

You can find more detailed information about the features of SendinBlue at www.sendinblue.com/about/

You can find the data protection policy of SendinBlue at www.sendinblue.com/legal/privacypolicy/

If we receive your email address in connection with the sale of a good or service and you do not object to it, we reserve the ability to regularly send you offers about similar products, such as those previously purchased, from our range by email.

Where we process personal data for which we have obtained the consent of the data subject, Article 6(1)(a) GDPR serves as the legal basis.

In accordance with Articles 7(3) and 21 GDPR, you at all times have the ability to unsubscribe to the newsletter and to withdraw your consent to the use of your data for sending the newsletter.
A corresponding link is contained in each newsletter for this purpose.

Newsletter tracking
Please be advised that when sending the newsletter, we analyze the user behavior of subscribers. For this purpose, the sent newsletter emails contain what are known as web beacons or tracking pixels, which are stored by our service provider SendinBlue. For the analyses, SendinBlue links the listed data and the web beacons with your email address. Links received in the newsletter also contain these tracking IDs. The legal basis for this data processing is Article 6(1)(f) GDPR.

This information is stored for as long as you subscribe to the newsletter. After unsubscribing, the data remain stored in anonymized or pseudonymized form.
You can prevent such tracking by deactivating the display of images in your email program. In such case, however, the newsletter will not be fully displayed to you, and it may be that you cannot use all of its features.

3.3. Blog comment feature
On our website, we offer you a blog and the ability to leave your own comments about individual blog posts. A blog is a normally publicly viewable portal maintained on a website in which one or more persons, known as bloggers, can post articles or write down thoughts in blog posts. You can normally comment on blog posts.
If you leave a comment on our blog, we store and publish not only the comments left by the data subject but also details about the time when the comment was entered and the user name chosen by the data subject (pseudonym). In addition, we log your IP address. The IP address is stored for security reasons and for the event that a submitted comment infringes the rights of third parties or contains unlawful content. These personal data are therefore stored for our own interests so that in the case of a violation of law, we can provide proof if necessary. These collected personal data are not transferred to third parties unless transfer is required by law or aids in legal defense.

Where we process personal data for which we have obtained the consent of the data subject, Article 6(1)(a) GDPR serves as the legal basis.

3.4. Making contact by email or using the contact form
On our website, we offer you the ability to contact us by email and/or using a contact form.

If you contact us by email or using a contact form, the personal data you transmit are automatically stored.

Salutation
Name
Company (B2B)
Country
Phone number
Email address

Personal data that you voluntarily transmit to us are stored for the purposes of processing your inquiry or making contact with the data subject. These personal data are not transferred to third parties.

Where we process personal data for which we have obtained the consent of the data subject, Article 6(1)(a) GDPR serves as the legal basis.

3.5. Requesting informational material by mail
On our website, we offer you the ability to subscribe to our print media, in which we inform you at regular intervals by mail about offers and products of our company and provide you with information about it.
In order to send informational material by mail, we require the following details from you:

Salutation
Name
Company name (B2B)
Department (B2B)
Address
Postal code and town, state/province if applicable
Country
Email address

Personal data that you voluntarily transmit to us are used for the purposes of processing your inquiry and sending the informational material. These personal data are not transferred to third parties.
You can withdraw your request at any time.

Where we process personal data for which we have obtained the consent of the data subject, Article 6(1)(a) GDPR serves as the legal basis.

In accordance with Articles 7(3) and 21 GDPR, you at all times have the ability to discontinue the sending of informational material by mail and to withdraw your consent to the use of your data to do so.

3.6. Item reviews
On our website,we offer you the ability to review our items.
If you leave us an item review, you will receive, for security reasons, a confirmation email in order to finalize your review. The review will be published following internal examination.
For an item review, we require the following details from you:

Name
Email address
Your review

Personal data that you voluntarily transmit to us are stored and published for the purposes of processing your inquiry. These personal data are not transferred to third parties.

Where we process personal data for which we have obtained the consent of the data subject, Article 6(1)(a) GDPR serves as the legal basis.

3.7. External payment service providers
We use Payrexx AG, a payment institution licensed in Switzerland, for payment processing (SEPA direct debit and credit card). For this purpose, Payrexx AG requires personal information from you, namely: your name and address, account number and bank routing code or IBAN and BIC or credit card number (including expiration date and three-digit security code), invoice amount, and currency, as well as the customer number. Payrexx AG is permitted to use this information for the purpose of payment processing and to transfer it to payment gateways. It is obligated to treat the information in conformity with German data protection law, explicitly also Article 28 GDPR.
Processing was agreed to for this purpose.

You can find more information about the processing of your data by Payrexx AG at https://www.payrexx.com/site/assets/files/3945/privacy_policy.pdf

3.8. Scope of the processing of personal data in the application process
On our website, we offer you the ability to apply for a job online at Neuland GmbH & Co. KG by completing the application form provided on the site and sending it to us. Mandatory fields are marked as such on the form:

Salutation
First and last name
Email address
Telephone
CV/resume
Cover letter
Credentials/references

Your form data, including uploaded documents, photos, and other files, are transmitted to us by clicking on “Send”.

Personal data that you voluntarily transmit to us are processed and stored for the purposes of carrying out the application process. These personal data are not transferred to third parties.

Where we process personal data for which we have obtained the consent of the data subject, Article 6(1)(a) GDPR serves as the legal basis.

Section 26 of the German Federal Data Protection Act (Bundesdatenschutzgesetz) (data processing for employment-related purposes) serves as the legal basis for the above-described processing.

Storage period
If your employment application is rejected, your data and application documents will be erased within six months of rejection.

Article 6(1)(a) GDPR serves as the legal basis.

Obligation to provide personal data
If you would like to apply for a position at our company, you must provide the personal data described in Section 3.1.8 that are necessary for carrying out the application process. If you do not provide these data to us, it is not possible to carry out the application process.

Non-existence of automated decision-making (including profiling)
Please be advised that in connection with applying for a position at our company, you will not be subjected to a decision based solely on automated processing, including profiling, that has a legal effect on you or substantially interferes with you in a similar manner.

4. What are cookies used for?

Our website uses cookies at a number of places. For detailed information about which cookies are used, please see our Cookie Policy.

5. Use of tracking and analysis tools

5.1. Use of Google Analytics
This website uses Google Analytics, a Web analysis service of Google Inc. ("Google"). Google Analytics uses cookies, i.e. text files that are stored on your computer and facilitate an analysis of your use of our website. The information generated by the cookie about your use of this website is normally transferred to a Google server in the U.S. and stored there. In the event of activation of IP anonymization on this website, however, your IP address is first shortened by Google within the Member States of the European Union or in other Contracting States of the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transferred to a Google server in the U.S. and shortened there. Google uses this information on behalf of the operator of this website in order to evaluate your use of the website, to compile reports about website activities, and to provide other services to the website operator associated with website use and internet use. The IP address transmitted by your browser in connection with Google Analytics is not combined with other Google data. You can prevent the storage of cookies by configuring your browser software accordingly. However, please be advised that in such case you may not be able to use all features of this website to their full extent. In addition, you can prevent the collection and processing by Google of the data generated by the cookie relating to your use of the website (including your IP address) by downloading and installing the browser plug-in available at tools.google.com/dlpage/gaoptout. You can find more information about this at www.google.com/intl/analytics/privacyoverview.html (general information about Google Analytics and data protection). Please be advised that on this website, Google Analytics was augmented with the code “gat._anonymizeIp();” in order to ensure the anonymized collection of IP addresses (known as “IP masking”).

5.2. Use of the remarketing feature of Google Inc.
This website uses the remarketing feature of Google Inc. ("Google"). This features enables the provider to display targeted advertising to visitors to the website if they visit other websites in the Google Display Network. Google uses cookies to analyze website use, which forms the basis for creating targeted advertisements. For this purpose, Google stores a small file with a number sequence in the browsers of visitors to the website. Via this number, the visits to the website are recorded, and anonymized data about use of the website are collected. The personal data of visitors to the website are not stored. If you subsequently visit another website in the Google Display Network, advertisements will be displayed to you that very likely take into consideration product and information areas that were visited earlier. You can permanently deactivate the use of cookies by Google by downloading and installing the plug-in provided at the following link: www.google.com/settings/ads/plugin.
In the alternative, you can deactivate the use of cookies by third-party providers by visiting the deactivation site of the Network Advertising Initiative at www.networkadvertising.org/choices/ and following the further information there about opting out. You can find further information about Google remarketing and the data protection policy of Google at: policies.google.com/technologies/ads.

5.3. Use of Google reCAPTCHA
For the purpose of protection when forms are being transmitted (e.g. forgot-password forms), we use the service reCAPTCHA of Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) in select cases. The service includes the sending of your IP address and, in some cases, other data required by Google for the reCAPTCHA service. The derogating data protection provisions of Google apply to these data. You can find further details in Google’s data protection center: policies.google.com/privacy

5.4. Google Tag Manager
This website uses Google Tag Manager, with which the provider manages website tags through a dashboard. However, the Tag Manager itself, which sets the tags, works without cookies and does not collect any personal data. The Tag Manager merely handles the setting of other tags, which in turn collect data in certain circumstances. Corresponding declarations about these third-party providers can be found in this Data Protection Policy. However, Google Tag Manager does not use these data. If you have deactivated cookies, this applies to all tracking tags set with Google Tag Manager. In other words, the tools does not change your cookie settings. You can find further information in Google's use policy.

5.5. Web and app analysis with “econda Analytics”
For the purpose of needs-based design and optimization of this website, pseudonymized data are collected and stored through solutions and technologies of econda GmbH (Zimmerstraße 6, 76137 Karlsruhe, www.econda.de), and usage profiles are created from these data under the use of pseudonyms. econda works on our behalf. In this regard, transfer of data to third parties or to third countries is excluded.

Data processing purposes:

Analysis
Optimization

Without your opt-in, econda solutions work in anonymous mode on the basis of the current session. No data whatsoever with a personal connection are stored, such as IP address, customer number or order number. No cookies are set. You are not recognized during subsequent visits, and it is not possible to create a profile.
With your opt-in, cookies are set for the above-described purpose, which make it possible to recognize an internet browser. However, usage profiles are not combined with data about the pseudonym holder without the express consent of the visitor.
In particular, IP addresses are rendered unidentifiable immediately after receipt, such that allocation of usage profiles to IP addresses is not possible. You can of course withdraw you consent at any time.

Technologies used:

Cookie
Local memory

Anonymized tracking is used pursuant to Article 6(1)(f) GDPR. The company has a legitimate interest is measuring reach in order to continually optimize the website. Personalized tracking takes place only if you have consented to it (Article (6)(1)(a) GDPR).

The following data are collected:

Information about the device used
Information about pages viewed during the website visit
Information with regard to the ordering process
Information about access data
Customer data when logging in

Visitors to this website can object here at any time with prospective effect to the collection and storage of these data.
The objection applies only for the device and browser for which it was set. Please repeat the procedure as necessary on all devices. If you delete opt-out information from the cookie and local memory, inquiries will again be transmitted to econda.
Processing and storage of the data takes place only for the period necessary to achieve the respective processing purposes or for as long as a statutory retention period exists (particularly for commercial and tax reasons). After the purpose is achieved or the retention obligation expires, the corresponding data are routinely erased.

Further information:
Click here for further information: www.econda.de/datenschutz-dsgvo-eprivacy/

5.6. “econda Analytics” – anonymous tracking mode
For the purpose of needs-based design and optimization of this website, pseudonymized data are collected and stored through solutions and technologies of econda GmbH (Zimmerstraße 6, 76137 Karlsruhe, www.econda.de), and usage profiles are created from these data under the use of pseudonyms. econda works on our behalf. In this regard, transfer of data to third parties or to third countries is excluded.

Data processing purposes:

Analysis
Optimization

Technologies used:

No persistent storage of data on end devices

The following data are collected:

Information about the device used
Information about pages viewed during the website visit
Anonymized information with regard to the ordering process
Anonymized information about access data

Further information:
Click here for further information: www.econda.de/datenschutz-dsgvo-eprivacy/

5.7. Calculation of product recommendations with “econda Cross Sell”
For the purpose of needs-based design and optimization of this website, pseudonymized data are collected and stored through solutions and technologies of econda GmbH (Zimmerstraße 6, 76137 Karlsruhe, www.econda.de), and usage profiles are created from these data under the use of pseudonyms. econda works on our behalf. In this regard, transfer of data to third parties or to third countries is excluded.

Data processing purpose:

Calculation of recommendations

Technologies used:

Cookies
Local memory

Anonymized tracking is used pursuant to Article 6(1)(f) GDPR. The company has a legitimate interest is measuring reach in order to continually optimize the website and product offerings. Personalized tracking takes place only if you have consented to it (Article (6)(1)(a) GDPR).

The following data are collected:

Information about the device used
Information about pages viewed during the website visit
Information with regard to the ordering process
Information about access data
Customer data when logging in

Further information:
Click here for further information: www.econda.de/datenschutz-dsgvo-eprivacy/

5.8. Personalization
Your specific experience when visiting and shopping is important to us. In order to be able to offer you customized content and product recommendations on our website, in the online shop, and in the newsletter, we collect data about your navigation and buying behavior.
For this purpose, we use cookies and tracking methods.

6. Use of Social Plugins

We use social plug-ins of various social networks. With the aid of these plug-ins, you can, for example, share content or recommend products (e.g. with “shopping lists”). By default, plug-ins are deactivated on the website and therefore do not send any data. By clicking on a social media button, you can activate the plug-ins by granting your consent to the transfer of data pursuant to Article 6(1)(a) GDPR. The plug-ins can of course be deactivated again with one click. If these plug-ins are activated, your browser establishes a direct connection with the servers of the relevant social media network. As a result, the social network is notified that you have accessed the corresponding page on our website. If you are logged in to the social network, it can allocate the visit to your account. For more information about the purpose and scope of data collection and the further processing and use of the data by social networks, as well as your rights and configuration options in this respect in order to protect your privacy, please see the data protection statements of the relevant networks or websites. You can find the links for this below. Even if you are not logged in to the social networks, websites with active social plug-ins can send data to the networks. When visiting our pages on social media, your data may be automatically collected and stored for market research and advertising purposes. Usage profiles are created from these data under the use of pseudonyms. These may be used to display advertisements inside and outside the platforms that presumably match your interests. For this purpose, cookies are normally placed on your end device.

On our website, we use the following plug-ins: Facebook and Twitter. If you do not want social networks to collect data about you through active plug-ins, you can either select the feature in your browser settings “block cookies from third-party providers” or cancel processing on the respective social media site (see below). In that case, the browser will not send any cookie to the server in the case of embedded content of these providers. Under certain circumstances, however, other multiple-page features other than the plug-ins will no longer work with this setting.

Data are processed on the basis of an agreement between joint controllers pursuant to Article 26 GDPR, which you can view here:

Facebook: www.facebook.com/legal/terms/page_controller_addendum
Google/ YouTube: policies.google.com/privacy
Twitter: twitter.com/privacy
Instagram: help.instagram.com/519522125107875
Pinterest: about.pinterest.com/privacy-policy

Ability to object (opt-out):

Facebook: www.facebook.com/settings?tab=ads
Google/ YouTube: adssettings.google.com/authenticated
Twitter: twitter.com/personalization
Instagram: help.instagram.com/519522125107875
Pinterest: www.pinterest.de/?next=/settings/

6.1. Use of YouTube components with expanded data protection mode
On our website, we use components (videos) of YouTube, LLC 901 Cherry Ave., 94066 San Bruno, CA, USA, a subsidiary of Google Inc., Amphitheatre Parkway, Mountain View, CA 94043, USA.
In this regard, we use the “expanded data protection mode” option made available by YouTube.
If you visit a page with an embedded video, a connection is established with YouTube servers and in the process the content is displayed on the website through a notification to your browser.
According to information from YouTube, in “expanded data protection mode”, data are transferred to YouTube servers, particularly those of our web pages that you visited, only if you watch the video. If you are simultaneously logged in to YouTube, this information will be allocated to your member account with YouTube. You can prevent this by logging out of your member account before visiting our website.
Further information about data protection by YouTube is provided by Google at www.youtube.com/static?gl=GB&template=terms

6.2. Use of Facebook pixels for conversion tracking
For the purpose of conversion tracking, our website uses pixels of Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA (“Facebook”). They make it possible to track the behavior of users after they were forwarded to the provider's website by clicking on a Facebook advertisement. This procedure is used to analyze the effectiveness of Facebook advertisements for statistical and market research purposes and can help to optimize future advertising activities. The data collected are anonymous to us, meaning that we cannot draw any inferences from them as to the identity of users. However the data are stored and processed by Facebook, meaning that it is possible to link to the respective user profile and that Facebook can use the data for its own advertising purposes, in accordance with the Facebook data usage policy (www.facebook.com/about/privacy/). You can enable Facebook and its partners to place advertisements on and outside of Facebook. In addition, a cookie may be stored on your computer for these purposes. Consent to the use of pixels may be given only by users who are older than 13 years of age. If you are younger, please ask your parent or guardian for permission.
Please click here if you would like to withdraw you consent: www.facebook.com/ads/preferences/?entry_product=ad_settings_screen.
To do so, you must be logged in to Facebook.
If you do not have a Facebook account, you can deactivate usage-based advertising from Facebook on the website of the European Interactive Digital Advertising Alliance: www.youronlinechoices.com/uk/your-ad-choices.

6.3. Use of Facebook Insights
Neuland operates a Facebook fan page. The Facebook Insights tool makes it possible for operators of Facebook fan pages to track the interactions of users and fans and to analyze their trends. Various indicators and statistics are provided for this purpose. On the one hand, these focus on users themselves and reflect, for example, gender, age and regional distribution. On the other, they show the nature and scope of the interaction with the fan page. For example, reach, visits, and posts are analyzed.
Facebook Insights makes it possible, inter alia, to obtain the following statistics with respect both to the current status of the Facebook page and to past trends on it:

Number of likes
Post reach (broken down into organic, viral and paid interactions)
Interactions (likes, comments, shares, clicks)
Page views
Demographic analyses (country of origin, gender, age)
Origin of likes
Tabs most frequently opened
External links

All data displayed and analyzed in Facebook Insights are utilized in an anonymized manner, meaning that it is not possible to draw any conclusions about individual persons. Administrators are not able to access a user’s personal profile data.

7. Erasure, blocking and storage period of personal data

We process and store your personal data only for the period necessary for achieving the respective storage purpose or envisaged in the diverse retention periods specified by the legislators.
After the storage purpose no longer applies or after the retention period specified by the legislators expires, personal data are routinely blocked or erased for further processing in accordance with statutory requirements.

8. Data protection rights of the data subject

If you have questions about your personal data, you can contact us in writing at any time. Under the GDPR, you have the following rights:

8.1 Right to obtain information (Article 15 GDPR)

8.2 Right to rectification (Article 16 GDPR)

8.3 Right to erasure (Article 17 GDPR)

8.4 Right to restriction of processing (Article 18 GDPR)

8.5 Right to data portability (Article 20 GDPR)

8.6 Right to object (Article 21 GDPR)

8.7 Right to lodge a complaint with a supervisory authority (Article 77 GDPR in conjunction with Section 19 of the German Federal Data Protection Act [BDSG])

8.8 Right to withdraw consent to data processing (Article 7(3) GDPR)

9. Legal basis of processing (summary)

Where we process personal data for which we have obtained the consent of the data subject, Article 6(1)(a) GDPR serves as the legal basis.

Where the processing of personal data is necessary for the performance of a contract to which the data subject is party, the legal basis is Article 6(1)(b) GDPR. This also covers processing operations that are necessary in order to take steps prior to entering into a contract.
Where the processing of personal data is necessary for compliance with a legal obligation to which our company is subject, the legal basis is Article 6(1)(c) GDPR.

In accordance with Articles 7(3) and 21 GDPR, you at all times have the ability to discontinue the sending of informational material by mail and electronically and to withdraw your consent to the use of your data to do so.

10. Transfer of data to third parties

In general, we do not sell or lend any user data. Transfer to third parties takes place beyond the scope described in this Data Protection Policy only if this is necessary to provide the requested service.
We transfer data only if a legal obligation to do so exists. This is the case when government agencies (e.g. law enforcement authorities) make a written request for information or when a court order is in place.
Personal data are not transferred to third countries outside of the EU/EEA.

11. Statutory or contractual requirements concerning the provision of personal data and possible consequences of failure to provide them

Please be aware that the provision of personal data is required by statute in certain cases (e.g. tax laws) or may result from contractual arrangements (e.g. details about or from the contracting partner). For instance, in order to conclude a contract, it may be necessary for the data subject/contracting partner to provide their personal data so that we can handle their concern (e.g. order). Personal data are required to be provided particularly when contracts are concluded. If personal data are not provided in this case, the contract cannot be concluded with the data subject. Prior to providing personal data, the data subject can contact our data protection officer or the controller in charge of processing. The data protection officer or the controller in charge of processing will then explain to the data subject about whether the provision of the needed personal data is mandated by statute or contract or is required for contract conclusion and whether the concern of the data subject gives rise to an obligation to provide personal data and the consequences for the data subject when not providing the requested data.

12. Existence of automated decision-making

As a responsible company, we do not engage in automated decision-making or profiling in our business relationships.

13. Additional information

In addition to this web-specific Data Protection Policy, it is possible to view our transparent information.

Last updated: October 2021