You can order goods on our website as a commercial customer. You have to register for this purpose. You can enter your data in an input mask as part of the registration. Personal data that we absolutely need are marked accordingly. Without this data, we cannot create an individual and functional account, making it impossible to place an order as the provision of this data is contractually necessary. We use this data to process the order initiated by you as desired and in accordance with the contract, in particular to arrange the invoicing, shipping and payment.
These processing operations are based on Art. 6 Para. 1 lit. b or lit. f (if the contracting party is not a natural person, but the data of his employees are processed) GDPR.
Unless otherwise described in this privacy statement, we work with various service providers and partners who may receive personally identifiable information when implementing and operating our website and services:
- Service provider for hosting services
- ITK and IT service providers
- Service provider for programming services
- Service provider for the management of the webshop
- Service provider for the processing of payments/invoicing
- Service provider for sales and marketing and analysis services
- Service provider for the shipping of products
- Authorities and institutions when legally required
We will only transmit your data to these recipients if this is necessary to fulfil a contract with you or if there is a legitimate interest in the disclosure of your data or if we have your consent to provide the data.
Transmission of data to recipients outside the EEA
Unless otherwise stated, we do not disclose your personal data to recipients who are located outside the EEA.
If data is transmitted, we shall ensure, through contractual or organisational measures, that the recipient either has an adequate level of data protection (e.g. based on a decision of adequacy by the EU Commission on the appropriate country or the so-called EU standard contractual clauses with the recipient) or if we have your consent to transmit the data.
Please contact our data protection officer for more information, especially regarding the measures taken.
Obligation to provide information
If personal information is required to establish and conduct the business relationship and the associated contractual or legal obligations, you have to provide such information to enable us to meet our performance obligations or legal obligations. Without provision of the data, we may not be able to perform the service properly, fully or any longer. The provision of other data is neither contractually nor legally necessary. We will inform you in the appropriate places whether the provision is necessary when you use the website.
We will only store your personal information, if necessary, for a limited period of time and no longer than necessary. Basically, we will delete your data if it is no longer necessary for the purpose for which it was collected or if there are other legal reasons that require deletion.
If we are subject to statutory record retention requirements that require a longer storage period, we store the data for this period, in particular for the fulfilment of commercial and tax retention periods, which are between 2 and 10 years.
Other legal grounds for retention may include the provision of evidence for the duration of the applicable statute of limitations. These periods are usually between 2 and 30 years.
Your rights with respect to your personal data
You have the following legal rights regarding your personal data. You can contact our data protection officer, also when you want to know more about what these rights entail in detail. As the legal details are quite complicated, we provide you with the most important information about the rights below. Please let us know how you want to receive the information. If you do not specify a preference, we usually reply to your query in the same form as the request. You will receive feedback within one month. In the request is manifestly unfounded or excessive, we are entitled to demand a reasonable fee or to refuse your request.
Access to your data, Art. 15 GDPR
You have the right to request information about whether we process personal information about you or not. When we process your personal data, you will receive information about the specific data plus additional information.
Rectification of your data, Art. 16 GDPR
You have the right to ask us to correct your data if it is incorrect, inaccurate and/or incomplete; the right to rectification includes the right to completion by supplementary statements or notifications.
Deletion of your data, Art. 17 GDPR
You have the right to ask us to delete your personal data if there is no reason to store it.
Restriction of the processing of your data by us. Art. 18 GDPR
You have the right to restrict the processing of your personal data in certain circumstances.
Data portability, Art. 20 GDPR
You have the right in certain circumstances to demand that your data be provided in a common electronic machine-readable data format. The right to transfer data includes the right to transfer the data to another controller; on request, we will - where technically feasible - transfer data directly to a person designated or to be designated by you. The right to transfer data exists only for data provided by you, and requires processing to be performed on the basis of consent or performance of a contract, using automated means.
Objection to our processing of your data, Art. 21 GDPR
If personal data is processed for the exercise of public interest tasks (Article 6 Para. 1 lit. e GDPR) or for the exercise of legitimate interests (Article 6 Para. 1 lit. f GDPR), you can refuse the processing of personal data related to you at any time with effect for the future if there is no reason for further processing.
(Please note that you are not entitled to the right to object if the processing is based on consent that was given. However, as you always have the right to revoke your consent with effect for the future when data are processed with your consent, by revoking your consent, you will achieve a result comparable to the objection.)
Revocation of consent
If you have given us consent to process your personal data, you can revoke this consent at any time and without stating reasons with future effect. Please contact the contact point where you gave your consent or contact the data protection officer directly.
You have the right to lodge a complaint with the competent supervisory authority when it concerns processing of your personal data, Art. 77 GDPR.