Privacy Policy

General Information

Contact Information of the Controller
Stückweg 10
35325 Mücke-Merlau
Germany

Specific Information on the Collection of Personal Data

Website Visit:
Purpose of Data Collection and Processing:
Each time a user accesses a page of our website and each time a file stored on the website is accessed, access data regarding this activity is stored in a log file. Each data record consists of:
a) the page from which the file was requested,
b) the name of the file,
c) the date and time of the request,
d) the amount of data transferred,
e) the access status (file transferred, file not found, etc.),
f) a description of the type of operating system and web browser used,
g) the client IP address.

The client IP address is used to transmit the requested data; it is anonymized once it is no longer technically required by deleting the last block of digits (IPv4) or the last octet (IPv6).

Duration of Storage
The data is stored each time a user accesses a page of our website and deleted once it is no longer required for the purpose it was collected, which is when the user leaves our website.

Legal Basis
The temporary storage of the aforementioned data is based on Article 6 (1) (f) of the EU General Data Protection Regulation (GDPR). The legitimate interest lies in providing our website.

Right to Object and Removal Option
The data subject may object to the processing.

Contract Execution:
Name, address(es), bank details, email address, telephone or fax number, and client IP address at the time of placing an order are collected, stored, and processed solely for the purpose of establishing or fulfilling a contract, including billing and handling of the contract. Personal data is only passed on to third parties if necessary for contract fulfillment, e.g., to a shipping company or payment service provider.

Duration of Storage
The data is deleted once it is no longer necessary for the purposes for which it was collected or otherwise processed. This period is five years for personal data subject to Section 147 AO and ten years for personal data subject to Section 257 HGB. The periods begin at the end of the calendar year in which the data was collected.

Legal Basis
The storage of the aforementioned data is based on Article 6 (1) (b) and (c) GDPR.

Right to Object and Removal Option
Due to statutory retention periods and the necessity of data for contract execution, objection or deletion is not possible.

Information via Email:
Purpose of Data Collection and Use
It is possible to subscribe to one or more mailing lists. When a person registers, the data entered in the input form (email address, first and last name, IP address, date and time of registration) is transmitted to us. Any information related to the campaign is also noted. The IP address and date/time of the confirmation of the double opt-in link are also stored. The data is necessary to send the information by email. If consent is given, data is processed through the Inxmail tool in a unique count method:

  • Time of retrieval of images included in the mailing

  • Device type and display software used when retrieving images

  • Time and type of clicked links in the mailing

These data are linked to the recipient and used to tailor future mailings to interests. If the recipient objects, personalized data is anonymized.

Duration of Storage
The data is deleted once no longer needed and the user unsubscribes from the mailing list. Afterwards, it is retained for ten years from the last email for evidence purposes in case of legal inquiries regarding consent.

Legal Basis
Based on Article 6 (1) (a) GDPR — only after prior consent. Withdrawal of consent does not affect the lawfulness of processing done before withdrawal.

Right to Object and Removal Option
The user can unsubscribe at any time with future effect via an unsubscribe link in each email or by contacting us directly. They may also object to personalized tracking in mailings.

Contact via Email, Fax, or Telephone:
Purpose of Data Collection and Use
When a user contacts us via email, fax, or phone, we store the data provided (name, address, email, phone/fax number, date/time of inquiry, and concern description, including contract details if applicable) for processing. Data is not passed to third parties and is solely used for handling the inquiry.

Duration of Storage
Data is deleted when no longer needed and the matter is resolved unless retention obligations exist. Periods: 5 years (§147 AO) and 10 years (§257 HGB), starting from the end of the year of data collection.

Legal Basis
Based on Article 6 (1) (a), (b), or (f) GDPR. The legitimate interest is in handling the inquiry and preventing misuse. Consent can be withdrawn anytime, without affecting previous processing.

Right to Object and Removal Option
Users can withdraw consent at any time, and their data will be deleted unless retention is necessary due to a concluded contract (see above).

Social Media Buttons (Facebook, Instagram, Pinterest, etc.):
Purpose of Data Collection and Use
We do not collect personal data via social media buttons. The buttons (Facebook, LinkedIn, Xing, YouTube) are deactivated by default. Only upon clicking them will a connection to the social network servers be established, sending data based on the user’s agreement with the social network. After a second click, users can share a page. Persistent activation of buttons can be managed via a gear icon.

Duration of Storage
Depends on the social media network’s policy.

Legal Basis
Provided by the respective social network.

Right to Object and Removal Option
Users can revoke consent and deactivate buttons via the gear icon.

Rights of the Data Subject

  • Right to Access (Art. 15 GDPR)

  • Right to Rectification (Art. 16 GDPR)

  • Right to Erasure (Art. 17 GDPR)

  • Right to Restriction of Processing (Art. 18 GDPR)

  • Right to Notification (Art. 19 GDPR)

  • Right to Data Portability (Art. 20 GDPR)

  • Right to Object (Art. 21 GDPR)

  • Right Not to Be Subject to Automated Decisions (Art. 22 GDPR)

  • Right to Lodge a Complaint (Art. 77 GDPR)