1.1 What are personal data
Personal data are information which disclose or could disclose the user’s identity. We work on the principle of data avoidance. As far as possible, we do not collect personal data.
1.2 Handling personal data
Personal data is exclusively handled for the conclusion of contracts, drafting content, and performance or execution of contracts (point b) of Article 6 paragraph 1 GDPR).
Personal data shall only be processed to the extent that we have obtained your consent (point a) of Article 6 paragraph 1 GDPR) or where it concerns data whose processing is necessary to pursue our legitimate interests, and to the extent that they are not overridden by any interests, fundamental rights or freedoms on your side (point f) of Article 6 paragraph 1 GDPR).
We can use processors to process your personal data, but shall not generally disclose any personal data beyond this to third parties.
Data are only disclosed to the shipping company contracted to make deliveries for the purposes of contract performance, to the extent that this is necessary for delivery of the ordered goods. The necessary payment details are disclosed to the bank commissioned to handle payments and the selected payment provider commissioned for the purpose of handling payments.
Your personal data are only processed within the EU unless otherwise set out below.
1.3 User data
General technical information is collected when visiting the website. This includes the IP address used, time, duration of visit, browser type, and the referring page if applicable. For technical reasons, these user data are registered in a log file and may be used and stored for statistical analysis of this website. These user data are not linked to your personal data.
1.4 Registration data
Registration is required for full use of the functions on our website. Registration data are collected from your input and used for the purpose specified by your consent (point a) Article 6 paragraph 1 GDPR).
1.5 Storage period
We store your personal data after cessation of the purpose for which data have been collected, only as long as it is necessary pursuant to statutory (especially tax-related) provisions.
2. Your rights
You can ask us for information on whether we process your personal data and if this is the case, you have the right to access this personal data and other information set out in Article 15 GDPR.
2.2 Right to rectification
You have the right to demand rectification of your inaccurate personal data, and the completion of incomplete personal data pursuant to Article 16 GDPR.
2.3 Right to erasure
You have the right to demand that we erase your personal data without undue delay. We shall be obliged to erase these without undue delay, in particular if one of the following reasons applies:
• Your personal data are no longer required for the purposes for which they have been collected or have been otherwise processed.
• You withdraw your consent on which the processing of your data is based, and there is no other legal basis for the processing.
• Your data have been unlawfully processed.
The right to erasure shall not exist if your personal data are required for the establishment, exercising or defence of our legal claims.
2.4 Right to restriction of processing
You have the right to demand that we restrict the processing of your personal data, if
• you dispute the accuracy of data, and we therefore verify the accuracy,
• processing is unlawful, and you oppose erasure, and request the restriction of use instead,
• we no longer require the data, but you need them for the establishment, exercising or defence of legal claims,
• you have objected to the processing of your data pending verification of legitimate grounds that override your reasons.
2.5 Right to data portability
You have the right to receive personal data which you have provided to us in a structured, commonly used, and machine-readable format and have the right to transmit these data to another controller without hindrance from another controller, if the processing is based on consent or a contract, and if we process it by automated means.
2.6 Right to object
If processing of your personal data is based on consent, you shall have the right to withdraw this consent at any time.
2.7 General information and right to lodge a complaint
The aforementioned rights are essentially exercised free of charge. You have the right to contact the competent supervisory authority, the state data protection commissioner.
3. Data security
3.1 Data security
All data on our website are secured by technical and organisational measures against loss, destruction, access, alteration, and unauthorised dissemination.
3.2 Sessions und Cookies
The domain, name, and duration of the cookies only used pursuant to your consent are listed below:
|session||Until the end of the browser session|
|csrf||Until the end of the browser session|
|device||Until the end of the browser session|
When you register for our newsletter, we use the necessary or separately reported data to send you our email newsletter on a regular basis, based on your consent pursuant to point a) of Article 6 paragraph 1 GDPR.
You can unsubscribe from the newsletter at any time. This can be done either by sending us a message via the contact options provided in the legal notice, or via the link provided in newsletter. After unsubscribing, we erase your email address if you have not consented to further use of your data, or we shall reserve the right to use data beyond this in a way that is legally permitted and of which we inform you in this statement.
5. Application process
You can apply for positions with our company by electronic means, in particular via email. We will of course only use your details to process your application and will not disclose them to third parties. Please note that unencrypted emails are not protected against unauthorised access when sent.
Your personal data are immediately erased after completion of the application process or after a maximum period of 6 months if you have not provided us with your express consent for a longer storage period of your data, or if a contract has been concluded. Legal basis is point a), b), and f) of Article 6 paragraph 1 GDPR, and Section 26 Federal Data Protection Act (Bundesdatenschutzgesetz, “BDSG”).
6. Presence on social media platforms
We use the following social media platforms for presenting the company and for communication (express reference is made to the following linked data protection statements and opt-outs).
Facebook (Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland)
Data Protection Statement: https://www.facebook.com/about/privacy/
Opt-Out: https://www.facebook.com/settings?tab=ads alternatively http://www.youronlinechoices.com
LinkedIn (LinkedIn Ireland Unlimited Company Wilton Place, Dublin 2, Ireland)
Data Protection Statement https://www.linkedin.com/legal/privacy-policy
Xing (XING AG, Dammtorstraße 29-32, 20354 Hamburg, Germany)
Data Protection Statement and Opt-Out: https://privacy.xing.com/de/datenschutzerklaerung.
YouTube (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland)
Data Protection Statement: http://www.youtube.com/t/privacy/.
These social media platforms may process personal data outside the EU; we refer you to the aforementioned Data Protection Statements for social media platforms.
The relevant social media platforms may create user profiles from your user behaviour and your interests and promotions arising from this, and may store cookies on your computer on which your user behaviour is stored. If you have an account on the relevant social media platform and are logged in, your user behaviour may even be stored regardless of the device. Your user profile can be used in order to, for example, to place advertisements designed to reflect your interests.
We only process personal data to communicate with you via your chosen social media platform and to optimise our online presence, while making sure that your interests do not override our legitimate interests (point f) of Article 6 paragraph 1 GDPR). If you have provided valid consent for the relevant data processing to the social media platform operator, your personal data shall also be processed on the basis of this consent (point a) of Article 6 paragraph 1 GDPR).
7. Third-party provider services
7.1 Font Awesome Web Fonts
A web service provided by CloudFlare Inc., 101 Townsend St, 94107 San Francisco (hereinafter: CloudFlare) is loaded on our website. We use this data to guarantee the full functionality of our website. Your browser may send personal data to CloudFlare in relation hereto. Legal basis for data processing is point f) of Article 6 paragraph 1. The legitimate interest lies in the defect-free functionality of the website.
8. Affiliate links and advertising
External websites place affiliate and advertising links or banners to us on their sites. They generate income (advertising fees) when items are purchased from us via this link/banner or if our website is visited. We can install cookies here to discover the source of the orders or visit. However, this has no effect on the use of our website and, in particular, does not constitute an obligation to buy. Affiliate and advertising links and banners are designed solely to facilitate shopping. Our Data Protection Statement shall also apply in this case.
If you need to contact someone regarding data protection, you can reach us on one of the following contact options. Controller in terms of the GDPR:
Schneider Digital e.K.
Maxlrainer Straße 10
Tel: +49 (8025) 9930-0