Privacy Policy
§ 1 General Information
We process your personal data (e.g. salutation, name, address, email address, telephone number, bank details, credit card number) only in accordance with the provisions of German data protection law and the data protection law of the European Union (EU). The following provisions inform you about the purposes of processing, recipients, legal bases and retention periods, as well as your rights and the controller responsible for processing your data. This privacy policy refers only to our websites. If you are redirected via links on our pages to other sites, please inform yourself there about the respective handling of your data.
§ 2 Data Processing for Contract Performance
(1) Purpose of processing
The personal data you provide us with during the ordering process is required to conclude a contract with us. You are not obliged to provide your personal data. However, without your address we cannot send you the goods. For certain payment methods we require the relevant payment data in order to forward it to a payment service provider engaged by us. The processing of the data you enter during the ordering process therefore serves the purpose of contract performance.
If, before concluding a contract, you send us an enquiry by email, via a contact form, etc., we process the data received in this way in order to carry out pre-contractual measures and, for example, to answer your questions about our products.
(2) Legal basis
The legal basis for this processing is Art. 6(1)(b) GDPR.
(3) Categories of recipients
Payment service providers, shipping service providers, hosting providers, ERP system where applicable, suppliers where applicable (dropshipping).
(4) Retention period
We store the data required for contract processing until the expiry of the statutory warranty and, where applicable, contractual guarantee periods.
We retain the data required by commercial and tax law for the statutory periods, generally ten years (cf. § 257 HGB, § 147 AO).
Data processed for carrying out pre-contractual measures will be deleted once the measures have been carried out and it is apparent that no contract will be concluded.
§ 3 Comments
(1) Purpose of processing
You have the option of writing a comment. Your data (e.g. name/pseudonym, email address, website) will then be processed solely for the purpose of publishing your comment.
(2) Legal basis
The legal basis for this processing is Art. 6(1)(f) GDPR.
(3) Legitimate interest
Our legitimate interest is the public exchange of user opinions on certain topics and products. Publication serves, among other things, transparency and opinion-forming. Your interest in data protection is preserved, since you can publish your comment under a pseudonym.
(4) Retention period
No specific retention period is provided for. You may request the deletion of your comment at any time.
(5) RIGHT TO OBJECT
You have the right to object at any time, on grounds relating to your particular situation, to the processing of data carried out on the basis of Art. 6(1)(f) GDPR which does not serve direct marketing purposes.
In the case of direct marketing, you may object to the processing at any time without giving reasons.
§ 4 PayPal Transactions
Please note that all PayPal transactions are subject to PayPal's privacy policy: https://www.paypal.com/de/webapps/mpp/ua/privacy-full
§ 5 Credit Check
Credit assessment
Our company regularly checks your creditworthiness when entering into contracts and, in certain cases where a legitimate interest exists, also for existing customers. For this purpose we work with Creditreform Boniversum GmbH, Hellersbergstraße 11, 41460 Neuss, from which we receive the necessary data. On behalf of Creditreform Boniversum, we inform you in advance of the following information pursuant to Art. 14 EU GDPR:
Creditreform Boniversum GmbH is a consumer credit reference agency. It operates a database in which creditworthiness information about private individuals is stored.
On this basis Creditreform Boniversum provides credit reports to its customers. Customers include, for example, credit institutions, leasing companies, insurance companies, telecommunications companies, debt-management companies, mail-order, wholesale and retail companies, as well as other companies that supply goods or services. Within the framework of the statutory provisions, some of the data contained in the information database is also used to supply other corporate databases, including for use for address-trading purposes.
The Creditreform Boniversum database stores, in particular, information about the name, address, date of birth, if applicable the email address, payment behaviour and shareholding relationships of persons. The purpose of processing the stored data is to provide information about the creditworthiness of the person enquired about. The legal basis for processing is Art. 6(1)(f) EU GDPR. Information about this data may only be provided if a customer credibly demonstrates a legitimate interest in obtaining this information. If data is transferred to states outside the EU, this is carried out on the basis of the so-called "Standard Contractual Clauses", which you can view at the following link: http://eur-lex.europa.eu/legal-content/DE/TXT/PDF/?uri=CELEX:32001D0497&from=DE or have sent to you from there.
The data is stored for as long as knowledge thereof is necessary to fulfil the purpose of storage. Knowledge is generally necessary for an initial retention period of four years. After expiry, it is reviewed whether further storage is necessary; otherwise the data is deleted to the day. Where a matter is settled, data is deleted three years after settlement, to the day. Entries in the debtors register are, in accordance with § 882e ZPO, deleted to the day after three years from the date of the registration order. Further details can be found in the "Code of Conduct for the review and deletion periods of personal data by the German credit reference agencies" drawn up by the association "Die Wirtschaftsauskunfteien e.V.".
Legitimate interests within the meaning of Art. 6(1)(f) EU GDPR may include: credit decision, business initiation, shareholding relationships, claim, credit check, insurance contract, enforcement information.
You have the right to information from Creditreform Boniversum GmbH about the data stored there about you. If the data stored about you should be incorrect, you have a right to rectification or deletion. If it cannot be determined immediately whether the data is incorrect or correct, you have a right to blocking of the respective data pending clarification. If your data is incomplete, you may request its completion.
If you have given your consent to the processing of the data stored at Creditreform Boniversum, you have the right to withdraw this consent at any time. The withdrawal does not affect the lawfulness of the processing carried out on the basis of your consent up to the withdrawal.
Should you have any objections, requests or complaints regarding data protection, you may contact the data protection officer of Creditreform Boniversum at any time. They will assist you quickly and confidentially in all data protection matters. You can also lodge a complaint about Boniversum's processing of data with the state data protection commissioner responsible for your federal state.
The data Creditreform Boniversum has stored about you comes from publicly accessible sources, from debt-collection companies and from their customers.
To describe your creditworthiness, Creditreform Boniversum forms a score value from your data. The score value is calculated from data on age and gender, address data and, in some cases, payment experience data. This data is included in the calculation of the score value with different weightings. Creditreform Boniversum customers use the score values as an aid in making their own credit decisions.
Right to object:
Processing of the data stored at Creditreform Boniversum is carried out for compelling legitimate grounds of creditor and credit protection that generally override your interests, rights and freedoms, or serves the establishment, exercise or defence of legal claims. Only on grounds arising from a particular situation that exists for you and that must be demonstrated may you object to the processing of your data by Creditreform Boniversum. If such particular grounds are demonstrably present, the data will no longer be processed there.
The controller within the meaning of Art. 4(7) EU GDPR is Creditreform Boniversum GmbH, Hellersbergstr. 11, 41460 Neuss. Your contact in our company is Consumer Service, tel.: 02131 36845560, fax: 02131 36845570, email: selbstauskunft@boniversum.de.
You can reach our data protection officer at the following contact details: Creditreform Boniversum GmbH, Data Protection Officer, Hellersbergstr. 11, 41460 Neuss, email: datenschutz@boniversum.de.
§ 6 Web Analysis with Google Analytics
(1) Purpose of processing
This website uses Google Analytics, a web analysis service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Google Analytics uses so-called "cookies", text files that are stored on your computer and allow an analysis of your use of the website. The information generated by the cookie about your use of this website is generally transferred to a Google server in the USA and stored there. If IP anonymisation is activated on this website, however, your IP address will first be shortened by Google within Member States of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide further services to the website operator relating to website use and internet use.
(2) Legal basis
The legal basis for this processing is Art. 6(1)(a) GDPR.
(3) Categories of recipients
Google and its partner companies.
(4) Transfer to a third country
Google Ireland Limited is an affiliated company of Google LLC. Google LLC is based in the USA (1600 Amphitheatre Parkway, Mountain View, CA 94043).
(5) Retention period
14 months
(6) RIGHT TO OBJECT
You can prevent the storage of cookies by adjusting your browser software accordingly; however, we point out that in this case you may not be able to use all functions of this website to their full extent. You can also prevent the data generated by the cookie and related to your use of the website (including your IP address) from being collected by Google and the processing of this data by Google by downloading and installing the browser plug-in available at the following link: optout
You can also prevent the collection by setting an opt-out cookie. If you want to prevent the future collection of your data when visiting this website, please click here: Disable Google Analytics
§ 7 Web Analysis
Google Remarketing
This website uses the remarketing function of Google Inc. ("Google").
The function is used to present interest-based advertisements to visitors of the website within the Google advertising network. The visitor's browser stores cookies that allow the visitor to be recognised when they call up websites that belong to Google's advertising network. On these pages, the visitor may then be presented with advertisements relating to content that the visitor has previously viewed on websites that use Google's remarketing function.
If you do not wish to use Google's remarketing function, you can generally disable it by adjusting the relevant settings at http://www.google.com/settings/ads. Alternatively, you can disable the use of cookies for interest-based advertising via the Network Advertising Initiative by following the instructions at http://www.networkadvertising.org/managing/opt_out.asp. Further information on Google Remarketing and Google's privacy policy can be found at: http://www.google.com/privacy/ads/.
Use of a Facebook pixel (Facebook Custom Audiences):
We also use the so-called "Facebook pixel" of Facebook Inc. ("Facebook") on our website. This makes it possible to present users of our website with interest-based advertisements ("Facebook Ads") when visiting the Facebook social network or other websites that also use the procedure. Through the Facebook pixel, your browser automatically establishes a direct connection with the Facebook server. We have no influence on the scope and further use of the data collected by Facebook through the use of this tool, and therefore inform you according to our knowledge: by integrating the Facebook pixel, Facebook receives the information that you have clicked on one of our ads or visited the corresponding page of our website. If you are registered with a Facebook service, Facebook can assign the visit to your account. Even if you are not registered with Facebook or have not logged in, there is the possibility that the provider learns and stores your IP address and other identifying features.
By using the Facebook pixel, we pursue the purpose of showing the Facebook ads we have placed only to those Facebook users who have also shown an interest in our online offering. With the help of the Facebook pixel, we therefore want to ensure that our Facebook ads correspond to the potential interest of the users. In addition, with the help of the Facebook pixel we can track the effectiveness of Facebook ads for statistical purposes by seeing whether users were redirected to our website after clicking on a Facebook ad.
The legal basis for the use of the Facebook pixel is Art. 6(1)(f) GDPR.
Third-party information: Facebook Inc., 1601 S California Ave, Palo Alto, California 94304, USA;
http://www.facebook.com/policy.php; further information on data collection:
http://www.facebook.com/help/186325668085084 http://www.facebook.com/about/privacy/your-info-on-other#applications
as well as http://www.facebook.com/about/privacy/your-info#everyoneinfo
Use of WhatsApp Business
WhatsApp belongs to the Facebook group and is a company of Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA. WhatsApp Inc. and Facebook Inc. have subjected themselves to the "Privacy Shield" agreement concluded between Germany and the USA. This agreement guaranteed that the requirements of the Privacy Shield correspond to the data protection level of the European Union. WhatsApp collects a range of data such as display names, contact, telephone number, status, profile picture, location, pictures, videos and metadata. Since a data transfer of your data (contact data) by Facebook to the USA is possible, every data subject is given the opportunity to inform themselves about this matter and to break off contact at this point.
Further information on data protection at WhatsApp, Inc. can be found at https://www.whatsapp.com/legal/#privacy-policy.
Further information on data protection at Facebook, Inc. can be found at https://de-de.facebook.com/business/gdpr.
Further information on data protection in Europe at WhatsApp Business, Inc. can be found at https://www.whatsapp.com/legal/business-data-processing-terms
We use Facebook's WhatsApp Business messenger service in our company. Communication takes place via a separate device that only has access to those contacts who have contacted us — E-M-C-Direct GmbH & Co. KG. There is therefore no access to our contact database.
This ensures that every person whose WhatsApp contact data is stored in our address book has, upon first using the app on their device, by accepting the WhatsApp terms of use, consented to the transmission of their WhatsApp telephone number from the address books of their chat contacts pursuant to Art. 6(1)(a) GDPR. The transmission of data from users who do not use WhatsApp and/or have not contacted us via WhatsApp is therefore excluded. Please note that WhatsApp Business has access to the address book of the mobile device used for this purpose and automatically transmits telephone numbers stored in the address book to a Facebook server in the USA.
We record your message history via WhatsApp with us so that you can continue your enquiry or read information, and to improve our service. In some cases we require data to process your enquiry. Your data is always only used to answer your concern via WhatsApp. Disclosure to third parties does not take place.
We store:
- the message history between you and E-M-C-Direct GmbH & Co. KG
- your name, your customer number and telephone number (e.g. in the smartphone address book as an identification feature)
- your reply to the data protection notice
- the personal data of your telephone number in order to better process customer and prospective-customer enquiries about products.
Purpose of processing
We process the personal data you provide us with via WhatsApp in order to answer and handle your enquiries.
By replying to our first message with "START" you confirm registration for our WhatsApp chat.
If you would like us to delete the chat history, simply write "I would like to delete the chat history". If we should delete your contact on the smartphone, send us "I would like to delete my data".
Your objection and the deletion of your data will take effect after a few days. We are responsible for deleting the history and the data from our device.
SalesViewer
On this website, the SalesViewer® technology of SalesViewer® GmbH collects and stores data for marketing, market research and optimisation purposes on the basis of the legitimate interests of the website operator (Art. 6(1)(f) GDPR).
For this purpose, a JavaScript-based code is used, which serves to collect company-related data and the corresponding usage. The data collected with this technology is encrypted using a non-reversible one-way function (so-called hashing). The data is immediately pseudonymised and is not used to personally identify the visitor of this website.
The data stored under Salesviewer will be deleted as soon as it is no longer required for its intended purpose and there are no statutory retention obligations to the contrary.
You may object to the collection and storage of data at any time with effect for the future by clicking this link https://www.salesviewer.com/opt-out to prevent SalesViewer® from collecting data within this website in the future. An opt-out cookie for this website will be placed on your device. If you delete your cookies in this browser, you will have to click this link again.
Leadinfo:
We use the lead-generation service of Leadinfo B.V., Rotterdam, Netherlands. This recognises visits from companies to our website based on IP addresses and shows us publicly available information, such as company names or addresses. In addition, Leadinfo sets two first-party cookies to evaluate user behaviour on our website and processes domains from form inputs (e.g. "leadinfo.com") to correlate IP addresses with companies and improve the services. Further information can be found at www.leadinfo.com. On this page: www.leadinfo.com/en/opt-out you have an opt-out option. In the event of an opt-out, your data will no longer be collected by Leadinfo.
§ 8 Information About Cookies
(1) Purpose of processing
Technically necessary cookies are used on this website. These are small text files that are stored in or by your internet browser on your computer system. These cookies enable, for example, the placement of multiple products in a shopping cart.
(2) Legal basis
The legal basis for this processing is Art. 6(1)(f) GDPR.
(3) Legitimate interest
Our legitimate interest is the functionality of our website. The user data collected through technically necessary cookies is not used to create user profiles. This preserves your interest in data protection.
(4) Retention period
Technically necessary cookies are generally deleted when the browser is closed. Persistently stored cookies have varying lifespans of a few minutes to several years.
(5) RIGHT TO OBJECT
If you do not wish these cookies to be stored, please deactivate the acceptance of these cookies in your internet browser. However, this may result in a functional restriction of our website. You can also delete persistently stored cookies at any time via your browser.
§ 9 Newsletter
(1) Purpose of processing
When you register for the newsletter, your email address is used for advertising purposes, i.e. as part of the newsletter we inform you in particular about products from our range. For statistical purposes we may evaluate which links in the newsletter are clicked. In doing so, we cannot identify which specific person clicked. You have expressly given the following consent separately or, where applicable, during the order process: Subscribe to newsletter
(2) Legal basis
The legal basis for this processing is Art. 6(1)(a) GDPR.
(3) Categories of recipients
Newsletter dispatch providers, where applicable
(4) Retention period
Your email address is stored for the dispatch of the newsletter only for the duration of the desired subscription.
(5) Right of withdrawal
You may withdraw your consent at any time with effect for the future. If you no longer wish to receive the newsletter, you can unsubscribe as follows: via an unsubscribe link in the newsletter
§ 10 ProvenExpert
We cooperate with the review portal ProvenExpert GmbH, Quedlinburger Straße 1, 10589 Berlin. A review seal ("ProSeal") is embedded on our website for this purpose. When this seal is loaded, a connection is established to ProvenExpert's servers. In the process, personal data such as your IP address, information about browser, operating system, device type, end-user country, hostname, path details, user agent and a timestamp are transmitted. Delivery takes place in part via the Cloudflare CDN, which also captures the client_ip.
The seal is only embedded after your consent via the consent banner. In this case the legal basis is Art. 6(1)(a) GDPR. Any consent given may be withdrawn at any time with effect for the future. If the widget is loaded without prior consent, processing is based on our legitimate interest pursuant to Art. 6(1)(f) GDPR, in particular in transparency and the display of our customer reviews.
When you click on the seal, you will be redirected to our ProvenExpert profile. ProvenExpert is responsible for the subsequent data processing. According to ProvenExpert, data is stored exclusively on servers in Germany.
Further information on how ProvenExpert handles your data can be found at: https://www.provenexpert.com/de-de/datenschutzbestimmungen/
§ 11 Your Rights as a Data Subject
If your personal data is processed, you are a data subject within the meaning of the GDPR and you have the following rights vis-à-vis us as controller:
1. Right of access
Within the framework of Art. 15 GDPR, you may request information about the personal data we process about you.
2. Right to rectification
If the information concerning you is no longer accurate, you may request rectification under Art. 16 GDPR. If your data is incomplete, you may request completion.
3. Right to erasure
Under the conditions of Art. 17 GDPR, you may request the deletion of your personal data.
4. Right to restriction of processing
Within the framework of Art. 18 GDPR, you have the right to request restriction of the processing of data concerning you.
5. Right to data portability
Under Art. 20 GDPR, you have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format, or to request its transmission to another controller.
6. Right to withdraw consent under data protection law
Under Art. 7(3) GDPR, you have the right to withdraw your data protection consent at any time. The lawfulness of the processing carried out on the basis of the consent up to the withdrawal is not affected by this.
7. Right to lodge a complaint with a supervisory authority
If you consider that the processing of personal data concerning you infringes the GDPR, you have the right, under Art. 77 GDPR, to lodge a complaint with a supervisory authority (in particular in the Member State of your habitual residence, place of work or place of the alleged infringement).
Please also note your right to object pursuant to Art. 21 GDPR:
a) General: justified objection required
Where the processing of personal data concerning you is carried out
- to safeguard our overriding legitimate interest (legal basis pursuant to Art. 6(1)(f) GDPR) or
- in the public interest (legal basis pursuant to Art. 6(1)(e) GDPR),
you have the right to object at any time, on grounds relating to your particular situation, to the processing; this also applies to profiling based on the provisions of the GDPR.
In the event of an objection, we will no longer process the personal data concerning you, unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.
b) Special case of direct marketing: a simple objection is sufficient
If the personal data concerning you is processed for direct marketing purposes, you have the right to object at any time and without giving reasons to such processing; this also applies to profiling insofar as it is related to such direct marketing.
If you object to processing for direct marketing purposes, the personal data concerning you will no longer be processed for these purposes.