Visiting our website
If you visit our website without logging in, registering or otherwise filling in the input fields on the website, we process your personal data as follows:
3.1.1. For the purpose of providing our website, we process the IP address, access time, browser information, operating system, language setting, screen resolution, the page or file accessed, as well as the access status (successful or error code) for each page view of all website visitors.
The processing is technically necessary to enable the use of our website (Art. 6 (1) lit. b GDPR).
The data is deleted after the end of your visit to our website, unless specific data is further processed for one or more of the purposes described in this privacy notice.
3.1.2. For the purpose of detecting and blocking attacks on our website and the technical infrastructure (e.g. hacking, denial of service attack), we process personal data including identification data, connection data or localization data (including IP addresses).
This processing is necessary to pursue our legitimate interest to take protective measures against attacks (Article 6 (1) lit. f GDPR).
The personal data will be processed by Cloudflare Inc., 101 Townsend St San Francisco, CA 94107 under a data processing agreement (Art. 28 GDPR).
3.1.3. The data is deleted no later than two (2) years after the end of your visit to our website, unless an attempted attack is detected. In the event of a detected attempted attack from your point of access, the data will be further processed for technical and, if necessary, legal processing.
Visitors of our website have the right to object to the use of these cookies as described below in sect. 4.2.3.
3.1.4. For the purpose of providing our website we use the cloud platform Vercel, provided by Vercel Inc., 340 S Lemon Ave #4133 Walnut, CA 91789 under a data processing agreement (Art. 28 GDPR). Each visit to our website will be handled or delivered through Vercel who processes information, which may include; IP addresses, system configuration information, and other information about traffic to and from our website, for the purpose of operating, maintaining and improving service. This data can help to detect new threats, identify malicious third parties, and provide more robust security protection.
The processing of this data is technically necessary to enable the use of our website (Art. 6 (1) lit. b GDPR).
Website Registration
a) For the purposes of providing you access to and use of the functionality of our website that requires registration, such as the user and customer portal or leaving comments on the website, we process the IP address, first name, last name, gender, postal address and country, email address, status as private individual or business representative, and in case of business registration also the trade-name of the business and tax ID number or similar business identification information.
This processing is necessary to enable the use of some functionality of our website (Art. 6 (1) lit. b GDPR). For individuals who are not party to the contract, but represent a company, the legal basis is Art. 6 (1) lit. f GDPR.
We will retain the data until you ask us to delete your user account. After that the processing of the data will be restricted and no longer used for identification and access to the functions of the website requiring registration.
Individuals representing a business have the right to object to data processing as described below in sect. 4.2.3.
b) For the purpose of verifying customer identity, we process the IP address, first name, last name, gender, postal address and country, email address, status as private individual or business representative, and in case of business registration also the trade-name of the business and tax ID number or similar business identification information.
This processing is necessary to ensure the identity of our customer and to enable the use of our website (Art. 6 (1) lit. b GDPR). For individuals who are not party to the contract, but represent a company, the legal basis is Art. 6 (1) lit. f GDPR.
We will retain the data until you ask us to delete your user account. After that the processing of the data will be restricted and no longer used for identification and access to the functions of the website requiring registration.
Individuals representing a business have the right to object to data processing as described below in sect. 4.2.3.
Email advertisement
For the purpose of processing email communication with customers about industry news and advertisement for our own products and services, such as information about promotions, new product launches and new offers, we process the email-address of our customers. This processing is based on the customer’s consent (Art. 6 (1) lit. a GDPR). We retain the email-address until consent is withdrawn. The processing of the email-address for this purpose is restricted after withdrawal of consent, and the email-address is deleted unless it is also processed for other purposes. The customer has the right to withdraw consent as described below in sect. 4.2.4. Subscriber may also withdraw consent by unsubscribing from the mailing by using the “unsubscribe” link contained in every advertisement mailing.
Email newsletters
For the purpose of sending email newsletters with information about industry news and advertisement for our own products and services, such as information about promotions, new product launches and new offers, we process the email-address of the subscriber. This processing is based on the subscriber’s consent (Art. 6 (1) lit. a GDPR). We retain the email-address until consent is withdrawn. The processing of the email-address for this purpose is restricted after withdrawal of consent, and the email-address is deleted unless it is also processed for other purposes. The subscriber has the right to withdraw consent as described below in sect. 4.2.4. Subscriber may also withdraw consent by unsubscribing from the newsletters by using the “unsubscribe” link contained in every newsletter mailing.
Order processing
For the purpose of processing customer orders of our products and services and commissioning the products and services for delivery, we process the personal data provided during website registration (see above sect. 3.2) and the status of the customer’s payments. The processing is necessary to perform the contract with the customer (Art. 6 (1) lit. b GDPR). We retain the personal data until after termination of all contracts with the customer. Then processing for this purpose is restricted. The data is deleted after all mandatory retention periods have expired.
Your data subject rights
You may at any time exercise your rights as a data subject by contacting us by mail or e-mail to our address mentioned in section 2.2. Please keep in mind that we do not answer any inquiries about personal data by telephone, because generally the identity of the caller cannot be determined with sufficient certainty.
4.2. You have the following rights with respect to your personal data:
4.2.1. You may exercise your right of access (Art. 15 GDPR), the right to rectification (Art. 16 GDPR), the right to erasure (Art. 17 GDPR) and the right to restriction of processing, i. e. blocking for certain purposes, (Art. 18 GDPR) at any time, if the respective statutory prerequisites are met.
4.2.2. Your right to data portability (Art. 20 GDPR) also stipulates that, if the statutory prerequisites are met, you may demand that your personal data stored by us will be transferred to you – or insofar as technically feasible, to another controller designated by you – in a structured, commonly used and machine-readable format.
4.2.3. You have the right to object to processing (Art. 21 GDPR) for some processing purposes, in particular advertising purposes. Insofar as we process your data based on a balancing of interests (pursuant to Art. 6 (1) lit. f GDPR), you have the right to object to this processing at any time based on grounds related to your particular situation. Such grounds may be compelling in particular, if they give special weight to your interests, which thereby outweigh our interests, for example if these reasons are not known to us and therefore could not be taken into account in the balancing of interests. You may object to processing by sending us an email to the address stated in sect. 2.2, and we may advise you of additional ways to object to processing for each specific processing activity in sect. 3.
