1. Access Data and Hosting

You can visit our websites without providing any personal information. Each time a website is accessed, the web server automatically stores server log files (e.g., name of the requested file, IP address, date and time of access, amount of data transferred, requesting provider). Processing is based on Art. 6 para. 1 lit. f GDPR (legitimate interest in technical provision, stability, and security). All access data will be deleted no later than seven days after the end of your visit.

2. Data Processing for Contract Fulfillment & ERP

For the purpose of contract fulfillment in accordance with Art. 6 para. 1 lit. b GDPR, we collect personal data when you provide it to us as part of your order (mandatory fields are marked as such).

Retention: After complete fulfillment of the contract, your data will be restricted from further processing and stored exclusively for the fulfillment of legal retention obligations (generally 6 to 10 years; Art. 6 para. 1 lit. c GDPR in conjunction with commercial and tax law). During this period, the data is blocked and will not be processed for other purposes. After the deadlines expire, the data will be automatically deleted.

ERP System (JTL-Wawi): For order and contract processing, we use the merchandise management system JTL-Wawi from JTL-Software-GmbH, Rheinstr. 7, 41836 Hückelhoven. The service provider processes data on our behalf based on a data processing agreement in accordance with Art. 28 GDPR.

Third-Country Transfers: If service providers outside the EU/EEA are used, the transfer – insofar as the provider is certified in the USA – takes place on the basis of the adequacy decision (EU–US Data Privacy Framework). Otherwise, the standard contractual clauses of the EU Commission are used.

3. Data Processing for Shipping

For contract fulfillment in accordance with Art. 6 para. 1 lit. b GDPR, we pass on your data to the shipping service providers commissioned with the delivery, insofar as this is necessary for the delivery of ordered goods. We use the following service providers: DHL, DHL Express, UPS, DPD, Deutsche Post.

If you give us your express consent (Art. 6 para. 1 lit. a GDPR) for this, we will transmit your email address to the respective shipping service provider so that they can contact you before delivery for the purpose of delivery notification or coordination. You can revoke your consent at any time with effect for the future.

4. Payment Processing, Fraud Prevention & Credit Check

For payment processing, we work with payment service providers, technical service providers, and credit institutions. Depending on the chosen payment method, we pass on the data required for payment processing to the respective service provider (Art. 6 para. 1 lit. b GDPR).

4.1 PayPal

When paying via PayPal, the data required for payment processing is transmitted to PayPal (Europe) S. à r. l. et Cie, S.C.A., 22–24 Boulevard Royal, L-2449 Luxembourg. PayPal’s privacy policy applies.

4.2 Mollie (Credit Cards, etc.)

When paying via Mollie (e.g., credit card), the data required for this is transmitted to Mollie B.V., Keizersgracht 313, 1016 EE Amsterdam, Netherlands. Mollie’s privacy policy applies.

4.3 Credit Check (Purchase on Account)

If we make an advance payment (e.g., purchase on account), we obtain an identity and creditworthiness report from the following credit agency to protect our legitimate interests (Art. 6 para. 1 lit. f GDPR):

SCHUFA Holding AG
Kormoranweg 5, 65201 Wiesbaden, Germany

5. Email Newsletter

When you subscribe to our newsletter, we use your email address based on your consent in accordance with Art. 6 para. 1 lit. a GDPR.

Double Opt-In: Registration takes place via the double opt-in procedure. You will only receive our newsletter after confirming your registration by email. You can revoke your consent at any time; an unsubscribe link is included in every email.

6. Cookies & Consent Management (Cookiebot)

We use cookies and similar technologies to enable (e.g., shopping cart) and improve the use of our website. Depending on the tool, the legal basis is your consent (Art. 6 para. 1 lit. a GDPR) or our legitimate interest (Art. 6 para. 1 lit. f GDPR).

Consent Management via Cookiebot: We manage your consents with Cookiebot. You can grant or revoke consents at any time with future effect via the preference window displayed there.

Open Cookie Settings

7. Web Analytics (Google Analytics)

We use Google Analytics from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, to analyze the use of our website. Cookies may be set and usage data (including IP address, access time, device/browser information, interactions) processed. We use IP anonymization so that your IP address is truncated before transmission.

The legal basis is your consent according to Art. 6 para. 1 lit. a GDPR, which you can grant or revoke via Cookiebot.

Data Transfer to the USA: Insofar as Google is certified in the USA, the transfer takes place on the basis of the EU–US Data Privacy Framework. Otherwise, we base the transfer on standard contractual clauses.

8. Our Social Media Presence

We operate company pages on Facebook, Instagram, and YouTube. When visiting the respective platforms, the providers’ privacy policies apply.

9. Your Rights

Right of Access (Art. 15 GDPR)

• Right to Rectification (Art. 16 GDPR)
• Right to Erasure (Art. 17 GDPR)
• Right to Restriction of Processing (Art. 18 GDPR)
• Right to Data Portability (Art. 20 GDPR)
• Right to Lodge a Complaint with a Supervisory Authority (Art. 77 GDPR)

10. Right to Object

Insofar as we process your personal data to protect our legitimate interests (Art. 6 para. 1 lit. f GDPR), you have the right to object at any time. If personal data is processed for direct marketing purposes, you can object to this processing at any time.

11. Contact