Privacy Policy
2. Data processing for contract fulfilment and for contacting us
2.1 Data processing for contract fulfilment
2.2 Customer account
Contacting us
3. Data processing for the purpose of shipping
4. Data processing for payment processing
4.1 Data processing for transaction processing
4.2 Data processing for the purpose of fraud prevention and the optimisation of our payment processes
5. Cookies and other technologies
General information
6. Contact options and your rights
6.1 Your rights
6.2 Contact options
The controller responsible for data processing is:
Alexander Almendinger
Zum Herrnberg 33
65520 Bad Camberg
Email: info@almcontrols.de
We are pleased about your interest in our website. The protection of your privacy is very important to us. Below we inform you in detail about how we handle your data.
1. Access data and hosting
You can visit our websites without providing any information about your identity. Each time a website is accessed, the web server merely automatically stores a so-called server log file, which contains, for example, the name of the requested file, your IP address, the date and time of access, the amount of data transferred and the requesting provider (access data), and documents the access. This access data is evaluated exclusively for the purpose of ensuring the trouble-free operation of the site and improving our services. In accordance with Art. 6 (1) lit. f GDPR, this serves to safeguard our legitimate interests, which prevail in the context of a balancing of interests, in a correct presentation of our services. All access data is only processed for as long as is necessary to achieve the above-mentioned processing purposes.
2. Data processing for contract fulfilment and for contacting us
2.1 Data processing for contract fulfilment
For the purpose of contract fulfilment (incl. enquiries about and processing of any existing claims arising from warranty rights, the law on breaches of obligations and the right of withdrawal, as well as any statutory update obligations) in accordance with Art. 6 (1) lit. b GDPR, we collect personal data if you provide it to us voluntarily as part of your order. Mandatory fields are marked as such, because in these cases we absolutely require the data for contract fulfilment and cannot ship the order without it. Which data is collected can be seen from the respective input forms.
Further information on the processing of your data, in particular on the disclosure to our service providers for the purpose of order, payment and shipping processing, can be found in the following sections of this privacy policy. After complete processing of the contract, your data will be restricted for further processing and deleted after expiry of the retention periods under tax and commercial law in accordance with Art. 6 (1) lit. c GDPR, unless you have expressly consented to further use of your data in accordance with Art. 6 (1) lit. a GDPR, or we reserve the right to a use of the data beyond this which is permitted by law and about which we inform you in this statement.
2.2 Customer account
Insofar as you have given your consent to this in accordance with Art. 6 (1) lit. a GDPR by deciding to open a customer account, we use your data for the purpose of opening a customer account and for storing your data for further future orders on our website. You can delete your customer account at any time, either by sending a message to the contact option described in this privacy policy or via a function provided for this purpose in the customer account. After deletion of your customer account, your data will be deleted, unless you have expressly consented to further use of your data in accordance with Art. 6 (1) lit. a GDPR, or we reserve the right to a use of the data beyond this which is permitted by law and about which we inform you in this statement.
Contacting us
As part of customer communication, we collect personal data in accordance with Art. 6 (1) lit. b GDPR to process your enquiries if you provide it to us voluntarily when contacting us (e.g. via contact form, live chat tool or e-mail). Mandatory fields are marked as such, because in these cases we absolutely require the data to process your contact request. Which data is collected can be seen from the respective input forms. After complete processing of your enquiry, your data will be deleted, unless you have expressly consented to further use of your data in accordance with Art. 6 (1) lit. a GDPR, or we reserve the right to a use of the data beyond this which is permitted by law and about which we inform you in this statement.
3. Data processing for the purpose of shipping
For the purpose of contract fulfilment in accordance with Art. 6 (1) lit. b GDPR, we pass on your data to the shipping service provider commissioned with the delivery, insofar as this is necessary for the delivery of ordered goods. If you have any questions about our service providers and the basis of our cooperation with them, please contact us using the contact option described in this privacy policy.
4. Data processing for payment processing
When processing payments in our online shop, we cooperate with these partners: technical service providers, credit institutions, payment service providers.
4.1 Data processing for transaction processing
Depending on the payment method selected, we pass on the data required to process the payment transaction to our technical service providers, to the commissioned credit institutions or to the selected payment service provider, insofar as this is necessary to process the payment. This serves the fulfilment of the contract in accordance with Art. 6 (1) lit. b GDPR. In some cases, the payment service providers collect the data required to process the payment themselves, e.g. on their own website or via a technical integration in the order process. The privacy policy of the respective payment service provider applies in this respect.
Depending on the payment method selected, data may be transferred to third countries outside the EU/EEA for which the European Commission has determined an adequate level of data protection by decision. Insofar as a data transfer takes place to third countries outside the EU/EEA for which the European Commission has not issued a decision on an adequate level of data protection, the cooperation is based on the European Commission's standard data protection clauses.
If you have any questions about our partners for payment processing or the basis of our cooperation with them, please contact us using the contact option named in this privacy policy.
4.2 Data processing for the purpose of fraud prevention and the optimisation of our payment processes
Where applicable, we provide the aforementioned service providers with further data, which they use together with the data necessary for processing the payment for the purpose of fraud prevention and the optimisation of our payment processes (e.g. invoicing, processing of disputed payments, support of accounting). In accordance with Art. 6 (1) lit. f GDPR, this serves to safeguard our legitimate interests, which prevail in the context of a balancing of interests, in protecting ourselves against fraud or in efficient payment management.
5. Cookies and other technologies
General information
In order to make visiting our website attractive and to enable the use of certain functions, we use technologies including so-called cookies on various pages. Cookies are small text files that are automatically stored on your end device. Some of the cookies we use are deleted after the end of the browser session, i.e. after closing your browser (so-called session cookies). Other cookies remain on your end device and enable us to recognise your browser on your next visit (persistent cookies). You can find the storage period in the overview in the cookie settings of your web browser.
Protection of privacy on end devices
When using our online offer, we use strictly necessary technologies in order to be able to provide the digital service you have expressly requested. The storage of information in your end device or access to information that is already stored in your end device does not require consent in this respect.
For functions that are not strictly necessary, the storage of information in your end device or access to information already stored in your end device requires your consent. We point out that parts of the website may not be fully usable if consent is not given. Any consent you have given remains in effect until you adjust or reset the respective settings in your end device.
Any subsequent data processing by cookies and other technologies
We use technologies that are strictly necessary for the use of certain functions of our website. These technologies collect and process the IP address, the time of the visit, device and browser information, and information on your use of our website. In the context of a balancing of interests, this serves our overriding legitimate interests in an optimised presentation of our offer in accordance with Art. 6 (1) lit. f GDPR.
Cookie settings
You can find the cookie settings for your browser under the following links: Microsoft Edge™ / Safari™ / Chrome™ / Firefox™ / Opera™
Insofar as you have consented to the use of the technologies in accordance with Art. 6 (1) lit. a GDPR, you can withdraw your consent at any time by sending a message to the contact option described in the privacy policy.
Use of Google reCAPTCHA
On our website, we use the reCAPTCHA service from Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google"). The service serves to distinguish, in the case of entries made via our forms (e.g. contact form, registration, login), whether the entry is made by a human or improperly by automated, machine processing, and thus protects against spam and misuse.
For this purpose, the IP address and, where applicable, further data required by Google for the reCAPTCHA service (e.g. device and browser information as well as information on your usage behaviour) are collected, transmitted to Google and processed there. This may involve a transfer to Google LLC in the USA. Insofar as the recipient is certified under the EU-US Data Privacy Framework (DPF), the transfer to the USA is carried out on the basis of the European Commission's adequacy decision of 10 July 2023 pursuant to Art. 45 GDPR. Otherwise, or additionally, the transfer is carried out on the basis of the European Commission's standard contractual clauses pursuant to Art. 46 GDPR.
The processing is carried out in accordance with Art. 6 (1) lit. f GDPR to safeguard our legitimate interests, which prevail in the context of a balancing of interests, in protecting our website against automated spying, misuse and spam. You have the right to object at any time, on grounds relating to your particular situation, to this processing of personal data concerning you based on Art. 6 (1) lit. f GDPR.
You can find further information on data protection at Google at https://policies.google.com/privacy and on reCAPTCHA at https://www.google.com/recaptcha.
6. Contact options and your rights
6.1 Your rights
As a data subject, you have the following rights:
- in accordance with Art. 15 GDPR, the right to request information about your personal data processed by us to the extent specified therein;
- in accordance with Art. 16 GDPR, the right to request without undue delay the rectification of incorrect personal data or the completion of your personal data stored by us;
- in accordance with Art. 17 GDPR, the right to request the erasure of your personal data stored by us, unless further processing is required
- for the exercise of the right to freedom of expression and information;
- for compliance with a legal obligation;
- for reasons of public interest; or
- for the establishment, exercise or defence of legal claims;
- in accordance with Art. 18 GDPR, the right to request the restriction of the processing of your personal data, insofar as
- the accuracy of the data is contested by you;
- the processing is unlawful, but you object to its erasure;
- we no longer need the data, but you require it for the establishment, exercise or defence of legal claims; or
- you have objected to the processing in accordance with Art. 21 GDPR;
- in accordance with Art. 20 GDPR, the right to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format, or to request its transmission to another controller;
- in accordance with Art. 77 GDPR, the right to lodge a complaint with a supervisory authority. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or of our company headquarters for this purpose.
|
Right to object Insofar as we process personal data as explained above to safeguard our legitimate interests, which prevail in the context of a balancing of interests, you can object to this processing with effect for the future. If the processing is carried out for the purposes of direct marketing, you can exercise this right at any time as described above. Insofar as the processing is carried out for other purposes, you only have a right to object on grounds relating to your particular situation. After you have exercised your right to object, we will no longer process your personal data for these purposes, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or where the processing serves the establishment, exercise or defence of legal claims. This does not apply if the processing is carried out for the purposes of direct marketing. In that case, we will no longer process your personal data for this purpose. |
6.2 Contact options
If you have any questions about the collection, processing or use of your personal data, about information, rectification, restriction or erasure of data, as well as the withdrawal of consent given or objection to a particular use of data, please contact us directly using the contact details in our legal notice (Impressum).