Privacy Policy

Privacy Policy | Soletek GmbH
Status: 07.05.2024

Who we are

The controller within the meaning of the General Data Protection Regulation (GDPR) and other data protection regulations is:

Soletek GmbH
Feldheider Str. 62
40699 Erkrath
Germany
02103-4960
[email protected]
https://rolektro.de/

Contacting the Data Protection Officer

The controller’s Data Protection Officer is:

DataCo GmbH
Sandstr. 33
80335 Munich
Germany
+49 89 7400 45840
www.dataguard.de

General information on data processing

On this page we inform you about the processing of your personal data on the website.

How we collect and use your personal data depends on how you interact with us or which services you use. We only collect, use, or share your personal data where we have a legitimate purpose and a legal basis for doing so.

What do we mean by “legal basis”?

Consent (Art. 6(1) sentence 1 lit. a GDPR) – You have given us your consent to process your personal data for the specific purpose we explained to you. You have the right to withdraw your consent at any time. To do so, please contact the Data Protection Officer using the contact details provided below.

Contract (Art. 6(1) sentence 1 lit. b GDPR) – We must use your data to perform a contract we have with you. Alternatively, it is necessary to use your data because we asked you to do so or because you took certain steps yourself before entering into this contract.

Legal obligation (Art. 6(1) sentence 1 lit. c GDPR) – We must use your data to comply with the law.

Vital interests (Art. 6(1) sentence 1 lit. d GDPR) – Processing your data is necessary to protect your vital interests or those of another person, for example to prevent serious physical harm to you.

Public task (Art. 6(1) sentence 1 lit. e GDPR) – Processing your data is necessary for the performance of a task carried out in the public interest or because it is covered by a task laid down by law, e.g., for a statutory function.

Legitimate interests (Art. 6(1) sentence 1 lit. f GDPR) – Processing your data is necessary to support a legitimate interest pursued by us or another party, but only where your interests do not override those interests. Please note that we may not be able to provide you with our web shop if your data must be processed to perform a contract or comply with a legal obligation and you do not provide the requested data.

Your rights

If personal data relating to you is processed, you are a data subject within the meaning of the GDPR and you have the following rights vis-à-vis the controller:

1. Right of access (Art. 15 GDPR)

You have the right to request confirmation from us as to whether personal data concerning you is being processed. If so, you have a right of access to this data and to the following information:

purposes of processing
categories of personal data
recipients or categories of recipients
planned storage period and/or the criteria used to determine that period
the existence of the rights to rectification, erasure, restriction of processing, or objection
the right to lodge a complaint with the competent supervisory authority
where applicable, the source of the data (if collected from a third party)
where applicable, the existence of automated decision-making, including profiling, with meaningful information about the logic involved, the scope, and the expected effects
where applicable, transfer of personal data to a third country or an international organisation

2. Right to rectification (Art. 16 GDPR)

If your personal data is inaccurate or incomplete, you have the right to request that it be corrected or completed without undue delay.

3. Right to restriction of processing (Art. 18 GDPR)

You have the right to request restriction of the processing of your personal data where one of the following applies:

You contest the accuracy of your personal data, for a period enabling us to verify the accuracy of the personal data.
Processing is unlawful and you oppose erasure of the personal data and request restriction of its use instead.
We no longer need your personal data for the purposes of processing, but you require it for the establishment, exercise, or defence of legal claims; or
You have objected to processing, for the period pending the verification whether our legitimate grounds override yours.

4. Right to erasure (“right to be forgotten”) (Art. 17 GDPR)

You have the right to request that your personal data be erased without undue delay where one of the following grounds applies:

Your data is no longer necessary for the purposes for which it was originally collected.
You withdraw your consent and there is no other legal basis for the processing.
You object to the processing and there are no overriding legitimate grounds for the processing, or you object pursuant to Art. 21(2) GDPR.
Your personal data is processed unlawfully.
Erasure is necessary for compliance with a legal obligation under Union or Member State law to which we are subject.
The personal data was collected in relation to the offer of information society services pursuant to Art. 8(1) GDPR.

Please note that the above grounds do not apply where processing is necessary:

for exercising the right of freedom of expression and information;
for compliance with a legal obligation or for the performance of a task carried out in the public interest to which we are subject;
for reasons of public interest in the area of public health;
for archiving purposes in the public interest, scientific or historical research purposes, or statistical purposes; or
for the establishment, exercise, or defence of legal claims.

5. Right to data portability (Art. 20 GDPR)

You have the right to receive your personal data in a structured, commonly used, and machine-readable format or to request that it be transmitted to another controller.

6. Right to object to certain data processing (Art. 21 GDPR)

You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you that is based on Art. 6(1) sentence 1 lit. e or f GDPR. This also applies to profiling based on these provisions.

Where personal data concerning you is processed for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for such marketing; this also applies to profiling to the extent that it is related to such direct marketing.

7. Right to lodge a complaint with a supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority if you believe that the processing of personal data relating to you infringes the GDPR.

The supervisory authority with which the complaint has been lodged will inform the complainant about the status and the outcome of the complaint, including the possibility of a judicial remedy pursuant to Art. 78 GDPR.

A list of supervisory authorities responsible in Germany can be accessed on the website of the Federal Commissioner for Data Protection at the following link: https://www.bfdi.bund.de/DE/Service/Anschriften/Laender/Laender-node.html

Shared use of data and international transfers

As explained in this privacy policy, we use various service providers who help us provide our services and keep your data secure. When we use these service providers, it is necessary to share your personal data with them.

We have concluded agreements with all service providers to whom we disclose your data, obliging them to protect your data.

If your personal data is transferred outside the EU, we ensure that your personal data receives an equivalent level of protection, either because the country to which your data is transferred has an “adequate” level of data protection as determined by the European Commission, or by applying another safeguard, such as an extended contractual arrangement, i.e., the Standard Contractual Clauses (SCCs) adopted by the European Commission.

For example, if we use US service providers, we rely—depending on the provider—either on the SCCs or the EU–US Data Protection Framework. You can request a copy of the SCCs we have concluded with our service providers by sending an email to the email address provided in this privacy policy.

Provision of the website and creation of log files

1. Description and scope of data processing

Each time our website is accessed, our system automatically collects data and information from the computer system of the accessing device. The following data is collected:

information about the browser type and version used
the user’s operating system
the user’s Internet service provider
date and time of access
websites from which the user’s system reaches our website
websites accessed by the user’s system via our website

This data is stored in our system’s log files. This data is not stored together with other personal data of the user.

2. Purpose of data processing

The temporary storage of the IP address by the system is necessary to deliver the website to the user’s device. For this purpose, the user’s IP address must remain stored for the duration of the session.

Storage in log files is carried out to ensure the functionality of the website. In addition, the data helps us optimise the website and ensure the security of our IT systems. There is no evaluation of the data for marketing purposes in this context.

3. Legal basis for data processing

The legal basis for the temporary storage of data and log files is Art. 6(1) sentence 1 lit. f GDPR.

4. Storage period

The data is deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. In the case of data collection for providing the website, this is the case when the respective session ends.

In the case of storage in log files, this is the case after no later than seven days. Storage beyond this period is possible. In this case, the users’ IP addresses are deleted or anonymised so that assignment to the accessing client is no longer possible.

5. Possibility of objection

The collection of data to provide the website and the storage of data in log files is mandatory for the operation of the website. The user may object to this. Whether the objection is successful must be determined as part of a balancing of interests.

Use of cookies

1. Description and scope of data processing

When you visit our website, we use technical tools for various functions, in particular cookies, which may be stored on your device. When you access our website and at any later time, you can choose whether to allow cookies in general or which individual additional functions you would like to select. You can make changes in your browser settings or via our consent manager.

Cookies are text files or information stored in a database on your hard drive and assigned to the browser you use, so that the party setting the cookie can receive certain information. Below we describe what types of cookies we use:

We use technically necessary cookies that are required for the technical structure of the website. Without these cookies, our website cannot be displayed (fully correctly) or support functions are not possible.

The following data is stored and transmitted via technically necessary cookies:

items in the shopping cart
log-in information
entered search terms
frequency of page views
use of website functions

We also use cookies on our website that are not technically necessary. Technically non-essential cookies are considered text files that do not solely serve the functionality of the website, but also collect other data. By setting technically non-essential cookies, the following data is processed:

IP address
location of internet users
date and time the website is accessed
customisation of advertisements to the user
tracking of browsing behaviour
linking of the website visit with other social media platforms

2. Purpose of data processing

The purpose of technically necessary cookies is to ensure the functionality of our website. Some functions of our website cannot be offered without the use of cookies. For these, it is necessary that the browser is recognised again after a page change.

We need technically necessary cookies for the following applications:

shopping cart
remembering search terms
functionality of the website

Technically non-essential cookies are used to improve the quality of our website, its content, and thereby our reach and economic efficiency. By setting these cookies, we learn how the website is used and can continually optimise our offering. In particular, these cookies serve the following purposes:

Technically non-essential cookies serve various purposes that go beyond a website’s basic functionality. They can be used to analyse user behaviour, display personalised advertising, enable interaction with social media platforms, track behaviour across different websites, and support specific functions such as saving user settings.

3. Legal basis for data processing

For storing information on the end user’s device and/or accessing information already stored on the end user’s device, the provisions of the German Telecommunications-Telemedia Data Protection Act (TTDSG) apply. If the setting and reading of cookies is technically necessary, this is done to ensure the functionality of our website. In this case, cookies are stored on and accessed from your device on the basis of § 25(2) no. 2 TTDSG. This storage and access to information on your device serve to facilitate your use of our website and to provide you with the services you request. Some functions of our website do not work without these cookies and therefore could not be offered. Cookies are generally deleted after the end of the session (e.g., logout or closing the browser) or after a specified period has expired. Information about different storage periods for cookies can be found in the following sections of this privacy policy.

Where cookies are used that are not technically necessary, this is done on the basis of your explicit consent, which you can provide via the cookie banner. The legal basis for storing and accessing information in this case is § 25(1) TTDSG in conjunction with Art. 6(1) lit. a) and Art. 7 GDPR. You can withdraw your consent at any time with effect for the future or grant it again later by configuring your cookie settings accordingly. Alternatively, you can prevent cookies from being stored by adjusting your browser software settings. Please note that the browser settings you make only apply to the browser you are using. If personal data is processed after information has been stored on and accessed from your device, the GDPR provisions apply. Further information can be found in the following sections of this privacy policy.

4. Objection and deletion

You can withdraw your consent to the use of cookies at any time and manage your consent preferences at the following link: https://rolektro.de/cookie/offcanvas

To implement the GDPR and TTDSG requirements for obtaining and managing consent for technically non-essential cookies, we use the plugin “EU Cookie Richtlinie Pro + automatische Cookie Erkennung” by ACRIS E-Commerce GmbH, Hafenstraße 47–51, 4020 Linz, Austria.

The plugin automatically detects all cookies used on the website and categorises them (e.g., essential, statistics, marketing). It enables users to make a legally compliant choice on their first visit and to grant or refuse consent to individual cookie categories.

The selected settings are stored in a technically necessary cookie in order to recognise them on subsequent visits.

5. Legal basis

Consent is collected and stored on the basis of Art. 6(1) sentence 1 lit. c GDPR (legal obligation to be able to provide evidence) and § 25(1) TTDSG for cookies that are not technically necessary.

6. Storage period

Consent or refusal is stored for 12 months, or until you change the cookie settings or withdraw your consent.

Registration

1. Description and scope of data processing

On our website, we offer users the possibility to register by providing personal data. The data is entered into an input mask and transmitted to us and stored. The data is not passed on to third parties. The following data is collected as part of the registration process:

email address
last name
first name
address
telephone/mobile phone number
IP address of the accessing device
date and time of registration

During the registration process, the user’s consent to the processing of this data is obtained.

2. Purpose of data processing

User registration is required for the performance of a contract with the user or for the implementation of pre-contractual measures.

3. Legal basis for data processing

If the user has given consent, the legal basis is Art. 6(1) sentence 1 lit. a GDPR. If the registration serves the performance of a contract to which the user is party or the implementation of pre-contractual measures, the additional legal basis is Art. 6(1) sentence 1 lit. b GDPR.

4. Storage period

The data is deleted as soon as it is no longer necessary to achieve the purpose for which it was collected.

This applies to data collected during registration for the performance of a contract or for pre-contractual measures when the data is no longer necessary for the performance of the contract. Even after the contract has been concluded, it may be necessary to store personal data of the contractual partner in order to comply with contractual or legal obligations.

5. Withdrawal option in the case of consent

As a user, you can cancel your registration at any time. You can have the data stored about you changed at any time.

You can request deletion as follows: Data can be changed independently via the customer account. If the customer account is to be deleted, please notify us at [email protected].

If the data is required for the performance of a contract or for pre-contractual measures, early deletion is only possible insofar as no contractual or legal obligations prevent deletion.

Web shop

We offer a web shop on our website.

For this we use the following shop software:
Shopware by shopware AG, Ebbinghoff 10, 48624 Schöppingen, Germany (hereinafter “Shopware”).

Further information can be found in the provider’s privacy policy:
https://de.shopware.com/datenschutz/

The website and web shop are hosted on external servers by a service provider commissioned by us.

Our service provider is:
profihost GmbH, Expo Plaza 1, 30539 Hanover, Germany

The servers automatically collect and store information in so-called server log files, which your browser automatically transmits when you visit the website. The stored information is:

information about the browser type and version used
the user’s operating system
the user’s internet service provider
date and time of access
websites from which the user’s system reaches our website
websites accessed by the user’s system via our website

This data is not merged with other data sources. This data is collected on the basis of Art. 6(1) lit. f GDPR. The website operator has a legitimate interest in the technically error-free display and optimisation of its website—this requires the collection of server log files.

We have concluded a data processing agreement with the relevant service provider, obliging the provider to protect user data and not to pass it on to third parties.

The server location for the website is geographically in Germany.

Payment options

1. Description and scope of data processing

We offer our customers various payment methods to process their orders. Depending on the payment method, customers are redirected to the platform of the respective payment service provider. After completion of the payment process, we receive the customers’ payment data from the payment service providers or our bank and process it in our systems for invoicing and accounting purposes.

The payment methods listed below are processed by the payment service provider Mollie (Mollie B.V, Keizersgracht 313, 1016 EE Amsterdam, Netherlands).

Further information about the processing of your data by Mollie can be found at: https://www.mollie.com/de/privacy.

Payment via Klarna

It is possible to process the payment transaction using the payment service provider Klarna.

Klarna is a payment service provider that enables purchase on account, instalment payments, or instant bank transfer.

The European operating company of Klarna is Klarna Bank AB (publ), Sveavägen 46, 111 34 Stockholm, Sweden.

If you select “purchase on account” or Pay Now via Klarna, your personal data will be transmitted to Klarna automatically. The personal data transmitted to Klarna includes in particular:

first name
last name
address
date of birth
gender
email address
IP address
telephone/mobile phone number
bank details
credit card number incl. validity date and CVC code
number of items
item number
data on goods and/or services
transaction amount and taxes/charges

The purpose of the transfer is in particular identity verification, payment administration, and fraud prevention. Personal data exchanged between Klarna and us may be transmitted by Klarna to credit agencies.

This transfer serves identity and creditworthiness checks. Klarna may also disclose the personal data to affiliated companies (Klarna Group) and service providers or subcontractors insofar as this is necessary to fulfil contractual obligations or the data is to be processed on behalf of Klarna.

Further information on how Klarna processes your data can be found in Klarna’s privacy policy at: https://www.klarna.com/de/datenschutz/

Payment by credit card

It is possible to complete the payment process by credit card.

If you choose to pay by credit card, payment data is passed on to payment service providers for payment processing. All payment service providers comply with the “Payment Card Industry (PCI) Data Security Standards” and have been certified by an independent PCI Qualified Security Assessor.

In the course of credit card payments, the following data is regularly transmitted:

purchase amount
date and time of purchase
first and last name
address
email address
credit card number
credit card validity period
security code (CVC)
IP address
telephone number / mobile phone number

Payment via PayPal

It is possible to process the payment transaction using the payment service provider PayPal. PayPal offers, in addition to a direct payment method, purchase on account, direct debit, credit card, and instalment payments.

The European operating company of PayPal is PayPal (Europe) S.à.r.l. & Cie. S.C.A., 22-24 Boulevard Royal, 2449 Luxembourg.

If you select PayPal as the payment method, the data required for the payment process is transmitted to PayPal automatically. This includes in particular the following data:

name
address
email address
telephone/mobile phone number
IP address
bank details
card number
validity date and CVC code
number of items
item number
data on goods and services
transaction amount and taxes/charges
information on previous purchase behaviour

The data transmitted to PayPal may be transmitted by PayPal to credit agencies. This transfer serves identity and creditworthiness checks.

PayPal may also disclose your data to third parties insofar as this is necessary to fulfil contractual obligations or the data is to be processed on behalf of PayPal. For transfers of personal data within PayPal-affiliated companies, PayPal applies Binding Corporate Rules approved by the competent supervisory authorities. These can be found here: https://www.paypal.com/de/webapps/mpp/ua/bcr

Other data transfers may be based on contractual safeguards. For more information, please contact PayPal.

All PayPal transactions are subject to PayPal’s privacy policy, available at: https://www.paypal.com/de/webapps/mpp/ua/privacy-full/

Payment via easyCredit instalment purchase

You can pay for your order via easyCredit instalment purchase, an offer by TeamBank AG, Beuthener Str. 25, 90471 Nuremberg, Germany. The data protection controller is TeamBank AG. We do not collect or process the data ourselves.

Information on data processing by the provider can be found at: https://www.easycredit-ratenkauf.de/datenschutz/

Payment in advance (bank transfer)

If you choose payment in advance, we do not process any data other than the data transmitted by your bank. This data is used solely to verify receipt of payment.

2. Purpose of data processing

The transfer of payment data to payment service providers serves to process payments, e.g., when you purchase a product and/or use a service.

3. Legal basis for data processing

The legal basis is Art. 6(1) sentence 1 lit. b GDPR, as processing is required to execute the concluded purchase contract.

4. Storage period

All payment data as well as data relating to possible chargebacks is stored only as long as required for payment processing and any handling of chargebacks, debt collection, and combating misuse.

In addition, payment data may be stored beyond this period insofar and as long as this is necessary to comply with statutory retention obligations or to investigate a specific case of misuse.

Your personal data is deleted after the expiry of statutory retention obligations, i.e., after no later than 10 years.

5. Exercising your rights

If the data is required for the performance of a contract or for pre-contractual measures, early deletion is only possible insofar as no contractual or statutory obligations prevent deletion.

Booking test rides (Microsoft Bookings)

1. Description and scope of data processing

You have the option to book an appointment for a test ride with us. For booking appointments, we use Microsoft Bookings by Microsoft Corporation, One Microsoft Way, 98052 Redmond, Washington, USA (hereinafter “Microsoft”).

In doing so, we collect the following personal data:

name
email address
address
telephone number
desired test ride time

2. Purpose of data processing

This data is collected in order to book and coordinate a test ride appointment. We also use this data to stay in contact with you and to provide relevant information about the test ride.

3. Legal basis

Processing is based on Art. 6(1) lit. b GDPR (performance of a contract or pre-contractual measures) and on Art. 6(1) lit. a GDPR, as we obtain your consent for the use of Microsoft Bookings.

4. Storage period

The collected data is deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. This is the case once the booked test ride has been completed and no further statutory retention obligations apply. If you withdraw your consent to use Microsoft Booking, we delete your data from this tool.

5. Right to object and withdraw

You have the right to withdraw your consent to data processing at any time. Withdrawal means that we may no longer continue the data processing based on this consent in the future.

Video surveillance in the showroom

1. Description and scope of data processing

We operate a video surveillance system in our business premises. Surveillance takes place exclusively in the Soletek GmbH showroom, in particular in the checkout area and the area where e-scooters are displayed. The monitored area is separated from other areas by walls and doors. As part of video surveillance, image data of persons entering this area is recorded, including customers and employees. Recordings are evaluated only on an event-related basis, for example in the event of security incidents. Surveillance for employee performance or behaviour monitoring does not take place.

2. Purpose of data processing

The processing of image data serves our legitimate interest in ensuring security in the checkout area and protecting against theft, irregularities in cash holdings, and other security-relevant incidents.

3. Legal basis for data processing

The legal basis for video surveillance is Art. 6(1) sentence 1 lit. f GDPR. Our legitimate interest lies in particular in preventing and investigating security-relevant incidents in the checkout area and protecting our property. The interests of the data subjects do not override these interests, as the monitored area is clearly demarcated, there is no permanent recording of employees and customers, and the measure is necessary to achieve the stated purposes.

4. Storage period

Image recordings are stored only as long as necessary to achieve the stated purposes. The regular storage period is a maximum of 48 hours; after that the data is automatically overwritten. Longer storage of individual sequences only takes place if there is a concrete suspicion and the recordings are required for clarification.

5. Objection and removal option

Data subjects may object at any time, on grounds relating to their particular situation, to the processing of their data. Whether the objection is successful is assessed as part of a balancing of interests.

If an objection is successful, or if storage is no longer necessary for the purpose, the relevant image data is deleted, provided that no statutory retention obligations or overriding interests in temporary preservation exist.

Newsletter

1. Description and scope of data processing

On our website you can subscribe to a free newsletter. When you sign up, the data from the input form is transmitted to us.

To provide this service, we collect the following data from you:

email address
IP address of the accessing device
date and time of registration

As part of the registration process, your consent to process this data is obtained and reference is made to this privacy policy.

No data is passed on to third parties in connection with the processing for sending newsletters. The data is used exclusively for sending the newsletter.

We use the service provider Mailchimp to send newsletters. A description of data processing by Mailchimp can be found under “Integrated third-party services” in this privacy policy.

2. Purpose of data processing

The purpose of collecting the email address is to deliver the newsletter.

The collection of other personal data during registration serves to prevent misuse of the services or of the email address used.

3. Legal basis for data processing

The legal basis for processing after newsletter registration is Art. 6(1) sentence 1 lit. a GDPR, provided that the user has given consent.

4. Storage period

The data is deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. The user’s email address is therefore stored as long as the newsletter subscription is active.

The other personal data collected during registration is usually deleted after a period of seven days.

5. Withdrawal option

You can cancel the newsletter subscription at any time. A corresponding link is included in each newsletter. This also enables withdrawal of the consent to store the personal data collected during registration.

Email contact

1. Description and scope of data processing

You can contact us via the email address provided on our website. In this case, the personal data transmitted with the email will be stored.

The data is used exclusively to process the correspondence.

2. Purpose of data processing

In the case of contact by email, this also constitutes the necessary legitimate interest in processing the data.

3. Legal basis for data processing

The legal basis for processing data transmitted in the course of sending an email is Art. 6(1) lit. f GDPR. Our legitimate interest is to respond to your inquiry optimally.

If the email contact aims at concluding a contract, the additional legal basis is Art. 6(1) lit. b GDPR.

4. Storage period

The data is deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. For personal data sent by email, this is the case when the respective conversation with the user has ended. The conversation is deemed ended when the circumstances indicate that the matter has been conclusively clarified.

Any additional personal data collected during the sending process is deleted after no later than seven days.

5. Possibility of objection

If the user contacts us by email, they may object to the storage of their personal data at any time. In such a case, the correspondence cannot be continued.

All personal data stored in the course of contacting us will be deleted in this case.

Contact form

1. Description and scope of data processing

Our website provides a contact form that can be used for electronic contact. If a user makes use of this option, the data entered in the input mask is transmitted to us and stored.

At the time the message is sent, the following data is stored:

email address
last name
first name
telephone/mobile phone number
IP address of the accessing device
date and time

2. Purpose of data processing

The processing of personal data from the contact form input mask or via the provided email address serves solely to handle the contact request.

Other personal data processed during the sending process serves to prevent misuse of the contact form and to ensure the security of our IT systems.

3. Legal basis for data processing

The legal basis for processing data transmitted in the course of sending an email is Art. 6(1) sentence 1 lit. f GDPR. Our legitimate interest is to respond to your inquiry optimally. If the contact aims at concluding a contract, the additional legal basis is Art. 6(1) sentence 1 lit. b GDPR.

4. Storage period

The data is deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. For personal data from the contact form input mask and those sent by email, this is the case when the respective conversation has ended. The conversation is deemed ended when the circumstances indicate that the matter has been conclusively clarified.

Any additional personal data collected during the sending process is deleted after no later than seven days.

5. Possibility of objection

If the user contacts us via the contact form, they may object to the storage of their personal data at any time.

You can lodge your objection as follows: please contact us at [email protected].

All personal data stored in the course of contacting us will be deleted in this case.

Company presence on social media

Instagram

Instagram, part of Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland

On our company page we provide information and offer Instagram users the opportunity to communicate.

If you perform an action on our Instagram company presence (e.g., comments, posts, likes), you may thereby make personal data public (e.g., your real name or your profile photo).

However, as a rule we have little or no influence on the processing of your personal data by Instagram and therefore cannot make binding statements about the purpose and scope of processing.

We use our company presence on social networks to communicate and exchange information with (potential) customers. In particular, we use the company presence to:

Show our mission, vision, and successes, present our products, and share industry news. Publications on our company presence may include the following content:

information about products
information about services
advertising
customer contact

Each user is free to publish personal data through their activities. Where we process your personal data to evaluate your online behaviour, offer you competitions, or conduct lead campaigns, this is based on your explicit consent declaration pursuant to Art. 6(1) sentence 1 lit. a and Art. 7 GDPR.

The legal basis for processing personal data for communication with customers and interested parties is Art. 6(1) sentence 1 lit. f GDPR. Our legitimate interest is to respond to your inquiry optimally and/or to provide the requested information.

If the contact aims at concluding a contract, the additional legal basis is Art. 6(1) lit. b GDPR. The data generated via the company presence is not stored in our own systems.

You can object at any time to the processing of your personal data that we collect in connection with your use of our company presence and assert your rights as a data subject as set out under “Your rights” in this privacy policy. To do so, send us an informal email to [email protected].

Further information on how Instagram processes your personal data and the objection options can be found here: https://help.instagram.com/519522125107875

YouTube

YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, United States

On our company page we provide information and offer YouTube users the opportunity to communicate.

If you perform an action on our YouTube company presence (e.g., comments, posts, likes), you may thereby make personal data public (e.g., your real name or your profile photo).

However, as a rule we have little or no influence on the processing of your personal data by YouTube and therefore cannot make binding statements about the purpose and scope of processing.

We use our company presence on social networks to communicate and exchange information with (potential) customers. In particular, we use the company presence to show our mission, vision, and successes, present our products, and share industry news.

Publications on our company presence may include the following content:

information about products
information about services
advertising
customer contact

If the contact aims at concluding a contract, the additional legal basis is Art. 6(1) lit. b GDPR. The data generated via the company presence is not stored in our own systems.

Further information on data processing by YouTube and the respective objection options can be found here: https://policies.google.com/privacy? gl=DE&hl=en

Use of company presences in career-oriented networks

1. Scope of data processing

On our pages we provide information and offer users the opportunity to communicate.

The company presence is used for applications, information/PR, and active sourcing. We do not have any information about the processing of your personal data by the companies jointly responsible for the company presence. Further information can be found in the privacy policies of:

LinkedIn
XING

On our pages we provide information and offer users the opportunity to communicate. The company presence is used for applications, information/PR, and active sourcing.

We do not have any information about the processing of your personal data by the companies jointly responsible for the company presence. Further information can be found in the privacy policies of:

XING: https://privacy.xing.com/de

LinkedIn: https://www.linkedin.com/legal/privacy-policy

If you perform an action on our company presence (e.g., comments, posts, likes), you may thereby make personal data public (e.g., your real name or your profile photo).

2. Legal basis for data processing

If the contact aims at concluding a contract, the additional legal basis is Art. 6(1) lit. b GDPR.

3. Purpose of data processing

Our company presence serves to inform users about our services. Each user is free to publish personal data through activities.

4. Storage period

Data generated via the company presence is not stored in our own systems.

5. Exercising your rights

Further information on exercising your rights can be found here:

LinkedIn: https://www.linkedin.com/legal/privacy-policy

XING: https://privacy.xing.com/de

Integrated third-party services

We use various service providers to deliver the services offered via the website.

If such services are required for additional services, extended functions, or additional purposes, your personal data will only be transferred to service providers if you give your consent.

You can withdraw your consent to the use of integrated third-party services at any time and manage your consent settings here: https://rolektro.de/cookie/offcanvas

Use of the JTL ERP system

1. Type and scope of data processing

We use the ERP system of JTL-Software-GmbH, Rheinstr. 7, 41836 Hückelhoven, Germany, to manage our commercial processes efficiently and reliably. This system is an integral part of our business processing and supports us with tasks such as inventory management, order processing, and logistics.

Processed data includes:

inventory data (e.g., customer master data such as names and addresses)
contact data (e.g., email addresses, phone numbers)
contract data (e.g., services used, payment information)

2. Purpose of data processing

Your personal data is processed for contract handling, fulfilling our contractual and pre-contractual obligations, ensuring smooth shipping, and optimising our online offering.

3. Legal basis

Processing is carried out pursuant to Art. 6(1) lit. b GDPR (performance of a contract or pre-contractual measures).

4. Storage period

Data is stored as long as necessary to achieve the processing purpose or as required by statutory retention periods.

5. Objection and removal option

The transfer of data to our ERP system is mandatory for contract performance. An objection to this processing is therefore not possible.

Use of Endereco for address validation

1. Scope of data processing

To ensure the correctness of the address data we process, we use the address validation tool “Enedereco” by Endereco UG (limited liability) (Balthasar-Neumann-Str. 4b, 97236 Randersacker, Germany).

2. Purpose of data processing

Processing is carried out to immediately check the details you enter in our address forms for typing and spelling errors and, if necessary, to complete incomplete data. If input errors occur, alternative correction suggestions are offered. This also reduces the risk of misdelivery.

3. Legal basis

Processing of address data by Endereco is based on our legitimate interest in the correctness and up-to-dateness of the addresses we process pursuant to Art. 6(1) lit. f GDPR.

4. Storage period

The data is processed separately by the provider and is not combined with other data. It is deleted by the provider once the status of the entered data has been determined, but no later than after 14 days.

5. Possibility of objection

You can object at any time to the processing of your data by Endereco.

Use of Meta Pixel

1. Scope of processing of personal data

We use the Meta Pixel from Meta Platforms Inc., 1601 Willow Road, Menlo Park, CA 94025, USA, and its representative in the Union, Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, D2 Dublin, Ireland (hereinafter “Meta”). This tool enables us to track user actions after they have seen or clicked a Meta ad. Personal data may be stored and evaluated, in particular user activity (which pages were visited and which elements were clicked), device and browser information (including IP address and operating system), data about displayed ads (which ads were displayed and whether they were clicked), and data from advertising partners (including pseudonymised user IDs). This allows us to measure the effectiveness of Meta ads for statistical and market research purposes. Data may be transferred to Meta servers in the USA. The data collected is anonymous for us, meaning we do not receive personal data of individual users. However, this data is stored and processed by Meta. Meta may link this data with your Meta account and also use it for its own advertising purposes in accordance with Meta’s data policy.

Further information on processing by Meta can be found here: https://www.facebook.com/policy.php

2. Purpose of data processing

The use of the Meta Pixel serves to analyse and optimise our advertising measures.

3. Legal basis

The legal basis is generally the user’s consent pursuant to Art. 6(1) sentence 1 lit. a GDPR.

4. Storage period

Your personal information is stored for as long as necessary to fulfil the purposes described in this privacy policy or as required by law, e.g., for tax and accounting purposes.

5. Withdrawal and removal option

You have the right to withdraw your data protection consent at any time. Withdrawal does not affect the lawfulness of processing carried out on the basis of consent before its withdrawal.

You can prevent the collection and processing of your personal data by Meta by blocking third-party cookies on your computer, using “Do Not Track” in a supported browser, disabling script code in your browser, or using a script blocker such as NoScript or Ghostery.

Further information on objection and removal options vis-à-vis Meta can be found here: https://www.facebook.com/policy.php

Use of Google AdSense

1. Scope of processing of personal data

We use Google AdSense by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, and its representative in the Union, Google Ireland Ltd., Gordon House, Barrow Street, D04 E5W5, Dublin, Ireland (hereinafter “Google”). With this service we place advertising. Google stores a cookie on your computer. Personal data may be stored and analysed, especially user activity (in particular which pages were visited and which elements were clicked), device and browser information (in particular IP address and operating system), data about displayed ads (in particular which ads were shown and whether the user clicked them), and data from advertising partners (in particular pseudonymised user IDs).

Further information on processing by Google can be found here: https://policies.google.com/privacy?gl=DE&hl=de

2. Purpose of data processing

Google evaluates the data to draw conclusions about your user behaviour with regard to AdSense ads. Data may also be transferred to third parties if there is a legal obligation to do so or if the data is processed on behalf of Google.

3. Legal basis

The legal basis is generally the user’s consent pursuant to Art. 6(1) sentence 1 lit. a GDPR.

4. Storage period

Your personal information is stored as long as necessary to fulfil the purposes described in this privacy policy or as required by law, e.g., for tax and accounting purposes.

5. Withdrawal and removal option

You have the right to withdraw your data protection consent at any time. Withdrawal does not affect the lawfulness of processing carried out on the basis of consent before its withdrawal.

You can prevent Google from collecting and processing your personal data by blocking third-party cookies on your computer, using “Do Not Track” in a supported browser, disabling script code in your browser, or using a script blocker such as NoScript (https://noscript.net/) or Ghostery (https://www.ghostery.com).

You can deactivate Google’s use of your personal data via: https://adssettings.google.de

Further information on objection and removal options can be found at: https://policies.google.com/privacy? gl=DE&hl=de

Use of Google Analytics 4 (GA4)

1. Scope of processing of personal data

We use Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter “Google”).

Google Analytics analyses how website visitors use our website. Google sets cookies on your device. During your visit, user behaviour is recorded in the form of “events”. Personal data may be stored and evaluated, including:

first visit to the website
interaction with the website, navigation path
clicks on external links
video usage
file downloads
ad impressions and ad clicks
scroll behaviour (if scrolled to the end of the page)
searches on the website
language selection
page visits
location (region)
your IP address (in shortened form)
technical information about your browser and devices used (e.g., language settings, screen resolution)
your internet provider
referrer URL

We use the User-ID function. With User-ID, we can assign one or more sessions (and the activities within those sessions) a unique, persistent ID and analyse user behaviour across devices.

We use Google Signals. This collects additional information in Google Analytics about users who have enabled personalised ads (interests and demographic data), and ads can be delivered to these users in cross-device remarketing campaigns.

IP anonymisation is enabled by default in GA4. This means your IP address is shortened by Google within EU Member States or other EEA contracting states. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. Google states that the IP address transmitted by your browser in the context of Google Analytics will not be merged with other Google data.

Further information on processing by Google can be found here: https://policies.google.com/privacy

2. Purpose of data processing

The use of GA4 helps us evaluate the use of our online presence and create reports on activities on our website. Reports are used to analyse website performance and to deliver targeted advertising to people who have already shown initial interest through a site visit.

3. Legal basis

The legal basis is generally the user’s consent pursuant to Art. 6(1) sentence 1 lit. a GDPR.

4. Storage period

Your personal data is deleted after 2 months. This deletion is carried out automatically once per month.

5. Withdrawal, objection and removal option

You have the right to withdraw your data protection consent at any time. Withdrawal does not affect the lawfulness of processing carried out on the basis of consent before its withdrawal.

You can withdraw your consent via our cookie consent tool.

You can prevent Google from collecting and processing your personal data by blocking third-party cookies on your computer, using the “Do Not Track” function in a supported browser, disabling script code, or using a script blocker such as NoScript (https://noscript.net) or Ghostery (https://www.ghostery.com).

You can also prevent the collection of data generated by the cookie and related to your use of the online presence (including your IP address) and the processing of this data by Google by downloading and installing the browser plugin available at: https://tools.google.com/dlpage/gaoptout?hl=de

You can deactivate Google’s use of your personal data via: https://adssettings.google.de

Use of Google Maps

1. Scope of processing of personal data

We use Google Maps by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, and its representative in the Union, Google Ireland Ltd., Gordon House, Barrow Street, D04 E5W5, Dublin, Ireland (hereinafter “Google”). We use the Google Maps plugin to display geographical data visually and embed it in our online presence. By using Google Maps on our online presence, information about the use of our online presence, your IP address, and addresses entered in the route planning function are transmitted to a Google server and stored there.

Further information can be found here: https://policies.google.com/privacy?gl=DE&hl=de

2. Purpose of data processing

The use of Google Maps improves usability and provides an appealing presentation of our online presence.

3. Legal basis

The legal basis is generally the user’s consent pursuant to Art. 6(1) sentence 1 lit. a GDPR.

4. Storage period

Your personal information is stored as long as necessary to fulfil the purposes described in this privacy policy or as required by law.

5. Withdrawal and removal option

You have the right to withdraw your data protection consent at any time. Withdrawal does not affect the lawfulness of processing carried out on the basis of consent before its withdrawal.

You can prevent Google from collecting and processing your personal data by blocking third-party cookies, using “Do Not Track”, disabling script code, or using a script blocker such as NoScript (https://noscript.net/) or Ghostery (https://www.ghostery.com).

You can deactivate Google’s use of your personal data via: https://adssettings.google.de

Further information: https://policies.google.com/privacy?gl=DE&hl=de

Use of Google reCAPTCHA

1. Scope of processing of personal data

We use Google reCAPTCHA by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, and its representative in the Union, Google Ireland Ltd., Gordon House, Barrow Street, D04 E5W5, Dublin, Ireland. This tool checks whether data entry is compliant and not performed by a bot. For this purpose, Google reCAPTCHA analyses and authenticates the behaviour of a visitor to the online presence using a wide range of characteristics. Personal data may be stored and evaluated, in particular user activity (especially mouse movements and which elements are clicked) and device and browser information (especially time, IP address, and operating system).

The data is not linked to data that may be collected or used in connection with the parallel use of authenticated Google services such as Gmail.

Further information: https://policies.google.com/privacy?gl=DE&hl=de

2. Purpose of data processing

Google reCAPTCHA is used to protect our online presence from misuse.

3. Legal basis

The legal basis is generally the user’s consent pursuant to Art. 6(1) sentence 1 lit. a GDPR.

4. Storage period

Your personal information is stored as long as necessary to fulfil the purposes described in this privacy policy or as required by law, e.g., for tax and accounting purposes.

5. Withdrawal and removal option

You have the right to withdraw your data protection consent at any time. Withdrawal does not affect the lawfulness of processing carried out on the basis of consent before its withdrawal.

You can deactivate Google’s use of your personal data via: https://adssettings.google.de

Further information: https://policies.google.com/privacy?gl=DE&hl=de

Use of Instagram plugin

1. Scope of processing of personal data

We use plugins of Instagram by Meta Platforms Inc., 1601 Willow Road, Menlo Park, CA 94025, USA, and its representative in the Union, Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, D2 Dublin, Ireland (hereinafter “Meta”).

The integrated Instagram buttons are used to provide a link to our Instagram profile. A widget is also integrated that allows us to display certain photos and videos from our Instagram profile on our online presence. When you visit a page that contains such a plugin, your browser establishes a direct connection to a Meta server. The plugin content is transmitted directly to your browser and integrated into the online presence. In doing so, data is automatically transmitted to Instagram and stored on its servers. This transmitted data includes connection data (such as your IP address, date and time, the accessed URL) and the browser and operating system used.

Your visit to our pages may thus be tracked by Instagram, even if you do not actively use the plugin functions. If you are logged into your Instagram account, you can link the content of our pages with your Instagram profile by clicking the Instagram button. This allows Instagram to associate your visit to our pages with your user account. To prevent this direct association, you must log out of Instagram before visiting our online presence.

Further information: https://help.instagram.com/155833707900388

2. Purpose of data processing

The use of the Instagram plugin serves to improve our company’s external presentation.

3. Legal basis

The legal basis is generally the user’s consent pursuant to Art. 6(1) sentence 1 lit. a GDPR.

4. Storage period

Your personal information is stored as long as necessary to fulfil the purposes described in this privacy policy or as required by law, e.g., for tax and accounting purposes.

5. Withdrawal and removal option

You have the right to withdraw your data protection consent at any time. Withdrawal does not affect the lawfulness of processing carried out on the basis of consent before its withdrawal.

You can prevent Instagram from collecting and processing your personal data by blocking third-party cookies, using “Do Not Track”, disabling script code, or using a script blocker such as NoScript (https://noscript.net/) or Ghostery (https://www.ghostery.com).

Further information on objection/removal options: https://help.instagram.com/155833707900388

Use of Doofinder search

1. Scope of data processing

We use the Doofinder service (Doofinder S.L., Calle Gran Vía, 16, 28013 Madrid, Spain), a search technology specifically for online shops, to enable improved and more efficient product search.

To use this service, your browser must connect to Doofinder’s servers. This informs Doofinder that our website was visited via your IP address. Further details on Doofinder search and its privacy policy can be found at https://www.doofinder.com/de/ and https://www.doofinder.com/de/privacy-policy.

2. Purpose of data processing

Doofinder is used to optimise the search function on our website. Stored data can be used to personalise search results, providing faster and more relevant results. This improves your shopping experience by helping you find products faster and navigate our site more efficiently.

3. Legal basis

The legal basis is Art. 6(1) lit. f GDPR. Our legitimate interest follows from the above purposes of optimising our offering and improving the user experience.

4. Storage period

Data collected by Doofinder is stored only as long as necessary to analyse search trends and improve search functionalities. As soon as the data is no longer needed for these purposes, it is securely deleted or anonymised.

5. Objection and removal option

You have the right to object to the processing of your personal data collected by Doofinder. For details on how Doofinder processes personal data, please refer to Doofinder’s privacy policy.

Use of Mailchimp

1. Scope of processing of personal data

We use Mailchimp by The Rocket Science Group, LLC, 512 Means Street, Suite 404, Atlanta, GA 30318, USA (hereinafter “Mailchimp”) to send our newsletters. Mailchimp is an email marketing provider and enables us to communicate directly with prospective customers via email newsletters. If you register for the newsletter, the data you enter during registration is transmitted to Mailchimp and stored there. Additional personal data may be stored and analysed, in particular user activity (especially which pages were visited and which elements were clicked) as well as device and browser information (especially IP address and operating system).

Your data is also stored by Mailchimp. Your data is not passed on to third parties for the newsletter subscription and Mailchimp does not obtain any right to pass on your data. After registration, Mailchimp sends you an email to confirm your registration. In addition, Mailchimp offers analysis options, e.g., how newsletters are opened and used, how many users an email was sent to, whether emails were rejected, and whether users unsubscribed after receiving an email.

Further information: https://MailChimp.com/legal/privacy/

2. Purpose of data processing

The personal data collected when registering for the newsletter is used exclusively to send our newsletter, possibly to invite you to events and, if you are already our customer, to send our customer emails. Subscribers may also be informed by email if this is necessary for the operation of the newsletter service or for related registration, for example in the event of changes to the newsletter offering or changes to technical conditions.

3. Legal basis

The legal basis is generally the user’s consent pursuant to Art. 6(1) sentence 1 lit. a GDPR.

4. Storage period

Your personal information is stored for as long as necessary to fulfil the purposes described in this privacy policy or as required by law. You can also contact Mailchimp to request deletion of your data.

5. Withdrawal and removal option

You have the right to withdraw your data protection consent at any time. Withdrawal does not affect the lawfulness of processing carried out on the basis of consent before its withdrawal.

You can withdraw your consent to storing the data and its use for sending the newsletter via Mailchimp at any time, either by emailing Mailchimp or by clicking the link provided in each newsletter.

Further information: https://MailChimp.com/legal/privacy/

Trusted Shops trustmark with reviews

1. Scope of processing of personal data

To display our Trusted Shops trustmark and any collected reviews, and to offer Trusted Shops products to buyers after an order, we use the Trusted Shops Trustbadge. The Trustbadge and the services advertised with it are provided by Trusted Shops GmbH, Subbelrather Str. 15C, 50823 Cologne, Germany (hereinafter “Trusted Shops”). When the Trustbadge is accessed, the web server automatically stores a server log file containing, for example, your IP address, date and time of retrieval, amount of data transmitted, and the requesting provider (access data), documenting the retrieval.

Further personal data is only transmitted to Trusted Shops if you have consented to this, decide to use Trusted Shops products after completing an order, or have already registered for use. In this case, the contractual agreement concluded between you and Trusted Shops applies.

Further information: https://www.trustedshops.de/impressum/

2. Purpose of data processing

Trusted Shops is used for optimal marketing of our offering.

3. Legal basis

The legal basis is generally the user’s consent pursuant to Art. 6(1) sentence 1 lit. a GDPR.

4. Storage period

Access data is automatically deleted no later than 180 days after the end of your visit.

5. Withdrawal and removal option

You have the right to withdraw your data protection consent at any time. Withdrawal does not affect the lawfulness of processing carried out on the basis of consent before its withdrawal.

You can prevent Trusted Shops from collecting and processing your personal data by blocking third-party cookies, using “Do Not Track”, disabling script code, or using a script blocker such as NoScript (https://noscript.net/) or Ghostery (https://www.ghostery.com).

Further information on objection/removal options: https://www.trustedshops.de/impressum/

YouTube integration

1. Scope of processing of personal data

We use the YouTube plugin operated by YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, USA, and its representative in the Union, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter “Google”). We use the plugin to embed YouTube videos in our online presence. When you visit our online presence, your browser establishes a connection to YouTube servers. Personal data may be stored and analysed, in particular user activity (especially which pages were visited and which elements were clicked) and device and browser information (especially IP address and operating system).

We have no influence on the plugin content. If you are logged into your YouTube account during the visit, YouTube may associate your visit with that account. By interacting with the plugin, corresponding information is transmitted directly to YouTube and stored there.

Further information: https://policies.google.com/privacy?gl=DE&hl=de

2. Purpose of data processing

YouTube integration improves usability and provides an appealing presentation of our online presence.

3. Legal basis

The legal basis is generally the user’s consent pursuant to Art. 6(1) sentence 1 lit. a GDPR.

4. Storage period

Your personal information is stored for as long as necessary to fulfil the purposes described in this privacy policy or as required by law, e.g., for tax and accounting purposes.

5. Withdrawal and removal option

You have the right to withdraw your data protection consent at any time. Withdrawal does not affect the lawfulness of processing carried out on the basis of consent before its withdrawal.

You can deactivate Google’s use of your personal data via: https://adssettings.google.de

Further information: https://policies.google.com/privacy? gl=DE&hl=de

Use of Google Tag Manager

1. Scope of processing of personal data

We use Google Tag Manager (https://www.google.com/intl/de/tagmanager/) by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, and its representative in the Union, Google Ireland Ltd., Gordon House, Barrow Street, D04 E5W5, Dublin, Ireland (hereinafter “Google”). Google Tag Manager can be used to manage tags from Google and third-party services and embed them in an online presence in a bundled way. Tags are small code elements that, among other things, measure visitor numbers and behaviour, record the impact of online advertising and social channels, use remarketing and target group orientation, and test and optimise online presences. When a user visits the online presence, the current tag configuration is sent to the user’s browser. It contains instructions on which tags should be triggered. Google Tag Manager triggers other tags which may in turn collect data. Information can be found in the relevant sections of this privacy policy regarding the use of those services. Google Tag Manager itself does not access this data.

Further information: https://www.google.com/intl/de/tagmanager/faq.html and Google’s privacy policy: https://policies.google.com/privacy?hl=de

2. Purpose of data processing

The purpose of processing personal data is the central management and efficient integration of third-party services.

3. Legal basis

The legal basis is generally the user’s consent pursuant to Art. 6(1) sentence 1 lit. a GDPR.

4. Storage period

Your personal information is stored for as long as necessary to fulfil the purposes described in this privacy policy or as required by law. Advertising data in server logs is anonymised by Google by deleting parts of IP address and cookie information after 9 or 18 months, according to Google.

5. Withdrawal and removal option

You have the right to withdraw your data protection consent at any time. Withdrawal does not affect the lawfulness of processing carried out on the basis of consent before its withdrawal.

You can also prevent Google from collecting data generated by the cookie and related to your use of the online presence (including your IP address) and the processing of this data by Google by downloading and installing the browser plugin available at: https://tools.google.com/dlpage/gaoptout?hl=de

You can deactivate Google’s use of your personal data via: https://adssettings.google.de

Further information: https://policies.google.com/privacy?gl=DE&hl=de

Use of Microsoft Advertising

1. Scope of processing of personal data

We use functionalities of the advertising plugin Microsoft Advertising by Microsoft Corporation, One Microsoft Way, 98052 Redmond, Washington, USA (hereinafter “Microsoft”). Microsoft Advertising can be used to place advertisements on Bing for a company, for example to acquire new customers. If users reach our site via such an ad, we receive the total number of users redirected to that landing page.

Microsoft stores cookies on your device. In particular, Microsoft processes the following personal data:

IP address
device and browser information
a user ID assigned by Microsoft
referrer URL (website via which you accessed our website)

Data is processed on Microsoft servers in the USA.

Further information: https://privacy.microsoft.com/de-de/privacystatement

2. Purpose of data processing

Microsoft Advertising is used to analyse, evaluate, and optimise ads for advertising purposes.

3. Legal basis

The legal basis is generally the user’s consent pursuant to Art. 6(1) sentence 1 lit. a GDPR.

4. Storage period

Your personal information is stored for as long as necessary to fulfil the purposes described in this privacy policy or as required by law, e.g., for tax and accounting purposes.

5. Withdrawal and removal option

You have the right to withdraw your data protection consent at any time. Withdrawal does not affect the lawfulness of processing carried out on the basis of consent before its withdrawal.

You can prevent Microsoft from collecting and processing your personal data by blocking third-party cookies, using “Do Not Track”, disabling script code, or using a script blocker such as NoScript or Ghostery.

You can opt out of Microsoft’s use of your personal data for advertising evaluation here: http://choice.microsoft.com/de-DE/opt-out

Further information: https://privacy.microsoft.com/de-de/privacystatement

Applications via email and application form

1. Description and scope of data processing

On our website rolektro.de we link to an external careers page operated via a plugin by Personio GmbH, Seidlstraße 3, 80335 Munich, Germany. Applications can be submitted electronically there via a form. Alternatively, applications can also be submitted by email.

In the case of an online application via the embedded form, the following personal data is processed:

first and last name
email address
telephone number
CV and other application documents submitted
additional voluntary information (e.g., cover letter, profile links, salary expectations)

When sending the form via the Personio platform, meta/communication data such as IP address and time are also processed.

In the case of an application by email, the data transmitted with the message is processed.

2. Purpose of data processing

Data is processed exclusively to carry out the application process.

3. Legal basis

The legal basis is Art. 6(1) sentence 1 lit. b GDPR in conjunction with § 26(1) sentence 1 BDSG (initiation of an employment relationship).

If processing is based on your voluntary information or consents, Art. 6(1) sentence 1 lit. a GDPR also applies.

4. Storage period

Data is deleted no later than three months after completion of the application process, unless statutory retention obligations exist or you have expressly consented to longer storage (e.g., inclusion in a talent pool).

5. Objection and removal option

You can object at any time to the processing of your personal data or withdraw any consent given with effect for the future. In such a case, your application may no longer be considered.

Use of WeTransfer for order or complaint processing

1. Description and scope of data processing

To transmit larger files (e.g., documents, photos, invoice receipts) in the context of order processing or complaint handling, we occasionally use WeTransfer by WeTransfer B.V., Willem Fenengastraat 19, 1096 BL Amsterdam, Netherlands. Personal data such as contact details and order/complaint information is processed via the platform.

2. Purpose of data processing

WeTransfer is used exclusively to transmit files quickly and securely where required to perform a contract or handle a customer request.

3. Legal basis

The legal basis is Art. 6(1) sentence 1 lit. b GDPR (contract performance/initiation).

4. Storage period

Files sent via WeTransfer are only stored there for a limited period (usually 7 days) and are then deleted automatically.

5. Objection and removal option

If you do not want files to be transmitted via WeTransfer, please inform us. In this case, we will provide alternative transmission methods.

Postal advertising to existing customers

1. Description and scope of data processing

We reserve the right to inform customers whose personal data (e.g., name and address) we received in connection with an order about new products, offers, or promotions by post.

2. Purpose of data processing

Processing is carried out for direct marketing purposes as part of customer retention and information.

3. Legal basis

The legal basis for postal direct marketing is Art. 6(1) sentence 1 lit. f GDPR. Our legitimate interest lies in advertising our products and services to existing customers.

4. Storage period

Data required for postal advertising is stored as long as a business relationship exists or until an objection to use for advertising purposes is raised.

5. Objection and removal option

You can object at any time to the use of your data for postal advertising with effect for the future. To do so, please send an informal notice to the address stated in the imprint or by email to our data protection contact.

Email advertising to existing customers

1. Description and scope of data processing

If you purchase goods or services from us and provide your email address, we reserve the right to regularly send you offers for similar goods or services by email. This direct marketing is exclusively for products or services similar to those you have already purchased from us.

2. Purpose of data processing

The purpose is direct marketing of our own similar products or services for customer retention and information.

3. Legal basis

Sending is based on Art. 6(1) sentence 1 lit. f GDPR in conjunction with § 7(3) UWG, on the basis of our legitimate interest in direct marketing to existing customers.

4. Storage period

The email address is stored for advertising purposes until you object to its use or the purpose for storage ceases to apply.

5. Objection and removal option

You can object at any time to the use of your email address for advertising purposes without incurring any costs other than the transmission costs according to basic tariffs. You will find an unsubscribe link in each advertising email, or you can send an informal notice to the address stated in the imprint or by email to our data protection contact.

Stock availability notification

1. Description and scope of data processing

On our website, you can sign up to be notified by email as soon as a currently unavailable item is back in stock. For this we use the plugin “Lagerstands-E-Mail Benachrichtigung” by ACRIS E-Commerce GmbH, Hafenstraße 47–51, 4020 Linz, Austria.

As part of this function, your email address and information about the requested item are collected and processed—but only if you have expressly consented to the notification (opt-in).

2. Purpose of data processing

Processing serves solely to send you a one-time email notification as soon as the desired item is available again.

3. Legal basis

The legal basis is your consent pursuant to Art. 6(1) sentence 1 lit. a GDPR.

4. Storage period

Your data is stored only until the notification is sent or you withdraw your consent. After that, it is automatically deleted.

5. Withdrawal option

You can withdraw your consent to the stock availability notification at any time with effect for the future. Use the unsubscribe link in the email or contact us at the address stated in the imprint.

Google Ads integration

1. Description and scope of data processing

We use Google Ads provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Ads enables us to place ads in Google search results and within the Google advertising network. In this context, cookies may be set that analyse usage behaviour and allow conclusions regarding the effectiveness of our advertising (conversion tracking). The following personal data may be processed, among other things:

IP address
browser information
visited websites
click behaviour
possibly cross-device user identifiers

2. Purpose of data processing

Processing serves to analyse user behaviour and to optimise and display targeted advertising via Google services.

3. Legal basis

Processing is based on your consent pursuant to Art. 6(1) sentence 1 lit. a GDPR in conjunction with § 25(1) TTDSG. Consent is obtained via our cookie banner.

4. Storage period

Google stores the data collected via Ads for up to 18 months. You can withdraw your consent at any time with effect for the future.

5. Withdrawal option

You can object to the processing of your personal data at any time, e.g., via the cookie settings on our website or via Google’s ad settings at: https://adssettings.google.com

Cooperation with external agency (codeblick GmbH)

1. Description and scope of data processing

For technical support, maintenance, and further development of our online shop, we work with codeblick GmbH, Pröllstraße 11, 86157 Augsburg, Germany. In the course of these services, the agency may access our shop backend and may also view personal data (e.g., customer master data, order information) insofar as this is necessary for the respective support or development task.

2. Purpose of data processing

The cooperation serves to ensure stable and secure operation of our e-commerce platform and technical optimisation.

3. Legal basis

The legal basis for access is Art. 6(1) sentence 1 lit. f GDPR. Our legitimate interest lies in the professional administration and securing of our online shop. A data processing agreement pursuant to Art. 28 GDPR has been concluded with the agency.

4. Storage period

The data remains exclusively with us. The agency only accesses it temporarily and for specific purposes as part of its service.

5. Objection and removal option

An objection to the technical processing by our commissioned agency is not technically feasible, as it is an integral part of operating the shop. General data subject rights remain unaffected.

Customer satisfaction survey after checkout

1. Description and scope of data processing

After completing an order, we offer customers the opportunity to take part in a voluntary customer satisfaction survey. Technical implementation is carried out via a plugin by codegiganten GmbH, Breslauer Straße 7, 31535 Neustadt am Rübenberge, Germany.

As part of the survey, we process the survey responses as well as information about the respective order (e.g., order number, product information) which can be associated with participation. Survey results can be viewed via our backend.

2. Purpose of data processing

The purpose is to improve our services, products, and customer service through direct feedback.

3. Legal basis

The legal basis is your consent pursuant to Art. 6(1) sentence 1 lit. a GDPR, which is granted voluntarily as part of the survey.

4. Storage period

Survey results and associated order information are stored as long as needed for evaluations, but no longer than 12 months, unless statutory retention obligations prevent deletion.

5. Withdrawal option

You can withdraw your consent to processing your data in connection with the survey at any time with effect for the future. Please contact us via the email address stated in the imprint.

Disclosure of data to shipping service providers

1. Description and scope of data processing

To deliver orders, we pass on personal data of our customers to shipping service providers. This includes in particular:

DHL Paket GmbH, Sträßchensweg 10, 53113 Bonn, Germany
DHL Freight GmbH, Godesberger Allee 102–104, 53175 Bonn, Germany
DPD Deutschland GmbH, Wailandtstraße 1, 63741 Aschaffenburg, Germany

The transmitted data includes name, delivery address, and—where required for delivery—also email address and telephone number (e.g., for delivery notifications or delivery options).

2. Purpose of data processing

Data is transmitted exclusively for the purpose of delivering ordered goods and any related contact by the shipping service provider (e.g., delivery notifications or parcel tracking).

3. Legal basis

The legal basis is Art. 6(1) sentence 1 lit. b GDPR (performance of a contract).

4. Storage period

The transmitted data is stored by us in accordance with statutory retention periods. Data processing by the shipping service provider is governed by its own privacy policy.

5. Objection and removal option

Disclosure of the data is mandatory for contract performance. An objection to this processing is therefore not possible.

This privacy policy was created with the support of DataGuard.

Your account

Menu