Privacy policy

1. Privacy at a glance

 

General information

The following information provides a simple overview of what happens to your personal data when you visit our website. Personal data refers to all data with which you can be personally identified. You will find detailed information on the subject of data protection in our privacy policy, detailed below.

 

Data collection on this website

 

Who is responsible for data collection on this website?

Data processing on this website is carried out by the website operator. Their contact details can be found in the section “Information regarding the responsible authority” in this data protection declaration.

How do we collect your data?

Firstly, your data is collected when you share it with us. This may be data that you enter in a contact form, for example.

Secondly, other data is collected automatically by our IT systems or with your consent when you visit the website. This mainly include technical data (e.g. internet browser, operating system or time when the page was visited). This data is collected automatically as soon as you enter this website.

What do we use the data for?

Some data is collected in order to ensure the website functions properly. Other data can be used to analyse your user behaviour.

What rights do you have with regard to your data?

You have the right to obtain information about the origin, recipient and purpose of the personal data stored by us free of charge at any time. You also have the right to request the correction or deletion of this data. If you have given your consent to data processing, you can revoke this consent at any time for the future. In addition, you have the right to request the restriction of the processing of your personal data in certain circumstances. You also have the right to appeal to the competent supervisory authority.

You can contact us at any time at the address given if you have any further questions on the subject of data protection.

Analytic tools and tools from third parties

When you visit our website, your navigation behaviour can be statistically evaluated. This is done primarily with cookies and analysis programmes.

You will find detailed information on these analysis programmes in the following privacy policy.

2. Hosting und Content Delivery Networks (CDN)

 

External hosting

The website is hosted by an external service provider (host). The personal data collected on this website is stored on the host’s servers. This may include IP addresses, contact enquiries, meta and communication data, contract data, contact information, names, website access and other data generated via a website.

The use of the host is for the purpose of fulfilling a contractual agreement with regards to our potential and existing customers (Art. 6 para. 1 (b) of the GDPR) and in the interest of safe, fast and efficient provision of our online services by a professional provider (Art. 6 para. 1 (f) of the GDPR).

Our host will only process your data to the extent required to fulfil its performance obligations and will follow our instructions with regard to this data.

We use the following host:

Host Europe GmbH
Hansestrasse 111
51149 Cologne

 

Conclusion of a contract via order processing

In order to ensure processing in compliance with data protection guidelines, we have concluded an order processing contract with our host.

 

3. General notes and mandatory information

 

Data protection

The operators of these web pages take the protection of your personal data very seriously. We treat your personal data confidentially and according to data protection legislation as well as according to this privacy policy.

When you use this website, various personal data is collected. Personal data refers to data with which you can be personally identified. This privacy policy explains which data we collect and what we use it for. It also explains how and for what purpose this is done.

We would like to point out that the online transmission of data (such as communication via email) may be exposed to security gaps. Completely protecting data against third-party access is impossible.

 

Information regarding the data controller

The data controller who is responsible for processing data on this website is:

Johannes Schuetze Holding AG
Weidestraße 120b
22083 Hamburg

Phone: 040-8000 44 3000
E-Mail: moc.e1632301825zteuh1632301825cSsen1632301825nahoJ1632301825@ofni1632301825

The data controller is the natural or legal person who alone or, together with others, decides on the purposes and means of processing personal data (e.g. names, email addresses, etc.).

 

Storage duration

Unless a specific storage period is specified in this data protection declaration, your personal data will remain with us until the purpose for the data processing no longer applies. If you assert a justified request for deletion or revoke consent to data processing, your data will be deleted unless we have other legally permissible reasons for storing your personal data (e.g. retention periods under tax or commercial law); in the latter case, the data will be deleted once these reasons no longer apply.

 

Data protection officer as required by law

We have appointed a data protection officer for our company.

Johannes Schuetze Holding AG
Johannes Schuetze
Weidestraße 120b
22083 Hamburg
Germany

Phone: +49 (0)40-8000 44 3000
E-Mail: moc.e1632301825zteuh1632301825cssen1632301825nahoj1632301825@ofni1632301825

 

Information about data transfer to the USA and other third countries

Our website uses tools from companies based in the USA and other third countries that are subject to different data protection agreements. If these tools are active, your personal data can be transferred to these third countries and processed there. Please note that we cannot guarantee the same degree of data protection as customary within the EU. For example, US companies are obliged to hand over personal data to security authorities without you as a data subject being able to take legal action against this. It can therefore not be ruled out that US authorities (e.g. intelligence services) process, evaluate and permanently store your data located on US servers for surveillance purposes. We have no influence on these processing activities.

 

Revocation of consent to data processing

Many data processing processes are only possible with your express consent. You can revoke your previously given consent at any time. Data that has been processed up to the point that the revocation is requested has been processed on legitimate grounds and remains unaffected by the revocation.

 

Right to object to data collection in special cases and to direct advertising (Art. 21 GDPR).

IF THE DATA PROCESSING IS BASED ON ARTICLE 6 PARA 1 LIT. E OR F OF THE GDPR, YOU HAVE THE RIGHT AT ANY TIME TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA FOR REASONS THAT ARISE FROM YOUR PARTICULAR SITUATION; THIS ALSO APPLIES TO PROFILING BASED ON THESE PROVISIONS. THE RESPECTIVE LEGAL BASIS ON WHICH PROCESSING IS BASED CAN BE FOUND IN THIS PRIVACY POLICY. AFTER YOU EXERCISE YOUR RIGHT TO OBJECT, WE SHALL NO LONGER PROCESS YOUR DATA FOR THESE PURPOSES, UNLESS WE ARE ABLE TO PROVIDE PROOF OF COMPELLING AND LEGITIMATE GROUNDS FOR THE PROCESSING THAT OUTWEIGH YOUR INTERESTS, RIGHTS AND FREEDOMS, OR IF THE PROCESSING SERVES THE PURPOSE OF EXERCISING, ENFORCING OR DEFENDING OF LEGAL CLAIMS. (OBJECTION PURSUANT TO ARTICLE 21 PARA 1 GDPR).

IF YOUR PERSONAL DATA IS PROCESSED TO OPERATE DIRECT ADVERTISING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR THE PURPOSE OF SUCH ADVERTISING; THIS ALSO APPLIES TO PROFILING INSOFAR AS IT IS ASSOCIATED WITH SUCH DIRECT ADVERTISING. IF YOU OBJECT, YOUR PERSONAL DATA WILL THEN NO LONGER BE USED FOR THE PURPOSE OF DIRECT ADVERTISING (OBJECTION PURSUANT TO ART. 21 PARA 2 GDPR).

Right to lodge a complaint with the competent supervisory authority

In the case of violations of the GDPR, the persons concerned have a right of appeal to a supervisory authority, in particular in the Member State of their habitual residence, their place of work or the place of the alleged infringement. The right of complaint is without prejudice to any other administrative or judicial remedies.

 

Right to data portability

In the case of data which we process automatically on the basis of your consent or in fulfilment of a contract, you have the right to have this data handed over to you or to a third party in a common, machine-readable format. If you request the data to be transferred directly to another data controller, this will only take place if it is technically feasible.

 

SSL and TLS encryption

This site uses SSL and TLS encryption respectively for security reasons and to protect the transmission of confidential content, such as orders or requests that you send to us as the site operator. You can check you have an encrypted connection when you see that the browser address field has changed from “http://” to “https://” and when you see the lock symbol in the browser address bar.

If SSL or TLS encryption is activated, the data you transfer to us cannot be read by third parties.

 

Information, blocking, and correction

Within the scope of the applicable legal provisions, you have the right at any time to obtain information free of charge concerning the personal data we have stored about you. You also have the right to know the origin of the data, who is receiving it and for what purpose the data is being processed. If necessary, you also have the right to have this data corrected, blocked or deleted. You can contact us at any time at the address given if you have any further questions on the subject of personal data protection.

 

Right to restriction of processing

You have the right to request the restriction of processing of your personal data. Feel free to contact us at any time. You have the right to restrict the processing of your data in the following circumstances:

  • If you dispute the accuracy of the personal data we have stored about you, we usually need time to verify this. For the duration of the verification process, you have the right to request the restriction of processing of your personal data.
  • If your personal data have been or are being unlawfully processed, you may request the restriction of data processing instead of their deletion.
  • If we no longer require your personal data, however you need it to exercise, defend or enforce legal claims, you have the right to demand that your personal data be restricted instead of being deleted.
  • If you have filed an objection pursuant to Art. 21 para. 1 GDPR, a balance must be made between your interests and ours. As long as it is not clear whose interests prevail, you have the right to request the restriction of processing of your personal data.

If the processing of your personal data has been restricted, such data shall, with the exception of storage, only be processed with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the European Union or of a Member State.

 

4. Data collection on this website

 

Cookies

Our Internet pages use so-called “cookies”. Cookies are small text files and do not cause any damage to your device. They are stored either temporarily for the duration of a session (session cookies) or permanently (permanent cookies) on your device. Session cookies are automatically deleted after your visit. Permanent cookies remain stored on your device until you delete them yourself or your web browser automatically deletes them.

In some cases, cookies from third-party companies may also be stored on your device when you enter our site (third-party cookies). These enable us or you to use certain services of the third-party company (e.g. cookies for processing payment services).

Cookies have various functions. Numerous cookies are technically necessary because certain website functions would not work without them (e.g. the shopping cart function or the display of videos). Other cookies are used to evaluate user behaviour or to display advertising.

Cookies, which are required to perform electronic communication processes (necessary cookies) or to provide specific functions at your request (functional cookies, e.g. to use a shopping basket) or to optimise the website (e.g. cookies for measuring website traffic) are stored pursuant to Art. 6 para. 1 lit. f of the GDPR provided no other legal basis has been stipulated. The website owner has a legitimate interest in the storing of cookies for the technically correct and optimised delivery of its services. If a corresponding consent has been requested (e.g. consent to the storage of cookies), processing takes place exclusively on the basis of Art. 6 Para. 1 lit. a GDPR; the consent can be revoked at any time.

You can configure your browser to inform you about the use of cookies so that you can decide to accept or reject each cookie. Alternatively, your browser can automatically accept cookies under certain conditions or always reject them, and you can also tell it to automatically delete cookies when closing your browser. Disabling cookies may limit the functionality of this website.

Insofar as cookies are used by third-party companies or for analysis purposes, you will be specially informed of this in this data protection declaration and your consent may be required.

Cookie consent with Usercentrics

This website uses the cookie consent technology from Usercentrics to obtain your consent to the storage of certain cookies on your device or to the use of certain technologies and to document them in compliance with data protection regulations. This technology provider is Usercentrics GmbH, Rosental 4, 80331 Munich, Website: https://usercentrics.com/de/ (hereinafter “Usercentrics”).

When you enter our website, the following personal data are transferred to Usercentrics:

  • Your consent or the revocation of your consent
  • Your IP address
  • Information about your browser
  • Information about your device
  • Time of your visit to the website

Usercentrics also saves a cookie in your browser in order to be able to assign the consent you have given or to be able to revoke it. The data collected in this way will be stored until you ask us to delete them, delete the Usercentrics cookie yourself or the purpose for data storage no longer applies. Mandatory statutory retention requirements remain unaffected.

Usercentrics is used to obtain the legally required consent for the use of certain technologies. The legal basis for this is Article 6 para. 1 lit. c GDPR.

Contract for data processing

We have concluded a data processing agreement with Usercentrics. This involves a data protection agreement that ensures that Usercentrics only uses the personal data of our website visitors based on our instructions and in compliance with the GDPR

Contact form

If you contact us via the contact form, the requested information on the form, including contact data specified by you, shall be stored by us solely for the purpose of processing the request and for follow-up questions. We will not share this information without your consent.

The legal basis for collecting these data is Article 6 para. 1 lit. b GDPR, where your enquiry is in connection with fulfilment of a contract, or is required for execution of pre-contractual activities. In all other cases, the processing is based on our legitimate interest in the effective processing of the inquiries sent to us (Art. 6 para. 1 lit. f GDPR) or on your consent (Art. 6 para. 1 lit. a GDPR) if this was queried.

We shall keep the data you enter in the contact form until you request we delete them, you revoke your consent for them to be stored or until the purpose for data storage no longer applies (e.g. after your request has been processed). Mandatory statutory provisions, especially retention periods, remain unaffected.

Enquiries by email, telephone or fax

If you contact us by email, telephone or fax, we will store and process your inquiry including all resultant personal data (name, inquiry) in order to handle your issue. We will not share this information without your consent.

The legal basis for collecting these data is Article 6 para. 1 lit. b GDPR, where your enquiry is in connection with fulfilment of a contract, or is required for execution of pre-contractual activities. In all other cases, the processing is based on our legitimate interest in the effective processing of the inquiries sent to us (Art. 6 para. 1 lit. f GDPR) or on your consent (Art. 6 para. 1 lit. a GDPR) if this was queried.

We shall keep the data you enter in the contact form until you ask us to delete them, you revoke your consent for them to be stored or until the purpose for data storage no longer applies (e.g. after your issue has been processed). Mandatory statutory provisions, especially statutory retention periods, remain unaffected.

5. Analytics and advertising

 

Google Analytics

This website uses features of the web analysis service, Google Analytics. The service provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics enables the website operator to analyse the behaviour of website visitors. In doing so, the website operator receives various usage data, such as page views, length of stay, operating systems used and the origin of the user. This data may be summarised by Google in a profile that is assigned to the respective user or their end device.

Google Analytics uses technologies that enable the user to be recognized for the purpose of analysing user behaviour (e.g. cookies or device fingerprinting). The information collected by Google about the use of this website is usually transmitted to a Google server in the USA and stored there.

This analysis tool is used on the basis of Art. 6 para. 1 lit.f GDPR. The website operator has a legitimate interest in analysing user behaviour in order to optimise both its website and its advertising. If a corresponding consent has been requested (e.g. consent to the storage of cookies), processing takes place exclusively on the basis of Art. 6 para. 1 lit. a GDPR; the consent can be revoked at any time.

The transfer of data to the USA is based on the standard contractual clauses of the EU Commission. You can find details here: https://privacy.google.com/businesses/controllerterms/mccs/.

 

IP anonymisation

We have activated the IP anonymisation feature on this website. Your IP address will thus be truncated by Google within the European Union or other parties to the Agreement on the European Economic Area prior to transmission to the United States. The full IP address will only be transmitted to a Google server in the USA and shortened there in exceptional cases. On behalf of the operator of this website, Google will use this information to analyse your use of the website, compile reports regarding website activity, and provide other services to the website operator related to website and internet usage. The IP address provided by your browser in the framework of Google Analytics will not be combined with other data from Google.

Browser plug-in

You can prevent Google from collecting and processing your data by downloading and installing the browser plug-in available under the following link: https://tools.google.com/dlpage/gaoptout?hl=de.

For further information on how user data is processed, please refer to the Google privacy policy at: https://support.google.com/analytics/answer/6004245?hl=de.

Order processing

We have entered into an agreement on contract processing with Google. When using Google Analytics, we fully implement the strict requirements of the German data protection authorities.

 

Demographic data collection by Google Analytics

This website uses the “demographic reports” of Google Analytics to display suitable advertising to website visitors within the Google advertising network. As a result, reports can be produced that contain statements on the age, gender and interests of the site visitors. This data comes from interest-based advertising from Google and visitor data produced by third-parties. This data cannot, however, be attributed to a specific person. You can disable this feature at any time through the ad settings in your Google Account, or generally prohibit the collection of your data by Google Analytics as outlined in the section “Objection to Data Collection”.

 

Storage duration

Data stored by Google at a user and event level that are linked to cookies, user IDs (e.g. user ID) or advertising IDs (e.g. double-click cookies, Android advertising ID) is anonymised or deleted after 38 months. Details can be found on the link:  below: https://support.google.com/analytics/answer/7667196?hl=de

 

Google Ads

The website operator uses Google Ads. Google Ads is an online advertising program by Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Ads enables us to play adverts in the Google search engine or on external websites when the user enters particular search terms on Google (keyword targeting). Furthermore, targeted advertising based on Google user data (e.g. location data and interests) and be played (target group targeting). As a website operator, we are able to analyse these data quantitively by analysing which search terms were entered to activate our adverts and how many adverts led to clicks.

The legal basis for using Google Ads is Article 6 para. 1 lit.f GDPR. The website operator has a legitimate interest in marketing its service products as effectively as possible.

The transfer of data to the USA is based on the standard contractual clauses of the EU Commission. You can find the details here: https://policies.google.com/privacy/frameworks und https://privacy.google.com/businesses/controllerterms/mccs/.

6. Plugins and tools

 

Google reCAPTCHA

We use “Google reCAPTCHA” (hereinafter referred to as reCAPTCHA) on our website. The service provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

The purpose of reCAPTCHA is to verify whether data that is entered onto our website (e.g. on a contact form) has been entered by a real person or by an automated programme. In order to achieve this, reCAPTCHA analyses the behaviour of the website visitor by means of different observations. This analysis begins automatically as soon as the website visitor accesses the website. reCAPTCHA evaluates various types of information to conduct the analysis (e.g. IP address, duration of the user’s visit to the website and other factors such as mouse movements). The data that are captured during the analysis are transferred to Google.

reCAPTCHA analysis is carried out entirely as a background operation. Visitors to the website are not alerted to the fact that an analysis is taking place.

The legal basis for storing and analysing this data is Art. 6 para. 1 lit.f GDPR. The website operator has a legitimate interest in ensuring that the website is protected from automated illicit access and SPAM. If a corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR; the consent can be revoked at any time.

Further information on Google reCAPTCHA can be found in the Google privacy policy and Google terms under the following links: https://policies.google.com/privacy?hl=de and https://policies.google.com/terms?hl=de.

7. eCommerce & payment providers

 

Processing of data (customer data and contract data)

We collect, process, and use personal data only insofar as this is necessary for the establishment, content development or modification of the legal relationship (inventory data). This is done on the basis of Article 6 para. 1 lit. b of the GDPR which permits the processing of data for the performance of a contract or due to pre-contractual measures. We collect, process, and use personal data on the use of our internet pages (usage data) only insofar as this is necessary to allow the user to make use of the service or to make payments.

The customer data collected will be deleted after the order has been completed or the business relationship has ended. Statutory retention periods shall remain unaffected.

 

Data transfer for contract conclusion for services and digital content

We only transfer personal data to third parties insofar as this is necessary in the course of processing the contract, for example to the credit institutions commissioned to carry out payment processing.

Any further transmission of data is only possible if you have expressly agreed to this. Your data will not be passed on to third parties without your express consent, for example for advertising purposes.

The basis for data processing is Art. 6 para. 1 lit. b of the GDPR which permits the processing of data for the performance of a contract or due to pre-contractual measures.