Privacy policy
General information and your rights
As the responsible party, we take the protection of your (personal) data very seriously. In the following, we will inform you about which data we process from you, who exactly is responsible for data processing, whom you can contact if you have questions or complaints, and what rights you have with regard to your data. In addition, we will inform you of further details regarding the various data processing operations that are required by law.
Please read this privacy notice carefully.
Explanation of the most important terms and principles
Personal data means individual details about personal or factual circumstances of a specific or (with a certain amount of effort) determinable natural person, i.e., in addition to the name, address and telephone number, also all other data that describe this person or their behavior in more detail in any way. This includes, in particular, all digital data traces that each of us leaves behind by using the Internet on the World Wide Web. This person with his or her data is also called the data subject.
The processing of your (personal) data includes all activities from collection, storage, use, modification, transmission or disclosure to deletion. It does not matter whether this is done electronically, i.e. by computer, or otherwise, i.e. on paper, for example.
A specific data processing of your personal data is also referred to as a processing activity. Each processing activity pursues a specific, to be named processing purpose and requires, among other things, a specific, also to be named legal basis, otherwise the processing is not permitted.
The controller is the person who ultimately determines the purposes and means of the processing of your data. It does not matter whether the controller is a person, a company or other association, public body or the like. The controller may make the decision about the purposes and means of processing alone, together with others or on behalf of a third party.
Your contact options
The data controller of your personal data is:
If you have any questions regarding this privacy notice, your data processed by us, or any of the processing activities below, please contact our designated data protection officer by email first, if possible:
In the event of violations of data protection law, you as a data subject have a statutory right of appeal to the competent supervisory authority. The competent supervisory authority for us is the State Data Protection Commissioner of the Federal State of Saxony-Anhalt:
poststelle@lfd.sachsen-anhalt.de
A list of all state data protection officers and their contact information can be found at the following link: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.
Your rights as a data subject
As a data subject, you generally have the following rights with regard to your (personal) data:
- to receive information about the data stored about you,
- have incorrect data corrected or completed,
- to request the deletion of the data if, for example, the data is no longer necessary for the purpose for which it was collected or if there is no (longer) a legal basis for the processing,
- to request a (time-limited) restriction of the processing of the data if, for example, the accuracy of the data is disputed or the processing is presumed to be unlawful,
- to object to the further processing of your data by us,
- request a copy of the data in an electronic format that can be further used, provided that this does not affect the rights and freedoms of other persons,
- revoke consent to use at any time and subsequently be "forgotten" if the use of your data is based on consent previously given.
- complain to the competent supervisory authority (see above) if you believe that the processing of your data violates data protection law or your data protection rights have otherwise been violated in any way.
If you have any questions or a request for information or to exercise your rights in general, please contact our data protection officer Matthias Kunert (datenschutz@cubeoffice.de) by e-mail.
Please allow 14 days for us to process your request.
Processing of your personal data
How we collect your data and what data we process
We process personal data that you provide to us when you contact us for data subject inquiries in writing or directly by email. In addition, we process personal data that you provide to us when you provide optional information. Furthermore, we may also process personal data that you provide to us, for example, for identity verification purposes.
Purpose pursued
We process the personal data you provide (the exact data depends on what information you include in your request, usually it is your name, contact information, information about what kind of relationship you have with us, and the request itself) to process and respond to your specific request.
Legal bases for the processing
The processing of your personal data is necessary for us to comply with a legal obligation to which we are subject: We are required by law to respond to your request and process your personal data accordingly.
How long we store your personal data
We store your personal data until we have responded to your request. Thereafter, your personal data will be blocked until the end of the respective limitation period for the protection of legal claims (i.e. we block your data for all other purposes). After the end of this limitation period (after 3 years), your data will be completely deleted.
Data processing on our website
General
When you visit our website, various data is processed in order to analyze and improve the use of our information offering and to be able to identify and eliminate possible weaknesses.
Cookies
The Internet pages partly use so-called cookies. Cookies do not cause any damage to your computer and do not contain viruses. Cookies serve to make our offer more user-friendly, more effective and safer. Cookies are small text files that are stored on your computer and saved by your browser.
Most of the cookies we use are so-called "session cookies". They are automatically deleted after the end of your visit. Other cookies remain stored on your terminal device until you delete them. These cookies allow us to recognize your browser on your next visit.
You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general and activate the automatic deletion of cookies when closing the browser. When deactivating cookies, the functionality of this website may be limited.
Cookies that are required to carry out the electronic communication process or to provide certain functions you have requested (e.g. shopping cart function) are stored on the basis of Art. 6 (1) lit. f DSGVO. The website operator has a legitimate interest in storing cookies for the technically error-free and optimized provision of its services. Insofar as other cookies (e.g. cookies for analyzing your surfing behavior) are stored, these are treated separately in this privacy policy.
Server log files
When you visit our website, information is collected and stored in so-called server log files, which your browser automatically transmits to us. These are: Browser type and browser version, operating system used, referrer URL (original website from which the user came to our website or file), host name of the accessing computer, time of the server request and the IP address.
This data is processed on the servers of our Internet service provider. This data is not merged with other data sources. This processing activity is not a basis for automated decision-making (profiling). We reserve the right to check this data retrospectively if we become aware of specific indications of unlawful use.
The legal basis for the data processing is our legitimate interest after weighing all risks (see Art. 6 para. 1 lit. f DSGVO). Our interest here is: making our company known to the public, advertising on our own behalf, providing information about our range of services and support for initiating business contacts by publishing suitable contact options for interested parties and business partners, improving the user-friendliness of our information offering.
The storage period is one year.
SSL or TLS encryption
For security reasons and to protect the transmission of confidential content, such as orders or requests that you send us as the site operator, this site uses SSL or TLS encryption. You can recognize an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser line.
If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.
Contact form
If you send us inquiries via the contact form, your data from the inquiry form including the contact data you provided will be stored by us.
The processing of the data entered in the contact form is therefore based exclusively on our legitimate interest for the purpose of processing the request and in the event of follow-up questions (Art. 6 para. 1 lit. f DSGVO).
The data you enter in the contact form will remain with us until you request us to delete it or the purpose for storing the data no longer applies (e.g. after processing your request has been completed). Mandatory legal provisions - in particular retention periods - remain unaffected.
Links to other websites
This website also contains links to websites of other providers to which our data protection notice does not extend. As a rule, we have no influence on the content and compliance with data protection regulations by these providers and therefore ask you to inform yourself about the guidelines applicable there when visiting these websites.
Analysis tools and advertising
Google Analytics
This website uses functions of the web analysis service Google Analytics in order to generally analyze user behavior when visiting the website and to be able to improve the user-friendliness of the website. The provider is Google Inc.,1600 Amphitheatre Parkway Mountain View, CA 94043, USA.
Google Analytics uses so-called "cookies". These are text files that are stored on your computer and enable an analysis of your use of the website. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there.
You can prevent the collection of your personal data (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de
For more information on how Google Analytics handles user data, please see Google's privacy policy: https://policies.google.com/privacy?hl=de&fg=1
Google reCAPTCHA
We use "Google reCAPTCHA" (hereinafter "reCAPTCHA") on this website. The provider is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.
The purpose of reCAPTCHA is to check whether the data input on this website (e.g. in a contact form) is made by a human or by an automated program. For this purpose, reCAPTCHA analyzes the behavior of the website visitor based on various characteristics. This analysis begins automatically as soon as the website visitor enters the website. For the analysis, reCAPTCHA evaluates various information (e.g. IP address, time spent by the website visitor on the website or mouse movements made by the user). The data collected during the analysis is forwarded to Google.
The reCAPTCHA analyses run completely in the background. Website visitors are not notified that an analysis is taking place.
The storage and analysis of the data is based on Art. 6 para. 1 lit. f DSGVO. The website operator has a legitimate interest in protecting its web offers from abusive automated spying and from SPAM. If a corresponding consent was requested, the processing is based exclusively on Art. 6 para. 1 lit. a DSGVO; the consent can be revoked at any time.
For more information about Google reCAPTCHA, please see the Google Privacy Policy and the Google Terms of Service at the following links:
https://policies.google.com/privacy?hl=de and
https://policies.google.com/terms?hl=de.
Doubleclick
A web service of the company Google Ireland Limited, Gordon House, Barrow Street, 4 Dublin, Ireland (hereinafter: Doubleclick) is reloaded on our website. We use this data to ensure the full functionality of our website. In this context, your browser may transmit personal data to Doubleclick. The legal basis for the data processing is Art. 6 para. 1 lit. f DSGVO. The legitimate interest consists in an error-free function of the website. The data is deleted as soon as the purpose of its collection has been fulfilled. Further information on the handling of the transferred data can be found in the Doubleclick privacy policy: https://policies.google.com/privacy
Google Tag Manager
For our website, we use the Google Tag Manager of the company Google Inc. (1600 Amphitheatre Parkway Mountain View, CA 94043, USA). This service allows website tags to be managed via an interface. The Google Tag Manager itself does not set cookies but only tags and does not collect any personal data. The service triggers other tags, which in turn may collect data. However, Google Tag Manager does not access this data. If a deactivation has been made at the domain or cookie level, this remains in place for all tracking tags that are implemented with Google Tag Manager.
Hooray Analytics
This website uses technology from Hurra Communications GmbH, Wollgrasweg 27, 70599 Stuttgart (www.hurra.com) to collect and store data about your usage behavior on our website for optimization and marketing purposes. This data is used to analyze the behavior of visitors and is used to create pseudonymous usage profiles. For this purpose, cookies are used, which allow the recognition of an internet browser on a revisit. However, the usage profiles collected by hurra.com technology are not merged with personal data about the bearer of the pseudonym without the explicit consent of the visitor. The IP addresses of visitors are shortened before storage, so that a personal reference is excluded and a combination of usage profiles to IP addresses is no longer possible. The legal basis for this data processing is Article 6(1)(a) DSGVO (consent). You can revoke your consent given with regard to the use of Hurra Analytics at any time in our privacy policy by deselecting the category "Marketing Cookies".
Fullstory Analytics
For the purpose of demand-oriented design and continuous optimization of our websites, we use the analysis service Fullstory, a service of Fullstory, Inc., 818 Marietta Street, Atlanta, GA 30318, USA (hereinafter "Fullstory") on the basis of Art. 6 para. 1 lit. a) DSGVO in conjunction with § 25 para. 1 sentence 1 TTDSG. Fullstory documents user behavior on our website in anonymized form, in particular the interactions, behaviors and types of use, such as making entries, the sequence of accessing certain pages of our website or the time sequences, such as the duration of visits to certain pages, etc.. The use of Fullstory enables us to continuously improve the quality of our websites and their content, which is our legitimate interest. The information generated by the use of Fullstory is usually transferred to a server of Fullstory, Inc. in the USA and stored there. The storage period is a maximum of 180 days. We have also concluded a contract with Fullstory for commissioned processing in accordance with Art. 28 DSGVO, in which Fullstory undertakes to process the data received only in accordance with our instructions and to comply with the EU level of data protection. Additional information about Fullstory and data protection can be found in the provider's privacy policy. You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You also have the option to object to this data processing at any time by following the provider's instructions for opting out, which you can reach here: https://www.fullstory.com/optout.
Google Ads / Remarketing / Google Shopping/Customer Match
Our website uses the service Google Ads, Google Remarketing and Google Shopping. Google Ads is an online advertising program of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). In doing so, we use the remarketing function within the Google Ads service. With the remarketing function, we can present you with advertisements based on your interests on other websites within the Google advertising network. For this purpose, your surfing behavior on our website is analyzed, e.g. which offers you have viewed. This allows us to show you individualized advertising on the online search engine Google itself, so-called "Google ads" and on other websites even after your visit to our website. For this purpose, Google stores a cookie in your browser when you visit Google services or websites in the Google advertising network. Your visits are recorded via this cookie. The cookie is used to uniquely identify your web browser and not to identify you personally. Such further processing of the data as well as the processing of the data after its transmission by us to Google is carried out by Google as the sole data controller. Insofar as Google Ireland Limited processes your data as the sole data controller, it is possible that your data will be transferred to the USA by Google Ireland Limited. The European Court of Justice has determined with regard to the USA that this is a country with an insufficient level of data protection. In this context, there is a particular risk that your data will be processed by American institutions / authorities for control and monitoring purposes, without you being given an adequate legal remedy against this. We also use the Customer Match service. Here, a pixel is integrated into your browser. As a result, Google assigns an identification number to you as a visitor to this website and can thus recognize you when you visit other websites in order to enable the operator of this website to display individualized advertising to you or to decide that such advertising should not be displayed. The legal basis for this data processing is Article 6 (1) (a) DSGVO (consent). You can find more information about Google Remarketing and Google's privacy policy here. Here you can also assert your data subject rights (e.g. right to deletion) with regard to the data that Google processes as the data controller. You can revoke your consent given with regard to the use of Google at any time by deselecting the category "Marketing Cookies" in our privacy policy. Here you can also edit the settings you have made.
Microsoft Advertising
Our website uses the Microsoft Advertising service. Microsoft Advertising is an online advertising program of Microsoft Ireland Operations Limited (One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, D18 P521) ("Microsoft"). We use the so-called Universal Event Tracking (UET) within the Microsoft Advertising service, with which data is collected and stored on this website for marketing and optimization purposes. For this purpose, your surfing behavior on our website is analyzed, e.g. which offers you have viewed. For this purpose, Microsoft stores a cookie in your browser. Your visits are recorded via this cookie. The cookie is used to uniquely identify your web browser and not to identify you personally. To the extent that Microsoft processes your data as the sole data controller, there is a possibility that your data will be transferred by Microsoft to the United States. The European Court of Justice has determined with regard to the USA that this is a country with an insufficient level of data protection. In this context, there is a particular risk that your data will be processed by American institutions / authorities for control and monitoring purposes, without you being given an adequate legal remedy against this. The legal basis for the data processing described above is the one in Article 6(1)(a) DSGVO (consent). You can find more information about Microsoft's privacy policy here. Here you can also assert the data subject rights to which you are entitled vis-à-vis Microsoft (e.g. right to deletion). You can revoke your consent to data processing by Microsoft Advertising at any time by deselecting the category "Marketing Cookies" in our privacy policy. You can also edit your settings here.
Adcell
Our website uses components from "Adcell", Firstlead GmbH, Rosenfelder Str. 15-16, 10315 Berlin for the billing of affiliate marketing publishers. Affiliate marketing is an Internet-based form of distribution that enables commercial operators of websites, known as merchants or advertisers, to display advertisements, which are usually remunerated via click or sale commissions, on third-party websites, i.e. on the websites of distribution partners, also known as affiliates or publishers. The merchant provides an advertising medium via the affiliate network, i.e., an advertising banner or other suitable means of Internet advertising, which is subsequently integrated by an affiliate on its own websites or advertised via other channels, such as keyword advertising or e-mail marketing.
Information about Adcell's privacy policy can be found at https://www.adcell.de/news/meldungen/dsgvo/datenschutz-grundverordnung-bei-adcell.
AWIN
Our website contains tracking technology from AWIN AG, Eichhornstraße 3, 10785 Berlin. This may include cookies (see Cookies). AWIN collects and stores usage data in pseudonymous profiles for the purpose of web analysis or to enable interest-oriented advertising. You can object to this data collection and storage at any time with effect for the future by setting an opt-out cookie on your end device. You can find more detailed information on this opt-out option and on data processing by AWIN in AWIN's privacy policy (https://www.awin.com/de/rechtliches/privacy-policy-DACH).
Bounce Commerce GmbH
This website uses the plugin of the professional bounce management service provider Bounce Commerce GmbH, Lindenallee 39, 47608 Geldern. No personal or personally identifiable data is transmitted to the technical service provider. Technically necessary cookies are used, which contain purely technical information but no personal data. Further information on the data protection of Bounce Commerce GmbH can be found at https://www.bounce-commerce.de/datenschutz.
Google Optimize
Our website uses the web analysis and optimization service "Google Optimize", which are provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter "Google Optimize"). We use the Google Optimize service to increase the attractiveness, content and functionality of our website by playing new features and content to a percentage of our users and statistically evaluating the change in usage. Google Optimize is a sub-service of Google Analytics (see section Google Analytics). Google Optimize uses cookies that allow us to optimize and analyze your use of our website. The information generated by these cookies about your use of our website is usually transmitted to a Google server in the USA and stored there. We use Google Optimize with activated IP anonymization, so that your IP address is shortened beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. Google will use this information for the purpose of evaluating your use of our website, compiling reports on website optimization tests and related website activities and providing other services relating to website activity and internet usage to us. You can prevent the storage of cookies by selecting the appropriate settings on your Internet browser. In addition, you can prevent the collection of data generated by the cookie and related to your use of our website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de. For more information about data collection and processing by Google, please refer to Google's privacy policy, which can be found at http://www.google.com/policies/privacy.
Data processing in our social networks
General
We maintain publicly accessible profiles on social networks. The social networks used by us in detail can be found below.
Social networks such as Facebook, Google+, etc. can generally analyze your user behavior extensively when you visit their website or a website with integrated social media content (e.g. Like buttons or advertising banners). By visiting our social media presences, numerous data protection-relevant processing operations are triggered. In detail:
If you are logged into your social media account and visit our social media presence, the operator of the social media portal can assign this visit to your user account. However, your personal data may also be collected under certain circumstances if you are not logged in or do not have an account with the respective social media portal. In this case, this data collection takes place, for example, via cookies that are stored on your end device or by recording your IP address.
With the help of the data collected in this way, the operators of the social media portals can create user profiles in which your preferences and interests are stored. In this way, interest-based advertising can be displayed to you inside and outside the respective social media presence. If you have an account with the respective social network, the interest-based advertising can be displayed on all devices on which you are or were logged in.
Please also note that we cannot track all processing operations on the social media portals. Depending on the provider, further processing operations may therefore be carried out by the operators of the social media portals. For details, please refer to the terms of use and data protection provisions of the respective social media portals.
Legal basis
Our social media presences are intended to ensure the most comprehensive presence possible on the Internet. This is a legitimate interest within the meaning of Art. 6 (1) lit. f DSGVO. The analysis processes initiated by the social networks may be based on different legal bases, which are to be specified by the operators of the social networks (e.g. consent within the meaning of Art. 6 para. 1 lit. a DSGVO).
Responsible person and assertion of rights
If you visit one of our social media sites (e.g. Facebook), we are jointly responsible with the operator of the social media platform for the data processing operations triggered during this visit. In principle, you can assert your rights (information, correction, deletion, restriction of processing, data portability and complaint) both vis-à-vis us and vis-à-vis the operator of the respective social media portal (e.g. vis-à-vis Facebook).
Please note that despite the joint responsibility with the social media portal operators, we have no full influence on the data processing operations of the social media portals. Our options are largely determined by the corporate policy of the respective provider.
Storage duration
The data collected directly by us via the social media presence will be deleted from our systems as soon as the purpose for storing it no longer applies, you request us to delete it, revoke your consent to store it, or the purpose for storing the data no longer applies. Stored cookies remain on your terminal device until you delete them. Mandatory legal provisions - in particular retention periods - remain unaffected.
We have no influence on the storage period of your data, which is stored by the operators of the social networks for their own purposes. For details, please contact the operators of the social networks directly (e.g. in their privacy policy, see below).
Plugin, tools and social networks in detail
Google Maps
This site uses the map service Google Maps via an API. The provider is Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
To use the functions of Google Maps, it is necessary to store your IP address. This information is usually transferred to a Google server in the USA and stored there. The provider of this site has no influence on this data transmission.
The use of Google Maps is in the interest of an appealing presentation of our online offers and an easy location of the places indicated by us on the website. This represents a legitimate interest within the meaning of Art. 6 para. 1 lit. f DSGVO.
More information on the handling of user data can be found in Google's privacy policy: https://policies.google.com/privacy?hl=de&fg=1.
We have a profile on Facebook. The provider is Facebook Inc., 1 Hacker Way, Menlo Park, California 94025, USA. Facebook is certified in accordance with the EU-US Privacy Shield.
You can adjust your advertising settings independently in your user account. To do so, click on the following link and log in: https://www.facebook.com/settings?tab=ads
For details, please refer to Facebook's privacy policy: https://www.facebook.com/about/privacy/
Use of Facebook Remarketing
Our website supports ad impressions on Facebook (Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA - "Facebook") and uses so-called "remarketing technologies" for this purpose. If you are a user of Facebook and visit our site or are interested in offers, you will be made aware of us or our offers through targeted advertisements on Facebook. The basis for these advertisements was your surfing and usage behavior on our website, which was transmitted directly to the Facebook servers and assigned to your user account there, using cookies and your IP address.
If you do not want this form of targeted advertising via Facebook Remarketing, you can switch it off. To do this, you must use Facebook's opt-out for ads based on remarketing or block the cookie use by third-party providers by using the corresponding deactivation option for these network ads. You can find a link for this here: https://www.facebook.com/settings/?tab=ads#_=_
Further information on this, in particular on the collection and use of data by Facebook and the rights to which you are entitled, can be found at
https://www.facebook.com/about/privacy/
https://www.facebook.com/privacy/explanation resp.: https://www.facebook.com/ads/website_custom_audiences/
We have a profile on Instagram. The provider is Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA. For details on how they handle your personal data, please refer to Instagram's privacy policy: https://help.instagram.com/519522125107875
YouTube
We maintain a channel on the video platform Youtube. The provider is Google Inc, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA. Google has been certified in accordance with the EU-US Privacy Shield.
You can adjust your advertising settings independently in your user account. To do so, click on the following link and log in: https://adssettings.google.com/authenticated
For details, see Google's privacy policy: https://policies.google.com/privacy
Ordering goods via the online store
The data you enter to create a customer account with us will be stored. Also stored is the data you enter when ordering goods via the online store.
As a rule, the following data is required for the creation of a customer account or the processing of an order for goods: name, postal address, e-mail address and a password for the customer account. In addition, there is the voluntary input option for the following data: Telephone number. In addition, there is the possibility to subscribe to our newsletter.
All data entered by you will be transmitted encrypted. The password for your customer account is immediately stored encrypted and is not visible to us.
When you place an order, the payment method you choose will be stored. The data or bank details you provide when placing an order are sent directly and encrypted to the respective payment service provider or credit company and are not stored by us. We receive a payment release or rejection from the payment service provider or credit company, this information is stored by us.
Details on the encryption used can be found here: https://ssl.de/ssl.html
The aforementioned personal data are hereinafter referred to as "customer data". The storage of the customer data takes place directly in the database on our servers in Germany.
This stored customer data is required and used by us for the processing of the specific order.
By entering your customer data, you have given us permission to use it. You can revoke this consent at any time with effect for the future. You can access the revocation form here. If the revocation is made within an order processing, it may cause problems with the order processing.
We will not pass on your customer data unless we are obliged to do so by law, namely to law enforcement agencies or courts. An exception to this is address data, which we pass on at short notice to the shipping company that delivers the goods you have ordered to you, solely for the purpose of notifying you of shipment. These third-party service providers have access to personal information needed to perform their functions. However, they are not allowed to use it for any other purpose. In addition, they are required to treat the information in accordance with this Privacy Policy and relevant data protection laws.
Outside of order processing, customer data is only used by us for the creation and dispatch of our newsletter, insofar as you have subscribed to it. The subscription to the newsletter was made by checking the appropriate box when ordering. You can unsubscribe from the newsletter at any time by sending an e-mail to info@petromax.de.
Our e-mail newsletters are sent via the technical service provider "Klaviyo", 225 Franklin St, Boston, MA 02110, USA (http://www.klaviyo.com/), to whom we pass on the data you provided when registering for the newsletter. This transfer takes place in accordance with Art. 6 Para. 1 lit. f DSGVO and serves our legitimate interest in using an effective advertising, secure and user-friendly newsletter system. Registration for the newsletter is basically voluntary and not a prerequisite for a purchase from us. In addition, we send our newsletters according to the double opt-in procedure, which means that we first send an e-mail to you asking for confirmation to subscribe to the newsletter. Only after this confirmation do we store your e-mail data for the purpose of sending the newsletter. Please note that your data is usually transferred to a Klaviyo server in the USA and stored there.
Klaviyo uses this information to send the newsletter on our behalf. Klaviyo does not use the data of our newsletter recipients to write to them itself or to pass it on to third parties.
To protect your data in the USA, we have a data processing agreement with Klaviyo in which Klaviyo undertakes to protect the data of our users, to process it on our behalf in accordance with its data protection provisions and, in particular, not to pass it on to third parties.
You can view Klaviyo's privacy policy here: https://www.klaviyo.com/privacy
Your contact options or visit
Your contact by mail
If you send us a letter, we store the sender's details given in your letter and, if applicable, other personal data that you have given us with this document.
We process your personal data for the respective purpose of your request and store this data according to one of the following categories:
- We dispose of unsolicited advertising or spam immediately after recognition and possibility.
- We retain solicited advertisements and other information (e.g., newsletters) for an indefinite period of time in order to conduct research or track historical developments.
- Applications: see section "Information for applicants".
- We keep commercial letters (e.g. inquiries, offers or delivery bills) for six full calendar years, starting from the beginning of the next year, due to legal regulations (German Fiscal Code and German Commercial Code as well as other regulations).
- We keep financial letters (e.g. invoices) for ten full calendar years, starting from the beginning of the next year, due to legal regulations (German Fiscal Code and German Commercial Code).
Your contact by e-mail
When you contact us by e-mail, we store your sender e-mail address, the e-mail servers involved in the communication, and the times of sending. Depending on the type of information sent to us, we store your data in separate functional mailboxes and for different periods of time:
- We delete unwanted advertising or spam immediately after recognition and possibility.
- We store solicited advertisements and information (e.g., newsletters) indefinitely in order to conduct research or track historical developments.
- Applications: see section "Information for applicants".
- We store commercial letters (e.g. inquiries, offers or delivery bills) for six full calendar years, starting from the beginning of the next year, due to legal regulations (German Fiscal Code and German Commercial Code).
- We store financial letters (e.g. invoices) on the basis of statutory regulations (German Fiscal Code and German Commercial Code) for ten full calendar years, starting from the beginning of the next year.
Your contact by phone
When you call us, we store your caller number, the time of the call and how long it took for someone to answer the call. If you leave a message on our answering machine, we understandably store this as well. Calls are not automatically recorded by us.
We process your caller data for quality assurance and improvement purposes for callbacks in the event of missed calls and for statistical evaluations. Stored messages on our answering machine are deleted immediately after processing. We delete other caller data after one year.
Your data will not be passed on to other recipients unless you take part in a telephone conference. Here, an automatic exchange of the necessary caller data takes place between the telephone systems involved.
Your visit with us
When you visit us in person, we collect various data from you.
Video surveillance
When you visit our company premises or business premises, you will be recorded by our video surveillance system and your image data will be stored for a maximum period of 72h and then automatically deleted. We do this
a) as a general security precaution and would only disclose this data to third parties, in particular the security authorities, in the event of a specific suspicion of a crime.
b) Due to the participation in the procedure as "Known Shipper", because we are obliged to do so due to the security regulations for air freight shipments.
Other meetings with information exchange (business card)
If we meet at any events (e.g. trade fairs) and you give us your contact details (e.g. as a business card), we will store these in our address directories and use them for future communication. If you then no longer wish to be contacted by us, please inform us briefly by e-mail so that we can delete you from the directory or - if this is not possible or permitted - add a blocking note. In the case of an existing business relationship, the storage obligations are based on the German Commercial Code, the German Fiscal Code and other laws. See also section "Your contact by mail".
As a matter of principle, we do not pass on contact data received to third parties, unless there is a legal or contractual obligation to do so.
Contact form and applications
When using the contact form, we collect your personal data (name, e-mail address, message text) only to the extent provided by you. The data processing serves the purpose of contacting you. By sending your message, you consent to the processing of the transmitted data. The processing is based on Art. 6 (1) lit. a DSGVO with your consent.
You can revoke your consent at any time by notifying us, without affecting the lawfulness of the processing carried out on the basis of the consent up to the revocation. We will only use your e-mail address to process your request. Your data will then be deleted unless you have consented to further processing and use.
By submitting your application, you agree that we may collect your documents electronically and store them for up to 6 months after the position has been filled.
Information for employees
We process the personal data required for the establishment, implementation and termination of the employment relationship. These are primarily contact data, data on your qualifications, data from the legally required recording of working hours and all information required for the determination and settlement of your salary and in connection with statutory duties and taxes (e.g. social security contributions), as well as for the control of compliance with the statutory working time requirements and the minimum wage.
In addition, there may also be data from the area of occupational safety, company integration management and data on breaches of duty under employment contracts that have been punished ("warnings").
Furthermore, we process information about your work results as well as their evaluation, which is required, for example, for the preparation of assessments.
If you use a company pension plan offered by us, data will also be processed in this area and, if necessary, passed on to the insurers.
Future changes to our privacy policy
In order to ensure that our data protection information always complies with the current legal requirements, we reserve the right to make changes at any time. This also applies in the event that the data protection information has to be adapted due to new or revised services, for example new services, products or functions on the website or other processing activities. The new data protection information will then apply to your next visit.
Thank you for your understanding.
Revision date: 14.08.2023