Privacy Statement

General and Legal information

Welcome!

Thank you for your interest in us.

As responsible entity our company takes the protection of your personal data very seriously and dedicates this section to our data protection policy and the processing of personal data. Here you will find all the information concerning: The processing of your data, your rights, the identity of the entity responsible for the processing of the data, the department to contact and the persons to whom you can address your questions or complaints.

We invite you to read this information on data protection carefully.

Main terms and principles

Personal data is individual information about the personal or material circumstances of a specific or determinable natural person. In addition to name, address and telephone number, it is data that describes a person more precisely for instance by providing information about the person’s digital data traces. This information is digital data that each of us leaves on the World-Wide-Web by using the Internet. This person and his or her data are also called "data subject".

The processing of your (personal) data includes all activities, from collection, storage, use, modification, transmission or transfer up to deletion. It does not matter whether this processing is carried out electronically, i. e. by computer, or in another way, for example on paper.

A specific data processing of your personal data is also referred to as a "processing activity". Each processing activity follows a specific processing purpose that must be designated and requires, among other things, a specific legal basis that must also be stated, otherwise the processing is not permitted.

The responsible entity is who ultimately determines the purposes and means of the processing of your data. It does not matter whether the responsible is a person, a company, an association, a public body or other. The responsible may decide on the purposes and means of the processing alone, jointly with others or on behalf of a third party.

Your contact options

The responsible entity for the processing of your personal data is :

Petromax GmbH
Sudenburger Wuhne 61
39116 Magdeburg
Fax: +49 (0) 391 / 5568 46 01
E-mail: info@petromax.de

If you have any questions regarding this data protection information, the data we process about you or subsequent processing activities, please contact our designated data protection officer by e-mail:

Mr. Matthias Kunert
cubeoffice GmbH & Co KG
Fichtestr. 29a
39112 Magdeburg
Telephone: +49 391 61128-69
E-mail: datenschutz@cubeoffice.de

In the event of a breach of data protection legislation, you as the data subject have a legal right of appeal to the competent supervisory authority. The supervisory authority responsible for our enterprise is the Data Protection Officer of the State of Saxony-Anhalt :

Data Protection Commissioner of the State of Saxony-Anhalt
Represented by the office manager Mr. Albert Cohaus
Leiterstraße 9
39104 Magdeburg
poststelle@lfd.sachsen-anhalt.de

A list of all state data protection officers and their contact details can be found at the following link:

https://www.bfdi.bund.de/EN/Service/Anschriften/Laender/Laender-node.html 

Your rights as a data subject

As a data subject, you basically have the following rights regarding your (personal) data:

request for information about the data stored about you,
request to correct or complete inaccurate data
request for deletion of the data if, for example, the data is no longer necessary for the intended use or if there is (no longer) a legal basis for processing,
request for (time-limited) restriction of data processing, e. g. if the accuracy of the data is disputed or if the processing is presumed to be unlawful,
opposition to further processing of your data by us,
request for the delivery of a copy of the data in a reusable electronic format, insofar as this does not affect the rights and freedoms of other persons,
revocation of your consent of use at any time and request to be subsequently "forgotten" if the use of your data is based on a previously given consent.
Filing a complaint with the competent supervisory authority (see above) if you believe that the processing of your data infringes data protection legislation, or your data protection rights.

If you have any questions or requests for information, or if you wish to exercise your rights in general, please contact our data protection officer, Matthias Kunert (datenschutz@cubeoffice.de), by e-mail.

Please allow 14 days for you request to be processed.

Processing of your personal data

How we collect your data and what data we process
We process the personal data that you make available to us when you contact us in writing or directly by e-mail. In addition, we process your personal data when you provide optional information. We may also process the personal data you provide to us, for example to verify your identity.
Purpose
We process the personal data that you provide to us (the exact data depends on the information you include in your request, usually this is your name, contact details, information about your use of our site and the request itself) in order to process and respond to your request in a concrete way.
Legal basis for processing
The processing of your personal data is necessary for us to comply with a legal obligation to which we are subject: We are legally obliged to respond to your request and process your personal data accordingly.

How long do we keep your personal data?

We keep your personal data until we have responded to your request. Thereafter, your personal data is blocked until the end of the respective limitation period for the maintenance of legal claims (i. e. we block your data for all further uses). After the expiry of this limitation period (3 years), your data will be completely deleted.

Data processing on our website

General

When you visit our website, various data about you are processed in order to analyse the use of our services and our information, to improve them and to be able to identify and correct any problems.

Cookies

The Internet pages partly use so-called cookies. Cookies do not cause any damage to your computer and do not contain viruses. Cookies serve to make our offer more user-friendly, more effective and safer. Cookies are small text files that are stored on your computer and saved by your browser.

Most of the cookies we use are so-called "session cookies". They are automatically deleted at the end of your visit. Other cookies remain stored on your terminal device until you delete them. These cookies allow us to recognize your browser on your next visit.

You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general and activate the automatic deletion of cookies when closing the browser. If cookies are deactivated, the functionality of this website may be limited.

Cookies that are required to carry out the electronic communication process or to provide certain functions that you have requested (e.g. shopping cart function) are stored on the basis of Art. 6 (1) lit. f DSGVO. The website operator has a legitimate interest in storing cookies for the technically error-free and optimized provision of its services. As far as other cookies (e.g. cookies to analyze your surfing behavior) that are stored are concerned, they are treated separately in this privacy policy.

Server log files

When you visit our website, information is collected and stored in so-called server log files, which your browser automatically transmits to us. These are:

browser type and version
operating system used
referral URL
(original website from which the user came to our website or file), hostname of the computer accessing the site
server request time and
the IP address.

This data is processed on the servers of our Internet service provider. We do not aggregate this data with other data sources. This processing activity is not a basis for automated decision-making (profiling). We reserve the right to check this data at a later date if we become aware of concrete indications of illegal use.

The legal basis for the data processing is our legitimate interest after considering all risks (see Art. 6 para. 1 lit. f DSGVO). Our interest here is: Making our company known to the public, advertising on behalf of our company, providing information about our range of services and supporting the initiation of business contacts by publishing suitable contact options for interested parties and business partners, improving the user-friendliness of our information provision.

The storage period is one year.

SSL or TLS encryption

For security reasons and to protect the transmission of confidential content, such as orders or requests that you send to us as site operator, this site uses SSL or TLS encryption. You recognize an encrypted connection by the fact that the address line of the browser changes from

"http://" to "https://" and the padlock symbol in your browser line.

If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

Contact form

If you send us inquiries via the contact form, your data from the contact form, including the contact data you have provided there, will be stored by us.

The processing of the data entered in the contact form is thus carried out exclusively on the basis of our legitimate interest for the purpose of processing the request and in the event of follow-up questions (Art. 6 para. 1 lit. f DSGVO).

The data you entered in the contact form will remain with us until you request us to delete it or the purpose for storing the data no longer applies (e.g., after we have completed the processing of your request). Mandatory legal provisions - in particular retention periods - remain unaffected.

Links to other websites

This website also contains links to websites of other providers to which our data protection notice does not extend. As a rule, we have no influence on the content and compliance with data protection regulations by these providers and therefore ask you to inform yourself about the guidelines applicable there when visiting these websites.

Analysis tools and advertising

WordPress Stats

This website uses the WordPress tool Stats to statistically analyse visitor traffic. The provider is Automattic Inc, 60 29th Street #343, San Francisco, CA 94110-4929, USA.

WordPress Stats uses cookies that are stored on your computer and allow an analysis of the use of the website. The information generated by the cookies about the use of our website is stored on servers in the USA. Your IP address is anonymized after processing and before storage.

"WordPress Stats" cookies remain on your terminal device until you delete them.

The storage of "WordPress Stats" cookies is based on Art. 6 para. 1 lit. f DSGVO. The website operator has a legitimate interest in the anonymized analysis of user behaviour in order to optimise both its web offering and its advertising.

You can set up your browser in a way that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general and activate the automatic deletion of cookies when closing the browser. When deactivating cookies, the functionality of our website may be limited.

You can object to the collection and use of your data for the future by setting an opt-out cookie in your browser by clicking on this link: https://www.quantcast.com/opt-out/ .

If you delete the cookies on your computer, you must set the opt-out cookie again.

Google Analytics

This website uses functions of the web analysis service Google Analytics in order to analyse user behaviour when visiting the website and to be able to improve the user-friendliness of the website. The provider is Google Inc,1600 Amphitheatre Parkway Mountain View, CA 94043, USA.

Google Analytics uses so-called "cookies". These are text files that are stored on your computer and enable an analysis of your use of the website. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there.

You can prevent the collection of your personal data (including your IP address) and the processing of this data by Google by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=en .

For more information on how Google Analytics handles user data, please see Google's privacy policy: https://policies.google.com/privacy?hl=en&fg=1.

Google reCAPTCHA

We use "Google reCAPTCHA" (hereinafter "reCAPTCHA") on this website. The provider is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.

The purpose of reCAPTCHA is to verify whether data entry on this website (e. g. in a contact form) is made by a human or by an automated program. For this purpose, reCAPTCHA analyses the behaviour of the website visitor based on various characteristics. This analysis begins automatically as soon as the website visitor enters the website. For the analysis, reCAPTCHA evaluates various information (e. g. IP address, time spent by the website visitor on the website or mouse movements made by the user). The data collected during the analysis is forwarded to Google.

The reCAPTCHA analyses run entirely in the background. Website visitors are not notified that an analysis is taking place.

The storage and analysis of the data is based on Art. 6 para. 1 lit. f DSGVO. The website operator has a legitimate interest in protecting its web offers from abusive automated spying and from SPAM. As long as corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a DSGVO; the consent can be revoked at any time.

For more information on Google reCAPTCHA, please refer to the Google Privacy Policy and the Google Terms of Use under the following links:

https://policies.google.com/privacy?hl=en  and

https://policies.google.com/terms?hl=en .

Data processing in our social networks

General

We maintain publicly accessible profiles on social networks. The social networks used by us in particular can be found below.

Social networks such as Facebook, Google+, etc. can generally analyse your user behaviour extensively when you visit their website or a website with integrated social media content (e. g. Like buttons or advertising banners). Visiting our social media sites triggers numerous processing operations relevant to data protection. In particular:

If you are logged into your social media account and visit our social media site, the operator of the social media portal can assign this visit to your user account. However, your personal data may also be collected under certain circumstances if you are not logged in or do not have an account with the respective social media portal. In this case, this data collection takes place, for example, via cookies that are stored on your end device or by recording your IP address.

With the help of the data collected in this way, the operators of the social media portals can create user profiles in which your preferences and interests are stored. In this way, you can be shown interest-based advertising inside and outside the respective social media site. Provided you have an account with the respective social network, the interest-based advertising may be displayed on all devices on which you are or were logged in.

Please also note that we cannot track all processing on the social media portals. Depending on the provider, further processing operations may therefore be carried out by the operators of the social media portals. For more information, please refer to the terms of use and data protection provisions of the respective social media portals.

Legal basis

Our social media sites are designed to ensure the most comprehensive presence possible on the internet. This is a legitimate interest within the context of Art. 6 (1) lit. f DSGVO. The analysis processes initiated by the social networks may be based on deviating legal bases to be specified by the operators of the social networks (e. g. consent within the context of Art. 6 (1) lit. a DSGVO).

Responsible party and assertion of rights

If you visit one of our social media sites (e.g. Facebook), we are jointly responsible with the operator of the social media platform for the data processing operations triggered during this visit. In principle, you can assert your rights (information, correction, deletion, restriction of processing, data portability and complaint) both vis-à-vis us and vis-à-vis the operator of the respective social media portal (e.g. vis-à-vis Facebook).

Please note that despite the joint responsibility with the social media portal operators, we do not have full influence on the data processing operations of the social media portals. Our options are largely determined by the corporate policy of the respective provider.

Storage period

The data collected directly by us via the social media site will be deleted from our systems as soon as the purpose for storing it no longer applies, you request us to delete it or you revoke your consent to store it. Stored cookies remain on your terminal device until you delete them. Mandatory legal provisions - in particular retention periods - remain unaffected.

We have no influence on the storage period of your data, which is stored by the operators of social networks for their own purposes. For more information, please contact the operators of the social networks directly (e. g. in their privacy policy, see below).

Plugin, tools and social networks in detail

Google Maps

This site uses the Google Maps mapping service via an API. The provider is Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA.

To use the functions of Google Maps, it is necessary to save your IP address. This information is usually transmitted to a Google server in the USA and stored there. The provider of this site has no influence on this data transmission.

The use of Google Maps takes place in the interest of an attractive presentation of our online offers and easy identification of the places we have indicated on the site. This constitutes a legitimate interest within the context of Article 6(1)(f) GDPR.

Further information on the handling of user data can be found in Google's privacy statement: https://policies.google.com/privacy?hl=en&fg=1.

Facebook

We have a profile on Facebook. The provider is Meta Platforms, Inc., 1 Hacker Way, Menlo Park, California 94025, USA. Facebook is certified in accordance with the EU-US Privacy Shield.

You can independently adjust your advertising settings in your user account. To do this, click on the following link and log in: https://www.facebook.com/settings?tab=ads .

For more information, please refer to Facebook's privacy policy: https://www.facebook.com/about/privacy/ .

Use of Facebook Remarketing

Our website supports ad impressions on Facebook (Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA - "Facebook") and uses so-called "remarketing technologies" for this purpose. If you are a Facebook user and have visited our site or are interested in our offers, you will be made aware of us or our offers through targeted advertisements on Facebook. The basis for these advertisements was your surfing and usage behaviour on our website, which was transmitted directly to the Facebook servers and assigned to your user account there, using cookies and your IP address.

If you do not want this form of targeted advertising via Facebook Remarketing, you can switch it off. To do this, you must use Facebook's opt-out for ads based on remarketing or block the cookie use by third-party providers by using the corresponding deactivation option for these network ads. You can find a link for this here: https://www.facebook.com/settings/?tab=ads#_=_ 

Further information on this, in particular on the collection and use of data by Facebook and the rights to which you are entitled, can be found at

https://www.facebook.com/about/privacy/ 

https://www.facebook.com/privacy/explanation  or:

https://www.facebook.com/ads/website_custom_audiences/ .

Instagram

We have a profile on Instagram. The provider is Meta Platforms, Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA. For more information on how they handle your personal data, please refer to Instagram's privacy policy: https://help.instagram.com/519522125107875 

YouTube

We maintain a channel on the video platform YouTube. The provider is Google Inc, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA. Google has a certification according to the EU-US Privacy Shield.

You can independently adjust your advertising settings in your user account. To do so, click on the following link and log in: https://adssettings.google.com/authenticated 

For more information, please refer to Google's privacy policy: https://policies.google.com/privacy 

Ordering goods via the online store

The data you enter to create a customer account with us will be stored. What also gets stored is the data you enter when ordering goods via the online shop.

As a rule, the following data is required to create a customer account or to process an order for goods: name, postal address, e-mail address and a password for the customer account. In addition, there is the voluntary input option for the following data: Telephone number. Moreover, there is the possibility to subscribe to our newsletter.

All data entered by you will be transmitted in encrypted form. The password for your customer account is immediately stored in encrypted form and is not visible to us.

When you place an order, the payment method you have chosen will be stored. The data or bank details you provide when placing an order are sent directly and encrypted to the respective payment service provider or credit company and are not stored by us. We receive a payment release or rejection from the payment service provider or credit company and this information is stored by us.

More information on the encryption used can be found here: https://ssl.de/ssl.html. 

The aforementioned personal data is hereinafter referred to as "customer data". The customer data is stored directly in the database on our servers in Germany.

This stored customer data is required and used by us for the processing of the specific order.

By entering your customer data, you have given us your consent to use it. You can revoke this consent at any time with effect for the future. You can access the revocation form here. If the revocation is made within an order processing, it may cause problems with the order processing.

Your customer data (except for your address data to the shipping company that delivers the goods ordered by you to you) will not be disclosed by us, unless we are required by law to surrender or provide information, namely to law enforcement agencies or courts.

Outside of order processing, customer data is only used by us for the creation and dispatch of our newsletter, as long as you have subscribed to it. You have subscribed to the newsletter by ticking the appropriate box when placing your order. You can unsubscribe from the newsletter at any time by sending an e-mail to info@petromax.de.

Your contact options or your visit

Your contact by letter

If you send us a letter, we store the sender's details provided in your letter and, if applicable, other personal data that you have provided to us with this document.

We process your personal data for the respective purpose of your request and store this data as per one of the following categories:

We dispose of unsolicited advertising or spam immediately after detection and possibility.
We retain desired advertising and other information (e. g. newsletters) for an indefinite period of time in order to conduct research or track historical developments.
Applications: see section "Information for applicants".
We keep commercial letters (e. g. inquiries, offers or delivery bills) for six full calendar years, starting from the beginning of the next year, due to legal regulations (German Fiscal Code and German Commercial Code as well as other regulations).
Financial documents (e. g. invoices) are kept for ten full calendar years, starting from the beginning of the next year, due to legal regulations (tax code and HGB).

Contacting us by e-mail

If you contact us by e-mail, we store your sender e-mail address, the e-mail servers involved in the communication and the times of sending. Depending on the type of information sent to us, we store your data in separate functional mailboxes and for different periods of time:

We delete unwanted advertising or spam immediately after recognizing it and if possible.
We store desired advertising and information (e. g. newsletters) indefinitely in order to conduct research or track historical developments.
Applications: see section "Information for applicants".
We store commercial letters (e. g. inquiries, offers or delivery bills) for six full calendar years, starting from the beginning of the next year, due to legal requirements (German Fiscal Code and German Commercial Code).
Financial documents (e. g. invoices) are stored for ten full years, starting from the beginning of the next year, due to legal regulations (tax code and HGB).

Your contact by telephone

When you call us, we store your caller number, the time of the call and how long it took for someone to answer the call. If you leave a message on our answering machine, we understandably store this as well. Calls are not automatically recorded by us.

We process your caller data for quality assurance and improvement purposes, for call-backs in the event of missed calls, and for statistical evaluations. Stored messages on our answering machine are deleted immediately after processing. We delete other caller data after one year.

Your data will not be passed on to other recipients unless you participate in a telephone conference. In this case, the necessary caller data is automatically exchanged between the telephone systems involved.

Your visit to us

When you visit us in person, we collect various data from you.

Video surveillance

When you visit us, you will be recorded on our company premises or in our business premises by our video surveillance system and your image data will be stored for a maximum period of 72h and then automatically deleted. We do this

a) as a general security precaution and would only pass on this data to third parties, in particular the security authorities, in the event of a concrete suspicion of a crime.

b) due to the participation in the procedure as "known consignor “, we are obliged to do so due to the security regulations for air cargo shipments.

Other meetings with exchange of information (business card)

If we meet at any events (e. g. trade fairs) and you give us your contact details (e. g. a business card), we will store these in our address directories and use them for future communication. If you then no longer wish to be contacted by us, please inform us briefly by e-mail so that we can delete you from the directory or - if this is not possible or permitted - add a blocking note. In the case of an existing business relationship, the storage obligations are based on the German Commercial Code, the German Fiscal Code and other laws. Please also refer to the section "Contacting us by e-mail".

As a matter of principle, we do not pass on contact information received to third parties unless there is a legal or contractual obligation to do so.

Contact form and applications

When using the contact form, we collect your personal data (name, e-mail address, message text) only to the extent provided by you. The data processing serves the purpose of contacting you. By sending your message, you consent to the processing of the transmitted data. The processing is based on Art. 6 (1) lit. a DSGVO with your consent.

You can revoke your consent at any time by notifying us, without affecting the legality of the processing carried out on the basis of the consent until revocation. We will only use your e-mail address to process your request. Your data will then be deleted unless you have consented to further processing and use.

With your application, you agree that we may electronically record your documents and store them for up to 6 months after filling the position.

Information for employees

We process the personal data required for the establishment, implementation, and termination of the employment relationship. This is primarily contact data, data on your qualifications, data from the legally required recording of working hours and all information required for the determination and settlement of your salary and in connection with statutory duties and taxes (e. g. social security contributions), as well as for monitoring compliance with statutory working time requirements and the minimum wage.

In addition, there may also be data from the area of occupational safety, company integration management and data on breaches of duty under employment contracts that have been penalized ("warnings").

Furthermore, we process information about your work results and their evaluation, which is required, for example, for the preparation of appraisals.

If you use a company pension plan offered by us, data will also be processed in this area and, if necessary, passed on to the insurers.

Future changes to our privacy notice

In order to ensure that our data protection information always complies with current legal provisions, we reserve the right to change it at any time. This also applies if the data protection information needs to be adapted due to new or revised services, for example new services, products or functions on the website or other processing activities. The new data protection information will then apply to your new visit.

Thank you for your understanding.

Revision date : 13.01.2023

Back to homepage