Data privacy statement
Section 1 Information about collecting personal data
(1) In the following, we shall provide information about the collection of personal data when using our website. Personal data is all data that personally refers to you, e.g. name, address, email addresses, user behaviour.
(2) The responsible parties according the Article 4 Para. 7 EU General Data Protection Regulation (GDPR) are ZIEHL industrie-elektronik GmbH + Co KG, Daimlerstraße 13, 74523 Schwäbisch Hall. You can reach our company data privacy coordinator at datenschutz@ziehl.de or using our postal address.
(3) This data privacy statement applies to the website and services offered by ZIEHL industrie-elektronik GmbH + Co KG but not for other websites that users may visit using links. Reference is made to the data protection regulations of the respective legal owners of these websites. We notably refer to the data protection regulations of Google Inc. for the use of the integrated map service Google Maps and Google Fonts.
(4) In the event of you getting in touch with us by email or using a contact form, the data shared by you (your email address and your name and telephone number, where necessary) shall be saved by us in order to answer your questions. We delete the data collected in this context after storage is no longer necessary or limit the processing in the event that statutory retention obligations exist.
Section 2 Your rights
(1) You have the following rights relating to us with regard to personal data concerning you:
- right to information,
- right to correction or deletion,
- right to restrict processing,
- right to oppose processing,
- right to data transferability.
(2) You also have the right to complain to the data protection regulatory authority about the processing of your personal data by us: the relevant authority and address can be selected using the following link: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html
Section 3 Collecting personal data upon visiting our website
(1) When using the website for information purposes only, meaning if you do not register or otherwise provide us with information, we only collect the personal data that your browser transmits to our server. If you want to view our website, we collect the following data, which is technically necessary for us to display our website to you and to ensure stability and security. The legal basis for this is Article 6 Para. 1 Sentence 1 Letter f GDPR.
It concerns the following data:
- IP-Adresse
- date and time of the request
- time zone difference to Greenwich Mean Time (GMT)
- content of the request (specific site)
- access status/HTTP status code
- the amount of data transferred in each case
- website from which the request comes
- browser
- operating system and its interface
- language and version of the browser software.
(2) In addition to the aforementioned data, cookies shall be stored on your computer when using our website. Cookies are small text files that are assigned and stored on your hard drive by the browser you use and through which certain information flows to the appropriate place that sets the cookie (here by us). Cookies cannot run programs or transmit viruses to your computer. Their purpose is to make the website more user-friendly and effective overall.
(3) When ordering on our website or through our shop system
You have to register as a company, in other words you have to be a business, to order on our website. Registering gives you the advantage that you can use your email address and password to log into our shop directly to place an order.
When registering, your personal data is entered into an input mask, transferred to, and stored by, us. We initially collect the following data when you place an order on our website:
- Company
- Title, forename, surname,
- valid email address with requested password and confirmation of the latter Address,
- VAT number
- House number, street, post code and town/city (you can enter a different delivery address)
This data is collected to
- identify you as a customer;
- process, fulfil and complete your order;
- correspond with you;
- invoice you;
- process potential liability claims and assert potential claims against you;
- ensure the technical administration of our website;
- manage our customer data.
You are asked to give your permission to use this data during the ordering process.
The data is processed once you have placed an order and/or registered and is required for the stated purposes and for properly processing your order and mutual fulfilment of obligations arising from the purchase agreement in accordance with Art. 6 (1) p. 1 lit. b GDPR.
The personal data collected by us for processing your order is stored until the end of the statutory retention period after which it is deleted, unless we are obliged to store it for longer periods in accordance with Art. 6 (1) p. 1 lit. c GDPR and the retention and documentation obligations under tax and commercial law (arising from the German Commercial Code (Handelsgesetzbuch – HGB), German Penal Code (Strafgesetzbuch - StGB) or German Tax Code (Abgabenordnung – AO)) or you have agreed to a longer storage period in accordance with Art. 6 (1) p.1 lit. a GDPR.
(4) Data transfer
We only transfer your personal data to third parties that are involved in the processing of the contract as our service partners, such as logistics companies engaged with deliveries and the bank engaged with processing payments and related matters. However, the scope of your personal data transferred to third parties is restricted to the absolute minimum.
Your personal data is not transferred to third parties for any other purposes than those stated above.
We only transfer your personal data to third parties if:
- you have given your explicit consent for us to do so in accordance with Art. 6 (1) p. 1 lit. a GDPR,
- the transfer is necessary to assert, execute or defend legal claims in accordance with Art. 6 (1) p. 1 lit. f GDPR and there is no reason to assume that you have a superseding interest that is worth protecting in not transferring your data,
- the law requires for the data to be transferred in accordance with Art. 6 (1) p. 1 lit. c GDPR, and
- this is permissible by law and required for processing the contractual relationship with you in accordance with Art. 6 (1) p. 1 lit. b GDPR.
You are asked to give your permission to transfer this data during the ordering process.
Please also read Section 7 “Payment service providers”.
(5) Use of cookies:
a) This website uses the following types of cookies, the scope and functionality of which are explained below:
- transient cookies (see b)
session-* - session cookie - is deleted after the visit.
__csrf_token-* - session cookie - is deleted after the visit.
x-ua-device - session cookie - is deleted after the visit. - Persistent cookies (see c).
cookieconsent_dismissed - cookie information response - is deleted after one year.
b) Transient cookies are automatically deleted when you close your browser. This notably includes session cookies. These store a so-called "session ID” with which different browser requests can be assigned to the common session. This will allow your computer to be recognised when you return to our website. These session cookies are deleted when you logout or close your browser.
c) Persistent cookies are automatically deleted after a specified period, which may vary depending on the cookie. You can delete cookies in your browser’s security settings at any time.
d) You can configure your browser settings according to your wishes and, for example, refuse the acceptance of third party cookies or all cookies. Please note that you may not be able to use the full functionality of this website.
e) We use cookies to identify you for follow-up visits if you have an account with us. Otherwise you will have to login again on each visit.
Section 4 Objection or revocation against the processing of your data
(1) If you have given your consent to the processing of your data, you can revoke this at any time. This revocation influences the permissibility of processing your personal data after you have given it to us. The legality of data processing based on the consent until revocation remains unaffected by the revocation.
(2) If we base the processing of your personal data on the balancing of interests, you may file an objection to the processing. This is the case if processing is not particularly necessary to fulfil a contract with you, which is described by us in the following description of the functions. When exercising an objection like this, we request that you explain the reasons as to why we should not process your personal data as we have done. In the event of your justified objection, we will examine the situation and either stop or adjust data processing or point out to you our compelling legitimate reasons on the basis of which we will continue processing.
(3) Of course, you can object to the processing of your personal data for advertising purposes and data analysis at any time. You can inform us about your objection to advertising using the following contact data: datenschutz@ziehl.de or by post to ZIEHL industrie-elektronik GmbH + Co KG, Daimlerstraße 13, 74523 Schwäbisch Hall, Abt. Datenschutz.
Section 5 Information obligations
In accordance with Articles. 13 and 14, we refer to our information obligations. These are available on request. Please send your request to datenschutz@ziehl.de.
Section 6 Shipping
In the context of the dispatch processing we transmit on the basis of the EU data protection basic regulation article 6 (1f) your data (name, address, if necessary email address and / or mobile telephone number, as well as further shipment-related data) to our dispatch partner DPD Germany GmbH. You can object to the transmission of additional information such as e-mail or mobile phone number both at us [datenschutz@ziehl.de] and at DPD [contradiction_predict_notification@dpd.de or with every package information via a link] at any time.
Section 7 Payment service providers
(1) PayDirekt
Information on payments made through paydirekt, a service provided by paydirekt GmbH, Hamburger Allee 26-28, 60486 Frankfurt am Main, Germany. You have to first register with paydirekt to use this service (“participant”).
When making payment at the end of an order, you are transferred to the paydirekt website. You can read how your data is processed by paydirekt during the payment process at https://www.paydirekt.de/agb/index.html, particularly in Section 2.
paydirekt transfers the following data to us upon successful transaction:
- personal details of the participant (surname, forename)
- date and time of payment authorisation
- amount paid
- transaction ID
When accessing the paydirekt website and/or this service, paydirekt states that cookies and tokens are stored on your device to create more user-friendly, effective and secure content. paydirekt also uses analysis tools to regularly improve its content and rectify errors. For further information go to https://www.paydirekt.de/agb/index.html where you can also block paydirekt from installing webtracking cookies through a corresponding opt-out.
We process the data for the purpose of completing the payment process and performing the agreement.
Art. 6 (1) lit. b) GDPR forms the legal basis for the data processing activities. We only store the data for as long as required to implement and process your order and comply with the mandatory retention periods.
(2) GiroPay
Information on payments made through Giropay, a service provided by giropay GmbH, An der Welle 4, 60322 Frankfurt am Main, Germany ("Giropay GmbH").
Once you have confirmed your data on our website, you will be asked to pay via Giropay. To complete the payment (after clicking the link), you are then transferred to the Giropay website where you can select your bank. You are then transferred to your bank’s website where you can conclude the transaction. We do not process any of your data during this process.
Giropay sends us a transaction ID selected by the online provider as part of Giropay’s confirmation that the bank transfer has been successfully initiated.
We process the data for the purpose of completing the payment process and performing the agreement.
Art. 6 (1) lit. b) GDPR forms the legal basis for the data processing activities. We only store the data for as long as required to implement and process your order and comply with the mandatory retention periods.
(3) PayPal
When paying with PayPal, PayPal credit card, PayPal direct debit or PayPal “Pay after Delivery", we transfer your data to PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, 2449 Luxembourg ("PayPal"), during the payment process. PayPal reserves the right to perform a credit check for payments made with PayPal credit card, PayPal direct debit or PayPal “Pay after Delivery”. PayPal uses the results of the credit check regarding the statistical probability of payment default for deciding on whether or not to provide the respective payment type. The credit check information may contain probability values (so-called scores). Any scores that flow into the result of the credit check are based on scientifically recognised, mathematical-statistical methods. Data such as address details is used for calculating the score. For further information on data protection, please read the PayPal data protection policy at https://www.paypal.com/de/webapps/mpp/ua/privacy-full