1.2. The legal basics of our privacy protection is the German Federal Data Protection Act (BDSG) and the German Telemedia Act (TMG).
2. Data processing and data security
2.1. We will collect, process and use personally identifiable data beyond the scope already permitted by law and without your required further consent only to the extent necessary for the conclusion and execution of a contractual relationship, performing requests or for billing purposes.
2.2. To protect your personally identifiable data collected and processed by us from unauthorized access and abuse, we have put a number of technical and organizational security measures in place. These security measures are monitored on a regular basis and updated according to industry standard as necessary.
2.3. The legality of processing is the legitimate interest according to Art. 6(1)(f) GDPR.
3. Collection, Processing and Use of Personally Identifiable Data
3.1. Your personal data are used for the following purposes:
- The provision of our website and services to users and customers.
- Die Ensuring an efficient customer service and / or technical support. When you contact us your details will be stored in order to process the enquiry and in case additional questions arise.
- Technical notifications concerning our services.
- Sending you Newsletters and other commercial messages, if applicable and consented by you.
3.2. We pass your data on to third parties where this is necessary to enable us to fulfill our contractual obligations to you (e.g. carrying out transactions or invoicing purposes).
3.3. We use the personal information submitted in the course of the order process (e.g. name, e-mail address, address, payment information) to process and complete the order. This data is treated as confidential and is not shared with third parties who are not involved in the order, delivery and payment processes.
3.4. Users are required to register in order to place orders via the online shop. The data collected is clearly displayed on the registration form. The information includes name, postal address, telephone number, e-mail, and, in the case of repeat customers, company name and VAT ID as well. Furthermore, for security reasons, the IP-address is recorded in a protocol. The data is used to process requests and orders. Access data must be stored securely by the user and updated in the event of any changes.
4. Newsletter and commercial Information
4.1. Data is processed with your consent (Art. 6(1)(a) GDPR). You can withdraw this consent at any time by unsubscribing from the newsletter. The legality of the data processing operations already performed remain unaffected by this withdrawal.
4.2. If you wish to receive the newsletter, we require your valid e-mail address, as well as information that allows us to verify that you own the e-mail address stated, or that the e-mail address holder consents to receive the newsletter. This data is used solely for the purposes of distributing the newsletter.
4.3. Prior to sending the newsletter, the holder of the e-mail will be sent a confirmation mail in which he/she must confirm registration to receive the newsletter. Unconfirmed registrations are deleted automatically. We are not required to send a confirmatory e-mail if the e-mail address was confirmed on a previous occasion.
4.4. You can withdraw your consent to the storage of data, the e-mail address and the use thereof for the purposes of newsletter distribution at any time. The withdrawal of consent can be issued either via a link in the newsletter, via the page "Service > Newsletter > Unsubscribe" or by sending a message via one of the contact options stated above.
4.5. You also give us the consent to store your IP addresses and the time of your registration as well as its confirmation as part of the sign-up process. We are legally bound to record the log-on process so as to be able to verify that logging on is done in accordance with regulations.
4.6. Our website uses MailChimp services to send newsletters. The service provider is the Rocket Science Group LLC, 675 Ponce De Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA.
MailChimp is a service through which the sending of newsletters can be organised and analysed, among other things. When you enter data for the purpose of subscribing to the newsletter (e.g. email address), this data is saved on the MailChimp servers in the US.
MailChimp is certified under the “EU-US Privacy Shield”. The “Privacy Shield” is an agreement between the European Union (EU) and the US whose aim is to ensure that European data standards are observed in the US. https://www.privacyshield.gov/participant?id=a2zt0000000TO6hAAG
Using MailChimp, we are able to analyse our newsletter campaigns. When you open an email sent via MailChimp, a connection is made between a file contained in the email (a 'web beacon') and the MailChimp servers in the US. This enables us to determine whether or not a newsletter message has been opened and, if applicable, which links have been clicked on. In addition, technical information is also collected (e.g. time of access, IP address, browser type and operating system). This information cannot be matched to the respective newsletter recipient. It is only used for the statistical analysis of newsletter campaigns. The results of these analyses can be used to improve customisation for future newsletters in the interests of recipients.
If you do not want any analysis to be performed by MailChimp, you must unsubscribe from the newsletter. A corresponding link for this purpose is contained in each newsletter message. In addition, you can also unsubscribe from the newsletter directly on the website.
Your data that was collected by us for the purpose of newsletter subscription is saved up until the time you unsubscribe and is then deleted from our servers, as well as from the MailChimp servers, following cancellation. Data that has been saved by us for other purposes (e.g. email addresses for the login area) remains unaffected by this.
5. Server Log-Files
5.1. During every visit of our websites information about IP address, referring URL, date/time, browser version and operating system, amount and state of transferred data is stored in the web server log files.
5.2. We use the log data without any other personal or pseudonymous profiling as required by law. We only use it for the purpose of the operation, security and optimization of our service. However, we reserve the right to subsequently review the protocols in all instances in which, based on specific indications, there is justified suspicion of illegal use.
7. Google Analytics
7.1. This website uses Google Analytics, a web analytics service provided by Google, Inc. (“Google”). Google Analytics uses “cookies”, which are text files placed on your computer, to help us analyze how users use the website. The information generated by the cookie about your use of the website will be transmitted to and stored by Google on servers in the United States.
7.2. The IP-anonymisation is active on this website, which means your IP address will be truncated within the area of Member States of the European Union or other parties to the Agreement on the European Economic Area. Only in exceptional cases the whole IP address will be first transferred to a Google server in the USA and truncated there. The IP-anonymisation is active on this website.
7.3. Google will use this information on behalf of the operator of this website for the purpose of evaluating your use of the website, compiling reports on website activity for website operators and providing them other services relating to website activity and internet usage.
7.5. As an alternative to the browser Addon or within browsers on mobile devices, you can click this link in order to opt-out from being tracked by Google Analytics within this website domain in the future. An opt-out cookie will be stored on your device, which means that you'll have to click this link again, if you delete your cookies.
8. Google Maps
9. Online Presence in Social Media
9.1. We have online presences on the platforms Facebook, Instagram and YouTube. We also integrate videos from the YouTube platform and fonts ("Google Fonts") from Google. We do not store personal data from these platforms without your consent or legal basis.
9.2. A detailed description of the respective data processing of the providers of the platform itself and the possibilities of objection (opt-out) can be found directly at the providers:
Facebook (Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Irland)
Privacy statement: https://www.facebook.com/about/privacy/,
Opt-Out: https://www.facebook.com/settings?tab=ads und www.youronlinechoices.com,
Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active.
Google/YouTube (Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) Privacy statement: https://policies.google.com/privacy,
Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active.
Instagram (Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA)
Privacy statement/Opt-Out: instagram.com/about/legal/privacy/.
10. Service and Notices
10.1. In compliance with legal requirements we will at any time provide you with information on your personally identifiable data stored by us, free of charge and without undue delay. Please refer to the contact information on our website.
11.2. Please check back periodically, and especially before you provide any new personally identifiable information.
12. Appointed data protection officers
WENZA Deutschland AG, at Alte Gaswerk 5, 22761 Hamburg, Tel.: 040-42236112, Mail: datenschutz(at)wenza.de is the appointed data protection officer.
Last updated on: 04.02.2019