Data Protection

We process the data of our customers in accordance with the data protection regulations of the Federal Government (Data Protection Act, DSG) and the EU GDPR as part of the ordering processes in our online store in order to enable them to select and order the selected products and services as well as their payment and delivery or processing.

The processed data includes master data (inventory data), communication data, contract data, payment data and the persons affected by the processing include our customers, interested parties and other business partners. The processing is carried out for the purpose of providing contractual services in the context of operating an online store, billing, delivery and customer service. In this context, we use session cookies, e.g. to store the contents of the shopping cart, and permanent cookies, e.g. to store the login status.

The processing is carried out on the basis of Art. 6 para. 1 lit. b (execution of order processes) and c (legally required archiving) GDPR. The data marked as required are necessary for the establishment and fulfillment of the contract. We only pass on the data to third parties in the context of delivery, payment or within the scope of legal permissions and obligations. The data is only processed in third countries if this is necessary to fulfill the contract (e.g. at the customer's request for delivery or payment).

Users can optionally create a user account in which they can view their orders in particular. As part of the registration process, users are provided with the required mandatory information. User accounts are not public and cannot be indexed by search engines, e.g. Google.

If users have terminated their user account, their data relating to the user account will be deleted, provided that their retention is required for commercial or tax law reasons in accordance with Art. 6 para. 1 lit. c GDPR. Information in the customer account is retained until it is deleted with subsequent archiving in the event of a legal obligation. It is the responsibility of users to save their data in the event of termination before the end of the contract.

In the context of registration and new registration as well as the use of our online services, we store the IP address and the time of the respective user action. This data is stored on the basis of our legitimate interests and those of the users in protection against misuse and other unauthorized use. This data is not passed on to third parties unless it is necessary to pursue our claims or there is a legal obligation to do so in accordance with Art. 6 para. 1 lit. c GDPR.

The deletion takes place after the expiry of legal warranty and comparable obligations, the necessity of storing the data is reviewed at irregular intervals. In the case of legal archiving obligations, the deletion takes place after their expiry.