We take the protection of your personal data very seriously and therefore follow high security standards and comply with the requirements of data protection laws. In the following, we will inform you about the type of data that is collected during your visit, for what purpose they are collected and how long they are stored.
1. Name and contact details of the controller
This data protection information applies to data processing by:
CNC BOTE
Johann Demmel
Zechenstraße 10
86971 Peiting
Germany
Telephone: +49 (0) 8861 6943110
E-mail: service@cncbote.de
2. Data protection officer
Mr Julian Demmel, e-mail: demmel.julian@cncbote.de
3. General information on data processing
As with every website, our server automatically and temporarily collects and stores the following information in the server log files, which is transmitted by the browser, unless you have disabled this:
- IP address of the requesting computer
- file request of the client
- the http response code
- the amount of data transferred in each case
- the internet page from which you are visiting us (referrer URL),
- date and time of the server request
- browser type, version and language
- the operating system used by the requesting computer
The server log files are not analysed on a personal basis. At no time can the provider assign this data to specific individuals. This data is not combined with other data sources.
4. Data processing upon conclusion of the contract
If you register with our website and/or conclude a further contract with us, we will process the data required for the conclusion, execution or termination of the contract with you. This includes:
- First name, surname
- Company name
- Invoice and delivery address
- E-mail address
- Billing and payment details
- Telephone number
The legal basis for this is Article 6(1)(a) and (b) of the GDPR, i.e. you provide us with the data on the basis of the respective contractual relationship (e.g. management of your customer account, processing of a purchase contract) between you and us. In addition, we are obliged by law to process your e-mail address in the event of a purchase via our websites/applications, in accordance with the German Civil Code (BGB), which requires us to send an electronic order confirmation (Article 6, paragraph 1, letter c) GDPR).
We store the data collected for the purpose of processing the contract for the duration of the contract and until the expiry of the statutory or possible contractual warranty and guarantee rights. After this period has expired, we retain the information on the contractual relationship required under commercial and tax law for the legally specified periods. For this period, the data will be reprocessed solely in the event of an audit by the tax authorities.
The following data processing is also required to process a purchase contract via our website:
Your payment details will be passed on to the payment service provider we have commissioned to process the payment(s). We will pass on your delivery address details to the logistics company and shipping partner we have commissioned. To ensure that the goods are delivered according to your wishes, we will forward your e-mail address and, if applicable, your telephone number to the logistics company and/or shipping partner commissioned by us to take over the delivery. These will, if necessary, contact you in advance to coordinate the details of the delivery with you. The respective data will be transmitted solely for the respective purposes and deleted again after delivery has been made.
5. Web analysis
We use Google Analytics on our website, a web analytics service provided by Google Inc. (“Google”). Google Analytics uses so-called “cookies”, which are text files placed on your computer, to help the website analyse how users the website. This includes, for example, information about the operating system, browser, IP address, the website you previously visited (referrer URL) and the date and time of your visit to our website. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. However, if IP anonymisation is activated on this website, however, your IP address will be truncated by Google beforehand within member states of the European Union or in other states party to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address transferred to a Google server in the USA and shortened there. Google will use this information on behalf of the operator of this website to analyse your use of the website, to compile reports on website activity and to provide the website operator with other services relating to website and internet usage. The IP address transmitted by your browser as part of Google Analytics will not be merged with other data from Google.
You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website . You can also prevent the data generated by the cookie and related to your use of the website (including your IP address) from being sent to Google, and the processing of this data by Google, by downloading and installing the download and install the browser plug-in available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de
We use Google Analytics to analyse and regularly improve the use of our website. The statistics we obtain enable us to improve our offering and make it more interesting for you as a user. For the exceptional cases in which personal data is transferred to the USA, Google has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework. The legal basis for the use of Google Analytics is Art. 6 para. 1 sentence 1 lit. f GDPR.
Information from the third-party provider: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001. Terms of service: http://www.google.com/analytics/terms/de.html, Overview of data protection: http://www.google.com/intl/de/analytics/learn/privacy.html, and the data protection declaration: http://www.google.de/intl/de/policies/privacy.
6. Online presence and website optimisation
6.1 Use of cookies
We use cookies on various pages to make visiting our website more attractive and to enable the use of certain functions, as well as to statistically record the use of our website. Cookies are small text files that your browser automatically creates and that are stored on your end device (laptop, tablet, smartphone, etc.) when you visit our site. Cookies do not cause any damage to your end device, do not contain any viruses, Trojans or other malware. Information is stored in the cookie that is specific to the device you are using. However, this does not mean that we will immediately know your identity.
Most of the cookies we use are deleted at the end of the browser session (so-called session cookies). These enable us to offer you, for example, the cross-page shopping basket display, where you can see how how many items are currently in your shopping basket and how much your current purchase value is. Other cookies remain on your computer and enable us to recognise your computer the next time you visit (so-called permanent or session-spanning cookies). These cookies in particular help to make our services more user-friendly, effective and secure. Thanks to these files, it is possible, for example, to display information on the page that is specially tailored to your interests .
Of course, you can set up your browser so that it does not store our cookies on your device. The help function in the menu bar of most web browsers explains how to prevent your browser from accepting new cookies, how to have your browser notify you when you receive a new cookie, or how to delete all cookies that have already been received and block all further cookies.
Please proceed as follows:
In Internet Explorer:- In the “Tools” menu, select “Internet Options”.
- Click on the “Privacy” tab.
- Now you can set the security settings for the Internet zone. Here you can specify whether and which cookies should be accepted or rejected.
- Click “OK” to confirm your settings.
- In the “Tools” menu, select “Options”.
- Click on “Privacy”.
- Select “Create according to user-defined settings” from the drop-down menu.
- Now you can set whether cookies should be accepted, how long you want to keep these cookies and add exceptions for websites that you always or never want to allow to use cookies.
- Click “OK” to confirm your settings.
- Click on the Chrome menu in the browser’s toolbar.
- Now select “Settings”.
- Click on “Show advanced settings”.
- Under “Privacy”, click on “Content settings”.
- Under “Cookies” you can make the following settings for cookies:
- Delete cookies
- Block cookies by default
- Delete cookies and website data by default when you close the browser
- Allow exceptions for cookies from specific websites or domains
However, we would like to point out that in this case you may not be able to use all the functions of this website to their full extent.
If these cookies and/or the information they contain are personal data, the legal basis for data processing is Art. 6 (1) (f) GDPR. Our interest in optimising our website is justified in the sense of the aforementioned provision.
6.2. Google Conversion Tracking
We use the online advertising programme “Google AdWords” on our website and, in this context, conversion tracking (visitor action evaluation). Google Conversion Tracking is an analysis service provided by Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”). When you click on an ad placed by Google, a cookie for conversion tracking is stored on your computer. These cookies have a limited validity, do not contain any personal data and therefore do not serve to identify you personally. If you visit certain pages on our website and the cookie has not yet expired, Google and we can recognise that you clicked on the ad and were redirected to this page . Each Google AdWords customer receives a different cookie. This means that there is no possibility of cookies being tracked via the websites of AdWords customers.
The information obtained with the help of the conversion cookie is used to create conversion statistics. This tells us the total number of users who clicked on one of our ads and were redirected to a page with a conversion tracking tag . However, we do not receive any information that could be used to personally identify users. The processing is based on Art. 6 (1) lit. f GDPR, which is based on the legitimate interest in targeted advertising and analysing the effectiveness and efficiency of this advertising.
You can find Google’s data protection information on conversion tracking at https://services.google.com/sitestats/de.html.
6.3. Google Maps
We use Google Maps API, a map service provided by Google LLC (“Google”), to display an interactive map and to create directions. Google Maps is operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
By using Google Maps, information about your use of this website (including your IP address) may be transmitted to and stored by Google on servers in the United States. Google may also transfer this information to third parties if this is required by law or if third parties process this data on behalf of Google.
You have the option of deactivating the Google Maps service and thus preventing the transfer of data to Google by deactivating JavaScript in your browser. However, we would like to point out that in this case you will not be able to use the map display on our website.
The Google Privacy Policy and additional terms of use for Google Maps can be found at https://policies.google.com/privacy?hl=de&gl=en. Google also processes your personal data in the USA and has signed up to the US-EU data protection agreement “Privacy Shield” (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active)
6.4. Vimeo
Our website includes plugins from the Vimeo video portal, which is operated by Vimeo LLC, 555 West 18th Street, New York, New York 10011, USA. These plugins enable us to embed video content that we have published on Vimeo on this website.
When you visit a page on our website that has a Vimeo video embedded in it, a connection is established to the Vimeo servers and the plugin is displayed on the page by sending a message to your browser. The Vimeo server which of our pages you have visited. If you are logged into your Vimeo account, Vimeo will associate the information with your user account. If you activate a plugin on our website, e.g. by pressing the start button a video or leaving a comment, this information will be associated with your Vimeo account. You can prevent this by logging out of your Vimeo account before using the plugin.
If you do not wish to use cookies, you can block the storage of cookies or delete stored cookies by changing your browser settings or using appropriate browser add-ons remove (see point A.2.).
For more information on data processing and Vimeo’s privacy policy, please visit https://vimeo.com/privacy.
6.5. Use of web fonts
We use so-called web fonts provided by Adobe Typekit to ensure that fonts are displayed consistently. Adobe Typekit is a service that provides access to a font library and is provided by Adobe Systems Incorporated, 345 Park Avenue, San Jose, CA 95110-2704, USA (Adobe). When you visit a page, your browser loads the required web fonts into your browser cache to display texts and fonts correctly. In the course of providing the Typekit service no cookies are placed or used to provide the fonts. To provide the Typekit service, Adobe may collect information about the font that is used to identify the website itself and the associated Typekit account .
For more information, please visit the Adobe Typekit Privacy page and the Adobe Privacy Policy.
6.6. Customer account
To make things as convenient as possible for you, we offer you the option of permanently storing your personal data in a password-protected customer account.
Creating a customer account is voluntary. If you create a customer account, the data collected here will be processed on the basis of Article 6 (1) (b) of the GDPR. Once you have created a customer account, you will not need to enter your data again data entry is required. In addition, you can view and change the data stored about you in your customer account at any time.
In addition to the data requested when placing an order, you must also provide a password of your choice to set up a customer account. This password, together with your e-mail address, is used to access your customer account. Please . Please do not make them available to unauthorised third parties. Please note that you will remain logged in automatically even after leaving our website, unless you actively log out.
You have the option of deleting your customer account at any time. However, please note that this does not automatically delete the data that can be viewed in the customer account if you have placed an order with us. Your data will be will be carried out automatically after the expiry of the commercial and tax law retention periods applicable to us. The legal basis for this further data processing is Art. 6 para. 1 letter c) GDPR and Art. 6 para. 1 letter f) GDPR.
7. Payments
We process your payment information for the purpose of payment processing, e.g. when you purchase a product and/or service. Depending on the payment method, we forward your payment information to third parties (e.g. credit card payment to your credit card provider).
The legal basis for this data processing is Art. 6 para. 1 letter a), Art. 6 para. 1 letter b), GDPR and Art. 6 para. 1 letter f) GDPR.
7.1 PayPal
When you pay via PayPal, your payment data is forwarded to PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter “PayPal”) as part of the payment process. PayPal reserves the right to carry out a credit check for the payment methods credit card via PayPal, direct debit via PayPal or – if offered – “purchase on account” via PayPal, the right to obtain a credit report. PayPal uses the result of the credit check in relation to the statistical probability of default PayPal uses the result of the credit check to decide whether to provide the respective payment method. The credit check may contain probability values (so-called score values). Insofar as score values are included in the result of the credit check, these be based on a scientifically recognised mathematical-statistical procedure. Address data, among other things, is included in the calculation of the score values.
For further information on data protection, including information on the credit agencies used, please refer to PayPal’s privacy policy: https://www.paypal.com/de/webapps/mpp/ua/privacy-full
7.2 Credit card payment
If you choose to pay by credit card, the payment will be processed by the payment service provider Stripe Payments Europe Ltd, Block 4, Harcourt Centre, Harcourt Road, Dublin 2, Ireland, to whom we will pass on the information you provided during the ordering process together with the information about your order (name, address, account number, bank code, possibly credit card number, invoice amount, currency and transaction number) in accordance with Art. 6 para. 1 lit. b GDPR. The transfer of your data is carried out exclusively for the purpose of payment processing with the payment service provider Stripe Payments Europe Ltd. and only to the extent necessary for this purpose.
For more information about Stripe’s privacy policy, please visit https://stripe.com/de/terms
8. Transfer of data to transport service providers
For the purpose of delivering ordered goods, we work with logistics service providers / transport companies and / or shipping partners: The following data may be transmitted to them for the purpose of delivering the ordered goods or for their announcement : first name, surname, postal address, e-mail address, telephone number (e.g. for delivery notifications). The legal basis for the processing is Art. 6(1)(b) GDPR.
9. Contact
You have the option of contacting us in a number of ways: by email, telephone or post. When you contact us, we use the personal data that you voluntarily provide to us in this context solely for the purpose of contacting you and processing your enquiry.
The legal basis for this data processing is Art. 6 para. 1 letter a), Art. 6 para. 1 letter b), Art. 6 para. 1 letter c) GDPR and Art. 6 para. 1 letter f) GDPR.
10. Newsletter
On our website, we offer you the opportunity to register for our newsletter. To ensure that no errors are made when entering the e-mail address, we use the so-called double opt-in procedure (DOI procedure) : after you have entered your email address in the registration field, we will send you a confirmation link to the address provided. Only when you click on this confirmation link will your email address be added to our mailing list for the purpose of sending our newsletter. The legal basis for this data processing is Article 6(1)(a) of the GDPR.
The newsletter is sent using “MailChimp”, a newsletter distribution platform provided by the US company Rocket Science Group, LLC, 675 Ponce De Leon Ave NE #5000, Atlanta, GA 30308, USA.
The e-mail addresses of our newsletter recipients, as well as their other data described in these notes, are stored on MailChimp servers in the USA. MailChimp uses this information to send and analyse the newsletter on our behalf. Furthermore, according to its own information, MailChimp may use this data to optimise or improve its own services, e.g. to technically optimise the sending and presentation of the newsletter or for commercial purposes, to determine the countries from which recipients come. However, MailChimp does not use the data of our newsletter recipients to write to them itself or to pass it on to third parties.
The newsletters contain a so-called “web beacon”, i.e. a pixel-sized file that is retrieved from the MailChimp server when the newsletter is opened. As part of this retrieval, technical information such as information about the browser and your system, as well as your IP address and the time of the call. This information is used to technically improve the services based on the technical data or the target groups and their reading behaviour based on their locations (which can be determined using the IP address) or the access times.
The statistical data also includes information on whether the newsletter is opened, when it is opened and which links are clicked. For technical reasons, this information can be assigned to the individual newsletter recipients . However, it is neither our intention nor that of MailChimp to monitor individual users. The evaluations are much more useful to us in recognising the reading habits of our users and adapting our content to them or sending different send different content according to the interests of our users.
We trust in the reliability and IT and data security of MailChimp. MailChimp is certified under the US-EU data protection agreement “Privacy Shield” and thereby undertakes to comply with EU data protection regulations. Furthermore, we have concluded a data processing agreement with MailChimp. This is a contract in which MailChimp undertakes to protect the data of our users, to process it on our behalf in accordance with its data protection provisions and, in particular, not to pass it on to third parties. You can view the data protection provisions of MailChimp can be viewed here.
Further information and the applicable data protection provisions of MailChimp can be found at https://mailchimp.com/legal/privacy/ and https://mailchimp.com/legal/terms/.
You can revoke your consent to the newsletter at any time with effect for the future by sending a message to service@cncbote.de or by using the unsubscribe link at the end of each newsletter.
11. Recipients outside the EU
With the exception of the processing described above, we do not pass on your data to recipients based outside the European Union or the European Economic Area. The processing described above includes the transfer of data to the servers of the providers of tracking and targeting technologies commissioned by us. These servers are located in the USA. The data transfer is based on so-called standard contractual clauses of the EU Commission and in accordance with the principles of the Privacy Shield.
12. Rights of the data subject
In addition to the right to revoke your consent to us, you are entitled to the following rights if the respective legal requirements are met:
- the right to access your personal data stored by us (Art. 15 GDPR), in particular you can request information about the processing purposes, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the origin of your data, provided that it was not collected directly from you;
- the right to rectification of inaccurate data or completion of accurate data (Art. 16 GDPR),
- the right to have your data stored by us deleted (Art. 17 GDPR), provided that no statutory or contractual retention periods or other statutory obligations or rights to further storage apply to us,
- the right to restrict the processing of your data (Art. 18 GDPR), insofar as you dispute the accuracy of the data, the processing is unlawful but you refuse to delete it; the controller no longer needs the data, you need them to assert, exercise or defend legal claims, or you have objected to the processing in accordance with Art. 21 GDPR,
- the right to data portability in accordance with Art. 20 GDPR, i.e. the right to have selected data stored by us about you transferred in a standard, machine-readable format, or to request that it be transferred to another controller
- the right to lodge a complaint with a supervisory authority. As a rule, you can contact the supervisory authority of your usual place of residence or work or of our company headquarters for this purpose.
You can assert the aforementioned rights to which you are entitled against us at service@cncbote.de.
13. Right of objection
If we process data on the basis of your consent, you have the right to revoke your consent at any time. Revoking your consent does not mean that the data processing carried out on the basis of the consent is no longer valid.
As at: 25.05.2018
