We are delighted by your visit to our website and your interest in our company. We regard privacy as a client-oriented quality feature. The protection of your personal data and the safeguarding of your personal rights are important to us. This Privacy Statement is intended to inform in a transparent manner all visitors to our website about the type, extent, and purpose of the personal data we collect, use, and process and let you know about the rights to which you are entitled. As a matter of principle, the use of our website is possible without the disclosure of personal data. However, should you avail yourself of our company’s services via our website, the processing of your personal data could be necessary. The data automatically collected when you visit our website or which you enter if you avail yourself of services are processed in accordance with the statutory provisions relating to data privacy in place at the time. Should it be necessary to process your personal data and should there be no legal basis for processing of this nature, we as a matter of principle ask for your consent for the necessary purpose of processing. As the controller we have put in place technical and organizational measures to guarantee as high a level of protection of your personal data as possible. We do, however, point out that the transmission of data via the World Wide Web can basically involve security gaps. Should you wish to avail yourself of our company’s services but not wish data to be transferred via the World Wide Web for the purpose you can also contact us by telephone.
- Contact data for the processing controller
The controller within the meaning of the General Data Protection Regulation is:
Werkstätten für Menschen mit Behinderung gGmbH
86899 Landsberg a. Lech
Tel.: (+49) 8191 92 41 0
Appointed as data protection officer is:
Mr. Stephan Hartinger
Tel.: 08232 80988-70
- Collection of general access information
Every time our website is visited server log file information your browser automatically sends to us is collected. This is:
- the IP address (Internet Protocol address) of the calling computer
- the website from which you are visiting us (referrer)
- the website you are visiting us from
- the date and duration of the visit
- the browser type and browser settings
- the operating system
We would like to point out that these data cannot be attributed to a specific person. We use this technical access information exclusively for the following purposes:
- to improve the attractiveness and user-friendliness of our websites,
- to recognize technical problems on our website at an early stage.
- to display the contents of our website correctly,
- and, in the event of a cyber attack, to provide the prosecution authorities with the information required for a prosecution.
- Collection and passing on of personal data
We only use your personal data for the purposes listed on this privacy information page.
Our website has the following input masks for collecting personal data:
3.1 Contact fields on our website
3.1.1 Shop system (client account)
We use the personal data you input when registering for shop access in order to set up password-protected direct access to your personal client account for you. In order to set up shop access for you we require the following information from you:
- Given name and family name
- Street/Zip code Place
- E-mail address
- Telephone number, fax number where appropriate
When you have sent the registration you will for legal reasons receive from us a confirmation mail concluding the registration request for the setting up of a client account.
The data listed here are used exclusively for the setting up of a client account and the sending of the confirmation mail.
Following confirmation of your client account you can enter and manage your contact and address data and desired payment methods, and view your completed, open, and recently sent orders. You pledge to treat the personal access data confidentially not make them accessible to an unauthorized third party. Whenever you finish communicating with us you should always log out of your client account.
Data transfer for fulfilment of a contract
To fulfil a contract, we transfer your data to the shipping company tasked with delivery, inasmuch, that is, as this is necessary for the delivery of the ordered goods.
Depending on which payment service provider you select in the order process we transfer the payment data collected for the settlement of payments to the credit institute tasked with payment and where appropriate to the payment service provider tasked by us or to the selected payment service.
In some cases the payment service providers also collect these data themselves if you set up an account there. In this case, for the order process you must log on to the payment service provider with your access data.
As such, the privacy statement of the respective payment service provider applies.
Data transfer for creditworthiness check
Should we provide a service in advance, e.g., in the case of a purchase on account, we reserve the right, for the safeguarding of our legitimate interests, to have an identity and creditworthiness check conducted by service providers specialized in this field (consumer reporting agencies).
To this end we supply your personal data required for a creditworthiness check to the following company:
Creditreform Augsburg Frühschulz, Steidle & Wipperling KG
3.1.2 Sending of the newsletter
On our website we give you an opportunity to subscribe to our newsletter, through which at regular intervals we let you know about company offers, products, and information.
To be able to receive our newsletter you need a valid e-mail address.
For us to send a personalized newsletter we require the following information from you:
- Given and family name
- E-mail address
When you have sent the registration you will for legal reasons receive from us a confirmation mail concluding the registration request for the sending of the newsletter.
The data listed here are used exclusively for the sending of the newsletter.
These personal data are not transferred to any third party.
If we receive your e-mail address in connection with the sale of goods or a service and you have not objected, we reserve the right to regularly send you by e-mail offers relating to products in our range that are similar to the ones already purchased.
You can at any time stop the newsletter being sent by cancelling your subscription and revoking your consent to your data being used for the sending of the newsletter. There is a link for this purpose in every newsletter.
3.1.3 Registering on our website (client section)
On our website we offer you an opportunity to register by inputting your personal data.
For you to register in the client section we require the following information from you:
- Given and family name
- Street / Zip code Place
- E-mail address
- Telephone number, fax number where appropriate
The personal data you input are collected and stored exclusively for internal and our own purposes. Depending on the purpose of the processing they may be transferred to one or several processors, for example shipping companies, inasmuch as these are used for the performance of the service you request.
Registration of the data subject through the voluntary provision of personal data serves to be able to offer you contents and services which can only be offered to registered users. You can at any time correct/add to the personal data you provide on registration.
- What are cookies used for?
Our website uses what are known as cookies in several places. For detailed information and which cookies we use, please refer to our cookie guideline. (Link auf Cookie Richtlinie)
- Use of tracking and analysis tools and social plug-ins
We do not use any tracking and analysis tools or social plug-ins!
- Deletion, blocking, and duration of the storing of personal data
We process and store your personal data only for the period of time that is necessary to achieve the respective storage purpose or that the diverse retention periods for data envisaged by the legislator envisage.
After the storage purpose ceases to apply or on expiry of the retention period for the data envisaged by the legislator, the personal data are routinely and in accordance with statutory provisions blocked for further processing or erased.
- The data subject’s privacy rights
Should you have any questions about your personal data you can contact us at any time in writing. In accordance with the General Data Protection Regulation you have the following rights:
7.1 The right to be informed (art. 15 GDPR)
You have at all times the right to receive information about which categories of and information about, your personal data are processed by us, and for what purpose, and about for how long and by which criteria these data are stored, and whether in this context automated decision-making, including profiling, is used. Furthermore, you have the right to find out to which recipients or categories of recipient your data have been, or are still disclosed; in particular in the case of recipients in third countries or international organizations. In this case you also have the right to be notified of suitable guarantees in connection with the transmission of your personal data.
Alongside the right to appeal to the supervisory authority and the right to information about the origin of your data you have the right to the deletion and correction of your personal data, as well as well as the right to restriction of and objection to the processing of these data.
In all the above cases you have the right to request from the data processor a free copy of your personal data that we process. For all further copies you request or which go beyond the data subject’s right to be informed, we are entitled to charge an appropriate administration fee.
7.2 The right to rectification (art. 16 GDPR)
You have the right to obtain the rectification without undue delay of inaccurate personal data concerning you and to request, taking into account the purposes of the processing, the completion of incomplete personal data, including by means of a supplementary statement.
Should you wish to exercise your right to rectification, you can contact our data protection officer or the processing controller at any time.
7.3 The right to erasure (art. 17 GDPR)
You have the right to obtain without undue delay the erasure of your data (“right to be forgotten”), in particular if storage of the data is no longer necessary, you revoke your consent to the data being processed, the data were unlawfully processed or unlawfully collected and there is a legal obligation for erasure according to EU or national law.
The right to be forgotten does not apply, however, if there is an overriding right to the freedom of expression and information, the data storage is necessary for compliance with a legal obligation (e.g., periods of retention), archiving purposes counter erasure, or storage serves the establishment, exercise, or defense of legal claims.
7.4 The right to restriction of processing (art. 18 GDPR)
You have the right to obtain from the controller restriction of processing if you contest the accuracy of the personal data, the processing is unlawful, you oppose the erasure of your personal data and request a restriction of their processing instead, the data are no longer required for the processing purpose or you have objected to the processing pursuant to Article 21 paragraph pending verification of whether legitimate grounds on our part override yours.
7.5 The right to data portability (art. 20 GDPR)
You have the right to the portability of the personal data you provided our company with in a commonly used format so that you can have your personal data transmitted without hindrance to another controller, provided, for example, processing is based on your consent and is carried out by automated means.
7.6 The right to object (art. 21 GDPR)
You have the right to object at any time to the collection, processing, or use of your personal data for purposes of direct advertising, market research and opinion polling, as well as general data processing by way of business, unless, that is, we can demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms.
Furthermore, you cannot exercise your right to object if a legal provision envisages the collection, processing, or use of the data or stipulates their collection, processing, or use.
7.7 The right to lodge a complaint with the supervisory authority (art. 77 GDPR in connection with section 19 Federal Data Protection Act (BDSG))
You are granted the right to lodge a complaint with the relevant supervisory authority if you are of the opinion that there is a violation of the law in the processing of your personal data.
7.8 The right to revoke your consent (art. 7 para. 3 GDPR)
You can revoke your consent to the processing of your personal data at any time without stating your reasons. This also applies to the revocation of declarations of consent made to us prior to the EU General Data Protection Regulation coming into force.
- Legal basis of the processing
Article 6 para. 1, lit. a) of the General Data Protection Regulation (GDPR) serves as the legal basis for the processing of personal data for which we procure the consent of the data subject.
Article 6 para. 1, lit. b) of the General Data Protection Regulation (GDPR) serves as the legal basis for the processing of personal data necessary for the fulfilment of a contract to which the data subject is party. This also embraces processing that is necessary to implement precontractual measures.
Inasmuch as processing is necessary for compliance with a legal obligation to which our company is party, Article 6 para. 1, lit. c) of the General Data Protection Act (GDPR) serves as the legal basis.
Should processing be necessary to protect a legitimate interest of our company or of a third party, and should the interests, fundamental rights, and freedoms of the data subject not override the aforementioned interest, then Article 6 para. 1, lit. f) of the General Data Protection Act (GDPR) serves as the basis for the processing. The legitimate interest of our company lies in the conducting of our business and in the analyzing, optimizing, and maintaining the security of our website.
- The transfer of data to third parties
As a general rule we do not sell or loan user data. The transfer of data to third parties beyond the framework of this Privacy Statement only takes place if it is necessary for the execution of the service requested.
We only transfer data if there is a legal obligation for us to do so. This is the case if public bodies (e.g., criminal prosecution authorities) request information in writing or a court order has been issued.
There is no transfer of personal data to third countries outside the EU/ EEA.
- Legal or contractual stipulations for the provision of personal data and possible consequences of the failure to provide them
We draw your attention to the fact that in certain cases (e.g., tax regulations) the provision of personal data is required by law or can arise from contractual arrangements (e.g., information about / of the contractual partner). By way of example, it may be necessary for the conclusion of a contract for the data subject / the contractual partner to make their personal data available in order for their concern (e.g., an order) to be able to be processed by us at all. An obligation to provide personal data arises in particular when contracts are concluded. Should, in this case, no personal data be provided, the contract with the data subject cannot be concluded. Prior to the provision of personal data by the data subject, said data subject can contact our data protection officer or the controller. The data protection officer or the controller then explains to the data subject whether provision of the personal data is required legally or contractually, or needed for the conclusion of the contract, and whether the data subject’s concerns give rise to an obligation to provide the personal data, as well as the consequences that failure to provide the desired data has for the data subject.
- The existence of automated decision-making
As a company that acts responsibly, we renounce automated decision-making and profiling in our business relationships.