Privacy


Privacy policy
We are pleased that you are visiting our website and would like to thank you for your interest. Due to statutory provisions, we are obliged to inform you about the use of personal data. Therefore, we would kindly ask you to acknowledge the following information:
I.             Name and address of the controller
The responsible body according to the GDPR and other national provisions related to data privacy and data protection is the responsible body named in the imprint of this website.
                Contact Person / Data Security Official:
Name:                  Mr. Daniel Jegutzki
E-Mail:                 Datenschutzbeauftragter@wilms.de
 
II.            Provision of the website and the creation of logfiles
1.            Description of the processing of personal data
Whenever you use our website, our webserver automatically stores data of the client computer.
The following data is collected:
(1)          Information on the browser and its version
(2)          The computer operating system
(3)          The Internet Service Provider
(4)          The IP-address
(5)          Date and time
(6)          Referring website
(7)          Websites which are visited through our system
This data is not stored in the logfiles of our webserver.
2.            Legal basis for the processing of personal data
The legal basis for this storage is Art. 6 Abs. 1 lit. f Regulation(EU) 2016/679.
3.            Scope of the processing of personal data
The momentary storage of the IP-address is necessary to deliver the Website to the client computer. In order to use our website, the IP-address needs to be stored for the duration of the user session.
Herein lay our legitimate interest in such storage according to Art. 6 Abs. 1 lit. f Regulation(EU) 2016/679.
4.            Duration of storage
Data is deleted as soon as it is not used further for the scope of the processing. In the case of the usage of data for delivering the website, this is the case when the respective user session ends.
5.            Rights of objection
The collection and storage of personal data is necessary to provide our website. Thus, an objection by the data subject is not possible.
 
III.          Usage of cookies
1.            Description of the processing of personal data
Our website uses Cookies. Cookies are small text files that are stored in the browser of the user or stored by the browser on the computer system of the user. Whenever a user visits our website, a cookie may be stored. This cookie contains of a characteristic string which allows the identification of the user the next time he visits our website.
We use cookies to provide a more user friendly experience. Some elements on our website require the browser to be identified after the user visits different pages on our website.
Cookies make use of the following data:
(1)          Log-In-Information
(2)          Shopping Basket            
(3)          Language Settings
2.            Legal basis for the processing of personal data
The legal basis for this storage is Art. 6 Abs. 1 lit. f Regulation(EU) 2016/679.
3.            Scope of the processing of personal data
The scope for the usage of technically necessary cookies ist o make the website easier to use for the user. Some functions of our website cannot be used without cookies. These elements on our website require the browser to be identified after the user visits different pages on our website.
The following functions use Cookies:
(1)          Provsion of a closed Log-In-Area
(2)          Provision of a shopping cart system
(3)          Provision of a multilingual webseite
Cookies that are technically necessary are not used to create user profiles.
Herein lay our legitimate interest in such storage according to Art. 6 Abs. 1 lit. f Regulation(EU) 2016/679.
4.            Duration of storage, Rights of objection
Cookies are not stored by us, but by the user on his device. Thus, the user has full control of the cookies stored on his device and may delete them at any time. The user can also control which cookies are stored on his device. By changing the internet browser’s setting, the user can deactivate the usage of cookies at any time. This can also be done automatically. If cookies of our website are deactivated, some functions of our website may not operate fully.
 
IV.          Contact forms and E-Mail contact
1.            Description of the processing of personal data
We offer contact forms on our website which may be used to send messages to us. Whenever a user chooses to contact us through our forms, following personal data is collected and stored:
(1)          Company Name and Name
(2)          E-Mail-Address
(3)          User Message
The user consents whenever he chooses to send a message.
Alternatively, the user can contact us by sending us an E-Mail. In this case, the personal data transmitted with this E-Mail is stored by us.
The personal data is not disclosed to third parties. The data is solely used for communication with us.
2.            Legal basis for the processing of personal data
The users consent is the legal basis for the processing of personal data (Art. 6 Abs. 1 lit. a Regulation(EU) 2016/679).
If the E-Mail contact aims at the perfomance of a contract, the legal basis for the processing of personal data is Art. 6 Abs. 1 lit. b Regulation(EU) 2016/679.
3.            Scope of the processing of personal data
The personal data is used to answer the user’s request. In case of a contact via E-Mail, this also is the basis for our legitimate interest in the storage of the data.
4.            Duration of storage
The data is erased whenever it is not needed for the scope of the processing. This is usually the case when the conversation with a user ends. A conversation has ended when we assume that the concern of the user has been solved.
5.            Rights of objection
The user may, at any time, revoke his consent to the usage of personal data. A user may request the erasure of his personal data at any time by sending us a message. In this case, the conversation with the user cannot be carried on.
All personal data which has been stored within the course of the conversation will be deleted.
This is not the insofar fiscal regulations require the storage of messages. The messages will then not be deleted, but stored for these purposes.
 
V. User Accounts
1.            Description of the processing of personal data
We offer users the option to register for a user account on our website. Personal data is entered into a form and stored by us. This data will not be disclosed to third parties. We collect the following personal data and store it on our servers:
(1)          Company Name, Name
(2)          Address
(3)          E-Mail-Address
The user consents to this usage during the registration process.
2.            Legal basis for the processing of personal data
Your consent is the legal basis for the processing of personal data (Art. 6 Abs. 1 lit. a Regulation(EU) 2016/679). When the account is used to make purchases in our webshop, the legal basis is the necessity for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract (Art. 6 Abs. 1 lit. b Regulation(EU) 2016/679).
3.            Scope of the processing of personal data
User registration is needed to make purchases in our webshop.
4.            Duration of storage
The data is erased whenever it is not needed for the scope of the processing. This is usually the case when the user changes or deletes his account.
5.            Rights of objection
A user may delete his account at any time. A user may alter his data within the account at any time.
 
VI. E-Commerce
1.            Description of the processing of personal data
If a user purchases goods through our webshop, we will collect, store and use the personal data necessary to carry out the order. The following data is used:
(1)          Name and Billing address
(2)          E-Mail-Address
(3)          Shipping Address
2.            Legal basis for the processing of personal data
The legal basis for the collection and processing of this data is the necessity for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract (Art. 6 Abs. 1 lit. b Regulation(EU) 2016/679).
For marketing purposes, the legal basis is Art. 6 Abs. 1 lit. f Regulation(EU) 2016/679
3.            Scope of the processing of personal data
The personal data is stored to carry out the purchase.
In order to deliver the goods, we disclose your name and shipping address to a parcel carrier we use to deliver packages.
4.            Duration of storage
The data is erased whenever it is not needed for the scope of the processing. This is usually the case when when the contractual obligations have been carried out and the warranty period has lapsed. Binding legal requirements, namely fiscal requirements remain unaffected.
5.            Rights of objection
A user may request the erasure of his personal data at any time.
When the user has made purchases in our webshop, the personal data may be erased when there is no more necessity for the performance of the contract to which the data subject is party or when the applicable laws allow such erasure.
 
VII.         Rights of the data subject
Where personal data is processed by the controller, the data subject has the following rights:
1.            Right of access
The data subject has the right to obtain from the controller confirmation as to whether or not personal data concerning him or her are being processed
2.            Right to rectification
The data subject has the right to obtain from the controller without undue delay the rectification of inaccurate personal data concerning him or her.
3.            Right to restriction of processing
The data subject has the right to obtain from the controller restriction of processing where the legal requirements apply.
4.            Right to erasure
The data subject has the right to obtain from the controller the erasure of personal data concerning him or her without undue delay and the controller has the obligation to erase personal data without undue delay.
5.            Right of notification
The controller shall communicate any rectification or erasure of personal data or restriction of processing carried out in accordance with Article 16, Article 17(1) and Article 18 to each recipient to whom the personal data have been disclosed, unless this proves impossible or involves disproportionate effort. The controller shall inform the data subject about those recipients if the data subject requests it.
6.            Right to data portability
The data subject has the right to receive the personal data concerning him or her, which he or she has provided to a controller, in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller without hindrance from the controller to which the personal data have been provided.
7.            Right to object
The data subject has the right to object, on grounds relating to his or her particular situation, at any time to processing of personal data concerning him or her which is based on a task carried out in the public interest or on legitimate interests, including profiling based on those provisions. The controller shall no longer process the personal data unless the controller demonstrates compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defence of legal claims.
Where personal data are processed for direct marketing purposes, the data subject has the right to object at any time to processing of personal data concerning him or her for such marketing, which includes profiling to the extent that it is related to such direct marketing.
Where the data subject objects to processing for direct marketing purposes, the personal data shall no longer be processed for such purposes.
In the context of the use of information society services, and notwithstanding Directive 2002/58/EC, the data subject may exercise his or her right to object by automated means using technical specifications.
8.            Revocation of consent
The data subject has the right to withdraw his or her consent at any time. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.
9.            Right to lodge a complaint with a supervisory authority
Without prejudice to any other administrative or judicial remedy, every data subject has the right to lodge a complaint with a supervisory authority, in particular in the Member State of his or her habitual residence, place of work or place of the alleged infringement if the data subject considers that the processing of personal data relating to him or her infringes this Regulation.
The supervisory authority with which the complaint has been lodged shall inform the complainant on the progress and the outcome of the complaint including the possibility of a judicial remedy.