Privacy policy

Person responsible

LUBECK Beschläge GmbH
Mommsenstr. 2-4
42289 Wuppertal
Phone: +49 (0) 202 - 264 80 20
Fax: +49 (0) 202 - 264 80 211
Email: info@lubeck-beschlaege.de

Representative

Represented by the managing directors Michael Lucas, Anja Bovensiepen, Daniela Angiulo ebendort,

(hereinafter referred to as provider)

Scope of application

vis-à-vis the users of the website www.world-of-fittings.de. With the following declaration, we inform you about the type, scope and purpose of the collection, processing and use of your data in connection with your visit to our website.

I. Summary

The provider stores and processes your personal data in compliance with the relevant data protection regulations, in particular the General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG) and the German Telemedia Act (TMG).

The provider observes the principle of data minimisation. This means that data is processed to the extent necessary for the purposes of processing, as is appropriate and necessary to provide a functional website and with regard to the content and services offered. The processing takes place either on the basis of prior consent or if this is permitted by law.

When you access the provider's website, the provider processes certain usage data to enable you to use its services.

If you enter data in the provider's contact form, the provider processes this data exclusively for the purposes specified in each case.

All processed personal data will be deleted by the provider after the storage period has expired.

You have a right to information regarding your data or to rectification, erasure and restriction of the processing of your data, a right to object to the processing, a right to data portability and a right to lodge a complaint with a supervisory authority.

Further information can be found below.

II Data protection information in accordance with Art. 13, 14 GDPR and §§ 32 ff. BDSG 2018

1. definitions

a. Personal data

Personal data means any information relating to an identified or identifiable natural person (hereinafter referred to as "data subject"); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

b. Inventory data

Inventory data is personal data of a user that is required for the establishment, content organisation or amendment of a contractual relationship between the service provider and the user regarding the use of telemedia.

c. Usage data

Usage data is personal data of a user that is required to enable and bill the utilisation of telemedia. This includes, in particular, characteristics for identifying the user, information about the start and end as well as the scope of the respective use and information about the telemedia utilised by the user.

d. Processing

Processing is any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

e. Pseudonymisation

Pseudonymisation is the processing of personal data in such a manner that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organisational measures to ensure that the personal data are not attributed to an identified or identifiable natural person;

f. Cookies

Cookies are small text files that are stored on your computer. Cookies always have a validity period, which may be limited to the end of the user session (so-called session cookies) or may last for a longer period of time (so-called persistent cookies). These persistent cookies remain on your computer and enable the provider or its partner companies (so-called third party cookies) to recognise your computer on your next visit. You can set your browser so that you are informed about the setting of cookies and can decide individually whether to accept them or to reject the setting of cookies in certain cases or in general. If you do not accept cookies, the functionality of the website may be restricted.

g. Website

A website, also known as a web presence, is the presence of a private or corporate provider of telemedia on the global network (World Wide Web), summarised under a specific Internet address. The web presence includes web pages or subpages and optionally available downloadable documents as well as other retrievable audiovisual media services.

2. Description and scope of the processing of your data

In this section, we inform you about the purposes for which the personal data is to be processed and the legal basis for the processing.

The provider publishes information about its company and its range of goods via the website.

a. Processing relating to the entire website

The provider processes the data you provide in order to enable you to use this website. The provider uses technologies to measure reach in the context of advertising and market research. Further details can be found in the following explanations.

b. Processing in the case of sending emails and contacting us by telephone

You can contact the provider using the email address and telephone numbers provided on the website. The provider processes the data you provide in order to respond to your contact enquiry.

Data collection (inventory data):

- First name and surname
- Company
- Street
- Postcode
- City
- Country
- Telephone
- Fax
- Email
- Web

If you send us an e-mail or contact us by telephone, the aforementioned inventory data will be processed if you provide it to the provider.

The legal basis for the processing of the data is Art. 6 para. 1 lit. a GDPR if you have given the provider your consent, and also the protection of legitimate interests in accordance with Art. 6 para. 1 lit. f GDPR. The provider's legitimate interests include the realisation of advertising measures. However, the provider will only ever use this option in a specifically appropriate manner. If the purpose of the contact is to initiate a contract, Art. 6 para. 1 lit. b GDPR is also a legal basis for data processing.

You have the option to withdraw your consent to the processing of personal data at any time or to object to data processing that is not based on consent. The revocation or objection can be exercised in particular by e-mail to the above-mentioned contact e-mail addresses. All personal data stored by the provider in the course of your contact will be deleted in this case.

Your right of cancellation does not apply to data that the provider requires for the fulfilment of a contract or pre-contractual measures. However, you may be entitled to further rights.

c. Processing of log data

When you access the provider's website, your internet browser automatically transmits certain data to the provider's server for technical reasons. The following data is collected by the provider separately from other data that you may transmit to the provider and used for the aforementioned purposes:

Data collection (usage data)

- Name of the website accessed or the URL
- date and time of access
- access status / http status code
- amount of data transferred
- website from which the request comes
- browser software and software version
- operating system and version
- IP address (anonymised, shortened by the last 3 digits)
- randomly generated key number of the cookie or session.

The legal basis for the storage of the data and the log files is the legitimate interests of the provider (including the detection of hacker attacks) in accordance with Art. 6 para. 1 lit. f GDPR.

If the data is stored in log files, the usage data is deleted after 7 days at the latest. Storage beyond this is possible in accordance with data protection authorisations. In this case, the IP addresses are deleted or anonymised so that it is no longer possible to link the website access to your computer.

The collection of data for the provision of the website and the storage of data in log files is absolutely necessary for the operation of the website. Consequently, the user has no option to object. However, you can exercise your right to object by means of automated procedures in which technical specifications are used, e.g. in the case of anonymisation of your IP address by VPN providers.

d. Processing when forms are used (contact form, order function in the web shop, newsletter subscription)

The provider provides contact forms that you can use to send a message to the provider.

Data collection (inventory data):

The data collected is derived from the respective form. As a rule, this is the following data:
- First name and surname
- Company
- Street (regarding contact, billing and delivery address)
- Postcode (regarding contact, billing and delivery address)
- City (regarding contact, billing and delivery address)
- Country
- Telephone
- Fax
- Email
- Website
The legal basis for the processing of the data is Art. 6 para. 1 lit. a GDPR, if you have given the provider your consent, and furthermore, in the case of data processing for the legitimate interests of the provider, Art. 6 para. 1 lit. f GDPR. If the purpose of the contact is to initiate a contract, Art. 6 para. 1 lit. b GDPR is also a legal basis for data processing.

Data provided by you will be deleted immediately after your enquiry has been dealt with or, if it has not been dealt with, no later than 1 year after the last contact, unless your data is subject to a longer storage period for a separate reason (e.g. the storage of information used to fulfil a contract). The enquiry is completed when it can be inferred from the circumstances that the matter in question has been conclusively clarified. You have the option to withdraw your consent to the processing of personal data at any time or to object to data processing that is not based on consent. The revocation or objection can be exercised in particular by e-mail to the above-mentioned contact e-mail addresses. All personal data that the provider has stored in the course of your contact will be deleted in this case. Your right of cancellation does not apply to data that the provider requires for the fulfilment of a contract or pre-contractual measures. However, you may be entitled to further rights.

e. Use of cookies

Use of cookies by the provider for the purpose of website use:The provider uses session cookies to make visiting the websites attractive and to enable the use of certain functions. These cookies from the provider are generally deleted from your hard drive at the end of the browser session.

Data collection (usage data):

- Randomly generated key number of the cookie or session.

The legal basis for the storage of the data and the log files are the legitimate interests of the provider in accordance with Art. 6 para. 1 lit. f GDPR. In this case, these consist of ensuring the functionality and attractiveness of the website, which serves the purposes of provider advertising.

You have the option at any time to withdraw your consent to the processing of personal data or to object to data processing that is not based on consent. Cookies are stored on your computer and transmitted from it to our websites. As a user, you therefore have control over the use of cookies. You can deactivate or restrict the transmission of cookies by changing the settings in your Internet browser. You can delete cookies that have already been saved at any time.

3. existence of suitable guarantees

a. Pseudonymisation

Insofar as the provider collects usage data, it always stores it under pseudonyms (in the case of cookies, for example, via a unique session key). The provider does not merge pseudonymous data with data about the bearer of the pseudonym (such as inventory data).

b. Use of encryption technologies

The provider uses the SSL security system (Secure Socket Layer) for data transfer between your computer or mobile device and the provider's server. This technology is designed to protect your data from being read by unauthorised third parties and offers a very high standard of security. You can recognise that your data is transmitted in encrypted form by the closed display of a key or lock symbol in the lower status bar of your browser.

4. recipients of personal data in the EU

The provider transmits your data to the following companies:

ALL-INKL.COM - Neue Medien Münnich (hosting service provider)
Owner: René Münnich
Hauptstraße 68
D-02742 Friedersdorf

5. Recipients of personal data in third countries

The provider does not transfer your data to recipients outside the EU.

6. further processing for other purposes

Unless otherwise stated above, your data will not be passed on to third parties and will not be processed for purposes other than those stated.

7 Rights of data subjects

You have the right to information about the personal data concerning you as well as the right to rectification or erasure or restriction of processing or the right to object to processing, the right to data portability and the right to lodge a complaint with a supervisory authority in accordance with the description below. In the cases of §§ 32 ff. BDSG 2018, however, these claims only exist to the extent that they are provided for under the BDSG 2018.

a. Your right to information

You have the right to request confirmation from the provider as to whether personal data concerning you is being processed. If this is the case, you have a right of access to this personal data and to the following information: the purposes of the processing; the categories of personal data being processed; the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organisations; where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period; the existence of the right to request from the controller rectification or erasure of personal data or restriction of processing of personal data concerning the data subject or to object to such processing; the existence of the right to lodge a complaint with a supervisory authority; where the personal data are not collected from the data subject, any available information as to their source; the existence of automated decision-making, including profiling (in accordance with Article 22(1) and (4) GDPR) and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject.

b. Right to rectification

You have the right to obtain from the provider without undue delay the rectification of inaccurate personal data concerning you. You have the right to request the completion of incomplete personal data - also by means of a supplementary declaration - if this is compatible with the above-mentioned purposes of processing or if there is a factual reason for this.

c. Right to erasure

You have the right to demand that the provider erase personal data concerning you without undue delay. We are obliged to erase personal data without undue delay where one of the following grounds applies:

The personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed; the data subject withdraws consent on which the processing is based according to point (a) of Article 6(1), or point (a) of Article 9(2) GDPR, and where there is no other legal ground for the processing; the data subject objects to the processing pursuant to Article 21(1) GDPR and there are no overriding legitimate grounds for the processing, or the data subject objects to the processing pursuant to Article 21(2) GDPR; the personal data have been unlawfully processed; the erasure of the personal data is necessary for compliance with a legal obligation in Union or Member State law to which the controller is subject; the personal data have been collected in relation to the offer of information society services referred to in Article 8(1) GDPR (consent of a child in relation to information society services).

If we have made the personal data public and we are obliged to erase it, we shall take reasonable steps, including technical measures, taking into account the available technology and the cost of implementation, to inform controllers which are processing the personal data that a data subject has requested the erasure by such controllers of any links to, or copy or replication of, that personal data.

You have a right to erasure in accordance with Art. 17 para. 3 GDPR, however, to the extent that processing is necessary for exercising the right of freedom of expression and information; for compliance with a legal obligation which requires processing by Union or Member State law to which the controller is subject; or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller; for reasons of public interest in the area of public health in accordance with Article 9(2)(h) and (i) and Article 9(3) GDPR; for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes in accordance with Article 89(1) GDPR in so far as the right referred to in paragraph 1 is likely to render impossible or seriously impair the achievement of the objectives of that processing, or for the establishment, exercise or defence of legal claims.

d. Right to restriction of processing

You have the right to obtain from us restriction of processing where one of the following applies the accuracy of the personal data is contested by the data subject, for a period enabling the controller to verify the accuracy of the personal data; the processing is unlawful and the data subject opposes the erasure of the personal data and requests the restriction of their use instead; the controller no longer needs the personal data for the purposes of the processing, but they are required by the data subject for the establishment, exercise or defence of legal claims, or the data subject has objected to processing pursuant to Article 21(1) pending the verification whether the legitimate grounds of the controller override those of the data subject.

Where processing has been restricted, such personal data shall, with the exception of storage, only be processed with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State. If you have obtained a restriction of processing, you will be informed by us before the restriction is lifted.

e. Right to data portability

You have the right to receive the personal data concerning you, which you have provided to a controller, in a structured, commonly used and machine-readable format and you have the right to transmit those data to another controller without hindrance from us or a third party. to transmit those data to the controller to whom the personal data have been provided, where the processing is based on consent pursuant to point (a) of Article 6(1) GDPR or point (a) of Article 9(2) GDPR or on a contract pursuant to point (b) of Article 6(1) GDPR and the processing is carried out by automated means.

In exercising your right to data portability pursuant to paragraph 1, you have the right to have the personal data transmitted directly from one controller to another, where technically feasible. This right must not adversely affect the rights and freedoms of others.

The exercise of the right to data portability is without prejudice to Article 17 GDPR (right to erasure / "right to be forgotten"). This right shall not apply to processing necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

f. Right to object to the processing

You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on Article 6(1)(e) (performance of a task carried out in the public interest) or (f) (safeguarding the legitimate interests of the controller or a third party) GDPR, including profiling based on those provisions. We will then no longer process the personal data unless we can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defence of legal claims.

Where personal data are processed for direct marketing purposes, you have the right to object at any time to processing of personal data concerning you for such marketing, which includes profiling to the extent that it is related to such direct marketing. If you object to processing for direct marketing purposes, the personal data will no longer be processed for these purposes.

We must expressly point out your right to object to the processing described above at the latest at the time of the first communication with you; this information must be provided in a comprehensible form that is separate from other information.

In the context of the use of information society services, and notwithstanding Directive 2002/58/EC, you may exercise your right to object by automated means (e.g. by automated means using technical specifications). by pressing "do not track" functions in the phone, by changing browser settings), where technical specifications are used.

You have the right to object, on grounds relating to your particular situation, to processing of personal data concerning you which is carried out for scientific or historical research purposes or statistical purposes pursuant to Article 89(1) GDPR, unless the processing is necessary for the performance of a task carried out for reasons of public interest.

If you wish to make use of your right to object, a telephone message or an e-mail to the above-mentioned contact e-mail address is sufficient.

g. Right to lodge a complaint with a supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of personal data relating to you infringes this Regulation.

The supervisory authority with which the complaint has been lodged will inform you as the complainant on the progress and the outcome of the complaint including the possibility of a judicial remedy pursuant to Article 78 GDPR.

8. analysis tools and advertising

a. Google Analytics

This website uses functions of the web analysis service Google Analytics. The provider is Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Google Analytics uses so-called "cookies". These are text files that are stored on your computer and enable your use of the website to be analysed. The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there.

The storage of Google Analytics cookies is based on Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in analysing user behaviour in order to optimise both its website and its advertising.

IP anonymisation

We have activated the IP anonymisation function on this website. This means that your IP address will be truncated by Google within member states of the European Union or in other signatory states to the Agreement on the European Economic Area before being transmitted to the USA. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. On behalf of the operator of this website, Google will use this information to analyse your use of the website, to compile reports on website activity and to provide other services relating to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

Browser plugin

You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de.

Order data processing

We have concluded a contract with Google for commissioned data processing and fully implement the strict requirements of the German data protection authorities when using Google Analytics.

Demographic characteristics with Google Analytics

This website uses the "demographic characteristics" function of Google Analytics. This allows reports to be created that contain statements about the age, gender and interests of visitors to the site. This data comes from interest-based advertising from Google and from visitor data from third-party providers. This data cannot be assigned to a specific person. You can deactivate this function at any time via the ad settings in your Google account or generally prohibit the collection of your data by Google Analytics as described in the section "Objection to data collection".

b. Google Ads

The website operator uses Google Ads. Google Ads is an online advertising programme of Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Ads makes it possible to display adverts in the Google search engine or on third-party websites when the user enters or has entered certain search terms on Google (keyword targeting). In addition, targeted adverts can be displayed based on the user data available at Google (e.g. location data and interests) (target group targeting). As a website operator, we can evaluate this data quantitatively by analysing, for example, which search terms led to the display of our advertisements and which and how many advertisements led to corresponding clicks.

The use of this service is based on your consent in accordance with Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG. Consent can be revoked at any time.

Data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://policies.google.com/privacy/frameworks and https://privacy.google.com/businesses/controllerterms/mccs/.

Google Ads Remarketing

The website operator uses the functions of Google Ads Remarketing. The provider is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.

With Google Ads Remarketing, we can assign people who use or interact with our online offering to specific target groups in order to subsequently display interest-based advertising in the Google advertising network (remarketing or retargeting).

In addition, the advertising target groups created with Google Ads Remarketing can be linked to Google's cross-device functions. In this way, interest-based, personalised advertising messages that have been adapted to you depending on your previous usage and surfing behaviour on one end device (e.g. PC) can also be displayed on another of your end devices (e.g. mobile phone or tablet).

If you have a Google account, you can object to this form of personalised advertising by clicking on the following link: https://www.google.com/settings/ads/onweb/.

The use of this service is based on your consent in accordance with Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG. Consent can be revoked at any time.

Further information and the data protection provisions can be found in Google's privacy policy at: https://policies.google.com/technologies/ads?hl=de.

Google Conversion Tracking

This website uses Google Conversion Tracking. The provider is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.

With the help of Google conversion tracking, Google and we can recognise whether the user has carried out certain actions and how the customer has used our website. For example, we can analyse which buttons on our website were clicked how often and which products were viewed or purchased particularly frequently. This information is used to compile statistics. We learn the total number of users who have clicked on our adverts and what actions they have taken. This does not provide us with any information with which we can personally identify the user. Google itself uses cookies or comparable recognition technologies for identification purposes.

The use of this service is based on your consent in accordance with Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG. Consent can be revoked at any time.

You can find more information about Google Conversion Tracking in Google's privacy policy: https://policies.google.com/privacy?hl=de.