Service/Contact
Go to homepage
€0.00*
Go to homepage
Categories

Data Protection

Privacy Policy

Thank you for your interest in our company. We take data protection seriously.

In principle, you can use our website without providing any personal data. However, if a data subject wishes to make use of our company’s services via our website, the processing of personal data may be necessary. If the processing of personal data is necessary and there is no legal basis for such processing, we will always obtain the data subject’s consent.

The processing of personal data (e.g. a data subject’s name, address, email address or telephone number) is always carried out in accordance with the General Data Protection Regulation (GDPR) and in compliance with the country-specific data protection regulations applicable to us.

Through the following privacy policy, we wish to inform the public about the nature, scope and purpose of the personal data we collect, use and process. This privacy policy also informs data subjects of their rights.

As the data controller, we have implemented numerous technical and organisational measures to ensure the most comprehensive possible protection of the personal data processed via our website. However, data transmissions over the internet may, in principle, contain security vulnerabilities. Consequently, 100% protection cannot be guaranteed. Therefore, any data subject may, of course, alternatively provide us with personal data by other means, such as by telephone.

Definitions

This privacy policy is based on the definitions used by the European legislators when enacting the GDPR (Article 4 of the GDPR). This privacy policy is intended to be both easy to read and easy to understand for everyone. To ensure this, we would first like to explain the terms used. This privacy policy uses the following definitions, amongst others:

  • “personal data” means any information relating to an identified or identifiable natural person (hereinafter referred to as the “data subject”); a natural person is regarded as identifiable if they can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person;

  • ‘data subject’ means any identified or identifiable natural person whose personal data is processed by the controller.

  • “processing” means any operation or set of operations which is carried out on personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, distribution or any other form of making available, the alignment or combination, the restriction, erasure or destruction;

  • “restriction of processing” means the marking of stored personal data with the aim of limiting their future processing;

  • “profiling” means any form of automated processing of personal data consisting of the use of such personal data to evaluate certain personal aspects relating to a natural person, in particular to analyse or predict aspects concerning that natural person’s performance at work, economic situation, health, personal preferences, interests, reliability, behaviour, whereabouts or movements;

  • “controller” means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by Union law or the law of the Member States, the controller or the specific criteria for its designation may be provided for by Union law or the law of the Member States;

  • “recipient” means a natural or legal person, public authority, agency or other body to whom personal data are disclosed, irrespective of whether they are a third party or not. However, public authorities which may receive personal data in the course of a specific investigation mandate under Union law or the law of the Member States shall not be regarded as recipients; the processing of such data by those authorities shall be carried out in accordance with the applicable data protection rules and in line with the purposes of the processing;

  • “third party” means a natural or legal person, public authority, agency or other body, other than the data subject, the controller, the processor and the persons authorised to process the personal data under the direct responsibility of the controller or the processor;

  • “consent” of the data subject means any freely given, specific, informed and unambiguous indication of the data subject’s wishes, expressed by a statement or by a clear affirmative action, by which the data subject indicates that they agree to the processing of personal data relating to them.

Name and contact details of the data controller

This privacy notice applies to data processing carried out by:

Data controller: Rumpf Handels GmbH, Managing Directors: Alexander Rumpf, Benjamin Rumpf, Textilstr. 19, 48465 Schüttorf, Telephone: 05923-90234-0, Email: shop@sodanca.de

Data Protection Officer: We have appointed a Data Protection Officer. You can contact them as follows:

Rumpf Handels GmbH, – Data Protection Officer –, Textilstrasse 19, 48465 Schüttorf

Email: datenschutz@rumpf.net

Collection and storage of personal data, and the nature and purpose of its use when visiting our website

In principle, you can use our website without disclosing your identity. When you access our website, the browser used on your device automatically sends information to our website’s server. This information is temporarily stored in a so-called log file. The following information is collected automatically and stored until it is automatically deleted:

  • IP address of the requesting computer,
  • Date and time of access,
  • Name and URL of the file accessed,
  • the website from which access is made (referrer URL),
  • the browser used and, where applicable, your computer’s operating system, as well as the name of your internet service provider.

We process the aforementioned data for the following purposes:

  • to ensure the website connects smoothly,
  • to ensure a user-friendly experience on our website,
  • to assess system security and stability, and
  • for other administrative purposes.

The legal basis for data processing is Article 6(1)(f) of the GDPR. Our legitimate interest arises from the purposes for data collection listed above. Under no circumstances do we use the data collected for the purpose of drawing conclusions about your identity.

In addition, we use cookies and analytics services when you visit our website. Further details on this can be found in sections 5 and 7 of this privacy policy.

When placing orders via our website

You can either place orders via our website as a guest, without registering, or register as a customer in our shop for future orders. The advantage of registering is that, should you place a future order, you can log in directly to our shop using your email address and password, without having to re-enter your contact details.

Your personal data is entered into a form, transmitted to us and stored. When you place an order via our website, we initially collect the following data, whether you are placing a guest order or registering in the shop:

  • Title, first name, surname,
  • a valid email address,
  • postal address,
  • telephone number (landline and/or mobile)

This data is collected

  • to enable us to identify you as our customer;
  • to process, fulfil and complete your order;
  • to correspond with you;
  • for invoicing purposes;
  • to deal with any liability claims that may arise, as well as to assert any claims against you;
  • to ensure the technical administration of our website;
  • to manage our customer data.

As part of the ordering process, your consent to the processing of this data will be sought.

Data processing takes place following your order and/or registration and is necessary, in accordance with Article 6(1)(b) of the GDPR, for the purposes stated, to ensure the proper processing of your order and the fulfilment of obligations arising from the sales contract by both parties.

The personal data we collect for the purpose of processing your order will be stored until the statutory retention period expires and will then be deleted, unless we are obliged, pursuant to Article 6(1)(c) of the GDPR, to retain it for a longer period due to retention and documentation obligations under tax and commercial law (under the German Commercial Code (HGB), the German Criminal Code (StGB) or the German Fiscal Code (AO)) or unless you have consented to storage beyond this period in accordance with Article 6(1), first sentence, point (a) of the GDPR.

Disclosure of data

We will only disclose your personal data (name, delivery address) to third parties who are service partners involved in the fulfilment of the contract, such as the logistics company responsible for delivery and the bank responsible for payment processing, insofar as this is necessary for the delivery of the goods or for payment processing. The legal basis for the transfer of data is Article 6(1), first sentence, point (b) of the GDPR.

You may withdraw your consent at any time, with effect for the future, by contacting the data controller named above or the relevant delivery service provider.

We work with external delivery partners to fulfil our contractual obligations towards our customers. Therefore, on the basis of Article 6(1)(b) of the GDPR, we pass on your name and delivery address to our delivery partners solely for the purpose of delivering the goods.

We work with the following service providers to process orders:

- PayPal

When paying via PayPal, by credit card via PayPal, by direct debit via PayPal or by “purchase on account” via PayPal, we pass on your payment details to PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter “PayPal”) for the purposes of payment processing. PayPal reserves the right to carry out a credit check for the payment methods credit card via PayPal, direct debit via PayPal, “purchase on account” or “instalment payment” via PayPal. For this purpose, your payment details may be passed on by PayPal to credit reference agencies on the basis of Article 6(1)(f) of the GDPR.

PayPal uses the result of the credit check – specifically the statistical probability of payment default – to decide whether to make the relevant payment method available. The credit report may contain probability values (so-called ‘score’ values). Where score values are included in the result of the credit check, these are based on a scientifically recognised mathematical and statistical method. The calculation of the score values takes into account, amongst other things, address details. Further information regarding data protection can be found in the PayPal Privacy Policy: https://www.paypal.com/de/webapps/mpp/ua/privacy-full

You may object to the processing of your data at any time by notifying PayPal. However, PayPal may still be authorised to process your personal data if this is necessary for the contractual processing of payments.

Your personal data will not be disclosed to third parties for any purposes other than those mentioned above.

We will only disclose your personal data to third parties if:

  • you have given your explicit consent in accordance with Article 6(1)(a) of the GDPR,
  • the disclosure is necessary, in accordance with Article 6(1), first sentence, point (f) of the GDPR, for the establishment, exercise or defence of legal claims, and there is no reason to believe that you have an overriding legitimate interest in the non-disclosure of your data,
  • where there is a legal obligation to disclose the data in accordance with Article 6(1), first sentence, point (c) of the GDPR, and
  • this is permitted by law and is necessary, in accordance with Article 6(1), first sentence, point (b) of the GDPR, for the performance of contractual relationships with you.

As part of the ordering process, your consent will be sought for the disclosure of your data to third parties.

Use of cookies

We use cookies on our website. These are small files that your browser creates automatically and which are stored on your device (laptop, PC, smartphone, etc.) when you visit our website. Cookies do not cause any damage to your device and do not contain any viruses, Trojans or other malware.

Information is stored in the cookie that relates to the specific device you are using. However, this does not mean that we thereby gain direct knowledge of your identity.

The use of cookies serves, on the one hand, to make your experience of our website more convenient. For example, we use so-called session cookies to recognise that you have already visited individual pages on our website. These are automatically deleted when you leave our site.

In addition, to optimise user-friendliness, we also use temporary cookies that are stored on your device for a specific, predetermined period. If you visit our site again to use our services, the system will automatically recognise that you have previously visited us and recall the entries and settings you have made, so that you do not have to re-enter them.

We also use cookies to collect statistical data on the use of our website and to analyse this data for the purpose of optimising our offering for you (see section 7). These cookies enable us to automatically recognise that you have previously visited our site when you return. These cookies are automatically deleted after a defined period of time.

The data processed by cookies is necessary for the aforementioned purposes to safeguard our legitimate interests and those of third parties in accordance with Article 6(1)(f) of the GDPR.

Most browsers accept cookies automatically. However, you can configure your browser so that no cookies are stored on your computer or so that a notification always appears before a new cookie is created. Please note, however, that completely disabling cookies may mean that you are unable to use all the features of our website.

Links to third-party websites

The links published on our website are researched and compiled by us with the utmost care. However, we have no influence over the current or future design and content of the linked pages. We are not responsible for the content of the linked pages and expressly do not endorse the content of these pages. The provider of the website to which reference is made is solely liable for any illegal, incorrect or incomplete content, as well as for any damage arising from the use or non-use of the information. Liability on the part of anyone who merely refers to the publication via a link is excluded. We are only responsible for third-party references if we have actual knowledge of them – including any unlawful or criminal content – and it is technically possible and reasonable for us to prevent their use.

Analytics and Tracking Tools

The tracking measures listed below and used by us are carried out on the basis of Article 6(1)(f) of the GDPR. We use these tracking measures to ensure that our website is designed to meet your needs and is continuously optimised. Furthermore, we use these tracking measures to collect statistical data on the use of our website and to analyse this data for the purpose of optimising our service for you. These interests are to be regarded as legitimate within the meaning of the aforementioned provision.

The respective data processing purposes and data categories can be found in the relevant tracking tools.

Google Analytics¹

For the purpose of designing our website to meet your needs and continuously optimising it, we use Google Analytics, a web analytics service provided by Google Inc. (https://www.google.de/intl/de/about/) (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; hereinafter ‘Google’). In this context, pseudonymised user profiles are created and cookies (see section 5) are used. The information generated by the cookie regarding your use of this website, such as

  • browser type and version,
  • operating system used,
  • referrer URL (the previously visited page),
  • hostname of the accessing computer (IP address),
  • time of the server request,

are transmitted to a Google server in the USA and stored there. The information is used to analyse the use of the website, to compile reports on website activity and to provide other services relating to website and internet usage for the purposes of market research and the needs-based design of these web pages. This information may also be transferred to third parties where required by law or where third parties process this data on Google’s behalf. Under no circumstances will your IP address be linked to other data held by Google. IP addresses are anonymised so that they cannot be traced back to you (IP masking).

You can prevent the installation of cookies by adjusting your browser settings accordingly; however, please note that in this case, you may not be able to make full use of all the functions of our website. You can also prevent the collection of data generated by the cookie and relating to your use of the website (including your IP address), as well as the processing of this data by Google, by downloading and installing a browser add-on (https://tools.google.com/dlpage/gaoptout?hl=de). As an alternative to the browser add-on, particularly for browsers on mobile devices, you can also prevent data collection by Google Analytics by clicking on the link provided above. An opt-out cookie will be set, which prevents your data from being collected in future when you visit our website. The opt-out cookie applies only to this browser and only to our website, and is stored on your device. If you delete the cookies in this browser, you will need to set the opt-out cookie again. Further information on data protection in connection with Google Analytics can be found via the following link in the Google Analytics Help Centre: https://support.google.com/analytics/answer/6004245?hl=de

Google AdWords Conversion Tracking

We also use Google Conversion Tracking to collect statistical data on the use of our website and to analyse this data with a view to optimising our website for you. In this process, Google AdWords sets a cookie (see section 5) on your computer if you have accessed our website via a Google advert. These cookies expire after 30 days and are not used for personal identification. If the user visits certain pages on the AdWords client’s website and the cookie has not yet expired, Google and the client can recognise that the user clicked on the advert and was redirected to that page. Each AdWords client receives a different cookie. Cookies cannot therefore be tracked across the websites of different AdWords clients. The information collected via the conversion cookie is used to generate conversion statistics for AdWords customers who have opted for conversion tracking. AdWords customers are informed of the total number of users who clicked on their advert and were redirected to a page tagged with a conversion tracking tag. However, they do not receive any information that can be used to personally identify users. If you do not wish to participate in the tracking process, you can also refuse the setting of the cookie required for this – for example, via a browser setting that generally disables the automatic setting of cookies. You can also disable cookies for conversion tracking by configuring your browser to block cookies from the domain ‘www.googleadservices.com’. Google’s privacy policy on conversion tracking can be found at the following link: https://services.google.com/sitestats/de.html

Clarity Analytics

This website uses Clarity. The provider is Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland, https://docs.microsoft.com/en-us/clarity/ (hereinafter ‘Clarity’). Clarity is a tool for analysing user behaviour on this website. In particular, Clarity tracks mouse movements and creates a graphical representation of which parts of the website users scroll to most frequently (heatmaps). Clarity can also record sessions, allowing us to view page usage in the form of videos. Furthermore, we receive information about general user behaviour on our website. Clarity uses technologies that enable user recognition for the purpose of analysing user behaviour (e.g. cookies or device fingerprinting). Your personal data is stored on Microsoft’s servers (Microsoft Azure Cloud Service) in the USA. Where consent has been obtained, the use of the aforementioned service is based exclusively on Article 6(1)(a) of the GDPR and Section 25 of the TTDSG. Consent may be withdrawn at any time. Where no consent has been obtained, the use of this service is based on Article 6(1)(f) of the GDPR; the website operator has a legitimate interest in effective user analysis. Further details on Clarity’s data protection policy can be found here: https://docs.microsoft.com/en-us/clarity/faq Opt-out option: https://choice.microsoft.com/de-DE/opt-out

Data subjects’ rights

You have the right:

  • to request information about your personal data processed by us in accordance with Article 15 of the GDPR. In particular, you may request information regarding the purposes of processing, the categories of personal data, the categories of recipients to whom your data has been or will be disclosed, the intended storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right to lodge a complaint, the origin of your data where it was not collected by us, and information on the existence of automated decision-making, including profiling, and, where applicable, meaningful information regarding its details;
  • in accordance with Article 16 of the GDPR, to request the rectification of inaccurate personal data or the completion of your personal data stored by us without undue delay;
  • to request, in accordance with Article 17 of the GDPR, the erasure of your personal data stored by us, unless processing is necessary for the exercise of the right to freedom of expression and information, to comply with a legal obligation, for reasons of public interest, or for the establishment, exercise or defence of legal claims;
  • in accordance with Article 18 of the GDPR, to request the restriction of the processing of your personal data, provided that you contest the accuracy of the data, the processing is unlawful but you oppose its erasure and we no longer require the data, but you require it for the establishment, exercise or defence of legal claims, or you have objected to the processing in accordance with Article 21 of the GDPR;
  • in accordance with Article 20 of the GDPR, to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format, or to request that it be transferred to another controller;
  • pursuant to Article 7(3) of the GDPR, to withdraw your consent at any time. As a result, we may no longer continue processing data based on that consent in future; and
  • pursuant to Article 77 of the GDPR, to lodge a complaint with a supervisory authority. As a rule, you may contact the supervisory authority for your usual place of residence or place of work, or for our registered office.

Right to object

Where your personal data is processed on the basis of legitimate interests pursuant to Article 6(1), first sentence, point (f) of the GDPR, you have the right, pursuant to Article 21 of the GDPR, to object to the processing of your personal data, provided there are grounds arising from your particular situation or the objection relates to direct marketing. In the latter case, you have a general right to object, which we will honour without you needing to specify a particular situation.

If you wish to exercise your right to object, simply send an email to the email address of the data controller provided at the beginning of this notice.

Data security

When you visit our website, we use the widely adopted SSL (Secure Sockets Layer) protocol in conjunction with the highest level of encryption supported by your browser. This is usually 256-bit encryption. If your browser does not support 256-bit encryption, we will use 128-bit v3 technology instead. You can tell whether a particular page on our website is being transmitted in encrypted form by the closed key or padlock symbol displayed in the status bar at the bottom of your browser.

We also employ appropriate technical and organisational security measures to protect your data against accidental or deliberate manipulation, partial or complete loss, destruction or unauthorised access by third parties. Our security measures are continuously improved in line with technological developments.

¹ Data protection authorities require the conclusion of a data processing agreement for the lawful use of Google Analytics. A corresponding template is provided by Google at http://www.google.com/analytics/terms/de.pdf.