1.1. What is personal data
Personal data is information that discloses or could disclose the identity of the user. We comply with the principle of data avoidance. As far as possible, we dispense with the collection of personal data.
1.2 Handling personal data
Personal data is used exclusively for establishing the contract, designing the content of the contract and implementing or executing the contractual relationship (Sec. 6 (I) (1 b) GDPR). In addition, personal data is only processed if we have received your consent (Sec. 6 (I) (1 a) GDPR). Your data is never disclosed to third parties. Insofar as it is necessary for delivering the goods ordered, we merely forward your data to the shipping company responsible for making the delivery for the purpose of fulfilling the contract. In order to process payments, we forward the payment data required for this purpose to the credit institute assigned with payment, and, if applicable, to the selected payment service provider assigned. Your personal data is processed exclusively within the EU, unless otherwise specified below.
1.3 Usage data
We collect general technical information when you visit our website. This information is made up of the IP address used, the time, duration of your visit, browser type and, if necessary, the originating website. This usage data is registered in a log file for technical reasons and can be used and stored for the purpose of analysing our website statistically. We do not link this usage data to your other personal data.
1.4 Registration data
You need to register to be able to use the functions of our website in full. The registration data is collected from the entries your make and used for the purpose specified in accordance with your consent (Sec. 6 (I) (1 a) GDPR).
1.5 Period of storage
We store your personal data after the period during which the purpose for collecting the data has ended, but only as long as it is required by law (in particular, tax law).
2. Your Rights
You can ask us for information about whether we process personal data on your person, and, if so, you have a right to information about this personal data and to the other information mentioned in Sec. 15 GDPR.
2.2 Right to rectification
You have the right to correct incorrect personal data relating to your person and can request that incomplete personal data be completed in accordance with Sec. 16 GDPR.
2.3 Right to deletion
You have the right to demand that we immediately delete personal data that we hold on your person. We are obliged to delete it immediately, especially if one of the following reasons applies:
- If your personal data is no longer needed for the purposes for which it was collected or otherwise processed;
- If you revoke your consent to processing your personal data and there is no other legal basis for processing it;
- Your personal data was processed illegally.
Your right to deletion does not exist if we require your personal data to assert, exercise or defend our legal rights.
2.4 Right to restrict processing
- You have the right to demand that we restrict the processing of your personal data if:
- You refute the accuracy of the data and we therefore need to verify the accuracy,
- Processing it is unlawful and you refuse to have it deleted and instead demand that its use be restricted.
- We no longer need the data, but you need it to assert, exercise or defend your legal rights,
- You have lodged an objection to your data being processed, and it is not yet clear whether our legitimate reasons outweigh your reasons.
2.5 Right to data portability
You have the right to receive the personal date you have provided us with in a structured, standard and machine-readable format, and you have the right to transfer this data to another person without hindrance, provided that its processing is based on consent or a contract and we perform processing using automated procedures.
2.6 Cancellation right
Insofar as processing your personal data is based on consent, you have the right to revoke this consent at any time.
2.7 General rights and right to appeal
Exercising your aforementioned rights is basically free of charge. In case of complaints, you have the right to contact the supervisory authority and the state data protection officer responsible directly.
3. Data Security
3.1 Data security
We use technical and organisational measures to protect all the data on our website against loss, destruction, access, modification and dissemination.
3.2 Sessions and cookies
4. Third-party Services
4.1 Google Analytics
4.2 Social media links
We have our own social media sites on third-party websites that can be reached using links from this website. You can access the respective websites from the third-party providers (e.g. Facebook, Twitter, Google+) by using the links. Once you have accessed the third-party website, you find yourself in the area of responsibility of the respective third-party provider, meaning that their privacy statements and their statements regarding the use of data apply. We do not have any influence over this, but do recommend that you sign out of the respective third-party provider to avoid the unnecessary transfer of data before using a corresponding link so that the third-party provider cannot create user profiles even if the link is used.
4.3 Using Google Maps
This website uses Google Maps, a mapping service provided by Google, operated by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States (“Google”). When using Google Maps, data concerning how visitors use the map functions is also collected, processed and used. No user interests are concerned here, which outweigh this technical necessity for integrating the video (Sec. 6 (I) (1 f) GDPR). You can view the privacy notices from Google under http://www.google.com/intl/en/policies/privacy/. You can view the additional usage information for Google Maps under http://www.google.com/intl/en_uk/help/terms_maps.html.
4.4 Using YouTube
4.5 Google Web Fonts
5. Presence on social media platforms
We use the following social media platforms for corporate presentation and communication purposes (express reference is made below to the linked privacy statements and opt-out options).
- Facebook (Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland)
- Opt-out: https://www.facebook.com/settings?tab=ads, alternatively http://www.youronlinechoices.com
- Twitter (Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA)
- Opt-out: https://twitter.com/personalization,
- Google+ (Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA)
- Opt-out: https://adssettings.google.com/authenticated
- Instagram (Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA)
- LinkedIn (LinkedIn Ireland Unlimited Company Wilton Place, Dublin 2, Ireland)
- Opt-out: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out
- Xing (XING AG, Dammtorstraße 29-32, D-20354 Hamburg)
- YouTube (Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA)
These social media platforms may process personal data outside of the EU. In this regard, we make reference to the aforementioned privacy statements from the respective social media platforms.
Depending on your user behaviour and our resulting interests, the respective social media platforms may create user profiles of actions taken on your part and store cookies on your computer in which your user behaviour is stored. If you have an account on the respective social media platform and are logged in, your use may even be stored independent of the device you are using. Your user profile can be used, for example, to place advertisements that are allegedly in line with your interests.
We process your personal data exclusively for communication with you about your chosen social media platform and the optimisation of our social media platform and ensure that no interests of yours are affected here, which outweigh this legitimate interest on our part (Sec. 6 (I) (1 f) GDPR). Insofar as you already granted the respective operator of the social media platform effective consent to appropriate data processing, processing your personal data is also based on this consent (Sec. 6 (I) (1 a) GDPR).
Please feel free to contact us about the topic of privacy using the contact details below. Responsible in terms of the GDPR is:
Luitpold Schott GmbH
Phone: +49 (0)6232 6459 0
Fax: +49 (0)6232 6459 30
Email: info@luitpold schott.com