Data Protection - ALUSTECK® Simply build yourself to measure

General notice and mandatory information

Designation of the responsible entity
The responsible entity for data processing on this website is:

ALUSTECK®
Owner Stephan Withake 
Weserstr. 19 
D-47506 Neukirchen-Vluyn

The responsible entity alone or jointly with others decides on the purposes and means of processing personal data (e.g. names, contact details, etc.).

Withdrawal of your consent to data processing
Some data processing operations are only possible with your express consent. You can withdraw your already given consent at any time. An informal notification by email is sufficient for the withdrawal. The legality of the data processing carried out until the withdrawal remains unaffected by the withdrawal.

Right to complain to the competent supervisory authority
As a data subject, in the event of a data protection violation, you have the right to lodge a complaint with the competent supervisory authority. The competent supervisory authority for data protection issues is the State Commissioner for Data Protection of the federal state in which our company is based. The following link provides a list of data protection officers and their contact details: https://www.bfdi.bund.de/DE/Service/Anschriften/.

Right to data portability
You have the right to have data that we process automatically on the basis of your consent or in fulfillment of a contract handed over to yourself or to third parties. The data will be provided in a machine-readable format. If you request the direct transfer of the data to another controller, this will only be done if it is technically feasible.

Right to information, rectification, blocking, deletion
You have the right at any time, within the framework of the applicable legal provisions, to free information about your stored personal data, their origin, their recipients and the purpose of data processing and, if applicable, a right to rectification, blocking or deletion of this data. For this purpose, and for further questions on the subject of personal data, you can contact us at any time using the contact options listed in the imprint.

SSL or TLS encryption
For security reasons and to protect the transmission of confidential content that you send to us as the site operator, our website uses SSL or TLS encryption. This means that data you transmit via this website cannot be read by third parties. You can recognize an encrypted connection by the "https://" address line of your browser and by the lock symbol in the browser line.

Server log files
The provider of the website automatically collects and stores information in server log files that your browser automatically transmits to us. These are:

Browser type and browser version
Operating system used
Referrer URL
Hostname of the accessing computer
Time of the server request
IP address

This data is not merged with other data sources. The basis for data processing is Art. 6 para. 1 lit. b GDPR, which permits the processing of data for the fulfillment of a contract or pre-contractual measures.

Data transmission upon conclusion of contract for goods purchase and shipping
Personal data is only transmitted to third parties if there is a necessity within the framework of contract processing. Third parties can be, for example, payment service providers or logistics companies. Further transmission of data does not take place or only if you have expressly consented to it. The basis for data processing is Art. 6 para. 1 lit. b GDPR, which permits the processing of data for the fulfillment of a contract or pre-contractual measures.

Registration on this website
To use certain functions, you can register on our website. The transmitted data is used exclusively for the purpose of using the respective offer or service. Mandatory information requested during registration must be provided in full. Otherwise, we will reject the registration. In the event of important changes, for example for technical reasons, we will inform you by email. The email will be sent to the address provided during registration. The processing of the data entered during registration takes place on the basis of your consent (Art. 6 para. 1 lit. a GDPR). You can withdraw your already given consent at any time. An informal notification by email is sufficient for the withdrawal. The legality of the data processing already carried out remains unaffected by the withdrawal. We store the data collected during registration for the period you are registered on our website. Your data will be deleted if you cancel your registration. Statutory retention periods remain unaffected.

Contact form
Data transmitted via the contact form, including your contact details, will be stored to process your request or to be available for follow-up questions. This data will not be passed on without your consent. The processing of the data entered into the contact form takes place exclusively on the basis of your consent (Art. 6 para. 1 lit. a GDPR). You can withdraw your already given consent at any time. An informal notification by email is sufficient for the withdrawal. The legality of the data processing operations carried out until the withdrawal remains unaffected by the withdrawal. Data transmitted via the contact form remains with us until you request its deletion, withdraw your consent to storage, or the necessity for data storage no longer exists. Mandatory legal provisions - in particular retention periods - remain unaffected.

Newsletter data
To send our newsletter, we need an email address from you. Verification of the provided email address is necessary, and receipt of the newsletter must be consented to. Supplementary data is not collected or is voluntary. The data is used exclusively for sending the newsletter. The data provided during newsletter registration is processed exclusively on the basis of your consent (Art. 6 para. 1 lit. a GDPR). You can withdraw your already given consent at any time. An informal notification by email is sufficient for the withdrawal, or you can unsubscribe via the "Unsubscribe" link in the newsletter. The legality of the data processing operations already carried out remains unaffected by the withdrawal. Data entered for setting up the subscription will be deleted upon unsubscription. If this data has been transmitted to us for other purposes and elsewhere, it will remain with us.

CleverReach
We use CleverReach for sending newsletters. The provider is CleverReach GmbH & Co. KG, Mühlenstr. 43, 26180 Rastede. With this service, we can organize and analyze newsletter dispatch. Your data entered for receiving the newsletter, such as your email address, is stored on CleverReach's servers. Server locations are Germany or Ireland. Newsletter dispatch with CleverReach allows us to analyze the behavior of newsletter recipients. The analysis shows, among other things, how many recipients have opened their newsletter and how often links in the newsletter have been clicked. CleverReach supports conversion tracking to analyze whether a previously defined action, such as a product purchase, has occurred after clicking a link. Data processing takes place on the basis of your consent (Art. 6 para. 1 lit. a GDPR). You can withdraw your already given consent at any time. An informal notification by email is sufficient for the withdrawal, or you can unsubscribe via the "Unsubscribe" link in the newsletter. The legality of the data processing operations already carried out remains unaffected by the withdrawal. If you do not wish for analysis by CleverReach, you must unsubscribe from the newsletter. An informal notification by email to us or unsubscribing via the "Unsubscribe" link in the newsletter is sufficient for unsubscription. Data entered for setting up the subscription will be deleted from our servers and CleverReach's servers upon unsubscription. If this data has been transmitted to us for other purposes and elsewhere, it will remain with us. Details on CleverReach's data protection provisions can be found at: https://www.cleverreach.com/de-de/datenschutz/.

Order processing
To fully comply with legal data protection requirements, we have concluded a contract for order processing with CleverReach.

YouTube
Our website uses YouTube plugins for the integration and display of video content. The provider of the video portal is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. When you access a page with an integrated YouTube plugin, a connection to the YouTube servers is established. YouTube is thereby informed which of our pages you have visited. YouTube can directly associate your surfing behavior with your personal profile if you are logged into your YouTube account. You can prevent this by logging out beforehand. The use of YouTube is in the interest of an appealing presentation of our online offers. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR. Details on the handling of user data can be found in YouTube's privacy policy at: https://policies.google.com/privacy.

Cookies
Our website uses cookies. These are small text files that your web browser stores on your device. Cookies help us to make our offer more user-friendly, effective, and secure. Some cookies are "session cookies." Such cookies are automatically deleted after the end of your browser session. Other cookies, however, remain on your device until you delete them yourself. Such cookies help us to recognize you when you return to our website. With a modern web browser, you can monitor, restrict, or prevent the setting of cookies. Many web browsers can be configured so that cookies are automatically deleted when the program is closed. Deactivating cookies may result in limited functionality of our website. The setting of cookies that are necessary for carrying out electronic communication processes or for providing certain functions desired by you (e.g., shopping cart) is based on Art. 6 para. 1 lit. f GDPR. As the operator of this website, we have a legitimate interest in storing cookies for the technically flawless and smooth provision of our services. If other cookies are set (e.g., for analysis functions), these will be treated separately in this privacy policy. Google Analytics Our website uses functions of the web analysis service Google Analytics. The provider of the web analysis service is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics uses "cookies." These are small text files that your web browser stores on your device and enable an analysis of website usage. Information generated by the cookie about your use of our website is transmitted to a Google server and stored there. The server location is usually the USA. The setting of Google Analytics cookies is based on Art. 6 para. 1 lit. f GDPR. As the operator of this website, we have a legitimate interest in analyzing user behavior to optimize our web offering and, if applicable, advertising.

IP anonymization
We use Google Analytics in conjunction with the IP anonymization function. It ensures that Google shortens your IP address within member states of the European Union or in other contracting states of the Agreement on the European Economic Area before transmitting it to the USA. There may be exceptional cases in which Google transmits the full IP address to a server in the USA and shortens it there. On our behalf, Google will use this information to evaluate your use of the website, to compile reports on website activity, and to provide us with other services related to website and internet use. The IP address transmitted by Google Analytics will not be merged with other Google data.

Browser Plugin
You can prevent the setting of cookies by your web browser. However, some functions of our website may be limited as a result. You can also prevent Google from collecting data regarding your website use, including your IP address, and from processing this data by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout. Mobile browsers can block the collection of your data by the Google Analytics cookie by clicking on this link.

Objection to data collection
You can prevent Google Analytics from collecting your data by clicking on the following link. An opt-out cookie will be set that prevents the collection of your data during future visits to our website: Deactivate Google Analytics Details on how Google Analytics handles user data can be found in Google's privacy policy: https://support.google.com/analytics/answer/6004245.

Order processing
To fully comply with legal data protection requirements, we have concluded a contract for order processing with Google.

Demographic features in Google Analytics
Our website uses the "demographic features" function of Google Analytics. This allows reports to be created that contain statements about the age, gender, and interests of site visitors. This data comes from Google's interest-based advertising and from third-party visitor data. It is not possible to assign the data to a specific person. You can deactivate this function at any time. This is possible via the ad settings in your Google account or by generally prohibiting the collection of your data by Google Analytics, as explained in the "Objection to data collection" section.

Facebook
This website uses the remarketing function "Custom Audiences" of Facebook Inc. ("Facebook"). This function serves to present interest-based advertisements ("Facebook Ads") to visitors of this website within the framework of their visit to the social network Facebook. For this purpose, the remarketing tag from Facebook has been implemented on this website. Through this tag, a direct connection to the Facebook servers is established when visiting the website. This transmits to the Facebook server that you have visited this website, and Facebook assigns this information to your personal Facebook user account. Further information on the collection and use of data by Facebook, as well as your rights and options for protecting your privacy in this regard, can be found in Facebook's data protection notices at https://www.facebook.com/about/privacy/. Alternatively, you can deactivate the "Custom Audiences" remarketing function at https://www.facebook.com/settings/. You must be logged in to Facebook for this.

PayPal
Our website allows payment via PayPal. The provider of the payment service is PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg. If you pay with PayPal, the payment data you entered will be transmitted to PayPal. The transmission of your data to PayPal is based on Art. 6 para. 1 lit. a GDPR (consent) and Art. 6 para. 1 lit. b GDPR (processing for the fulfillment of a contract). You can withdraw your already given consent at any time. Past data processing operations remain effective upon withdrawal.

Klarna
Our website allows payment via Klarna. The provider of the payment service is Klarna AB, Sveavägen 46, 111 34 Stockholm, Sweden. When paying with Klarna (Klarna checkout solution), Klarna collects various personal data from you. Details can be found in Klarna's privacy policy at: https://www.klarna.com/de/datenschutz/. Klarna uses cookies to optimize the Klarna checkout solution. This optimization constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR. Cookies are small text files that your web browser stores on your device. Klarna cookies remain on your device until you delete them. Details on the use of Klarna cookies can be found at: https://cdn.klarna.com/policy/cookie/. The transmission of your data to Klarna is based on Art. 6 para. 1 lit. a GDPR (consent) and Art. 6 para. 1 lit. b GDPR (processing for the fulfillment of a contract). You can withdraw your already given consent at any time. Past data processing operations remain effective upon withdrawal.

Sofortüberweisung
Our website allows payment via "Sofortüberweisung." The provider of the payment service is Sofort GmbH, Theresienhöhe 12, 80339 Munich. With the "Sofortüberweisung" procedure, we receive a payment confirmation from Sofort GmbH in real time and can immediately begin fulfilling our obligations. When paying via "Sofortüberweisung," your PIN and TAN are transmitted to Sofort GmbH. The payment provider then logs into your online banking account, automatically checks your account balance, and makes the transfer. An immediate transaction confirmation follows. Your transactions, the credit limit of your overdraft facility, and the existence of other accounts and their balances are also automatically checked after logging in. In addition to PIN and TAN, the transmission to Sofort GmbH also includes payment data and personal data about you. Your personal data includes first and last name, address, telephone number(s), email address, IP address, and possibly other data necessary for payment processing. This data transmission is necessary to unequivocally establish your identity and prevent fraud attempts. The transmission of your data to Sofort GmbH is based on Art. 6 para. 1 lit. a GDPR (consent) and Art. 6 para. 1 lit. b GDPR (processing for the fulfillment of a contract). You can withdraw your already given consent at any time. Past data processing operations remain effective upon withdrawal. Details on payment with Sofortüberweisung can be found at: https://www.sofort.de/datenschutz and https://www.klarna.com/sofort.

Pinterest Plugin
Our website uses functions of the social network Pinterest. The provider is Pinterest Inc., 808 Brannan Street, San Francisco, CA 94103-490, USA. When you access a page with Pinterest functions, your browser establishes a direct connection to the Pinterest servers. Log data is transmitted to Pinterest's servers. The server locations are the USA. The log data may allow conclusions to be drawn about your IP address, visited websites, browser type and settings, date and time of the request, your use of Pinterest, and cookies. Details on this can be found in Pinterest's privacy policy: https://policy.pinterest.com/de/privacy-policy.

Google AdWords and Google Conversion-Tracking
Our website uses Google AdWords. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. AdWords is an online advertising program. Within the framework of the online advertising program, we work with conversion tracking. After a click on an ad placed by Google, a cookie for conversion tracking is set. Cookies are small text files that your web browser stores on your device. Google AdWords cookies lose their validity after 30 days and are not used for personal identification of users. Google and we can recognize from the cookie that you clicked on an ad and were redirected to our website. Each Google AdWords customer receives a different cookie. The cookies are not traceable across websites of AdWords customers. Conversion statistics are generated with conversion cookies for AdWords customers who use conversion tracking. AdWords customers learn how many users clicked on their ad and were redirected to pages with a conversion tracking tag. However, AdWords customers do not receive any information that allows personal identification of users. If you do not wish to participate in tracking, you can object to its use. In this case, the conversion cookie must be deactivated in the browser's user settings. This also prevents inclusion in the conversion tracking statistics. The storage of "conversion cookies" is based on Art. 6 para. 1 lit. f GDPR. As the website operator, we have a legitimate interest in analyzing user behavior to optimize our web offering and our advertising. Details on Google AdWords and Google Conversion Tracking can be found in Google's privacy policy: https://www.google.de/policies/privacy/.

With a modern web browser, you can monitor, restrict, or prevent the setting of cookies. Deactivating cookies may result in limited functionality of our website.

Source: Data Protection Configurator from https://www.mein-datenschutzbeauftragter.de

Use of Shoplytics

We use the analysis service Shoplytics, offered by [Provider name including address and possibly link to privacy policy], to analyze user behavior in our online shop and to optimize our offer accordingly.

Shoplytics uses cookies and similar technologies to collect information about visitors' usage behavior. In particular, the following data may be collected and processed:

- Visited pages and products

- Time spent

- Referrer URL (previously visited website)

- Device type, browser, IP address (possibly shortened/anonymized)

- Timestamps of visits

- Transaction data (e.g., purchases made, shopping cart contents)

The processing of this data is based on Art. 6 para. 1 lit. f GDPR (legitimate interest), whereby our interest lies in analyzing user behavior to continuously improve both our offer and the user experience. If consent to the use of cookies is required, data processing is based on Art. 6 para. 1 lit. a GDPR.

If the IP address is processed, this is done exclusively in anonymized form, so that a direct personal reference is excluded.

Right to object

You can object to the processing of your data by Shoplytics at any time by adjusting your cookie settings.

Further information can be found in Shoplytics' privacy policy at: https://shoplytics.de/datenschutzerklaerung

Microsoft Clarity, offered by Microsoft Corporation, One Microsoft Way, Redmond, WA 98052, USA, to better understand user behavior on our website and continuously optimize our offering.

Clarity enables, among other things, the creation of heatmaps and session recordings (session replays), which show how users interact with our website (e.g., which areas are clicked, how far they scroll, how users navigate between individual pages). This information helps us to make our website more user-friendly and to improve our content and marketing measures.

Microsoft Clarity uses cookies and similar technologies to collect data about user behavior and the device used. In particular, the following data may be collected:

visited pages and interactions
mouse movements, click behavior, scroll behavior
time spent and navigation paths
device type, screen size, browser information
location data (country level only)
IP address (in anonymized or shortened form)

The processing of this data is based on Art. 6 para. 1 lit. f GDPR (legitimate interest). Our legitimate interest lies in analyzing user behavior to technically and content-wise improve our web offering. If consent to the use of cookies is required, processing is based on Art. 6 para. 1 lit. a GDPR.

The collected data is stored in a pseudonymized user profile. Neither we nor Microsoft use this data to identify individual users.

Further information on the processing of personal data by Microsoft can be found in the Microsoft Privacy Statement:

https://privacy.microsoft.com/de-de/privacystatement

Right to object

You can object to the processing of your data by Microsoft Clarity at any time by adjusting your cookie settings accordingly.