data protection

Introduction

This privacy policy informs you about the type, scope and purpose of the collection and use of personal data on the associated websites www.juwel.com and www.juwel-garden.com (hereinafter "websites") by Juwel H. Wüster GmbH (hereinafter "we" or "us"). We are the responsible body for all personal data collected on our websites, unless this privacy policy contains different information.

Personal data is information that can be used to identify a person, i.e. information that can be traced back to a person. This typically includes the name, email address or telephone number. In addition, purely technical data that can be assigned to a person is also considered personal data.

Contact details of the person responsible:

Juwel H. Wüster GmbH
Industrial Zone 19
A- 6460 Imst
Tel.: 05412/69400
Fax: 05412/64838
kund@juwel.com

your rights

You have the right to receive information about the personal data that has been stored about you free of charge upon request. In addition, you have the right to correct incorrect data, the right to request the restriction of processing of data that has been processed in excess and the right to delete personal data that has been processed unlawfully or stored for too long (provided that this is not contrary to a statutory retention period or other reasons under Art. 17 Para. 3 GDPR). In addition, you have the right to transfer all data that you have provided to us in a common file format (right to data portability), provided that you have provided the data to us as part of a declaration of consent or to fulfill a contract.

If you have a right to object to the processing of individual procedures, we will point this out in the description of the individual procedures.

To exercise your rights, simply send an email to kund@juwel.com.

In addition, you also have the right to lodge a complaint with a data protection supervisory authority. A list of German and European data protection officers and their contact details can be found at the following link: https://www.bfdi.bund.de/DE/Infothek/Anschrift_Links/anschrift_links-node.html.

Voluntary provision of data

The provision of your personal data on these websites is generally neither legally nor contractually required. You are not obliged to provide personal data on these websites. Nevertheless, the provision of the functions of these websites requires the processing of your personal data.

recipient of data

As a general rule, we do not share personal data unless we expressly mention this in this privacy policy. However, the website is hosted by our service provider nessus.at.

The transfer of personal data to the above-mentioned service provider is based on Art. 6 Paragraph 1 Letter f of GDPR. This permission permits the processing of personal data in our "legitimate interest", unless your fundamental rights, fundamental freedoms or interests in refraining from data processing outweigh this. Our legitimate interest lies in using specialized service providers who can implement appropriate hosting more efficiently than we can. However, you can object to this data processing at any time if there are reasons that exist in your particular situation and that speak against the transfer of personal data to a server service provider. All you need to do is send an email to shop@juwel.com.

Notes on Cookies

Cookies are small text files that are stored on your device by the browser you are using when you visit our websites. In this way, individual services on a website can "recognize" you and "remember" which settings you have made. On the one hand, this makes websites more user-friendly and therefore more user-friendly (e.g. storing login data). On the other hand, cookies are used to collect statistical data on website usage and to use the data obtained in this way for analysis and advertising purposes.

Some cookies are automatically deleted from your device as soon as you leave the website (so-called session cookies). Other cookies are stored for a specific period of time, which does not exceed two years (persistent cookies). We also use so-called third-party cookies, which are managed by third parties in order to offer certain services.

You can influence the use of cookies. Most browsers have an option to restrict or completely prevent cookies from being saved. However, please note that the use and in particular the comfort of use will be restricted without cookies.

Overview of the procedures

On these websites, personal data is processed as part of the following procedures:

1. Presentation of our products and contact

2. Download images/texts

3. Webshop/Registration

4. Contract execution

5th newsletter

6. Server log files

7. Google Analytics + Notes on Cookies

8. Google DoubleClick

1. Description of the main proceedings

The functionality of the websites consists in presenting our products and offering you the opportunity to contact us. Personal data is processed when you use our websites. When you contact us (for example by email or using the contact form), the information you provide is stored for the purpose of processing your request and in the event that follow-up questions arise.

legal basis

The information provided when making contact is processed on the basis of Art. 6 Paragraph 1 Letter a and Letter f of GDPR. This permission permits the processing of personal data within the scope of the "legitimate interest" of the controller, unless your fundamental rights, freedoms or interests prevail. Our legitimate interest is in processing the contact. You can object to this data processing at any time if there are reasons that exist in your particular situation and that speak against the data processing. To do so, simply send an email to shop@juwel.com

duration of data storage

The personal data stored in the context of the contact will be deleted when the matter associated with the contact has been fully clarified and it is not expected that the specific contact will be relevant again in the future.

2. Download images and texts

On the juwel.com website, you have the option of downloading high-resolution images and texts about our products after logging in to the download area. You can receive the access data for our download area from us by phone or email. If you request this by email, we will save your email in order to create the access data. We can also track which texts and images you have downloaded.

legal basis

The information provided when creating the access data and downloading the images and texts is processed on the basis of Art. 6 Paragraph 1 Letter a and Letter f of GDPR. This permission permits the processing of personal data within the scope of the "legitimate interest" of the person responsible, unless your fundamental rights, freedoms or interests prevail. Our legitimate interest lies in the creation of the access data and the security of our websites. You can object to this data processing at any time if there are reasons that exist in your particular situation and that speak against the data processing. To do this, simply send an email to kund@juwel.com

duration of data storage

The personal data stored during the download will be deleted once the issue associated with the contact has been fully resolved and it is not expected that the specific contact will be relevant again in the future.

3. Webshop/Registration

You can register on our website to use additional functions on the site. You can access our accessories web shop on the website www.juwel-garden.com. Here you can order our products after registering. When registering, you will be asked to enter personal data. Title, last name, first name, email address, telephone number, street, city and state are required, as we absolutely need this information in order to carry out the contract with you. Without this mandatory information, we will reject your registration. You can optionally provide further information.

When you order goods on our website, we use the data stored in your registration account.

You can view, change, correct or delete the data you have provided in your user account at any time. You can also delete your user account at any time.

legal basis

The registration and order data are processed on the basis of Art. 6 Paragraph 1 Letter b of GDPR. This permission allows the processing of personal data for the purposes of fulfilling a contract. The account and order data are necessary in order to be able to conclude and execute a contract with you.

duration of data storage

The data on specific purchase contracts and corresponding invoices are stored for 10 years after the end of the billing year due to the retention period under Section 257 HGB and Section 147 AO. Other account data is only deleted when the customer closes a user account.

4. Contract execution

If you order goods on our website, additional data about your billing address, in particular your name and address, will be processed.

When executing the contract, we will inevitably pass on your data to our logistics service providers and, depending on the payment method chosen, also to our financial service providers or your bank in order to execute the contract.

On our website we offer, among other things, payment via "Sofortüberweisung". The provider of this payment service is Sofort GmbH, Theresienhöhe 12, 80339 Munich (hereinafter "Sofort GmbH").

Using the Sofortüberweisung process, we receive a payment confirmation from Sofort GmbH in real time and can immediately begin to meet our obligations.

If you have chosen the Sofortüberweisung payment method, send the PIN and a valid TAN to Sofort GmbH, which they can use to log into your online banking account. After you log in, Sofort GmbH automatically checks your account balance and makes the transfer to us using the TAN you have sent. They then immediately send us a transaction confirmation. After you log in, your transactions, the credit limit of the overdraft facility and the existence of other accounts and their balances are also automatically checked.

In addition to the PIN and TAN, the payment data you enter and your personal data are also transmitted to Sofort GmbH. Your personal data includes your first and last name, address, telephone number(s), email address, IP address and, if applicable, other data required for payment processing. The transmission of this data is necessary to establish your identity beyond doubt and to prevent attempted fraud.

We are no longer responsible for further data processing by Sofort GmbH. Information on the purpose and handling of personal data as well as information on your rights can be found in the data protection declaration of Sofort GmbH at: www.sofort.de/datenschutz.html and https://www.klarna.com/sofort/.

legal basis

The registration and order data are processed on the basis of Art. 6 Paragraph 1 Letter b of GDPR. This permission permits the processing of personal data for the purposes of fulfilling a contract.

Your data will be transmitted to Sofort GmbH on the basis of Art. 6 (1) (a) and (b) GDPR. Art. 6 (1) (a) GDPR allows the processing of personal data if you have consented to this. By choosing the corresponding payment method, you have consented to the data processing. Furthermore, Art. 6 (1) (f) GDPR allows the processing of personal data for the purposes of fulfilling a contract. The payment-related data is necessary in order to be able to conclude and execute a contract with you.

duration of data storage

The data on specific purchase contracts and corresponding invoices are stored for 10 years after the end of the accounting year due to the retention period under Section 257 HGB and Section 147 AO. Information on the duration of data storage by Sofort GmbH can be found in the data protection declaration at www.sofort.de/datenschutz.html .

5th newsletter

We use the email address you entered to send you the newsletter.

You can unsubscribe from our newsletter at any time by simply sending an email to kund@juwel.com.

legal basis

This data processing is based on your consent, which you gave when registering for the newsletter. According to Art. 6 Paragraph 1 Letter a of GDPR, data processing is permitted if you have given your consent for data processing for one or more specific purposes. When ordering the newsletter, you have given the following declaration of consent:

"As part of the newsletter, JUWEL H. Wüster Juwel GmbH regularly informs about new products and offers. I can revoke my consent to this at any time with effect for the future. To do so, simply send an email to kund@juwel.com."

duration of data storage

The personal data stored as part of the newsletter registration will be deleted once you have successfully unsubscribed from the newsletter.

You can do this at any time without giving reasons.

6. Server log files

Each time you access the websites, we automatically collect a series of technical data that constitutes personal data.

These are:

- IP address of the user

- Name of the retrieved website or file

- Date and time of access

- amount of data transferred

- Message about successful retrieval

- Browser type and version

- User's operating system

- device used by the user, including MAC address

- Referrer URL (the previously visited page)

This data will not be merged with other personal data that you actively provide on the website. We collect server log files for the purpose of administering the websites and detecting and preventing unauthorized access.

legal basis

The personal data in log files are processed on the basis of Art. 6 Paragraph 1 Letter f of GDPR. This permission permits the processing of personal data within the scope of the "legitimate interest" of the controller, unless your fundamental rights, freedoms or interests outweigh this. Our legitimate interest lies in easier administration and the ability to detect and track hacking. You can object to this data processing at any time if there are reasons that exist in your particular situation and that speak against the data processing. All you need to do is send an email to shop@juwel.com.

What are IP addresses?

IP addresses are assigned to every device (e.g. smartphone, tablet, PC) that is connected to the Internet. Which IP address this is depends on which Internet access your device is currently using to connect to the Internet. This can be the IP address assigned to you by your Internet provider, for example if you are connected to the Internet at home via your WiFi. It can also be an IP address assigned to you by your mobile provider or the IP address of a provider of a public or private WiFi or other Internet access. In its currently most common form (IPv4), the IP address consists of four blocks of digits. As a private user, you will usually not use a constant IP address, as this is only assigned to you temporarily by your provider (so-called "dynamic IP address"). With a permanently assigned IP address (so-called "static IP address"), it is in principle easier to clearly assign user data. Except for the purpose of tracking unauthorized access to our website, we do not generally use this data on a personal basis, but rather simply evaluate on an anonymous basis which of our websites are favored, how many accesses occur daily, and similar.

 

Our website already supports the new IPv6 addresses. If you already have an IPv6 address, you should also know the following: The IPv6 address consists of eight blocks of four. The first four blocks, as with the entire IPv4 address, are typically assigned dynamically for private users. The last four blocks of an IPv6 address (so-called "interface identifier") are determined by the end device that you use to browse the website. Unless otherwise set in your operating system, the so-called MAC address is used for this. The MAC address is a type of serial number that is assigned uniquely to every IP-capable device worldwide. We therefore do not save the last four blocks of your IPv6 address. In general, we recommend that you activate the so-called "privacy extensions" on your end device in order to better anonymize the last four blocks of your IPv6 address. Most common operating systems have a "privacy extensions" function, although in some cases this is not preset by default.

duration of data storage

The server log files with the above data are automatically deleted after 30 days. We reserve the right to store the server log files for longer if there are facts that suggest that unauthorized access (such as an attempted hacking or a so-called DDOS attack) has occurred.

7. Google Analytics

This website uses Google Analytics, a web analysis service provided by Google LLC (“Google”), 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Google Analytics sets several “cookies” (see above) to identify your browser. The information generated by the cookies about your use of this website is usually transferred to a Google server in the USA and stored there. However, we have activated the IP anonymization function on this website so that your IP address is shortened beforehand by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide the website operator with other services relating to website activity and Internet usage. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. For the exceptional cases in which personal data is transferred to the USA, Google has submitted to the EU-US Privacy Shield, www.privacyshield.gov/EU-US-Framework .

legal basis

We base the processing of personal data by Google Analytics on Art. 6 (1) (f) GDPR. This permission permits the processing of personal data within the scope of the "legitimate interest" of the controller, unless your fundamental rights, freedoms or interests outweigh this. Our legitimate interest is to analyze the use of our website. You can prevent the transmission of the data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plug-in available under the following link: tools.google.com/dlpage/gaoptout ;

duration of data storage

The personal reference is immediately removed by partially deleting the IP addresses, so that only statistical data is stored.

8. Google DoubleClick

These websites use Google DoubleClick, an online marketing service provided by Google Inc. ("Google"). DoubleClick uses cookies to present advertisements that are relevant to you. A pseudonymous identification number (ID) is assigned to your browser in order to check which advertisements have been displayed in your browser and which advertisements have been viewed. The use of DoubleClick cookies enables Google and its partner websites to display advertisements based on previous visits to our website or other websites on the Internet.

legal basis

We base the processing of personal data by Google DoubleClick on Art. 6 Paragraph 1 Letter f of GDPR. This permission permits the processing of personal data within the scope of the "legitimate interest" of the controller, unless your fundamental rights, freedoms or interests outweigh this. Our legitimate interest lies in the personalized display of targeted advertising and the statistical analysis of the effectiveness of advertising (e.g. determining how many clicks on an advertising banner led to a purchase on our website). You can prevent the transmission of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plug-in available under the following link.

duration of data storage

The cookies expire 60 days after their last use.