Have you forgotten your password?
Privacy Policy
KauPo Plankenhorn saves your data only for your order and it's transaction.
Data privacy statement
a) Introduction
How do we treat your personal data
We take
the protection of your data very seriously and strictly comply with the
applicable rules of data privacy laws. On this website, personal data will only
be collected to the extent required from a technical and organizational point
of view. Your data will never be shared with any third parties. The following
statement gives you an overview on how we ensure the protection of your
personal data and which data will be collected for a specific purpose.
b) Data controller
The data
controller within the meaning of the General Data Protection Regulation and
other national data privacy laws of the member states as well as other data
protection regulations is:
KauPo Plankenhorn e.K.
D-78549 Spaichingen
Represented by the managing director/s: Patrick Plankenhorn
c) General information about data processing
Scope of personal data processing
We
principally process personal data only insofar as this is required for
providing a functional website as well as our contents and services. The
processing of our users’ personal data will only be carried out with the user’s
consent, with the exception of cases in which obtaining the prior consent is
not possible due to factual reasons and the processing of the data is permitted
by legal provisions.
Legal basis for personal data processing
Insofar as we obtain a data subject’s consent for the processing of personal data, Art. 6 (1) (a) of the EU General Data Processing Regulation (GDPR) serves as a legal basis.
In the case of processing personal data which is required for the performance of a contract to which the data subject is a party, Art. 6 (1) (b) serves as a legal basis. The same applies to processing operations which are required for the implementation of pre-contractual measures.
Insofar as
the processing of personal data is required for the compliance with a legal
obligation to which our company is subject, Art. 6 (1) (c) GDPR serves as a legal
basis.
In the event that vital interests of the data subject or another individual require the processing of personal data, Art. 6 (1) (d) GDPR serves as a legal basis.
If the processing
is required for the protection of a legitimate interest of our company or any
third party, and the interests, fundamental rights and freedoms of the data
subject do not override the first-mentioned interest, Art. 6 (1) (f) GDPR
serves as a legal basis for the processing.
Data deletion and storage period
The data subject’s personal data will be deleted or blocked as soon as the purpose for storage is no longer applicable. Storage can also take place if this has been provided in Union regulations, laws or other rules by European or national legislators to which the data controller is subject. The data will also be blocked or deleted if a storage period prescribed by the above-mentioned rules expires, unless there is a requirement for the further storage of the data with regard to the conclusion or performance of a contract.
d) Creation of log files
Description and scope of data processing
Each time
our website is accessed, our system collects automated data and information
from the computer system of the accessing PC.
On this occasion, the following data will be collected:
- browser type and version
- the operating system used
- the user´s internet service provider
- the preset resolution and colour depth
- the referrer URL (the previously visited website, if applicable)
- the host name / IP adress of the accessing computer
- time and date of the server request
This data will not be stored together with other personal data of the user.
Legal basis for data processing
The legal basis for the temporary storage of the data and the log files is Art. 6 (1) (f) GDPR.
Purpose of data processing
The storage of the IP address in log files occurs to ensure the functionality of the website. Furthermore, the data serves for optimizing the website and for protecting the security of our IT systems. In this context, the data will not be processed for marketing purposes.
Our legitimate interest in the data processing is also based on these purposes pursuant to Art. 6 (1) (f) GDPR.
Storage period
If IP addresses are stored in log files, this happens after seven days at the latest. A storage beyond that is possible. In this case, the users’ IP addresses will be deleted or encrypted, so that any association with the accessing client is no longer possible.
Opportunity to opt out and possibility of deletion
The data
collection for the provision of the website and the storage of the data in log
files is absolutely required for the operation of the website. Therefore, the
user has not opportunity to opt out.
e) Use of cookies
Description and scope of data processing
Our website uses cookies. Cookies are text files which are stored in the Internet browser or by the Internet browser on the user’s computer system. When a user accesses a website, a cookie may be stored on the user’s operating system. This cookie contains a characteristic string which allows a clear identification of the browser when the website is accessed again.
We use
cookies to make our website more user-friendly. Some of the elements of our
website require that the accessing browser may also be identified after a
change to another website.
- Language settings
- Items in a shopping cart
- Log-in information
- Search
When
accessing our website, the users are informed about the use of cookies for
analysing purposes and referred to this data privacy statement by means of an information
banner. In this context, it is also pointed out how the storage of cookies may
be prevented in the browser settings.
Legal basis for data processing
The legal
basis for processing personal data using cookies is Art. 6 (1) (f) GDPR.
Purpose of data processing
The purpose
for using technically required cookies is to simplify the use of the websites
for our users. Some features of our website may not be provided without using
cookies. For these features, it is necessary that the browser is even recognized
after a page change.
We require cookies for the following applications:
- Shopping cart
- Application of language settings
- Remembering search terms
- Search
The user data collected by technically required cookies will not be used for creating user profiles.
These
purposes also represent our legitimate interest in processing personal data
pursuant to Art. 6 (1) (f) GDPR.
Storage period, opportunity to opt out and possibility of deletion
Cookies are
stored on the user’s computer and transmitted by this computer to our website.
Thus, you as the user have full control over the use of cookies. Through
changing the settings in your Internet browser, you can deactivate or limit the
transmission of cookies. Cookies already stored can be deleted at any time. This
can also be done automatically. If cookies for our website are deactivated,
possibly not all features of the website may be fully used.
f) Contact form and email contact
Description and scope of data processing
Our website contains a contact form which can be used to contact us electronically. If a user takes this opportunity, the data entered in the input mask will be transmitted to us and stored. This data includes:
First name, surname, street, house number, post code, city, country, e-mail
Your consent for processing your data will be requested during the transmission process; you will also be referred to this privacy statement.
Alternatively, you can contact us using the email address provided. In this case, the personal data of the user transmitted with the email will be stored. Please note, however, that the confidentiality of emails or other electronic forms of communication cannot be guaranteed on the Internet. Therefore, we recommend you to send any confidential information by post.
We will not
share the data collected in that respect with any third parties. The data will
be used exclusively for processing the conversation.
Legal basis for data processing
The legal
basis for data processing with the user’s consent is Art. 6 (1) (a) GDPR.
The legal
basis for processing data transmitted by sending an email is Art. 6 (1) (f)
GDPR. If the email contact is targeted at the conclusion of a contract, another
legal basis for the processing is Art. 6 (1) (b) GDPR.
Purpose of data processing
The
processing of personal data from the input mask exclusively serves for the
handling of the establishment of contact. If this is done by email, this also
represents the required legitimate interest in the processing of the data.
Storage period
The data
will be deleted as soon as it is no longer required to achieve the purpose of its
collection. Regarding the personal data from the input mask of the contact form
and the data transmitted by email, this is the case when the relevant
conversation with the user has ended. The conversation has ended when it can be
inferred from the circumstances that the relevant situation has been
conclusively clarified.
Opportunity to opt out and possibility of deletion
The user
has the possibility to withdraw his consent regarding the processing of
personal data at any time. If the user contacts us by email, he may object to
the storage of his personal data at any time. In this case, the conversation
may not be continued.
The user
has also the possibility to object to the storage of his personal data by post.
All personal data which has been stored during the establishment of contact will be deleted in these cases.
g) Newsletter
Description and scope of data processing
Our website
provides the possibility to subscribe to a free newsletter. In the process, the
data from the input mask will be transmitted to us when you subscribe to the newsletter.
During the
subscription process, the following data will be additionally collected:
e-mail address
In order to ensure that an email address has not been improperly entered in our mailing list by a third party, we use the so-called DOI procedure in accordance with the law. In this procedure, the subscription to the newsletter and the receipt of the subscription confirmation are recorded. No emails will be sent without the subscription confirmation.
No data will be shared with third parties in connection with the data processing for the distribution of newsletters. The data will be used exclusively for the distribution of the newsletter.
Legal basis for data processing
The legal
basis for data processing after the user’s newsletter subscription with the
user’s consent is Art. 6 (1) (a) GDPR.
Purpose of data processing
The
collection of the user’s email address serves for delivering the newsletter.
Storage period
The data
will be deleted as soon as it is no longer needed for the achievement of the
purpose of its collection. Thus, the user’s email address will be stored as
long as the subscription for the newsletter is active.
Opportunity to opt out and possibility of deletion
The newsletter
subscription may be cancelled by the relevant user at any time. Every
newsletter contains a pertinent link for this purpose.
h) Shop
Description and scope of data processing
On our shop
site, we offer users the possibility to register by indicating their personal
data. To be able to process your order, the following data will be collected,
processed and used (*mandatory information):
Title, first name, last name*, company, street*, house number*, post code*, town*, VAT ID, country*, phone number*, fax, mobile phone number, private phone number.
Your personal data will be exclusively shared with third-party service providers who are involved in the contract processing, such as the logistics company charged with the delivery and the financial institution charged with the payment matters. If your personal data is shared with third parties, the scope of the transmitted data is limited to the required minimum. We have a contract data processing agreement in place with all contractual partners.
We will
only share your personal data with third parties if:
- you have given your explicit consent pursuant to Art. 6 (1) p. 1 (a) GDPR,
- sharing is required pursuant to Art. 6 (1) p. 1 (f) GDPR for the assertion, exercise or defence of legal claims and there is no reason to assume that you have an overriding legitimate interest in the non-disclosure of your data,
- there is a legal obligation for sharing pursuant to Art. 6 (1) p. 1 (c) GDPR, and
- this is permitted by law and pursuant to Art. 6 (1) p. 1 (b) GDPR required for the execution of contractual relationships with you.
Legal basis for data processing
The legal
basis for processing the data is Art. 6 (1) (a) GDPR with the user’s
consent.
If the registration serves for the performance of a contract to which the user is a contractual party or for the implementation of pre-contractual measures, Art. 6 (1) (b) GDPR is an additional legal basis for processing the data.
Purpose of data processing
We use your personal data that we obtain during your use of our online
shop for the initiation and performance of purchase contracts concluded via the
online shop as well as for customer service and support. Furthermore, we use
your personal data also for the assertion of rights regarding the purchase
contracts concluded or initiated with you.
Storage period
The data
will be deleted as soon as it is no longer required for the achievement of the
purpose of its collection.
Regarding the registration process for the performance of a contract or the implementation of pre-contractual measures, this is the case when the data is no longer required for the performance of the contract. The requirement to store a contractual partner’s personal data may even continue to exist after the conclusion of the contract, in order to comply with contractual or legal obligations.
Opportunity to opt out and possibility of deletion
As a user, you have the possibility to unregister at any time. The data stored about you may be changed at any time.
If the data
is required for the performance of a contract or for the implementation of
pre-contractual measures, a premature deletion of the data is only possible if
contractual or legal obligations do not prevent a deletion.
i) Sharing personal data with third parties
Google reCaptcha
The reCAPTCHA service of Google Inc. (Google) is used for the protection
of your orders via an Internet form. The query serves for distinguishing if the
entry was made by a human or occurred improperly by automated machine
processing. The query includes sending the IP address and, if applicable, other
data required by Google for the reCAPTCHA service. For this purpose, your entry
will be transmitted to and further used by Google. By using reCaptcha you agree
that the identification performed by you will be incorporated in the
digitisation of old works. In the case of the IP anonymization activated on this website, your IP
address will be previously abbreviated by Google within the member states of
the European Union or in other states that are party to the Agreement on the
European Economic Area. Only in exceptional cases will the full IP address be
transmitted to a Google server in the USA and abbreviated there. On behalf of
the operator of this website, Google will use this information to assess your
use of the website. The IP address
transmitted from your browser within reCaptcha
will not be amalgamated with other data from Google. Such data is subject to the deviating data protection regulations of
Google. For further information regarding the data protection regulations of
Google please see:
https://policies.google.com/privacy?hl=en
Website analysis with Google Analytics
This website uses Google Analytics, a web analysis service of Google, Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; „Google“). The use includes the Universal Analytics mode. This makes it possible to allocate data, sessions and interactions across several devices to a pseudonym user ID, thus analysing the activities of a user across multiple devices.
Google Analytics uses so-called cookies. These are text files that are stored on your computer and enable an analysis of your use of the website. The information about your use of this website generated by the cookie is usually transmitted to a Google server in the USA and is stored there.
In the case of the IP anonymization activated on this website, your IP address will be previously abbreviated by Google within the member states of the European Union or in other states that are party to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and abbreviated there. The IP address transmitted from your browser within Google Analytics will not be amalgamated with other data from Google. On behalf of the operator of this website, Google will use this information to assess your use of the website, to compile reports regarding the website activities and to perform other services connected to the website and Internet use for the website operator. These purposes also represent our legitimate interest in the data processing.
The legal
basis for the use of Google Analytics is § 15 (3) TMG (German Telemedia Act)
or, respectively, Art. 6 (1) (f) GDPR. The data sent by us and linked to
cookies, username (e. g. user ID) or marketing IDs will be automatically
deleted after 14 months. The deletion of data whose storage period has expired occurs
automatically once a month.
For more detailed information regarding the terms of use and data privacy, please see https://www.google.com/analytics/terms/us.html or https://policies.google.com/?hl=en .
You may prevent the storage of cookies by selecting the appropriate settings of your browser software; please note, however, that if you do so, you may not be able to make full use of all features of this website. Furthermore, you may prevent the collection of the data (including your IP address) generated by the cookie that is related to your use of the website by Google, as well as the processing of this data by Google, by downloading and installing the “Google Analytics opt-out browser add-on“ (https://tools.google.com/dlpage/gaoptout?hl=en) provided by Google.
j) Deletion and administration of cookies
Depending on the browser used, you may administer the use of cookies. Below you will find some assistance for common browsers.
Microsoft Explorer:
https://support.microsoft.com/en-us/help/17442/windows-internet-explorer-delete-manage-cookies
Firefox:
https://support.mozilla.org/en-US/kb/enable-and-disable-cookies-website-preferences
Google Chrome:
https://support.google.com/chrome/answer/95647?hl=en&hlrm=en
Safari:
https://support.apple.com/kb/PH21411?locale=de_DE&viewlocale=en_US
Opera:
http://help.opera.com/Windows/11.50/en/cookies.html
k) Rights of the data subject
Right of access
You may
request a confirmation from the data controller as to if personal data relating
to you is processed by us.
If such a
processing occurs, you may request information from the data controller
regarding the following data:
(1) the purposes for which the personal data is processed;
You have
the right to request information on if the personal data relating to you is
being transmitted to a third country or to an international organization. In this
context, you may request to be informed about the appropriate guarantees
pursuant to Art. 46 GDPR in connection with the transfer.
Right to rectification
You have the
right to rectification and/or completion towards the data controller if the
processed personal data relating to you is incorrect or incomplete. The data
controller shall carry out the rectification immediately.
Right to restriction of processing
You may request
the restriction of processing the personal data relating to you under the
following conditions:
(1) if you contest the correctness of the personal data relating to you during a period of time that enables the data controller to review the correctness of the personal data;
If the
processing of the personal data relating to you has been restricted, this data
may only be processed (except for its storage) with your consent or for the
assertion, exercise or defence of legal claims or for the protection of the
rights of another natural or legal person or for reasons of substantial public
interest of the European Union or a member state.
Right to deletion
Obligation to delete
You may
request from the data controller that the personal data relating to you is
immediately deleted, and the data controller is obligated to immediately delete
such data, if one of the following reasons applies:
(1) The personal data relating to you is no longer required for the purposes for which it was collected or otherwise processed.
Information to third parties
If the data
controller has disclosed the personal data relating to you and if he is
obligated to delete them pursuant to Art. 17 (1) GDPR, he shall take
appropriate measures, including technical measures, taking into account the
technology available and the cost of implementation, to inform data controllers
responsible for the data processing who process the personal data about the
fact that you as the data subject requested from them the deletion of all links
to this personal data or of copies or replications of this personal data.
Exceptions
The right
to deletion shall not apply, if the processing is required
(1) to exercise the right to freedom of speech and information;
Right to information
If you have
exercised the rights to rectification, deletion or restriction of processing
against the data controller, the data controller is obligated to inform all
recipients, to whom the personal data relating to you has been disclosed, about
this rectification, deletion of the data or restriction of processing, unless
this proves to be impossible or involves disproportionate effort.
You have the right to be informed about these recipients by the data controller.
Right to data portability
You have
the right to receive the personal data relating to you, which you provided to
the data controller, in a structured, common and machine-readable format. You
have also the right to transmit this data to another data controller without
any hindrance by the data controller to whom the personal data has been
provided, as far as
(1) the processing is based on a consent pursuant to Art. 6 (1) (a) GDPR or Art. 9 (2) (a) GDPR or on a contract pursuant to Art. 6 (1) (b) GDPR and
When
exercising this right, you also have the right to effect that the personal data
relating to you is transmitted directly from one data controller to another
data controller, insofar as this is technically feasible. The freedoms and
rights of other persons may not be affected thereby.
The right
to data portability does not apply to the processing of personal data which is
required for the performance of a task in the public interest or in the
exercise of official authority vested in the data controller.
Right to object
You have
the right to object to the processing of personal data relating to you pursuant
to Art. 6 (1) (e) or (f) GDPR at any time for reasons resulting from your
specific situation; this also applies to any profiling based on these
provisions.
The data
controller may no longer process the personal data relating to you, unless he
is able to prove compelling legitimate reasons for the processing that override
your interests, rights and freedoms, or the processing serves for the
assertion, exercise or defence of legal claims.
If the
personal data relating to you is processed to undertake direct marketing you
have the right to object to the processing of the personal data relating to you
for the purpose of such direct marketing at any time; this also applies to
profiling, insofar as this is related to such direct marketing.
If you
object to the processing for direct marketing purposes, the personal data
relating to you will no longer be processed for these purposes.
You have the possibility to exercise your right to object in connection with the use of information society services – regardless of directive 2002/58/EC – by means of automated processes which use technical specifications.
Right to withdrawal of the declaration of consent
You have
the right to withdraw your data protection declaration of consent at any time.
Withdrawing the consent will not affect the lawfulness of the processing that
has taken place until the withdrawal due to the consent.
Automated decision on an individual basis including profiling
You have the
right not to be subjected to a decision based exclusively on automated
processing – including profiling -, which has legal effects on you or
significantly affects you in a similar way. This will not apply if the decision
(1) is required for the conclusion or performance of a contract between you and the data controller,
However,
such decisions may not be based on special categories of personal data pursuant
to Art. 9 (1) GDPR, unless Art. 9 (2) (a) or (g) GDPR applies and appropriate
measures for the protection of the rights and freedoms as well as your
legitimate interests have been taken.
With regard to the cases mentioned under (1) and (3), the data controller takes appropriate measures to protect the rights and freedoms as well as your legitimate interests, to which pertain at least the data controller’s right to obtain the intervention of a person, to express the own point of view and to contest the decision.
Right to complaint to a supervisory authority
Notwithstanding
any other administrative or legal remedy, you have the right to complaint to a
supervisory authority, in particular in the member state of your residence,
your workplace or the place of the alleged violation, if you are of the opinion
that the processing of the personal data relating to you violates the GDPR.
The
supervisory authority with which the complaint was filed will inform the
complainant about the status and the results of the complaint including the
possibility of a legal remedy pursuant to Art. 78 DSGVO.
l) Updating of data protection information
This data protection
information will be regularly adapted to the current functions, technologies
and applicable law. This will occur at irregular intervals. The data privacy
statement provided on the website at any one time shall be applicable.