Introduction
Optibelt GmbH (hereafter: “we“), as the operator of the online website, is considered to be the responsible party for the processing of the personal data of the users of the online website. You can find our contact data in the Imprint section of the online website. The contact persons for questions related to the processing of personal data are named directly in this Data Protection Statement.
We take the protection of your private sphere and your private data very seriously. We collect, store and use your personal data only in accordance with the content of this Data Protection Statement as well as the applicable provisions under data protection law–particularly of the European General Data Protection Regulation (GDPR) and the national data protection guidelines.
By means of this Data Protection Statement, we would like to inform you about the scope and purpose of personal data processing in conjunction with usage of the online website.
Personal Data
Personal data are considered to be information regarding an identified or identifiable natural person. These data include all information regarding your identity as well as, for example, your name, your e-mail address or your postal address. However, information which is not attributable to your identity (e.g. statistical data such as the number of users of the online website) shall not be considered to be personal information.
In principle, you can use our online website without disclosing your identity and your personal data. We shall collect merely general information regarding your visit to our online website. However, for some of the services offered, your personal data shall be collected. In principle, these data shall then be processed by us only for the purposes of the usage of this online website–particularly in order to supply the requested information. During the collection of personal data, only the data must compulsorily be provided which are mandatorily required. Moreover, it is possible to provide additional data whereby such data shall be provided voluntarily. We shall respectively indicate whether the fields are mandatory or optional. We shall then inform you of the concrete details in the corresponding section of this Data Protection Statement.
Automated decision-making upon the basis of your personal data shall not be undertaken in conjunction with the usage of our online website.
Processing Personal Information
We shall store your data on specially-protected servers within the European Union. They shall be protected by means of technical and organisational measures against loss, destruction, access, modification or dissemination of your data by unauthorised persons. The access to your data shall be made possible only to a small number of authorised persons. They shall be responsible for the technical, commercial or editorial management of the servers. However, despite controlling measures upon a regular basis, it is not possible to completely protect against all risks.
Your personal data shall be transmitted in encrypted fashion via the Internet. For the data transmission, we shall use SSL encryption (secure socket layer).
Dissemination of Personal Data to Third Parties
In principle, we shall use your personal information only for the rendering of the services which you have requested. Insofar as we commission external service providers in order to render the services, their access to the data shall be granted exclusively for the purpose of the rendering of services. By means of technical and organisational measures, we shall ensure the fulfilment of the data protection guidelines and shall also obligate our external service providers in this regard.
Moreover, without your express consent, we shall not pass on the data to third parties–particularly not for advertising purposes. A dissemination of your personal data shall be undertaken only if you yourself have approved the data dissemination or insofar as we are entitled or obliged in this regard to disseminate the data in accordance with the statutory directives and/or government and/or court decrees. In this regard, this may encompass particularly the issuance of information for the purposes of criminal investigations, warding off risks or asserting intellectual property rights.
Legal Bases of the Data Processing
Insofar as we obtain consent for the processing of your personal data, Art. 6 Para. 1 lit. a) GDPR shall serve as the legal basis for the data processing.
Insofar as your personal data are processed because this is required in order to fulfil a contractual agreement or for a quasi-contractual relationship with you, Art. 6 Para. 1 lit. b) GDPR shall serve as the legal basis for the data processing.
Insofar as we process your personal data in order to fulfil a legal obligation, Art. 6 Para. 1 lit. c) GDPR shall serve as the legal basis for the data processing.
Moreover, the legal basis for the data processing shall be Art. 6 Para. 1 lit. f) GDPR if the processing of your personal data shall be required in order to safeguard a rightful interest of our company or of a third party and, by so doing, your interests, fundamental rights and fundamental freedoms do not require the protection of the personal data.
In this Data Protection Statement, we shall always refer to which legal basis we shall use to support the processing of your personal data.
Data Deletion and Storage Timeframe
We shall in principle always then delete and/or block your personal data when the purpose of their storage is no longer valid. However, storage may then continue beyond this point if this is prescribed by legal directives to which we are subject, e.g. with regards to statutory retention and documentation obligations. In such a case, we shall delete and/or block your personal data after the validity of the corresponding directives ends.
Usage of Our Online Website
Information regarding Your Computer
During each accessing of our online website, we shall–regardless of whether you have registered or not–collect the following information about your computer: The IP address of your computer, the query from your browser as well as the time that this query was made. Moreover, the status and the transmitted data quantity for the query shall be collected. We shall also collect product and version information regarding the browser and the operating system of the computer being used. We shall also collect data regarding from which website our online website was accessed. In this context, your computer’s IP address shall be stored only for the time of the usage of the online website and then deleted or anonymised by shortening it. The remaining data shall be stored for a limited timeframe.
We shall use these data for the operation of the online website–particularly in order to detect and eliminate errors, in order to determine the capacity utilisation of the online website as well as in order to make adjustments or improvements. For these purposes, we also have a rightful interest in the data processing in accordance with Art. 6 Para. 1 lit. f) GDPR.
Usage of Cookies
As is the case with many websites, cookies are used for our online website. Cookies are small text files which are stored on your computer and store specific settings and data via your browser for exchange with our online website. As a rule, a cookie contains the name of the domain from which the cookie file was sent as well as information regarding the age of the cookie and an alphanumerical identification code.
Cookies enable us to identify your computer and to immediately make any default settings available. Cookies help us to improve the online website as well as to be able to offer you a better service which is even more customised to you. Herein also lies our rightful interest in the data processing in accordance with Art. 6 Para. 1 lit. f) GDPR.
The cookies which we use are so-called session cookies which are automatically deleted again after the browser session ends. Upon an individual basis, cookies can also be used with a longer storage timeframe so that your default settings and preferences can still be utilised during your next visit to our online website.
Most browsers’ default settings automatically accept cookies. However, you can nonetheless deactivate the storage of cookies or adjust the settings on your browser in such a manner that it will notify you as soon as cookies are sent. Moreover, it is also possible to manually delete cookies that have already been stored via the settings on your browser. However, please keep in mind that you may possibly be able to use our online website only in a restricted manner or not be able to use it at all if you reject the storage of cookies or delete the required cookies.
Google Analytics
We shall use Google Analytics for statistical analyses. Google Analytics is a web analysis service from Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94034, USA (“Google”). Google Analytics uses so-called “cookies”–text files which are stored on your computer and enable an analysis of your usage of the website. As a rule, the information generated by the cookies regarding your usage of this website shall be transmitted to a Google server in the USA and stored there. In the event of the activation of IP anonymisation on this website, your IP address shall nonetheless be shortened beforehand by Google within the member countries of the European Union or in other contracting countries to the European Economic Area Convention. Only in exceptional cases shall the entire IP address be transmitted to a Google server in the USA and shortened there. By mandate issued by this website’s operator, Google shall use this information in order to analyse your usage of the website, in order to draft reports regarding the website activities and in order to render additional services associated with the usage of the website and the Internet to the website’s operator. The IP address transmitted by your browser during Google Analytics shall not be commingled with other data by Google. You can prevent the storage of cookies by correspondingly adjusting the settings on your browser software; however, we wish to point out that, in this case, you may not be able to comprehensively use all functions of this website. Moreover, you can prevent the collection of the data (including your IP address), which has been generated by the cookie and refers to your usage of the website, from being sent to Google as well as the processing of these data by Google by downloading and installing the browser plug-in that is available by clicking on the following link tools.google.com/dlpage/gaoptout.
You can find additional information in this regard at tools.google.com/dlpage/gaoptout and/or www.google.com/intl/de/analytics/privacyoverview.html (general information regarding Google Analytics and data protection). We wish to point out to you that, on our Internet site, Google Analytics has been expanded by the code " anonymizeIp();" in order to anonymise the IP addresses whereby the last octet has been deleted.
We are of the belief that, owing to the protective measures undertaken (anonymisation and right of objection), the data processing in order to optimise our online website must be regarded as being a rightful interest in the data processing in accordance with Art. 6 Para. 1 lit. f) GDPR.
Registration
You can register in order to use our online website. In order to register, you must disclose the data requested during the registration process, e.g. name, address and e-mail address. In addition, we shall collect the date and time of day of the registration and the IP address. During the registration process, we shall obtain your consent for the usage of the data. By so doing, you will obtain the benefit of not having to re-enter these data during each usage and/or for each order.
For consent, the legal basis for the processing of the data for the registration shall be Art. 6 Para. 1 lit. a) GDPR. Insofar as you register with us in order to fulfil or negotiate a contractual agreement, the legal basis for the processing of the data shall also be Art. 6 Para. 1 lit. b) GDPR.
The information requested during the registration process which is marked as being a mandatory field shall be required in order to fulfil or negotiate a contractual agreement with us for certain services.
During the registration, a customer account shall be created for you. We shall store the data in the customer account as long as an active customer relationship exists. If no more activity has been detected for a timeframe of three years, the status of the customer relationship shall be changed to inactive. You may, at any time, demand the deletion of your customer account.
Order Processing
We shall use your personal information for orders only within our company and our affiliated companies as well as within the company commissioned to process the orders.
Storage and Data Dissemination for Orders
For processing orders, we cooperate with various companies who are responsible for the processing of payments and logistics. We ensure in this regard that our partners also follow the data protection guidelines. Thus, we disseminate your address data (name and postal address) to the respective transport company which delivers the ordered products to you. The legal basis for this shall be Art. 6 Para. 1 lit. b) GDPR. The processing of your personal data shall be required in order to fulfil the contractual agreement with you.
The data shall be stored by us as long as they are required in order to fulfil the contractual agreement. Moreover, we shall store these data in order to fulfil our post-contractual obligations and, based upon the retention timeframes prescribed by commercial law and tax law, for the statutorily-prescribed timeframe. As a rule, this retention timeframe shall be 10 years from the end of the respective calendar year.
Payment Processing for Orders, PayPal, Sofortüberweisung [Instant Transfer]
Depending on the payment method selected, as required, the payment processing shall be undertaken for orders by commissioning a service provider.
For a credit card payment, your required data such as name, address as well as the purchasing data shall be forwarded to the respective credit card company.
For a PayPal payment, you shall be guided via a link to PayPal’s Internet site. In so doing, your personal data shall be processed. These personal data shall be your name, your postal address, your e-mail address, (where applicable) your telephone number as well as your bank account or your credit card data. In this regard, please review the General Business Terms and Conditions, Usage Terms and Conditions and Data Protection Guidelines of PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg on the Internet site www.paypal.com.
For a payment made via Sofortüberweisung, you shall be guided via a link to the Internet site of Sofortüberweisung, a service of Sofort GmbH which is part of Klarna Bank AB (publ), Sveavägen 46111 34 Stockholm, Sweden. In this regard, your personal data shall be processed. These personal data shall be your name, your postal address, your e-mail address, (where applicable) your telephone number as well as your bank account or your credit card data. In this regard, please review the General Business Terms and Conditions, Usage Terms and Conditions and Data Protection Guidelines of Klarna at www.klarna.com.
The legal basis for the payment processing shall be Art. 6 Para. 1 lit. b) GDPR. The processing of your personal data shall be required in order to fulfil the contractual agreement with you whereby you may freely choose the payment method.
We shall store the data as long as they are required in order to fulfil the contractual agreement. Moreover, we shall store these data in order to fulfil our post-contractual obligations and, based upon the retention timeframes prescribed by commercial law and tax law, for the statutorily-prescribed timeframe. As a rule, this retention timeframe shall be 10 years from the end of the respective calendar year.
Credit Check
Depending on the payment method selected, a credit check may be required. In this case, in the event that we have obtained your consent to conduct the credit check, we shall commission external service providers to whom we shall transmit your data (name, address, birthdate, order value). We shall transmit the data to the Federation of Credit Reform Associations e.V., Hellersbergstraße 12, D-41460 Neuss.
The legal basis for the credit check shall be Art. 6 Para. 1 lit. a) GDPR. If you do not wish to issue your consent for the credit check, as required, you must select another payment method.
During the credit check, an estimate shall be obtained regarding how high the default probability is for our payment claim from the order. In this regard, we shall receive from our service provider exclusively a probability value (score value), but no more extensive details. Upon the basis of this value, we shall then assess whether the requested payment method can be offered. After completing the assessment, we shall delete the score value and not store it with the order data. Thus, it is also not possible for us to subsequently assess why, for example, a certain payment method was not possible.
Communication with Us
You can contact us in different ways, e.g. via the e-mail addresses listed on our Internet site. Moreover, please feel free to subscribe to our newsletter via e-mail in order to receive updated information upon a regular basis.
Newsletter
When registering for our newsletter, your e-mail address shall be used for our own advertising purposes until you unsubscribe. In addition, you shall receive information upon a regular basis via e-mail on current themes as well as e-mails regarding special events, e.g. special promotional campaigns. In this regard, the e-mails can be personalised and individualised based upon our information about you.
For the registration for our newsletter, insofar as you have not issued us your consent in writing in this regard, we shall use the so-called double opt-in procedure, i.e. we shall only then send you a newsletter via e-mail if you have expressly confirmed to us beforehand that we are supposed to activate the sending of the newsletter. We shall then send you a notification e-mail and request that you confirm that you would like to receive our newsletter by clicking on one of the links contained in this e-mail.
The legal basis for the processing of your data shall be your consent in accordance with Art. 6 Para. 1 lit. a) GDPR if you have expressly registered for the newsletter. In accordance with the statutory directives, it can also be possible that you, without having granted your express consent, receive our newsletter because you have ordered goods or services from us, we have received your e-mail address in this context and you have not objected to the receipt of information via e-mail. In this case, the legal basis must be regarded as being our rightful interest in the transmission of direct advertising in accordance with Art. 6 Para. 1 lit. f) GDPR.
If you should no longer wish to receive any more newsletters of any kind from us, you may revoke your consent, which you previously issued, at any time with effectiveness for the future and/or object to the continued receipt of the newsletter without incurring any other costs than the transmission costs for this at the basic rates. Simply use the Unsubscribe link contained in each newsletter or send a notification in this regard to us or our Data Protection Officer.
Social Media
On our online website, you will find links to the social networks Facebook and YouTube. You can recognise the links by the respective logo of the providers.
By clicking on the links, the corresponding social media sites shall be opened for which this Data Protection Statement is not valid. You can review the details of the provisions that are valid on those websites by consulting the corresponding Data Protection Statements of the individual providers; you can find them at:
Facebook: http://www.facebook.com/policy.php
YouTube: https://policies.google.com/privacy?hl=de&gl=en
Before clicking on the corresponding links, no transmission of personal information shall be undertaken to the respective providers. At the same time, your accessing of the linked page shall form the basis for the data processing by the respective providers.
Usage of YouTube
Videos have been integrated into our online website for whose playback we use a plug-in from the service operated by Google called YouTube (“YouTube”). The operator of the service is YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. Whenever you visit an Internet page of our website, into which a video has been integrated, a connection shall be created to YouTube’s servers. In so doing, YouTube’s server shall be notified which Internet pages of our online website you have visited.
If you are logged-in to your YouTube account, you will enable YouTube to assign your surfing behaviour directly to your personal profile. You can prevent this by logging out of your YouTube account. You can find additional information regarding Google’s handling of user data in Google’s Data Protection Statement at www.google.de/intl/de/policies/privacy/ which is also valid for YouTube.
We use YouTube so that we can display videos to you and thus convey more to you about us and our services; at the same time, therein lies the rightful interest in accordance with Art. 6 Para. 1 lit. f) GDPR.
Your Rights and Contact
We place great importance on explaining in detail the processing of your personal data as transparently as possible and also informing you of your rights in this regard. If you would like to receive more detailed information in this regard or wish to exercise your rights, please feel free to contact us at any time so that we can attend to your issue.
Rights of Affected Parties
You are entitled to extensive rights with regards to the processing of your personal data. First of all, you shall have a comprehensive right to information and may, as required, demand the correction and/or deletion and/or blocking of your personal data. You may also demand a restriction of the processing and also have a right of objection. With regards to the personal data which you have provided to us, you shall also have a right to data portability.
If you would like to assert one of your rights and/or would like to receive detailed information in this regard, please contact our Customer Service Division. Alternatively, you can also contact our Data Protection Officer.
Revocation of the Consent and Right of Objection
Consent granted by you may be freely revoked at any time with effectiveness for the future. By revoking the consent, the legality of the processing undertaken based upon the consent until such consent is revoked shall not be affected. The contact persons in this regard shall likewise be our Customer Service Division and our Data Protection Officer.
Insofar as the processing of your personal data is not based upon consent, but rather upon another legal basis, you can object to this data processing. Your objection shall result in an examination and, as required, the discontinuation of the data processing. You shall be notified of the results of the examination and, insofar as the data processing is supposed to be nonetheless continued, you shall receive detailed information from us regarding why the data processing is permissible.
Data Protection Officer and Contact
For questions related to our handling of personal data or additional information regarding data protection law themes, our internal Data Protection Coordinator would be glad to assist you:
Telephone: +49 5271 / 62 468
E-mail: datenschutz[at]optibeltcom
Complaints
If you are of the belief that our processing of your personal data does not comply with this Data Protection Statement or the applicable data protection guidelines, you shall be entitled to submit a complaint to a government supervisory agency. You may also submit a complaint to our Data Protection Officer. The Data Protection Officer shall then review the matter and notify you of the results of the examination.
Additional Information and Changes
Links to Other Websites
Our online website can contain links to other websites. As a rule, these links shall be labelled as such. We have no control over to what extent the valid data protection guidelines are followed on the linked websites. Thus, we recommend that you also review the respective Data Protection Statements on the other websites.
Changes in This Data Protection Statement
The version of this Data Protection Statement shall be identified by the date (below) when it was created. We reserve the right to, at any time, make changes to this Data Protection Statement with effectiveness for the future. We shall make changes to this Data Protection Statement particularly in the event of technical adaptations of the online website or changes to the data protection law guidelines. The respectively current version of the Data Protection Statement shall always be directly accessible via the online website. We recommend that you review the changes to this Data Protection Statement upon a regular basis.
Version of this Data Protection Statement: May 2018