Privacy Policy
I. Name and Address of the Controller
The controller within the meaning of the General Data Protection Regulation (GDPR), other national data protection laws of the Member States and other data protection regulations is:
Soiltec GmbH
Managing Directors: Thomas Günter Birkenfeld, Kai Stefan Tietjen
Gewerbepark Uesen
Neue Finien 7a
28832 Achim
Germany
Email: info@soiltec.de
Tel.: +49-4202-7670-0
Fax: +49-4202-7670-50
II. General Information on Data Processing
We generally collect and use the personal data of our users only to the extent necessary to provide a functional website as well as our content and services. Personal data of our users is generally collected and used only with the user’s consent. An exception applies in cases where it is not possible to obtain prior consent for factual reasons and the processing of the data is permitted by statutory provisions.
Information on the scope, purpose and legal basis of the processing of personal data can be found in the respective sections of this Privacy Policy.
The personal data of the data subject will be deleted or blocked as soon as the purpose for which it was stored no longer applies. Data may also be stored if this is provided for by the European or national legislator in EU regulations, laws or other provisions to which the controller is subject.
The data will also be blocked or deleted when a storage period prescribed by the aforementioned regulations expires, unless further storage of the data is necessary for the conclusion or performance of a contract.
III. Provision of the Website and Creation of Log Files
Each time our website is accessed, our system automatically collects data and information from the computer system of the accessing device.
The following data is collected:
a) Information about the browser type and version used
b) The user’s operating system
c) The user’s Internet service provider
d) The user’s IP address
e) Date and time of access
f) Websites from which the user’s system accesses our website
g) Websites accessed by the user’s system through our website
The data is also stored in the log files of our system. This data is not stored together with other personal data of the user.
The legal basis for the temporary storage of the data and log files is Art. 6(1)(f) GDPR. Temporary storage of the IP address by the system is necessary to enable the website to be delivered to the user’s computer. For this purpose, the user’s IP address must remain stored for the duration of the session.
The data is stored in log files to ensure the functionality of the website. The data also serves to optimise the website and ensure the security of our information technology systems. The data is not evaluated for marketing purposes in this context.
These purposes also constitute our legitimate interest in data processing pursuant to Art. 6(1)(f) GDPR.
The data will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. In the case of data collected for the provision of the website, this is the case when the respective session has ended.
In the case of data stored in log files, this is the case after seven days at the latest. Further storage is possible. In such cases, users’ IP addresses are deleted or anonymised so that the accessing client can no longer be identified.
The collection of data for the provision of the website and the storage of data in log files is absolutely necessary for the operation of the website. Consequently, users have no right to object to this processing.
IV. Use of Cookies
Our website uses cookies. Cookies are text files that are stored in or by the Internet browser on the user’s computer system.
When a user accesses a website, a cookie may be stored on the user’s operating system. This cookie contains a characteristic string of characters that enables the browser to be uniquely identified when the website is accessed again.
We use cookies to make our website more user-friendly. Some functions of our website cannot be offered without the use of cookies. These functions require the browser to be recognised even after navigating to another page.
The user data collected through technically necessary cookies is not used to create user profiles.
These purposes also constitute our legitimate interest in the processing of personal data pursuant to Art. 6(1)(f) GDPR.
The following data may be stored and transmitted in cookies:
a) Language settings
b) Items in a shopping cart
c) Login information
We also use cookies on our website that enable an analysis of users’ browsing behaviour (third-party cookies). Further information on the scope, purpose, legal basis and options for objecting to such processing can be found in the respective sections of this Privacy Policy.
Cookies are stored on the user’s computer and transmitted from the computer to our website. As a user, you therefore have full control over the use of cookies.
You can disable or restrict the transmission of cookies by changing the settings in your Internet browser. Cookies that have already been stored can be deleted at any time. This can also be done automatically.
If cookies are disabled for our website, it may no longer be possible to use all functions of the website to their full extent.
The transmission of Flash cookies cannot be prevented through the browser settings, but can be prevented by changing the settings of the Flash Player.
Please note that even after configuring your browser accordingly, you may be notified individually when cookies are set and can therefore decide whether to accept them.
Help on this can be found in the respective help menu of your browser:
Internet Explorer:
http://windows.microsoft.com/de-DE/windows-vista/Block-or-allow-cookies
Firefox:
https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
Chrome:
http://support.google.com/chrome/bin/answer.py?hl=de&hlrm=en&answer=95647
Safari:
https://support.apple.com/kb/ph21411?locale=de_DE
Opera:
http://help.opera.com/Windows/10.20/de/cookies.html
V. Registration and Order Processing
If you wish to place an order in our online shop, it is necessary for the conclusion of the contract that you provide your personal data required to process your order. We process the data you provide to process your order.
You also have the option of registering by providing personal data. The data is entered into an input form and transmitted to us and stored. The data collected can be seen in the respective input form.
At the time of registration, the following additional data is stored:
a) The user’s IP address
b) Date and time of registration
Registration is required to make certain content and services available on our website, such as access to your orders and shipment information.
As part of the registration process, the user’s consent to the processing of this data is obtained. The legal basis for processing the data where the user has given consent is Art. 6(1)(a) GDPR.
If the collection of data serves to fulfil a contract to which the user is a party or to carry out pre-contractual measures, the additional legal basis for processing the data is Art. 6(1)(b) GDPR. The same applies to the transfer of your payment details to our bank.
The data will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. For data collected during the registration process, this is the case when the registration on our website is cancelled or amended.
For data collected during the registration process for the purpose of fulfilling a contract or carrying out pre-contractual measures, this is the case when the data is no longer required for the performance of the contract.
Even after the conclusion of the contract, it may be necessary to retain personal data of the contractual partner in order to comply with contractual or statutory obligations.
As a user, you may cancel your registration at any time by sending an informal notification to us by email. You may also request that the data stored about you be amended at any time by sending an informal notification to us by email.
If the data is required for the fulfilment of a contract or for carrying out pre-contractual measures, early deletion of the data is only possible insofar as contractual or statutory obligations do not prevent its deletion.
VI. Transfer of Email Address to the Shipping Service Provider
During the ordering process, the customer has the option of consenting to the transfer of their email address to the shipping service provider UPS responsible for delivery.
The transfer is made exclusively for the purpose of notifying the customer about the delivery. The email address will not be used for any other purpose.
The customer’s email address will be deleted after delivery of the package.
VII. Contact Form, Email Contact and Newsletter
Our website provides a contact form that can be used to contact us electronically. If a user makes use of this option, the data entered in the input form will be transmitted to us and stored. The data collected can be seen in the respective input form.
At the time the message is sent, the following additional data is stored:
a) The user’s IP address
b) Date and time of registration
As part of the submission process, the user’s consent to the processing of this data is obtained and reference is made to this Privacy Policy.
Alternatively, it is possible to contact us via the email address provided under Section I. In this case, the user’s personal data transmitted with the email will be stored.
The data will not be disclosed to third parties in this context. The data is used exclusively to process the communication.
Where the user has given consent, the legal basis for processing the data is Art. 6(1)(a) GDPR.
The legal basis for processing data transmitted when an email is sent is Art. 6(1)(f) GDPR. If the purpose of the email contact is to conclude a contract, the additional legal basis for processing is Art. 6(1)(b) GDPR.
The processing of personal data from the input form serves solely to process the contact request. In the case of contact by email, this also constitutes the necessary legitimate interest in processing the data.
The other personal data processed during the submission process serves to prevent misuse of the contact form and to ensure the security of our information technology systems.
The data will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected.
For personal data from the contact form and data sent by email, this is the case when the respective communication with the user has ended. The communication is considered to have ended when it can be inferred from the circumstances that the matter in question has been conclusively clarified.
The additional personal data collected during the submission process will be deleted after seven days at the latest.
The user may withdraw their consent to the processing of personal data at any time. If the user contacts us by email, they may object to the storage of their personal data at any time. In such a case, the communication cannot be continued.
The withdrawal can be made by sending an informal declaration to the email address specified in Section I. All personal data stored in connection with the contact request will then be deleted.
The user also has the option of subscribing to a newsletter. To receive the newsletter, the user must enter their name and email address in the provided input form.
At the time of subscribing to the newsletter, the following additional data is stored:
c) The user’s IP address
d) Date and time of registration
The user’s consent is obtained for the processing of personal data for the purpose of subscribing to the newsletter. Processing is therefore based on Art. 6(1)(a) GDPR.
The user may withdraw their consent at any time with effect for the future by sending an email to the email address specified in Section I.
All personal data stored in connection with the subscription will then be deleted.
VIII. Third-Party Cookies
Google AJAX Search API
We use the Google AJAX API on our website, a web service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter referred to as “Google AJAX Search API”).
We use the data obtained to ensure the full functionality of our website and to optimise loading times.
The legal basis for data processing is Art. 6(1)(f) GDPR. Our legitimate interest lies in ensuring the error-free functionality of the website and improving loading times.
When data is transferred to Google, it may also be transferred to Google’s servers in the United States.
The transfer of data to the United States is based on the EU Commission’s Standard Contractual Clauses. Details can be found here:
https://privacy.google.com/businesses/gdprcontrollerterms/
and
https://privacy.google.com/businesses/gdprcontrollerterms/sccs/
Information on Google’s data protection provisions can be found here:
http://www.google.de/policies/privacy/
You can permanently disable conversion cookies by changing the appropriate settings in your browser or by downloading and installing the browser plug-in available at the following link:
http://www.google.com/settings/ads/plugin?hl=de
In this case, certain functions of this website may not be available or may only be available to a limited extent.
IX. External Service Providers
Payment Service Providers
We offer several payment methods for use in our online shop and use various payment service providers for this purpose. Depending on the payment method you select, different data will be transmitted to the respective payment service provider.
The legal basis for the transfer is Art. 6(1)(a) GDPR.
Our payment service providers are listed below.
PayPal
If you choose PayPal as your payment method, your personal data will be transmitted to PayPal.
A prerequisite for using PayPal is the creation of a PayPal account. When using or creating a PayPal account, information including your name, address, telephone number and email address must be transmitted to PayPal.
The legal basis for the transfer of data is Art. 6(1)(a) GDPR (consent) and Art. 6(1)(b) GDPR (processing necessary for the performance of a contract).
The operator of the PayPal payment service is:
PayPal (Europe) S.à r.l. et Cie, S.C.A.
22–24 Boulevard Royal
L-2449 Luxembourg
Email: impressum@paypal.com
By selecting PayPal as your payment option, you consent to the transfer of personal data such as your name, address, telephone number and email address to PayPal.
Further information about the data collected by PayPal can be found in PayPal’s Privacy Policy:
https://www.paypal.com/de/webapps/mpp/ua/privacy-full
Shipping Service Provider
The delivery of goods to you will be carried out by the following transport service provider:
UPS (United Parcel Service Deutschland S.à r.l. & Co. OHG)
Görlitzer Straße 1
41460 Neuss
Germany
For the purpose of delivery, we will, insofar as necessary for the delivery of the goods, provide the transport service provider with the recipient’s name and delivery address pursuant to Art. 6(1)(b) GDPR.
If, in an individual case, a transport company other than those mentioned above has to be commissioned, for example due to the size of the order, you will be informed separately. In such cases, your data will be transferred in accordance with the provisions of this section.
Only if you have expressly consented to this during the ordering process will we transfer your email address to the transport service provider pursuant to Art. 6(1)(a) GDPR prior to delivery for the purpose of arranging a delivery date or notifying you of the delivery.
You may withdraw your consent at any time with effect for the future by contacting the controller named above or the respective transport service provider.
X. Rights of the Data Subject
If your personal data is processed, you are a data subject within the meaning of the GDPR and have the following rights against the controller:
1. Right of Access
You may request confirmation from the controller as to whether personal data concerning you is being processed.
In addition, you have the right to obtain information about the purposes of the processing, the categories of personal data concerned, the recipients, the planned duration of storage and the existence of further rights, such as the right to rectification or the right to lodge a complaint with a supervisory authority.
2. Right to Rectification
You have the right to obtain from the controller the rectification and/or completion of personal data concerning you if the processed personal data is inaccurate or incomplete.
The controller must rectify the data without undue delay.
3. Right to Restriction of Processing
You have the right to request restriction of the processing of your personal data if you contest the accuracy of your data, for the period enabling the controller to verify the accuracy of the data;
if you refuse to have your data deleted because the processing is unlawful and instead request restriction of the use of your data;
if you require your data for the establishment, exercise or defence of legal claims, after we no longer require the data for the purposes of processing; or
if you have objected to processing on grounds relating to your particular situation, pending the verification of whether our legitimate grounds override your interests.
Where the processing of personal data concerning you has been restricted, such data may, with the exception of storage, only be processed with your consent or for the establishment, exercise or defence of legal claims, for the protection of the rights of another natural or legal person, or for reasons of important public interest of the Union or of a Member State.
If the restriction of processing has been lifted, you will be informed by the controller before the restriction is lifted.
4. Right to Erasure
You may request that the controller delete personal data concerning you without undue delay if and insofar as the relevant legal requirements are met. The controller is obliged to delete such data without undue delay.
If the controller has made personal data concerning you public and is obliged to erase it pursuant to Art. 17(1) GDPR, the controller shall, taking account of available technology and the cost of implementation, take reasonable steps, including technical measures, to inform controllers processing the personal data that you, as the data subject, have requested the erasure by such controllers of any links to, or copy or replication of, that personal data.
The right to erasure does not apply insofar as processing is necessary:
- for exercising the right of freedom of expression and information;
- for compliance with a legal obligation which requires processing under Union or Member State law to which the controller is subject, or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
- for reasons of public interest in the area of public health in accordance with Art. 9(2)(h) and (i) and Art. 9(3) GDPR;
- for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes in accordance with Art. 89(1) GDPR, insofar as the right referred to in Section a) is likely to render impossible or seriously impair the achievement of the objectives of that processing; or
- for the establishment, exercise or defence of legal claims.
5. Right to Notification
You have the right to obtain from the controller information as to which recipients the controller has informed that you have exercised your right to rectification, erasure or restriction of processing.
6. Right to Data Portability
You have the right to receive the personal data concerning you that you have provided to the controller in a structured, commonly used and machine-readable format.
7. Right to Object
You have the right, on grounds relating to your particular situation, to object at any time to the processing of personal data concerning you which is based on Art. 6(1)(e) or (f) GDPR; this also applies to profiling based on those provisions.
8. Right to Withdraw Consent
You have the right to withdraw your consent to the processing of your personal data at any time.
The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.
9. Right Not to Be Subject to Automated Individual Decision-Making, Including Profiling
You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.
10. Right to Lodge a Complaint with a Supervisory Authority
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement, if you consider that the processing of your personal data infringes the GDPR.
Information on Data Processing in Connection with Google Analytics
This website uses Google Analytics, a web analytics service provided by Google Ireland Limited.
If the controller responsible for data processing on this website is located outside the European Economic Area or Switzerland, Google Analytics data processing is carried out by Google LLC. Google LLC and Google Ireland Limited are collectively referred to below as “Google”.
When Google Analytics is used, the technical provision of the data processing is carried out by Jimdo. In this respect, reference is made to Jimdo’s Privacy Policy.
Jimdo GmbH (Jimdo GmbH, Stresemannstraße 375, 22761 Hamburg, Germany, Datenschutz@jimdo.com) and the operator of this website are jointly responsible for the data processing in connection with Google Analytics on this website.
Google Analytics uses so-called “cookies”, text files that are stored on the device used and enable an analysis of the website visitor’s use of the website.
The information generated by the cookie about your use of this website is generally transmitted to a Google server and stored there.
Google Analytics is used exclusively with the “_anonymizeIp()” extension on this website. This extension ensures anonymisation of the IP address by shortening it and prevents direct identification of individuals.
Through this extension, the IP address is shortened by Google within Member States of the European Union or in other states party to the Agreement on the European Economic Area before being transmitted.
The IP address transmitted by the respective browser as part of Google Analytics is not merged with other Google data.
On behalf of Jimdo and the website operator, Google will use the information collected to evaluate the use of the website, compile reports on website activity and provide Jimdo and the website operator with further services related to website and Internet usage (Art. 6(1)(f) GDPR).
The legitimate interest in processing the data lies in optimising this website, analysing website usage and adapting the content, which is enabled by the statistical functions provided by Jimdo.
The interests of users are adequately protected through pseudonymisation.
Google is certified under the so-called Privacy Shield framework (listing available here) and, on this basis, provides an adequate level of data protection.
The data sent and linked to cookies, user identifiers (e.g. User ID) or advertising IDs is automatically deleted after 50 months. Data for which the retention period has expired is automatically deleted once a month.
The collection of data by Google Analytics can be prevented by adjusting the cookie settings for this website.
You can also object to the collection and storage of your IP address and the data generated by cookies at any time with effect for the future.
The corresponding browser plug-in can be downloaded and installed here:
https://tools.google.com/dlpage/gaoptout
The website visitor can prevent the collection of data by Google Analytics on this website by clicking the relevant opt-out link. An opt-out cookie will then be set, which prevents future collection of data when visiting this website.
If the link has been clicked:
The website visitor has objected to the collection of data by Google Analytics on this website.
Further information on Google’s Terms of Use and data protection can be found in the Google Analytics Terms or in the Google Analytics overview.
In accordance with applicable legislation and the GDPR, website visitors have certain rights with regard to their personal data processed as part of Google Analytics data processing.
In particular, they have the right to access, rectification, data portability and erasure of their data, as well as the right to data portability.
Website visitors also have the right to object to certain forms of processing of their data.
To exercise these data subject rights in relation to Google Analytics data processing on this website, data subjects (website visitors) may contact Jimdo (Jimdo GmbH, Datenschutz@jimdo.com) or the operator of this website at any time.
