Privacy Policy for the website of Service Center Baumeister

I. General Information

When visiting our website, personal data is collected. This includes data necessary for using our website or allowing us to consider your preferences. It also includes information that you provide to us through the contact options available on these pages.

We use this data to ensure the proper operation of our website and to respond to your inquiries.

Below, we provide information on which data is collected on our website and for what purposes it is processed. We inform you about the use of so-called "cookies" and the analytical tools used on our website, as well as the options to allow or reject them. We also inform you about your rights and provide the contact details of our Data Protection Officer at the end of this privacy policy.

Cookies

We use cookies. Cookies are text files that are stored on a computer system via an Internet browser.

Many websites and servers use cookies. Many cookies contain a so-called cookie ID. A cookie ID is a unique identifier of the cookie. It consists of a string through which websites and servers can assign the specific Internet browser in which the cookie was stored. This allows visited websites and servers to distinguish the individual browser of the person from other Internet browsers that contain different cookies. A particular browser can be recognized and identified by the unique cookie ID.

Through the use of cookies, we can provide users of this website with more user-friendly services that would not be possible without the setting of cookies. By means of a cookie, the information and offers on our website can be optimized with the user in mind. Cookies allow us to recognize the users of our website, as mentioned earlier. The purpose of this recognition is to make it easier for users to use our website. The user of a website that uses cookies, for example, does not have to re-enter access data every time they visit the website, as this is taken over by the website and the cookie stored on the user's computer system.

You can prevent the setting of cookies by our website at any time by means of an appropriate setting of the Internet browser used and thus permanently object to the setting of cookies. Furthermore, cookies already set can be deleted at any time via an Internet browser or other software programs. This is possible in all common Internet browsers. If the affected person deactivates the setting of cookies in the Internet browser used, not all functions of our website may be fully usable.

Server Log Files

The provider of our website automatically collects and stores information in so-called server log files, which your browser automatically transmits to us.

The following data can be collected:

(1) Browser types and versions used,

(2) The operating system used by the accessing system,

(3) The website from which an accessing system reaches our website (so-called referrer),

(4) Sub-pages that are accessed via an accessing system on our website,

(5) The date and time of an access to the website,

(6) An Internet Protocol address (IP address),

(7) The Internet service provider of the accessing system, and

(8) Other similar data and information that serve security purposes in the event of attacks on our IT systems.

We do not draw any conclusions about you when using this general data and information.

This information is needed to:

(1) Deliver the content of our website correctly,

(2) Optimize the content of our website as well as the advertising for it,

(3) Ensure the permanent functionality of our IT systems and the technology of our website, and

(4) Provide law enforcement authorities with the necessary information for prosecution in case of a cyber attack.

Therefore, this data and information are statistically evaluated by us and are also aimed at increasing data protection and data security in our company to ultimately ensure an optimal level of protection for the personal data we process. The anonymous data of the server log files are stored separately from all personal data provided by you. A combination of these data with other data sources does not take place. However, in case of indications of unlawful use of our Internet offering, we reserve the right to review this data retrospectively.

Our legitimate interest according to Art. 6 para. 1 sentence 1 lit. f GDPR for the collection of data is based on the purposes mentioned above.

Customer Registration

You have the opportunity to register on our website by providing personal data. The personal data transmitted to us is determined by the respective input mask used for registration. The personal data you enter will be collected and stored exclusively for internal use and for our own purposes. However, we may arrange for the transfer to one or more processors, such as a parcel service provider, who will also use the personal data solely for internal use attributable to us.

When registering on our website, the IP address assigned by your Internet service provider (ISP), the date, and the time of registration are also stored. The storage of this data is necessary to prevent misuse of our services, and these data make it possible to clarify any criminal offenses that have been committed. In this respect, the storage of this data is necessary for our protection. This data is not passed on to third parties unless there is a legal obligation to pass it on or if it serves law enforcement purposes.

Your registration, provided with the voluntary indication of personal data, serves to offer you content or services that can only be offered to registered users. Registered persons are free to change the personal data provided during registration at any time or to have it completely deleted from our database, provided there are no legal retention obligations.

The data processing for the purpose of contacting us is carried out according to Art. 6 para. 1 sentence 1 lit. a GDPR based on your voluntarily granted consent.

We provide you at any time upon request with information about which personal data we have stored about you. Furthermore, we correct or delete personal data at your request, provided there are no legal restrictions on the right to correction or deletion. The Data Protection Officer named in this privacy policy, as well as all of our employees, are available to you in this regard as contact persons.

Contact Form

Our website contains statutory provisions that allow quick electronic contact with our company and direct communication with us, including a general address for so-called electronic mail (email address). If you contact us via email or a contact form, the personal data you transmit will be automatically stored. Such personal data transmitted voluntarily by you will be stored for processing or contacting you. There is no transfer of this personal data to third parties.

The data processing for the purpose of contacting us is carried out according to Art. 6 para. 1 sentence 1 lit. a GDPR based on your voluntarily granted consent.

The personal data collected by us for the use of the contact form will be automatically deleted after your inquiry has been processed.

Application Options

We collect and process personal data of applicants for the purpose of handling the application process. The processing can also be done electronically. This is particularly the case if an applicant submits application documents to us electronically, for example by email or via a web form on our website.

The data processing for the purpose of contacting us is carried out according to Art. 6 para. 1 sentence 1 lit. a GDPR based on your voluntarily granted consent.

If an employment contract is concluded with an applicant, the transmitted data will be stored for the purpose of processing the employment relationship in compliance with legal regulations. If no employment contract is concluded with the applicant, the application documents will be automatically deleted six months after the notification of the rejection decision, provided that no other legitimate interests on our part are opposed to the deletion. Other legitimate interests in this sense are, for example, an obligation to provide evidence in proceedings under the General Equal Treatment Act (AGG).

II. Payment Options

PayPal

We have integrated PayPal components into our website.

PayPal is an online payment service provider. Payments are processed through PayPal accounts, which represent virtual private or business accounts. PayPal also offers the possibility of processing virtual payments via credit cards if the user does not maintain a PayPal account. A PayPal account is managed via an email address, meaning there is no traditional account number. PayPal allows online payments to be made to third parties or to receive payments. PayPal also assumes trustee functions and offers buyer protection services.

The European operating company of PayPal is PayPal (Europe) S.à.r.l. & Cie. S.C.A., 22-24 Boulevard Royal, 2449 Luxembourg.

If you select "PayPal" as a payment option during the ordering process in our online shop, your data will be automatically transmitted to PayPal. By selecting this payment option, you consent to the transmission of personal data necessary for the payment process. The legal basis for the transfer of the data is Art. 6 para. 1 lit. a and lit. b GDPR.

The personal data transmitted to PayPal typically includes first name, last name, address, email address, IP address, telephone number, mobile phone number, or other data required for payment processing. Personal data related to the respective order is also necessary to fulfill the purchase contract.

The purpose of transmitting the data is payment processing and fraud prevention. We will transmit personal data to PayPal, particularly if there is a legitimate interest for the transmission. The personal data exchanged between PayPal and us may be transmitted to credit reporting agencies by PayPal. This transmission aims to verify identity and creditworthiness.

PayPal may share personal data with affiliated companies and service providers or subcontractors, to the extent necessary to fulfill contractual obligations or to process the data on behalf.

You can revoke your consent to the handling of personal data at any time concerning PayPal. A revocation does not affect personal data that must be processed, used, or transmitted for payment processing (in accordance with the contract).

The applicable PayPal privacy policy can be accessed at https://www.paypal.com/de/webapps/mpp/ua/privacy-full.

III. Other Information

Functions of the Amazon Affiliate Program

The transmission of data aims to verify identity, payment administration, and fraud prevention.

The purpose of data collection is thus the fulfillment of (pre-)contractual obligations according to Art. 6 para. 1 lit. b GDPR.

IV. Purposes and Legal Basis of Data Processing, Processors, and Transfer to Third Parties in Third Countries

We use your personal data only for the purposes for which it is intended. The legal basis for processing your data may include contract initiation and execution, advertising, quality assurance, fraud prevention, or statistical purposes.

Another legal basis for processing your data may be your consent to use and disclose your personal data. You can revoke your consent at any time without formalities.

The transfer of personal data to government agencies and authorities takes place only based on mandatory national legal provisions. Persons we commission to process the data are obliged to confidentiality and lawful data processing. If your personal data is processed for a purpose other than the original one, we will inform you accordingly.

For certain technical processes related to data analysis, processing, and storage, we use external service providers (processors).

Both we and the processor are obliged to comply with the technical and organizational measures in accordance with Art. 32 GDPR, and the external service provider is also obliged to confidentiality. Processing is carried out exclusively on our behalf and according to our instructions. Further processing of your personal data will only take place with your explicit consent or in cases prescribed by law and ordered by authorities or courts.

Data transmission to third countries (countries outside the European Economic Area – EEA) only takes place if it is necessary for fulfilling the contract, is legally required, or you have given us your consent. We will inform you of the details separately, as required by law.

V. Data Retention Duration

We store your collected personal data from the moment of collection. The data is stored for the duration of our business relationship, including the initiation and processing of a contract. Additionally, we are subject to various retention and documentation obligations, which arise from the German Commercial Code (HGB) or the German Fiscal Code (AO). The retention periods prescribed there are up to ten years. Furthermore, the retention duration is determined by the possibility of defending against legal claims according to the statutory limitation periods, which, according to §§ 195 ff of the German Civil Code (BGB), are generally 3 years, but in some cases, may be up to thirty years.

VI. Data Subject Rights (Information for Data Subjects according to Chapter 3 GDPR)

You have the following rights as a data subject:

(1) The right to access data according to Art. 15 GDPR

(2) The right to rectification according to Art. 16 GDPR

(3) The right to erasure according to Art. 17 GDPR

(4) The right to restriction of processing according to Art. 18 GDPR

(5) The right to data portability according to Art. 20 GDPR

You also have the right to object to the processing of your personal data at any time, provided a right to object is legally provided. In the case of a valid objection, your personal data will also be automatically deleted by us (Art. 21 GDPR).

If you wish to exercise your right of objection or revocation, simply send an email to: datenschutz@scbaumeister.de.

If you believe that your data protection rights have been violated, you have the right to lodge a complaint with the relevant supervisory authority under Art. 77 GDPR. The supervisory authority is either the State Commissioner for Data Protection of Baden-Württemberg (http://www.baden-wuerttemberg.datenschutz.de/) or any other supervisory authority.

VII. Data Security

We take all necessary technical and organizational security measures to store your personal data so that it is not accessible to third parties or the public. If you wish to communicate with us via email, please be aware that confidentiality cannot be fully guaranteed due to the nature of this communication method. Therefore, we recommend that you send confidential information exclusively by postal mail.

VIII. Validity and Changes to this Privacy Policy

This privacy policy is currently valid as of November 2023.

As our website and offers develop or due to changes in legal or regulatory requirements, it may become necessary to amend this privacy policy. The latest privacy policy can be accessed and printed at any time on the website at https://shop.scbaumeister.de/Informationen/Datenschutz/.

IX. Contact and Data Protection Officer

This privacy policy applies to the website of

Service Center Baumeister GmbH & Co. KG

Hansestraße 2

DE 18182 Bentwisch

Email: info@scbaumeister.de

Phone: +49 381 45 36 03 0

Our Data Protection Officer can be reached as follows:

Service Center Baumeister GmbH & Co. KG

Hansestraße 2

DE 18182 Bentwisch

Email: datenschutz@scbaumeister.de

Phone: +49 381 45 36 03 122