Privacy Statement

Thank you for visiting our website. We respect your privacy. Data protection and data security when using our website are very important to us. This privacy statement describes the extent to which data is collected when using our website and the purposes we use these data for. Furthermore, we would like to inform you about your rights in this respect.

I Business Owner

Kleinmetall GmbH
Sven Pfeifer (Managing Director)
Hainstraße 52
D-63526 Erlensee
Germany
Phone: +49 (0) 6183 911 20-0
E-Mail: info@kleinmetall.de
Registration court: Local District Court Hanau
Registration number: HR B 1403

II Data Security Officer

According to the currently applicable legal regulations, we are not subject to the obligation to appoint a data protection officer.

III Data Security

The personal data of every individual who has a contractual, pre-contractual or other relationship with our company deserves special protection. We aim to maintain our level of data protection at a high standard. That is why we focus on the continuous development of our data protection and data security concepts. We are therefore committed to protecting your privacy and treating your personal data confidentially. In order to prevent manipulation, loss or misuse of your data stored with us, we take extensive technical and organisational security precautions, which are regularly reviewed and adjusted to technological progress. This includes, among other things, the use of recognised encryption procedures (SSL or TLS). However, it is possible that, due to the structure of the Internet, the rules of data protection and the above-mentioned security measures may not be observed by other persons or institutions who are not within our sphere of responsibility. In particular, uncoded data - e.g. when sent by e-mail - can be read by third parties. We have no technical influence on this. It is the user's responsibility to protect the data provided by him/her against misuse by means of encryption or in any other way.

IV Data Processing

a. Type and purpose of processing

When you access our website, i.e. without registering or submitting information in any other way, general information is automatically collected. This information (server log files) includes, for example, the type of browser, the operating system used, the domain name of your internet service provider, your IP address and similar. This is exclusively information that does not allow any conclusions to be drawn about your person. It is particularly processed for the following purposes:

securing a smooth connection of the website,
securing a smooth use of our website,
evaluation of system security and stability as well as
for further administrative purposes.

We shall not use your data to draw any conclusions about your person. Information of this kind may be statistically evaluated by us in order to optimise our website and the associated technology.

b. Legal basis of processing

Processing is carried out in accordance with Art. 6 para. 1 lit. f General Data Protection Regulation (GDPR) on the basis of our legitimate interest in improving the stability and functionality of our website.

c. Types of data

Browser type and browser version of your PC
Operating system used by your PC
Referrer URL (Source/reference from which you accessed our website)
Host name of the accessing computer
Date and time of the server inquiry
The IP address of your PC currently used (possibly anonymously)

d. Recipients

Recipients of the data are employees of Kleinmetall GmbH and/or processors who are in charge of the service and maintenance of our website as processors.

e. Data retention period

The data is deleted as soon as it is no longer required for the purpose for which it was collected. This is generally the case for data used to provide the website when the respective session is over.

f. Legal / contractual requirement

There is no legal or contractual obligation to provide the aforementioned personal data. However, without the IP address, the service and functionality of our website cannot be guaranteed. In addition, individual and other services may not be available or may be limited.

g. Data transfer to third countries

Processing does not take place outside the European Union (EU) or the European Economic Area (EEA).

h. Withdrawal of consent

You can revoke your consent to the storage of your personal data at any time with effect for the future. You may inform us of your revocation at any time using the contact option provided at the beginning of this data protection notice.

i. Automated decision-making and profiling

As a company that is aware of its responsibilities, we refrain from using automatic decision-making or profiling in this data processing.

IV.1 Cookies

a. Type and purpose of processing

Like many other websites, we also use so-called "cookies". Cookies are small text files that are transferred from a website server to your hard disk. By doing this, we automatically receive certain data such as IP address, browser used, operating system and your connection to the internet. Cookies cannot be used to launch programs or transfer viruses to a computer. The information contained in cookies allows us to facilitate your navigation and enable the correct display of our website. Under no circumstances will the data we collect be passed on to third parties or linked to personal data without your consent. You can, of course, also view our website without cookies. Browsers are regularly set to accept cookies. As a general rule, you can deactivate the use of cookies at any time via the settings of your browser. Please use the help functions of your browser to find out how to change these settings. Please note that individual functions of our website may not work if you have deactivated the use of cookies. Some of the cookies we use are deleted again after the end of the browser session, i.e. after you close your browser (so-called transient cookies or session cookies). Other cookies remain on your terminal device and enable us to recognise your browser on your next visit (persistent cookies). You can find out how long they are stored in the overview in the cookie settings of your browser. We have listed the storage period of the cookies we use in this section under "e. Data retention period". Basically, we divide cookies into the following categories:

Performance cookies
These cookies allow us to count visits and identify sources of access to determine and improve the performance of our website. They help us answer the question of which pages are most popular, which are least used and how visitors move around the website. All information collected by these cookies is aggregated and therefore anonymous. If you do not allow these cookies, we will not be able to know when you visited our website.
We use performance cookies on the basis of a legitimate interest within the meaning of Art. 6 (1) f) GDPR. There is a legitimate interest in analysing the use of our website as a whole by means of aggregated and anonymous data in order to improve our website services.
Advertising cookies
We may show you ads on other websites in order to promote relevant services, articles or events. This is made possible through the use of advertising cookies, which are used to make advertising messages more relevant to you and your interests. These cookies also have other functions, they prevent, for example, the same ad from appearing again and again. The ads are used solely to draw your attention to relevant advertising campaigns. We do not sell your data to third parties. We only use advertising cookies with your express consent.
Personalised cookies
These cookies help us understand how effective our marketing campaigns are and improve your online experience with us by personalising them to you. We only use personalised cookies with your explicit consent.
Third Party Cookies
Some of the cookies used on our website are so-called third-party cookies. These are cookies from third-party providers/service providers whose tools we use on our website and who use cookies for the performance of the corresponding function.
This may for example include cookies used by the providers of the tracking and analysis tools we use. For more information on third-party cookies, please refer to the data processing information provided with the relevant tracking and analysis tools and other functionalities in the framework of which third-party cookies are used. In addition, you can view a list of all cookies used on this website, their function and their respective storage periods in our cookie information. We only use third-party cookies with your express consent.

b. Legal basis of processing

The use of cookies serves to protect our legitimate interest in an optimised presentation of our offer, which outweighs our interests in accordance with Art. 6 para. 1 p. 1 lit. f GDPR..

c. Types of data

IP address
Browser used
Operating system in use
Internet connection
Session-ID of the cookies

d. Recipients

Recipients of the data are employees of Kleinmetall GmbH and/or processors who are in charge of the service and maintenance of our website as processors.

e. Data retention period

Insofar as you allow us to use cookies through your browser settings or consent, the following cookies may be used on our websites:

Google Analytics
Google Tag Manager
eTracker

Insofar as these cookies may (also) affect personal data, we will inform you accordingly in the following sections. You can delete individual cookies or the entire cookie stock via your browser settings. In addition, you will receive information and instructions on how to delete these cookies or block their storage in advance. Depending on the provider of your browser, you will find the necessary information under the following links:

Mozilla Firefox: https://support.mozilla.org/de/kb/cookies-loeschen-daten-von-websites-entfernen
Internet Explorer: https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies
Google Chrome: https://support.google.com/accounts/answer/61416?hl=de
Opera: http://www.opera.com/de/help
Safari: https://support.apple.com/kb/PH17191?locale=de_DE&viewlocale=de_DE

f. Legal / contractual requirement

g. Data transfer to third countries

Processing does not take place outside the European Union (EU) or the European Economic Area (EEA).

h. Withdrawal of consent

i. Automated decision-making and profiling

As a company that is aware of its responsibilities, we refrain from using automatic decision-making or profiling in this data processing.

IV.2 Use of Google Analytics

a. Type and purpose of processing

This website uses Google Analytics, a web analytics service provided by Google Building Gordon House, 4 Barrow Street, Dublin, D04 E5W5, Ireland. Google Analytics uses "cookies", which are text files placed on your computer, to help the website analyse how users use the site. The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there. However, due to the activation of IP anonymisation on these websites, your IP address will be shortened by Google within member states of the European Union or in other contracting states of the Treaty on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. The purpose of the data processing is to analyse the use of the website and to compile reports on activities on the website. Based on the use of the website and the internet, further associated services shall then be provided.

b. Legal basis of processing

Processing of the data entered is based on the user's consent (Art. 6 para. 1 lit. a GDPR).

c. Types of data

IP address (shortened/anonymised)

d. Recipients

Employees of the IT and marketing department of Kleinmetall GmbH as well as assigned marketing companies
Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland

e. Data retention period

Data will only be processed in this context as long as the corresponding consent has been given. Thereafter, it will be deleted, provided there are no legal obligations to retain it. If you wish to contact us in this regard, please use the contact details provided at the beginning of this privacy policy.

f. Legal / contractual requirement

The provision of your personal data is voluntary, solely on the basis of your consent. If you prevent access, this may result in functional restrictions on the website.

g. Data transfer to third countries

Processing does not take place outside the European Union (EU) or the European Economic Area (EEA).

h. Withdrawal of consent

You can revoke your consent to the storage of your personal data at any time with effect for the future. You can inform us of your revocation at any time using the contact option provided at the beginning of this data protection notice.
You may prevent the storage of cookies by selecting the appropriate settings on your browser software; in this case, however, we would like to point out that you may not be able to use all functions of this website to their full extent. You can also prevent Google from collecting the data generated by the cookie and related to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available under the following link: "Browser Add On to deactivate Google Analytics".

i. Automated decision-making and profiling

With the help of the Google Analytics tracking tool, the behaviour of visitors to the website can be evaluated and their interests analysed. A pseudonymised user profile will be created for this purpose.

IV.3 Google Remarketing

a. Type and purpose of processing

This website uses the remarketing function of Google Inc. The company operating the Google Remarketing services is Google Building Gordon House, 4 Barrow Street, Dublin, D04 E5W5, Ireland. The function is used to present interest-based adverts to website visitors within the Google advertising network. A so-called "cookie" is stored in the website visitor's browser, which makes it possible to recognise the visitor when he or she visits websites that belong to the Google advertising network. On these pages, the visitor may be presented with adverts that relate to contents that the visitor has previously accessed on websites that use Google's remarketing function. Each time our website is visited, personal data, including IP address, is transferred to Google in the USA. This personal data is stored by Google. Google may share this personal data collected through the technical process with third parties. Our company does not contain any information from Google that could be used to identify the data subject.

b. Legal basis of processing

Your consent is the legal basis for the integration of Google Remarketing and the associated data transfer to Google (Art. 6 para. 1 lit. a GDPR).

c. Types of data

IP address

d. Recipients

Recipients of the data are employees of Kleinmetall GmbH, assigned marketing companies and Google as order processor.

e. Data retention period

Data is only processed in this context for as long as the corresponding consent is available. After that, it will be deleted, provided there are no legal obligations to retain it. If you wish to contact us in this regard, please use the contact details provided at the beginning of this privacy policy.

f. Legal / contractual requirement

The provision of your personal data is voluntary, solely on the basis of your consent. If you prevent access, this may result in functional restrictions on the website.

g. Data transfer to third countries

Google processes your data in the USA and has submitted to the EU_US Privacy Shield at https://www.privacyshield.gov/EU-US-Framework. Based on this agreement between the USA and the European Commission, the latter has established an adequate level of data protection for companies certified under the Privacy Shield.

h. Withdrawal of consent

If you do not wish to use Google's remarketing function, you can generally deactivate it by making the appropriate settings at https://support.google.com/adwordspolicy/answer/143465. Alternatively, you can deactivate the use of cookies for interest-based advertising via the advertising network initiative by following the instructions at http://www.networkadvertising.org/managing/opt_out.asp.
You can revoke your consent to the storage of your personal data at any time with effect for the future. You can inform us of your revocation at any time using the contact option provided at the beginning of this data protection notice.

i. Automated decision-making and profiling

As a company that is aware of its responsibilities, we refrain from automatic decision-making or profiling in this data processing.

IV.4 Google Adwords

a. Type and purpose of processing

Our website uses Google Conversion Tracking. The company operating the Google AdWords services is Google Building Gordon House, 4 Barrow Street, Dublin, D04 E5W5, Ireland. If you have reached our website via an advert placed by Google, Google AdWords will set a cookie on your computer. The cookie for conversion tracking is set when a user clicks on an advert placed by Google. If the user visits certain pages of our website and the cookie has not yet expired, we and Google can recognise that the user has clicked on the ad and has been redirected to this page. Each Google AdWords customer receives a different cookie. Cookies can therefore not be tracked via the websites of AdWords customers. The information collected by means of the conversion cookie is used to generate conversion statistics for AdWords customers who have opted for conversion tracking. Customers are informed of the total number of users who clicked on their advert and were redirected to a web page equipped with a conversion tracking tag. However, they do not receive any information that can be used to personally identify users. Each time you visit our website, personal data, including your IP address, is transferred to Google in the USA. This personal data is stored by Google. Google may share this personal data collected through the technical process with third parties.
Our company does not contain any information from Google that could be used to identify the data subject.

b. Legal basis of processing

Your consent is the legal basis for the integration of Google AdWords and the associated data transfer to Google (Art. 6 para. 1 lit. a GDPR).

c. Types of data

IP address

d. Recipients

Recipients of the data are employees of Kleinmetall GmbH, assigned marketing companies and Google as order processor.

e. Data retention period

These cookies lose their validity after 30 days and are not used for personal identification.

f. Legal / contractual requirement

The provision of your personal data is voluntary, solely on the basis of your consent. If you prevent access, this may result in functional restrictions on the website.

g. Data transfer to third countries

Processing does not take place outside the European Union (EU) or the European Economic Area (EEA).

h. Withdrawal of consent

If you do not wish to participate in tracking, you can refuse the setting of a cookie required for this - for example, by setting your browser to generally deactivate the automatic setting of cookies - or you can set your browser to block cookies from the "googleleadservices.com" domain.

Please note that you may not delete the opt-out cookies as long as you do not wish any measurement data to be recorded. If you delete all your cookies in the browser, you must set the respective opt-out cookie again.
You can revoke your consent to the storage of your personal data at any time with effect for the future. You can inform us of your revocation at any time using the contact option provided at the beginning of this data protection notice.

i. Automated decision-making and profiling

As a company that is aware of its responsibilities, we refrain from automatic decision-making or profiling in this data processing.

IV.5 Adcell

We have integrated components from Adcell on our website. Adcell is a German affiliate network that offers affiliate marketing. Affiliate marketing is an Internet-supported form of distribution that enables commercial operators of websites, known as merchants or advertisers, to display adverts, which are usually remunerated via click or sale commissions, on third-party websites, i.e. with distribution partners, also known as affiliates or publishers. The merchant provides an advertising medium via the affiliate network, i.e. an advertising banner or other suitable means of internet advertising, which is subsequently integrated by an affiliate on their own website or advertised via other channels, such as keyword advertising or email marketing. The operating company of Adcell is Firstlead GmbH, Rosenfelder Str. 15-16, 10315 Berlin, Germany. Adcell places a cookie on the IT system of the person concerned. Cookies have already been explained above. The tracking cookie from Adcell does not store any personal data. Only the identification number of the affiliate, that is, of the partner providing the potential customer, as well as the order number of the visitor to a website and the advertising material clicked on are stored. The purpose of storing this data is to process commission payments between a merchant and the affiliate, which are processed via the affiliate network, i.e. Adcell. The person concerned can prevent the setting of cookies by our website, as already described above, at any time by means of a corresponding setting of the Internet browser used and thus permanently object to the setting of cookies. Such an adjustment to the Internet browser used would also prevent Adcell from setting a cookie on the information technology system of the data subject. In addition, cookies already set by Adcell can be deleted at any time via an Internet browser or other software programmes. The applicable data protection provisions of Adcell may be accessed athttps://www.adcell.de/datenschutz.

IV.6 AWIN

As the operator of this website, we participate in the AWIN affiliate partner programme. The operator of the affiliate network is AWIN AG, Eichhornstraße 3, 10785 Berlin (hereinafter: "AWIN").

If you click on an advertisement on our website that is part of the partner programme and you subsequently make a transaction (e.g. a purchase), we shall receive remuneration from AWIN for this. This requires AWIN to be able to identify you and track that you have accessed the respective product via the advert placed with us and have carried out the predefined transaction. For this purpose, AWIN uses cookies or comparable recognition technologies (e.g. device fingerprinting).

The data is stored and analysed on the basis of Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in the correct calculation of its affiliate remuneration. If a corresponding consent has been requested (e.g. consent to the storage of cookies), the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR; the consent can be revoked at any time.

Further information can be found in AWIN's privacy policy at: https://www.awin.com/de/datenschutzerklarung.

IV.7 Use of Social Media Plugins

a. Type and purpose of processing

Social plugins from the providers listed below are used on our websites. You can recognise the plugins by the fact that they are marked with the corresponding logo.
Under certain circumstances, information, which may also include personal data, is sent to the service provider via these plugins and may be used by them. We prevent unconscious and unwanted collection and transmission of data to the service provider by means of a so-called Shariff solution. Only by clicking on the plugin the collection of information and its transmission to the service provider is triggered. We do not collect any personal data ourselves by means of the social plugins or through their use.

We have no influence on which data is collected by an activated plugin and how it is used by the provider. At present, it must be assumed that a direct connection to the provider's services is established and that at least the IP address and device-related information is collected and used. It is also possible that the service providers attempt to store cookies on the computer used.

b. Legal basis of processing

Processing is carried out in accordance with Art. 6 para. 1 lit. f General Data Protection Regulation (GDPR) on the basis of our legitimate interest in supporting the functionality of our website.

c. Types of data

Please refer to the data protection notice of the respective service provider to find out which specific data is collected and how it is used:

Facebook: http://www.facebook.com/policy.php
Google: https://policies.google.com/privacy
Instagram: https://help.instagram.com/155833707900388
LinkedIn: https://www.linkedin.com/legal/privacy-policy
Pinterest: https://about.pinterest.com/de/privacy-policy
Twitter: https://twitter.com/privacy
Whatsapp: https://www.whatsapp.com/legal/#privacy-policy
Xing: https://www.xing.com/privacy
YouTube: https://policies.google.com/privacy

d. Recipients

Employees of the IT department of their own company
Assigned marketing companies
Facebook
Google
LinkedIn
Pinterest
Twitter
Xing

e. Data retention period

The data collected directly by us via the social media plugins is deleted from our systems as soon as the purpose for its storage no longer applies, you request us to delete it, revoke your consent to storage or the purpose for data storage no longer applies. Stored cookies remain on your end device until you delete them. Mandatory legal provisions - in particular retention periods - remain unaffected.

We have no influence on the storage period of your data that is stored by the operators of social networks for their own purposes. For details, please contact the operators of the social networks directly (e.g. in their privacy policy, see above).

f. Legal / contractual requirement

The provision of your personal data is voluntary. Without the provision of your personal data, we cannot grant you any access to the content and services we offer.

g. Data transfer to third countries

Processing does not take place outside the European Union (EU) or the European Economic Area (EEA).

h. Withdrawal of consent

i. Automated decision-making and profiling

As a company that is aware of its responsibilities, we refrain from automatic decision-making or profiling in this data processing.

IV.8 Facebook Pixel

We use the Facebook pixel on our website. We have implemented a code on our website for this purpose. The Facebook pixel is a snippet of JavaScript code that loads a collection of functions through which Facebook can track your user activities if you have come to our website via Facebook ads. For example, if you purchase a product on our website, the Facebook pixel is triggered and saves your activities on our website in one or more cookies. These cookies enable Facebook to match your user data (customer data such as IP address, user ID) with the data of your Facebook account. Facebook then deletes this data again. The data collected is anonymous and cannot be viewed by us and can only be used in the context of adverts. If you are a Facebook user and are logged in, your visit to our website is automatically assigned to your Facebook user account.

We only wish to show our services and products to people who are really interested in them. With the help of Facebook pixels, our advertising measures can be better customised to your wishes and interests. This means that Facebook users (provided they have allowed personalised advertising) see suitable advertising. Facebook also uses the data collected for analysing purposes and its own adverts.

If you are logged in to Facebook, you can change your settings for adverts yourself at https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen. If you are not a Facebook user, you can manage your usage-based online advertising at http://www.youronlinechoices.com/de/praferenzmanagement/. There you have the option of deactivating or activating providers.

If you want to find out more about Facebook's data protection, we recommend that you read the company's own data policy at https://www.facebook.com/policy.php.

IV.9 Facebook Conversion API

We have integrated Facebook Conversion API on this website. The provider of this service is Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. However, according to Facebook, the data collected is also transferred to the USA and other third countries.
Facebook Conversion API allows us to record the website visitor's interactions with our website and pass them on to Facebook in order to improve advertising performance on Facebook.
In particular, the time of the call, the website called up, your IP address and your user agent as well as any other specific data (e.g. products purchased, value of the shopping basket and currency) are recorded. You can find a complete overview of the data that can be collected here: https://developers.facebook.com/docs/marketing-api/conversions-api/parameters.
The use of this service is based on your consent in accordance with Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TTDSG. Consent can be revoked at any time.
Insofar as personal data is collected on our website with the help of the tool described here and forwarded to Facebook, we and Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland are jointly responsible for this data processing (Art. 26 GDPR). The joint responsibility is exclusively to the collection of the data and its transfer to Facebook. The processing carried out by Facebook after forwarding is not part of the joint responsibility. The obligations incumbent on us jointly have been set out in an agreement on joint processing. The text of the agreement can be found at: https://www.facebook.com/legal/controller_addendum. According to this agreement, we are responsible for providing the data privacy information when using the Facebook tool and for the secure implementation of the tool on our website in accordance with data protection law. Facebook is responsible for the data security of Facebook products. You can assert data subject rights (e.g. requests for information) regarding the data processed by Facebook directly with Facebook. If you assert your data subject rights with us, we are obliged to forward them to Facebook.
Data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://www.facebook.com/legal/EU_data_transfer_addendum und https://de-de.facebook.com/help/566994660333381.
You can find further information on protecting your privacy in Facebook's data privacy information: https://de-de.facebook.com/about/privacy/.

IV.10 Online Presence on Google/Social Media

a. Type and purpose of processing

Our presence on social networks and platforms serves to improve active communication with our customers and interested parties. We provide information about our products and current special offers there. When you visit our online presence on social media, your data may be automatically collected and stored for market research and advertising purposes. This data is used to create so-called user profiles using pseudonyms. These can be used, for example, to place adverts within and outside the platforms that presumably correspond to your interests. Cookies are generally placed on your end device for this purpose. Visitor behaviour and user interests are stored in these cookies. This serves to safeguard our legitimate interests in an optimised presentation of our offer and effective communication with customers and interested parties, which predominate in the context of a balancing of interests. If you are asked by the respective social media platform operators for consent (agreement) to data processing, e.g. with the help of a checkbox, the legal basis for data processing is Art. 6 para. 1 lit. a GDPR. Detailed information on the processing and use of the data by the providers as well as a contact option are available on their respective pages.

Google: https://policies.google.com/privacy
Facebook: https://www.facebook.com/about/privacy/
Instagram: http://instagram.com/about/legal/privacy/

b. Legal basis of processing

The processing is carried out in accordance with Art. 6 para. 1 lit. f. GDPR on the basis of our legitimate interest in the functionality of our website and the contact options to our customers, as well as in accordance with Art. 6 para. 1 lit. a GDPR on the basis of the user's consent on the respective social media platform.

c. Types of data

IP-Adresse

d. Recipients

Recipients of the data are employees of Kleinmetall GmbH, engaged marketing companies and any operator of social media platforms as order processor.

e. Data retention period

Once the purpose and use of the social media platform by us has ceased, the data collected in this context will be deleted.

f. Legal / contractual requirement

The provision of your personal data is voluntary, solely on the basis of your consent. Without the provision of your personal data, we cannot grant you any access to the content and services we offer.

g. Data transfer to third countries

Processing does not take place outside the European Union (EU) or the European Economic Area (EEA).

h. Withdrawal of consent

You can revoke your consent to the storage of your personal data at any time with effect for the future. You can inform us of your revocation at any time using the contact option provided at the beginning of this data protection notice. Your rights in this respect and setting options to protect your privacy, in particular opt-out options, can be found in the providers' data protection notices linked below. If you still require assistance in this respect, please do not hesitate to contact us.

Right to object (Opt-Out):
Google/ YouTube: https://adssettings.google.com/authenticated

i. Automated decision-making and profiling

As a company that is aware of its responsibilities, we refrain from automatic decision-making or profiling in this data processing.

IV.11. Google Maps

a. Type and purpose of processing

We use the Google Maps service on this website. Google Maps is operated by Google Building Gordon House, 4 Barrow Street, Dublin, D04 E5W5, Ireland. This allows us to show you interactive maps directly on the website and allows you to use the map function conveniently. You can find further information about data processing by Google in the Google data privacy information. There, you can also change your personal data protection settings in the data protection centre. When you visit the website, Google receives information that you have accessed the corresponding subpage of our website. This happens regardless of whether Google provides a user account that you are logged in to or whether no user account exists. If you are logged in to Google, your data will be directly assigned to your account. If you do not wish your data to be assigned to your Google profile, you must log out of Google before activating the button. Google stores your data as usage profiles and uses them for the purposes of advertising, market research and/or customising its website. Such an analysis is carried out (even for users who are not logged in) in particular to provide customised advertising and to inform other users of the social network about your activities on our website. You have the right to revoke your consent to the creation of these user profiles, but you must contact Google to exercise this right. b. Legal basis of processing

Your consent is the legal basis for the integration of Google Maps and the associated data transfer to Google (Art. 6 para. 1 lit. a GDPR).

c. Types of data

Anonymised IP-address of the Website visitor

d. Recipients

Recipients of the data are employees of Kleinmetall GmbH and Google as order processor.

e. Data retention period

Data will only be processed in this context as long as the corresponding consent has been given. Thereafter, it will be deleted, unless there are legal obligations to retain it. If you wish to contact us in this regard, please use the contact details provided at the beginning of this privacy policy.

f. Legal / contractual requirement

The provision of your personal data is voluntary, solely on the basis of your consent. If you prevent access, this may result in functional restrictions on the website.

g. Data transfer to third countries

Processing does not take place outside the European Union (EU) or the European Economic Area (EEA).

h. Withdrawal of consent

If you do not want Google to collect, process or use data about you via our website, you can deactivate JavaScript in your browser settings. In this case, however, the use of our website will be restricted or not possible at all. You can revoke your consent to the storage of your personal data at any time with effect for the future. You can inform us of your revocation at any time using the contact option provided at the beginning of this data protection notice.

i. Automated decision-making and profiling

As a company that is aware of its responsibilities, we refrain from automatic decision-making or profiling in this data processing.

IV.12 Microsoft Advertising

a. Type and purpose of processing

We use Microsoft Advertising to advertise our website in the Bing and Yahoo search results and on third-party websites. Microsoft Advertising also gives us the opportunity to place adverts in the so-called "Microsoft Audience Network". This allows us to place adverts on LinkedIn, for example. When you visit our website, a cookie is automatically set that enables interest-based advertising by means of a pseudonymous cookie ID and based on the pages you visit.

b. Legal basis of processing

Processing of the data entered is based on the user's consent (Art. 6 para. 1 lit. a GDPR).

c. Types of data

IP address

d. Recipients

Recipients of the data are employees of Kleinmetall GmbH, assigned marketing companies and Microsoft as order processor.

e. Data retention period

The data collected in this context will be deleted once the purpose and use of BingAds Remarketing by us have ceased.

f. Legal / contractual requirement

g. Data transfer to third countries

Microsoft Advertising is an offer by Microsoft Corporation (www.microsoft.com). Microsoft Corporation has its headquarters in the USA. We would like to point out that, in the opinion of the European Court of Justice, there is currently no adequate level of protection for data transfers to the USA. This may entail various risks for the security and legality of data processing. Microsoft uses so-called standard contractual clauses (Art. 46, para. 2 and 3 GDPR). These are templates provided by the EU Commission and are intended to ensure that your data complies with European data protection standards even if it is transferred to and stored in third countries (e.g. the USA). Under these clauses, Microsoft undertakes to comply with the European level of data protection when processing your relevant data, even if the data is stored, processed and managed in the USA.

h. Withdrawal of consent

You can revoke your consent at any time with effect for the future. If you do not want interest-based adverts from Microsoft Advertising to be displayed to you, you can switch off this function at https://account.microsoft.com/privacy/ad-settings/signedout. Furthermore, you can deactivate, manage or delete all cookies in your browser.

i. Automated decision-making and profiling

As a company that is aware of its responsibilities, we refrain from automatic decision-making or profiling in this data processing.

IV.13 Contact Form

a. Type and purpose of processing

The data entered by you will be stored for the purpose of personalised communication with you. For this purpose, a valid e-mail address and your name are required. This will be used to allocate the enquiry and subsequently answer it. The provision of further data is optional.

b. Legal basis of processing

The data entered in the contact form is processed on the basis of a legitimate interest (Art. 6 para. 1 lit. f GDPR). By providing the contact form, we would like to make it easy for you to contact us. The information provided by you will be stored for the purpose of processing your enquiry and for possible follow-up questions. If you contact us to request a quotation, the data entered in the contact form will be processed to carry out pre-contractual measures (Art. 6 para. 1 lit. b GDPR).

c. Types of data

Name, email address, other data entered voluntarily

d. Recipients

Recipients of the data are employees of Kleinmetall GmbH as well as order data processors as applicable.

e. Data retention period

Data will be deleted no later than 6 months after the enquiry was processed. If there is a contractual relationship, we are subject to the legal retention periods according to the German Commercial Code (HGB) and shall delete your data after these periods have expired.

f. Legal / contractual requirement

The provision of your personal data is voluntary. However, we will only be able to process your inquiry if you give us your name, your email address and the reason for the inquiry.

g. Data transfer to third countries

Processing does not take place outside the European Union (EU) or the European Economic Area (EEA).

h. Withdrawal of consent

i. Automated decision-making and profiling

As a company that is aware of its responsibilities, we refrain from automatic decision-making or profiling in this data processing.

IV.14 Product Reviews

a. Type and purpose of processing

When users leave product reviews on our website, the time of their creation and the user name previously selected by the website visitor are stored in addition to this information. This is for our own safety, as we can be prosecuted for illegal content on our website, even if it was created by users.

b. Legal basis of processing

The data entered as a review is processed on the basis of a legitimate interest (Art. 6 para. 1 lit. f GDPR). By providing the review function, we want to make it easy for you to interact with us. The information you provide will be stored for the purpose of processing the enquiry and for possible follow-up questions.

c. Types of data

User name
Date of review

d. Recipients

Recipients of the data are employees of Kleinmetall GmbH as well as order data processors as applicable.

e. Data retention period

The data is deleted as soon as it is no longer required for the purpose for which it was collected. This is generally the case when communication with the user has been concluded and the company can infer from the circumstances that the matter in question has been clarified conclusively.

f. Legal / contractual requirement

The provision of your personal data is voluntary, solely on the basis of your consent. Without the provision of your personal data, we cannot grant you any access to our comment feature.

g. Data transfer to third countries

Processing does not take place outside the European Union (EU) or the European Economic Area (EEA).

h. Withdrawal of consent

i. Automated decision-making and profiling

As a company that is aware of its responsibilities, we refrain from automatic decision-making or profiling in this data processing.

IV.15 Registration

a. Type and purpose of processing

When registering to use our personalised services, some personal data is collected, such as name, address, contact and communication data (e.g. phone number and email address). If you are registered with us, you can access content and services that we only offer to registered users. Registered users also have the option of changing or deleting the data provided during registration at any time. Moreover, we will of course provide you with information about the personal data we have stored about you at any time.

b. Legal basis of processing

The data entered during registration is processed on the basis of the user's consent (Art. 6 para. 1 lit. a GDPR).

c. Types of data

Surname, forename, address, payment data, date and time of registration

d. Recipients

Recipients of the data are employees of Kleinmetall GmbH as well as order data processors, as applicable, acting for the operation and maintenance of our website.

e. Data retention period

Data is only processed in this context for as long as the corresponding consent is available. Thereafter, it will be deleted, provided there are no legal retention obligations to the contrary. If you wish to contact us in this regard, please use the contact details provided at the beginning of this data protection notice.

f. Legal / contractual requirement

g. Data transfer to third countries

Processing does not take place outside the European Union (EU) or the European Economic Area (EEA).

h. Withdrawal of consent

i. Automated decision-making and profiling

As a company that is aware of its responsibilities, we refrain from automatic decision-making or profiling in this data processing.

V Newsletter

a. Type and purpose of processing

Your data will only be used to send you the newsletter you have subscribed to by e-mail. Your name will be used to address you personally in the newsletter and, if necessary, to identify you if you wish to exercise your rights as a data subject. To receive the newsletter, it is sufficient to provide your email address. When you register to receive our newsletter, the data you provide will be exclusively used for this purpose. Subscribers may also be informed by email about circumstances that are relevant to the service or registration (e.g. changes to the newsletter offer or technical circumstances). We require a valid email address for effective registration. We use the "double opt-in" procedure to check that a registration is actually made by the owner of an email address. For this purpose, we log the order of the newsletter, the dispatch of a confirmation email and the receipt of the requested reply. No further data is collected. The data is only used for sending the newsletter and is not passed on to third parties.

b. Legal basis of processing

On the basis of your expressly granted consent (Art. 6 para. 1 lit. a GDPR, Art. 7 GDPR in conjunction with sec. 107 para. 2 TKG), we will regularly send you our newsletter or comparable information to your specified e-mail address.

c. Types of data

Email address
Surname
Forename

d. Recipients

Employees of the IT and Marketing department
Service providers for the dispatch of newsletters
Assigned marketing companies

e. Data retention period

The data will only be processed in this context for as long as the corresponding consent is available. Thereafter, they will be deleted.

f. Legal / contractual requirement

The provision of your personal data is voluntary, solely on the basis of your consent. We will unfortunately not be able to send you our newsletter without your consent.

g. Data transfer to third countries

Processing does not take place outside the European Union (EU) or the European Economic Area (EEA).

h. Withdrawal of consent

You can revoke your consent to the storage of your personal data and its use for sending the newsletter at any time with effect for the future. There is a corresponding link in every newsletter. You can also unsubscribe directly on this website at any time or inform us of your cancellation using the contact option provided at the end of this privacy policy.

i. Automated decision-making and profiling

As a company that is aware of its responsibilities, we refrain from automatic decision-making or profiling in this data processing.

VI Contract Handling and Payment

a. Type and purpose of processing

For the provision of chargeable services, we will request additional data, such as payment details, in order to execute your order. In order to fulfil the contract in accordance with Art. 6 para. 1 sentence 1 lit. b GDPR, we pass on your data to the shipping company commissioned with the delivery, insofar as this is necessary for the delivery of ordered goods. Depending on which payment service provider you select in the ordering process, we will pass on the payment data collected for the processing of payments to the credit institution commissioned with the payment and, if applicable, to the payment service provider commissioned by us or to the selected payment service. In some cases, the selected payment service providers also collect this data themselves if you create an account with them. In this case, you must log in to the payment service provider with your access data during the ordering process. In this respect, the privacy policy of the respective payment service provider applies.

b. Legal basis of processing

The processing of the data required for the conclusion of the contract is based on Art. 6 para. 1 lit. b GDPR.

c. Types of data

Forname, surname
Address
Phone number
Email address
Payment data
Company data (for commercial customers)

d. Recipients

Recipients of the data are employees of Kleinmetall GmbH as well as order processors, as applicable, acting for dispatch and payment within the framework of order placement.

e. Data retention period

We shall store this data in our systems until the legal retention periods have expired. These are generally 6 or 10 years for reasons of proper accounting and tax law requirements.

f. Legal / contractual requirement

g. Data transfer to third countries

Processing does not take place outside the European Union (EU) or the European Economic Area (EEA).

h. Withdrawal of consent

i. Automated decision-making and profiling

As a company that is aware of its responsibilities, we refrain from automatic decision-making or profiling in this data processing.

VI.1 Paypal

You have the option of processing the payment transaction via the payment service provider PayPal (PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg). This corresponds to our legitimate interest in offering an efficient and secure payment method (Art. 6 para. 1 lit. f GDPR). In this context, we pass on the following data to PayPal insofar as it is necessary for the fulfilment of the contract (Art. 6 para. 1 lit. b. GDPR).

Forename
Surname
Address
Email address
Phone number

The processing of the data specified in this section is neither legally nor contractually required. We cannot process a payment via PayPal without transmitting your personal data. [You have the option of choosing a different payment method.]

PayPal carries out a credit check for various services such as payment by direct debit to ensure your willingness and ability to pay. This corresponds to PayPal's legitimate interest (pursuant to Art. 6 para. 1 lit. f GDPR) and serves the fulfilment of the contract (pursuant to Art. 6 para. 1 lit. b GDPR). For this purpose, your data (name, address and date of birth, bank account details) will be passed on to credit agencies. We have no influence on this process and only receive the result of whether the payment has been made or rejected or whether a check is pending.

Further information on objection and removal options vis-à-vis PayPal can be found at: https://www.paypal.com/de/webapps/mpp/ua/privacy-full

Your data will be stored until payment processing has been completed. This also includes the period required for processing refunds, claims management and fraud prevention.

VI.2 AmazonPay

You have the option of processing the payment transaction via the payment service provider amazon pay (Amazon Payments Europe s.c.a., 38 avenue J.F. Kennedy, L-1855 Luxembourg). This corresponds to our legitimate interest in offering an efficient and secure payment method (Art. 6 para. 1 lit. f GDPR). In this context, we pass on the following data to Amazon Payments to the extent necessary for the fulfilment of the contract (Art. 6 para. 1 lit. b. GDPR):

Forename
Surname
Address
Email address
Phone number

The processing of the data specified in this section is neither legally nor contractually required. We cannot process a payment via amazon pay without transmitting your personal data. You have the option of choosing a different payment method.

Amazon Payments Europe Europe reserves the right to carry out a credit check to ensure your willingness and ability to pay. This corresponds to the legitimate interest of Amazon Payments Europe (pursuant to Art. 6 para. 1 lit. f GDPR) and serves the fulfilment of the contract (pursuant to Art. 6 para. 1 lit. b GDPR). Your data will be passed on to credit agencies and online retailers for this purpose. In addition, your data may be used for interest-related advertising and marketing purposes by amazon pay if you have consented to this in your account settings https://www.amazon.de/adprefs. We have no influence on this process and only receive the result of whether the payment has been carried out or rejected.

Further information on objection and removal options vis-à-vis Amazon Payments Europe can be found at: https://pay.amazon.de/help/201212490.

Your data will be stored by us until payment processing has been completed. This also includes the period required for the processing of refunds, claims management and fraud prevention.

VI.3 Mollie

You have the option of processing the payment transaction via the payment service provider Mollie (Mollie B.V. Keizersgracht 126, 1015CW Amsterdam, Netherlands). This corresponds to our legitimate interest in offering an efficient and secure payment method (Art. 6 para. 1 lit. f GDPR). In this context, we pass on the following data to Mollie insofar as it is necessary for the fulfilment of the contract (Art. 6 para. 1 lit. b. GDPR):

Forename
Surname
Address
Email address
Phone number

The processing of the data specified in this section is neither legally nor contractually required. We cannot process a payment via Mollie without transmitting your personal data. You have the option of choosing a different payment method.

Mollie Mollie reserves the right to carry out a credit check to ensure your willingness and ability to pay. This corresponds to the legitimate interest of Mollie (pursuant to Art. 6 para. 1 lit. f GDPR) and serves the fulfilment of the contract (pursuant to Art. 6 para. 1 lit. b GDPR). Your data will be passed on to credit agencies and online retailers for this purpose. In addition, your data may be used for interest-related advertising and marketing purposes by Mollie if you have consented to this in your account settings. We have no influence on this process and only receive the result of whether the payment has been carried out or rejected.

Further information on objection and removal options vis-à-vis Mollie can be found at: https://www.mollie.com/privacy

Your data will be stored until payment processing has been completed. This also includes the period required for processing refunds, claims management and fraud prevention.

VII Data Subject Rights

If your personal data is processed as a user, you are considered a data subject under the GDPR. Data subjects have the following rights vis-à-vis the controller:

Right of access (Art. 15 GDPR)
Right to rectification or erasure of personal data (Art. 16, 17 GDPR)
Right to restriction of processing (Art. 18 GDPR)
Right to notification in connection with the rectification or erasure of your personal data or the restriction of processing (Art. 19 GDPR)
Right to data portability (Art. 20 GDPR)
Right to object (Art. 21 GDPR)
Right to withdraw declarations of consent. The legality of the data processing carried out until the revocation remains unaffected by the consent valid to date. (Art. 7 para. 3 GDPR)
Right to lodge a complaint with a supervisory authority (Art. 77 GDPR)

VIII Overview Of The Processors Used

If we disclose or transfer data to other people and companies (processors, joint controllers or third parties) within the scope of our processing or otherwise grant them access to the data, this shall only take place if we have legal permission (e.g. if the transfer of data to third parties, such as payment service providers, is necessary to fulfil a contract), users have consented, a legal obligation provides for this or if it is based on our legitimate interests (e.g. when using agents, web hosts, etc.). If we disclose, transfer or otherwise grant access to data to other companies in our group of companies, this is done in particular for administrative purposes as a legitimate interest and, in addition, on a basis that complies with the legal requirements.

The following organisations, companies or persons have been commissioned by the operator of this website to process data:

Order Processors within the EU / EEA

Maxcluster GmbH
Lise-Meitner-Str. 1b
33104 Paderborn
Germany
info@maxcluster.de
https://maxcluster.de/

Mittwald CM Service GmbH & Co. KG
Königsberger Straße 4-6
32339 Espelkamp
Germany
support@mittwald.de
https://www.mittwald.de/

Shopware AG
Ebbinghoff 10
48624 Schöppingen
Germany
info@shopware.com
https://www.shopware.com/de/

creativity GmbH
Industriestraße 23
40822 Mettmann
+49 2104 27077-0
Germany
info@creativity-gmbh.de
https://www.creativity-gmbh.de/

EMS Experts Managed Services GmbH
Kai Bretschneider
Marienbergstraße 94
90411 Nürnberg
Germany
+49 911 950368 00
kai.bretschneider@ems.info
https://www.ems.info/

IX Our Right To Amend The Policy

As changes to the law or changes to our internal company processes may make it necessary to amend this privacy policy, we kindly ask you to read this privacy policy regularly. This privacy policy can be accessed at any time at https://www.kleinmetall.de/datenschutz/. We shall therefore reserve the right to amend this policy at any time in compliance with data protection regulations.

Top Brands and Products

Wir liefern Produkte für folgende Automarken

Audi

BMW

Mercedes

Skoda