Data privacy statement

Data privacy statement

Thank you for visiting our website www.concept-s-design.com and for your interest in our company. Protecting your personal data is very important to us. Personal data is information on personal or material circumstances of a specific or specifiable natural person. This includes, for example, the real name, address, telephone number and date of birth, but also all other data that can be attributed to a determinable person.

Since personal data is afforded special statutory protection, it is only collected by us if it is necessary for the provision of our website and to render our services. In the following, we will show you which personal information we gather during your visit to our website and how we use it.

Our data privacy policy is in compliance with statutory requirements, particularly those of the Federal Data Protection Act (Bundesdatenschutzgesetz), the German Telemedia Act (Telemediengesetz) and the EU’s General Data Protection Regulation (GDPR). We only collect, process and store your personal data insofar as it is necessary for the operative provision of this website and our content and services, as well as for processing queries and if necessary to process orders / contracts, this respectively however only insofar as there is a legitimate interest in the sense of article 6 para. 1 p.1 letter f of the GDPR or another permission for use. Only if you have previously provided your consent will your data also be used for purposes going beyond this, reasons that were specified precisely in the consent, e.g. to send you advertising information by newsletter.

§ Controller in the sense of article 4 (7) of the GDPR

The controller in the sense of the GDPR and other national data protection laws of the members states as well as other data protection provisions is:

Concept S Ladenbau u. Objekt Design GmbH

Steinbeisstraße 8

73614 Schorndorf

E-mail: info@concept-s-design.com

Fax: +49 (0)7181-99371-62

§ Provision of the website and creation of log files

Each time our website is called up, our system automatically collects data and information on the computer system used by the computer calling up the website. The following data is hereby collected:
Scope of the processing of the data

(1)           Information on the browser type and the version used
(2)           The operating system of the retrieving device
(3)           The IP address of the retrieving device
(4)           Date and time of access
(5)           Websites and resources (images, files, additional page contents) that were called up on our website.
(6)           Websites from which the system of the user accessed our website (referrer tracking)

This data is stored in the log files of our system. A storage of this data together with persona data of a specific user does not take place, meaning that an identification of individual page visitors does not take place.

- Legal basis for the processing of personal data
Article 6 (1f) GDPR (legitimate interest). Our legitimate interest lies in securing the purpose specified in the following.

- Purpose of the data processing
The logging take place to maintain our website’s compatibility for all visitors as far as possible and to combat abuse and troubleshooting. In order to do so, it is necessary to be able to log the technical data of the retrieving computer in order to thus respond to display errors, attacks against our IT systems and/or errors in the functionality of our website as quickly as possible. The data also serves to help us optimise the website and to generally ensure the security of our IT systems.

- Duration of the storage
The aforementioned technical data is deleted as soon as it is no longer required to ensure the compatibility of the website for all visitors, at the latest however 3 months after calling up our website.

- Possibility to object and delete
The rights to object and delete are governed by the general regulations on the data protection right of objection and right to erasure described in this data privacy statement.

§ Special functions of our website

Our website offers you various functions where your personal data is collected, processed and stored by us. We explain what happens to your data below:

§ Evaluation function:

- Scope of the processing of personal data
The data entered into the form fields by you.

- Legal basis for the processing of personal data
Article 6 (1a) GDPR (implied consent)

- Purpose of the data processing
Acceptance and publication of your evaluation on our website – and insofar as you explicitly consent to it – also on the internet platforms of our evaluation service provider.

- Duration of the storage
Your evaluation is stored and published for an unlimited period of time. We reserve the right to delete the data without specifying reasons and without advance or retrospective notification.

- Possibility to object and delete
You can have your evaluation deleted at any time. The rights to object and delete are governed by the general regulations on the data protection right of objection and right to erasure described in this data privacy statement.

§ Contact form(s):

- Scope of the processing of personal data

The data entered by you in our contact forms.

- Legal basis for the processing of personal data

Article 6 (1a) GDPR (implied consent)

- Purpose of the data processing

The data recorded through our contact form or our contact forms will only be used by us for the processing of the specific contact query associated with the contact form.

- Duration of the storage

After processing your query, the collected data will be immediately deleted unless it is subject to statutory retention periods.

- Possibility to object and delete

The rights to object and delete are governed by the general regulations on the data protection right of objection and right to erasure described in this data privacy statement.

§ Login section:

- Scope of the processing of personal data

The registration and login data entered by you with us.

- Legal basis for the processing of personal data

Article 6 (1a) GDPR (implied consent)

- Purpose of the data processing

You have the option of using a separate login section on our website. If you should have forgotten your password or your user name for this section, there is the possibility of having this data sent to you again after entering your contact data (e-mail address). The user data that arises within the scope of using the login section are only used, stored and processed for combat abuse and troubleshooting, and to maintain the functionality. A use for other purposes or a transfer of data to third parties does not take place.

- Duration of storage

Your evaluation is stored and published for an unlimited period of time. We reserve the right to erasure without giving reasons and without providing advance or retrospective notification.

- Duration of the storage

The data collected in the context of the ‘forgotten my user name / password’ function is only used to resend forgotten login details.

- Possibility to object and delete

The rights to object and delete are governed by the general regulations on the data protection right of objection and right to erasure described in this data privacy statement.

§ Form for newsletter subscription:

- Scope of the processing of personal data

The data entered by you to subscribe to the newsletter.

- Legal basis for the processing of personal data

Article 6 (1a) GDPR (implied consent)

- Purpose of the data processing

The data recorded in the subscription mask for our newsletter is used by us solely to send you our newsletter in which we inform you about all our services and the latest news. After subscribing, we will send you a confirmation email that contains a link for you to click on in order to finalise your subscription to our newsletter (double opt-in).

- Duration of storage

You can unsubscribe from our newsletter at any time by clicking the unsubscribe link that is also contained in each newsletter. Your data is deleted by us immediately after unsubscribing. Your data will also be immediately deleted by us in the event of a not-concluded subscription. We reserve the right to erasure without giving reasons and without providing advance or retrospective notification.

- Possibility to object and delete

The rights to object and delete are governed by the general regulations on the data protection right of objection and right to erasure described in this data privacy statement.

§ Automatic credit assessment / scoring

§ Automatic identity check and credit assessment when selecting the "PayPal" payment method

- Scope of the processing of personal data

If you have selected the "PayPal" payment method, we will pass on your personal customer data collected within the context of the payment processing to PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter "PayPal"). If you grant your consent, the following data shall be affected by the data transfer: First and last name, street, house number, postcode, city, date of birth, telephone number as well as the data associated with your order.

- Legal basis for the processing of personal data

Article 6 (1b) GDPR (execution of pre-contractual measures)

- Purpose of the data processing

PayPal performs a credit assessment when selecting the "PayPal" payment method. Mathematical, statistical methods are hereby employed to calculate a rating with regards to the probability of a payment default (so-called calculation of a scoring value). PayPal applies the calculated scoring value to their decision on providing the respective payment methods. The calculation of a scoring value is carried out according to recognised scientific methods. Please also refer to PayPal’s data privacy statement: https://www.paypal.com/de/webapps/mpp/ua/privacy-full

- Duration of the storage

We will store the relevant data for the processing of the payment as long as is necessary to perform the transaction. If the data is subject to statutory retention requirements, the erasure shall take place after expiration of the retention obligation. The duration of the storage of the data by PayPal results from the data privacy statement of PayPal: https://www.paypal.com/de/webapps/mpp/ua/privacy-full

- Possibility to object and delete

The rights to object and delete are governed by the general regulations on the data protection right of objection and right to erasure described in this data privacy statement.

§ Statistical evaluation of the visits to this website – web tracker

When this website or individual files of this website are called up, we collect, process and store the following data: IP address, the website from which the file was called up, name of the file, date and time of retrieval, transferred data size and report on the success of the retrieval (so-called web log). We use this access data exclusively in non-personalised form to constantly improve our internet offer and for statistical purposes.

We also employ the following web trackers to evaluate the visits to this website:

§ Google Analytics

- Scope of the processing of personal data

Our website uses the web tracking services of Google LLC, 1600 Amphitheatre Park in 94043 Mountain View, USA (hereinafter: Google Analytics). Within the scope of the web tracking, Google Analytics uses cookies that are stored on your computer and that enable an analysis of the use of our website and your browsing behaviour (so-called tracking). We conduct this analysis on the basis of the tracking services of Google Analytics in order to continuously optimise our internet offer and improve its availability. Within the scope of use of our website, we will hereby transfer data, particularly such as your IP address and your user activities, to servers of Google LLC and outside of the European union, e.g. processed and stored in the USA.

The EU Commission has determined that an appropriate standard of data protection can be given in the USA if the data-processing company has subjected itself to the US-EU Privacy Shield Agreement and the data export into the USA was designed permissibly in this manner. By activating the IP anonymization within the Google Analytics tracking code of this website, your IP address is anonymised by Google Analytics before the transmission. This website uses a Google Analytics tracking code that uses the extension gat._anonymizeIp(); to only enable an anonymized collection of IP addresses (so-called IP masking).

- Legal basis for the processing of personal data

Article 6 (1a) GDPR (consent), either within the scope of registering with Google (opening a Google account and accepting the data privacy information implemented therein) or, if you have not registered with Google, through explicit consent when opening our website.

- Purpose of the data processing

On our behalf, Google will use this information to evaluate your visit on this website to compile reports on the website activities and to perform other services associated with the website use and the internet use for us. The IP address transferred from your browser within the scope of Google Analytics is not brought together with other data of Google LLC.

- Duration of the storage

Google shall store the data relevant for the provision of the web tracking for as long as is necessary to fulfil the booked web service. The data collection and storage take place in anonymized form. To the extent that references to persons should in fact be given, the data will be immediately deleted as long as it is not subject to any statutory retention obligations, in any case erasure takes place after the expiration of the retention obligation.

- Possibility to object and delete

You can prevent the collection and passing on of personal data to Google (particularly your IP address) as well as the processing of this data by Google by deactivating the execution of script code in your browser, by installing a script blocker in your browser (you can find this for example at www.noscript.net or www.ghostery.com) or activating the “Do Not Track” setting of your browser. You can furthermore prevent the collection of the data generated by the Google cookie and associated with the use of the website (including your IP address) to Google as well as the processing of this data by Google by downloading and installing the browser plug-in available under the following link (). The security and data privacy principles of Google Analytics can be found at: https://policies.google.com/privacy?hl=de

§ Notification on the use of cookies

§ Scope of the processing of personal data

We use cookies on various pages to enable the use of certain functions of our website. So-called ‘cookies' are small text files that your browser can store on your computer. These text files contain a character string that enable the clear identification of the browser when calling up our website again. The process of placing a cookie file is also called 'setting a cookie’.

§ Legal basis for the processing of personal data

Article 6 (1f) GDPR (legitimate interest). Our legitimate interest lies in maintaining the full functionality of our website, improving its operability, and enabling us to target customers in a more individualised manner. An identification of individual website visitors with the help of cookie technology is only possible if the website visitor has previously provided us with their respective personal data on the basis of a special consent.

§ Purpose of the data processing

The cookies are set by our website in order to maintain the full functionality of our website and to improve its operability. In addition, cookie technology enables us to recognise an individual visitor through pseudonyms, for example an individual, random ID, to make it possible for us to provide more individualised services.

§ Duration of the storage

Our cookies are stored until they are deleted in your browser or, if it is just a session cookie, until the session has expired.

§ Possibility to object and delete

You yourself can set your browser to generally prevent the setting of cookies, for you just to be informed of this, for you decide on a case-by-case basis about whether to accept cookies: or to generally accept cookies. Cookies can be used for different purposes, e.g. to recognise that your PC has come into contact with our web offer before (permanent cookies) or to store previously viewed offers (session cookies). We use cookies to increase user comfort. To use our comfort functions, we recommend that you allow the acceptance of cookies for our web offer.

The rights to object and delete are governed by the general regulations on the data protection right of objection and right to erasure described in this data privacy statement.

§ Data security and data protection, communication via e-mail

Your personal data is protected through technical and organisational measures during collection, storage and processing against being accessed by third parties. In the event of unencrypted communication via e-mail, full data security on the transmission route to our IT systems cannot be guaranteed by us, we therefore recommend encrypted communication or postal delivery when it comes to information with a high need for confidentiality.

§ Revocation of consent – access to data and change requests – erasure & blocking of data

Once a year you are entitled to receive information on our stored data without cost, and at any time to correction, blocking or the erasure of your data. Your data is deleted by us at the first request as long as there are no statutory regulations that contradict this. You can therefore revoke a consent given to us to use your personal data at any time. Requests for information, erasure and correction of your data as well as suggestions can be sent at any time to the following address:

Concept S Ladenbau u. Objekt Design GmbH

Steinbeisstraße 8

73614 Schorndorf

E-mail: info@concept-s-design.com

Fax: +49 (0)7181-99371-62

§ Right to lodge a complaint with the supervisory authority in accordance with
article 77 (1) GDPR

If you suspect that the processing of your data on our website is unlawful, you can naturally at any time seek judicial remedy of the issue. Irrespective of this, you have the option of contacting a supervisory authority. You are entitled to lodge a complaint in the EU member state of your place of residence, your workplace and/or the place of the alleged violation, i.e. you can select the supervisory authority that you contact at the aforementioned locations. The supervisory authority that receives the submitted complaint will then inform you about the status and the results of your entry, including the option of legal remedy in accordance with article 78 GDPR.

Created by: