1. Data protection at a glance
General information
The following information provides a simple overview of what happens to your personal data when you visit this website and our webshop. Personal data is any data by which you can be personally identified.
As the operator of this website, we take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this privacy policy.
When you use this website, various personal data is collected. Personal data is data by which you can be personally identified. This privacy policy explains which data we collect and what we use it for. It also explains how and for what purpose this takes place.
We would like to point out that data transmission over the Internet (for example, when communicating by email) may have security gaps. Complete protection of data against access by third parties is not possible.
Data collection on this website
The controller responsible for data processing on this website is:
Industrial Tools center GmbH
The controller is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data (e.g. names, email addresses, or similar).
If you have any questions or need a contact person regarding data protection, our data protection officer is available to you at any time. Their contact details are:
[Name][Email address]
How do we collect your data?
Your data is collected when you visit this website. The data is automatically collected by our IT systems when you visit the website. This is primarily technical data (e.g. internet browser, operating system, or the time the page was accessed).
If you wish to place an order in our webshop, it is also necessary for the conclusion of the contract that you provide your personal data, which we require in order to process your order.
What do we use your data for?
The data is collected to ensure that the website is provided without errors. If you place orders in our webshop, we process your information in order to handle your order.
2. Hosting
This website is hosted externally. The personal data collected on this website is stored on the servers of the hosting provider. This may include, in particular, IP addresses, metadata and communication data, website access data, and other data generated via our website.
External hosting is carried out for the purpose of fulfilling our contract with potential and existing customers (Art. 6(1)(b) GDPR) and in the interest of secure, fast, and efficient provision of our online offering by a professional provider (Art. 6(1)(f) GDPR). If corresponding consent has been requested, processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR and Section 25(1) TDDDG, insofar as the consent includes the storage of cookies or access to information in the user’s terminal device (e.g. device fingerprinting) within the meaning of the TDDDG. Consent may be withdrawn at any time.
Our hosting provider will only process your data to the extent necessary to fulfill its service obligations and will follow our instructions with regard to this data.
We use the following hosting provider:
XXX
Data processing agreement
We have concluded a data processing agreement (DPA) for the use of the above-mentioned service. This is a contract required under data protection law that ensures that it processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.
3. General information and mandatory information
What rights do you have regarding your data?
You have the following rights against us regarding your personal data:
- Right of access, Art. 15 GDPR
- Right to rectification or erasure, Arts. 16 and 17 GDPR
- Right to restriction of processing, Art. 18 GDPR
- Right to object to processing, Art. 21 GDPR
- Right to data portability, Art. 20 GDPR
- Right to withdraw consent granted, Art. 7(3) GDPR.
You also have the right to lodge a complaint with a data protection supervisory authority regarding our processing of your personal data, Art. 77 GDPR. You may contact us at any time about this and about any other questions on the subject of data protection.
General information on the legal bases for data processing on this website
If you have consented to data processing, we process your personal data on the basis of Art. 6(1)(a) GDPR or Art. 9(2)(a) GDPR if special categories of data under Art. 9(1) GDPR are processed. In the event of explicit consent to the transfer of personal data to third countries, data processing is also carried out on the basis of Art. 49(1)(a) GDPR. If you have consented to the storage of cookies or to access to information on your terminal device (e.g. via device fingerprinting), data processing is also carried out on the basis of Section 25(1) TDDDG. Consent may be withdrawn at any time.
If your data is required for the performance of a contract or for carrying out pre-contractual measures, we process your data on the basis of Art. 6(1)(b) GDPR. Furthermore, we process your data if this is necessary to fulfill a legal obligation on the basis of Art. 6(1)(c) GDPR. Data processing may also take place on the basis of our legitimate interest pursuant to Art. 6(1)(f) GDPR. The relevant legal bases applicable in each individual case are explained in the following paragraphs of this privacy policy.
Your personal data is not used for automated decision-making processes (including profiling) (Art. 22 GDPR).
Storage period
Unless a more specific storage period has been stated within this privacy policy, your personal data will remain with us until the purpose for data processing no longer applies. With regard to the use and storage duration of cookies, please refer to the information on cookies in this privacy policy and in the cookie settings.
If you assert a legitimate request for erasure or withdraw your consent to data processing, your data will be deleted unless we have other legally permissible grounds for storing your personal data (e.g. retention periods under tax or commercial law); in the latter case, deletion will take place after those grounds no longer apply.
Transfer of data to third countries
As part of our business relationship, your personal data may be transferred to companies outside the European Economic Area (EEA). This is done exclusively for the performance of the contract or the maintenance of our business relationship (Art. 6(1)(b) or (f) in conjunction with Arts. 44 et seq. GDPR). Details of the transfer can be found in the relevant sections of this statement.
For some countries outside the EEA, the European Commission has determined that an adequate level of data protection exists (list of adequacy decisions of the European Commission). In other cases, we ensure appropriate safeguards, for example through standard contractual clauses or other legally provided instruments. If you have any questions, please contact our data protection officer.
4. Data collection on this website
Log data
When you visit our website, a temporary and anonymized log record (so-called server log files) is stored on our web server. This consists of:
- the page from which the page was requested (so-called referrer URL)
- the name and URL of the requested page
- the date and time of the request
- the description of the type, language, and version of the web browser used
- the IP address of the requesting computer, which is shortened in such a way that it can no longer be linked to a person
- the amount of data transmitted
- the operating system
- the message indicating whether the request was successful (access status/HTTP status code)
- the GMT time zone difference
The processing of log data serves technical purposes and the improvement of the quality of our website, in particular the stability and security of the connection, and is carried out on the basis of Art. 6(1), sentence 1, point (f) GDPR.
Inquiry by email, telephone, or contact form
If you contact us by email, telephone, or contact form, your inquiry including all personal data arising from it (name, inquiry) will be stored and processed by us for the purpose of handling your request. We do not pass on this data without your consent.
The processing of this data is carried out on the basis of Art. 6(1)(b) GDPR if your inquiry is related to the performance of a contract or is necessary for the implementation of pre-contractual measures.
In all other cases, the processing is based on our legitimate interest in the effective handling of inquiries addressed to us (Art. 6(1)(f) GDPR).
The data you send to us via contact inquiries remains with us until you request us to delete it or the purpose for data storage no longer applies (e.g. after your request has been fully processed). Mandatory statutory provisions, in particular statutory retention periods, remain unaffected.
Insofar as you send us personal data for application purposes, such as a CV, cover letter, certificates, and other relevant documents, as well as any other information you include in your application, processing is carried out on the basis of Art. 88 GDPR in conjunction with Section 26 BDSG. Your data is used exclusively for the purpose of reviewing and processing your application. If no employment relationship is established, your application data will be deleted within six months after completion of the application process, unless you have consented to longer storage for future job offers (Art. 6(1)(a) GDPR).
Transfer of personal data to third parties
The following categories of recipients, which are generally processors, may, where applicable, receive access to your personal data:
- service providers for the operation of our website and the processing of data stored or transmitted by the systems (e.g. for data center services, payment processing, IT security). The legal basis for the transfer is then Art. 6(1), sentence 1, point (b) or point (f) GDPR, insofar as they are not processors;
- state bodies/authorities, insofar as this is necessary to fulfill a legal obligation. The legal basis for the transfer is then Art. 6(1), sentence 1, point (c) GDPR;
- persons engaged in carrying out our business operations (e.g. auditors, banks, insurers, legal advisors, or supervisory authorities). The legal basis for the transfer is then Art. 6(1), sentence 1, point (b) or point (f) GDPR.
In addition, we only transfer your personal data to third parties if you have given your express consent to this pursuant to Art. 6(1), sentence 1, point (a) GDPR.
5. Plugins and other services
Google services
Our website uses various services of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; hereinafter: Google) to improve website functionality, provide services, analyze user behavior, and optimize our advertising measures.
By visiting our website, Google receives the information described below. This occurs regardless of whether Google provides a user account through which you are logged in or whether no user account exists. If you are logged in to Google, your data is assigned directly to your account. If you do not want your data to be associated with your Google profile, you must log out before activating the button. Google stores your data as usage profiles and uses it for advertising, market research, and/or needs-based design of its website. Such an evaluation takes place in particular (even for users who are not logged in) in order to provide needs-based advertising. You have the right to object to the creation of these user profiles, whereby you must contact Google in order to exercise this right.
In detail, we use the following Google services:
- Google Maps: We use Google Maps to provide you with interactive maps directly on our website. In this context, data such as your IP address, device information, and location data (if you have enabled this in your browser) is transmitted to Google. This data is processed in order to provide the map display.
- YouTube: Videos from the YouTube service are embedded on our website. When you play a video, data such as your IP address, device information, and information about your interactions with the video are transmitted to Google. This processing takes place regardless of whether you are logged in to YouTube or not.
The processing of the above-mentioned data for the use of the respective services is carried out on the basis of your consent in accordance with Art. 6(1)(a) GDPR, which you can grant individually via our cookie banner.
We would like to point out that, as part of the use of the above-mentioned services, your personal data may be transferred by Google to the USA. The transfer of data to the USA takes place on the basis of the EU-US Data Privacy Framework (DPF). Google is certified under the DPF and undertakes to ensure a level of data protection equivalent to that of the EU. Nevertheless, we would like to point out that in the USA, due to national security laws, a lower level of data protection may exist and US authorities may possibly gain access to your data. Further information on data processing by Google and on DPF certification can be found in the Google Privacy Policy.
6. Cookies
We use cookies on this website under the following conditions:
Cookie tool
We use the service complianz.io of Complianz BV (Kalmarweg 14-5, 9723 JG, Groningen, the Netherlands; hereinafter: complianz.io) in order to manage your consent to the use of cookies and similar technologies in compliance with data protection law. When you visit our website, complianz.io collects information about your consents, your IP address, information about the browser used, the operating system, and the date and time of your visit. This data is stored on complianz.io servers in the EU and automatically deleted after 12 months.
The processing is carried out on the basis of Art. 6(1)(c) GDPR in order to comply with our legal obligations to provide evidence of your consents, as well as on the basis of Art. 6(1)(f) GDPR in order to enable transparent and legally compliant cookie management. Further information on data processing by complianz.io can be found in the privacy policy of complianz.io, see https://complianz.io/legal/privacy-statement/
Types of cookies
In addition to the above-mentioned services, our website uses various cookies to improve your use of the website, provide functions, and enable us to carry out statistical analyses. Cookies are small text files that are stored on your terminal device and can contain various types of information. Some cookies are technically necessary, while others help us optimize our website and services or provide you with personalized content. In addition to cookies, there are also other technologies that have similar effects, such as pixels. The various technologies are subject to the same legal requirements and are collectively referred to in this statement as “cookies”.
Transient and persistent cookies
Transient cookies are automatically deleted when you close the browser. These include, in particular, session cookies. These store a so-called session ID, with which various requests from your browser can be assigned to the shared session. This allows your computer to be recognized when you return to our website. The session cookies are deleted when you log out or close the browser.
Persistent cookies are automatically deleted after a specified period, which may vary depending on the cookie. You can delete cookies at any time in your browser’s security settings.
Technically necessary cookies
Technically necessary cookies are absolutely required in order for you to navigate the website, use basic functions, and ensure the security of the website; they do not collect information about you for marketing purposes, nor do they store which websites you have visited.
The legal basis for cookies that are absolutely necessary in order to provide you with the expressly requested service is Section 25(2) No. 2 TDDDG.
Cookies requiring consent
We currently do not use any cookies on this website that are not technically strictly necessary.
Further information
Further information about which cookies we use and how you can manage your cookie settings and disable certain types of tracking can be found at the end of this information and in the cookie banner. You can configure your browser settings according to your wishes and, for example, refuse the acceptance of third-party cookies or all cookies. Please note that you may not be able to use all functions of this website.
Information about the cookies we use
A detailed list of all cookies used as well as the corresponding data protection notices of the respective providers can be found in our Cookie Policy.
