CTC

General Terms and Conditions of Business

of the company teknihall Elektronik GmbH for supplies of goods, the carrying-out of repair work and forcost estimates

 

Privacy Policy

Thank you for visiting our website and for your interest in our company. Please find below details of how we handle your personal data when you use our website. Personal data are all data that allow you to be personally identified. Your data are protected in accordance with statutory regulations, including but not limited to the General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (Bundesdatenschutzgesetz, BDSG). We detail below how data is collected during your visit to our website and how those data are used.

 

  1. Information on the collection of personal data and contact details of the controller

1.1 The data controller for this website within the meaning of the General Data Protection Regulation (GDPR) is

teknihall Elektronik GmbH, Breitefeld 15, 64839 Münster,

Telephone: 06071 3902-17, Fax: 06071 37048, E-mail: info@teknihall.de

The full legal notice can be viewed at: https://shop.teknihall.de/impressum

The data controller is the natural or legal person which, alone or jointly with others, determines the purposes and means of the processing of personal data.

1.2 The controller has appointed the following data protection officer for its company:

Thomas Volkert
Breitefeld 15
64839 Münster
Datenschutz@teknihall.de

1.3 On our website, we use SSL or TLS encryption for security reasons and to protect the transfer of personal data and other confidential content (for example orders or enquiries sent to the controller). An encrypted connection is indicated by „https://“ and the padlock symbol in your browser address line.

1.4 Subcontracting

We subcontract, for example to logistics and other service companies, to process transactions.

 

  1. Data collection when you visit our website

If you visit our website without registering or otherwise transferring information to us, we only collect data that your browser transfers to our server ( „server log files“). When you access our website, we collect the following data, which are necessary for technical purposes to allow the individual web pages to be displayed:

  • The individual pages of our website (URL)
  • The date and time of access
  • The quantity of data sent in bytes
  • Source/link from which you accessed the page
  • Browser used
  • Operating system used
  • IP address used (if applicable anonymised)

The basis for processing is our legitimate interest pursuant to Art.(6)(1)(f) GDPR in improving the stability and functionality of our website. However, we reserve the right to check server log files at a later point if there are concrete indications of unlawful use. Non-anonymised server log files are deleted automatically after seven days at the latest.

Our website is hosted by a hosting provider that provides us with infrastructure and platform services, computing capacity, memory capacity and database services, security services and technical maintenance services. We have a processor contract with that hosting provider. The purpose of data processing is ensuring the availability of our website, in which we have a legitimate interest, Art. 6(1)(f) GDPR.

The server log file data are also collected by third-party providers (see below).

 

  1. Cookies

Our website uses cookies. Cookies are small text files that are stored on your terminal device. If cookies are set, they collect and process certain user information such as browser and location data and IP address values; the scope of data collection and processing depends on the individual cookie. In some cases, cookies are used to simplify the ordering process by saving settings (for example remembering the contents of a virtual shopping basket for a later visit to the website).
The session cookies we set are deleted at the end of the browser session, in other words when you close your browser. Persistent cookies remain on your terminal device and allow us or our partners (third-party cookies) to recognise your browser the next time you visit our site. These cookies are automatically deleted after a set time, which can vary from cookie to cookie.
Where personal data are also processed by individual cookies implemented by us, said data are processed in accordance with Art. 6(1)(b) GDPR either for the performance of a contract or in accordance with Art. 6(1)(f) GDPR for the purposes of pursuing our legitimate interests in the best possible functionality for our website and effective and customer-friendly pages.
Please note that you can set your browser to notify you if cookies are to be set and allow you to decide on an individual basis whether to allow cookies, or disable cookies for certain cases or in general. Each browser manages cookie settings differently. The procedure is described in the help menu of each browser, which explains how you can change your cookie settings. The relevant information is available for the browsers below as follows:

You can reject the use of all cookies for online marketing purposes for many services, in particular in the case of tracking, on the US page https://www.aboutads.info/choices/or the EU page https://www.youronlinechoices.com/.

 

  1. Electronic contact

If you contact us using electronic communication (for example a contact form or e-mail), personal data are collected. The specific data collected in a contact form are clear from the form in question. These data are only saved and used for the purposes of responding to your enquiry or contacting you and for related technical administration. We are unable to process enquiries without this mandatory information. The provision of all other information is voluntary.
The legal basis for processing the data is our legitimate interest pursuant to Art.(6)(1)(f) GDPR in responding to your enquiry. If you are contacting us with a view to concluding a contract, an additional legal basis for processing is Art. 6(1)(b) GDPR. The legal basis for the information you provide voluntarily is Art. 6(1)(a) GDPR.

Your data are deleted when we finish processing your request. This is the case when it can be assumed from the circumstances that the matter in question has been dealt with in full and provided we have no statutory retention obligations.

For our e-mail communication, we have contracted a service provider that provides us with infrastructure and platform services, computing capacity, memory capacity and database services, security services and technical maintenance services. We have a processor contract with that provider. The purpose of data processing is ensuring the availability of our e-mail communication, in which we have a legitimate interest, Art. 6(1)(f) GDPR.

 

  1. Data collection with customer accounts and orders

If you open a personal customer account with us, we collect and process your personal data for the performance of the contract with you pursuant to Art. 6(1)(b) GDPR. It is clear from the registration form which details are mandatory. We cannot open a customer account for you without your details. Your data are stored for as long as the contract for the customer account with us is effective. A customer account can be deleted at any time. The legal basis for the information you provide voluntarily is Art. 6(1)(a) GDPR.

If you order goods and/or services from us, we collect and process your personal data for the performance of the contract with you pursuant to Art. 6(1)(b) GDPR. It is clear from the order form which details are mandatory. We cannot process the order without your details. The legal basis for the information you provide voluntarily is Art. 6(1)(a) GDPR.

We work together with external service providers who provide certain or all services for performance of the contracts entered into with you.

The personal data required for delivery are provided to the carriers commissioned with delivery as part of contract processing. We disclose the payment data required for payment processing to the contracted payment service provider or the banks. Disclosure is solely for the purpose of processing the contract with you. The legal basis for the disclosure of the data is Art.(6)(1)(b) GDPR.

If you opt for credit card payment with the payment service provider ConCardis, payments are processed through the payment service provider ConCardis GmbH, Helfmann-Park 7, 65760 Eschborn, to which we provide the information you provided as part of the order process and the information about your order in accordance with Art. 6(1)(b) GDPR. Your data are disclosed solely for the purposes of payment processing with the payment service provider ConCardis and only to the extent necessary for that purpose.

If you pay via PayPal, we disclose your payment data as part of payment processing to PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter „PayPal“). Data are disclosed in accordance with Art.(6)(1)(b) GDPR and only to the extent necessary for payment processing.

PayPal reserves the right to conduct a credit check for the payment methods credit card via PayPal, debit via PayPal and – if available – purchase on account and payment in instalments via PayPal. For this purpose, your payment data may be disclosed to credit reference agencies in accordance with Art. 6(1)(f) GDPR on the basis of the legitimate interest of PayPal in establishing your solvency. The findings of the credit check relating to the statistical probability of default are used by PayPal to decide on the provision of the chosen payment method. The credit check can contain probability values („scores“). Where scores are part of the credit check findings, they are based on recognised mathematical and statistical procedures. Data used in calculating scores include but are not limited to address data. For more privacy information, including on the credit reference agencies used, please see the PayPal privacy policy: https://www.paypal.com/de/webapps/mpp/ua/privacy-full

You can object to this processing of your data at any time by sending a message to PayPal. However, PayPal may still be entitled to process your personal data if this is required for contractual payment processing.

When the contract has been processed in full and payment of all outstanding receivables has been made in full, your data shall be blocked for further use and, upon expiry of the retention periods under tax and commercial law, deleted, provided you have not expressly consented to the continued use of your data.


  1. Web analytics services

Google Analytics

Our website uses Google Analytics, a web analysis service provided by Google LLC. (Google). Google Analytics uses cookies, text files that are stored on the computers of users and allow an analysis of those users‘ use of the website. The information generated by cookies relating to use of this website by users is generally transmitted to a Google server in the USA and stored there.

Our website only uses Google Analytics with the extension „_anonymizeIp()“, which ensures that IP addresses are anonymised (shortened) and cannot be directly associated with a specific person. When this extension is used, your IP address is shortened by Google within Member States of the European Union or in other signatories to the Agreement on the European Economic Area prior to transfer. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. In these exceptional cases, the basis for this processing is our legitimate interest pursuant to Art.(6)(1)(f) GDPR in the statistical analysis of user behaviour for optimisation and marketing purposes. Google will use this information on our behalf to evaluate your use of the website, to compile reports on website activity, and to provide us with further services relating to website and Internet use. The IP address transmitted by your browser through Google Analytics shall not be associated with other data held by Google.

You can adjust your browser software settings to prevent cookies from being stored on your device. However, if you do so, you may not have full access to all functions on this website. You can also prevent the data generated by the cookie and related to your use of the website (including your IP address) from being transferred to and processed by Google by downloading and installing the browser plug-in available at:

https://tools.google.com/dlpage/gaoptout?hl=en-GB

As an alternative to the browser plug-in or in browsers on mobile devices, please click on the following link to set an opt-out cookie that will prevent data collection by Google Analytics on this website in future (this opt-out cookie only works in this browser and for this domain; if you clear your cookies in this browser, you will have to click on the link again):

Disable Google Analytics

As an alternative to the browser plug-in or in browsers on mobile devices,

please follow this link,

to prevent data collection by Google Analytics on this website in future. An opt-out cookie is then saved on your device. If you clear your cookies, you will have to click on the link again.

The anonymised data collected are saved for a period of no more than 14 months. The data are then automatically deleted.

Google, based in the USA, is certified under the US-EU Privacy Shield framework, which guarantees compliance with the privacy standards applicable in the EU.

You can find more information on how Google Analytics handles user data in the terms of service for Google Analytics https://www.google.com/analytics/terms/gb.html, the Google privacy policy https://www.google.com/policies/privacy/ and here https://support.google.com/analytics/answer/6004245?hl=en

 

  1. Rights of the data subject

7.1 As a data subject, you have the following rights:

  • Confirmation of data processing: You have the right to obtain from us confirmation as to whether or not your personal data are being processed. You will find the applicable conditions in Art. 15 GDPR;
  • Access: You have the right to access the personal data relating to you that is processed by us. You will find the applicable conditions in Art. 15 GDPR;
  • Rectification: You have the right to obtain from us without undue delay the rectification of inaccurate personal data concerning you. You will find the applicable conditions in Art. 16 GDPR;
  • Erasure: You have the right to obtain the erasure of personal data concerning you without undue delay. You will find the applicable conditions in Art. 17 GDPR;
  • Restriction of processing: You have the right to obtain the restriction of processing of your personal data. You will find the applicable conditions in Art. 18 GDPR;
  • Data portability: You have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format. You also have the right to have those data transmitted by us to another controller. You will find the applicable conditions in Art. 20 GDPR;
  • Withdrawal of consent: You have the right to withdraw the consent that you previously gave at any time if the basis for processing is Art. 6(1)(a) or Art. 9(2)(a) GDPR. This shall not affect the lawfulness of processing until such time as consent is withdrawn. The withdrawal of consent only has effect for the future. You will find the applicable conditions in Art. 7(3) GDPR;
  • Complaints: Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority if you consider that the processing of personal data relating to you infringes the GDPR. You will find the applicable conditions in Art. 77 GDPR;

You can, for example, lodge a complaint with:

Der Hessische Datenschutzbeauftragte (Hesse Data Protection Officer)

   Prof. Dr. Michael Ronellenfitsch

Gustav-Stresemann-Ring 1    65189 Wiesbaden
Telephone: 06 11/140 80  Fax: 06 11/14 08-900

https://www.datenschutz.hessen.de

 

7.2 RIGHT TO OBJECT

YOU HAVE THE RIGHT TO OBJECT, ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION, AT ANY TIME TO PROCESSING OF PERSONAL DATA CONCERNING YOU WHICH IS BASED ON OUR OVERRIDING LEGITIMATE INTEREST (ART. 6(1) (E) OR (F) GDPR), WITH EFFECT FOR THE FUTURE. YOU WILL FIND THE APPLICABLE CONDITIONS IN ART. 21 GDPR.

 

  1. Retention and deletion of personal data

Unless a different retention period is specific above, we store the data for as long as is necessary for their designated purpose and for as long as statutory retention obligations apply. In accordance with statutory requirements, data are retained for six years pursuant to section 257 par. 1 HGB [German Commercial Code] (account books, inventories, opening balance sheets, financial statements, business letters, accounting records, etc.) and for ten years pursuant to section 147 par. 1 AO [German Fiscal Code] (accounts, records, management reports, accounting records, trade or business letters, documents relevant for taxation, etc.).

Upon expiry of the retention period, the data in question are routinely deleted, provided they are no longer required for the performance or initiation of a contract and we have no legitimate interest in continued retention.

 

  1. Changes to this Privacy Policy

This Privacy Policy is currently in force and is the version of May 2018.
It may become necessary to change this Privacy Policy as a result of the further development of our website and services offered through it or due to changes in legal or official requirements. You can access and print off the latest Privacy Policy at https://shop.teknihall.de/datenschutz at any time.