We care about data protection

Version: March 2019

Leifheit Aktiengesellschaft (AG), Leifheitstraße 1, 56377 Nassau/Lahn (“Leifheit” or “we”) is pleased that you are interested in our company and products. As the controllers under data protection law, we want you to feel secure when visiting our websites as far as the protection of your personal data is concerned because we take this protection very seriously. We always comply with German and European data protection regulations is a matter of course.

Provided below are details of the personal data that is processed when you use our website and both the GENERAL DATA PRIVACY POLICY and the supplementary DATA PRIVACY POLICY FOR PRODUCT REVIEWS.
 

GENERAL DATA PRIVACY POLICY

I. Personal data

1.
Personal data is any data which may relate to you personally, e.g. your name, address, email addresses or user behaviour.
 

Name and Address of the controller
The controller according to Art. 4(7) of the EU General Data Protection Regulation (GDPR) is
Leifheit AG
Leifheitstraße 1
56377 Nassau
tel. +49 (0) 2604 - 977 0
fax +49 (0) 2604 - 977 402
Registry court: District Court of Montabaur
Registration number: HRB 2857
Board members: Henner Rinsche (CEO,CFO), Igor Iraeta Munduate (COO)
E-Mail: info(at)leifheit.com

You can contact our data protection controller at Datenschutz@leifheit.com or at our postal address, marking correspondence for the attention of “data protection controller”.

Name and Address of the Data Protection Officer
DataCo GmbH
Nymphenburger Str. 86
80636 Munich
Germany
datenschutz@dataguard.de

2.
The following applies if you are only using our website for information purposes (in other words if you are not registering or if you are sending us information by other means): We only collect the personal data which your browser sends to our server. If you wish to view our website, in accordance with Art. 6(1)(f) GDPR, we only collect the following data which we need for technical reasons so that we can show you our website and guarantee stability and security:

- Date and time of query
- IP address
- Browser
- Website from which the request comes
- Access status HTTP status code
- Time zone difference from Greenwich Mean Time (GMT)
- Content of the request (specific page)
- Quantity of data sent in each case
- Operating system and its interface
- Language and version of the browser software.

3.
Further processing steps:

In addition to the use of our website for information purposes only, we offer various services which you can use if you are interested. To do this, you usually have to provide further personal data which we use to provide the service in question and to which the principles of data processing set out above apply: In certain cases we need your name and your address and other details so that we can provide the desired services. For example, if you contact us by email or using a contact form, the data provided by you (email: your email address and, if applicable, your name and your telephone number; contact form: title, first name, surname, street, house number, post code, town, country, email address and, if applicable, as optional details, company name and telephone number) is stored by us so that we can answer any questions you may have. We delete the data gathered in relation hereto after we no longer need it, or we restrict the processing thereof if we need to keep it to meet statutory retention duties.

The same applies, for example, to the sending of informational material and ordered goods or to the answering of individual questions. Where necessary, we will point this out to you accordingly.

If you use services, usually only the data which we need to provide the services is collected. If we ask you for additional data, this is optional information. Personal data is only processed in order to provide the requested service and to protect our own legitimate business interests.

4.
Use of our webshop (including enquiries about spare parts):

If you wish to order anything from our webshop, so that a contract to be concluded, you need to provide the personal data which we require to process your order. Mandatory information required for the processing of contracts (title, first name, surname, street, house number, post code, town, country, email address) are indicated, and any further information is optional (telephone number). We process the data provided by you to handle your order. We may also pass your payment details on to our bank if offers are made with a payment obligation. The legal basis for this is sentence 1 of Art. 6(1), subparagraph (b) GDPR.

We may also process the data provided by you in order to inform you of other products from our portfolio which may be of interest to you or in order to send you emails containing technical information.

To meet commercial law and tax law requirements, we are obliged to store your address, payment and order details for a period of ten years. However, we restrict processing after two years, i.e. your data is only used to meet statutory obligations.

In order to prevent third parties gaining unauthorized access to your personal data, in particular your financial data, the ordering process is encrypted using TLS technology.

5.
We sometimes use external service providers to process your data. These have been carefully selected and commissioned by us, are required to follow our instructions and are regularly checked.

Your personal data may also be passed on to third parties if schemes, competitions, the conclusion of contracts or similar services are offered by us jointly with partners and you take part in them. Your personal data is also only passed on or otherwise transferred to third parties if this is necessary for the purposes of processing the contract (in particular passing on order data to suppliers) or if you have consented to this beforehand. You have the right to revoke any consent you have given at any time with effect for the future.

We will neither sell your personal data to third parties nor market it in any other way.

You will be given more information on this when you provide your personal data, at the bottom of the offer or in the description thereof.

If our service providers or partners are based in a country outside the European Economic Area (EEA), we will inform you of the consequences thereof in the description of the offer.


II. Intended use of personal data and deletion

If you wish to view our website, we collect the above data which is required by us for technical reasons so that we can show you our website and guarantee stability and security under the circumstances described: If you have provided us with personal data, we use it only to answer your questions, to process your orders (including providing the newsletter offered on our website) and for technical administration. The legal bases for this are Art. 6(1)(a), (b), (c) and (f) GDPR.

Stored personal data is deleted if you revoke your consent to storage, if your details are no longer required to achieve the objective sought by storing them or if storing them is impermissible for other legal reasons.

Personal data is only collected and disclosed to national institutions and authorities which are authorized to receive information according to the provisions of the applicable laws and to the extent that we are obliged to collect and disclose it on the basis of a judicial decision. We require our employees and the service providers commissioned by us to maintain secrecy and to comply with the provisions of data protection law.

III. Cookies

In addition to the data specified under I., cookies are stored on your computer when you use our website. Cookies are small text files which are stored on your hard drive and assigned to the browser used by you and are the means by which certain information is passed on to the party setting the cookie (in this case us). Cookies are used to make Internet services more user-friendly and effective overall.

You can of course also view our websites without cookies. If you do not want us to recognize your computer next time, you can prevent cookies from being stored on your hard drive by selecting “do not accept cookies” in your browser settings. Please consult the instructions provided by your browser manufacturer for details of how this works. If you choose not to accept cookies, however, this may result in the restricted functionality of our website offers.

The use of cookies:

a) This website uses the following types of cookies, the scope and functioning of which is explained below:
— Transient cookies (see b)
— Persistent cookies (see c).

b) Transient cookies are automatically deleted when you close the browser. These include, in particular, session cookies. These store what is referred to as a session ID with which various queries from your browser can be assigned to the joint session. Your computer can thereby be recognized if you return to our website another time. Session cookies are deleted if you log out or close the browser.

c) Persistent cookies are automatically deleted after a specified period which may differ from one cookie to another. You can delete cookies in your browser security settings at any time.

d) The flash cookies that are used are not recorded by your browser but by your Flash plugin. We also use HTML5 storage objects which are stored on your device. These objects store the necessary data independently of the browser you are using and have no automatic expiry date. If you do not want any flash cookies to be processed, you have to install a corresponding add-on, e.g. “Better Privacy” for Mozilla Firefox or the AdobeFlash Killer Cookie for Google Chrome. You can prevent HTML5 storage objects being used by setting your browser to private mode. We also recommend that you regularly delete your cookies and the browser history manually.

IV. Google Analytics

(1) This website uses Google Analytics, a web analytics service from Google, Inc. (“Google”). Google Analytics uses what are referred to as “cookies”, which are text files that are placed on your computer and that help to analyse your use of the website. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the United States and stored there. However, if the IP anonymization is activated on this website, Google will first abbreviate your IP address within member states of the European Union or other contracting states of the Treaty on the European Economic Area. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and abbreviated there. Google will, by order of the operator of this website, use this information for the purpose of evaluating your use of the website, to compile reports on website activity and to provide other services relating to website and internet usage vis-à-vis the website operator.

(2) The IP address transferred from your browser within the scope of Google Analytics will not be combined with other data held by Google.

(3) You can prevent the storing of cookies by means of a corresponding setting on your browser software; however, we should point out that, if you do so, you might not be able to make full use of all of the functions of this website. You can also prevent the collection of data generated by the cookie and relating to your use of the website (including your IP address) by Google and the processing of this data by downloading and installing the browser plugin available under the following link: tools.google.com/dlpage/gaoptout.

(4) This website uses Google Analytics with the extension “_anonymizelP()”. This enables IP addresses to be further processed in abbreviated form, thereby enabling personal identifiability to be ruled out. If the data collected on you is personal data, this is therefore immediately excluded and the personal data is therefore immediately deleted.

(5) We use Google Analytics to enable use to analyse and regularly improve the use of our website. Using the statistics obtained, we can improve the product we offer and make it more appealing to you as a user. For those exceptional cases where personal data is transferred to the United States, Google has signed up to the EU-US Privacy Shield, www.privacyshield.gov/EU-US-Framework. The legal basis for the use of Google Analytics is sentence 1 of Art. 6(1), subparagraph (f) GDPR.

(6) Information on the third-party provider: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001. User terms: www.google.com/analytics/terms/de.html, overview of data protection: www.google.com/intl/de/analytics/learn/privacy.html, and the data privacy policy: www.google.de/intl/de/policies/privacy.

V. Use of Google Adwords Conversion

(1) We use Google Adwords in order to draw attention to our attractive products we are offering through advertising on external websites (what are referred to as Google Adwords). Using advertising campaign data, we can work out how successful individual advertising activities are. We therefore try to show you advertising that is of interest to you, try to make our website more appealing to you and try to calculate advertising costs in a fair way.

(2) This advertising is supplied by Google through what is referred to as an “ad server”. We also use ad server cookies through which specific parameters for the measurement of success, such as the displaying of adverts or clicks by users, can be measured. If you reach our website via a Google advert, a cookies is stored on your computer by Google Adwords. These cookies usually expire after 30 days and are not intended to be used to identify you personally. The unique cookie ID, the number of ad impressions per placement (frequency), last impression (relevant for post-view conversions) and opt-out information (an indication that the user no longer wants to be contacted) are usually stored on this cookie as analysis values.

(3) These cookies enable Google to recognize your Internet browser next time. If a user visits certain pages of the website of an Adwords customer and the cookie stored on the latter’s computer has not yet expired, Google and the customer can see that the user clicked on the advertisement and was forwarded to this page. Each Adwords customer is assigned a different cookie. Cookies therefore cannot be tracked across the websites of Adwords customers. We do not ourselves collect or process any personal data in said advertising activities. We only receive statistical assessments made available by Google. Using these assessments, we can tell which of the advertising activities carried out are most effective. We do not obtain any further data from the use of advertising, nor, in particular, are we able to identify users from this information.

(4) Because of the marketing tools used, your browser automatically forms a direct connection to Google’s server. We have no influence over the scope or the further use of the data which has been collected through the use of this tool by Google and therefore inform you of the situation as far as we know it: By integrating AdWords Conversion, Google receives notification that you have accessed the corresponding part of our website or have clicked on one of our adverts. If you have registered for a Google service, Google can assign the visit to your account. Even if you are not registered with Google or have not logged in, it is possible for the supplier to find out and store your IP address.

(5) There are various ways of preventing this tracking procedure: a) by a corresponding setting on your browser software. In particular, suppressing third party cookies means that you will not receive adverts from third party suppliers; b) by deactivating cookies for conversion tracking, where you set your browser so that cookies are blocked by the domain “www.googleadservices.com”, www.google.com/settings/ads, this setting being cancelled if you delete your cookies; c) by deactivating adverts based on your interests from suppliers who have joined the self-regulation campaign “About Ads”, using the link www.aboutads.info/choices, this setting being cancelled if you delete your cookies; d) by permanently deactivating Firefox, Internet Explorer or Google Chrome in your browser by following the link www.google.com/settings/ads/plugin . We should point out that, if you do this, you may not be able to make full use all of the functions offered. (6) The legal basis for the processing of your data is sentence 1 of Art. (6)(1), subparagraph (f) GDPR. Further information on data protection at Google is provided here: www.google.com/intl/de/policies/privacy and services.google.com/sitestats/de.html. Alternatively, you can visit the website of the Network Advertising Initiative (NAI) at www.networkadvertising.org. Google has signed up to the EU-US Privacy Shield, www.privacyshield.gov/EU-US-Framework.

VI. DoubleClick by Google

(1) This website also uses the online marketing tool DoubleClick by Google. DoubleClick uses cookies to place adverts that are relevant to users, to improve reports on campaign performance or to prevent a user seeing the same advertisements over and over again. Using a cookie ID, Google records which adverts are placed in which browser and is therefore able to prevent them being shown multiple times. Using cookie IDs, DoubleClick can also record what are referred to as conversions which relate to advert queries. This is the case, for example, if a user sees a DoubleClick advert and then later visits the advertiser’s website using the same browser and buys something there. According to Google, DoubleClick cookies contain no personal information.

(2) Because of the marketing tools used, your browser automatically forms a direct connection to Google’s server. We have no influence over the scope or the further use of the data which has been collected through the use of this tool by Google and therefore inform you of the situation as far as we know it: By integrating DoubleClick, Google receives notification that you have accessed the corresponding part of our website or have clicked on one of our adverts. If you have registered for a Google service, Google can assign the visit to your account. Even if you are not registered with Google or have not logged in, it is possible for the supplier to find out and store your IP address.

(3) There are various ways of preventing this tracking procedure: a) by a corresponding setting on your browser software. In particular, suppressing third party cookies means that you will not receive adverts from third party suppliers; b) by deactivating cookies for conversion tracking, where you set your browser so that cookies are blocked by the domain “www.googleadservices.com”, www.google.com/settings/ads, this setting being cancelled if you delete your cookies; c) by deactivating adverts based on your interests from suppliers who have joined the self-regulation campaign “About Ads”, using the link www.aboutads.info/choices, this setting being cancelled if you delete your cookies; d) by permanently deactivating Firefox, Internet Explorer or Google Chrome in your browser by following the link www.google.com/settings/ads/plugin . We should point out that, if you do this, you may not be able to make full use all of the functions offered.

(4) The legal basis for the processing of your data is sentence 1 of Art. (6)(1), subparagraph (f) GDPR. Further information on DoubleClick by Google is provided at www.google.com/doubleclick and support.google.com/adsense/answer2839090, and on data protection at Google generally: www.google.com/intl/de/policies/privacy. Alternatively, you can visit the website of the Network Advertising Initiative (NAI) at www.networkadvertising.org. Google has signed up to the EU-US Privacy Shield, www.privacyshield.gov/EU-US-Framework.

VII. Social plugins

(1) We currently use the following social media plugins: [Facebook, Google+, Twitter]. We use what is referred to as the two-click solution here. This means, first of all, that, if you visit our website, no personal data is ever passed on to the suppliers of plugins. You will recognize the supplier of the plugin by the indication in the box above its first letters or the logo. We give you the option of communicating with the supplier of the plugin directly by pressing a button. Only if you click on the field indicated and thereby activate it does the plugin supplier receive notification that you have visited the corresponding website of our online offer. The data specified under I.2. of this policy is also transmitted. In the case of Facebook, according to the respective suppliers in Germany, the IP address is anonymized as soon as it has been collected. By activating the plugin, personal data is therefore sent by you to the respective plugin supplier and stored there (in the United States in the case of US suppliers). Since the plugin supplier mainly collects the data using cookies, we recommend that, before clicking on the greyed-out box, you delete all cookies using the security settings on your browser.

(2) We have no influence over the data collected or data processing procedures, nor do we know the full extent of the data collection, the purposes of the processing or the storage periods. Nor do we have any information on the deletion of collected data by the plugin supplier.

(3) The plugin supplier stores the data collected on you as usage profiles and uses these for advertising, for market research and/or to structure its website according to requirements. Such an assessment is carried out, in particular (including for users who have not logged in), to display appropriate advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles. To exercise this right, you have to contact the respective plugin supplier. By means of the plugins, we offer you the chance to interact with social networks and other users so that we can improve the product we offer and design it to be more appealing to you as a user. The legal basis for using plugins is sentence 1 of Art. 6(1), subparagraph (f).

(4) Data is passed on irrespective of whether you have an account with the plugin supplier and are logged in there. If you are logged in with the plugin supplier, your data that has been collected by us is assigned directly to the account you hold with the plugin supplier. If you click on the activated button and, for example, link the page, the plugin supplier also stores this information in your user account and informs your contacts publicly. We recommend that you usually log out after using a social network, but particularly before pressing the button because this enables you to avoid any assignment to your profile with the plugin supplier.

(5) Further information on the purpose and scope of data collection and the processing thereof by the plugin supplier is provided in the data privacy policies of these suppliers listed below. These also contain further information on your rights relating hereto and the settings you can use to protect your privacy.

(6) Addresses of the respective plugin suppliers and URLs with their data protection notices:

a) [Facebook Inc., 1601 5 California Ave, Palo Alto, California 94304, USA; www.facebook.com/policy.php; further information on data collection: www.facebook.com/help/186325668085084, www.facebook.com/about/privacy/your-info-on-other and www.facebook.com/about/privacy/your-info. Facebook has signed up to the EU-US Privacy Shield, www.privacyshield.gov/EU-US-Framework.

b) Google Inc., 1600 Amphitheater Parkway, Mountainview, California 94043, USA; www.google.com/policies/privacy/partners/. Google has signed up to the EU-US Privacy Shield, www.privacyshield.gov/EU-US-Framework.

c) Twitter, Inc., 1355 Market St, Suite 900, San Francisco, California 94103, USA; twitter.com/privacy. Twitter has signed up to the EU-US Privacy Shield, www.privacyshield.gov/EU-US-Framework.

VIII. Google Maps

(1) We use Google Maps on this website. This means that we can show you interactive maps directly on the website and enables you to make easy use of the map function.

(2) When you visit the website, Google receives notification that you have accessed the corresponding sub-page of our website. The data specified under I.2. of this policy is also transmitted. This takes place irrespective of whether Google provides a user account via which you are logged in or whether there is no user account. When you are logged in to Google, your data is assigned directly to your account. If you do not want any assignment to your Google profile, you have to log out before pressing the button. Google stores your data as usage profiles and uses it for advertising, for market research and/or and to structure its website according to requirements. Such an assessment is carried out, in particular (even for users who have not logged in), to display appropriate advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles. To exercise this right, you have to contact Google.

(3) Further information on the purpose and scope of data collection and the processing thereof by the plugin supplier is provided in the supplier’s data privacy policies. These also contain further information on your rights relating hereto and the settings you can use to protect your privacy: www.google.de/intl/de/policies/privacy. Google also processes your personal data in the United States and has signed up to the EU-US Privacy Shield, www.privacyshield.gov/EU-US-Framework.

IX. Newsletter

(1) With your consent, you can subscribe to our newsletter in which we inform you about any products we are currently offering which may be of interest to you.

(2) For applications to our newsletter we use what is referred to as the double-opt-in method. This means that, after you have applied, we send an email to the email address you have given in which we ask you to confirm that you want us to send you the newsletter. If you have not confirmed your application within 24 hours, your information is blocked and then deleted after a month. We also store the times of your application and confirmation respectively. The reason why we use this method is to enable us to verify your application and, if applicable, to resolve any possible misuse of your personal data.

(3) The only mandatory information required to enable us to send you the newsletter is your email address. [The provision of additional, indicated data is optional and will be used to enable us to contact you personally.] After you have confirmed, we store your email address so that we can send you the newsletter. The legal basis for this is sentence 1 of Art. 6(1), subparagraph (a) GDPR.

(4) You are free to revoke your consent to the sending of the newsletter at any time by sending an email to the contact specified in the legal notice, or by using the unsubscribe button on our website. At the end of each email there is also a hyperlink which you can easily use to unsubscribe from the newsletter.

(5) We should point out that we assess your user behaviour when we send you the newsletter. For the purposes of this assessment, emails that are sent contain what are referred to as web beacons or tracking pixels which constitute single-pixel image files that are stored on our website. To carry out the assessments, we link the data specified under I.2. and the web beacons to your email address and an individual ID. Links contained in the newsletter also contain this lD. The data is only collected in pseudonymized form, so the IDs are not linked to your further personal data and any direct personal identifiability is ruled out.

You can object to this tracking at any time by clicking on the separate link that is provided in each email or by informing us via another contact method. The information is stored for as long as you have subscribed to the newsletter. After unsubscribing, we only store the data anonymously for statistical reasons: Such tracking is also impossible if you have deactivated the displaying of images as standard in your email program. In this case, the newsletter will not be shown to you in full and you might not be able to use all of the functions. If you manually allow images to be displayed, the abovementioned tracking is carried out.

X. Investor Relations Mailing list

(1) With your consent, you subscribe to our IR newsletter in which we inform you about our business development and capital market-related publications of our company.

(2) For applications to our newsletter we use what is referred to as the double-opt-in method. This means that, after you have applied, we send an email to the email address you have given in which we ask you to confirm that you want us to send you the newsletter. If you have not confirmed your application within 24 hours, your information is blocked and deleted. We also store the times of your application and confirmation respectively. The reason why we use this method is to enable us to verify your application and, if applicable, to resolve any possible misuse of your personal data.

(3) The only mandatory information required to enable us to send you the newsletter is your email address. The provision of title, name, surname and additional, separately marked data is optional. It will be used to enable us for example, to contact you personally. After you have confirmed the application, we store your data so that we can send you the relevant information. The legal basis for this is sentence 1 of Art. 6(1), subparagraph (a) GDPR.

(4) You are free to revoke your consent to the sending of the newsletter at any time by sending an email to ir@leifheit.com or to the contact specified in the Disclaimer or by using the contact form on our website www.leifheit-group.com. At the end of each email there is also a hyperlink which you can easily use to unsubscribe from the newsletter.

XI. Security

Leifheit implements technical and organizational security measures to protect any data on you that is stored by us against being manipulated, lost, destroyed or accessed by unauthorized persons. Our security measures are enhanced on an ongoing basis in line with relevant technological developments.

XII. Amendments to our data protection provisions

We reserve the right to amend our security and data protection measures insofar as this is required due to technical developments or changes in the products we offer. In such cases, if necessary, we will also adjust our data privacy policy and inform you thereof within this data privacy policy.

Amendments come into force upon publication of the revised data privacy policy. Therefore, please ensure that you always comply with the current version of our data privacy policy. The date of the last revision of this data privacy policy can be found on the first page.

XIII. Links

If we use external links which are offered on our website, our data privacy policy does not extend to the offers that can be accessed via these links. If we offer links, we endeavour to ensure that they also meet our data protection and security standards. However, we have no influence over whether other suppliers comply with data protection and security provisions so please find out from these other suppliers about the data protection provisions they have put in place.

XIV. Your rights

You have the following rights against us in relation to your personal data:

— Right of access to information
— Right of correction or deletion,
— Right of restriction of processing,
— Right of objection to processing,
— Right of data portability.


Specifically:

You can, at any time, ask us for confirmation of whether your personal data is being processed; if it is, you have a right of access to information about this stored personal data on you. To do this, you can, in particular, email the data protection officer at Datenschutz@leifheit.com. Under certain legal conditions, you are also able to object to data processing: If we are basing the processing of your personal data on the balancing of interests, you can lodge an objection to the processing. This may be the case, in particular, if the processing is not necessary for the performance of a contract with you, the latter being set out by us in the description of the functions in each case. When making such an objection, please give the reasons why we should not process your personal data as we normally would. If you lodge a reasoned objection, we examine the circumstances and will either adjust or adapt the data processing or give you justifiable reasons why we are continuing the processing.

You can of course object to the processing of your personal data for the purposes of advertising and data analysis at any time. You can notify us of your objection to advertising using the following contact details: Datenschutz@leifheit.com.

If you have consented to the processing of your data, you can revoke it at any time. This revocation influences the permissibility of the processing of your personal data after you have notified us of such a revocation.

You also have the right of correction, restriction of processing or deletion of data collected from you and processed. Under the conditions set out in Art. 20 GDPR, you also have a right of data portability, that is to say to obtain the personal data relating to you which you have provided to us in a structured, commonly used and machine-readable format, and to transmit this data to another controller without any hindrance from us.

If you wish to exercise your rights under data protection law, please use our contact information in the legal notice or send an email to the data protection officer at Datenschutz@leifheit.com.

XV. Questions, suggestions and complaints

If you have any further questions, suggestions or complaints concerning our data protection information and our processing of your personal data, kindly contact the data protection officer directly at Datenschutz@leifheit.com.

Notwithstanding any other administrative or judicial right of appeal, you also have the right of appeal to a (data protection) supervisory authority, in particular in the member state where you are domiciled, your place of work or the location of the alleged offence, if you believe that the processing of personal data relating to you breaches German or European data protection law.

 

Supplementary DATA PRIVACY POLICY FOR PRODUCT REVIEWS

By way of a supplement to our GENERAL DATA PRIVACY POLICY, the following provisions of the DATA PRIVACY POLICY FOR PRODUCT REVIEWS also apply: 

I.
This data privacy policy does not cover the websites linked to our site.

II.
If you provide us with a product review, we record your personal data. This personal data includes, in particular, your “nickname”, your IP address, your email address and any additional information optionally provided by you (age group, sex, approximate living space and approximate household size). The data provided by you is processed so that your product review can be used.

If you have any questions or concerns regarding data protection, kindly contact our data protection officer (Datenschutz@leifheit.com).

Data is passed on to third parties without your consent only if we are legally obliged to do so. In particular, this personal data is used for the purposes of advertising/market research or to structure our services only if you have expressly given us your specific consent to do so.

You have the right to revoke your consent to data processing by us at any time, for example by sending a corresponding email to Datenschutz@leifheit.com. Revoking consent does not affect the legitimacy of the processing carried out on the basis of consent up until revocation. We will then delete your data and your product review(s) in accordance with legal provisions.

Under certain legal conditions, you are also able to object to data processing: If we are basing the processing of your personal data on the balancing of interests, you can lodge an objection to the processing. This may be the case, in particular, if the processing is not necessary for the performance of a contract with you, the latter being set out by us in the description of the functions in each case. When making such an objection, please give the reasons why we should not process your personal data as we normally would. If you lodge a reasoned objection, we examine the circumstances and will either adjust or adapt the data processing or give you justifiable reasons why we are continuing the processing.

You can of course object to the processing of your personal data for the purposes of advertising and data analysis at any time. You can notify us of your objection to advertising using the following contact details: Datenschutz@leifheit.com.

III. Transferring data abroad and processing orders
Your product review is processed by the company Bazaarvoice Inc, 3900 N. Capital of Texas Highway, Suite 300, Austin, Texas 78746, USA. Data may be transferred to the United States according to Art. 45 GDPR if the EU Commission decides, in an implementing act, that the USA has an adequate level of data protection. On 12.07.2016, the EU Commission decided that the United States could ensure an adequate level of data protection as it had signed up to what is referred to as the “EU-US Privacy Shield”. Bazaarvoice Inc has signed up to the EU-US Privacy Shield. Bazaarvoice Inc’s data protection policy can be found at www.bazaarvoice.com/de/legal/privacy-policy/. No standard data protection clauses are currently used. By submitting your product review, you declare that you agree to your data being forwarded to Bazaarvoice. Bazaarvoice only uses this data to process your product review.

IV. Cookies
You alone decide whether cookies can be collected by setting your browser to inform you before storing a cookie and only storing it if you expressly agree. Some browsers can also be set to refuse all cookies. If you restrict or refuse cookies, you might not be able to use all of the functions we offer. Further information is provided in Section III of our GENERAL DATA PRIVACY POLICY.