Privacy Policy

1. Information on the collection of personal data and contact details of the data controller 

1.1. We are pleased that you are visiting our website and thank you for your interest. Below, we inform you about how we handle your personal data when you use our website. Personal data is any data that can be used to personally identify you.

1.2. The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Adam Krumbach, Berggartenstr.19b, 01277 Dresden, Germany, Telephone: +49 (0) 351 – 27299903, E-Mail: email@verkaufsagentur.de.

2. Data collection when visiting our website

2.1. When you simply use our website for informational purposes, i.e., if you do not register or otherwise provide us with information, we only collect data that your browser transmits to our server (so-called "server log files"). When you access our website, we collect the following data, which is technically necessary for us to display the website to you:

• Our visited website
• Date and time of access
• Amount of data sent in bytes
• Source/reference from which you came to the page
• Browser used
• Operating system used
• IP address used (if applicable: in anonymized form)

The processing is carried out in accordance with Article 6(1)(f) GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data will not be disclosed or used for any other purpose. However, we reserve the right to subsequently review the server log files should there be concrete indications of unlawful use.

2.2. This website uses SSL/TLS encryption for security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries to the data controller). You can recognize an encrypted connection by the "https://" prefix and the padlock symbol in your browser's address bar.

3. Cookies

To make your visit to our website more enjoyable and to enable the use of certain features, we use cookies, which are small text files that are stored on your device. Some of these cookies are automatically deleted after you close your browser (so-called "session cookies"), while others remain on your device for a longer period and allow us to save your website settings (so-called "persistent cookies"). In the latter case, you can find information about the storage duration in your web browser's cookie settings.
If any of the cookies we use process personal data, this processing is carried out in accordance with Art. 6 para. 1 lit. b GDPR either for the performance of the contract, in accordance with Art. 6 para. 1 lit. a GDPR in the case of consent given, or in accordance with Art. 6 para. 1 lit. f GDPR to safeguard our legitimate interests in the best possible functionality of the website and a customer-friendly and effective design of the website visit.
You can configure your browser to notify you when cookies are set and allow you to decide whether to accept them individually, or to block cookies in certain cases or entirely.
Please note that if you do not accept cookies, the functionality of our website may be limited.

4. Contact

4.1. Own review reminder (not sent by a customer review system)

We use your email address to send you a one-time reminder to submit a rating of your request for our rating system, provided that you have given us your explicit consent to do so during or after your request in accordance with Art. 6 para. 1 lit. a GDPR.
You can withdraw your consent at any time by sending a message to the data controller.

4.2. Dedicated function for online appointment scheduling

We process your personal data in connection with the online appointment booking service. You can see which data we collect for online appointment booking in the respective input form or appointment request. If certain data is required to complete an online appointment booking, we will indicate this accordingly in the input form or appointment request. If we provide you with a free text field in the input form, you can describe your request in more detail there. You can then also control which additional data you wish to enter. Your data will be stored and used exclusively for the purpose of scheduling the appointment. The legal basis for processing personal data that is necessary for the performance of a contract with you (this also applies to processing operations that are necessary for carrying out pre-contractual measures) is Article 6(1)(b) GDPR. If you have given us your consent to process your data, the processing is based on Article 6(1)(a) GDPR. You can withdraw your consent at any time by sending a message to the data controller named at the beginning of this statement.

4.3. WhatsApp Business

We offer visitors to our website the opportunity to contact us via the WhatsApp messaging service provided by WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. For this purpose, we use the so-called "Business version" of WhatsApp.
If you contact us via WhatsApp regarding a specific transaction (for example, an order you have placed), we will store and use the mobile phone number you use with WhatsApp, as well as your first and last name (if provided), in accordance with Article 6(1)(b) of the GDPR, to process and respond to your inquiry. Based on the same legal basis, we may ask you via WhatsApp to provide further data (order number, customer number, address, or email address) in order to assign your inquiry to a specific transaction.
If you use our WhatsApp contact for general inquiries (e.g., regarding our range of services, availability, or our website), we store and use the mobile phone number you use on WhatsApp and – if provided – your first and last name in accordance with Art. 6 Para. 1 lit. f GDPR on the basis of our legitimate interest in the efficient and timely provision of the requested information.
Your data will only be used to respond to your request via WhatsApp. It will not be shared with third parties.
Please note that WhatsApp Business accesses the address book of the mobile device we use for this purpose and automatically transfers phone numbers stored in the address book to a server of its parent company, Meta Platforms Inc., in the USA. For the operation of our WhatsApp Business account, we use a mobile device whose address book contains only the WhatsApp contact data of users who have actually contacted us via WhatsApp.
This ensures that every person whose WhatsApp contact details are stored in our address book has already consented to the transfer of their WhatsApp phone number from the address books of their chat contacts, in accordance with Article 6(1)(a) GDPR, by accepting the WhatsApp Terms of Service upon first using the app on their device. The transfer of data from users who do not use WhatsApp and/or have not contacted us via WhatsApp is therefore excluded.
For information on the purpose and scope of data collection and the further processing and use of data by WhatsApp, as well as your related rights and settings options to protect your privacy, please refer to WhatsApp's privacy policy:  https://www.whatsapp.com/legal/privacy-policy-eea

4.4. The processing described above may involve data transfers to servers of Meta Platforms Inc. in the USA.
For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which, based on an adequacy decision by the European Commission, ensures compliance with the European level of data protection.

4.5. When you contact us (e.g., via contact form or email), we process your personal data solely for the purpose of handling and responding to your inquiry and only to the extent necessary. The legal basis for processing this data is our legitimate interest in responding to your inquiry, pursuant to Article 6(1)(f) GDPR. If your contact relates to a contract, the additional legal basis for processing is Article 6(1)(b) GDPR. Your data will be deleted when it is clear from the circumstances that the matter has been resolved and provided that no statutory retention obligations apply.

5. Google Customer Reviews

We work with Google as part of the “Google Customer Reviews” program. The provider is Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”).
This program allows us to collect customer reviews from users of our website. If you give your consent in accordance with Art. 6 para. 1 lit. a GDPR, we will transmit your email address to Google. You will receive an email from Google Customer Reviews asking you to rate your shopping experience on our website. Your rating will then be aggregated with our other ratings and displayed in our Google Customer Reviews logo and in our Merchant Center dashboard. Your rating will also be used for Google Seller Ratings. The use of Google Customer Reviews may also involve the transfer of personal data to the servers of Google LLC in the USA.
You can withdraw your consent at any time by sending a message to the data controller or to Google. For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which, based on an adequacy decision by the European Commission, ensures compliance with the European level of data protection.

6. Adobe Acrobat Sign

For the digital signing of documents, we use the services of the following provider: Adobe Systems Software Ireland Limited, 4-6 Riverwalk, City West Business Campus, Dublin 24, Ireland
The service enables the legally valid signing of documents via electronic signature from any end device.
For this purpose, in addition to the electronic signature for verification and proof of signing, the service also collects, stores and transmits usage data of the end device used (in particular the IP address) as well as certain transaction data.
The processing is based on our legitimate interest in efficient and time-saving business management and customer-friendly and effective document management in accordance with Art. 6 para. 1 lit. f GDPR.
We have concluded a data processing agreement with the provider, which protects the data of our website visitors and prohibits its transfer to third parties.

7. Rights of the data subject

7.1. The applicable data protection law grants you the following rights as a data subject (rights of access and intervention) vis-à-vis the controller with regard to the processing of your personal data, whereby reference is made to the legal basis cited for the respective conditions of exercising these rights:

• Right of access pursuant to Art. 15 GDPR;
• Right to rectification pursuant to Article 16 GDPR;
• Right to erasure pursuant to Article 17 GDPR;
• Right to restriction of processing pursuant to Article 18 GDPR;
• Right to information pursuant to Article 19 GDPR;
• Right to data portability pursuant to Art. 20 GDPR;
• Right to withdraw consent pursuant to Art. 7 para. 3 GDPR;
• Right to lodge a complaint pursuant to Article 77 GDPR.

7.2. RIGHT OF OBJECTION

If we process your personal data based on our overriding legitimate interest as part of a balancing of interests, you have the right to object to this processing at any time, on grounds relating to your particular situation, with effect for the future.
If you exercise your right to object, we will cease processing the data in question. However, further processing remains possible if we can demonstrate compelling legitimate grounds for the processing which override your interests, fundamental rights and freedoms, or if the processing serves the purpose of establishing, exercising or defending legal claims.
If we process your personal data for direct marketing purposes, you have the right to object at any time to the processing of your personal data for such marketing. You can exercise your right to object as described above. If you exercise your right to object, we will cease processing the data in question for direct marketing purposes.

8. Duration of storage of personal data

The duration of the storage of personal data is determined by the respective legal basis, the purpose of processing and – if applicable – additionally by the respective statutory retention period (e.g. commercial and tax law retention periods).

When processing personal data based on explicit consent pursuant to Art. 6 para. 1 lit. a GDPR, this data will be stored until the data subject withdraws their consent. If statutory retention periods exist for data processed in connection with contractual or quasi-contractual obligations based on Art. 6 para. 1 lit. b GDPR, this data will be routinely deleted after the retention periods have expired, unless it is still required for the performance of a contract or for taking steps prior to entering into a contract and/or we have a legitimate interest in its continued storage.

When processing personal data on the basis of Article 6(1)(f) GDPR, this data will be stored until the data subject exercises their right to object pursuant to Article 21(1) GDPR, unless we can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or the processing serves the purpose of establishing, exercising or defending legal claims.
When processing personal data for direct marketing purposes on the basis of Art. 6 para. 1 lit. f GDPR, this data will be stored until the data subject exercises his or her right to object pursuant to Art. 21 para. 2 GDPR.
Unless otherwise stated in the other information in this declaration regarding specific processing situations, stored personal data will be deleted when it is no longer necessary for the purposes for which it was collected or otherwise processed.