Privacy Policy

1. Information about the collection of personal data and contact details of the controller 

1.1. We are pleased that you are visiting our website and thank you for your interest. Below, we inform you about how we handle your personal data when you use our website. Personal data refers to all data that can be used to personally identify you.

1.2. The person responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Adam Krumbach, Berggartenstr.19b, 01277 Dresden, Germany, telephone: +49 (0) 351 – 27299903, email: email@verkaufsagentur.de.

2. Data collection when visiting our website

2.1. If you use our website for informational purposes only, i.e., if you do not register or otherwise provide us with information, we only collect data that your browser transmits to our server (so-called "server log files"). When you visit our website, we collect the following data, which is technically necessary for us to display the website to you:

• Our visited website
• Date and time of access
• Amount of data sent in bytes
• Source/reference from which you came to the page
• Browser used
• Operating system used
• IP address used (if applicable: in anonymized form)

Processing is carried out in accordance with Art. 6 (1) (f) GDPR based on our legitimate interest in improving the stability and functionality of our website. The data will not be shared or used for any other purpose. However, we reserve the right to subsequently review the server log files if there are concrete indications of illegal use.

2.2. For security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries to the controller), this website uses SSL or TLS encryption. You can recognize an encrypted connection by the character string "https://" and the lock symbol in your browser bar.

3. Cookies

To make visiting our website more attractive and enable the use of certain functions, we use cookies, i.e., small text files that are stored on your device. Some of these cookies are automatically deleted after closing your browser (so-called "session cookies"); others remain on your device for a longer period and allow you to save page settings (so-called "persistent cookies"). In the latter case, you can find out how long cookies are stored in the overview of your web browser's cookie settings.
If personal data is also processed by individual cookies used by us, the processing is carried out in accordance with Art. 6 (1) (b) GDPR either to execute the contract, in accordance with Art. 6 (1) (a) GDPR in the event of consent being given, or in accordance with Art. 6 (1) (f) GDPR to protect our legitimate interests in the best possible functionality of the website and a customer-friendly and effective design of the site visit.
You can set your browser so that you are informed about the setting of cookies and can decide individually whether to accept them or to exclude the acceptance of cookies in certain cases or in general.
Please note that if you do not accept cookies, the functionality of our website may be limited.

4. Contact

4.1. Own review reminder (not sent by a customer review system)

We will use your email address to send you a one-time reminder to submit a rating of your enquiry for the rating system we use, provided that you have given us your express consent to do so during or after your enquiry in accordance with Art. 6 (1) (a) GDPR.
You can revoke your consent at any time by sending a message to the data controller.

4.2. Dedicated function for online appointment scheduling

We process your personal data as part of the online appointment scheduling provided. You can see which data we collect for online appointment scheduling from the respective input form or appointment query. If certain data is necessary to make an online appointment, we will indicate this accordingly in the input form or appointment query. If we provide you with a free text field in the input form, you can describe your request in more detail there. You can then also control which additional data you want to enter. The data you provide will be stored and used solely for the purpose of scheduling an appointment. Art. 6 (1) (b) GDPR serves as the legal basis for processing personal data that is necessary to fulfill a contract with you (this also applies to processing operations that are necessary to carry out pre-contractual measures). If you have given us your consent to process your data, the processing will be carried out on the basis of Art. 6 (1) (a) GDPR. Consent given can be revoked at any time by sending a message to the person responsible named at the beginning of this declaration.

4.3. WhatsApp Business

We offer visitors to our website the opportunity to contact us via the WhatsApp messaging service provided by WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. For this purpose, we use the so-called "Business Version" of WhatsApp.
If you contact us via WhatsApp regarding a specific transaction (for example, a placed order), we will store and use the mobile phone number you use for WhatsApp and – if provided – your first and last name in accordance with Art. 6 (1) (b) GDPR to process and respond to your request. Based on the same legal basis, we may ask you via WhatsApp to provide additional data (order number, customer number, address, or email address) so that we can assign your request to a specific process.
If you use our WhatsApp contact for general inquiries (e.g. about the range of services, availability or our website), we will save and use the mobile phone number you use on WhatsApp and - if provided - your first and last name in accordance with Art. 6 (1) (f) GDPR on the basis of our legitimate interest in the efficient and timely provision of the requested information.
Your data will only be used to respond to your request via WhatsApp. It will not be shared with third parties.
Please note that WhatsApp Business receives access to the address book of the mobile device we use for this purpose and automatically transfers telephone numbers stored in the address book to a server of the parent company Meta Platforms Inc. in the USA. To operate our WhatsApp Business account, we use a mobile device whose address book only stores the WhatsApp contact data of users who have contacted us via WhatsApp.
This ensures that every person whose WhatsApp contact details are stored in our address book has consented to the transmission of their WhatsApp telephone number from the address books of their chat contacts in accordance with Art. 6 (1) (a) GDPR by accepting the WhatsApp Terms of Use upon first use of the app on their device. The transmission of data from users who do not use WhatsApp and/or have not contacted us via WhatsApp is therefore excluded.
For information on the purpose and scope of data collection and the further processing and use of data by WhatsApp, as well as your rights and setting options for protecting your privacy, please refer to WhatsApp's privacy policy:  https://www.whatsapp.com/legal/privacy-policy-eea

4.4. As part of the above-mentioned processing, data may be transferred to Meta Platforms Inc. servers in the USA.
For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision of the European Commission.

4.5. When you contact us (e.g., via contact form or email), personal data will be processed exclusively for the purpose of processing and responding to your request and only to the extent necessary for this purpose. The legal basis for processing this data is our legitimate interest in responding to your request in accordance with Art. 6 (1) (f) GDPR. If your contact is for the purpose of entering into a contract, the additional legal basis for processing is Art. 6 (1) (b) GDPR. Your data will be deleted if the circumstances indicate that the matter in question has been conclusively clarified and provided there are no statutory retention periods to the contrary.

5. Google Customer Reviews

We partner with Google through the Google Customer Reviews program. The provider is Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”).
This program gives us the opportunity to collect customer reviews from users of our website. If you give your consent in accordance with Art. 6 (1) (a) GDPR, we will transmit your email address to Google. You will receive an email from Google Customer Reviews asking you to rate your purchasing experience on our website. The rating you submit will then be summarized with our other reviews and displayed in our Google Customer Reviews logo and in our Merchant Center dashboard. Your rating will also be used for Google Seller Ratings. Using Google Customer Reviews may also result in the transmission of personal data to Google LLC's servers in the USA.
You can revoke your consent at any time by sending a message to the data controller or to Google. For data transfers to the USA, the provider has adhered to the EU-US Data Privacy Framework, which ensures compliance with European data protection standards based on an adequacy decision of the European Commission.

6. Adobe Acrobat Sign

For the digital signing of documents, we use the services of the following provider: Adobe Systems Software Ireland Limited, 4-6 Riverwalk, City West Business Campus, Dublin 24, Ireland
The service enables the legally valid signing of documents via electronic signature from any device.
For this purpose, the service collects, stores and transmits not only the electronic signature for verification and proof of the signature, but also usage data of the end device used (in particular the IP address) and certain transaction data.
The processing is based on our legitimate interest in efficient and response-time-saving business management and customer-friendly and effective document management in accordance with Art. 6 (1) (f) GDPR.
We have concluded a data processing agreement with the provider that protects the data of our site visitors and prohibits its transfer to third parties.

7. Rights of the data subject

7.1. The applicable data protection law grants you the following data subject rights (rights of information and intervention) vis-à-vis the controller with regard to the processing of your personal data, whereby reference is made to the legal basis stated for the respective conditions for exercising them:

• Right to information pursuant to Art. 15 GDPR;
• Right to rectification pursuant to Art. 16 GDPR;
• Right to erasure pursuant to Art. 17 GDPR;
• Right to restriction of processing pursuant to Art. 18 GDPR;
• Right to information pursuant to Art. 19 GDPR;
• Right to data portability pursuant to Art. 20 GDPR;
• Right to revoke consent given in accordance with Art. 7 (3) GDPR;
• Right to lodge a complaint pursuant to Art. 77 GDPR.

7.2. RIGHT OF OBJECTION

IF WE PROCESS YOUR PERSONAL DATA BASED ON OUR OVERRIDING LEGITIMATE INTEREST AS PART OF A BALANCE OF INTERESTS, YOU HAVE THE RIGHT TO OBJECT TO THIS PROCESSING AT ANY TIME WITH FUTURE EFFECT FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION.
If you exercise your right to object, we will stop processing the data in question. However, we reserve the right to continue processing if we can demonstrate compelling legitimate grounds for the processing that override your interests, fundamental rights, and freedoms, or if the processing serves to assert, exercise, or defend legal claims.
If we process your personal data for direct marketing purposes, you have the right to object at any time to the processing of your personal data for such marketing purposes. You can exercise your right of objection as described above. If you exercise your right of objection, we will stop processing the data concerned for direct marketing purposes.

8. Duration of storage of personal data

The duration of storage of personal data is determined by the respective legal basis, the purpose of the processing and – where applicable – also by the respective statutory retention period (e.g. retention periods under commercial and tax law).

When personal data is processed on the basis of express consent in accordance with Art. 6 (1) (a) GDPR, this data will be stored until the data subject revokes their consent. If statutory retention periods exist for data processed within the framework of legal or quasi-legal obligations based on Art. 6 (1) (b) GDPR, this data will be routinely deleted after the retention periods have expired, provided it is no longer required to fulfill or initiate a contract and/or we no longer have a legitimate interest in continuing to store it.

When processing personal data on the basis of Art. 6 (1) (f) GDPR, these data will be stored until the data subject exercises his or her right of objection in accordance with Art. 21 (1) GDPR, unless we can demonstrate compelling legitimate grounds for the processing which outweigh the interests, rights and freedoms of the data subject, or the processing serves to assert, exercise or defend legal claims.
When processing personal data for the purpose of direct marketing on the basis of Art. 6 (1) (f) GDPR, these data will be stored until the data subject exercises his or her right of objection in accordance with Art. 21 (2) GDPR.
Unless otherwise stated in the other information in this statement on specific processing situations, stored personal data will be deleted when they are no longer necessary for the purposes for which they were collected or otherwise processed.