Privacy Policy
1. Controller
The controller responsible for the processing of personal data within the meaning of the General Data Protection Regulation (GDPR) is: ACRYHOLZ, Owner: Frederik Wunderlich, Zur Alten Börse 41, 12681 Berlin, Germany, Phone: +49 177 5177330, Email: info@acryholz.de
2. General information on data processing
The protection of your personal data is important to us. We process your personal data exclusively within the framework of legal provisions, in particular the General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG) and other applicable data protection regulations. This Privacy Policy informs you which personal data we process when you use our website, our online shop and our business relationships with us, for what purposes this takes place and which rights you have. Our offers are aimed at both consumers pursuant to § 13 BGB (B2C) and entrepreneurs pursuant to § 14 BGB (B2B).
3. Access to our website and server log files
When visiting our website, information is automatically processed by the web server. In particular, the following data may be collected: IP address of the requesting device, date and time of access, pages and files accessed, browser used, operating system, referrer URL, Internet service provider, technical access information. The processing of this data takes place for the following purposes: ensuring secure and stable website operation, technical provision of our website, detection and prevention of misuse or attacks, error analysis. The legal basis is Art. 6 para. 1 lit. f GDPR (legitimate interest). Our legitimate interest lies in the secure, error-free and optimized provision of our online offering. This data is not merged with data from other sources. The server log files are deleted as soon as they are no longer required for the stated purposes, unless statutory retention obligations apply.
4. Processing of data when placing orders
If you place an order through our online shop, we process the personal data you provide for the purpose of processing the purchase contract. This includes in particular: first name and surname, billing and delivery address, email address, telephone number (if provided), order data, payment information, communication data. The processing takes place for the following purposes: processing and fulfilling your order, creating invoices, handling shipping, communicating regarding your order, fulfilling legal obligations. The legal basis is: Art. 6 para. 1 lit. b GDPR for the performance of the contract, Art. 6 para. 1 lit. c GDPR for compliance with legal obligations.
5. Customer account
If you create a customer account, we store the data you provide in order to enable you to manage your orders more easily. This includes in particular: contact details, stored addresses, order history, communication data. The processing is based on Art. 6 para. 1 lit. b GDPR. You can request the deletion of your customer account at any time, provided that no statutory retention obligations prevent this.
6. Contact by email and contact form
If you contact us by email, contact form or other communication channels, we process the personal data you provide for handling your request. This may include in particular: name, email address, telephone number (if provided), content of your message, and any other information voluntarily provided. The processing takes place for handling your request and carrying out pre-contractual measures or fulfilling an existing contract. The legal basis is: Art. 6 para. 1 lit. b GDPR, if your request is related to a contract or order, Art. 6 para. 1 lit. f GDPR, if it is a general inquiry. Our legitimate interest lies in the proper handling of customer inquiries and communication with interested parties and business partners. The transmitted data will be deleted once your request has been conclusively processed and no statutory retention obligations apply.
7. Contact form for revocation and inquiries
For processing revocations, returns, complaints or other customer-related matters, we process the data you provide. This includes in particular: name, email address, order number, order date, content of your message, and any additional information regarding the matter. The processing takes place to fulfill our legal obligations in connection with purchase contracts and to process your request. The legal basis is: Art. 6 para. 1 lit. b GDPR, Art. 6 para. 1 lit. c GDPR.
8. Newsletter and advertising communication
If you subscribe to our newsletter, we use your email address to regularly send you information about products, offers and news from ACRYHOLZ. Registration takes place only with your explicit consent. The legal basis is: Art. 6 para. 1 lit. a GDPR. You can withdraw your consent at any time with effect for the future, for example via the unsubscribe link in the newsletter or by sending us a message. The lawfulness of the processing carried out until withdrawal remains unaffected. Note: If no newsletter system is used, this section does not apply.
9. Payment service providers
For processing payments, we may use external payment service providers. Personal data is processed insofar as this is necessary for payment processing. This may include in particular: name, billing information, payment information, transaction data. The processing takes place for the performance of the contract pursuant to Art. 6 para. 1 lit. b GDPR. The payment service providers used process data independently according to their own privacy policies.
10. Shipping service providers
For the delivery of ordered goods, we transfer the necessary personal data to shipping service providers. This includes in particular: name of the recipient, delivery address, and, if applicable, telephone number or email address for delivery purposes. The processing takes place for the performance of the contract pursuant to Art. 6 para. 1 lit. b GDPR. We cooperate in particular with shipping service providers such as DHL or comparable logistics companies. Data is only transferred insofar as this is necessary for delivery.
11. Sales via external platforms (e.g. eBay)
In addition to our own online shop, we also sell products partially via external sales platforms such as eBay. For orders placed through such platforms, personal data is partially processed by the respective platform operator. We receive the customer data required for contract processing and process it exclusively for the following purposes: processing the order, communication with the customer, invoicing, shipping processing, compliance with legal obligations. Data processing by the respective platform is additionally carried out in accordance with its own privacy policies.
12. Use of Odoo as shop and ERP system
For operating our online shop, managing customer relationships, orders and business processes, we use the ERP and shop system Odoo. In particular, the following data may be processed: customer and contact data, orders, invoices, payment information, communication, technical usage data. The processing takes place for the performance of contracts, the management of our business processes and compliance with legal obligations. Legal basis: Art. 6 para. 1 lit. b GDPR, Art. 6 para. 1 lit. c GDPR, Art. 6 para. 1 lit. f GDPR.
13. Data processing by processors
If external service providers process personal data on our behalf, this takes place on the basis of a data processing agreement pursuant to Art. 28 GDPR. The service providers may process personal data exclusively according to our instructions and only for the agreed purposes.
14. Cookies and consent management
Our website uses cookies and similar technologies. Cookies are small text files stored on your device that may contain certain information about your use of our website. We use cookies in particular for the following purposes: technical provision and functionality of our website, storage of settings, improvement of user-friendliness, analysis of the use of our website, optimization of our online offering. If cookies are technically necessary, processing takes place on the basis of Art. 6 para. 1 lit. f GDPR. Our legitimate interest lies in the secure and user-friendly provision of our online shop. Cookies that are not technically necessary, in particular for analysis or marketing purposes, are only set if you have previously given your consent. You can withdraw or adjust your consent at any time with effect for the future via the corresponding settings of our cookie banner.
15. Analysis and marketing services
If we use analysis or marketing services, information about the use of our website may be processed. This may include in particular the following data: pages visited, duration of use, origin of visitors, technical information about the device, interactions with our website. Processing takes place exclusively on the basis of your prior consent, insofar as this is legally required. Legal basis: Art. 6 para. 1 lit. a GDPR. You can withdraw your consent at any time via our cookie consent management system. Google services: If services of Google Ireland Limited or affiliated companies are used on our website, data may be transferred to Google. This applies in particular to possible services such as: Google Analytics, Google Ads Conversion Tracking, Google Tag Manager, Google Merchant Center functions. Processing only takes place if you have given your consent. Further information can be found in Google's privacy policy.
16. Embedded content and external media
Our website may contain embedded external content, for example: videos, images, social media content, external services. When accessing such content, a connection to the servers of the respective providers may be established. Technical data such as IP address, browser information, time of access, referrer information may be transmitted. The integration takes place to improve our information offering and to provide additional product information. Processing only takes place if this is legally permitted and, where required, the necessary consent has been obtained.
17. YouTube videos and video content
If we embed YouTube videos or comparable video content on our website, this is done to provide additional information about our products and manufacturing processes. When playing a video, data may be transferred to the respective provider. This may include in particular: IP address, information about the device used, usage behavior. The integration only takes place after your consent if this is required. Provider: YouTube, Google Ireland Limited. Further information can be found in the privacy policy of the respective provider.
18. Google reCAPTCHA
To protect our website against misuse and automated access, we may use Google reCAPTCHA. This checks whether an input is made by a natural person. For this purpose, in particular the following data may be processed: IP address, browser information, technical characteristics of the device, usage behavior. Processing takes place to ensure the security of our online offering. Legal basis: Art. 6 para. 1 lit. f GDPR. Our legitimate interest lies in protecting our website against spam, fraud and abusive access. If consent is required, use only takes place after the corresponding consent has been given.
19. Storage period of personal data
We store personal data only for as long as necessary for the respective purposes. In addition, we store data insofar as statutory retention obligations exist. This applies in particular to commercial and tax-related retention obligations pursuant to: German Commercial Code (HGB), German Fiscal Code (AO). After expiry of these periods, the corresponding data will be deleted or anonymized unless another legal basis for storage exists.
20. Your rights as a data subject
Under the General Data Protection Regulation, you have the following rights: Right of access (Art. 15 GDPR) You have the right to obtain information about the personal data processed by us. Right to rectification (Art. 16 GDPR) You may request the correction of inaccurate data or the completion of incomplete data. Right to erasure (Art. 17 GDPR) You may request the deletion of your personal data if the legal requirements are met. Right to restriction of processing (Art. 18 GDPR) Under certain conditions, you may request the restriction of processing. Right to data portability (Art. 20 GDPR) You have the right to receive certain personal data in a structured, commonly used and machine-readable format. Right to object (Art. 21 GDPR) You may object at any time, for reasons arising from your particular situation, to the processing of your data insofar as this processing is based on Art. 6 para. 1 lit. e or f GDPR. Withdrawal of consent: You may withdraw consent that has been given at any time with effect for the future. The lawfulness of processing carried out before withdrawal remains unaffected.
21. Right to lodge a complaint with a data protection supervisory authority
You have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your personal data violates data protection law. The competent authority is in particular the data protection supervisory authority of your usual place of residence, your workplace or the place of the alleged infringement.
22. Updates to this Privacy Policy
We reserve the right to amend this Privacy Policy if this becomes necessary due to technical developments, changes in legal requirements or changes to our services. The current version is always available on our website.
ACRYHOLZ
Frederik Wunderlich
Zur Alten Börse 41
12681 Berlin
Germany
E-Mail: info@acryholz.de