§ 1 Information on the Collection of Personal Data
(1) Below we inform you about the collection of personal data when using our website. Personal data includes all data that can be personally related to you, such as name, address, email addresses, and user behavior.
(2) The data controller pursuant to Art. 4 No. 7 EU General Data Protection Regulation (GDPR) is:
Managing Directors:
Mr. Adam Rybicki & Mr. Albert Gierth
Alukraft GmbH
Carl-Legien-Straße 15
D-63073 Offenbach am Main, Hessen
Germany
Phone: +49 (0) 69 667788 094
Email: info@alukraft.store
Domain: www.alukraft.store
(3) When you contact us by email or through a contact form, the data you provide (such as your email address, name, and phone number) will be stored by us to answer your questions. We delete the data collected in this context once storage is no longer necessary or restrict processing if there are legal retention obligations.
(4) When using the rating function, IP addresses are stored for 30 days in accordance with GDPR Art. 6 para. 1 lit. f) to protect against misuse. Providing a name is voluntary, so any pseudonym can be used. After reviewing the rating for accuracy, it will be published on the product page of the rated product. Once published, your rating can be viewed by all visitors on the corresponding product page. If desired, your rating can be deleted. To do so, please send an email to info@alukraft.store.
(5) If we use external service providers for individual functions of our offer or intend to use your data for advertising purposes, we will inform you in detail about the respective processes below. We will also specify the defined criteria for the storage period.
§ 2 Your Rights
(1) You have the following rights regarding your personal data:
• Right to information;
• Right to rectification or erasure;
• Right to restriction of processing;
• Right to object to processing;
• Right to data portability.
(2) You also have the right to lodge a complaint with a data protection supervisory authority about the processing of your personal data by us. The competent supervisory authority for Alukraft is:
The Hessian Commissioner for Data Protection and Freedom of Information Postfach 3163 65021 Wiesbaden Phone: +49 611 1408 - 0 Fax: +49 611 1408 - 900 / 901
§ 3 Collection of Personal Data when Visiting our Website
(1) When using the website for informational purposes only, i.e., if you do not register or otherwise provide us with information, we only collect the personal data that your browser transmits to our server. When you view our website, we collect the following data, which is technically necessary for us to display our website to you and to ensure its stability and security (legal basis is Art. 6 para. 1 sentence 1 lit. f) GDPR):
• IP address;
• Date and time of the request;
• Time zone difference to Greenwich Mean Time (GMT);
• Content of the request (specific page);
• Access status/HTTP status code;
• Amount of data transferred in each case;
• Website from which the request comes;
• Browser;
• Operating system and its interface;
• Language and version of the browser software.
(2) In addition to the aforementioned data, cookies are stored on your computer when you use our website. These are small text files that are stored on your hard drive and assigned to the browser you are using, through which certain information flows to the entity that sets the cookie (here, by us). Cookies cannot execute programs or transmit viruses to your computer. They serve to make the internet offering as a whole more user-friendly and effective.
(3) Use of cookies:
a) This website uses the following types of cookies, the scope and functionality of which are explained below:
• Transient cookies (see lit. b below);
• Persistent cookies (see lit. c below).
b) Transient cookies are automatically deleted when you close the browser. These include, in particular, session cookies. These store a so-called "session ID" with which various requests from your browser can be assigned to the common session. This allows your computer to be recognized when you return to our website. The session cookies are deleted when you log out or close the browser.
c) Persistent cookies are automatically deleted after a specified period, which may vary depending on the cookie. You can delete cookies at any time in the security settings of your browser.
d) You can configure your browser settings according to your preferences and, for example, refuse to accept third-party cookies or all cookies. Please note that you may not be able to use all functions of this website.
e) We use cookies to identify you for subsequent visits if you have an account with us. Otherwise, you would have to log in again for each visit.
f) The Flash cookies used are not recorded by your browser but by your Flash plug-in. We also use HTML5 storage objects, which are stored on your device. These objects store the required data regardless of your browser and do not have an automatic expiry date. If you do not want Flash cookies to be processed, you must install an appropriate add-on, such as "Better Privacy" for Mozilla Firefox (https://addons.mozilla.org/de/firefox/addon/betterprivacy/) or the Adobe Flash Killer Cookie for Google Chrome. You can prevent the use of HTML5 storage objects by using private mode in your browser. We also recommend that you regularly delete your cookies and browser history manually.
§ 4 Collection of Personal Data for Order Processing
Additional personal data is required for the fulfillment of the contract in the context of an order with Alukraft to ensure the delivery of goods (e.g., names, addresses, and contact details). The data is therefore collected in accordance with Art. 6 para. 1 lit. b) GDPR. To fulfill the contract, the aforementioned personal data will be passed on to the manufacturers involved in the order and their carriers (for more detailed information, see §5 Disclosure of personal data).
§ 4a Use of Email Address for Email Advertising
We will use your email address for advertising purposes and send you offers for similar goods or services (for sale alongside purchased goods and services) unless you have objected to such use during data collection or subsequently with effect for the future. Data processing is then based on GDPR Art 6 para. 1 lit f). The use is intended to draw your attention to interesting offers. You can object to the use of your email address for advertising purposes at any time in the future, for example by sending an email to info@alukraft.store, without incurring other than the transmission costs according to the basic tariffs.
If you give us separate consent for our newsletter, we will send you the newsletter until the consent is revoked. The use of the data is then based on GDPR Art. 6 para. 1 lit. a.
§ 5 Disclosure of Personal Data
The personal data sent to us will be disclosed exclusively for order fulfillment in accordance with GDPR Art. 6 para. 1 lit. b). The data is only passed on to the shipping company responsible for delivery to the extent necessary for delivery of the goods. In the case of payment via PayPal, we will pass on your payment data to PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter referred to as "PayPal") as part of the payment processing. For the use of PayPal, the PayPal terms of use apply at https://www.paypal.com/de/webapps/mpp/ua/useragreement-full or - if the customer does not have a PayPal account - the terms of payment without PayPal account at https://www.paypal.com/de/webapps/mpp/ua/privacywax-full.
§ 6 Use of Social Media Plug-ins
We currently use the following social media plug-ins: Facebook, Twitter, Instagram, and Pinterest. We use the so-called two-click solution. This means that when you visit our site, no personal data is initially passed on to the providers of the plug-ins. You can recognize the provider of the plug-in by the marking on the box above its initial letter or the logo. We give you the opportunity to communicate directly with the provider of the plug-in via the button. Only if you click on the marked field and thereby activate it, the plug-in provider receives the information that you have accessed the corresponding website of our online service. In addition, the data mentioned under § 3 of this declaration will be transmitted. In the case of Facebook and Instagram, according to the respective providers in Germany, the IP address is anonymized immediately after collection. By activating the plug-in, personal data is transferred from you to the respective plug-in provider and stored there (in the case of US providers in the USA). Since the plug-in provider collects data primarily via cookies, we recommend that you delete all cookies using your browser's security settings before clicking on the grayed-out box.
We have no influence on the data collected and data processing operations, nor are we aware of the full extent of data collection, the purposes of processing, the retention periods. We also have no information on the deletion of the data collected by the plug-in provider.
The plug-in provider stores the data collected about you as user profiles and uses them for the purposes of advertising, market research, and/or demand-oriented design of its website. Such an evaluation takes place in particular (also for users who are not logged in) for the presentation of demand-oriented advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact the respective plug-in provider to exercise this right. Through the plug-ins, we offer you the opportunity to interact with social networks and other users so that we can improve our offer and make it more interesting for you as a user. The legal basis for the use of the plug-ins is GDPR Art. 6 para. 1 lit. f.
The data transfer takes place regardless of whether you have an account with the plug-in provider and are logged in there. If you are logged in to the plug-in provider, your data collected with us will be directly assigned to your existing account with the plug-in provider. If you click the activated button and, for example, link the page, the plug-in provider also stores this information in your user account and shares it publicly with your contacts. We recommend that you log out regularly after using a social network, especially before activating the button, as this allows you to avoid being assigned to your profile with the plug-in provider.
For more information on the purpose and scope of data collection and its processing by the plug-in provider, please refer to the privacy policies of these providers provided below. There you will also find further information about your rights in this regard and setting options to protect your privacy.
Addresses of the respective plug-in providers and URL with their privacy policies:
• Facebook Inc., 1601 S California Ave, Palo Alto, California 94304, USA; http://www.facebook.com/policy.php; further information on data collection: http://www.facebook.com/help/186325668085084, http://www.facebook.com/about/privacy/your-info-on-other#applications and http://www.facebook.com/about/privacy/your-info#everyoneinfo. Facebook has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.
• Twitter, Inc., 1355 Market St, Suite 900, San Francisco, California 94103, USA; https://twitter.com/privacy. Twitter has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.
• Instagram LLC., 1601 Willow Road, Menlo Park, CA 94025, USA; https://help.instagram.com/519522125107875.
• Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland; https://policy.pinterest.com/de/privacy-policy.
§ 7 Objection or Revocation against the Processing of your Data
(1) If you have given your consent to the processing of your data, you can revoke it at any time. Such a revocation influences the permissibility of processing your personal data after you have given it to us.
(2) Insofar as we base the processing of your personal data on the balance of interests, you may object to the processing. This is the case if processing is not necessary, in particular, to fulfill a contract with you, which is described by us in the following description of the functions. When exercising such objection, we ask you to explain the reasons why we should not process your personal data as we have done. In the event of your justified objection, we will examine the situation and either stop or adapt the data processing or show you our compelling legitimate reasons on the basis of which we will continue the processing.
(3) Of course, you can object to the processing of your personal data for advertising and data analysis purposes at any time. You can inform us about your objection to advertising using the contact details provided above.