Data Protection – Your data is safe with us
General information
- Your personal data within the meaning of Article 4(1) of the GDPR …
- The processing of personal data is lawful under Article 6 of the GDPR if …
- (a) The data subject has given their consent …
- (b) The processing is necessary for the fulfilment of …
- (c) The processing is necessary for the fulfilment of …
- (d) The processing is necessary in order to …
- (e) The processing is necessary for the performance of …
- (f) The processing is necessary to safeguard legitimate interests …
- The processing of special categories of personal data …
- Automated decision-making or profiling …
- We ensure the security of data in accordance with Article 32 of the GDPR.
- Should, contrary to expectations, an injury occur …
Scope
This privacy policy applies only to our websites …
Duration of data retention
The length of time for which the data you have provided is retained is determined by statutory retention obligations.
Disclosure of data to third parties
Data will only be disclosed … if you have given your express consent …
Data controller within the meaning of the GDPR
20 Höfelbeetstraße
91719 Heidenheim
Telephone: 09833 / 988940 · Fax: 09833 / 9889420
Email: info@aufnaeher.de
Cookies and consent
We use cookies and similar technologies. Technically necessary Cookies (e.g. shopping basket, configurator, session, security) and payment services Klarna (Klarna Bank AB, Stockholm) and PayPal (PayPal (Europe) S.à r.l. et Cie, S.C.A., Luxembourg) are required for the operation of the shop and are loaded without consent (Art. 6(1)(b) and (f) of the GDPR, § 25(2) of the TDDDG).
We will load all the remaining services only after you have given your express consent (Article 6(1)(a) of the GDPR, Section 25(1) of the TDDDG). No connection is established with the providers’ servers beforehand. We distinguish between the following categories:
- Essential – technically necessary; no consent required.
- Statistics & Marketing – Google Tag Manager, Google Analytics 4 and Google Ads (in each case, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). We use these to measure website usage and the success of our advertising campaigns. In doing so, advertising and remarketing cookies may also be set and data may be transferred to the USA.
- External media – embedded third-party content. We currently use the Trusted Shops Trustbadge and Review Widget one (Trusted Shops SE, Subbelrather Str. 15c, 50823 Cologne). It displays our customer reviews and is only loaded once you have given your consent; your IP address is transmitted to Trusted Shops in the process.
We also report your decision to Google via Google Consent Mode v2. Without consent, all signals there are set to ‘denied’.
We record your consent for evidence purposes (Art. 7(1) GDPR). We store your IP address exclusively as a salted hash value, not in plain text. This consent is valid for 12 months; after that, we will ask for it again. If the list of services used changes, we will also seek your consent again.
You can withdraw or amend your consent at any time with future effect – by clicking the button “Cookie settings” at the bottom of each page. Further information can be found in the Google’s Privacy Policy and via the Google Analytics Opt-out.
Server log files
The provider automatically collects information such as browser type, operating system …
Other topics
Stock data – stored and used solely for the purposes of contract fulfilment …
Google Analytics, Mouseflow, Google Web Fonts,
newsletter, contact form, rating system,
share buttons, credit check, PayPal,
Google Maps – all the details are set out in the relevant sections …
SSL connection / Data security
Our website uses SSL encryption …
User rights
You may at any time request access to, rectification, erasure …
- Article 15 – Access to information
- Article 16 – Rectification
- Article 17 – Deletion
- Article 18 – Restriction
- Article 20 – Data portability
- Article 21 – Objection
- Article 77 – Complaints to the supervisory authority
Competent supervisory authority
We take the protection of your personal data very seriously and treat all information confidentially and in accordance with legal requirements. If you have any questions regarding specific points in our privacy policy or would like further information, please feel free to contact us directly at any time. Our team will be happy to assist you and ensure that your individual patch orders are processed securely, transparently, efficiently and reliably.
In doing so, we place particular emphasis on data minimisation, modern encryption techniques and the responsible handling of all information transmitted. In addition, we regularly review our systems to ensure we meet the highest standards and guarantee long-term security. Our staff also receive regular training to ensure they are always up to date with the latest practices for handling sensitive data.
In addition to these technical and organisational measures, we naturally also provide you with all the legal information you need to place a secure and transparent order. This means you can always be confident that your sensitive data is in safe hands with us, remains under special protection and is used exclusively for processing your order – quickly, professionally and responsibly.