Data protection declaration
§ 1 Information about the collection of personal data
(1) The following will inform you about the collection of personal data when using our website. Personal data is all data that is personally related to you, e.g. name, address, e-mail addresses, user behaviour.
(2) The controller as per Art. 4, Abs. 7 General Data Protection Regulation (GDPR) is
X-CEN-TEK GmbH & Co. KG
Westerburger Weg 30
You can reach our data protection officer under [email protected] or via our postal address with the addition of "the Data Protection Officer".
(3) When you contact us by e-mail or through a contact form, the information you provide (your e-mail address, your name and telephone number if applicable) will be stored by us to answer your questions. We delete this data once storage is no longer required, or we restrict the processing if statutory preservation requirements are required.
(4) If we rely on commissioned service providers for individual webpage functions or would like to use your data for advertising purposes, we will inform you in detail below about the respective processes. We also state the specified criteria for the storage duration.
§ 2 Your rights
(1) You have the following rights with respect to personal data concerning you:
- right to information
- right to rectification or erasure,
- right to restriction of processing,
- right to object to the processing,
- Right to data portability.
(2) You also have the right to complain to a data protection supervisory authority about our processing of your personal data.
§ 3 Collection of personal data when visiting our website
(1) In the case of use of the website purely informatively i.e. if you do not register or provide us with other information, we only collect the personal data that your browser transmits to our server. If you wish to view our website, we collect the following data that is technically necessary for us to display our website to you and to ensure its stability and security (legal basis: Art. 6, Abs 1, Sentence 1 GDPR):
- IP Address
- Date and time of the visit
- Time zone difference to Greenwich Mean Time (GMT)
- Content of the request (concrete page)
- Access status / HTTP status code
- Each transferred amount of data
- Website from which the request comes
- Operating system and its interface
- Language and version of the browser software.
(2) In addition to the aforementioned data, cookies are stored on your computer when you use our website. Cookies are small text files that are stored on your hard drive assigned to the browser you are using and by which the body that sets the cookie (in this case, us) receives certain information. Cookies cannot run programs or transmit viruses to your computer. They serve to make the Internet more user-friendly and effective overall.
a) This website uses the following types of cookies, the scope and operation of which are explained below.
- Transient cookies (see b)
- Persistent cookies (see c)
b) Transient cookies are automatically deleted when you close the browser. These include session cookies. These store a session ID, with which various requests from your browser can be related to the whole session. This will allow your computer to be recognized when you return to our website. The session cookies are deleted when you log out or close the browser.
c) Persistent cookies are automatically deleted after a specified period, which may differ depending on the cookie. You can delete the cookies in the security settings of your browser at any time.
d) You can configure your browser setting according to your wishes to decline the acceptance of third-party cookies or all cookies. We would like to advise you that in this case you may not be able to use all functions of this website.
§ 4 Further functions and offers of our website
(1) In addition to the purely informational use of our website, we offer various services that you can use if you are interested. To do this, you will typically need to provide additional personal information which we provide to the relevant service and to which the aforementioned data processing principles apply.
(2) Sometimes, we use external service providers to process your data. These have been carefully selected and commissioned by us, they must comply to our instructions and they are regularly inspected.
(3) When our service providers or partners are based in a country outside the European Economic Area (EEA), we inform you about the implications of this in the offers description.
§ 5 Objection or revocation against the processing of your data
(1) If you have given your consent to the processing of your data, you can revoke it at any time. Such revocation will affect the admissibility of the processing of your personal data after you have given it to us.
(2) Insofar as we base the processing of your personal data on the balancing of interests, you may object to the processing (Art. 21, Abs 1 GDPR). In particular, this is the case if the processing is not required to fulfil a contract with you which we describe in the following description of functions. In the event of such a disagreement, we ask you to explain the reasons why we should not process your personal data as we have done. In the case of your justified objection, we will examine the situation and will either discontinue or adapt the data processing or point out to you our legitimate reasons as to why we continue the processing.
(3) You may of course, object to the processing of your personal data for advertising and data analysis purposes at any time. You can inform us via the following contact details about your objection:
X-CEN-TEK GmbH & Co. KG
Westerburger Weg 30
§ 6 Use of our Webshop
(1) If you want to order in our Webshop, at the conclusion of the order contract it is necessary that you provide your personal information which we need for the processing of your order. The mandatory information necessary for the execution of the order contract is marked, further details are voluntary. We use the data provided by you to process your order. With this we can pass on your payment data to our bank. The legal basis for this is: Art. 6, Abs 1, Sentence 1 GDPR.
(2) You can voluntarily create a customer account through which we can save your data for later purchases. If you create an account under "My Account", the data you provide will be revocably stored. All other data, including your user account, can always be deleted in the customer area.
(3) We may also use the information you provide to inform you of other interesting products from our portfolio, or to send you e-mails with technical information.
(4) Due to commercial and tax regulations, we are obliged to store your address, payment and order data for a period of ten years. However, after three years, use is restricted, meaning your data will only be used to comply with legal obligations.
(5) In order to prevent unauthorized access by third parties to your personal data; in particular financial data, the order process is encrypted using TLS technology.
§ 7 Newsletter
(1) With your consent, you can subscribe to our newsletter which informs you about our current offers. The advertised goods and services are stated in the declaration of consent.
(2) To register for our newsletter, we use the “double-opt-in” procedure. Meaning that after you have registered, we will send an e-mail to the e-mail address specified in which we ask you to confirm that you wish to receive the newsletter. If you do not confirm your registration within 24 hours, your information will be blocked and automatically deleted after one month. In addition, we store your used „IP“ indeed and times of registration and confirmation. The purpose of the process is to prove your registration and, if necessary, to clarify any possible misuse of your personal data.
(3) The only requirement for sending you the newsletter is your e-mail address. The addition of other, separately marked data is voluntary and will be used to address you personally. After your confirmation, we will save your e-mail address for the purpose of sending you the newsletter. Legal basis: Art. 6, Abs. 1, Sentence 1 GDPR.
(4) You can revoke your consent to the sending of the newsletter and unsubscribe from the newsletter at any time. To do so click on the link provided in each newsletter e-mail or send a message to the contact details stated in the “Imprint” section of our website.
(5) We point out that we analyse your user behaviour when sending the newsletter. To do so, the emails sent include web beacons or tracking pixels that represent one-pixel image files stored on our website. For the analysis, we link the data mentioned in § 3 and the web beacons with your e-mail address and an individual ID. Also, the newsletter contains links containing this ID. With the data obtained in this way, we create a user profile to tailor the newsletter to your individual interests. In doing so, we record when you read our newsletters and which links you click on to ascertain your personal interests. We link this data with your actions on our website. The information is saved as long as you are subscribed to the newsletter. After unsubscribing, we store the data purely statistically and anonymously. Also, such tracking is not possible if you have turned off image viewing by default in your email programme. In this case the newsletter will not be displayed completely, and you may not be able to use all the features. If you display images manually, the above tracking is carried out.
§ 8 Use of webfonts
§ 9 Inclusion of YouTube videos
(1) We also offer YouTube videos online, which are stored on www.YouTube.com and are playable directly from our website. These are all included in "extended privacy mode", meaning that if you do not play the videos, no data about you is transferred. Only when you play the videos is the data mentioned in paragraph 2 transmitted. We have no influence over this data transfer.
(2) By visiting the website, YouTube receives the information that you have accessed the corresponding subpage of our website. In addition, the data mentioned under § 3 of this declaration will be transmitted. This happens regardless of whether YouTube provides a user account that you are logged in to, or if there is no user account. When you're logged in to Google, your data will be assigned directly to your account. If you do not wish to be associated with your profile on YouTube, you must log out before activating the button. YouTube stores your data as usage profiles and uses it for purposes of advertising, market research and / or custom design of its website. Such an analysis is done in particular (even for users who are not logged in) to provide appropriate advertising and to inform other users of the social network about their activities on our website. You have a right to object to the creation of these user profiles whereby you need to contact YouTube to do this.
§ 10 Integration of Google Maps
(1) On this website we offer the use of Google Maps. This allows us to show you interactive maps directly in the website and allows you to easily use the map feature.
(2) By visiting the website, Google receives the information that you have accessed the corresponding subpage of our website. In addition, the data mentioned under § 3 of this declaration will be transmitted. This happens regardless of whether Google provides a user account that you are logged in to, or if there is no user account. When you're logged in to Google, your data will be assigned directly to your account. If you do not wish to be associated with your profile on Google, you must log out before activating the button. Google stores your data as usage profiles and uses them for purposes of advertising, market research and / or custom design of its website. Such an analysis is done in particular (even for users who are not logged in) to provide appropriate advertising and to inform other users of the social network about their activities on our website. You have a right to object to the creation of these user profiles whereby you need to contact Google to do this.
§ 11 Google Analytics
(1) This website uses Google Analytics, a web analysis service provided by Google Inc. "("Google"). Google Analytics uses "cookies", which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of the website will generally be transmitted to and stored by Google on servers in the United States. However, if IP anonymisation is activated on this website, your IP address will be shortened beforehand by Google within member states of the European Union or in other signatory states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA where it will be shortened. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide other services relating to website activity and internet usage to the website operator.
2) The IP address transmitted by your browser as part of Google Analytics is not merged with other Google data.
(4) This website uses Google Analytics with the extension "_anonymizeIp()". This shortens the processing of IP addresses, thus excluding the possibility of personal references. If the data collected about you is related to a person, this is excluded immediately and the personal data is deleted immediately.
(5) We use Google Analytics to analyse and regularly improve the use of our website. The statistics obtained allow us to improve our services and make them more interesting for you as a user. For the exceptional cases in which personal data is transferred to the USA, Google has submitted to the EU-US Privacy Shield, www.privacyshield.gov/EU-US-Framework. The legal basis for the use of Google Analytics is Art. 6 Para. 1 S. 1 lit. f DS-GVO.
(7) This website also uses Google Analytics for a cross-device analysis of visitor flows conducted through a User ID (Universal Analytics). You can deactivate the cross-device analysis of your use in your customer account under "My data", "Personal data".
§ 12 Use of Cloudflare
(1) This website uses functions of the Cloudflare tool from the provider Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA.
(2) We use Cloudflare to reduce the loading time of our website and to protect ourselves from DDoS attacks.
(3) Cloudflare collects data regarding the website accessed, the browser type, the operating system used, the referrer URL, the IP address and the requesting provider. Cloudflare states that it does not store any user-specific data logs and does not sell any user data to third parties or use it for advertising purposes.
(4) The legal basis for the processing of your data is Art. 6 para. 1 p. 1 lit. a DS-GVO, i.e. the integration only takes place after your consent. Further information regarding data protection at Cloudflare can be found at www.cloudflare.com/privacypolicy/.