Contents privacy policy

Data Protection Statement

Public Procedural List

Data Protection Statement

Thank you for visiting our website and for your interest in our company. We understand data protection as a customer-oriented quality feature. The protection of your personal data and the protection of your personal rights are important to us.

With this data protection declaration, we would like to transparently inform all visitors of our website about the type, scope and purpose of the personal data collected, used and processed by us and to inform you about the rights to which you are entitled.

The use of our website is generally possible without the provision of personal data. However, should you make use of our company’s services via our website, it may become necessary to process your personal data.

The data is collected automatically when you visit our website or use our services. Personal data entered by you will be processed in accordance with the current legal provisions for the protection of personal data.

If processing your personal data is necessary and there is no legal basis for such processing, we will always obtain your consent for the necessary purpose of processing.
As the company responsible for processing, we have defined technical and organisational measures to ensure the highest possible level of protection of your personal data.However, we would like to point out that data transmission via the World Wide Web may in principle be subject to security gaps.

If you would like to make use of our company’s services and do not want to use the data transmission route via the World Wide Web, you can also contact us by telephone.

1. Contact details of the person responsible for data processing

Responsible person in the sense of the General Data Protection Regulation is:
Wiedenmann GmbH
Am Bahnhof
89192 Rammingen
Tel.: +49 (0) 73 45/9 53 – 0
E-Mail: info@wiedenmann.com

A Data Protection Officer has been appointed:
Herr Stephan Hartinger
Coseco GmbHTelefon: +49 (0) 8232 80988-70
E-Mail: datenschutz@coseco.de

2. Collection of general access information

Every time you visit our website, server log file information that your browser transmits to us is automatically recorded. These are:

1. IP address (Internet Protocol Address) of the accessing computer
2. The website from which you are visiting us (referrer)
3. The website of ours that you are visiting
4. The date and duration of the visit
5. Browser type and browser settings
6. Operating system

Please note that this data cannot be assigned to a specific person. We use this technical access data exclusively for the following purposes:

1. To improve the attractiveness and usability of our websites,
2. To detect technical problems on our website at an early stage.
3. To deliver the contents of our website correctly,
4. To provide law enforcement authorities with the information necessary for law enforcement in the event of a cyberattack.

This data is stored for a maximum of 7 days as a technical precaution to protect the data processing systems against unauthorised access.

3. Collection and forwarding of personal data

We use your personal data only for the purposes stated on this information page for data protection.

Our website provides the following input masks for collecting personal data:

3.1 Registration on our website

3.1.1 Shop-System (customer account)

We use your personal data, which you enter when registering for shop access, to set up a password-protected direct access to your personal customer account. In order to set up shop access for you, we need you to enter the following information:

1. Name and surname
2. Email address

After submitting the registration you will receive a confirmation e-mail for legal reasons to complete your registration order to create a customer account.

The data mentioned here are used exclusively to create a customer account as well to send the confirmation mail.

After confirmation of your customer account you can store and manage your contact and address data as well as your desired payment methods and view data about your completed, open and recently shipped orders. You undertake to treat the personal access data confidentially and not to make them accessible to any unauthorised third parties. After you have finished communicating with us, you should always log out of your customer account.

Data transfer for contract fulfilment

For the fulfilment of the contract we pass on your data to the shipping company commissioned with the delivery, as far as this is necessary for the delivery of ordered goods.

Depending on which payment service provider you select in the order process, we pass on the payment data collected for the processing of payments to the credit institution commissioned with the payment and, if applicable, to payment service providers commissioned by us or to the selected payment service.

In some cases, the selected payment service providers also collect this data themselves if you create an account there. In this case, you must log into the payment service provider with your access data during the ordering process.

The data protection declaration of the respective payment service provider applies in this respect.

Data transfer for credit assessment

If we make advance payments, e.g. when purchasing on account, we reserve the right to obtain identity and credit information from specialised service providers (credit agencies) in order to safeguard our legitimate interests.

To this end, we transfer your personal data required for a credit assessment to the following company or companies:

Company:       Bisnode Deutschland GmbH
Street:                       Robert-Bosch-Str. 11
Postal code/City:    64293 Darmstadt, Germany

3.1.2 Sending newsletters

On our website we offer you the opportunity to subscribe to our newsletter, in which we inform you about offers, products and information of the company at regular intervals.

To receive our newsletter, you need a valid e-mail address.

In order to receive a personalised newsletter, we need the following information from you:

1. First and last name
2. E-mail address

After submitting the registration you will receive a confirmation e-mail for legal reasons to complete your registration order for sending the newsletter.

The data mentioned here will be used exclusively for sending the newsletter.

The dispatch of the newsletter takes place by means of the dispatch service provider Newsletter2Go, Köpenicker Str. 126, 10179 Berlin. The data protection regulations and further information of the dispatch service provider can be viewed here: https://www.newsletter2go.de/informationen-newsletter-empfaenger The dispatch service provider is based on our legitimate interests acc. Art. 6 para. 1 lit. f GDPR and a contract processing agreement acc. Art. 28 (3) sentence 1 GDPR.

Your data will be transmitted to Newsletter2Go. Newsletter2Go is prohibited from selling and using your data for purposes other than sending newsletters. Newsletter2Go is a German, certified provider, which was selected according to the requirements of the General Data Protection Regulation and the Federal Data Protection Act.

The dispatch service provider may use the data of the recipients in pseudonymous form, i.e. without assignment to a user, to optimize or improve their own services, e.g. for the technical optimization of dispatching and the presentation of newsletters or for statistical purposes. However, the dispatch service provider does not use the data of our newsletter recipients to address them themselves or to pass the data on to third parties.

If we receive your e-mail address in connection with the sale of a product or service and you have not objected to this, we reserve the right to regularly send you e-mail notices of offers for similar products, such as those you have already purchased, from our product line.

You have the possibility to cancel the newsletter at any time and to revoke your consent for the use of your data for the newsletter dispatch. There is a link to this in every newsletter.

3.1.3 Registration on our website (customer area)

We offer you the opportunity to register on our website by entering your personal data.

To register in the customer area, we need the following information from you:

1. Name and surname
2. E-mail
3. Phone
4. Company (Dealer Registration)
5. Street
6. Postal code
7. City
8. Nation
9. Activity (end customer)

The personal data entered by you will be collected and stored exclusively for our own internal purposes. Depending on the purpose of the processing, the data may be passed on to one or more contract processors, such as shipping companies, provided they are involved in fulfilling the service you require.

The purpose of registering the data subject to the voluntary provision of personal data is to offer you content or services that can only be offered to registered users. You can correct/add the personal data provided during registration at any time.

3.1.4 Transmission of application documents

In the course of your application (by e-mail), we collect and process various personal application data.

This includes in particular your

• contact information (name, address, telephone number and e-mail)
• application documents (letter of application, curriculum vitae, certificates or other evidence of education and qualifications)

After dispatch, you will receive an e-mail confirming receipt of your application documents.

Your personal application data is collected and processed exclusively for the purpose of filling positions within our company. Your data will only be forwarded to the internal departments and departments of our company responsible for the specific application procedure. Your personal application data will not be passed on to other companies without your prior express consent and will not be used or passed on to third parties.

Your personal application data will be deleted automatically not later than six months after completion of the application process. This does not apply if legal provisions prevent deletion, if further storage is necessary for the purpose of providing evidence, or if you have expressly agreed to longer storage, e.g. for future job advertisements.

If an employment contract is concluded with an applicant, the transmitted data will be stored for the purpose of processing the employment relationship in compliance with the statutory provisions.

Please note that we are unable to guarantee full data security when communicating by e-mail. In order to protect your application documents against any misuse by a third party, we thereforere commend to create a password protected ZIP archive and to let us know the access data separately.

3.1.5 Contact by e-mail or contact form

On our website we offer you the possibility to contact us by e-mail and/or via a contact form.

If you contact us by e-mail or via a contact form, the personal data transmitted by you will be stored automatically.

Such personal data, which you voluntarily provide to us, will be stored for the purpose of processing your inquiry or contacting the person concerned. This personal data is not passed on to third parties.

4. Use and application of tracking, analysis tools and social plugins

Privacy policy for the use and application of Google Analytics (with anonymization function)

The data controller has integrated the Google Analytics component (with anonymization function) on this website. Google Analytics is a web analytics service. Web analysis is the collection, storage, and evaluation of data on the behaviour of visitors to Internet sites. A web analysis service collects, among other things, data on the website from which a specific person has accessed a website (so-called referrer), which subpages of the website have been accessed or how often and for how long a subpage has been viewed. A web analysis is mainly used to optimise a website and for a cost-benefit analysis of internet advertising.

The Google Analytics component is operated by Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.

The data controller uses the suffix “_gat._anonymizeIp” for the web analysis via Google Analytics. By means of this suffix, Google shortens and anonymises the IP address of the internet connection of the person concerned when accessing our internet pages from a member state of the European Union or from another state party to the Agreement on the European Economic Area.

The purpose of the Google Analytics component is to analyse the flow of visitors to our website. Google uses the data and information collected to evaluate the use of our website, among other things, to compile online reports for us that show the activities on our website and to provide other services in connection with the use of our website.

Google Analytics inserts a cookie on the information technology system of the person concerned. What cookies are has already been explained above. By setting the cookie, Google is enabled to analyse the use of our website. Each time one of the individual pages of this website is called up, which is operated by the data controller and on which a Google Analytics component has been integrated, the internet browser on the information technology system of the affected person is automatically prompted by the respective Google Analytics component to transmit data to Google for the purpose of online analysis. As part of this technical process, Google obtains knowledge of personal data, such as the IP address of the person concerned, which serves Google, among other things, to trace the origin of visitors and clicks and subsequently enable commission settlements.

Cookies are used to store personal information, such as access time, the location from which the access came, and the frequency of visits to our website by the person in question. Whenever you visit our website, this personal data, including the IP address of the internet connection you have used, is transmitted to Google in the United States of America. This personal data is stored by Google in the United States of America. Google may disclose personal data collected through the technical process to third parties.

The person concerned can prevent the setting of cookies by our website at any time, as already described above, by means of an appropriate setting of the internet browser used and thus permanently object to the setting of cookies. Such a setting of the internet browser used would also prevent Google from placing a cookie on the information technology system of the person concerned. In addition, a cookie already set by Google Analytics can be deleted at any time via the internet browser or other software programs.

Furthermore, it is possible for the person concerned to object to and prevent the collection of data generated by Google Analytics relating to the use of this website and the processing of this data by Google. To do this, the person concerned must download and install a browser add-on from the link https://tools.google.com/dlpage/gaoptout. This browser add-on informs Google Analytics via JavaScript that no data and information on visits to websites may be transmitted to Google Analytics. The installation of the browser add-on is considered a revocation by Google. If the person’s information technology system is deleted, formatted or reinstalled at a later time, the person concerned must reinstall the browser add-on to disable Google Analytics. If the browser add-on is uninstalled or deactivated by the person concerned or another person within their control, it is possible to reinstall or reactivate the browser add-on.

You can prevent the collection by Google Analytics by clicking on the following link. An opt-out cookie is set to prevent future collection of your data when you visit this website: Disable Google Analytics

Further information and Google’s current privacy policy can be found at https://www.google.de/intl/de/policies/privacy/ and http://www.google.com/analytics/terms/de.html Google Analytics will be explained in more detail under this link https://www.google.com/intl/de_en/analytics/.

6. Deletion, blocking and duration of the storage of personal data

We process and store your personal data only for the period of time required to achieve the respective storage purpose or as provided for by law.

After discontinuation of a storage purpose or after expiry of the storage period provided for by law, the personal data are routinely blocked or deleted for further processing in accordance with the statutory provisions.

7. Data protection rights of the data subject

If you have any questions about your personal data, you can contact us in writing at any time. You have the following rights under GDPR:

7.1 The right to information (subitem Art. 15 GDPR)

You have the right at any time to receive information about which categories and information on your personal data are processed by us for which purpose, for how long, and according to which criteria these data are stored and whether an automated decision making including profiling is applied in this context. You also have the right to know which recipients or categories of recipients your data have been or are still being disclosed, in particular recipients in third countries or international organisations. In this case you also have the right to be informed about appropriate guarantees in connection with the transmission of your personal data.

In addition to the right of appeal to the supervisory authority and the right to information about the origin of your data, you have the right to have your personal data deleted, corrected and limited or to object to the processing of your personal data.

In all the above cases, you have the right to request a free copy of your personal data processed by us from the data processor. We are entitled to charge an appropriate administration fee for all further copies that you request or that go beyond the data subject’s right to information.

7.2 The right to correction (Art. 16 GDPR)

You have the right to request the immediate correction of your incorrect personal data and, taking into account the purposes of the processing, to request the completion of incomplete personal data also by means of a supplementary declaration.

If you wish to exercise your right to rectification, you can contact our data protection officer or the data controller at any time.

7.3 The right to cancellation (Art. 17 GDPR)

You have the right to demand the immediate deletion of your data (“right to be forgotten”) especially if the storage of the data is no longer necessary, if you revoke your consent to data processing, if your data were processed unlawfully or were collected unlawfully and if there is a legal obligation to delete under EU or national law.

However, the right to be forgotten shall not apply if there is a predominant right to freedom of expression or information, if data storage is necessary for the fulfilment of a legal obligation (e.g. storage obligations), if archiving purposes prevent deletion or if storage serves to assert, exercise or defend legal claims.

7.4 The right to restriction (Art. 18 GDPR)

You have the right to request that the controller restrict the processing of your data if you dispute the accuracy of the data, if the processing is unlawful, if you refuse to delete your personal data and instead request that processing be restricted, if the requirements for the purpose of processing cease to apply or if you have objected to the processing in accordance with Article 21(1), as long as it is not yet clear whether there are any legitimate reasons on our part which outweigh yours.

7.5 The right to data transferability (Art. 20 GDPR)

You have the right to the transferability of your personal data, which you have provided to our company in the form of a standard format, so that you can have your personal data forwarded to another responsible person without hindrance, provided, for example, that you have given your consent and the processing is carried out using an automated procedure.

7.6 The right of objection (Art. 21 GDPR)

You have the right to object at any time to the collection, processing or use of your personal data for the purposes of direct advertising or market and opinion research as well as general business data processing, unless we can prove compelling reasons worthy of protection for processing which outweigh your interests, rights and freedoms.

Furthermore, you cannot exercise your right of objection if a legal provision provides for the collection, processing or use of the data or obliges the collection, processing or use.

7.7 Right of appeal to the data protection supervisory authority (Art. 77 GDPR in connection with Art. 19 of the German Data Protection Act [BDSG])

You are granted the right to complain to the competent supervisory authority if you believe there has been an infringement in the processing of your personal data.

7.8 Right to revoke consent under data protection law (Art. 7 paragraph 3 GDPR)

You can revoke your consent to the processing of your personal data at any time and without giving reasons. This also applies to the revocation of declarations of consent given to us prior to the effective date of the EU General Data Protection Regulation.

8. Legal basis of the processing

In processing personal data for which we obtain the consent of the data subject, Art. 6 paragraph 1, sentence 1 a) of the General Data Protection Regulation (GDPR) serves as the legal basis.

In processing personal data required for the performance of a contract to which the data subject is a party, Article 6, paragraph 1, sentence 1 b) (GDPR) serves as the legal basis. This regulation also covers processing operations that are necessary to carry out pre-contractual measures.

Insofar as the processing of personal data is necessary to fulfil a legal obligation to which our company is subject, Art. 6 paragraph 1, sentence 1 c) (GDPR) serves as the legal basis.

If processing is necessary to protect a legitimate interest of our company or a third party and if the interests, fundamental rights and freedoms of the data subject do not outweigh the former interest, Art. 6 paragraph 1, sentence 1 f) (GDPR) serves as the legal basis for processing. The legitimate interest of our company lies in the performance of our business activities and in the analysis, optimisation and maintenance of the security of our online offer.

9. Transfer of data to third parties

We generally do not sell or rent user data. A transmission to third parties beyond the scope described in this data protection declaration only takes place if this is necessary for processing the respective requested service.

We only transfer data if there is a legal obligation to do so. This is the case if state institutions (e.g. law enforcement authorities) request information in writing or in the event of a court order.

A transfer of personal data to so-called third countries outside the EU/EEA area does not take place.

10. Legal or contractual regulations for the provision of personal data and possible consequences of failure to provide such data

We hereby point out that in certain cases (e.g. tax regulations) the provision of personal data is prescribed by law or may result from contractual regulations (e.g. information on the contractual partner). For example, for a contract to be concluded, it may be necessary for the person/contractual partner concerned to make his/her personal data available so that we can process his/her request (e.g. order) at all. There is an obligation to provide personal data, especially when concluding contracts. If in this case no personal data are provided, the contract cannot be concluded with the data subject. Before the data subject provides personal data, he or she may contact our data protection officer or the data controller. The data protection officer or the controller shall then inform the data subject whether the provision of personal data required is required by law or by contract or is necessary for the conclusion of the contract and whether the data subject’s concerns give rise to an obligation to provide the personal data or what consequences the failure to provide the data requested will have for the data subject.

11. Existence of automated decision making

As a responsible company, we refrain from automatic decision-making or profiling in our business relationships.