Data Protection

Thank you for your interest in our online shop. Protecting your privacy is very important to us. Below we would like to inform you in detail about the handling of personal data in accordance with Article 13 of the General Data Protection Regulation GDPR. If you have any questions or comments about this data protection information, you can send them to our data protection officer datenschutz@em-group.de or you can contact our Data Processing Manager:

E.M. Group Holding AG
Hettlinger Straße 9
86637 Wertingen
Germany

Phone:       +49 8272 6043387
Fax:           +49 8272 6043429
E-mail:       datenschutz@em-group.de


The processing of your personal data is divided into two categories:

  1. We process all necessary data for the purposes of contract execution and advertising, such as sending newsletters or advertising mailings. External service providers involved in the processing of the contract, such as logistics companies or payment service providers, receive your data to the required extent.
  2. When you visit our website, various information is automatically exchanged between your terminal device and our server, which may also be personal data. The information collected in this way is used, among other things, to optimize our website or to display advertising in your terminal's browser.

In this section you will learn more about the purposes for which personal data are processed, the legal basis for processing, the legitimate interests pursued by us or a third party and the categories of recipients

Data collection and use for contract execution and when opening an account

We process personal data for the purpose of contract processing and opening a customer account if you voluntarily provide it to us when placing an order, contacting us (e.g. via contact form or e-mail) or opening a customer account. The type of data collected is indicated in the respective input forms.

This mainly involves the following data:

  • First name, Surname
  • Invoicing and Shipping Address
  • Email address
  • Invoice and payment data
  • Date of birth, if applicable
  • Telephone number (if applicable)


Legal basis of processing Personal data for the purpose of contract processing is Article 6(1)(b) General Data Protection Regulation GDPR. If you subscribe to our newsletter with your e-mail address, we will send you a confirmation e-mail on the basis of Article 6 paragraph 1 letter c General Data Protection Regulation GDPR. On the basis of Para. 6 paragraph 1 letter f, we reserve the right to send you a newsletter for similar product offers after conclusion of a purchase, if you have not objected to this. As far as we do not use your contact data for advertising purposes, we may store the data collected for the execution of the contract until the expiry of the statutory or possible contractual warranty and guarantee rights. Upon expiry of this period, we shall retain the information of the contractual relationship required by commercial and tax law for the periods specified by law. For this period (regulatorily ten years from the conclusion of the contract), the data will be reprocessed solely in the event of an audit by the tax authorities.

The creation of the customer account is voluntary and is based on your consent within the meaning of Article 6 paragraph. 1 letter a General Data Protection Regulation GDPR. You can view and change the data stored about you in your customer account at any time.

The following data processing is also required to process the purchase contract:

Data transfer for contract fulfillment, Identity and credit rating

In order to handle payment, we share the payment details necessary for this with the credit institution responsible for payment and, where required, with the payment service provider authorized by us or the payment provider you have chosen when you placed your order. 

We use payment service providers based in a country outside the European Union. The transmission of personal data to this company only takes place within the scope of the necessity to fulfil the contract.

Where necessary, we verify your identity on the legal basis of Article 6(1)(b) and (f) General Data Protection Regulation GDPR, using information from service providers. The right to do so results from the protection of your identity and the avoidance of fraud attempts at our expense. The circumstance and the result of our inquiry will be added to your customer account or your guest account for the duration of the contractual relationship.

Credit assessment and scoring

Insofar as we are advancing the merchandise, for example for a purchase on invoice, we reserve the right to protect our legitimate interests by commissioning a specialized service company (credit agencies) to carry out an identity and credit check. For this purpose, we shall submit your personal data required for a credit check to the following company (companies):

CRIF Bürgel GmbH
Radlkoferstrasse 2
81373 München
Germany 

The credit report may include probability values ​​(scores), which are calculated using scientifically recognized mathematical and statistical methods. Among other things, your address may be taken into consideration in the calculations. We use the information obtained about the statistical probability of default for making a balanced decision with respect to the establishment, implementation or termination of the contract. Your legitimate interests will be taken into account in accordance with the legal requirements.

The legal basis for these transfers is Article 6(1)(b) and Article 6(1)(f) of the General Data Protection Regulation GDPR. Transmission on the basis of these provisions may only take place if this is necessary to safeguard the legitimate interests of our company or third parties and does not outweigh the interests of the fundamental rights and freedoms of the persons concerned, which require the protection of personal data.

You have the opportunity to make your views known to the company indicated above and to challenge the decision.

Data processing for advertising purposes

On the basis of Article 6(1)(f) General Data Protection Regulation GDPR, the data controller has a legitimate interest in data processing for web purposes. On this legal basis, we also reserve the right to use first name, surname, date of birth, street, postcode and city in order to use a personalized customer approach. The duration of the storage of personal data for advertising purposes is to be derived from the principle of whether the storage is necessary for advertising purposes. We pursue the principle of deleting data no later than two years after it has no longer been used for advertising purposes.

Own advertising purposes and advertising purposes of third parties

As far as you have concluded a contract with us or had an advertising material sent to you, we will carry you as an existing customer or interested party. In these cases, we process your name and address in order to send you information about new products and services. Within the scope of our legitimate interests, we reserve the right to transmit your postal contact data to selected contract partners from the mail order, telecommunications and providers of similar products who we have selected particularly carefully so that they can also inform you about their products.

Advertising in line with your interests

To ensure that you only receive information that is of interest to you, we categories and supplement your customer profile with further information. Both statistical information and information about you (e.g. basic data of your customer profile) are used for this purpose. The aim is to provide you with advertising that is solely oriented towards your actual or supposed needs and not to bother you with uninteresting advertising

Processing of advertising mailings

The advertising mailings are processed on our behalf by a service provider to whom we pass on your data.

Right to object       

You can object to data processing for the aforementioned purposes at any time free of charge, separately for the respective communication channel and with effect for the future. All that is required is an e-mail or a postal letter to the contact details listed under 2.

If you file an objection, the contact address concerned will be blocked for further promotional data processing. We would like to point out that in exceptional cases, advertising material may still be sent temporarily after receipt of your objection. This is technically due to the necessary lead time for advertisements and does not mean that we will not implement your objection.

Data use in signing up for e-mail newsletters

If you sign up to our newsletter, we use the data that is necessary, or separately provided by you, to send you our e-mail newsletter. You will receive   after you have entered your email address in the registration field, an email to confirm your registration. By entering your e-mail address in the registration field and clicking the corresponding button, it will be added to our e-mail distribution list. Your e-mail address will then be processed on the basis of your consent in accordance with Article 6(1)(a) General Data Protection Regulation GDPR. You can revoke your consent with effect for the future at any time. You can unsubscribe from the newsletter at any time and either by sending a message to the contact option described in the imprint or via a link provided at the end of each newsletter.

Data use for e-mail advertising without registration for the newsletter and your right of cancellation.

If we receive your e-mail address in connection with the sale of a product or service and you have not objected to the use of your e-mail address, we reserve the right to send you in the context of our legitimate interests offers for similar products, as those already purchased, from our range by e-mail. Your e-mail address will then be processed in accordance with Article 6(1)(f) General Data Protection Regulation GDPR. You can object to this use of your e-mail address at any time by sending a message to the contact options described in the imprint or via a link provided for this purpose at the end of the newsletter. 

Internet Technologies

Use of cookies

In order to make your visit to our website more pleasant, and to enable you to use certain functions, we use "cookies" on certain pages. If personal data are processed with these cookies, they are used on the basis of Article 6 paragraph 1 letter f General Data Protection Regulation GDPR. Our interest in optimizing our website is to be regarded as justified in the sense of the aforementioned legal basis. Cookies are small text files that are automatically stored on your terminal. Some of the cookies we use are deleted after the browser session, i.e. after you close your browser (these are called session cookies). Other cookies remain on your computer and enable us to recognize your browser on your next visit (persistent cookies). You can set your browser so that you are informed about the use of cookies and decide individually on whether to accept them or to deactivate the acceptance of cookies, just in certain cases or completely. If cookies are not accepted, our website may have limited functionality.

Rating reminder through Trusted Shops

Insofar as you have given us your express consent during or after placing your order by activating a checkbox to be reminded to submit a review of your order or clicking a button ("Review later") provided for this end, we will transmit your e-mail address to the Trusted Shops GmbH, Subbelrather Str. 15c, D-50823 Cologne (www.trustedshops.de), so that they can remind you by e-mail of the option to submit your evaluation. This consent may be revoked at any time by sending a message to the contact described below or directly to Trusted Shops.

Integration of the Trusted Shop Trustbadge

The Trusted Shops Trustbadge is embedded on this website to display our Trusted Shops seal of approval and any evaluations collected, as well as to offer Trusted Shops products to buyers following an order.

This serves to protect our predominant legitimate interests in the optimal marketing of our offer in the context of a balancing of interests. The Trustbadge and the services advertised with it are an offer of Trusted Shops GmbH, Subbelrather Str. 15C, 50823 Cologne.
When the Trustbadge is called up, the web server automatically saves a so-called server log file, which contains, e.g. your IP address, date and time of accessing, transferred data volume and the requesting provider (access data) and documents the accessing. This access data is not evaluated and is automatically overwritten no later than seven days after the end of your visit to the site.
Additional personal data shall only be transferred to Trusted Shops if you decide to use Trusted Shops products after completing an order or you have already registered to use it. In this case, the contractual agreement concluded between you and Trusted Shops applies.

Google Analytics

For the purpose of a design oriented on your demand and for the purpose of continuous optimization of our pages, we use Google Analytics, a web analysis service of Google Inc. ("Google"). In this context, pseudonymized user profiles are created and cookies are used. The information generated by the cookie about the use of this website as fir example the

  • Browser type/version,
  • used Operating system,
  • Referrer URL (the previously visited website),
  • Host name of the accessing computer (IP address),
  • Time of the server request,

will be sent to a server hosted by Google Inc. in the United States. The information is used to evaluate the use of the website, to compile reports on advertising activities and to provide further services associated with the use of the website and the Internet for the purposes of market research and demand-oriented design of these Internet pages. Google may also transfer this information to third parties where this is legally required, or where such third parties process the information on Google's behalf. Under no circumstances will your IP address be merged with other data from Google. The IP addresses are anonymized, so that an assignment is not possible (so-called IP masking).

You may refuse the use of cookies by changing the settings on your browser, we would point out, however, that you can use in this case not all the features of this website. Furthermore, you can prevent the collection of data generated by the cookie and related to the usage of the website (incl. your IP address) and the processing of the data by Google by downloading and installing the browser plugin available under the specified link. As an alternative to the browser add-on, especially for browsers on mobile devices, you can also prevent Google Analytics from collecting data by clicking this link to disable Google Analytics. This sets an opt-out cookie which prevents any future collection of your data when visiting this website. The opt-out cookie applies only in this browser and only for our website and is stored on your device. If you delete the cookies in this browser, you must set the opt-out cookie again. Further information on data protection in connection with Google Analytics can be found on the website of Google Analytics.

Rating function on this website

After your purchase we will send you an e-mail asking you to rate the purchased product. You can then leave your rating on this website. If you use the comment function on this site, the time at which you created the comment and your email address will be stored along with your comment, as well as your username, unless you are posting anonymously.

Storage time of the evaluation

Comments and associated data (e.g. IP address) are stored and remain on our website until the content commented upon has been completely deleted or the comments are required to be removed for legal reasons (libel, etc.).

Legal basis

The comments are stored on the basis of your consent per Para. 6 (1)(a) GDPR. You may revoke your consent at any time with future effect. An informal email making this request is sufficient. The data processed before we receive your request may still be legally processed.

Targeting

The targeting measures listed below and used by us are carried out on the basis of Article 6 paragraph 1 letter f General Data Protection Regulation GDPR. We want to ensure that you are only shown advertising that is oriented towards your actual or supposed interests through the targeting measures we use. Not to bother you with uninteresting advertisements is in our interest as well as in your interest.

Newsletter & Website Marketing

The newsletter is sent by a service provider (Emarsys Interactive Services GmbH, Stralauer Platz 34, 10243 Berlin) on our behalf.

Your personal data will be transferred to Emarsys and stored there. Emarsys offers extensive analysis possibilities about how newsletters are opened and used. In addition, we use Emarsys web tracking, which allows us to track your activities and behavior when you visit our website - for example, the categories you visit, products you purchase or leave without purchasing, as well as other information collected during your last sessions on the website. We use the data obtained and linked in this way to create a user profile in order to show you offers tailored to your individual interests in the newsletter and in the online shop.

Re-targeting

We also use retargeting technologies from Google AdWords. This enables us to make our online offer more interesting for you. For this purpose, a cookie is set with which interest data is collected using pseudonyms. This information is used to display interest-related advertisements for our offers on our partners' websites. No personal data is stored and no user profiles are combined with your personal data. The cookie is stored for a period of 30 days and then automatically deleted.

Google AdWords Remarketing

We use Google AdWords to advertise this website in Google search results and on third-party websites. For this purpose, the so-called remarketing cookie from Google is set when you visit our website, which automatically enables interest-based advertising by means of a pseudonymous cookie ID and on the basis of the pages you have visited. This serves to protect our predominant legitimate interests in the optimal marketing of our offer in the context of a balancing of interests.

Any additional processing will only take place if you have agreed with Google that your web and app browsing history will be linked to your Google Account and information from your Google Account will be used to personalize ads you see on the web. If you are logged in to Google while visiting our website, Google will use your data together with Google Analytics data to create and define target group lists for cross-device remarketing. To this end, Google temporarily links your personal data with Google Analytics data to form target groups.

Google AdWords Remarketing is a service of Google LLC (www.google.de). Google LLC is headquartered in the USA and is certified under the EU-US Privacy Shield. A current certificate can be viewed here. As a result of this agreement between the US and the European Commission, the latter has established that companies certified under the Privacy Shield have an adequate level of data protection.

You can disable the remarketing cookie by clicking this link. In addition, you can inform yourself about the setting of cookies at the Digital Advertising Alliance and apply the relevant settings.

Criteo

Criteo is a service of Criteo CIL - 32 Rue Blanche - 75009 Paris - France, specialized in creating and delivering personalized advertising via „Criteo Dynamic Retargeting” and „Criteo Sponsored Products“. They cooperate with online partners to offer advertising to users who visit this website or use their apps. Criteo collects navigation data like products viewed, but not personal data. Criteo also cooperates with publishers to display personalized advertising.

The goal is to show you advertising and products that are as relevant to you as possible - based on your current surfing and search behavior.

Example of a product ad with Criteo Dynamic Retargeting: For example, if you visit/use Website/App A and then Website/App B, we will show you personalized advertising based on your surfing/use behavior with respect to Website/App A.

Example of a product ad with Criteo Sponsored Products: For example, if you search the website of one of our partners (Criteo Sponsored Products), you will receive personalized ads based on this search.

With the help of Criteo's offer you should receive personalized advertising that is more relevant to you than the normal advertising that you receive without Criteo. More information about interest-based advertising can be found here.

Further information on data protection in connection with Criteo, as well as a deactivation option can be found on the Criteo Website.

Objection/Opt-Out possibility

In addition to the deactivation methods described above, you can also generally prevent the targeting technologies described by setting a corresponding cookie in your browser. You can also deactivate preference-based advertising using the preference manager available here.

Recipients outside the EU

With the exception of the processing described under the headings Internet technologies, we will not pass on your data to recipients based outside the European Union or the European Economic Area. The processing mentioned above causes a data transmission to the servers of the providers of tracking or targeting technologies commissioned by us. These servers are located in the USA. Data is transmitted in accordance with the principles of the so-called Privacy Shield and on the basis of so-called standard contractual clauses of the EU Commission.  

Your rights

In addition to the right to revoke your consent given to us, you have the following further rights if the respective legal requirements are met:

  • Right to Information about your personal data stored with us according to your personal data and the General Data Protection Regulation GDPR. In particular, you may obtain information on the purposes of the processing, the category of personal data, the categories of recipients from whom your data have been or will be disclosed, the planned storage period, the origin of your data, unless they have been collected directly from you,
  • Right to correction Incorrect or to completion of correct data in accordance with Para. 16 GDPR,
  • Right to Deletion of your data stored with us according to your request. Para. 17 General Data Protection Regulation GDPR insofar as no legal or contractual retention periods or other legal obligations or rights for further storage are to be observed,
  • Right to Restriction processing of your data according to Para. 18 GDPR to demand the restriction of the processing of your personal data, as far as the accuracy of the data is disputed by you, the processing is unlawful, but you reject its deletion and we no longer need the data, but you need this to assert, exercise or defend legal claims or you have objected to processing in accordance with Para. 21 GDPR,
  • Right to data transferability according to Para. 20 of the General Data Protection Regulation GDPR, i.e. the right to receive selected data stored by us about you in a common, machine-readable format, or to request transmission to another person responsible
  • The right of appeal to a supervisory authority as a rule, you can contact the supervisory authority of your usual place of residence or workplace or our headquarters


Right to object

Under the conditions of Para. 21 para. 1 GDPR data processing may be objected to for reasons arising from the particular situation of the data subject
The above general right of objection applies to all processing purposes described in this Privacy Information that are processed on the basis of Article 6(1)(f) General Data Protection Regulation GDPR. In contrast to the special right of objection directed at data processing for advertising purposes, under the General Data Protection Regulation GDPR we are only obliged to implement such a general objection if you give us reasons of overriding importance (e.g. a possible danger to life or health). In addition, it is possible to contact the supervisory authority responsible for us or our data protection officer.

Data security

All data transmitted by you personally, including your payment data, is transmitted using the generally accepted and secure standard SSL (Secure Socket Layer). SSL is a secure and proven standard, which is also used in online banking, for example. You can recognize a secure SSL connection by the attached s on the http (i.e. https://...) in the address bar of your browser or by the lock symbol at the bottom of your browser.

We use appropriate technical and organizational security measures to protect your stored personal data against manipulation, partial or complete loss, as well as against unauthorized access. Our security measures are continuously updated according to technological developments.

This version of the data protection regulation is valid from 24.05.2018.