Data protection

Table of contents

  • I. Name and address of the controller
  • II. contact details of the data protection officer
  • III General information on data processing
  • IV. Provision of the website and creation of log files
  • V. Use of cookies
  • VI Newsletter
  • VII Contact form and e-mail contact
  • VIII. Orders via our website
  • IX. Web analysis through Google Analytics
  • X. Social Media
  • XI. Integration of YouTube videos
  • XII Rights of the data subject

I. Name and address of the controller

The controller within the meaning of the General Data Protection Regulation and other national data protection laws of the member states as well as other data protection regulations is

office direkt Service-Center GmbH
In der Wässerscheid 49
53424 Remagen
info@office-direkt.de

II Contact details of the data protection officer

Data Protection Officer
office direkt Service-Center GmbH
In der Wässerscheid 49
53424 Remagen
dsb@office-direkt.de

III General information on data processing

1. scope of the processing of personal data

We only process our users' personal data to the extent necessary to provide a functional website and our content and services. The processing of our users' personal data only takes place regularly with the user's consent. An exception applies in cases where prior consent cannot be obtained for factual reasons and the processing of the data is permitted by law.

2 Legal basis for the processing of personal data

Insofar as we obtain the consent of the data subject for the processing of personal data, Art. 6 para. 1 lit. a GDPR serves as the legal basis.

When processing personal data that is necessary for the fulfilment of a contract, Art. 6 para. 1 lit. b GDPR serves as the legal basis. This also applies to processing operations that are necessary for the implementation of pre-contractual measures.

Insofar as the processing of personal data is necessary to fulfil a legal obligation to which our company is subject, Art. 6 para. 1 lit. c GDPR serves as the legal basis.

In the event that vital interests of the data subject or another natural person require the processing of personal data, Art. 6 para. 1 lit. d GDPR serves as the legal basis.

If the processing is necessary to safeguard a legitimate interest of our company or a third party and if the interests, fundamental rights and freedoms of the data subject do not outweigh the first-mentioned interest, Art. 6 para. 1 lit. f GDPR serves as the legal basis.

3 Data erasure and storage duration

The personal data of the data subject will be erased or blocked as soon as the purpose of storage no longer applies. Data may also be stored if this has been provided for by the European or national legislator in EU regulations, laws or other provisions to which the controller is subject. The data will also be blocked or deleted if a storage period prescribed by the aforementioned standards expires, unless there is a need for further storage of the data for the conclusion or fulfilment of a contract.

IV. Provision of the website and creation of log files

1. description and scope of data processing

Each time our website is accessed, our system automatically collects data and information from the computer system of the accessing computer.

The following data is collected:

  • Information about the browser type and version used
  • The user's operating system
  • The user's internet service provider
  • The IP address of the user
  • Date and time of access
  • Websites from which the user's system accesses our website
  • Websites that are accessed by the user's system via our website
  • Type of end device

The data is also stored in the log files of our system. This data is not stored together with other personal data of the user.

2 Legal basis for data processing

The legal basis for the temporary storage of data and log files is Art. 6 para. 1 lit. f GDPR.

3 Purpose of the data processing

The temporary storage of the IP address is necessary in order to deliver the website to the user's computer. The storage in log files serves the functionality, optimisation and security of our systems; an evaluation for marketing purposes does not take place. This is also our legitimate interest (Art. 6 para. 1 lit. f GDPR).

4 Duration of storage

The data will be deleted once the purpose no longer applies. When the website is made available, this is the case at the end of the session. Log files are deleted or anonymised after seven days at the latest.

5. possibility of objection and removal

The collection and storage of data in log files is absolutely necessary for operation; there is no possibility of objection.

V. Use of cookies

1. description and scope of data processing

Our website uses cookies for a user-friendly design. Some elements require the browser to be recognised (e.g. shopping basket, login).

In particular, cookies can be used to store

  • Items in the shopping basket
  • Login information

The data is technically pseudonymised. When calling up the website, we inform you by banner and refer to this declaration including opt-out instructions.

2. legal basis

Art. 6 para. 1 lit. f GDPR.

3. purpose of the processing

Facilitation of use; certain functions are not possible without cookies.

4. duration of storage, objection and removal options

You can deactivate or delete cookies in the browser; not all functions may then be available.

VI Newsletter

1. description and scope

When you subscribe to our newsletter, we collect your email address, IP address, date and time of registration. If you make a purchase, we may use your e-mail address for direct advertising for similar products.

No disclosure to third parties; use exclusively for dispatch.

2. legal basis

Consent: Art. 6 para. 1 lit. a GDPR; for existing customers § 7 para. 3 UWG.

3. purpose

Delivery of the newsletter; prevention of misuse.

4. duration of storage

Storage until cancellation; additional registration data usually seven days.

5. cancellation

Cancellation possible at any time via link in the newsletter or on the website; thus revocation of consent.

VII Contact form and e-mail contact

1. description and scope

In the contact form, we process the data entered (including name, address, email address, telephone number) as well as the IP address, date and time. Alternatively, you can contact us by e-mail. No disclosure to third parties.

2. legal basis

Consent: Art. 6 para. 1 lit. a GDPR; e-mail contact: Art. 6 para. 1 lit. f GDPR; in case of contract reference additionally Art. 6 para. 1 lit. b GDPR.

3. purpose

Processing of contact; prevention of misuse and IT security.

4. duration of storage

Deletion after completion of the conversation; additional data from the sending process after seven days at the latest.

5. revocation

Consent can be withdrawn at any time; the conversation cannot be continued if consent is withdrawn.

VIII. Orders via our website

1. description and scope of data processing

In order to process the contract, we collect data such as customer status, title, name, telephone number, date of birth, address, e-mail address; if the delivery address is different, additional information (optional company/department). Payment data is collected directly from the payment service provider (own data protection guidelines). Optional customer account with revocable storage. Order process encrypted via SSL.

2. purpose of data processing

  • Identification as a customer
  • Fulfilment of the order
  • Contact in case of queries
  • Invoicing
  • Warranty/liability/assertion of claims
  • Management of customer data

3. duration of storage

Storage until the expiry of statutory retention periods; beyond that in the event of a legal obligation (Art. 6 para. 1 lit. c GDPR) or consent (Art. 6 para. 1 lit. a GDPR).

4. legal basis

Consent (ordering process) and Art. 6 para. 1 lit. b GDPR.

5. transfer to third parties

Only to the extent necessary for contract processing and limited to the extent necessary; additionally in cases of consent (Art. 6 para. 1 lit. a), legal claims (Art. 6 para. 1 lit. f), legal obligation (Art. 6 para. 1 lit. c) or fulfilment of contractual obligations (Art. 6 para. 1 lit. b GDPR).

IX. Web analysis through Google Analytics

1. scope of the processing of personal data

This website uses Google Analytics (Google Inc.). Google Analytics uses cookies. The information is usually transferred to servers in the USA and stored there. If IP anonymisation is activated, the IP is truncated within the EU/EEA; only in exceptional cases in the USA. Google uses the information on behalf of the operator to analyse and provide reports. It is not merged with other Google data.

The extension "_anonymiseIp()" is used on this website.

For exceptional cases of transmission to the USA, Google refers to the EU-US Privacy Shield: https://www.privacyshield.gov/EU-US-Framework. Legal basis: Art. 6 para. 1 sentence 1 lit. f GDPR.

2nd legal basis

Art. 6 para. 1 lit. f GDPR.

3. purpose of the data processing

Analysis of surfing behaviour to improve the website and user-friendliness; IP anonymisation takes protection interests into account.

4. duration of storage

In the case of personal reference, this is immediately excluded; personal data is deleted immediately.

5. possibility of objection and removal

Cookies can be deactivated/deleted in the browser (limited functionality possible). Additional browser add-on: http://tools.google.com/dlpage/gaoptout?hl=de.

6. information of the third party provider

Google Dublin, Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001. Terms of use: http://www.google.com/analytics/terms/de.html, Data protection overview: http://www.google.com/intl/de/analytics/learn/privacy.html, Privacy policy: http://www.google.de/intl/de/policies/privacy.

X. Social Media

Use of social plugins from Facebook, Twitter, Google+, Instagram using the Shariff solution

Plugins are integrated via an HTML link ("Shariff"); no connection to the providers is established when the page is accessed. A new browser window with the provider page only opens when you click.

Data protection information of the providers:

XI. Integration of YouTube videos

  1. We have integrated YouTube videos that are stored on ##########_31__.com and can be played directly.
  2. YouTube receives information about the visit to the subpage; in addition, the data mentioned under III. is transmitted. When you log in, you are assigned to your Google account. YouTube stores user profiles for advertising, market research and customised design purposes. You have the right to object to YouTube.
  3. Further information: https://www.google.de/intl/de/policies/privacy; EU-US Privacy Shield: https://www.privacyshield.gov/EU-US-Framework.

XII Rights of the data subject

If your personal data is processed, you have the following rights:

1. right to information

Information about processing purposes, categories, recipients, storage duration, rights, origin, automated decisions/profiling, as well as transfers to third countries (including suitable guarantees).

2. right to rectification

Incorrect or incomplete data must be corrected or completed immediately.

3. right to restriction of processing

Possible, among other things, in the case of disputed data, unlawful processing, no longer required or objection pursuant to Art. 21 para. 1 GDPR.

4. right to erasure

Immediate erasure if the conditions are met (e.g. fulfilment of purpose, revocation, objection, unlawfulness, legal obligation, information society services). Information to third parties when data is published; exceptions include freedom of expression, legal obligations, public health, archiving/research purposes, legal claims.

5. right to information

Recipients must be informed about rectification/deletion/restriction; information about this on request.

6. right to data portability

Receipt of the data provided in a common, machine-readable format and transmission to other responsible parties, insofar as technically feasible and the rights of third parties are not affected.

7. right to object

Objection for special reasons to processing in accordance with Art. 6 para. 1 lit. e/f GDPR; always possible in the case of direct advertising (incl. profiling).

8. right to withdraw consent

Revocation at any time with effect for the future.

9. automated decision-making in individual cases including profiling

No exclusively automated decision with legal effect or significant impairment, except in the cases permitted by the GDPR; then with appropriate protective measures.

10. right to lodge a complaint with a supervisory authority

Right to lodge a complaint with a supervisory authority, in particular at the place of residence, place of work or place of the alleged infringement. Responsible: The State Commissioner for Data Protection and Freedom of Information Rhineland-Palatinate.

Status: 18.03.2022