Privacy

We appreciate your interest in our company and our products and services, and would like you to feel secure when contacting us regarding the protection of your personal information.

We process your personal information in accordance with the applicable statutory data protection requirements for the following purposes. Personal data is all information that relates to your person. This includes personal data (eg name, address, telephone number, e-mail address, IP address), billing data (bank details, order information), information about your financial situation (eg creditworthiness data), advertising and sales data (ie findings from customer data analyzes).

The Schotten & Hansen GmbH, August-Moralt-Strasse 1-3, D-86971 Peiting is responsible for the processing of your personal data in the sense of the DSGVO. If you have any questions or comments about the privacy of Schotten & Hansen GmbH, you can also contact our data protection officer. This is

Michael Pruss
Im Tal 12
86179 Augsburg
Telephone no.: +49 (0)821 / 43 39 38-0
E-Mail: michael.pruss (at) pruss-experts.de

We process your data only if an applicable law allows this. Among other things, we will base the processing of your data on the following legal bases. Please note that this is not an exhaustive list of legal bases, but is an example that should make the legal basis more transparent.

Consent (Art. 6 (1) sentence 1 lit. a), Art. 7 DSGVO, or Art. 9 (2) lit. a), Art. 7 GDPR):
We will process certain data only on the basis of your previously given explicit and voluntary consent. You have the right to revoke your consent at any time with effect for the future.

Fulfillment of a contract / pre-contractual measures (Article 6 (1) sentence 1 (b) DSGVO):
In order to initiate or execute your contract with Schotten & Hansen GmbH, we need access to certain data.

Fulfillment of a legal obligation (Art. 6 (1) sentence 1 (c) DSGVO):
Schotten & Hansen GmbH is subject to a number of statutory requirements. To meet these requirements, we must process certain data.

Preservation of legitimate interests (Article 6 (1) (1) (f) GDPR):
Schotten & Hansen GmbH will process certain data in order to safeguard its interests or those of third parties. However, this only applies if your interests do not predominate in individual cases.

4.1 Contracting and contract execution

Schotten & Hansen GmbH processes your personal data in order to initiate and fulfill the contract with you. It covers all contractual services, shipping and billing information and communication with you. The legal basis is the processing for contract fulfillment and contract execution. For the purpose of fulfilling the contract, we also transmit your data to third parties and processors (for example, transport service providers and publishers).

4.2 Advertising and Homepage

We use your name, address and e-mail address to send you information about goods, services and events of Schotten & Hansen GmbH. There is no transfer of your personal data to third parties for advertising purposes. Our homepage uses cookies exclusively for storing the preferred display language of the visitor. The data you give us when using the contact form on our website will be transmitted to our server, where it will be converted into an e-mail and sent to us. These data are collected and used exclusively for processing your request. If you use external links offered within the framework of our Internet pages, this Privacy Policy does not extend to these links. Insofar as we offer links, we affirm that at the time of the link setting no violations of the applicable law on the linked websites were identified. However, we have no influence on the compliance of other providers with privacy and security regulations. Therefore, please inform yourself on the websites of the other providers also about the privacy statements provided there.

4.3 Market research and data analysis

There is no transfer of your personal data to market and polling institutes. Data analyzes take place anonymously and serve exclusively to optimize your own sales activities.

4.4 Credit Check

The Schotten & Hansen GmbH transmits your data in the event of a credit risk (name, address, mailing address, information on the company and, if necessary, contract and claims data) for the purpose of creditworthiness and to check deliverability of the specified address and for the purpose of collection processing to the IHD Gesellschaft für Kredit und Forderungsmanagement mbH, Augustinusstr. 11 B, 50226 Frechen, and possibly to other cooperating credit reporting agencies. The legal basis of this transfer is Article 6 (1) of the DSGVO and Article 6 (1) of the DSGVO. Transfers on the basis of Art. 6 I f DSGVO may only be made to the extent necessary to safeguard the legitimate interests of our company and do not outweigh the interests or fundamental rights and freedoms of the data subject requiring the protection of personal data. For the purpose of deciding on the establishment, implementation or termination of the contractual relationship, we also collect or use automated probability values, which may include, among other things, address data. Detailed information about our contractual partner, the IHD, within the meaning of Art 14 DSGVO, i.e. the business purpose, the purpose of the local data storage, the legal basis, the data recipients of the IHD, the right of self-information and the right to deletion, correction and profiling can be found at www.ihd.de/datenschutz/Artikel14.html You can find information about their contract partners in the field of credit inquiry agencies at: www.ihd.de/datenschutz#vertragspartner

4.5 Matomo (formerly called Piwik)

This website uses the open-source web analysis service Matomo. Matomo uses technologies that make it possible to recognize the user across multiple pages with the aim of analyzing the user patterns (e.g. cookies or device fingerprinting). The information recorded by Matomo about the use of this website will be stored on our server. Prior to archiving, the IP address will first be anonymized. Through Matomo, we are able to collect and analyze data on the use of our website-by-website visitors. This enables us to find out, for instance, when which page views occurred and from which region they came. In addition, we collect various log files (e.g. IP address, referrer, browser, and operating system used) and can measure whether our website visitors perform certain actions (e.g. clicks, purchases, etc.). The use of this analysis tool is based on Art. 6(1)(f) GDPR. The website operator has a legitimate interest in the analysis of user patterns, in order to optimize the operator’s web offerings and advertising. If a corresponding agreement has been requested (e.g. an agreement to the storage of cookies), the processing takes place exclusively on the basis of Art. 6(1)(a) GDPR; the agreement can be revoked at any time.

IP anonymization

For analysis with Matomo we use IP anonymization. Your IP address is shortened before the analysis, so that it is no longer clearly assignable to you.

Hosting

We host Matomo exclusively on our own servers so that all analysis data remains with us and is not passed on.

Your personal data are also used by other companies that are working on behalf of Schotten & Hansen GmbH (processor) or in the context of business partnerships of Schotten & Hansen GmbH (third parties). Possible recipients of your data are e.g. Local publishers and service partners, IT service providers, transport service providers and consulting companies. For details we refer to the numbers 4.1 to 4.4.

Vimeo Without Tracking (Do-Not-Track)

This website uses plugins of the Vimeo video portal. The provider is Vimeo Inc., 555 West 18th Street, New York, New York 10011, USA. Whenever you visit one of our pages featuring Vimeo videos, a connection with the servers of Vimeo is established. In conjunction with this, the Vimeo server receives information about which of our sites you have visited. Vimeo also receives your IP address. However, we have set up Vimeo in such a way that Vimeo cannot track your user activities and does not place any cookies. We use Vimeo to make our online presentation attractive for you. This is a legitimate interest on our part pursuant to Art. 6(1)(f) GDPR. If a respective declaration of consent was requested (e.g. concerning the storage of cookies), processing shall occur exclusively on the basis of Art. 6(1)(a) GDPR; the given consent may be revoked at any time. Data transmission to the US is based on the Standard Contractual Clauses (SCC) of the European Commission and, according to Vimeo, on “legitimate business interests”. Details can be found here: https://vimeo.com/privacy. For more information on the handling of user data, please consult Vimeo’s data privacy policy at: https://vimeo.com/privacy

Account Engagement Marketing Automation System

Some forms and registrations for events on our website are linked to Account Engagement. We use Salesforce Marketing Cloud Account Engagement marketing automation software from Salesforce.com to deliver the web forms, event registration forms, informational material delivery and visitor behaviour analysis. Inc. 415 Mission Street, CA 94105, San Francisco, United States (and its representative in the European Union salesforce.com Germany GmbH, Erika-Mann-Str. 31, 80636, Munich, Bavaria, Germany) (hereinafter referred to as "Account Engagement").

If a user makes use of this option, the data entered in the input mask of the forms is transmitted to Account Engagement and stored. Account Engagement sets cookies on the user's terminal device for this purpose. The following data is stored and transmitted in the Account Engagement cookies:

Operating system Browser type IP address Number of page views

When sending the message, the following data will be stored:

• Salutation
• first and last name
• e-mail address
• postcode
• State
• country
• Other personal data actively provided to us, e.g. telephone number, the company and/or object name, the industry and/or further address data
• Category of request (products, sample request, care products, marketing/PR)
• message

Data may be transferred to Salesforce servers in the USA. The transfer of data is based on the European Commission's Implementing Decision of 10 July 2023 on the adequacy of the level of protection of personal data under the EU-US Data Privacy Framework. As of 17 July 2023, Salesforce is certified for the EU-US Data Privacy Framework, which means that no transfer mechanisms or additional measures regarding data protection are required for transfers of data via Salesforce's services.

For data transfers to those third countries that do not provide an adequate level of data protection based on a decision of the European Union, Salesforce provides the following mechanisms in the transfer:

• Binding Corporate Rules (BCR, binding internal data protection rules), available at compliance.salesforce.com/en/salesforce-bcrs.
• EU standard data protection clauses (Art. 46 para. 2 p. 1 lit. c DSGVO), as part of the order processing agreement with Salesforce.

Further information on data processing by Salesforce can be found in the corresponding data protection statements at. https://www.salesforce.com/de/company/privacy/ and https://www.salesforce.com/de/company/privacy/full_privacy/

Due to the longevity and the individual production character of our products, we would like to be able to provide information on follow-up requests (for example service requests, stain removal, supplementary orders) as long as possible. For this reason, we only delete or pseudonymise customer and order data after expiration of the legal retention periods, if you so desire. The basis for this is therefore a balance of interests for your and our benefit. Please send your deletion or pseudonymization request to kontakt (at) this domain

We are happy to provide you with information about which personal data you have stored with us and to whom we may have given them. You can have this data corrected, pseudonymized after expiry of the legal retention periods, or blocked for certain purposes and only processed to a limited extent. You have the right to object to the processing of your data for advertising purposes. You have the right to contact the competent supervisory authority, the Bavarian State Office for Data Protection Supervision, if you have any questions or complaints. You have the right to receive the personal data relating to you in a structured, common and machine-readable format or to have it transmitted by us to another person in charge. To exercise your rights, please contact kontakt (at) this domain

As of October 2023 (translation by google translator)