Source: https://eu.neuland.com/privacy-policy
Timestamp: 2020-07-14 12:19:04
Document Index: 125690810

Matched Legal Cases: ['Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 7', 'Art. 21', 'Art. 7', 'Art. 21', 'Art. 6', 'Art. 6', 'Art. 26']

Privacy Policy | Europe
Thank you for your visit to our website and your interest in our company. We see privacy as a customer-oriented quality issue. The protection of your personal data and the preservation of your rights are important to us.
With this privacy policy, we would like to inform all visitors of our website about the nature, scope and purpose of the personal data collected, used and processed by us and notify you about your rights.
Use of our website is possible without the provision of personal data. However, if you use the website services of our company, the processing of your personal data may be required.
The data collected automatically when you visit our websites or entered by you when you use its services are processed in accordance with the current statutory provisions for the protection of personal data.
If the processing of your personal data is required and there is no legal basis for such processing, we will obtain consent for the required purpose of the processing.
As the company responsible for processing, we have defined technical and organizational measures to ensure the highest possible level of protection of your personal data.
However, we point out that data transmission over the World Wide Web can generally have security gaps.
If you would like to make use of the services of our company and do not want to transmit information via the World Wide Web for this purpose, you can also contact us by phone.
1. Contact details of the party responsible for data processing
The party responsible according to the General Data Protection Regulation is:
Company: Neuland GmbH & Co. KG
Street: Am Kreuzacker 7
Postal code/location: 36124 Eichenzell / Germany
Phone: +49 6659 88-0
Email: info@neuland.com
Mr Stephan Hartinger
Phone: 08232 80988-70
Email: datenschutz@coseco.de
Every time you visit our website, server log file information, sent by your browser, is automatically recorded. This includes:
Note that this data cannot be assigned to a specific person. We use this technical access information exclusively for the following purposes:
To improve the attractiveness and usability of our websites,
To detect technical problems on our website early,
To deliver the contents of our website correctly,
And to provide law enforcement with the information necessary for prosecution in the event of a cyberattack.
These data are stored as a technical precaution for a maximum of 14 days to protect the data processing systems against unauthorized access.
3. Collection and transfer of personal data
We only use your personal data for the purposes stated on this information privacy page.
Our website includes the following input elements for the collection of personal data:
3.1 Registration on our website
3.1.1 Shop system (customer account))
We use your personal data – which you enter during registration to access the shop – to set up a password-protected direct access to your personal customer account. In order to set up a shop access, we need the following information from you:
Company name (B2B)
Additional Company Information (B2B)
Department (B2B)
Postal code and location, if required: state/province
After submitting the registration you will receive a confirmation email.
The personal data you enter will be collected and stored for the creation of the customer account and for internal and for our own purposes. Depending on the purpose of the processing, it may be forwarded to one or more processors, such as mail-order companies, provided that they are used to perform the service you request.
When processing personal information for which we obtain the consent of the data subject, Art. 6 para. 1 lit. a of the General Data Protection Regulation (GDPR) serves as the legal basis.
In the processing of personal information required to fulfil a contract of which the data subject is a party, Art. 6 para. 1 lit. b of the GDPR serves as the legal basis. This regulation also covers processing operations necessary to carry out pre-contractual actions.
Insofar as it is necessary to process personal data in order to fulfil a legal obligation to which our company is subject, Art. 6 para. 1, lit. 1 c) of the GDPR serves as the legal basis.
After setting up your customer account, you can save and manage your contact and address details, as well as your desired payment methods, and view data about your completed, open and recently sent orders. You are obligated to treat the personal access data confidentially and not to make it accessible to unauthorized third parties. The personal data given at registration can be corrected/supplemented at any time.
After you have finished communicating with us, you should always log out of your customer account.
Data transfer for completion of the order
To complete an order, we will pass on your data to the shipping company commissioned with the delivery, insofar as this is necessary for the delivery of ordered goods.
Depending on which payment service provider you select in the order process, we will forward the payment data collected to the credit institution commissioned with the payment and any payment service providers commissioned by us to process the payments or to the selected payment service.
In part, the selected payment service providers also collect this data themselves, provided that you create an account there. In this case, you must log in to the payment service provider with your access data during the ordering process.
In this respect, the privacy policy of the respective payment service provider applies.
Data transfer for credit check
If we make an advance payment, e.g. when purchasing on account, we reserve the right, in order to safeguard our legitimate interests, to obtain identity and credit information from specialized service providers (credit reference agencies).
For this purpose, we will transfer your personal data required for a credit check to the following companies:
10317 Berlin / Germany
If the processing is necessary to safeguard the legitimate interests of our company or a third party and if the interests, fundamental rights and freedoms of the person concerned do not outweigh the former interest, then Art. 6 para. 1 sentence 1 f) of the GDPR serves as the legal basis for the processing. The legitimate interest of our company is in the conduct of our business as well as in the analysis, optimization and maintenance of the security of our website.
3.1.2 Sending newsletters
On our website, we offer you the opportunity to subscribe to our newsletter, which informs you about our offers, products and information at regular intervals.
To receive our newsletter you need a valid email address.
To send a personalized newsletter, we need the following information from you:
After submitting the registration you will receive a confirmation email for legal reasons to complete your registration order for sending the newsletter.
The data mentioned here are used exclusively for sending the newsletter.
There is no disclosure of this personal data to third parties.
If we receive your email address in connection with the sale of a good or service and you have not objected to this, we reserve the right to send you regular offers for similar products, such as those already purchased, from our range by email.
According to Art. 7, para. 3 and Art. 21 of the General Data Protection Regulation (GDPR), you have the opportunity at any time to prevent the sending by terminating the newsletter and to revoke your consent to the use of your data for sending the newsletter.
There is a corresponding link in each newsletter for this.
Please be aware that we analyse the subscriber’s user behaviour when sending the newsletter. For this purpose, the newsletter emails that we send contain what are known as “web beacons” or “tracking pixels”, which are stored by our service provider, port-neo GmbH. To perform the analyses, port-neo GmbH links the aforementioned data and the web beacons with your email address. Links in newsletters also contain these tracking IDs. The legal basis for this data processing is Article 6(1)(f) GDPR.
This information is stored for as long as you subscribe to the newsletter. After unsubscribing, the data remain stored in anonymised or pseudonymised form.
You can prevent this kind of tracking by deactivating the display of images in your email software. In such case, however, the newsletter will not be displayed in full, and you may not be able to use all of its features.
3.1.3 Blog comment function
On our website, we offer you a blog and the opportunity to leave comments on individual blog posts. A blog is a web-based, typically public-accessible portal in which one or more people who are called bloggers can post articles or write down thoughts in so-called blog posts. Generally, you can leave comments on blog posts.
If you leave a comment in our blog, in addition to the comment, information about the time of the commentary input as well as the username (pseudonym) chosen by the person concerned will be saved and published. Furthermore, your IP address will be logged. This storage of the IP address is made for security reasons and in the event that the rights of third parties are infringed or illegal content is posted via a given comment. The storage of these personal data is therefore in your own interest, so that we can provide evidence in case of infringement, if necessary. There is no disclosure of this personal data to third parties, unless such disclosure is required by law or serves the purpose of legal defense.
3.1.4 Contact by mail or contact form
We offer you the opportunity to contact us by email and/or via a contact form.
If you contact us by email or via a contact form, the personal data you provide will be automatically saved.
Personally identifiable information you submit to us on a voluntary basis will be stored for the purposes of processing your request or contacting the data subject. There is no disclosure of this personal data to third parties.
3.1.5 Request for postal information material
On our website, we offer you the possibility to subscribe to our print media, which we use to inform you regularly about offers, products and information of the company.
For the postal delivery of information material we need the following information from you:
Such personally identifiable information provided to us by you on a voluntary basis will be used for the purposes of processing your request and providing you with informational materials. There is no disclosure of this personal data to third parties.
The request can be revoked at any time.
According to Art. 7, para. 3 and Art. 21 of the General Data Protection Regulation (DSGVO), you have the opportunity at any time to prevent the sending of postal information material and to revoke your consent to the use of your data for that purpose.
3.1.6 Product ratings
We offer you the opportunity to rate products on our site.
If you leave us a product rating, you will receive a confirmation email to complete your rating for security reasons. The evaluation will be published after an internal examination.
For a product evaluation we need the following information from you:
Personally identifiable information you submit to us on a voluntary basis will be stored and published for the purposes of processing your request. There is no disclosure of this personal data to third parties.
3.1.7 External payment service provider
For payment processing we use Payrexx AG, a payment institution authorized in Switzerland, to process payments (SEPA direct debit and credit card). For this purpose, Payrexx AG needs personal information from you. These are your name and address, account number and bank code or IBAN and BIC or credit card number (including validity period and 3-digit check digit), invoice amount and currency as well as the customer number. Payrexx AG may use this information for the purpose of payment processing and forward it to payment gateways. It is obliged to treat the information in accordance with the German Data Protection Acts - also explicitly the General Data Protection Regulation Article 28.
Order processing has been concluded for this purpose.
For further information on the processing of your data at Payrexx AG, please visit the following link: https://www.payrexx.com/site/assets/files/2592/privacy_policy.pdf
3.1.8 Scope of the processing of personal data in the application process in the online store
On our website, we offer you the ability to apply for a job online at Neuland GmbH & Co. KG by completing the application form provided on the site and sending it to us. Mandatory fields are marked as such on the form:
- CV/résumé
- Credentials/references
Your form data, including uploaded documents, photos, and other files, are transmitted to us by clicking on “Send”.
Personal data that you voluntarily transmit to us are processed and stored for the purposes of carrying out the application process. These personal data are not disclosed to third parties.
Where we process personal data for which we have obtained the consent of the data subject, Article 6(1)(a) of the EU General Data Protection Regulation (GDPR) serves as the legal basis.
Section 26 of the German Federal Data Protection Act (Bundesdatenschutzgesetz) (data processing for employment-related purposes) serves as the legal basis for the above-described processing in connection with the application process.
If your employment application is rejected, your data and application documents will be erased within six months of completion of the application process.
Article 6(1)(a) GDPR serves as the legal basis.
If you would like to apply for a position at our company, you must provide the personal data described in Section 3.1.8 that are necessary for carrying out the application process. If you do not provide these data to us, it is not possible to carry out the application process.
Non-existence of automated decision-making (including profiling)
We make you aware that in connection with applying for a position at our company, you will not be subjected to a decision based solely on automated processing, including profiling, that has a legal effect on you or substantially interferes with you in a similar manner.
3.1.9 Participation in the Creative-at-home project
If you participate in our Creative-at-home project, the personal data you provide us with will be processed for the purpose of carrying out this project. The conditions of participation can be found at https://creative-at-home.com/en/neuland-creative-at-home-terms-of-use/
The legal basis for this processing of personal data is Art. 6 Para. 1, No. 1 a) and b) of the General Data Protection Regulation (GDPR).
We collect and process the following data in detail:
Our website uses cookies in several places.
Detailed information and which cookies are used can be found in our Cookie Policy.
5. Use and use of tracking, analysis tools and social plugins
5.1 Use of Google Analytics
This website uses Google Analytics, a web analytics service provided by Google Inc. ("Google"). Google Analytics uses so-called "Cookies", text files that are stored on your computer and that allow an analysis of your use of our website. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. However, if IP anonymization is activated on this website, your IP address will be shortened by Google beforehand within member states of the European Union or other parties to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be sent to a Google server in the US and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide other services related to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. You can prevent the storage of cookies through a corresponding setting in your browser software; however, please note that if you do this, you may not be able to use all the features of this website to the fullest extent possible. In addition, you may prevent the collection by Google of the data generated by the cookie and related to your use of the website (including your IP address) as well as the processing of this data by Google by downloading the browser plug-in available under the following link and install: For more information, visit www.google.com/intl/de/analytics/privacyoverview.html (general information about Google Analytics and privacy). Please note that on this website Google Analytics has been extended by the code "gat._anonymizeIp ();" in order to ensure an anonymous collection of IP addresses (so-called IP-Masking).
5.2 Using the remarketing feature of Google Inc.
This website uses the remarketing feature of Google Inc. ("Google"). This feature enables the advertiser to target visitors to the website by displaying personalized, interest-based advertising ads for these visitors when they visit other websites on the Google Display Network. In order to carry out the analysis of the website usage, which forms the basis for the creation of interest-related advertisements, Google uses so-called cookies. For this, Google stores a small file with a sequence of numbers in the browsers of the visitors of the website. This number records website visits and anonymous data on website use. There is no storage of personal data of visitors to the website. If you visit another website on the Google Display Network, you'll see ads that are likely to include previously viewed product and information areas. You may permanently disable the use of cookies by Google by following the link below and downloading and installing the plug-in provided there: https://www.google.com/settings/ads/plugin . Alternatively, you may disable the use of third-party cookies by visiting the Network Advertising Initiative deactivation page at http://www.networkadvertising.org/choices/ and implementing the opt-out information listed there. For more information about Google Remarketing and Google's privacy policy, please visit: https://policies.google.com/technologies/ads?hl=en .
5.3. Use of YouTube components with advanced privacy mode
Here we use the option provided by YouTube "- enhanced privacy mode -".
When you visit a page that has an embedded video, it will connect to the YouTube servers and display the content on the website by notifying your browser.
According to information provided by YouTube, in "- enhanced privacy mode -" only data is transmitted to the YouTube server, in particular which of our web pages you have visited when watching the video. If you are logged in to YouTube at the same time, this information will be assigned to your member account on YouTube. You can prevent this by logging out of your member account before visiting our website.
Additional information about YouTube's privacy is provided by Google at the following link: https://www.youtube.com/static?template=terms&hl=de&gl=US
5.4. Use of Google reCAPTCHA
To protect the submission of forms (such as “password forgot form”) we use in certain cases the reCAPTCHA service of Google Inc. (1600 Amphitheater Parkway, Mountain View, CA 94043, USA). The service includes sending Google your IP address and any other data needed by Google for the reCAPTCHA service. This data is subject to the deviating privacy policies of Google. For more details, see the Google Privacy Center: http://www.google.de/intl/de/privacy
5.5. Google Tag Manager
This site uses Google Tag Manager, which allows the provider to manage site tags through a single interface. However, the Tag Manager itself, which uses the tags, works without cookies and does not collect personally identifiable information. The Tag Manager only triggers other tags, which in return may collect data. For these respective third-party providers, appropriate explanations can be found in this privacy policy. The Google Tag Manager does not use this data. If you have opted out cookies, it will be considered for all tracking tags used with Google Tag Manager. The tool will not change your cookie settings. See the Google Usage Policy for more information.
5.6. Use of Social Plugins
We use social plugins from various social networks. These plugins can be used, for example, to share content or to recommend products to others (e.g. with ‘pin boards’). The plugins are deactivated on the website as standard and thus do not send any data. You can activate the plugins by clicking on a social media button and giving your consent to data transfer in accordance with Art. 6(1)(a) GDPR. The plugins can, of course, also be deactivated again with one click. If these plugins are activated then your browser will form a direct connection with the servers of the relevant social network. This gives the social network the information that you have visited the corresponding page of our Internet presence. If you are logged in to the social network then the network can allocate the visit to your account. The purpose and scope of the data collection and the further processing and use of the data by social networks as well as your rights in this regard and the settings you can adjust to protect your privacy can be found in the data protection notes for each network and/or website. The relevant links are given below. Data can be sent to the networks from websites with active social plugins even if you are not logged on to the social networks. If you visit our online presences on social media your data can be collected and saved automatically for market research and advertising purposes. So-called use profiles are created from this data using pseudonyms. These can be used, for example, in order to place advertisements within and outside the platforms that supposedly match your interests. Cookies are generally placed on your terminal device for this purpose.
We use the following plugins on our Websites: Facebook and Twitter. If you do not want social networks to collect data about you via active plugins you can either select the function ‘block cookies from third-party providers’ in your browser settings or withdraw your consent to processing on the relevant social media Website (see below). Then the browser will not send any cookies to the servers if embedded content exists from other providers. However, with these settings it is also possible that not only the plugins but also other site-wide functions will no longer function.
Data processing is carried out on the basis of an agreement between joint controllers in accordance with Art. 26 GDPR, which you can view here:
Withdraw (Opt-Out):
5.7. Use of the Facebook ‘visitor event pixel’ to measure conversion
We use the ‘Visitor event pixel’ from Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA (‘Facebook’) within our Internet presence to measure conversion. This allows the tracing of user behaviour once the user is taken to the provider’s website after clicking on a Facebook advertisement. This process serves to assess the effectiveness of the Facebook advertisement for statistical and market research purposes and can contribute to optimising future advertising measures. The data that is collected is anonymous for us and thus does not allow identification of the users. However, the Facebook data is stored and processed further, so that a link is possible to the relevant user profile and Facebook is able to use the data for its own advertising purposes, in accordance with the Facebook data use guidelines (https://www.facebook.com/about/privacy/). In this way Facebook and its partners can plan advertisements within and outside Facebook. It is also possible to save a cookie on your computer for this purpose. Consent for the use of the visitor event pixel can only be declared by users aged over 13. If you are younger then please ask your parent or guardian for permission. Please click here if you wish to revoke your consent: https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen you need to be logged in to Facebook to do this.
If you do not have a Facebook account you can deactivate Facebook’s user-based advertisement at the website of the European Interactive Digital Advertising Alliance: http://www.youronlinechoices.com/de/praferenzmanagement/
5.8 Use of Facebook Insights
Neuland operates a Facebook fan page. The Facebook Insights tool makes it possible for operators of Facebook fan pages to track the interactions of users and fans and to analyse their trends. Various indicators and statistics are provided for this purpose. On the one hand, these focus on users themselves and reflect, for example, gender, age and regional distribution. On the other, they show the nature and scope of the interaction with the fan page. For example, reach, visits, and posts are analysed.
Facebook Insights makes it possible, inter alia, to obtain the following statistics with respect both to the current status of the Facebook page and to past trends on it:
- Post reach (broken down into organic, viral and paid interactions)
- Interactions (likes, comments, shares, clicks)
- Demographic analyses (country of origin, gender, age)
- Origin of likes
- Tabs most frequently opened
All data displayed and analysed in Facebook Insights are utilised in an anonymised manner, meaning that it is not possible to draw any conclusions about individual persons. Administrators are not able to access a user’s personal profile data.
6. Deletion, blocking and duration of storage of personal data
We process and store your personal data only for the period necessary to achieve the respective purpose of storage or as required by the various retention periods provided for by law.
After the expiry of a storage purpose or after expiry of the retention period provided for by law, the personal data will be routinely blocked and deleted for further processing in accordance with the statutory provisions.
If you have questions about your personal data, you can always contact us in writing.
7.1 The right to information (subsection Article 15 of the GDPR)
You have the right at any time to obtain information about which categories and information about your personal data are processed by us for what purpose and for how long and according to which criteria these data are stored and whether automated decision-making (including profiling) is used in this context. You also have the right to know to which recipients or categories of recipients your information has been disclosed or will be disclosed; in particular for beneficiaries in third countries or international organizations. In this case you also have the right to be informed about appropriate guarantees in connection with the transmission of your personal data.
In addition to the right of appeal to the supervisory authority and the right to information about the origin of your data, you have the right to cancellation, rectification and the right to restriction or opposition to the processing of your personal data.
In all cases mentioned above, you have the right to request from the data processor a free copy of your personal data processed by us. We are entitled to charge a reasonable administration fee for any additional copies you request or that go beyond the information rights of the data subject.
7.2 The right to rectification (Article 16 of the GDPR)
You have the right to demand the immediate correction of your incorrect personal data and to request the completion of incomplete personal data by means of a supplementary declaration, taking into account the purposes of the processing.
If you wish to exercise your right to rectification, you can contact our data protection officer or the party responsible for data processing at any time.
7.3 The right to erasure (Article 17 of the GDPR)
You have the right to request the immediate deletion of your data ("right to be forgotten") especially if the storage of the data is no longer necessary, you revoke your consent to processing, your data has been unlawfully processed or illegally collected and there is a legal obligation to delete under EU or national law.
However, the right to be forgotten does not apply where there is an overriding right to freedom of expression or information, where data retention is necessary for the fulfilment of a legal obligation (e.g. retention obligations), for archival purposes or saving for the exercise or defence of legal claims.
7.4 The right of restriction (Article 18 of the GDPR)
You have the right to request the party responsible for data processing to restrict the processing of your data if the accuracy of the data is disputed by you, if the processing is unlawful, if you refuse to a deletion of your personal data and if you require a restriction of processing, if the need for the processing purpose ceases or you have objected to the processing referred to in Article 21 para. 1, as long as it is not certain that our legitimate reasons prevail over yours.
7.5 The right to data portability (Article 20 of the GDPR)
You have the right to transfer your personal data, which you have provided to our company in the form of a standard format, so that you can have your personal data forwarded to another person without hindrance, if, for example, you give your consent and processing by means of an automated process procedure takes place.
7.6 The right to object (Article 21 of the GDPR)
You have the right to object to the processing of your personal data at any time, except in the presence of legitimate reasons. For example, legitimate reasons for data processing exist where the interests, rights and freedoms of the data subject prevail, or processing serves to assert, defend and exercise rights. In addition, you may at any time express a separate, explicit right to object to the processing of your personal data for the purpose of direct mail.
7.7 Right to lodge a complaint with a supervisory authority (Article 77 of the GDPR in conjunction with Section 19 BDSG)
You are granted the right to complain to the competent authority if you believe that your personal data has been infringed.
The supervisory authority responsible for our company is:
Der Hessische Datenschutzbeauftragte, PO Box 3163, 65021 Wiesbaden
Email: Poststelle@datenschutz.hessen.de, www. datenschutz.hessen.de
Telephone: +49 611 1408 – 0, Fax: +49 611 1408 – 900
7.8 Right to revoke data protection consent (Article 7 para. 3 of the GDPR)
You may withdraw your consent to the processing of your personal data at any time without giving reasons. This also applies to the revocation of declarations of consent issued to us prior to the entry into force of the EU General Data Protection Regulation.
8. Legal basis of processing (summary)
We generally do not sell or lend user data. Transmission to third parties beyond the scope described in this privacy policy will only take place if necessary to complete the requested service.
We transmit data only if there is a legal obligation to do so. This is the case when government agencies (e.g. law enforcement agencies) ask in writing for information or a court order is available.
The transfer of personal information to so-called third countries outside the EU/EEA area does not take place.
10. Legal or contractual regulations for the provision of personal information and possible consequences of non-provision
We hereby point out that the provision of personal data in certain cases (e.g. tax regulations) is required by law or may result from a contractual regulation (e.g. information about the contracting party). For example, it may be necessary for a contract that the person/the contracting party must provide their personal data, so that their request (e.g. order) can be processed by us at all. An obligation to provide personal data arises especially when concluding a contract. If no personal data is provided in this case, the contract cannot be concluded with the data subject. Prior to any provision of personal data by the data subject, the data subject may contact our data protection officer or the party responsible for data processing. The data protection officer or the party responsible for data processing then informs the data subject whether the provision of the personal data required is required by law or contract or for the conclusion of the contract and whether the data subject's concerns imply the provision of the personal data or what consequences a non-provision of the desired data has for the person concerned.
11. Legislative existence of automated decision-making (including profiling)
As a responsible company, we refrain from automatic decision-making or profiling in our business relationships.