Privacy Policy

1. General, responsible person, data protection officer

Preamble

PFREUNDT GmbH (hereinafter referred to as »PFREUNDT«, »we«, »us«, »our»«) provides services that process data and in particular personal data. This privacy notice applies to the Web Portal, the PFREUNDT App, as well as all websites, platforms and services that refer to the PFREUNDT Services and are operated by PFREUNDT (together: »Services«), unless they are covered by a separate privacy policy the provision of this Internet presence and all related actions.

Note on the responsible entity

The responsible party pursuant to Article 4 (7) of the General Data Protection Regulation (hereinafter: »GDPR«) and other national data protection laws of the member states as well as other data protection provisions is:

PFREUNDT GmbH
Robert-Bosch-Str. 5
46354 Südlohn | Germany
Phone: +49 (0) 2862 98 07 0
E-Mail: info(at)pfreundt.de

Data Protection Officer

We have appointed a data protection officer for our company:

Thorsten Schröers | SAFE-PORT Consulting GmbH
Hülshoff-Str. 7
59469 Ense | Germany
Phone: +49 (0) 2938 977 978
E-Mail: datenschutz(at)pfreundt.de

Scope of the processing of personal data

We process personal data of our users only insofar as this is necessary for the provision of a functional website and our content and services. The processing of personal data of our users is regularly only carried out with the consent of the user. An exception applies in those cases where obtaining prior consent is not possible for actual reasons and the processing of the data is permitted by legal regulations.

Legal basis for the processing of personal data

Insofar as we obtain the consent of the data subject for processing operations involving personal data, Article 6 (1) lit. a GDPR serves as the legal basis for the processing of personal data.

When processing personal data that is ­necessary for the performance of a contract ­to which ­the data subject is a party, Article 6 (1) lit. b GDPR serves as the legal basis. This also applies to processing operations that are necessary for the performance of pre-contractual measures.

Insofar as the processing of personal data is necessary for the fulfillment of a legal obligation to which our company is subject, Article 6 (1) lit. c GDPR serves as the legal basis.

In the event that vital interests of the data subject or another natural person make it necessary to process personal ­data, Article 6 (1) lit. d GDPR serves as the legal basis.

If the processing is necessary to protect a legitimate interest of our company or a third party and the interests, fundamental rights and freedoms of the data subject do not override the former interest, Article 6 (1) lit. f GDPR serves as the legal basis for the processing.

Data deletion and storage duration

The personal data of the data subject shall be deleted or blocked as soon as the purpose of the storage no longer applies. Storage may also take place if this has been provided for by the European or national legislator in Union regulations, laws or other provisions to which the controller is subject. Data will also be blocked or deleted if a storage period prescribed by the aforementioned standards expires, unless there is a need for further storage of the data for the conclusion or performance of a contract.

Note on data transfer to the USA

Among other things, tools from companies based in the USA are integrated on our website. If these tools are active, your personal data may be transferred to the US servers of the respective companies. We would like to point out that the USA is not a safe third country in the sense of EU data protection law. US companies are obliged to hand over personal data to security authorities without you as a data subject being able to take legal action against this. It can therefore not be ruled out that US authorities (e.g. intelligence services) process, evaluate and permanently store your data located on US servers for monitoring purposes. We have no influence on these processing activities. We have concluded valid appropriate guarantees with the service providers for the transfer to these third countries in accordance with Article 46 (2) GDPR. If you have any further questions, please feel free to contact our data protection officer.

A data transfer to the USA for statistical or marketing purposes takes place exclusively on the basis of consent by the data subject (Article 6 (1) lit. a GDPR).

2. Use of our services and offers

Provision of the website, CDN and creation of log files

Informational use / description and scope of data processing

For the use of our website for information purposes only, it is generally not necessary for you to provide personal data. Rather, we collect and use in this case only those of your data that your Internet browser automatically transmits to us, such as:

  • Date and time of the retrieval of one of our Internet pages
  • Your browser type
  • the browser settings
  • the operating system used
  • the last page you visited
  • the amount of data transferred and the access status (file transferred, file not found, etc.)
  • Your IP address.
Purpose

We collect and use this data during an informational visit exclusively in non-personal form. This is done to enable the use of the Internet pages you have accessed, for statistical purposes and to improve our Internet offering. The temporary storage of the IP address by the system is necessary to enable delivery of the website to the user's computer. For this purpose, the user's IP address must remain stored for the duration of the session.

Legal basis for data processing

The legal basis for the temporary storage of the data and the log files is Article 6 (1) lit. f GDPR.

Duration of storage

The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. In the case of the collection of data for the provision of the website, this is the case when the respective session has ended. In the case of storage of data in log files, this is the case after fourteen days at the latest; storage beyond this is possible. In this case, the IP addresses of the users are deleted or alienated, so that an assignment of the calling user is no longer possible. Access to the log data is only possible directly and exclusively for administrators.

Possibility of objection and removal

The collection of data for the provision of services and the storage of data in log files is mandatory for the operation of the services offered. Consequently, there is no possibility of objection on the part of the user.

More information

The provision of personal data is required for the use of our online store. For more information on the use of these services, please refer to the section »Use of offers«.

Website hosting

This website is hosted by an external service provider (hoster). The personal data collected on this website is stored on the hoster's servers. This may include IP addresses, contact requests, meta and communication data, contract data, contact data, names, website accesses and other data generated via a website.

Our hoster will only process your data to the extent necessary to fulfill its service obligations and will follow our instructions regarding this data.

If we commission service providers with the processing of data, this is always done in accordance with Article 28 GDPR on the basis of a so-called contract for commissioned processing in order to ensure data protection-compliant processing, we have ­concluded a contract for commissioned processing ­with our hoster.

For further information see section »PFREUNDT E-Shop«.

Cloudflare

Our »PFREUNDT E-Shop« uses the service »Cloudflare«. The provider is Cloudflare Inc, 101 Townsend St., San Francisco, CA 94107, USA (hereinafter »Cloudflare«).

Cloudflare offers a globally distributed content delivery network with DNS. This technically routes the transfer of information between your browser and our website through Cloudflare's network. This enables Cloudflare to analyze traffic between your browser and our website and serve as a filter between our servers and potentially malicious traffic from the Internet. In doing so, Cloudflare may also use cookies or other technologies to recognize Internet users, but these are used solely for the purpose described here.

The use of Cloudflare is based on our legitimate interest in providing our website as error-free and secure as possible (Article 6 (1) lit. f GDPR).

Data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here:

https://www.cloudflare.com/privacypolicy/.

You can find more information about security and privacy at Cloudflare here:

https://www.cloudflare.com/privacypolicy/.

To ensure data protection-compliant processing, we have concluded an order processing contract with Cloudflare.

Cookies use

Description and scope of data processing

Our website uses cookies. Cookies are text files that are stored in the Internet browser or by the Internet browser on the user's computer system. When a user accesses a website, a cookie may be stored on the user's operating system. This cookie contains a characteristic string of characters that enables the browser to be uniquely identified when the website is called up again.

When calling up our website, the user is informed about the use of cookies by a Consent banner and his consent to the processing of personal data used in this context is obtained and documented in accordance with data protection law. In this context, there is also a reference to this privacy policy. There is also a reference in this context to how the storage of cookies can be prevented in the browser settings.

You can determine whether cookies can be set and retrieved yourself through the settings in your browser. You can, for example, completely deactivate the storage of cookies in your browser, restrict it to certain web pages or configure your browser so that it automatically notifies you as soon as a cookie is to be set and asks you for feedback on this. For the full functionality of our website, however, it is necessary for technical reasons to allow the above.

Each browser differs in the way it manages cookie settings. This is described in the help menu of each browser, which explains how you can change your cookie settings. You can find these for the respective browsers under the following links:

Internet Explorer: https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies

Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen

Chrome: https://support.google.com/chrome/answer/95647?hl=de&hlrm=en

Safari: https://support.apple.com/de-de/guide/safari/sfri11471/mac

Opera: https://help.opera.com/de/latest/web-preferences/#cookies

Please note that if you do not accept cookies, the functionality of our website may be limited.

Legal basis for data processing

In part, the cookies serve to simplify the ordering process by storing settings (e.g. remembering the contents of a virtual shopping cart for a later visit to the website). Insofar as personal data is also processed by individual cookies used by us, the processing is carried out in accordance with Article 6 (1) 1 lit. b GDPR for the performance of the contract. The legal basis for the processing of personal data using technically necessary cookies is Article 6 (1) lit. f GDPR. The legal basis for the processing of personal data using cookies for analysis purposes is Article 6 (1) lit. a GDPR if the user has given his consent in this regard.

Purpose of data processing

If there is a use of technically necessary cookies:

The purpose of using technically necessary cookies is to simplify the use of websites for users. Some functions of our website cannot be offered without the use of cookies. For these, it is necessary that the browser is recognized even after a page change. We require cookies for the following applications: CDN, use of security tools, storage of cookie hint banner settings (Consent Tool) and the provision of our store system (purchase processing in the shopping cart, use of interactive elements, adoption of language settings, optimization of the functionality and design of our website).

In these purposes also lies our legitimate interest in the processing of personal data according to Article 6 (1) lit. f GDPR.

The user data collected through technically necessary cookies are not used to create user­ profiles.

Duration of storage, possibility of objection and elimination

Cookies are stored on the user's computer and transmitted from it to our site. Therefore, you as a user also have full control over the use of cookies. By changing the settings in your Internet browser, you can disable or restrict the transmission of cookies. Cookies that have already been stored can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to use all functions of the website in full.

You will be informed about the exact storage period in the notes in our Consent Tool. If consents have also been made there, you can object there (also subsequently).

Cookie consent with the Cookie Consent Tool

Our website uses cookie consent technology to obtain your consent to the storage of certain cookies on your terminal device and to document this in accordance with data protection law.

Description and scope of data processing

When you enter our website, your consents and other declarations regarding cookie use are obtained via our Consent Tool. The Consent Tool then stores a cookie in your browser in order to be able to assign the consents granted to you or their revocation.

Legal basis for data processing

The Consent Tool is used to obtain the legally required consent for the use of cookies. The legal basis for this is Article 6 (1) lit. c GDPR.

Purpose of data processing

The purpose of providing the Consent Tool is to comply with overriding legislation and to inform users in what context cookies are used on this website.

Possibility of objection and removal

The data collected by the Consent tool remains stored until you delete the Consent cookie yourself or the purpose for storing the data no longer applies. Mandatory legal storage obligations remain unaffected.

Listing Cookies / Website

Essential

Name

Provider

Purpose

Lifetime

PHPSESSID

Website operator

Stores user session status across page requests.

Expires after closing the page

cc_analytics
cc_media

Website operator

Saves the user selection for handling cookies.

1 year

__csrf_token-1
session-1

Website operator (e-shop)

Stores user session status across page requests.

Expires after closing the page

_pfreundt_web_
portal...   

Website operator (web portal)

Stores user session status across page requests.

Expires after closing the page

 

Statistics
 

Name

Provider

Purpose

Lifetime

_ga
__utma

Google Analytics

Distinguishes between users and sessions. Used to calculate statistics about new and returning visitors. The cookie is updated every time data is sent to Google Analytics.

2 years

_gat

Google Analytics

Used to throttle the request rate, limiting data collection on busy websites.

10 minutes

_gid

Google Analytics

Is relevant for tracking user behavior and is used to calculate statistics about new and returning visitors. The cookie is updated every time data is sent to Google Analytics.

1 day

 

Media playback
 

Name

Provider

Purpose

Lifetime

NID

Google

Used to display Google Maps content.

Other cookies related to Google Maps (via domain google.com): 1P_JAR, __Secure-3PAPISID, __Secure-3PAPISID, __Secure-3PAPISID, __Secure-3PAPISID, __Secure-SSID, __Secure-SSID, ANID, APISID, CGIC, CGIC, CONSENT, DV, HSID, OTZ, SAPISID, SEARCH_SAMESITE, SIDCC, SID, SNID, SSID

6 months

VISITOR_
INFO1_LIVE

YouTube

Used to display YouTube content.

Other cookies related to YouTube (via domain youtube.com): APISID, CONSENT, HSID, LOGIN_INFO, SAPISID, SID, SIDCC, SSID, YSC, __Secure-3PAPISID, __Secure-3PSID, __Secure-APISID, __Secure-HSID, __Secure-SSID.

Other cookies related to YouTube (via domain . doubleclick.net): DSID, IDE

6 months

 

Plugins and tools

Google Analytics

We use functions of the web analytics service Google Analytics. The provider is Google Ireland Limited (»Google«), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics enables us to analyze the behavior of website visitors. In doing so, the website operator receives various usage data, such as page views, duration of visit, operating systems used and origin of the user. This data may be summarized by Google in a profile that is assigned to the respective user or their end device.

Furthermore, we can record Google Analytics, among other things, your mouse and scroll movements and clicks. Furthermore, Google Analytics uses various modeling approaches to complement the collected data sets and uses machine learning technologies in data analysis.

Google Analytics uses technologies that enable the recognition of the user for the purpose of analyzing user behavior (e.g. cookies or device fingerprinting). The information collected by Google about the use of this website is usually transferred to a Google server in the USA and stored there.

The use of this analysis tool is based on Article 6 (1) lit. f GDPR. The website operator has a legitimate interest in analyzing user behavior in order to optimize both its website and its advertising. If a corresponding consent has been requested (e.g. consent to store cookies), the processing is based exclusively on Article 6 (1) a GDPR; the consent can be revoked at any time.

Data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here:

https://privacy.google.com/businesses/controllerterms/mccs/.

We have activated the IP anonymization function on this website. This means that your IP address is shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area before being transmitted to the USA. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

You can prevent the collection and processing of your data by Google by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de.

For more information on how Google Analytics handles user data, please see Google's privacy policy:

https://support.google.com/analytics/answer/6004245?hl=de.

We have concluded an order processing agreement with Google and fully implement the strict requirements of the German data protection authorities when using Google Analytics.

Google Remarketing (only »PFREUNDT E-Shop«)

This website uses the functions of Google Analytics Remarketing. The provider is Google Ireland Limited (»Google«), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Remarketing analyzes your user behavior on our website (e.g. clicking on certain products) in order to classify you in certain advertising target groups and subsequently play suitable advertising messages to you when you visit other online offers (remarketing or retargeting).

Furthermore, the advertising target groups created with Google Remarketing can be linked with Google's cross-device functions. In this way, interest-based, personalized advertising messages that have been adapted to you depending on your previous usage and surfing behavior on one end device (e.g. cell phone) can also be displayed on another of your end devices (e.g. tablet or PC).

If you have a Google account, you can object to personalized advertising at the following link:

https://www.google.com/settings/ads/onweb/.

The use of Google Remarketing is based on Article 6 (1) lit. f GDPR. The website operator has a legitimate interest in marketing its products as effectively as possible. If a corresponding consent has been requested, the processing is based exclusively on Article 6 (1) lit. a GDPR; the consent can be revoked at any time.

Further information and the privacy policy can be found in Google's privacy policy at:

https://policies.google.com/technologies/ads?hl=de.

To create target groups, we use, among other things, Google Remarketing's customer matching. In this process, we transfer certain customer data (e.g., e-mail addresses) from our customer lists to Google. If the customers in question are Google users and logged into their Google account, they are shown matching advertising messages within the Google network (e.g. on YouTube, Gmail or in the search engine).

Google Ads

The website operator uses Google Ads. Google Ads is an online advertising program of Google Ireland Limited (»Google«), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Ads enables us to display advertisements in the Google search engine or on third-party websites when the user enters certain search terms on Google (keyword targeting). Furthermore, targeted advertisements can be played on the basis of user data available at Google (e.g. location data and interests) (target group targeting). As the website operator, we can evaluate this data quantitatively by analyzing, for example, which search terms led to the display of our advertisements and how many ads resulted in corresponding clicks.

The use of Google Ads is based on Article 6 (1) lit. f GDPR. The website operator has a legitimate interest in marketing its service products as effectively as possible.

Data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here:

https://policies.google.com/privacy/frameworks and https://privacy.google.com/businesses/controllerterms/mccs/.

Google Conversion Tracking (only »PFREUNDT E-Shop«)

This website uses Google Conversion Tracking. The provider is Google Ireland Limited (»Google«), Gordon House, Barrow Street, Dublin 4, Ireland.

With the help of Google conversion tracking, Google and we can recognize whether the user has performed certain actions. For example, we can evaluate which buttons on our website were clicked how often and which products were viewed or purchased particularly frequently. This information is used to create conversion statistics. We learn the total number of users who clicked on our ads and what actions they took. We do not receive any information with which we can personally identify the user. Google itself uses cookies or comparable recognition technologies for identification.

The use of Google conversion tracking is based on Article 6 (1) lit. f GDPR. The website operator has a legitimate interest in analyzing user behavior in order to optimize both its website and its advertising. If a corresponding consent has been requested (e.g. consent to store cookies), the processing is based exclusively on Article 6 (1) lit. a GDPR; the consent can be revoked at any time.

You can find more information about Google conversion tracking in Google's privacy policy:

https://policies.google.com/privacy?hl=de.

Google Maps

This site uses the map service Google Maps. The provider is Google Ireland Limited (»Google«), Gordon House, Barrow Street, Dublin 4, Ireland.

To use the functions of Google Maps, it is necessary to store your IP address. This information is usually transferred to a Google server in the USA and stored there.

The provider of this site has no influence on this data transmission.

The use of Google Maps is in the interest of an attractive presentation of our online offers and an easy location of the places indicated by us on the website. This represents a legitimate interest within the meaning of Article 6 (1) lit. f GDPR. If a corresponding consent has been requested, the processing is based exclusively on Article 6 (1) lit. a GDPR; the consent can be revoked at any time.

Data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here:

https://privacy.google.com/businesses/gdprcontrollerterms/ and https://privacy.google.com/businesses/gdprcontrollerterms/sccs/.

More information on the handling of user data can be found in Google's privacy policy:

https://policies.google.com/privacy?hl=de.

YouTube with enhanced privacy

Our website embeds videos from YouTube. The operator of the pages is Google Ireland Limited (»Google«), Gordon House, Barrow Street, Dublin 4, Ireland.

We use YouTube in extended privacy mode. According to YouTube, this mode means that YouTube does not store any information about visitors to this website before they watch the video. However, the disclosure of data to YouTube partners is not necessarily excluded by the extended data protection mode. Thus, YouTube - regardless of whether you watch a video - establishes a connection to the Google DoubleClick network.

As soon as you start a YouTube video on this website, a connection to the YouTube servers is established. This tells the YouTube server which of our pages you have visited. If you are logged into your YouTube account, you enable YouTube to assign your surfing behavior directly to your personal profile. You can prevent this by logging out of your YouTube account.

Furthermore, after starting a video, YouTube may store various cookies on your end device or use comparable recognition technologies (e.g. device fingerprinting). In this way, YouTube can obtain information about visitors to this website. This information is used, among other things, to collect video statistics, improve the user experience, and prevent fraud attempts.

If necessary, further data processing operations may be triggered after the start of a YouTube video, over which we have no control.

If a corresponding consent was requested, the processing is based exclusively on Article 6 (1) lit. a GDPR; the consent can be revoked at any time. YouTube is used in the interest of an appealing presentation of our online offers. This represents a legitimate interest within the meaning of Article 6 (1) lit. f GDPR.

When using this plugin, data transfer to the USA is not excluded. See also the section »Notice on data transfer to the USA«.

For more information about privacy at YouTube, please see their privacy policy at: https://policies.google.com/privacy?hl=de.

3. Use of offers

Newsletter

Description and scope of data processing

On our website there is the possibility to subscribe to a free newsletter. When registering for the newsletter, the data from the input mask is transmitted to us. In order to be able to register for our e-mail newsletter service, we require, in addition to your consent under data protection law, at least your e-mail address to which the newsletter is to be sent. In addition, the date and time of registration are collected.

For the processing of data, your consent is obtained during the registration process and reference is made to this privacy policy.

For the newsletter dispatch we use the so-called double opt-in procedure, i.e. we will only send you the newsletter if you first confirm your registration via a confirmation e-mail sent to you for this purpose by means of a link contained therein. In this way, we want to ensure that only you yourself, as the owner of the e-mail address provided, can register for the newsletter. Your confirmation in this regard must be made within 5 working days after receipt of the confirmation e-mail, otherwise your newsletter registration will be automatically deleted from our database.

Legal basis for data processing

The legal basis for data processing for newsletter marketing is Article 6 (1) lit. a GDPR.

Purpose of data processing

Any further information is voluntary and will be used to address you personally and to personalize the content of the newsletter as well as to clarify queries regarding the e-mail address. The collection of other personal data during the registration process serves to prevent misuse of the services or the e-mail address used.

Duration of storage

The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. Accordingly, the user's e-mail address is stored as long as the subscription to the newsletter is active. The other personal data collected during the registration process is usually deleted after a period of seven days.

Possibility of objection and removal

You can cancel a newsletter you have subscribed to with us at any time. To do so, you can either send us an informal e-mail to the above contact details or use the link at the end of the newsletter to cancel. The revocation does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation. This also enables the revocation of consent to the storage of personal data collected during the registration process.

More information

We use rapidmail for sending newsletters. The provider is rapid GmbH, Wentzingerstr. 21, 79106 Freiburg, Germany. rapidmail is a service that can be used, among other things, to organize and analyze the sending of newsletters. The data you enter for the purpose of receiving the newsletter will be stored on rapidmail's servers in Germany. If you do not wish to have your data analyzed by rapidmail, you must unsubscribe from the newsletter. For this purpose, we provide a corresponding link in each newsletter message. The dispatch service provider may use the data of the recipients in pseudonymous form, i.e. without assignment to a user, to optimize or improve its own services, e.g. for the technical optimization of the dispatch and the presentation of the newsletters or for statistical purposes.

With the help of rapidmail, it is possible for us to analyze our newsletter campaigns. Among other things, we can see whether a newsletter message was opened and which links, if any, were clicked. In this way, we can determine, among other things, which links were clicked on particularly often. rapidmail also allows us to subdivide the newsletter recipients according to different recipient categories (e.g. place of residence). In this way, the newsletters can be better adapted to the respective target groups.

We have concluded an order processing contract with rapidmail in which we oblige rapidmail to protect our customers' data and not to pass it on to third parties. For detailed information on the functions and data protection, please refer to the data protection provisions of rapidmail at: https://www.rapidmail.de/datenschutz-kundenbereich.

Contact form and e-mail contact

Description and scope of data processing

Our website contains our contact details and a contact form, which can be used for contacting us. In principle, it is possible to contact us via the e-mail address provided. In this case, the transmitted personal data (name, contact details and inquiry) of the user will be stored and processed by us for the purpose of processing your request.

If customers or interested parties take the option of sending messages via the contact form, the data entered in the input mask is transmitted to us and stored. These data are:

  • Name
  • E-mail address and other contact details
  • Other information you enter in the contact form

The following data is also stored at the time the message is sent:

  • The IP address of the user
  • Date and time of dispatch

In this context, the data will not be disclosed to third parties without your consent. The data is used exclusively for the processing of the conversation.

Legal basis for data processing

Contacting us by providing an e-mail address is only possible from the age of 16 or with the consent of a parent or guardian. By using this function, you confirm that you are over 16 years old or that you have the consent of a parent or guardian.

The legal basis for the processing of the data is Article 6 (1) lit. a GDPR if the user has given his consent.

The legal basis for the processing of data transmitted in the course of sending an inquiry is Article 6 (1) lit. f GDPR. The legitimate interest consists in an efficient and fast processing of user requests. If the contact aims at the conclusion of a contract, the additional legal basis for the processing is Article 6 (1) lit. b GDPR.

Purpose of data processing

The processing of the personal data of the transmitted data serves us to process the contact, the processing of user requests or the provision of support services. In the case of contact by e-mail, this also constitutes the necessary legitimate interest in ­processing the ­data.

The other personal data processed during the process serve to ensure the security of our information technology systems.

Duration of storage

The data is deleted as soon as it is no longer ­required to achieve the purpose for which it was collected. ­For the personal data from the input mask of the contact form and those sent by e-mail, this is the case when the respective conversation with the user has ended. The conversation is ended when it is clear from the circumstances that the matter in question has been conclusively clarified.

Possibility of objection and removal

The user has the possibility to revoke his consent to the processing of personal data at any time. If the user contacts us by e-mail, he can object to the storage of his personal data at any time. In such a case, the conversation cannot be continued­. ­For the revocation of consent, you can contact our data protection officer ­at ­any time ­using the above contact details.

All personal data stored in the course of contacting us will be deleted in this case.

Inquiries by phone or fax

Description and scope of data processing

If you contact us by e-mail, telephone or fax, your inquiry including all resulting personal data (name, inquiry) will be stored and processed by us for the purpose of processing your request. We will not pass this data on to third parties without your consent.

Legal basis for data processing

The processing of this data is based on Article 6 (1) lit. b GDPR, if your request is related to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective processing of requests addressed to us (Article 6 (1) lit. f GDPR) or on your consent (Article 6 (1) lit. a GDPR) if this has been requested.

Purpose of data processing

The processing of personal data serves us solely to process your request.

Duration of storage

The data you send to us via inquiries will remain with us until you request us to delete it, revoke your consent to store it, or the purpose for storing the data no longer applies (e.g., after we have completed processing your request).

Possibility of objection and removal

The user has the possibility to revoke the processing of his personal data at any time. You can make use of your objection by contacting the above mentioned contact details.

All personal data stored in the course of contacting us will be deleted in this case. Mandatory legal provisions - in particular legal retention periods - remain unaffected.

4. PFREUNDT E-Shop

This service (hereinafter referred to as the »Shop«) is provided by PFREUNDT GmbH (hereinafter referred to as »we« or »us«) as the responsible party within the meaning of the applicable data protection law.

Processing of data (customer and contract data)

We collect, process and use personal data only to the extent that they are necessary for the establishment, content or modification of the legal relationship (inventory data). This is done on the basis of Article 6 (1) lit. b GDPR, which permits the processing of data for the fulfillment of a contract or pre-contractual measures. We collect, process and use personal data about the use of this website (usage data) only to the extent necessary to enable the user to use the service or to bill the user.

The collected customer data will be deleted after completion of the order or termination of the business relationship. If you have created a customer account, your data will generally remain stored until you delete the customer account. If no orders are placed via a customer account for more than two years, we will delete the account including the data. Legal retention periods remain unaffected.

Data transmission at the conclusion of a contract for online stores, merchants and shipment of goods

We transmit personal data to third parties only if this is necessary in the context of the contract, such as to the companies entrusted with the delivery of the goods or the credit institution entrusted with the payment processing. A further transmission of the data does not take place or only if you have expressly agreed to the transmission. Your data will not be passed on to third parties without your express consent, for example for advertising purposes.

The basis for data processing is Article 6 (1) lit. b GDPR, which permits the processing of data for the fulfillment of a contract or pre-contractual measures.

We use the store system of the service provider shopware AG, Ebbinghoff 10, 48624 Schöppingen (»shopware«), for the purpose of hosting and displaying the online store on the basis of processing on our behalf. All data collected on our website is processed on the servers of shopware.

You can find more information about Shopware here:

https://www.shopware.com/de/datenschutz/

Name, address and, if applicable, other personal data will be passed on to shopware in accordance with Article 6 (1) lit. b GDPR exclusively for the purpose of processing the online order. Your data will only be passed on to the extent that this is actually necessary for the processing of the order.

To ensure data protection-compliant processing, we have concluded an order processing contract with shopware.

Your rights as a data subject

Information about your rights as a data subject, the responsible body and contact options with our data protection officer, among others, can be found under »Rights of the data subject« in this data protection notice.

5. PFREUNDT Web Portal

This service (hereinafter referred to as »Web Portal«) is provided by PFREUNDT GmbH (hereinafter referred to as »we« or »us«) as a processor within the meaning of the applicable data protection law.

Processing data (customer and weighing data)

We offer our customers the possibility to handle the complete management of weighing data (clients, scales, users, orders, reports, etc.) electronically via the »PFREUNDT Web Portal«.

We collect, process and use personal data about the use of this website (usage data) only to the extent necessary to enable the user to use the service or to bill the user.

The customers are responsible for the processing of personal data in the PFREUNDT Web Portal according to Article 4 (7) GDPR.

We conclude a contract on commissioned processing with our clients. This contract ensures that we process the data exclusively on the basis of the instructions of our clients and in compliance with data protection as defined by the GDPR.

Your rights as a data subject

Information about your rights as a data subject can be found under »Data subject rights« in this privacy notice.

6. PFREUNDT App

This service (hereinafter »App«) is provided by PFREUNDT GmbH (hereinafter »we« or »us«) as the responsible party within the meaning of the applicable data protection law.

As part of the app, we allow you to retrieve and view the following information:

  • Retrieval and storage of weighing data from and in the connected weighing system
  • Retrieval and storage of master data from and in the PFREUNDT Web Portal
  • Creation of signatures (consisting of photo/png file, location) as well as transfer to the web portal
  • Taking and processing photos and transferring them to the web portal
  • Deposit of information with location data
  • Transmission and storage of error and diagnostic messages to PFREUNDT GmbH

When you use the app, we process personal data about you. Personal data means any information relating to an identified or identifiable natural person. Because protecting your privacy when using the app is important to us, we would like to inform you in the following which personal data we process when you use the app and how we handle this data. In addition, we will inform you about the legal basis for the processing of your data and, insofar as the processing is necessary to protect our legitimate interests, also about our legitimate interests.

You can access this privacy policy at any time under the menu item »Privacy Policy« within the app.

Information about processing of your data

Certain information is already processed automatically as soon as you use the app. We have listed exactly which personal data is processed for you below:

Information collected during download

When downloading the app, certain required information is transmitted to the app store selected by you (e.g. Google Play or Apple App Store), in particular the user name, the e-mail address, the customer number of your account, the time of the download, payment information and the individual device identification number may be processed. The processing of this data is carried out exclusively by the respective app store and is beyond our control.

Information that is collected automatically

As part of your use of the app, we automatically collect certain data that is required for the use of the app. This includes: internal device ID, version of your operating system, time of access.

This data is automatically transmitted to us, but not stored, in order to provide you with the service and the associated functions, to improve the functions and performance features of the app and to prevent and eliminate misuse and malfunctions. This data processing is justified by the fact that the processing is necessary for the performance of the contract between you as a data subject and us pursuant to Article 6 (1) lit. b GDPR for the use of the App. In addition, we have a legitimate interest in ensuring the functionality and error-free operation of the app and in being able to offer a service that is in line with the market and interests, which outweighs your rights and interests in the protection of your personal data here within the meaning of Article 6 (1) lit. f GDPR.

Registration and login

The app can be used without logging in. However, the access data of the PFREUNDT Web Portal (user name and scale ID) are required to transfer your data to the cloud. Registration takes place via the PFREUNDT GmbH web portal. Information on mandatory data within the scope of registration is also available via the PFREUNDT GmbH web portal. The conclusion of the user contract is always required. If you do not have Web Portal access, it is not possible to use the PFREUNDT App.

We will process and use the information you provide as part of the registration process or a login to verify your eligibility to manage access; enforce the App's Terms of Use and any related rights and obligations; and contact you to send you technical or legal notices, updates, security messages, or other communications, such as those related to managing access.

Use of the app

Within the app you can enter, manage and edit various information, tasks and activities. This information includes in particular data on the collection and processing of signatures and photos to weighing data from the connected weighing system. At the same time, the collected data can be merged with location information and stored in the app and transferred to the PFREUNDT Web Portal.

The app also requires the following permissions:

  • Internet access: This is needed to save your entries on our servers
  • Camera access: This is required so that you can take photos of your documents, orders, loaded goods, etc. and store them in the app and on our servers.
  • Location access: This is required so that location information can be provided for the weighing data.
  • Bluetooth access: this is required to establish a connection to the scale

The processing and use of usage data is carried out for the provision of the service. This data processing is justified by the fact that the processing is necessary for the performance of the contract between you as the data subject and us pursuant to Article 6 (1) lit. b GDPR for the use of the app.

Data sharing and transfer

In addition to the cases explicitly mentioned in this data protection declaration, your personal data will only be passed on without your express prior consent if this is permitted or required by law. This may be the case, for example, if the processing is necessary to protect the vital interests of the user or another natural person.

The data provided by you during registration will be passed on within PFREUNDT GmbH for internal administrative purposes, including joint customer support, to the extent necessary.

Any disclosure of personal data is justified by the fact that we have a legitimate interest in disclosing the data for administrative purposes within our group of companies and that your rights and interests in the protection of your personal data within the meaning of Article 6 (1) lit. f GDPR are not overridden.

If it is necessary to clarify illegal or abusive use of the app or for legal prosecution, personal data will be forwarded to law enforcement agencies or other authorities and, if necessary, to injured third parties or legal advisors. However, this only happens if there are indications of unlawful or abusive behavior. A transfer may also take place if this serves the enforcement of terms of use or other legal claims. We are also legally obligated to provide information to certain public authorities upon request. These are law enforcement agencies, authorities that prosecute administrative offenses subject to fines, and the tax authorities.

Any disclosure of the personal data is justified by the fact that the processing is necessary for compliance with a legal obligation to which we are subject pursuant to Article 6 (1) lit. f GDPR in conjunction with. national legal requirements to disclose data to law enforcement authorities, or we have a legitimate interest in disclosing the data to the aforementioned third parties if there are indications of abusive behavior or to enforce our terms of use, other conditions or legal claims, and your rights and interests in the protection of your personal data within the meaning of Article 6 (1) f GDPR do not override.

We rely on third-party companies and external service providers to provide our service, including software developers and cloud service providers.

Any disclosure of personal data is justified by the fact that we have carefully selected our third-party companies and external service providers as order processors within the scope of Article 28 (1) GDPR, regularly reviewed them and contractually obligated them to process all personal data exclusively in accordance with our instructions.

As our business evolves, we may change the structure of our business by changing its legal form, establishing, buying or selling subsidiaries, divisions or components. In such transactions, customer information may be transferred along with the part of the company being transferred. In any transfer of personal information to third parties to the extent described above, we will ensure that it is done in accordance with this Privacy Policy and applicable data protection law.

Any disclosure of personal data is justified by the fact that we have a legitimate interest in adapting our corporate form to the economic and legal circumstances as necessary and that your rights and interests in the protection of your personal data within the meaning of Article 6 (1) lit. f GDPR are not overridden.

Google Play Console

We use the Google Play Console in our app. The Play Console is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The privacy policy can be found at https://policies.google.com/privacy?hl=de.

The Play Console collects data about the state of the end device, such as information about the end device used, how the app works, and the location of the device at the time of a system crash. The data collected by the Play Console cannot be used to draw conclusions about specific individual users.

The use is based on our legitimate interests in classifying a crash of our app, quick troubleshooting to prevent and resolve app crashes, and the fact that your interests, fundamental rights and freedoms requiring the protection of personal data do not override, Article 6 (1) lit. f GDPR.

»Enable or disable« Usage & Diagnostics

Important: If you disable »Usage and Diagnostics«, your device will still have access to important services, such as new Android versions. Also, data that may be collected by apps on your device is not affected by the deactivation.

To specify whether to send usage and diagnostic data to Google:

  1. Open the settings on the device.
  2. Tap Google Three-Point Menu Usage and Diagnostics.
  3. Enable or disable usage and diagnostics.

Changes of purpose

 Processing of your personal data for purposes other than those described will only take place if permitted by law or if you have consented to the changed purpose of the data processing. In the event of further processing for purposes other than those for which the data was originally collected, we will inform you about these other purposes prior to further processing and provide you with all other relevant information.

Data storage period

We delete or anonymize your personal data as soon as they are no longer required for the purposes for which we collected or used them in accordance with the above paragraphs. As a rule, we store your personal data for the duration of the usage or contractual relationship via the app plus a period of 90 days (retention of data in the weighing system) for compliance with the requirement arising from the Measurement and Verification Act, unless this data is required for longer for criminal prosecution or to secure, assert or enforce legal claims.

You also have the option to delete the data manually at any time. To do this, delete your data from the app's memory by selecting your app at the operating system level under Settings, Apps and selecting »Delete data«.

Specific statements in this data protection declaration or legal requirements for the retention and deletion of personal data, in particular data that we must retain for tax law reasons, remain unaffected.

Your rights as a data subject

Information about your rights as a data subject, the responsible body and contact options with our data protection officer, among others, can be found under »Rights of the data subject« in this data protection notice.

7. Own services

Handling of applicant data

Description and scope of data processing

We offer you the opportunity to apply to us (e.g. by e-mail or post). In the following, we inform you about the scope, purpose and use of your personal data collected as part of the application process. We assure you that the collection, processing and use of your data will be carried out in accordance with applicable data protection law and all other statutory provisions and that your data will be treated in strict confidence.

Legal basis for data processing

The legal basis for data processing is Section 26 of the German Federal Data Protection Act (BDSG) under German law (initiation of an employment relationship), Article 6 (1) (b) of the German Data Protection Regulation (GDPR) (general contract initiation) and - if you have given your consent - Article 6 (1) (a) of the GDPR. The consent can be revoked at any time. Your personal data will only be passed on within our company to persons who are ­involved in processing your application.

If the application is successful, the data submitted by you will be stored in our data processing systems on the basis of Section 26 BDSG and Article 6 (1) lit. b GDPR for the purpose of implementing the employment relationship.

Purpose of data processing

If you apply to us electronically, i.e. by e-mail, then we collect and process your personal data for the purpose of processing the application procedure, deciding on the establishment of an employment relationship and carrying out pre-contractual measures.

By submitting an application, you express your interest in ­taking up employment with us. In this context, you provide us with personal ­data that we use and store exclusively for the purpose of your job search/application.

In particular, the following data may be collected:

  • Name (first as well as last name)
  • E-mail address
  • Phone number
  • LinkedIn profile (optional)
  • Channel, how you became aware of us
  • Comparison between job requirements and skills of the applicant
  • Planned employment
  • Communication during the application process
  • Status updates and notes on your application

You also have the option of attaching meaningful documents such as a cover letter, your resume and references. These may contain further personal data such as date of birth, address, etc.

Only authorized employees from the HR department or ­employees involved in the application process have ­access to your data.

Personal data is stored exclusively for the purpose of filling the vacant position for which you have applied.

Duration of storage

Your data will be stored for a period of 6 months beyond the end of the application process. As a rule, this is done to fulfill legal obligations or to defend against any claims arising from legal regulations. Subsequently, we are obliged to delete or anonymize your data. In this case, the data is only available to us as so-called metadata without direct personal reference for statistical evaluations (for example, proportion of women or men in applications, number of applications per period, etc.).

You will not be informed separately about the deletion of your data.

In addition, we reserve the right to store your data for inclusion in our »Talent Pool« for one year after the end of the application process in order to identify any other interesting positions for you. This also applies, for example, to applications for apprenticeships or internships. For this purpose, we will provide you with a separate consent form in which you can agree to the possible further storage of your data and inclusion in our »Talent Pool«. The data will be deleted from the »talent pool« after one year.

You will not be informed separately about the deletion of your data.

If you receive an offer of employment with us as part of the application process and accept it, we will store the personal data collected as part of the application process for at least the duration of the employment relationship.

Possibility of objection and removal

If personal data is processed by us as the controller, you as the data subject have certain rights under Chapter III of the EU General Data Protection Regulation (GDPR), depending on the legal basis and purpose of the processing. These can be found in the chapter »Rights of the data subject« of this privacy policy.

If the processing of personal data is based on your consent, you have the right to revoke this consent under data protection law in accordance with Article 7 (3) GDPR. To assert your data subject rights with regard to the data processed in this application procedure, please contact our data protection officer at the above contact details.