Data protection information for the website www.nieruf.com

Our aim is to ensure that you feel comfortable on our website. The protection of your privacy and your personal rights is therefore an important concern for us. We would therefore ask you to read the following summary of how our website works carefully. You can rely on transparent and fair data processing and we endeavor to handle your data carefully and responsibly. The following data protection information is intended to inform you about how we use your personal data. In doing so, we comply with the strict provisions of German data protection law and the requirements of the European General Data Protection Regulation (GDPR).

Table of contents

1. Responsible and contact data protection officer
2. Scope of the processing of personal data
3. Processing purposes and legal bases for processing your personal data
4. Duration of storage and routine deletion of personal data
5. Collection of general data and information, so-called log files
6. Cookies, web analysis services
7. Sending information
8. Processing of personal data when contacting us, registering or placing a guest order
9. Disclosure of personal data to third parties
10. Use of the chat advisor function pursuant to Art. 6 para. 1 lit. f GDPR
11. Your rights

1. Responsible and contact data protection office

The controller within the meaning of the GDPR is:

Zeppelinstrasse 11
D-74354 Besigheim, Germany
Tel.: +49 (0)7143 / 9666-900
E-Mail: info@nieruf.de

You can reach the data protection officer at:

E-Mail: datenschutz@nieruf.de

2. Scope of the processing of personal data

We collect and use your personal data only to the extent necessary to provide a functional website and our content and services, e.g. when you register on our website or log into an existing customer account or when you order products. The security of your personal data is a high priority for us. We therefore use technical and organizational measures to protect your data stored by us in order to effectively prevent loss or misuse by third parties. To protect your personal data, it is transmitted in encrypted form; for example, we use SSL=Secure Socket Layer for communication via your Internet browser. You can recognize this by the lock symbol that your browser displays for an SSL connection.

3. Processing purposes and legal bases for processing your personal data

We collect, process and use your personal data for the following purposes:

• Execution of contractual relationships, e.g. order processing
• Dispatch of product information
• Dispatch of price lists and requested offers
• Marketing measures, such as catalog mailing
• Customer service and customer support

4. Duration of storage and routine deletion of personal data

We process and store your personal data only for the period required to fulfill the purpose of storage or if this is provided for in laws or regulations. If you have provided us with personal data, you can delete it at any time. Data for billing and accounting purposes are not affected by termination or deletion.

5. Collection of general data and information, so-called log files

UEach time our website is accessed, it collects a series of general data and information on the basis of Art. 6 para. 1 lit. f GDPR, which is temporarily stored in log files on a server. A log file is created as part of an automatic log of the processing computer system. The following can be recorded:- Access to the website (date, time and frequency)

• How you reached the website (previous page, hyperlink, etc.)
• Which browser and browser version you are using
• The operating system you are using
• Which Internet service provider you use
• Your IP address, which your Internet access provider assigns to your computer when you connect to the Internet

The collection and storage of this data is necessary for the operation of the website in order to ensure the functionality of the website and to deliver the content of our website correctly. We also use the data to optimize our website and to ensure the security of our IT systems.
Seal of approval, eKomi Ltd is integrated on our website. This is an offer from eKomi Ltd Markgrafenstraße 11, 10969 Berlin, Germany. When the eKomibadge is called up, the web server automatically saves a server log file containing, for example, your IP address, the date and time of the call, the amount of data transferred and the requesting provider. This access data is not analyzed and is automatically overwritten no later than 7 days after the end of your visit to the site. Further personal data will only be transferred to eKomi Ltd if you decide to use eKomi products after completing an order or if you have already registered to use them.

6. Cookies, web analysis services

We would like to provide you with a pleasant online experience on our website and use cookies and web analysis services for this purpose in accordance with Art. 6 para. 1 lit. f GDPR. For this purpose, we use cookies and services to ensure the functionality of our website and to make the website as informative and user-friendly as possible for you. It is important to us that you surf our website comfortably and for this reason the continuous optimization of our website is very important to us. This includes, for example, pre-filled form fields so that you do not always have to enter all the data again and settings you have made can be saved. It is also important to us that you are shown content on our website that actually interests you and makes your online experience easier. However, we do not lose sight of the careful handling of your personal data. You will therefore find detailed information below about the use of the cookies and services we use on this website. Of course, you have the option of deactivating all cookies and services. This can be done by blocking or deleting cookies via your Internet browser or by deactivating them separately by setting a specified opt-out cookie or following a specified link. Please bear in mind that deactivation must be carried out for each browser you use. If all cookies in your browser are deleted, the corresponding opt-out cookie will also be affected.

a) Cookies

Cookies are small text files which are placed in your browser history and which reconstruct settings and other changes you have already made on your next visit. These functional cookies ensure that our website works properly. These cookies are stored for a maximum of 2 years, after which they are automatically deleted. For example, the following functions are possible with these cookies:

• saving products that you have added to your shopping cart or wish list,
• saving the entries you have made during check-out or during an order so that you do not have to enter this data again,
• Saving default settings such as language, location, number of search results, etc.,
• saving settings for an optimal video display, e.g. the desired buffer size and the resolution data of your screen,
• recording your browser settings in order to display our website optimally on your screen,
• the detection of misuse of our websites and services, e.g. through the registration of several consecutive and failed login attempts
• the even loading of the website so that the website remains accessible or
• saving your login details so that you do not have to enter them again each time.

You have the option of blocking the setting of these cookies and deleting cookies that have already been set. You can obtain more information on this from the manufacturer or in the help function of your Internet browser. However, we must point out that certain functionalities on our website will no longer be available or will only be available to a limited extent if you do not allow these functional cookies.

b) Google Analytics

Google Analytics is a web analytics service provided by Google Inc, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA. Google Analytics uses cookies to enable us to analyze the use of our website. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. However, your IP address will be shortened beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. The cookies stored by Google Analytics are deleted after 14 months at the latest.

Further information on data protection and the terms of use for Google Analytics can be found at:

https://www.google.com/analytics/terms/de.html und https://policies.google.com/privacy?hl=de

To deactivate Google Analytics, click on the following link to download and install a browser plugin: https://tools.google.com/dlpage/gaoptout?hl=de

7. Sending information

We use your data to send information you have ordered about our range and other promotions to the e-mail address you have provided. This only takes place with your consent or legal permission.

a) Newsletter registration on our website

You can subscribe to a free newsletter on our website. When you register for the newsletter, the data from the input mask is transmitted to us, i.e. at least your e-mail address. Registration takes place by means of the so-called double opt-in procedure. After registering, you will receive an e-mail asking you to confirm your registration. This confirmation is necessary so that no one can register with other people's e-mail addresses. Your consent is obtained for the processing of the data as part of the registration process and reference is made to this data protection notice.

Supplementary text:

If you would like to receive the newsletter offered on the website, we require an e-mail address from you as well as information that allows us to verify that you are the owner of the e-mail address provided and that you agree to receive the newsletter. We use the so-called double opt-in procedure to ensure that the newsletter is sent with your consent. This involves the potential recipient being added to a mailing list. The user then receives a confirmation e-mail to confirm the registration in a legally secure manner. The address will only be actively added to the mailing list if confirmation is received. We use this data exclusively for sending the requested information and offers. As newsletter Software will be used Newsletter2Go . Your data will be transmitted to Newsletter2Go GmbH. Newsletter2Go is prohibited from selling your data and using it for purposes other than sending newsletters. Newsletter2Go is a German, certified provider that has been selected in accordance with the requirements of the General Data Protection Regulation and the Federal Data Protection Act.

Further information can be found here: https://www.newsletter2go.de/informationen-newsletter-empfaenger/

You can revoke your consent to the storage of the data, the e-mail address and its use for sending the newsletter at any time, for example via the “Unsubscribe” link in the newsletter.

The data protection measures are always subject to technical updates for this reason, we ask you to inform yourself about our data protection measures at regular intervals by consulting our privacy policy.

b) Shipping due to the sale of goods and services

If you purchase goods or services from NieRuf GmbH, we may send you information about our own similar goods and services to the e-mail address you have provided, even without your consent.

c) Postal dispatch

We may also use your data to send you information about our offers and promotions by post.

We want you to enjoy reading our e-mails. We therefore try to only include content that you are likely to be interested in. We therefore measure and store opening and click rates in your usage profile, i.e. whether and when you open our emails, which content of the emails you click on and when, as well as whether and why our emails could possibly not be delivered. We also use this data for statistical purposes.

Of course, you can unsubscribe from receiving our information at any time, i.e. revoke your consent with effect for the future. For this purpose, you will find a corresponding unsubscribe link in every e-mail or newsletter and can confirm the unsubscription on our website. You can also contact us at any time to revoke your consent:

By E-Mail: datenschutz@nieruf.de
By post: NieRuf GmbH, Zeppelinstrasse 11, 74354 Besigheim, Germany

Certain information messages that are necessary for contract processing and the function of our website, for example regarding the service (e.g. registration confirmation, customer service information) or a chargeable package (e.g. order confirmation, contract documents, payment processing) cannot be canceled. You will receive these messages to the contact information you have provided.

8. Processing of personal data when contacting us, registering or placing a guest order

a) Contacting us

When you contact us by telephone, e-mail or via a contact form, the data you provide will be stored by us on the basis of Art. 6 para. 1 lit. a GDPR in order to answer your questions. The contact is logged in order to be able to prove the contact in accordance with the legal requirements. Your consent is obtained for the processing of the data as part of the contact form and reference is made to this privacy policy. We delete the data collected in this context once the respective conversation with you has ended and the matter in question has been conclusively clarified.

b) Registration

On our website, we offer you the opportunity to register by providing personal data. The data is entered into an input mask and transmitted to us and stored. The registration serves the fulfillment of a contract or the implementation of pre-contractual measures and is therefore based on Art. 6 para. 1 lit. b GDPR. For the conclusion and processing of contracts, we require contact details, such as name, delivery and billing address and e-mail address, as well as information on the type of payment method you have chosen, depending on the individual case. In addition, we use your data to maintain our customer database so that only accurate data is stored there. In order to avoid typing errors and to ensure that your ordered items reach you, we check the completeness and accuracy of your address when you enter it.

c) Guest order

You have the option of placing your orders as a guest. If you choose this type of order, you do not need to register before placing an order. Please note that you will have to enter your details again for each subsequent order. We collect, process and use the information you provide as part of a guest order for the purpose of executing the contract in accordance with Art. 6 para. 1 lit. b GDPR. We store the information you provide for the period of processing and handling your order. Your data will then be deleted unless you decide to activate your customer account within 14 days of placing your order. Data that we are required to store due to legal, statutory or contractual retention obligations will be blocked instead of deleted to prevent it from being used for other purposes.

d) Other

Based on Art. 6 para. 1 lit. c and f GDPR, we use and store your personal data and technical information insofar as this is necessary to prevent or prosecute misuse or other unlawful behavior on our website, e.g. to maintain data security in the event of attacks on our IT systems. This also takes place insofar as we are legally obliged to do so, for example due to official or court orders, and for the exercise of our rights and claims as well as for legal defense.

9. Disclosure of personal data to third parties

When passing on your personal data, we always ensure the highest possible level of security. Therefore, your data will only be passed on to carefully selected and contractually obligated service providers and partner companies. In addition, your data will only be forwarded by us to bodies that are located within the European Economic Area and are therefore subject to strict EU data protection law or are obliged to comply with a corresponding level of protection. A transfer of data to third countries does not currently take place and is not planned.

a) Disclosure to product partners pursuant to Art. 6 para. 1 lit. b GDPR

As part of our offer on our website, we work together with various partner companies for certain product groups. If you order products from these partner companies, we will pass on the personal data you provided when registering and, if applicable, when making other purchases, to them for the conclusion and processing of contracts (in particular e-mail address and delivery and billing address). In this case, your contractual partner is the company NieRuf GmbH.

b) Disclosure to service providers pursuant to Art. 6 para. 1 lit. b and f GDPR

For the operation and optimization of our website as well as our services and for contract processing, various service companies work for us, e.g. for central IT services or the hosting of our website, for the payment and delivery of products or for the newsletter dispatch, to whom we pass on the data required for the fulfillment of the task (e.g. name, address).
Ein Teil dieser Unternehmen wird im Wege einer Auftragsverarbeitung für uns tätig und darf die zur Verfügung gestellten Daten deshalb ausschließlich nach unseren Weisungen verwenden. Wir sind in diesem Fall für angemessene Datenschutzvorkehrungen bei den von uns beauftragten Unternehmen gesetzlich verantwortlich. Deshalb vereinbaren wir mit diesen Unternehmen konkrete Datensicherheitsmaßnahmen und kontrollieren diese regelmäßig.
Bei Paketsendungen und Speditionsware erfolgt der Versand Ihrer Bestellung über einen Dienstleister, z.B. DHL oder Hasenauer & Koch. Dieser Dienstleister erhält von uns Informationen.

In contrast to order processing, we transmit data to third parties for their own use for contract processing in the following cases:

• For the delivery of goods to logistics companies and the postal service provider specified in the order.
• When paying for goods to the payment service provider specified in the order, e.g. paypal.

We do not collect and store any payment transaction information such as bank details when you pay. You only provide these directly to the respective payment service provider.

d) Disclosure to other third parties pursuant to Art. 6 para. 1 lit. c and f GDPR

Finally, we will pass on your data to third parties or government agencies within the framework of the existing data protection laws if we are legally obliged to do so, e.g. due to official or court orders, or if we are authorised to do so, e.g. because this is necessary for the prosecution of criminal offences or for the exercise and enforcement of our rights and claims.

10. Use of the chat advisor function pursuant to Art. 6 para. 1 lit. f GDPR

We offer you the ‘Advice’ function to make our service even more convenient for you. This gives you the opportunity to receive advice in the chat before you make a purchase on our website. The entire chat process is anonymous, without your name or other personal data being displayed or logged or the customer advisor being able to view customer data. In order to constantly improve the quality of our customer advice in the chat, we record this chat history for training purposes. These recordings are deleted after we have analysed them.

11. Your rights

If you would like to exercise one of the following rights free of charge, simply send us a message. 

By e-mail: datenschutz@nieruf.de

By post: NieRuf GmbH, Zeppelinstrasse 11, 74354 Besigheim, Germany

For your own protection, we reserve the right to obtain further information required to confirm your identity in the event of an enquiry and to refuse to process the enquiry if identification is not possible.

a) Right to information

You have the right to request information from us about the personal data stored about you.

b) Right to rectification

You have the right to request immediate rectification and/or completion of your personal data.

c) Right to restriction of processing

d) Right to cancellation

e) Right to information

If you have exercised your right to rectification, erasure or restriction of processing, we will communicate any rectification or erasure of personal data or restriction of processing to each recipient to whom the personal data concerning you have been disclosed, unless this proves impossible or involves disproportionate effort.

f) Right to data portability

You have the right to have personal data that you have provided to us handed over to you or to a third party in a structured, commonly used and machine-readable format. If you request the direct transfer of the data to another controller, this will only take place if it is technically feasible.

g) Right of objection

If your personal data is processed on the basis of legitimate interests in accordance with Art. 6 para. 1 lit. f GDPR, you have the right to object to the processing at any time in accordance with Art. 21 GDPR.

h) Right to withdraw consent

You have the right to withdraw your consent to the collection of data at any time with effect for the future. The data collected until the revocation becomes legally effective will remain unaffected by this. Please understand that for technical reasons it may take some time to implement your cancellation and that you may still receive messages from us in the meantime.

i) Right to lodge a complaint with a supervisory authority

If the processing of your personal data violates data protection law or if your data protection rights have been violated in any other way, you can lodge a complaint with the supervisory authority. You can also exercise your rights to rectification and erasure in the quickest, easiest and most convenient way by logging into your customer account and editing or erasing the data stored there directly. Please note that once your data has been deleted, the offers of our product partners via our website will no longer be available to you. This also includes re-download options. Therefore, please back up your data before asserting a claim for deletion. Data that we are required to store due to legal, statutory or contractual retention obligations will be blocked instead of deleted to prevent it from being used for other purposes.

Shopware Analytics

Purpose of processing: Together with our store software service provider, we evaluate certain information from our customer base under joint responsibility (e.g. customer group, pages visited, click paths, date and time of the visit, information about the end device used (resolution, resolution density, operating system), referrer URL, information about the browser used, locale, search queries and time zone). This information is processed by an external service provider and forwarded to us in approximate real time so that we can monitor the use of our website and improve our offerings.

Legal basis: Art. 6 para. 1 letter f GDPR

Data categories: Derived from core and contact data (the customer group, no individual customer data), usage data, connection data

Recipients of the data: shopware AG, Ebbinghoff 10, 48624 Schöppingen, Germany (as joint controller), IT service provider

The essence of joint responsibility: The joint responsibility exists between us and shopware AG; the data is collected in our store and then transferred to servers of shopware or its service providers; with the exception of obtaining your consent for the use of cookies or comparable technologies and the fulfillment of these information obligations, all obligations, in particular the implementation of the rights of data subjects, are the responsibility of shopware AG, which you can reach at legal@shopware.com. You can also assert your data subject rights with us; we will then forward your request to shopware AG accordingly. shopware AG can derive behavior patterns on our store from the data collected, but cannot assign this data to you as a person.

Intended third country transfer: None

Do we store or read personal data on your end device based on your consent? Yes, see Consent Management for details.