Privacy Policy

Scope

This privacy policy informs users about the nature, extent, and purpose of the collection and use of personal data by the responsible provider of this website.

Kock & Sohn Räder GmbH
Managing Director: Dipl. Ing. Manfred Kock
Höfener Straße 1+3
48496 Hopsten - Schale

Phone (Head Office): 0 54 57 / 93 09 - 0
Fax (Head Office): 0 54 57 / 93 09 - 10

Email: info@kock-sohn.de
Website: https://www.kock-sohn.de

The legal basis for data protection is found in the EU General Data Protection Regulation (EU GDPR) and the Federal Data Protection Act (BDSG-New) as well as the Telemedia Act (TMG).

General Privacy Policy

We take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the legal data protection regulations as well as this privacy policy.

The use of our website is generally possible without providing personal data. As far as personal data (e.g. name, address, or email addresses) is collected on our websites, this is done, as far as possible, on a voluntary basis.

Please note that data transmission over the internet can have security gaps. A complete protection of data from access by third parties is not possible.

Legal Basis for Processing

We collect, process, and use your personal data without further consent where it is necessary for the establishment and execution of a contract as well as for billing purposes. (Article 6(1)(b) EU GDPR)

Additionally, we collect data with prior consent for the purposes of sending newsletters, contact forms, and account creation/user registration (Article 6(1)(a) EU GDPR).

To protect the legitimate interests of the controller or a third party, we collect data through server log files, Google Analytics, and others. These data are evaluated solely to ensure the proper operation of the site and to improve our offerings. (Article 6(1)(f) EU GDPR)

Where the processing of personal data is based on Article 6(1)(f) EU GDPR, our legitimate interest, unless otherwise specified, is the performance of our business activities. In other respects, we have specified our purposes and interests within the context of the above processing details.

Use of Cookies

We use cookies, which do not harm your device and do not contain viruses. They are used to make our offerings more user-friendly, efficient, and secure. Cookies are small files that are stored on your device.

The majority of these cookies are automatically deleted after you finish your visit. Other cookies remain on your device until you delete them. Cookies allow us to recognize your browser on your next visit.

However, you can configure your browser to inform you about the setting of cookies or to allow cookies only on a case-by-case basis. Furthermore, you can exclude the acceptance of cookies in certain cases or in general, as well as activate the automatic deletion of cookies when you close your browser. Disabling cookies may limit the functionality of our websites.

The legal basis for the processing of personal data using cookies is Article 6(1)(f) EU GDPR. The purpose of using technically necessary cookies is to simplify the use of our websites for you (e.g., your shopping cart is stored).

Server Log Files

Our provider automatically stores information in server log files that your browser sends to us:

• Browser type and version
• Operating system
• Name of the requested file (web page)
• Date
• Time of the server request
• IP address
• Amount of data transmitted
• Requesting provider
• Referrer URL (the URL you visited immediately before)
• Hostname of the accessing computer

We do not merge this data with other data sources. However, we reserve the right to review these data later if we become aware of specific indications of unlawful use.

The legal basis for the temporary storage of your data and server log files is Article 6(1)(f) EU GDPR. This data is exclusively evaluated to ensure the continuous and uninterrupted operation of the website, to improve the content of our website, and to transmit to law enforcement authorities in the event of a cyber attack.

Website Encryption

We use SSL encryption for security reasons and to protect the transmission of confidential content that you send to us as the website operator. You can recognize an encrypted connection by the green lock symbol in your browser’s address bar or by the change from “http://” to “https://” in the address bar. When SSL encryption is enabled, your data is generally not accessible to third parties.

Email and Contact Form

If you send us a request via a contact form or email, the data you provide in the inquiry form or email will be stored. We do not share this data without your consent.

The legal basis for the processing of your data is Article 6(1)(a) EU GDPR. If the contact is intended to conclude a contract, the additional legal basis for processing is Article 6(1)(b) EU GDPR.

Data Protection in the Application Process

We collect and process personal data from applicants for the purpose of conducting the application process. This processing usually takes place electronically. If an employment contract is concluded with an applicant, the transmitted data will be stored for the purpose of exercising the employment relationship in compliance with legal regulations. If no employment contract is concluded, the application documents will be deleted two months after the rejection decision, unless there are legitimate grounds preventing deletion. Such a legitimate interest might be, for example, a requirement to provide evidence in a case under the General Equal Treatment Act (AGG).

The legal basis for the processing of your data is § 26 BDSG-New.

Comment Function on this Website

As part of the comment function on our websites, in addition to your message, the time of creation, your IP address, email address, and name will also be stored. We need this data in order to take legal action against the author in case of legal violations. After registration, you can subscribe to comments. You will receive a confirmation email to verify that you are the owner of the provided email address. You can unsubscribe from this function at any time via a link in the informational emails.

The legal basis for processing your data is Article 6, Section 1, Letter a of the EU GDPR.

Newsletter

If you wish to subscribe to the newsletter offered on the website, we require your email address as well as information that allows us to verify that you are the owner of the given email address and agree to receive our newsletter. This data will only be used to send the requested information and will not be passed on to third parties. The consent given can be revoked at any time by sending a message to the contact method described or via a dedicated link in the newsletter.

The legal basis for processing your data is Article 6, Section 1, Letter a of the EU GDPR.

Email Advertising in the B2B Procedure

If we receive your email address in connection with the sale of goods or services and you have not objected, we reserve the right to regularly send you offers for similar products, such as those already purchased, from our range via email. You can object to the use of your email address at any time by sending a message to the contact method described or via a dedicated link in the promotional email, without incurring costs other than the transmission costs according to the basic rates. This procedure is regulated between merchants and companies in the General Terms and Conditions.

Postal Advertising in the B2B Procedure

We reserve the right to store your first and last name, your postal address, and if we have received this additional information from you in the course of the contractual relationship – your title, academic degree, year of birth, and your professional, industry, or business designation in consolidated lists for our own advertising purposes, e.g., to send you interesting offers and information about our products by mail. You can object to the storage and use of your data for these purposes at any time by sending a message to the contact method described below. This procedure is regulated between merchants and companies in the General Terms and Conditions.

Google Web Fonts

We use so-called web fonts to display our web pages. The provider is Google Inc., 1600 Amphitheatre Parkway Mountain View, CA 94043, USA.

When accessing our page, your browser loads the required font files. This is necessary for your browser to display our texts in an enhanced visual format.

Further information on Google Web Fonts can be found at https://developers.google.com/fonts/faq?hl=en.

General information about Google’s privacy policy can be found at http://www.google.com/intl/en/policies/privacy/.

Google Maps

We use the Google Maps internet service on our websites. The provider is Google Inc., 1600 Amphitheatre Parkway Mountain View, CA 94043, USA.

By using Google Maps on our website, information about your use of this website and your IP address will be transmitted to a Google server and also stored there. We have no knowledge about the use and processing by Google, as well as the exact content of these data.

By disabling JavaScript in your browser, you can prevent Google Maps from running. The display of maps on our websites will no longer be possible. For more details on Google Maps’ privacy policy and terms of use, please visit: https://www.google.com/intl/en_de/help/terms_maps.html.

Google AdWords / MyBusiness

We use Google AdWords as an online advertising program from Google Inc. on our websites. Conversion tracking is also used in this context. With this tool, Google AdWords places a cookie on your computer when you come to our website via a Google advertisement. The cookie expires after 30 days. The data obtained through conversion cookies is used to create conversion statistics for AdWords customers. We receive statistics from Google AdWords about the total number of users who responded to our ad. You can refuse the tracking procedure by rejecting cookies in your web browser; however, please note that in this case, you may not be able to use all the features of this website fully. For more information on Google’s privacy policy, please visit http://www.google.de/policies/privacy/.

The legal basis for processing your data is Article 6, Section 1, Letter f of the EU GDPR. The legitimate interest is the execution and review of marketing measures.

Google Analytics

We use features of the web analytics service Google Analytics on our websites. The provider is Google Inc., 1600 Amphitheatre Parkway Mountain View, CA 94043, USA.

Google Analytics uses cookies. On this website, we have enabled the IP anonymization feature, which means your IP address is usually shortened. Google uses this information to evaluate the use of our websites, create reports on website activity, and provide other services related to website and internet usage.

You can refuse the tracking procedure by rejecting cookies in your web browser; however, please note that in this case, you may not be able to use all the features of this website fully. If you wish, you can prevent the collection of data generated by cookies and related to your use of the website by Google, and the processing of this data by Google, by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=en.

If you click here, the opt-out cookie will be set: Deactivate Google Analytics

For more information about the handling of user data by Google Analytics, please see Google’s privacy policy: https://support.google.com/analytics/answer/6004245?hl=en.

We have entered into a data processing agreement with Google and fully implement the strict requirements of the German data protection authorities when using Google Analytics.

Our websites use the “demographic features” function of Google Analytics. This allows reports to be generated that include information on age, gender, and interests. These data come from Google’s interest-based advertising and third-party visitor data. These data cannot be attributed to a specific person. You can disable this feature at any time via the ad settings in your Google account.

The legal basis for processing your data is Article 6, Section 1, Letter f of the EU GDPR. The legitimate interest is the execution and review of marketing measures.

Facebook Plugins (Like Button)

We use plugins from the social network Facebook on our websites. The provider is Facebook Inc., 1 Hacker Way, Menlo Park, California 94025, USA.

You can recognize these Facebook plugins by the Facebook logo or the “Like Button” (“Gefällt mir”) on our page. An overview of Facebook plugins can be found here: https://developers.facebook.com/docs/plugins/.

When you visit our websites, a direct connection is established between your browser and the Facebook server via the plugin. This allows Facebook to receive the information that you have visited our site with your IP address. If you click the Facebook “Like Button” while logged into your Facebook account, you can link the content of our websites to your Facebook profile. As a result, Facebook can associate your visit to our websites with your user account. Please note that as the provider of the websites, we do not have knowledge of the content of the transmitted data or its use by Facebook. For more information, please refer to Facebook’s privacy policy: https://de-de.facebook.com/policy.php.

If you do not want Facebook to associate your visit to our websites with your Facebook user account, please log out of your Facebook account.

The legal basis for processing your data is Article 6, Section 1, Letter f of the EU GDPR. The legitimate interest is the execution and review of marketing measures.

YouTube

We use YouTube plugins from the YouTube website, which is operated by Google. The provider is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA.

When you visit our websites, a connection is made to YouTube’s servers. This informs the YouTube server about which of our websites you have visited.

If you are logged into your YouTube account, you enable YouTube to associate your browsing behavior with your personal profile. You can prevent this by logging out of your YouTube account. In general, YouTube may store your IP address.

For more information on how user data is handled, please refer to YouTube’s privacy policy: https://www.google.de/intl/en/policies/privacy.

The legal basis for processing your data is Article 6, Section 1, Letter f of the EU GDPR. The legitimate interest is the execution and review of marketing measures.

User Registration

On our websites, you have the opportunity to fill out a registration form. In this case, we collect personal data that you voluntarily provide to us. The data collected is visible in the respective registration form. We will use the data you provide solely for the purpose of contract preparation or processing your requests. We may also transfer your data to one or more processors who will use it exclusively for internal purposes on our behalf.

After the contract is fully processed or your customer account is deleted, your data will be blocked for further use and deleted after the statutory retention periods for tax and commercial law have expired, unless you have expressly consented to further use of your data or we reserve the right to use your data beyond that, which is legally permissible and which we will inform you about below. Deleting your customer account is always possible and can be done either by sending a message to the contact option described below or via a function provided for this purpose in your customer account.

By registering on our websites, your IP address, the date, and time of registration are stored. This data is stored to prevent misuse of our services and to enable criminal prosecution. This data will not be passed on to third parties unless there is a legal obligation to do so or if the data is needed for criminal prosecution.

The legal basis for processing your data is accordingly Article 6, Section 1, Letter b of the EU GDPR.

Transfer to Third Parties

We do not transfer your personal data to third parties outside of the purpose collection. Data will only be shared with government agencies and authorities within the scope of mandatory national legal provisions or if the transfer is necessary for legal or criminal prosecution in the case of attacks on our network infrastructure.

Rights to Access, Deletion, Blocking, Revocation, Objection, Correction, Restriction

You have the right to request free access and a copy of the personal data we hold about you or categories of data, as well as, if applicable, the right to correction, blocking, restriction, or deletion of these data. For questions regarding the collection, processing, or use of your personal data, requests for information, correction, blocking, or deletion of data, as well as withdrawal of consent or objections to specific data usage, please contact us directly via the contact details provided above.

If personal data is transferred to a third country, we will inform you about the individual transfers. You have the right to request information about the appropriate safeguards related to the transfer.

Legal Basis of the Above Rights

• Right to access (Article 15 EU GDPR)
• Right to correction (Article 16 EU GDPR)
• Right to deletion (Article 17 EU GDPR)
• Right to restriction of processing (Article 18 EU GDPR)
• Right to data portability (Article 20 EU GDPR)
• Right to objection (Article 21 EU GDPR)
• Right to withdraw consent (Article 7 (3) EU GDPR)

Notification Requirement

If you have exercised your right to correction, deletion, or restriction of processing with us, we are obliged to notify all recipients to whom your personal data has been disclosed of this correction, deletion, or restriction of processing, unless this proves impossible or involves disproportionate effort. You are entitled to be informed about these recipients.

Right to Lodge a Complaint with a Supervisory Authority

You have the right to lodge a complaint with a supervisory authority, particularly in the member state of your residence, workplace, or the location of the alleged infringement, if you believe that the processing of your personal data infringes the current legal framework.

Our Responsible Supervisory Authority

The Hessian Data Protection Commissioner
P.O. Box 31 63
65021 Wiesbaden
Gustav-Stresemann-Ring 1
65189 Wiesbaden
Tel. 0611/1408-0
Email: poststelle@datenschutz.hessen.de

Deletion of Data

Your personal data will be deleted or blocked as soon as the purpose for storing them no longer applies, or you withdraw your consent. Data may be retained if required by the European or national legislator in EU regulations, laws, or other provisions to which the controller is subject. If the purpose for retention no longer applies, if you withdraw your consent, or the prescribed retention period expires, your personal data will be blocked or deleted according to the legal regulations. If it is still necessary to retain your data for contract completion or fulfillment, this will be done under the legal requirement.

Data Security

We secure our websites, online stores, ticket systems, and other systems with appropriate technical and organizational measures (TOM) to protect your data from loss, destruction, unauthorized access, accidental changes, or distribution by unauthorized persons. Despite regular checks, full protection against all risks is not possible and cannot be guaranteed by us. For this reason, you are always free to submit your personal data to us by other means, such as by phone or by mail.

Data Transfer for Contract Fulfillment

To fulfill the contract, we pass your data to the shipping company commissioned with the delivery, insofar as this is necessary for delivering the ordered goods. Depending on the payment service provider you select during the order process, we transmit the payment data collected to the bank or payment service provider responsible for the payment transaction or to the selected payment service. Some payment service providers may also collect this data themselves if you create an account with them. In this case, you will need to log in with your credentials during the order process. In this case, the privacy policy of the respective payment service provider applies.

Encryption of Payment Transactions

We secure your data during payment transactions. For this purpose, our websites use SSL encryption during payment transactions. You can verify whether SSL encryption is activated by looking for the green padlock symbol in your browser’s address bar or noticing the change from "http://" to "https://". If SSL encryption is activated, your data is typically not accessible to third parties.

Installment Payments

If you have selected the installment payment method and provided the necessary data protection consents, your personal data (first name, last name, date of birth, address, email, phone number, gender, IP address) along with the data necessary for transaction processing (invoice amount, items, due dates, total amount, taxes, invoice number, currency, order time, and order date) will be transmitted to our partner PayPal (Europe) S.à r.l. et Cie, S.C.A. 22-24 Boulevard Royal L-2449 Luxembourg for the purpose of processing this payment method.

To check your data or creditworthiness, PayPal performs queries and obtains information from publicly accessible databases and credit agencies. The providers from which this information and, if applicable, credit information based on profiling procedures are obtained, as well as further details on the processing of your data after transmission to our partner PayPal, can be found in their privacy policy: https://www.paypal.com/de/webapps/mpp/ua/privacy-full?locale.x=de_DE.

The consent to the transfer of data provided during the order process can be revoked at any time, even without specifying reasons, with effect for the future.

Data Processing Agreement

You can request our current Data Processing Agreement (AV Contract) as a PDF. This can be downloaded, completed, and sent back to us as a PDF. You will then receive a signed version in return, also as a PDF.