Privacy policy
Privacy Policy
1) Introduction and Contact Details of the Controller
1.1 We are pleased that you are visiting our website and thank you for your interest. Below, we inform you about how we handle your personal data when you use our website. Personal data is all data by which you can be personally identified.
1.2 The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is PrecisionPro GmbH, Am alten Örtchen 3a, 53505 Berg, Germany, Tel.: (+49) 02643-9482988, e-mail: [email protected]. The controller is the natural or legal person who, alone or jointly with others, decides on the purposes and means of the processing of personal data.
2) Data Collection When You Visit Our Website
2.1 When you use our website purely for information purposes—i.e. if you do not register or otherwise transmit information to us—we collect only the data that your browser transmits to the server hosting our pages (so-called “server log files”). When you access our website, we collect the following data that is technically necessary for us to display the website to you:
- The website visited
- Date and time at the moment of access
- Amount of data sent in bytes
- Source/referrer from which you reached the page
- Browser used
- Operating system used
- IP address used (where applicable, in anonymised form)
Processing is carried out pursuant to Art. 6 (1)(f) GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data is not passed on or used in any other way. However, we reserve the right to subsequently check the server log files if there are specific indications of unlawful use.
2.2 For security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or enquiries to the controller), this website uses SSL or TLS encryption. You can recognise an encrypted connection by the character string “https://” and the lock symbol in your browser’s address bar.
3) Hosting & Content Delivery Network
For hosting our website and displaying the site content, we use a provider that performs its services itself or through selected sub-contractors exclusively on servers located within the European Union.
All data collected on our website is processed on these servers.
We have entered into a data-processing agreement with the provider that ensures the protection of our site visitors’ data and prohibits unauthorised disclosure to third parties.
4) Cookies
To make visiting our website attractive and to enable the use of certain functions, we use cookies—small text files that are stored on your end device. Some of these cookies are deleted automatically after you close the browser (so-called “session cookies”), while others remain on your end device for a longer period and enable us to save page settings (so-called “persistent cookies”). For the latter, you can find the storage duration in your web browser’s cookie settings overview.
If personal data is also processed by individual cookies implemented by us, processing takes place
pursuant to Art. 6 (1)(b) GDPR either for the performance of a contract,
pursuant to Art. 6 (1)(a) GDPR if consent has been given, or
pursuant to Art. 6 (1)(f) GDPR to safeguard our legitimate interest in the best possible functionality of the website as well as a customer-friendly and effective design of the site visit.
You can set your browser so that you are informed about the setting of cookies and can decide individually whether to accept them or exclude the acceptance of cookies for certain cases or in general.
Please note that disabling cookies may limit the functionality of our website.
5) Contacting Us
When you contact us (e.g. via contact form or e-mail), personal data is processed—solely for the purpose of handling and responding to your enquiry and only to the extent necessary to do so.
The legal basis for processing these data is our legitimate interest in responding to your request pursuant to Art. 6 (1)(f) GDPR. If your contact is aimed at the conclusion of a contract, an additional legal basis for the processing is Art. 6 (1)(b) GDPR. Your data will be deleted once it can be inferred from the circumstances that the matter in question has been fully clarified and provided that no statutory retention obligations apply.
6) Data Processing When Opening a Customer Account
Pursuant to Art. 6 (1)(b) GDPR, personal data is collected and processed to the necessary extent when you provide it to us when opening a customer account. Which data is required for opening the account can be seen from the input form on our website.
You may delete your customer account at any time by sending a message to the above-mentioned address of the controller. After deletion of your customer account, your data will be deleted provided that all contracts concluded through it have been fully processed, no statutory retention periods apply and we have no legitimate interest in continued storage.
7) Data Processing for Order Handling
7.1 To the extent necessary for contract processing for delivery and payment purposes, the personal data collected by us is passed on pursuant to Art. 6 (1)(b) GDPR to the commissioned transport company and the commissioned credit institution.
If we owe you updates for goods with digital elements or for digital products on the basis of a corresponding contract, we will use the contact data you provided when placing the order to inform you personally within the scope of our statutory information obligations pursuant to Art. 6 (1)(c) GDPR. Your contact data will be processed strictly for the purpose of notifying you about updates owed by us and only to the extent necessary for the respective information.
For processing your order, we also work with the service provider(s) below who support us in full or in part in the execution of concluded contracts. Certain personal data is transmitted to these service providers in accordance with the information below.
7.2 Post & DHL Shipping (official)
For preparing shipments we use the services of the following provider: Deutsche Post DHL Research and Innovation GmbH, Kurt-Schumacher-Str. 1, 53113 Bonn.
Pursuant to Art. 6 (1)(b) GDPR, we transmit digital shipping labels with your delivery information solely for the purpose of processing your online order from our order-management system to the provider, which then sends them to our local printers to enable printing. Data is only disclosed insofar as it is actually required for processing.
7.3 Disclosure of Personal Data to Shipping Service Providers
- DHL
We use the following provider as our transport service provider: DHL Paket GmbH, Sträßchensweg 10, 53113 Bonn, Germany.
We pass on your e-mail address and/or telephone number pursuant to Art. 6 (1)(a) GDPR before delivery of the goods for the purpose of coordinating a delivery date or delivery notification, provided that you have expressly consented to this during the ordering process. Otherwise, for the purpose of delivery we transmit only the name of the recipient and the delivery address pursuant to Art. 6 (1)(b) GDPR. Data is disclosed only to the extent necessary for the delivery of goods. In this case, advance coordination of the delivery date with the provider or delivery notification is not possible.
Consent can be revoked at any time with effect for the future vis-à-vis the controller or the provider.
- UPS
We use the following provider as our transport service provider: United Parcel Service Deutschland Inc. & Co. OHG, Görlitzer Straße 1, 41460 Neuss, Germany.
The same procedure and legal bases apply as described above for DHL.
7.4 Use of Payment Service Providers
- PayPal
This website offers one or more online payment methods from the following provider: PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg.
If you choose a payment method from the provider where you are required to pay in advance, the payment data you provide during the order process (including name, address, bank and card information, currency and transaction number) as well as information about the content of your order will be passed on pursuant to Art. 6 (1)(b) GDPR. The data is passed on solely for the purpose of payment processing and only to the extent necessary.
If you select a payment method for which we go in advance performance, you will also be asked during the ordering process to provide certain personal data (first and last name, street, house number, postcode, city, date of birth, e-mail address, telephone number and, where applicable, data regarding an alternative means of payment).
To protect our legitimate interest in determining your ability to pay, we pass this data on to the provider for the purpose of a credit check pursuant to Art. 6 (1)(f) GDPR. The provider uses the personal data as well as other data (such as shopping-cart data, invoice amount, order history, payment experience) to assess whether the payment option you have selected can be granted with regard to payment- and/or default-risk.
The credit report may contain probability values (so-called scoring). Insofar as scoring values are included in the credit report result, they are based on a scientifically recognised mathematical-statistical procedure, and address data is also included in the calculation.
You can object to this processing of your data at any time by sending a message to us or to the provider. However, the provider may still be entitled to process your personal data if this is necessary for contractual payment processing.
8) Web Analytics Services
Google Analytics 4
This website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”), which enables an analysis of your use of our website.
By default, Google Analytics 4 sets cookies when you visit the website, which are small text modules that are stored on your end device and collect certain information. This includes your IP address, which, however, is truncated by Google by the last digits to exclude direct personal reference.
The information is transmitted to Google servers and processed there; transfers to Google LLC in the USA are possible.
Google uses the information collected on our behalf to evaluate your use of the website, to compile reports on website activity for us, and to provide other services related to website and internet usage. The IP address transmitted by your browser as part of Google Analytics is not merged with other Google data. The data collected when using Google Analytics 4 is stored for two months and then deleted.
All processing described above, and in particular the setting of cookies on the end device used, is carried out only if you have given us your express consent pursuant to Art. 6 (1)(a) GDPR.
If you do not give your consent, Google Analytics 4 will not be used during your visit. You can revoke your consent at any time with effect for the future by deactivating this service via the “cookie-consent tool” provided on the website.
We have concluded a data-processing agreement with Google that ensures the protection of our site visitors’ data and prohibits unauthorised disclosure to third parties.
Further legal information on Google Analytics 4 can be found at https://business.safety.google/intl/de/privacy/, https://policies.google.com/privacy?hl=de&gl=de and https://policies.google.com/technologies/partner-sites.
Demographic Characteristics
Google Analytics 4 uses the special “demographic characteristics” function and can create statistics that make statements about the age, gender and interests of site visitors. This is done by analysing advertising and information from third-party providers. This makes it possible to identify target groups for marketing activities. The collected data cannot be assigned to a specific person and is deleted after two months.
Google Signals
As an extension to Google Analytics 4, Google Signals can be used on this website to create cross-device reports. If you have activated personalised ads and linked your devices to your Google account, Google can analyse your usage behaviour across devices and create database models, including cross-device conversions, subject to your consent to the use of Google Analytics pursuant to Art. 6 (1)(a) GDPR. We do not receive any personal data from Google, only statistics. If you want to stop the cross-device analysis, you can deactivate the “Personalised advertising” feature in your Google account settings. Follow the instructions on this page: https://support.google.com/ads/answer/2662922?hl=de. Further information on Google Signals can be found here: https://support.google.com/analytics/answer/7532985?hl=de.
User IDs
As an extension to Google Analytics 4, the “User IDs” function can be used on this website. If you have consented to the use of Google Analytics 4 pursuant to Art. 6 (1)(a) GDPR, created an account on this website and log in on different devices with this account, your activities, including conversions, can be analysed across devices.
For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European data-protection level on the basis of an adequacy decision by the European Commission.
9) Retargeting/Remarketing and Conversion Tracking
Google Ads Conversion Tracking
This website uses the online advertising program “Google Ads” and, within the scope of Google Ads, the conversion-tracking feature of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). We use Google Ads to draw attention to our attractive offers on external websites by means of advertising media (so-called Google AdWords). In relation to the data from advertising campaigns, we can determine how successful the individual advertising measures are. We pursue the interest of showing you advertising that is of interest to you, making our website more interesting for you and achieving a fair calculation of advertising costs.
The conversion-tracking cookie is set when a user clicks on a Google-placed Ads advertisement. Cookies are small text files stored on your end device. These cookies usually lose their validity after 30 days and do not serve to personally identify you. If the user visits certain pages of this website and the cookie has not yet expired, Google and we can recognise that the user clicked on the advertisement and was redirected to this page. Each Google Ads customer receives a different cookie. Cookies cannot therefore be tracked across the websites of Google Ads customers. The information obtained using the conversion cookie is used to create conversion statistics for Google Ads customers who have opted for conversion tracking. The customers find out the total number of users who clicked on their advertisement and were redirected to a page tagged with a conversion-tracking tag. However, they do not receive any information that personally identifies users. In the context of using Google Ads, personal data may also be transmitted to the servers of Google LLC in the USA.
Details about the processing initiated by Google Ads conversion tracking and Google’s handling of data from websites can be found here: https://policies.google.com/technologies/partner-sites
All processing described above, in particular the setting of cookies for reading information on the end device used, is carried out only if you have given us your express consent pursuant to Art. 6 (1)(a) GDPR. You can revoke your consent at any time with effect for the future by disabling this service in the “cookie-consent tool” provided on the website.
You can permanently object to the setting of cookies by Google Ads conversion tracking by downloading and installing the browser plug-in available at the following link:
https://www.google.com/settings/ads/plugin?hl=de
Please note that certain functions of this website may not be usable or may only be usable to a limited extent if you have disabled the use of cookies.
Google’s privacy policies can be viewed at https://business.safety.google/intl/de/privacy/ and https://www.google.de/policies/privacy/
For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European data-protection level on the basis of an adequacy decision by the European Commission.
10) Site Functionality
10.1 Google Web Fonts
This site uses so-called web fonts provided by the following provider for the uniform display of fonts: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland.
When you call up a page, your browser loads the required web fonts into its browser cache to display texts and fonts correctly and establishes a direct connection to the provider’s servers. Certain browser information, including your IP address, is transmitted to the provider in the process.
Data may also be transmitted to: Google LLC, USA.
The processing of personal data in the course of contacting the provider of the fonts is carried out only if you have given us your express consent pursuant to Art. 6 (1)(a) GDPR. You can revoke your consent at any time with effect for the future by deactivating this service via the “cookie-consent tool” provided on the website. If your browser does not support web fonts, a standard font from your computer will be used.
For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, ensuring compliance with the European data-protection level.
Further information on Google’s privacy policy can be found here: https://business.safety.google/intl/de/privacy/
10.2 Google reCAPTCHA
We use the CAPTCHA service of the following provider on this website: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland
Data may also be transmitted to: Google LLC, USA. For visual design of the captcha window, the provider uses “Google Fonts”, i.e. fonts downloaded from Google. No processing of information other than those mentioned above, which are already transmitted to Google via the functionality of reCAPTCHA, takes place.
The service checks whether an input is made by a natural person or abusively by machine and automated processing, and blocks spam, DDoS attacks and similar automated malicious access. To ensure that an action is performed by a human and not by an automated bot, the provider collects the IP address of the end device used, identification data of the browser and operating-system type used, as well as the date and duration of the visit and transmits these to the provider’s servers for evaluation. Cookies (small text files stored in the browser of the end device) may be used in this process.
Where the processing described above is based on cookies, these are only set if you have given us your express consent pursuant to Art. 6 (1)(a) GDPR. You can revoke your consent at any time with effect for the future by deactivating this service in the “cookie-consent tool” provided on the website.
If the processing described above is carried out without the use of cookies, the legal basis is our legitimate interest in establishing individual responsibility on the internet and in preventing misuse and spam pursuant to Art. 6 (1)(f) GDPR.
We have concluded a data-processing agreement with the provider that ensures the protection of our site visitors’ data and prohibits unauthorised disclosure to third parties.
For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, ensuring compliance with the European data-protection level.
Further information on Google’s privacy policy can be found here: https://business.safety.google/intl/de/privacy/
11) Tools and Miscellaneous
11.1 - BuchhaltungsButler
For accounting purposes, we use the cloud-based accounting software service of the following provider: BuchhaltungsButler GmbH, Ausbau 1, 15910 Unterspreewald, Germany.
The provider processes incoming and outgoing invoices and, where applicable, our company’s bank transactions in order to automatically capture invoices, match them to transactions and create financial accounting from them in a semi-automated process.
If personal data is processed in this context, processing is carried out on the basis of our legitimate interest in efficiently organising and documenting our business transactions pursuant to Art. 6 (1)(f) GDPR.
11.2 Cookie-Consent Tool
This website uses a so-called “cookie-consent tool” to obtain effective user consent for cookies requiring consent and cookie-based applications. The cookie-consent tool is displayed to users as an interactive user interface when they access the page, where consents for certain cookies and/or cookie-based applications can be given by ticking boxes. All cookies/services requiring consent are only loaded if the respective user gives the corresponding consent by ticking the box. This ensures that such cookies are placed on the respective end device of the user only if consent has been given.
The tool sets technically necessary cookies to save your cookie preferences. No personal user data is generally processed in the process.
Should personal data (such as the IP address) be processed for the purposes of storage, allocation or logging of cookie settings in individual cases, this is carried out pursuant to Art. 6 (1)(f) GDPR on the basis of our legitimate interest in lawful, user-specific and user-friendly consent management for cookies and thus in a lawful design of our online presence.
An additional legal basis for processing is Art. 6 (1)(c) GDPR. As the controller, we are subject to the legal obligation to make the use of technically unnecessary cookies dependent on the respective user consent.
Where necessary, we have concluded a data-processing agreement with the provider that ensures the protection of our site visitors’ data and prohibits unauthorised disclosure to third parties.
Further information on the operator and the configuration options of the cookie-consent tool can be found directly in the corresponding user interface on our website.
12) Rights of the Data Subject
12.1 Under applicable data-protection law, you are granted the following data-subject rights against the controller regarding the processing of your personal data (rights of access and intervention); for the respective conditions of exercise, please refer to the cited legal basis:
- Right of access pursuant to Art. 15 GDPR;
- Right to rectification pursuant to Art. 16 GDPR;
- Right to erasure pursuant to Art. 17 GDPR;
- Right to restriction of processing pursuant to Art. 18 GDPR;
- Right to notification pursuant to Art. 19 GDPR;
- Right to data portability pursuant to Art. 20 GDPR;
- Right to withdraw consent given pursuant to Art. 7 (3) GDPR;
- Right to lodge a complaint pursuant to Art. 77 GDPR.
12.2 RIGHT TO OBJECT
IF WE PROCESS YOUR PERSONAL DATA ON THE BASIS OF OUR OVERRIDING LEGITIMATE INTEREST IN THE CONTEXT OF A BALANCING OF INTERESTS, YOU HAVE THE RIGHT AT ANY TIME, FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION, TO OBJECT TO THIS PROCESSING WITH FUTURE EFFECT.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE AFFECTED DATA. HOWEVER, WE RESERVE THE RIGHT TO FURTHER PROCESSING IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR PROCESSING THAT OVERRIDE YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FREEDOMS, OR IF THE PROCESSING SERVES THE ESTABLISHMENT, EXERCISE OR DEFENCE OF LEGAL CLAIMS.
IF YOUR PERSONAL DATA IS PROCESSED BY US FOR DIRECT-MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR THE PURPOSE OF SUCH MARKETING. YOU MAY EXERCISE THE OBJECTION AS DESCRIBED ABOVE.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE AFFECTED DATA FOR DIRECT-MARKETING PURPOSES.
13) Duration of Storage of Personal Data
The duration of storage of personal data is determined by the respective legal basis, the purpose of processing and—where relevant—additionally by the statutory retention period (e.g. commercial and tax retention periods).
When processing personal data on the basis of an explicit consent pursuant to Art. 6 (1)(a) GDPR, this data is stored until you revoke your consent.
If statutory retention periods exist for data that is processed within the framework of contractual or quasi-contractual obligations on the basis of Art. 6 (1)(b) GDPR, this data will be routinely deleted after the retention periods have expired, provided it is no longer required for contract fulfilment or contract initiation and/or we have no legitimate interest in continued storage.
When processing personal data on the basis of Art. 6 (1)(f) GDPR, this data is stored until you exercise your right of objection pursuant to Art. 21 (1) GDPR, unless we can demonstrate compelling legitimate grounds for processing that override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.
When processing personal data for the purpose of direct marketing on the basis of Art. 6 (1)(f) GDPR, this data is stored until you exercise your right of objection pursuant to Art. 21 (2) GDPR.
Unless otherwise provided for in the other information in this statement regarding specific processing situations, stored personal data is otherwise deleted when it is no longer necessary for the purposes for which it was collected or otherwise processed.