Data protection

1. Data protection at a glance

General information

Below is a brief overview of how your personal data is managed when you visit our website. Personal data is any data by which you can be personally identified. You can find comprehensive details regarding data protection in our privacy policy, which you will find below.

Data collection on our website

Who is responsible for data collection on this website?

Data processing on this website is carried out by the website operator. You will find their contact details included in the legal notice for this website.

How is your data collected?

First, we collect data when you provide it. This includes any data you enter into our contact form, for example.

Second, our IT system collects data automatically when you visit this website. This is mostly technical data (e.g. your internet browser, operating system or how long you view a page). This data is automatically collected as soon as you visit our website.

How do we use your data?

Some of the data is gathered to ensure our website operates faultlessly. Other data is used to analyse your user behaviour.

What are your rights when it comes to your data?

You may request information about your personal data in our storage systems, its origin and recipient(s) and the purpose of data being processed at any time, free of charge. You are also entitled to correct, block or delete this data. Please feel free to contact us at any time in this regard or if you have any other questions on data protection. The e-mail address you need can be found in the Legal Information section. You also have the right to file a complaint with the competent supervisory authority.

Analytics tools and third-party tools

When you visit our website, we may collect statistical information about your browsing behaviour. This is mainly carried out by cookies and so-called analytics programmes. Your browsing behaviour is typically analysed anonymously and cannot be traced back to you. You can opt-out or prevent this analysis by refraining from using certain tools. Please see the following privacy policy for more information.

You also have the right to object to this analysis. We will explain how you to opt out in the following privacy policy.

2. General information and obligatory information

Data protection

We take protecting personal data very seriously. We handle your personal data with the utmost confidentiality, adhering to statutory data protection regulations and our privacy policy.

When you use this website, we collect various personal information. Personal data is any data by which you can be personally identified. This privacy policy explains which data we collect and what we use it for. It also explains how and why we collect it.

Please be aware that there may be security gaps in data transmission over the internet (e.g. when communicating by email). Complete protection against third party access is not possible.

Information on the responsible party

The data controller responsible for the processing of data on this website is:

H. Wilhelm Schaumann GmbH
An der Mühlenau 4
D-25421 Pinneberg
Telephone: +49 4101 218 2000
E-Mail: Contact

The data controller is the natural or legal person who, independently or with others, determines the purposes and means for processing personal data (e.g. names, e-mail addresses, etc.).

Withdrawing your consent for data processing

Many of the processes we use to process personal information are only possible with your consent. You may withdraw your consent at any time. All you need to do is send us an e-mail. Withdrawing your consent does not invalidate the legality of data processing carried out prior to this withdrawal.

Your right to file a complaint with the competent supervisory authority

In the event of a breach of the Data Protection Act, the person concerned is entitled to file a complaint with the competent supervisory authority. The competent supervisory authority for data protection matters is the national data protection authority of the country where our company is based. A list of Data Protection Officers and their contact details is available at the following link:

https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.

The right to data portability

You have the right to request, either from us or a third party, information processed automatically based on your consent or in the fulfilment of a contract. This information will be provided to you in a commonly used machine-readable format. If you request the data to be transferred direct to another controller, this will be carried out only where technically possible to do so.

SSL or TLS encryption

For security purposes and to safeguard the transmission of confidential information, such as orders or enquiries sent to us as the website operator, this site uses SSL or TLS encryption. You can identify an encrypted connection when the address bar of your browser changes from "http://" to "https://" and by the padlock icon in your browser bar.

When SSL or TLS encryption is enabled, third parties cannot read the data you send to us.

Disclosure, deletion, blocking of data

Within the framework of applicable legal provisions, you may request information about your personal data in our storage systems, its origin and recipient(s) and the purpose of this data being processed at any time, free of charge. You are also entitled to have this data corrected, blocked or deleted. Please contact us at any time in this regard or if you have any other questions on personal data. The e-mail address you need can be found in the Legal Information section.

How to opt-out of promotional emails

We do not consent to the use of contact information provided in the imprint for unsolicited advertising or informative content. This website’s operators expressly reserve the right to take legal action if advertising information, such as spam emails, is sent without prior consent.

3. Data Protection Officer

Statutory Data Protection Officer

We have appointed a Data Protection Officer for our company.

Dr. Ekkehard Gefken
An der Mühlenau 4
D-25421 Pinneberg

Telephone: +49 4101 218 2410
E-Mail: Contact 

4. Data collection on our website

Cookies

Certain web pages use so-called cookies. Cookies do not harm your computer. They do not contain viruses. Cookies help make our site more user-friendly, effective and safe. Cookies are small text files stored on your computer by your browser.

Most cookies we use are "session cookies". They are automatically deleted when you finish browsing. Other cookies remain on your device until deleted. These cookies allow us to recognise your browser next time you visit.

You can set your browser to receive notifications about cookie settings. You can choose to allow cookies on a case-by-case basis, reject cookies for specific situations or altogether, and enable automatic deletion of cookies when you close your browser. If you choose to disable cookies, the functionality of this website may be limited.

Cookies necessary for the electronic communication process or to provide specific functions you requested (e.g. shopping cart functionality) are stored based on Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in the storage of cookies in order to ensure its services are technically flawless and optimized. For other types of cookies, such as those analysing your browsing behaviour, these are addressed separately in this privacy policy.

Server log files

The provider of these pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are:

  • Browser type and version
  • Operating system used
  • Referrer URL
  • Hostname of the accessing computer
  • Time of server request
  • IP address

This data is not merged with other data sources.

Data processing is based on Art. 6 para. 1 lit. b GDPR, which permits the processing of data for the performance of a contract or pre-contractual measures.

Contact form

When you submit enquiries using our contact form, we will store the details you provide, including your contact information, for the purpose of processing the enquiry and answering any follow-up questions. We will not share this information with your consent to do so.

The data entered in the contact form will therefore only be processed on the basis of your consent (Art. 6 par. 1 lit. a of the GDPR). You may withdraw your consent at any time. All you need to do is send us an e-mail. Withdrawing your consent does not invalidate the legality of data processing actions carried out prior to this withdrawal.

We will keep the information you submit on the contact form until you ask us to delete it, withdraw your consent for its storage, or when the purpose for its storage no longer applies (for example, after fulfilling your request). Compulsory statutory provisions - in particular retention periods - remain unaffected.

Consent to Usercentrics

This website uses Usercentrics consent technology to obtain your consent for storing specific cookies on your device or using certain technologies, and to document these in accordance with data protection regulations. This technology is provided by Usercentrics GmbH, Sendlinger Straße 7, 80331 Munich, Website: https://usercentrics.com/de/ (hereinafter „Usercentrics“).

The following personal information is transferred to Usercentrics when you visit our website:

  • Your consent(s) or the withdrawal of your consent(s)
  • Your IP address
  • Information about your browser
  • Information about your end device
  • Time of visit to website

In addition, Usercentrics places a cookie in your browser to manage the consent you have granted or withdrawn. The data collected through this method is stored until you ask us to delete it, delete the Usercentrics cookie yourself, or until the purpose for storing the data no longer applies Compulsory statutory provisions - in particular retention periods - remain unaffected.

Usercentrics is used to obtain the consents that are required by law for the use of certain technologies. The legal foundation for this is Art. 6 para. 1 lit. c GDPR.

Order processing

We have entered into a contract for the processing of orders (POC) with the above-mentioned supplier. This contract is required by data protection law, ensuring that the personal data of our website visitors is processed solely as per our instructions and in adherence with GDPR guidelines.

5. Analytics tools and advertising

etracker

Our website uses etracker GmbH from Hamburg, Germany (www.etracker.com) to analyse usage data. By default, we do not use cookies for web analytics purposes. We will obtain your explicit consent separately in advance if we use analysis and optimisation cookies. If you agree, cookies will be used to conduct statistical reach analysis of this website, measure the success of our online marketing efforts, and carry out test procedures, such as evaluating and improving various iterations of our online offering and its components. Cookies are small text files that are stored by the internet browser on a user's end device. etracker cookies do not contain any information that can be used to identify the user.

The data generated by etracker is processed and stored exclusively in Germany on behalf of this website's provider. As such, it is subject to the stringent German and European data protection laws and stardards. etracker has undergone independent auditing and certification and has been granted the ePrivacyseal data protection certification..

Data processing is carried out in accordance with the legal provisions outlined in Art. 6 para. 1 lit. f (legitimate interest) of the General Data Protection Regulation (GDPR). Our legitimate interest, as defined by the GDPR, is to optimise our online offering and our website. The privacy of our website visitors is of prime importance to us, as such any data that could identify an individual, such as IP addresses, login details, or device identifiers, are anonymised or pseudonymised at the earliest opportunity. Data will not be used for other purposes, merged with other data or disclosed to third parties.

You have the right to object to the processing of your data as described above at any time. There will be no negative consequence as a result of this action.


Find out more about data protection at etracker here.

Contract agreed for order data processing

We have entered into a contract with etracker for order data processing. We fully comply with the stringent standards established by German data protection authorities in our utilisation of etracker.

Our social media presence

Data processing by social networks

We maintain publicly accessible profiles on social networks. The individual social networks we use are listed below.

Social networks like Facebook, Twitter, etc. are able to extensively analyse your user behaviour when you visit their website or a site with integrated social media elements (e.g. ‘like’ buttons or advertising banners). When you visit our social media sites this triggers several data processing operations. These are:

If you are logged into your social media account and visit one of our social media profiles, the platform operator may link that visit to your user account. Your personal data may also be collected even if you are not logged in or do not have an account with the respective social media platform. In these instances, data collection takes place via cookies stored on your device or by recording your IP address.

Using the data collected in this manner, social media platform operators can construct user profiles with your preferences and interests. They can then display personalised adverts based on your interests when you use the relevant social media platform and elsewhere. If you have an account with the social network, interest-based advertising may appear on all devices where you're currently logged in or have been logged in previously.

Please note that we are unable to track all of the processing carried out on social media platforms. Depending on the provider, social media platform operators may conduct additional data processing. For more details, please refer to the terms of use and data protection provisions of the respective social media channels.

Legal basis

Our social media presence is designed to ensure maximum online exposure. This is a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR. The analysis procedures conducted by social networks may rely on various legal bases, which must be specified by the social network operators (for example, consent as defined in Art. 6 para. 1 lit. a GDPR).

Responsible party and assertion of rights

When you visit one of our social media pages (e.g. Facebook), responsibility for the data processing activities initiated during your visit is shared with the social media platform operator. You have the right to exercise your rights (e.g. data disclosure, correction, deletion, processing restriction, portability, file a complaint) against us and the relevant social media platform operator (e.g. Facebook).

Please note that although we share responsibility with the social media platform operators, we do not have complete control over the data processing activities of these platforms. Our options depend largely on the provider's policy.

Data retention

We will keep the information we collect on our social media platforms until you ask us to delete it, withdraw your consent for its storage, or when the purpose for its storage no longer applies. Saved cookies remain on your device until deleted. Compulsory statutory provisions - in particular retention periods - remain unaffected.

We have no control over how long your data is stored by social network operators. They use this data for their own purposes. For details, please contact the operators of the social networks directly. You can find this information in their privacy policies below.

Social media platform details

YouTube

We have a YouTube profile. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Details on how YouTube handles your personal data can be found in their privacy policy: https://policies.google.com/privacy?hl=de.

Facebook

We have a Facebook profile. The provider is Facebook Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. According to Facebook, the data that is collected is also transferred to the United States and to other third countries.

Customise your advertising preferences in your account. Click this link to log in to your account: https://www.facebook.com/setti....

The transfer of data to the United States is based on the standard contractual clauses of the European Commission.

For details, please refer to: https://www.facebook.com/legal... and https://de-de.facebook.com/hel....

Please refer to Facebook's privacy policy: https://www.facebook.com/about....

Instagram

We have an Instagram profile. The provider is Instagram Inc, 1601 Willow Road, Menlo Park, CA, 94025, USA.

The transfer of data to the United States is based on the standard contractual clauses of the European Commission.

For details, please refer to: https://www.facebook.com/legal..., https://help.instagram.com/519... and https://de-de.facebook.com/hel....

Details on how Instagram handles your personal data can be found in their privacy policy: https://help.instagram.com/519....

XING

We have a profile on XING. The provider is New Work SE, Dammtorstraße 30, 20354 Hamburg, Germany. Details on how Xing handles your personal data can be found in their privacy policy: https://privacy.xing.com/de/da....

6. Pluins and tools

Vimeo Do Not Track

This website uses plugins from the video portal Vimeo. The provider is Vimeo Inc., 555 West 18th Street, New York, New York 10011, USA.

When you visit a Vimeo-enabled page, you are connecting to Vimeo's servers. This tells the Vimeo server which pages you visited. Vimeo also register your IP address. However, we have configured Vimeo so that it does not track your activity or set cookies.

We use Vimeo to present our online content attractively. This is a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR. If corresponding consent has been requested, processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR. You have the right to withdraw consent at any time.

Data transfer to the US is based on the EU Commission's standard contractual clauses and is deemed by Vimeo as in line with "legitimate business interests". For details, please refer to: https://vimeo.com/privacy.

For more information on how user data is processed by Vimeo, please refer to Vimeo's privacy policy: https://vimeo.com/privacy.

Google Maps

This site uses the Google Maps map service via an API. It is operated by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

To use Google Maps, it is necessary to save your IP address. This information is generally transmitted to a Google server in the USA and stored there. The provider of this site has no influence on this data transfer.

The use of Google Maps is in the interest of making our website appealing and to facilitate the location of places specified by us on the website. This constitutes a justified interest pursuant to Art. 6 (1) (f) DSGVO.

Further information about handling user data, can be found in the data protection declaration of Google at: https://www.google.de/intl/de/policies/privacy/.

Google Tag Manager

We use Google Tag Manager. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Tag Manager is a tool we use to integrate tracking, analytics and other technologies into our website. There is no user profiling, cookie storage or independent analysis performed by Google Tag Manager. It is only used to manage and display integrated tools. Google Tag Manager does record your IP address however, and this may be transmitted to Google's parent company in the USA.

Google Tag Manager is used in line with Art. 6 para. 1 lit. f GDPR. A website owner has a legitimate interest in quickly and easily integrating and managing tools on their website. If consent has been sought accordingly, processing is conducted solely in accordance with Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG, provided that the consent encompasses the storage of cookies or access to information on the user's end device (e.g. device fingerprinting) as defined by the TDDDG. You have the right to withdraw consent at any time.