1. Data Protection at a glance
Data collection on our website
Who is responsible for data collection on this website?
Data processing on this website is carried out by the website operator. Their contact details can be found in the imprint of this website.
How do we collect your data?
Some of your data will be collected by you providing it to us. Such data may include data you enter in a contact form, for example.
Other data are collected automatically by our IT systems when you visit the website. These are predominantly technical data (e.g. Internet browser, operating system or time the page was requested). These data are collected automatically as soon as you enter our website.
What do we use your data for?
Some of the data are collected to ensure faultless provision of the website. Other data can be used to analyse your user behaviour.
What rights do you have regarding your data?
You have the right to obtain free information about the origin, recipient and purpose of your stored personal data at any time. You also have a right to request the rectification, blocking or erasure of these data. To assert these rights, and for further questions about data protection, you can contact us at any time at the address provided in the imprint. Furthermore, you have the right to lodge a complaint with the competent supervisory authority.
Analysis tools and third party tools
2. General and mandatory information
Please note that data transmission over the Internet (e.g. in communications via email) may be subject to security loopholes. It is impossible to protect the data completely from third party access.
Information about the controller
The data controller for this website is:
K&K Handelsgesellschaft mbH
Gewerbepark Hardtwald 14
D-68723 Oftersheim, Germany
Tel: +49 6202 85 932 0
The controller is the natural or legal entity who, alone or with others, decides on the purposes and means of processing personal data (e.g. names, email addresses, etc.).
Right to lodge an appeal with the competent supervisory authority
In the event of breaches of data protection legislation, the data subject has the right of appeal to the competent supervisory authority. The competent supervisory authority for data protection issues is the State Data Protection Officer (Landesdatenschutzbeauftragte) of the German Federal State in which our company is based. The following link provides a list of the data protection officers and their contact details:https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.
Right to data portability
You have the right to have data, which we automatically process based on your consent or in fulfilment of a contract, issued to you or to third parties in a machine-readable format. If you require data be transferred to another controller, this will only be done if it is technically feasible to do so.
SSL or TLS encryption
For security reasons and to protect the transmission of confidential content, such as orders or requests that you send to us as a site operator, this site uses SSL or TLS encryption. You can recognise an encrypted connection as the address line in your browser changes from ‘http: //’ to ‘https: //’ and by the lock symbol in your address bar.
If SSL or TLS encryption is enabled, the data you submit to us cannot be read by third parties.
Encrypted payments on this website
If, after concluding a fee-based contract, you are obliged to send us your payment information (e.g. account numbers for direct debit authorisation), this information will be required for payment processing.
Transactions carried out using standard payment methods (Visa/MasterCard, direct debit) are made through an encrypted SSL or TLS connection. You can recognise an encrypted connection as the address line in your browser changes from ‘http: //’ to ‘https: //’ and by the lock symbol in your address bar.
If communication is encrypted, the payment details that you submit to us cannot be read by third parties.
Information, blocking, erasure
Under applicable statutory provision, you have the right to obtain information on your stored personal data, their origin and recipient and the purpose of the data processing at any time, as well as a right to rectification, blocking or erasure of these data where appropriate. For further information on personal data, you can contact us at any time at the address provided in the imprint.
3. Data collection on our website
Some webpages use so-called cookies. Cookies do not harm your computer and do not contain viruses. Cookies are used to make our service more user-friendly, effective and secure. Cookies are small text files that are stored on your computer and saved by your browser.
Most of the cookies we use are so-called ‘session cookies’. They are automatically deleted after your visit. Other cookies remain stored on your device until you delete them. These cookies allow us to recognise your browser the next time you visit.
You can set your browser to inform you about the placement of cookies and to allow cookies only in individual cases, to accept cookies in certain cases or generally to exclude cookies. You can also set cookies to be deleted automatically when you close your browser. Disabling cookies may limit the functionality of this website.
Server log files
The website provider automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. The data transmitted includes:
- Browser type and version
- Operating system used
- Referrer URL
- Host name of the accessing computer
- Time of the server request
- IP address
These data will not be merged with other data sources.
These data are collected on the basis of Art. 6 (1) (f) GDPR. The website operator has a legitimate interest in the technically error-free presentation and optimisation of its website – for this reason, server log files must be collected
If you send us enquiries via the contact form, the details you provided on the enquiry form, including contact details, will be stored on our premises for the purpose of processing the request and any subsequent queries. We will not share this information without your consent.
The processing of the data entered in the contact form is thus carried out exclusively based on your consent (Art. 6 (1) (a) GDPR. You may withdraw this consent at any time. An informal message to us by email is sufficient. The withdrawal of consent shall not affect the lawfulness of any data processing carried out on the basis of the consent prior to its withdrawal.
The information entered by you in the contact form shall remain with us until you ask us to erase it, you withdraw your consent to its storage or the purpose for which it was stored no longer pertains (e.g. after your enquiry has been processed). Mandatory statutory provisions – and in particular retention periods – remain unaffected.
Registration on this website
You can register on our website in order to use additional features on the site. Data submitted as part of registration is used solely for the purpose of the use of the respective offer or service for which you have registered. The mandatory information requested during registration must be provided in full. Otherwise, we will reject your registration.
For important changes, such as those regarding the scope of the service, or in the event of technical changes, we will inform you using the email address provided during registration.
Processing of the data entered during registration is based on your consent (Art. 6 (1) (a) GDPR. You may withdraw your consent at any time. An informal message to us by email is sufficient. The withdrawal of consent shall not affect the lawfulness of data processing that has already been completed.
The data collected during registration will be stored by us for as long as you are registered on our website and will be subsequently erased. Legal retention periods remain unaffected.
Processing of data (customer and contract data)
We collect, process and use personal data only insofar as they are required for the establishment, content or modification of the legal relationship (inventory data). This is done on the basis of Art. 6 (1) (b) GDPR, which allows the processing of data to perform a contract or actions prior to the performance of a contract. We collect, process and use personal data from the use of our website (usage data) only insofar as this is necessary to enable the user to use the service, or to charge them for such use of the service.
The collected customer data will be erased after completion of the order or termination of the commercial relationship. Statutory retention periods remain unaffected.
Data transmission on conclusion of the contract for online shops, retailers and goods dispatch
We only transfer personal data to third parties if required to do so for execution of the contract. For example, we may transfer personal data to the companies entrusted with the delivery of the goods or to the credit institution responsible for processing the payment. No other transmission of data takes place unless you have expressly consented to the transmission. Your data shall not be transferred to third parties, such as for advertising purposes, without explicit consent.
The basis for data processing is Art. 6 (1) (b) GDPR, which allows the processing of data to perform a contract or actions prior to the performance of a contract
4. Analysis tools and advertising
This website uses functions of the web analysis service Google Analytics. The provider is Google Inc. 1600 Amphitheatre Parkway Mountain View CA 94043 USA.
Google Analytics uses so-called ‘cookies’. These are text files that are stored on your computer and that allow analysis of your use of the website. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the United States and stored there.
Google Analytics cookies are stored on the basis of Art. 6 (1) (f) GDPR. The website operator has a legitimate interest in analysing user behaviour in order to optimise both its website and its advertising.
We have activated the IP anonymisation function on this website. As a result, your IP address will be truncated by Google within European Union Member States or in signatory states to the Agreement on the European Economic Area prior to transmission to the United States. Only in exceptional cases will the full IP address be sent to a Google server in the United States and truncated there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide the website operator with other services related to website and Internet usage. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.
You can prevent the storage of cookies by setting your browser software accordingly; however, please note that if you do this, you may not be able to use all the features of this website to the fullest extent possible. In addition, you may prevent Google from collecting the data generated by the cookie and related to your use of the website (including your IP address), and from processing these data, by downloading and installing the browser plugin available from the following link:https://tools.google.com/dlpage/gaoptout?hl=en.
Objection to data collection
You can prevent the collection of your data by Google Analytics by clicking on the following link. An opt-out cookie will be placed which will prevent the collection of your data on future visits to this website:Disable Google analytics.
We have entered into a data processing agreement with Google and fully implement the strict requirements of the German data protection authorities when using Google Analytics.
Demographics in Google Analytics
This website uses the demographics feature of Google Analytics. This allows reports to be produced containing information on the age, gender and interests of visitors to the site. These data come from interest-based advertising from Google and third-party visitor data. These data cannot be traced to a specific person. You can disable this feature at any time via the ad settings in your Google Account, or generally prohibit the collection of your data by Google Analytics as outlined in the section ‘Objection to Data Collection’.
Google AdWords and Google Conversion Tracking
This website uses Google AdWords. AdWords is an online advertising program by Google Inc. 1600 Amphitheater Parkway, Mountain View, CA 94043, United States (‘Google’).
We use so-called conversion tracking within Google AdWords. When you click on an ad served by Google, a conversion tracking cookie is placed on your computer. Cookies are small text files that the Internet browser stores on the user’s computer. These cookies lose their validity after 30 days and are not used to personally identify users. If the user visits certain pages within this website and the cookie has not yet expired, both we and Google can recognise that the user clicked on the ad and was redirected to this page.
Each Google AdWords customer receives a different cookie. The cookies cannot be tracked through the websites of AdWords customers. The information gathered using the conversion cookie is used to generate conversion statistics for AdWords customers who have opted for conversion tracking. Customers are told the total number of users who clicked on their ad and were redirected to a page containing a conversion tracking tag. However, they do not receive information which would allow them personally to identify users. If you do not wish to participate in tracking, you can easily opt out by disabling the Google Conversion Tracking cookie under the ‘User Preferences’ tab in your browser. You will not be included in the conversion tracking statistics.
The storage of ‘conversion cookies’ is based on Art. 6 (1) (f) GDPR. The website operator has a legitimate interest in analysing user behaviour in order to optimise both its website and its advertising.
You can set your browser to inform you about the placement of cookies and to allow cookies only in individual cases, to accept cookies in certain cases or generally exclude cookies. You can also set cookies to be deleted automatically when you close your browser. Disabling cookies may limit the functionality of this website.
5. Plugins and tools
Our website uses plugins from the website YouTube, which is operated by Google. The operator of the site is YouTube LLC 901 Cherry Ave. San Bruno CA 94066 USA.
If you visit any of our sites that are equipped with a YouTube plugin, a connection will be established to YouTube’s servers. This tells the YouTube server which of our pages you have visited.
By logging in to your YouTube account, you give YouTube permission to directly associate your browsing behaviour with your personal profile. You can prevent this by logging out of your YouTube account.
YouTube is used in the interest of the attractive presentation of our online services.. This constitutes a legitimate interest within the meaning of Art. 6 (1) (f) GDPR.
Our website uses plugins by the video portal Vimeo. The provider is Vimeo Inc. 555 West 18th Street New York New York 10011 USA.
If you visit any of our sites that are equipped with a Vimeo plugin, a connection will be established with Vimeo servers. This tells the Vimeo server which of our pages you have visited. In addition, Vimeo also obtains your IP address. This also applies if you are not logged in to Vimeo or do not have an account with Vimeo. The information collected by Vimeo is transmitted to the Vimeo server in the United States.
By logging in to your Vimeo account, you give Vimeo permission to directly associate your browsing behaviour with your personal profile. You can prevent this by logging out of your Vimeo account.
Google Web Fonts
This site uses so-called web fonts provided by Google for uniform presentation of fonts. When a page is accessed, your browser loads the required web fonts into your browser cache in order to display texts and fonts correctly.
To do this, your browser must connect to Google’s servers. As a result, Google is made aware that our website has been accessed via your IP address. Google Web Fonts are used in the interests of consistent and attractive presentation of our online services. This constitutes a legitimate interest within the meaning of Art. 6 (1) (f) GDPR.
If your browser does not support web fonts, your computer will use a default font.
This site uses Google Maps via an API. The provider is Google Inc. 1600 Amphitheatre Parkway Mountain View CA 94043 USA.
To use the functions of Google Maps, it is necessary to store your IP address. This information will usually be sent to a Google server in the United States and stored there. The provider of this site has no influence on this data transfer.
Google Maps is used in the interests of presenting our online services in an attractive manner and enabling the places mentioned on the website to be found more easily. This constitutes a legitimate interest within the meaning of Art. 6 (1) (f) GDPR.
6. Payment providers
Our website offers payment using the payment service Paypal. The provider of this payment service is PayPal (Europe) S.à.rl et Cie, S.C.A. 22-24 Boulevard Royal L-2449 Luxembourg (hereinafter referred to as ‘PayPal’).
If you choose to pay via PayPal, the payment details you enter will be sent to PayPal.
Your data is transmitted to PayPal on the basis of Art. 6 (1) (a) GDPR (consent) and Art. 6 (1) (b) GDPR (processing in connection with the performance of a contract). You have the opportunity to withdraw your consent to data processing at any time. Withdrawal of consent does not affect the effectiveness of past data processing operations.
Our website offers payment via Klarna, among others. The provider is Klarna AB Sveavägen 46 111 34 Stockholm Sweden (hereinafter referred to as ‘Klarna’).
Your data is transmitted to Klarna on the basis of Art. 6 (1) (a) GDPR (consent) and Art. 6 para. 1 (b) GDPR (processing in connection with the performance of a contract). You have the opportunity to withdraw your consent to data processing at any time. Withdrawal does not affect the effectiveness of past data processing operations.
‘Sofortüberweisung’ (immediate transfer)
Our website offers payment via ‘Sofortüberweisung’. The provider of this payment service is Sofort GmbH Theresienhöhe 12 80339 Munich, Germany (hereinafter referred to as ‘Sofort GmbH’).
With the help of the ‘Sofortüberweisung’ process we receive a payment confirmation from Sofort GmbH in real time and can immediately start to fulfil our obligations.
If you have decided to pay using ‘Sofortüberweisung’, you will transmit the PIN and a valid TAN to Sofort GmbH, which they can then use to log into your online banking account. Sofort GmbH automatically checks your account balance after logging in and transfers the money to us using the TAN you have submitted. It will then immediately send us confirmation of the transaction. After logging in, your transactions, overdraft limit, other accounts and balances are also checked automatically.
In addition to the PIN and the TAN, the payment data you entered and your personal data will be transmitted to Sofort GmbH. Personal data include: first name, surname, address, telephone number(s), email address, IP address and any further data required for payment processing. The transmission of this data is necessary to establish your identity beyond doubt and to prevent fraud.
Your data is transmitted to Sofort GmbH based on Art. 6 (1) (a) GDPR (consent) and Art. 6 (1) (b) GDPR (processing in connection with performance of a contract). You have the opportunity to withdraw your consent to data processing at any time. Withdrawal does not affect the effectiveness of past data processing operations.