Privacy and Cookies

The responsible body for data processing is:

Rhein Group Germany GmbH
Except for the grinding mill 29
28203 Bremen

Thank you for your interest in our online shop. Protecting your privacy is very important to us. Below, we provide detailed information about how we handle your data.

1. Access data and hosting

You can visit our website without providing any personal information. Each time you access a website, the web server automatically saves a so-called server log file, which contains information such as the name of the file accessed, your IP address, the date and time of access, the amount of data transferred, and the requesting provider (access data), and which documents the access. This access data is evaluated solely for the purpose of ensuring the smooth operation of the website and improving our offering. This serves to protect our legitimate interests in the proper presentation of our offering in accordance with Art. 6 (1) (f) GDPR. All access data is deleted no later than seven days after your visit to the website.

Hosting
The services for hosting and providing the website are partially provided by our service providers as part of contract processing. Unless otherwise stated in this privacy policy, all access data and all data collected via the forms provided on this website are processed on their servers. If you have any questions about our service providers and the basis of our cooperation with them, please contact us using the contact details provided in this privacy policy.

2. Data processing for contract fulfilment and communication

2.1 Data processing for contract fulfillment

To fulfill the contract (including inquiries and processing of warranty and service claims, as well as any statutory information obligations) in accordance with Art. 6 (1) (b) GDPR, we collect personal data when you voluntarily provide it to us as part of your order. Mandatory fields are marked accordingly, as we need this data to fulfill the contract and without it we cannot process your order. The data collected can be found on the respective input forms.

Further information on the processing of your data, in particular on its transfer to our service providers for order, payment, and shipping processing, can be found in the following sections of this privacy policy. After the contract has been fully processed, your data processing will be restricted to a minimum and deleted after expiry of the retention periods under tax and commercial law in accordance with Art. 6 (1) (c) GDPR, unless you have expressly consented to further use of your data in accordance with Art. 6 (1) (a) GDPR or we reserve the right to further use permitted by data protection law, about which we will inform you in this privacy policy.

2.2 Customer account

If you have given your consent to open a customer account in accordance with Art. 6 (1) (a) GDPR, we will use your data to open the customer account and save it for future orders on our website. You can delete your customer account at any time and can do so either by sending a message to the contact options specified in this privacy policy or via a function in your customer account. After your customer account has been deleted, your data will be deleted unless you have expressly consented to further use of your data in accordance with Art. 6 (1) (a) GDPR or we reserve the right to use it in a manner permitted by data protection law, about which we will inform you in this privacy policy.

2.3 Communication

As part of customer communication, we collect personal data in order to process your inquiries in accordance with Art. 6 (1) (b) GDPR if you provide it to us voluntarily (e.g. via a contact form or by email). Mandatory fields are marked accordingly, as we need this data to process your communication. The data collected can be found in the respective input forms. Once your inquiry has been fully processed, your data will be deleted unless you have expressly consented to further use of your data in accordance with Art. 6 (1) (a) GDPR or we reserve the right to use it in a further manner that is permissible under data protection law, about which we will inform you in this privacy policy.

3. Data processing for shipping purposes

In order to fulfill the contract in accordance with Art. 6 (1) (b) GDPR, we will pass on your data to the shipping service provider responsible for the delivery, insofar as this is necessary for the delivery of the ordered goods.

This also applies to the transfer of data to our manufacturers or wholesalers, provided they handle shipping for us (drop shipping). These are also considered shipping service providers according to this privacy policy.

Data transfer to shipping service providers for delivery notifications

If you have expressly consented to this during or after your order, we will pass on your email address and telephone number to the selected shipping service provider in order to enable delivery notification or coordination prior to delivery, in accordance with Art. 6 (1) (a) GDPR.
You can revoke your consent at any time by sending a message to the contact options described in this privacy policy or directly to the shipping service provider at the contact address provided below. After revocation, we will delete the data you provided for this purpose unless you have expressly consented to further use of your data or we reserve the right to further use permitted by data protection law, about which we will inform you in this privacy policy.

DHL Parcel GmbH
Sträßchensweg 10
53113 Bonn
Germany

DPD Germany GmbH
Wailandtstraße 1
63741 Aschaffenburg
Germany

(GLS) General Logistics Systems
Germany GmbH & Co. OHG
GLS Germany-Straße 1 - 7
36286 Neuenstein
Germany

4. Data processing for payment processing

To process payments in our online shop, we work with the following partners: technical service providers, credit institutions, payment service providers.

4.1 Data processing for transaction processing

Depending on the payment method selected, we transmit the data required for payment processing to our technical service providers, who work for us as part of the order processing, or to the commissioned credit institutions or the selected payment service provider, insofar as this is necessary to process the payment. This serves the purpose of fulfilling the contract in accordance with Art. 6 (1) (b) GDPR. Some payment service providers collect the data required for payment processing themselves, e.g., on their own website or through technical integration in the ordering process. In this case, the privacy policy of the respective payment service provider applies.
If you have any questions about our payment processing partners and the basis of our cooperation with them, please contact us using the contact options described in this privacy policy.

4.2 Data processing for fraud prevention and optimization of our payment processes

We may transmit additional data to our service providers, who, together with the data necessary for payment processing, will use this data as our processors for the purpose of fraud prevention and optimizing our payment processes (e.g., invoicing, processing disputed payments, accounting support). Pursuant to Art. 6 (1) (f) GDPR, this serves to protect our legitimate interests in fraud protection or efficient payment processing.

5. Advertising by email, telephone

5.1 Email newsletter with registration and newsletter tracking

If you subscribe to our newsletter, we will use the required or separately provided data to regularly send you our email newsletter based on your consent in accordance with Art. 6 (1) (a) GDPR. You can unsubscribe from the newsletter at any time by sending a message to the contact options listed below or via a link in the newsletter. After unsubscribing, we will delete your email address from the recipient list unless you have expressly consented to further use of your data in accordance with Art. 6 (1) (a) GDPR or we reserve the right to further use permitted by data protection law, about which we will inform you in this privacy policy.

We would like to point out that we evaluate your usage behavior when sending the newsletter. For this purpose, we analyze your interactions with our newsletter by measuring, storing, and evaluating open rates and click numbers in order to design future newsletter campaigns ("newsletter tracking").

For this evaluation, the emails sent contain pixel technologies (e.g., so-called web beacons, tracking pixels) that are stored on our website. For the evaluation, we link the following "newsletter data":

The page from which the page was accessed (so-called referrer URL)
Date and time of retrieval
Description of the web browser used
The IP address of the requesting computer
The email address
The date and time of registration and confirmation
Pixel technologies also use your email address or IP address, as well as a unique ID if applicable. Links in the newsletter may also contain this ID.

If you do not wish to be tracked by the newsletter, you can unsubscribe from the newsletter at any time as described above.

The information will be stored as long as you are subscribed to the newsletter.

5.2 Newsletter dispatch

The newsletter and the newsletter tracking mentioned above may also be sent by our service providers as part of their contract processing. If you have any questions about our service providers and the basis of our cooperation with them, please contact us using the contact details provided in this privacy policy.

Our service providers are located and/or use servers in the following countries, which the European Commission has determined to provide an adequate level of data protection: United Kingdom.

Our service providers are located and/or use servers in the following countries for which the European Commission has determined an adequate level of data protection: USA.
The European Commission has determined that the USA provides an adequate level of data protection, which serves as a basis for transferring data to third countries, provided the respective service provider is certified. Until our service providers are certified, data transfers will continue to be based on the European Commission's Standard Contractual Clauses.

Our service providers are located and/or use servers in these countries: Australia. There is no adequacy decision from the European Commission for these countries. Our cooperation with them is based on these safeguards: European Commission Standard Contractual Clauses.

5.3 Telemarketing

If you have given your consent in accordance with Art. 6 (1) (a) GDPR, we will contact you by telephone for marketing purposes, e.g., to inform you about products of interest to you and/or to offer you discounts or promotions. You can revoke your consent at any time.

6. Cookies and other technologies

General information

To make our website attractive and enable the use of certain functions, we use technologies, including so-called cookies, on various pages. Cookies are small text files that are automatically stored on your device. Some of the cookies we use are deleted after the end of the browser session, i.e., after you close your browser (so-called session cookies). Other cookies remain on your device and allow us to recognize your browser on your next visit (persistent cookies).

Data protection on devices

When you use our online services, we use technologies that are strictly necessary to provide the telemedia service you have specifically requested. Storing information on your device or accessing information already stored on your device does not require your consent in this case.

For non-essential features, storing information on your device or accessing information already stored requires your consent. Please note that some parts of the website may not be fully functional if you do not provide your consent. Any consent you provide will remain in effect until you adjust or reset the settings on your device.

Subsequent data processing through cookies and other technologies

We use technologies that are absolutely necessary to use certain functions of our website (e.g., shopping cart function). These technologies collect and process information such as IP address, visit time, device and browser information, as well as details about your use of our website (e.g., information about the contents of the shopping cart). This is done within the framework of a balancing of interests in favor of our legitimate interest in optimizing the presentation of our services in accordance with Art. 6 (1) (f) GDPR.

We also use technologies to comply with legal obligations to which we are subject (e.g., to document consent to the processing of your personal data), as well as for web analytics and online marketing. Further information on this, including the legal basis for data processing, can be found in the following sections of this Privacy Policy.

You can view the cookie settings for your browser under the following links: Microsoft Edge™ / Safari™ / Chrome™ / Firefox™ / Opera™.

If you have consented to the use of technologies in accordance with Art. 6 (1) (a) GDPR, you can revoke your consent at any time by sending a message to the contact details stated in the imprint.

7. Use of cookies and other technologies

If you have given your consent in accordance with Art. 6 (1) (a) GDPR, we use the following cookies and third-party technologies on our website. As soon as the purpose no longer applies and the respective technology is no longer used, the data collected in this context will be deleted. You can revoke your consent at any time with effect for the future. Further information on how to revoke your consent can be found in the section "Cookies and other technologies". Further information, including the basis of our cooperation with individual providers, can be found under the respective technologies. If you have any questions about our cooperation with the providers and the basis of this cooperation, you can get in touch with the contact details provided in the legal notice.

7.1 Use of Google services

We use the following technologies from Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). The information automatically collected by Google technologies about your use of our website is usually transferred to a server of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, and stored there. Unless otherwise stated for individual technologies, data processing is based on an agreement between joint controllers in accordance with Art. 26 GDPR. Further information on data processing by Google can be found in Google's privacy policy.

Our service providers are located in countries outside the EU and the EEA for which the European Commission has determined an adequate level of data protection by decision.

Our service providers are located in countries outside the EU and EEA. The European Commission has not issued an adequacy decision for these countries. Our cooperation with them is based on the European Commission's standard contractual clauses.

Google Analytics

For the purpose of website analysis, data (IP address, visit time, device and browser information, as well as information about your use of our website) is automatically collected and stored by Google Analytics, creating user profiles using pseudonyms. Cookies may be used for this purpose. If you visit our website from the EU, your IP address will be stored on a server in the EU for location data processing and then immediately deleted before the traffic is forwarded to other Google servers for further processing. Data processing is based on a contract processing agreement with Google.

To optimize the marketing of our website, we have activated the data exchange settings for "Google Products and Services." This allows Google to access the data collected and processed by Google Analytics and use it to improve Google services. Data exchange with Google within the scope of these settings is based on an additional agreement between the responsible parties. We have no influence on the subsequent data processing by Google.

For web analytics, Google Analytics enables cross-device tracking through the Google Signals extension. If your internet-enabled devices are linked to your Google Account and you have enabled the "Personalized Advertising" setting in your Google Account, Google can create reports on your usage behavior (particularly cross-device user numbers), even if you change devices. We do not process any personal data in this context; we only receive statistics based on Google Signals.

For web analytics and advertising purposes, the DoubleClick cookie from Google Analytics enables your browser to be recognized when you visit other websites. Google uses this information to compile reports on website activity and to provide additional services related to website usage.

Google Ads

For advertising purposes in Google search results and on third-party websites, the so-called Google Remarketing Cookie is set when you visit our website. This cookie automatically collects and processes data (IP address, time of visit, device and browser information, and information about your use of our website) and enables interest-based advertising based on pseudonymous cookie IDs and the pages you visit. Further data processing only occurs if you have activated the "Personalized Advertising" setting in your Google Account. In this case, Google uses your data together with the data from Google Analytics to create and define target group lists for cross-device remarketing.

For website analytics and event tracking, we measure your subsequent usage behavior via Google Ads Conversion Tracking when you access our website via a Google Ads ad. Cookies may be used to collect data (IP address, visit time, device and browser information, as well as information about your use of our website based on predefined events such as visiting a page or subscribing to a newsletter), from which pseudonymous usage profiles are created.

Google reCAPTCHA

To protect our web forms from misuse and spam by automated software (so-called bots), Google reCAPTCHA collects data (IP address, visit time, browser information, and information about your use of our website) and analyzes your use of our website using JavaScript and cookies. In addition, other cookies stored in your browser by Google services are evaluated. No personal data is read or stored from the input fields of the respective form.

Google Tag Manager

We can use Google Tag Manager to manage various codes and services on our website. When implementing individual tags, Google may process personal data (e.g., IP address, online identifiers (including cookies)). Data processing is based on a contract processing agreement with Google.

Using Google Tag Manager enables the integration of various services/technologies. If you do not wish to use certain tracking services and have deactivated them, the deactivation will remain effective for all affected tracking tags integrated via Google Tag Manager.

YouTube Video Plugin

In order to integrate third-party content, the YouTube video plugin on our website collects data (IP address, visit time, device and browser information) in extended data protection mode, which is transmitted to Google and processed by Google only when you play a video.

7.2 Use of Microsoft services

We use the following technologies from Microsoft Ireland Operations Ltd., One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, D18 P521, Ireland ("Microsoft"). Data processing is based on an agreement between joint controllers in accordance with Art. 26 GDPR. The information automatically collected by Microsoft technologies about your use of our website is usually transferred to a server of Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA, and stored there. Further information on data processing by Microsoft can be found in the Microsoft privacy policy.

Our service providers are located in countries outside the EU and the EEA for which the European Commission has determined an adequate level of data protection by decision.

Microsoft Advertising

For advertising purposes in Bing, Yahoo, and MSN search results, as well as on third-party websites, the so-called Microsoft Advertising remarketing cookie is set when you visit our website. This cookie automatically collects and processes data (IP address, visit time, device and browser information, and information about your use of our website) and enables interest-based advertising based on pseudonymous cookie IDs and the pages you visit.

For website analytics and event tracking, we measure your subsequent usage behavior via Microsoft Advertising Universal Event Tracking (UET) when you access our website via a Microsoft Advertising ad. Cookies may be used to collect data (IP address, time of visit, device and browser information, as well as information about your use of our website based on predefined events such as visiting a page or signing up for a newsletter), from which pseudonymous usage profiles are created. If your internet-enabled devices are linked to your Microsoft account and you have not deactivated the "Interest-Based Advertising" setting in your Microsoft account, Microsoft can create reports on your usage behavior (in particular cross-device user numbers), even if you change devices (so-called "cross-device tracking"). We do not process any personal data in this context; we only receive statistics based on Microsoft UET.

8. Social Media

Our online presence on Facebook (by Meta), Instagram (by Meta), YouTube, LinkedIn, Xing
If you have given your consent to the respective social network operator in accordance with Art. 6 (1) (a) GDPR, your data will be automatically collected and stored for marketing and advertising purposes when you visit our online presence on the aforementioned social media platforms. Pseudonymized user profiles can be created from this data, which can be used, for example, to show you targeted advertising on and outside the platforms that is likely to correspond to your interests. Cookies are generally used for this purpose. Detailed information on the processing and use of data by the respective social network operator, as well as contact information, your rights, and data protection settings can be found in the privacy policies of the providers, which are linked below. If you need support, please feel free to contact us.

Facebook (by Meta) is offered by Meta Platforms Ireland Ltd., Block J, Serpentine Avenue, Dublin 4, Ireland ("Meta Platforms Ireland"). The information that Meta Platforms Ireland automatically collects about your use of our online presence on Facebook (by Meta) is generally transferred to a server of Meta Platforms, Inc., 1601 Willow Road, Menlo Park, California 94025, USA, and stored there. Data processing when visiting a Facebook (by Meta) fan page is based on an agreement between joint controllers in accordance with Art. 26 GDPR. Further information (information on Insights data) can be found here.

Our service providers are based and/or use servers in the following countries for which the European Commission has determined an adequate level of data protection: USA, Canada, Japan, South Korea, New Zealand, United Kingdom, Argentina.

For these countries, the European Commission has issued an adequacy decision for the USA, on the basis of which the transfer to third countries takes place, provided the respective service provider is certified. Certifications are available.

Our service providers are located and/or use servers in the following countries: Australia, Hong Kong, India, Indonesia, Malaysia, Singapore, Thailand, Taiwan, Brazil, Mexico.
There is no adequacy decision from the European Commission for these countries. Our cooperation is based on these safeguards: the European Commission's standard contractual clauses.

Instagram (by Meta) is offered by Meta Platforms Ireland Ltd., Block J, Serpentine Avenue, Dublin 4, Ireland ("Meta Platforms Ireland"). The information that Meta Platforms Ireland automatically collects about your use of our online presence on Instagram is generally transferred to a server of Meta Platforms, Inc., 1601 Willow Road, Menlo Park, California 94025, USA, and stored there. Data processing when visiting an Instagram (by Meta) fan page is based on an agreement between joint controllers in accordance with Art. 26 GDPR. Further information (information on Insights data) can be found here.

YouTube is a service provided by Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). The information that Google automatically collects about your use of our online presence on YouTube is generally transferred to a server of Google LLC, 1600 Amphitheatre Parkway, Mountain View, California 94043, USA and stored there.

Our service providers are based and/or use servers in countries outside the EU and the EEA for which the European Commission has determined an adequate level of data protection.

Our service providers are based and/or use servers in countries outside the EU and EEA. No adequacy decision has been issued by the European Commission for these countries. Our cooperation is based on the European Commission's standard contractual clauses.

LinkedIn is provided by LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland ("LinkedIn"). The information that LinkedIn automatically collects about your use of our online presence on LinkedIn is generally transferred to and stored on a server of LinkedIn Corporation, 1000 W. Maude Avenue, Sunnyvale, California 94085, USA.

Our service providers are based and/or use servers in the following countries for which the European Commission has determined an adequate level of data protection: USA.

The European Commission has decided on an adequate level of data protection for the USA, which serves as the basis for transfers to third countries, provided the respective service provider is certified. Until our service providers are certified, data transfers will continue to be based on the European Commission's standard contractual clauses.

Xing is an offering from New Work SE, Am Strandkai 1, 20457 Hamburg, Germany.

9. Contact options and your rights

9.1 Your rights

As a data subject, you have the following rights:

Art. 15 GDPR : Right to information about the personal data we process, as described therein;
Art. 16 GDPR : Right to immediate rectification of inaccurate or incomplete personal data stored about you;
Art. 17 GDPR : Right to erasure of your stored personal data, unless further processing is necessary to exercise the right to freedom of expression and information, to fulfill a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims;
Art. 18 GDPR : Right to restriction of processing of your personal data if you contest the accuracy of the data, the processing is unlawful but you object to its deletion, we no longer need the data but you need it to assert, exercise or defend legal claims or you have lodged an objection in accordance with Art. 21 GDPR;
Art. 20 GDPR : Right to receive the personal data you have made available to us in a structured, common and machine-readable format or to request that it be transmitted to another controller;
Art. 77 GDPR : Right to lodge a complaint with a supervisory authority. As a rule, you can contact the supervisory authority of your usual place of residence or work or of the registered office of our company.

To the extent that we process personal data based on our legitimate interests, as explained above, you have the right to object to this processing with future effect. If the processing is carried out for direct marketing purposes, you can exercise this right at any time, as described above. If the processing is carried out for other purposes, the right to object only applies if there are reasons for the objection arising from your particular situation.

After exercising your right of objection, we will no longer process your personal data for these purposes unless we can demonstrate compelling legitimate grounds for the processing which outweigh your interests, rights and freedoms, or the processing is carried out for the establishment, exercise or defense of legal claims.

This does not apply if the processing is carried out for direct marketing purposes. In this case, we will no longer process your personal data for this purpose.

9.2 Contact options

If you have any questions about the collection, processing or use of your personal data or if you wish to request information, correction, restriction or deletion of data or withdraw your consent or object to the use of certain data, please contact us directly using the contact details provided in the legal notice.

The State Commissioner for Data Protection and Freedom of Information
Arndtstrasse 1
27570 Bremerhaven
Tel.: +49 421 3612010 or +49 471 5962010
Fax: +49 421 49618495
Email: office@datenschutz.bremen.de

Item added to your cart