Privacy Policy

1. Information on the collection of personal data and contact data of the data controller

1.1 Thank you for visiting our website. Below we would like to inform you about our dealing with your personal data when you use our website. Personal data is basically all data with which you can be personally identified.

1.2 As defined in the General Data Protection Regulation (GDPR), the person responsible for processing of the data on our website (data controller) is:

Menke IT GmbH
Kolpingstrasse 4
Winterberg
Germany
Tel: +49 2983 9799808-0
Fax: +49 2983 9799808-9
Email: info@menke-it.de

1.3 In order to protect your data’s safety during its transmission, we use state-of-the-art encryption methods (e.g. SSL or TSL) via HTTPS.

2. Data collection during your visiting our website

Each time you visit our website, our system automatically collects data and information that your browser transmits to our server (in so-called "server log files"). That is the following data which is technically necessary for us:

• Our website visited

• Date and time at the moment it is accessed

• Amount of data sent in bytes

• Source/reference from which you have reached the website

• Operating system used

• Browser used

• IP address used (may be anonymized)

The legal basis for the data processing is Art. 6 Par. 1 (f) of the GDPR due to our legitimate interest in improving stability and maintaining functionality of our website. The data will not be passed on or used in any other way. Temporary storage of the IP address by the system is necessary in order to allow a correct delivery of the website to the user's computer. For this purpose, the user’s IP address has to be saved until the end of the session.

We reserve the right to subsequently check the server log files, if there is tangible evidence of illegal use. The data is deleted as soon as it is no longer required in order to fulfil the purpose of its collection. In the case of the collection of the data for the purpose of providing the website, this applies when the session in question is finished.

In the case of saving data in logfiles, this applies after a maximum of seven days. Saving of data beyond this period is possible. In this case, users' IP addresses are deleted or altered so that they can no longer be attributed to the accessing client. Data collection for the purpose of providing the website and the saving of data in logfiles are absolutely necessary in order to operate the website. It is therefore not possible for the user to object.

3. Contacting us

If you contact us via the contact form, the data entered in the input mask will be transmitted to us and saved. The collected data is the data you see in the input mask. When you contact us by email, only the data you enter there will be transferred to us.

Your data will be used only to make possible to answer your inquiry and to manage communication for this purpose. If the user gives a consent to process their data, the legal basis is Article 6 Par.1 (a) of the GDPR. The data processing in the course of sending an email is a matter of our legitimate interest pursuant to Article 6 Par. 1 (f) of the GDPR. If the email contact is aimed at conclusion of a contract, the additional legal basis for processing is Art. 6 Par. 1(b) of the GDPR. If there are no legal obligations for us to retain the data, it will be deleted as soon as it is no longer required for achievement of their collection purpose. This applies to the personal data from the input mask of the contact form and the data sent by email when the respective conversation with the user has ended. The conversation is deemed to be finished, when the actual situation shows that the relevant circumstances are definitely resolved. At any time the user can revoke their consent to processing of their personal data. If the user contacts us by email, they can object to their personal data storage at any time. However, in such a case, we will not be able to continue the dialogue.

4. Cookies

On our website we use so-called cookies.

Cookies are text files that are stored on the user's terminal device. When a user calls a website, a cookie will be saved on the user's operating system. Some functions of our website do not work without saving cookies. They require that the browser is recognized even after moving from page to page. The user data collected by technically necessary cookies will not be used to create user profiles. The above-mentioned purposes also mean our legitimate interest in the processing of personal data according to Art. 6 Par. 1 (f) of the GDPR.

In addition, our website may use cookies to analyse users' browsing behaviour (so-called third party cookies). For more information on scope, purpose, legal basis and remedies, please refer to the respective sections of the respective chapter of this Privacy Policy.

As a result, you as a user will have full control over the use of cookies. By changing the settings in your Internet browser, you can prohibit, restrict, or delete the transfer of cookies. If the cookies are disabled for our website, you probably cannot use all the functions of our website to their full extent.

Some of the cookies used here will be deleted after closing your browser (so-called session cookies). Other cookies remain on your terminal and enable us or our partner companies (third party cookies) to recognize your browser when you visit our website next time (persistent cookies). If cookies are set, they collect and process specific user information such as browser and location data, as well as IP address to the individual extent. Persistent cookies are automatically deleted after a specified period of time, which may differ depending on the cookie.

5. Data processing aimed on order processing

5.1 If you wish to place an order in our webshop, it is necessary for the contract conclusion that you provide your personal data required for processing your order. The data provided by you will be processed by us to manage your order.

In some cases, we work with external service providers to process your order. For this purpose, we must pass on the personal data required.

If we commission a transport company to deliver your goods, we will pass on your data necessary for such a delivery to the respective transport company. For payment processing, we pass on your data to the bank appointed, as far as necessary. If we use payment service providers, you will also be informed accordingly.

The legal basis for passing on your data is Article 6 Par. 1 Lit. b of the GDPR.

5.2 In order to fulfil our contractual obligations, we cooperate with external shipping partners. We will give the shipping partner selected by us your name and your delivery address (or other data, if necessary) exclusively to enable them to deliver you the ordered goods, in compliance with Art. 6 Par. 1 (b) of the GDPR.

5.3 Use of payment service providers

• PayPal

  If the payment method you selected is PayPal, a credit card via PayPal, direct debit via PayPal or – if offered – "purchase on account" or "payment in installments" via PayPal, the payment will be processed via PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter referred to as "PayPal").

  We pass on your personal data to PayPal for the purpose of contract fulfilment in accordance with Article 6 Par. 1 (b) of the GDPR. PayPal reserves the right to do a credit check if you choose such payment methods as ‘credit card via PayPal’, ‘direct debit via PayPal’, or – if offered – "purchase on account" or "payment in instalments" via PayPal.

  For this purpose, your payment data may be passed on by PayPal to credit bureaus due to its legitimate interest in determining your solvency, in compliance with Art. 6 Par. 1 (f) of the GDPR. Related to statistical probability of payment default, the credit check result will be used by PayPal to decide which payment method should be provided to you.

  The credit information may contain probability values (so-called score values). As far as score values are included in the credit check result, they are based on a scientifically recognized mathematical-statistical method. Among other things, but not exclusively, address data is included in the calculation of the score values.

  What other data is collected by PayPal is controlled by the respective privacy policy of PayPal. The privacy policy is available at: https://www.paypal.com/de/webapps/mpp/ua/privacy-full
  You can object to such using your data by notifying PayPal at any time. However, PayPal may still be entitled to process your personal data if it is necessary for the payment processing according to your contract.

6. Data processing when opening a customer account and for contract fulfilment

If you open a customer account at our company, your personal data will be collected and processed in accordance with Art. 6 Par. 1 (b) of the GDPR. You can see in the input form which of your data will be processed. The data entered by you will be stored and used by us for contract processing purposes.

You can delete your account at any time. This can be done by sending a message to the data controller or, if offered, you can do it in your customer account directly. In this case, we will also block your data and delete it as soon as the applicable tax and commercial retention periods are expired. This can only be prevented by your consent for permanent storage or by a further our use of your data permitted by law.

7. Use of your information for direct mailing

7.1 Newsletter

On our website you can subscribe to a free newsletter. During your registration for our newsletter, the data from the input mask will be transmitted to us. The only mandatory field is your email address. If you make other voluntary entries, they will only be used for adressing you personally.

The legal basis for the processing of your data after registration for the newsletter is provided with the user's consent Art. 6 par. 1 letter a DPR. We will collect this information by sending you a confirmation email after you have registered for the newsletter, which contains a confirmation link. By clicking on this link you also give your consent to receive the newsletter.

When you send us your registration for the newsletter, we save your IP address, as well as the date and time of your registration. The aim of such data storage is to protect you from possible misuse of your email address.

We use the data collected by us in the course of the newsletter registration exclusively for the purpose of sending the newsletter.

You may cancel your newsletter subscription at any time. To do so, click on the link provided in each newsletter for this purpose. This will also enable a revocation of the consent to the storage of your personal data collected during the registration process.

7.2 Advertising by letter post

If you stated left your first and last name, your postal address and any other personal data due to one of your orders at our company, we reserve the right to protect our legitimate interest in personalized direct mailing, as per Art. 6 Par. 1 (f) of the GDPR to store this data and to send you our offers by letter mail.

You can object to the storage and use of your data for this purpose at any time by sending an objection message to the data controller.

8. Web analytics services

• Google Analytics

  For this website we use the Google Analytics service (Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland).

  Google Analytics uses cookies. Cookies are text files that are being saved on your PC when you are online and allow for analysis of your use of the website.

  Information generated in this way about your use of this website (including the abbreviated IP address) is transmitted to a Google server and stored there. In this case, your data may be transferred to the USA.

  We use Google Analytics with the extension "_anonymizeIp()” to ensure anonymisation of your IP address by reducing it and to exclude a direct personal reference. Therefore, your IP address will be shortened by Google before that. This is applicable within the territories of the Member States of the European Union or other contracting states of the Treaty on the European Economic Area. In exceptional cases, the full IP address is also transferred to a Google server in the USA and only then reduced. In these exceptional cases, such processing shall be carried out in accordance with Art. 6 Par. 1 (a) of the GDPR, i.e. Upon your explicit consent.

  Upon our order, Google uses this information in order to evaluate your use of the website, to make reports on the website activities, and to render other services for us which are related to the internet use. Your IP address collected in this context will not be combined with other data from Google.

  You can prevent saving of cookies by changing settings of your browser.

  Apart from that, you can prevent the data generated by the cookie and related to your using this website (including your IP address) from their capturing and processing by Google. To do so, you need to download and install the browser plug-in available at the following website: http://tools.google.com/dlpage/gaoptout?hl=de

  Moreover, this website uses Google Analytics for a cross-device analysis of visitors’ flows. The analysis is carried out via a user-ID. You can deactivate the cross-device analysis of your use in your customer account in "My Data", "Personal Data”.

  Data transfer to the USA is based on the standard contractual clauses of the EU Commission. Please find details here: https://privacy.google.com/businesses/gdprcontrollerterms/ und https://privacy.google.com/businesses/gdprcontrollerterms/sccs/. Google’s Privacy Policy: https://support.google.com/analytics/answer/6004245?hl=de.

9. Data subject’s rights

9.1 The applicable data protection law grants you comprehensive data protection rights (right to access and intervention) towards the data controller, about which we hereby inform you:

• Right to be informed according to Art. 15 GDPR:

  You may request confirmation from the data controller whether personal data concerning you will be processed by the data controller. In addition, you have the right to be informed about the purpose, categories of personal data, recipients, the planned period of the data storage, and existence of other rights such as data correction or of your rights of appeal to a supervisory authority, origin of your data (if not collected by us), as well as about existence of an automated decision-making process including profiling and, where applicable, meaningful information about the logic involved, the scope you are concerned and intended effects of such processing, as well as your right to be informed about the guarantees pursuant to Art. 46 GDPR when your data is transferred to third countries.

• Right to have the data corrected, as per Art. 16 of the GDPR:

  You have the right to immediately correct the incorrect data which you are concerned and/or to complete the incomplete data stored by us; such correction or completion must be implemented immediately.

• Right to restriction of processing, as per Art. 18 of the GDPR:

  You have the right to obtain from the data controller a restriction of your personal data’s processing for a period enabling the data controller to verify the accuracy of the data you contested, or if one of the following applies:  - the processing is unlawful and you oppose the erasure of the personal data and request the restriction of its use instead; - we no longer need your personal data for the purposes of the processing, but you need it for establishment, exercise or defence your legal claims; - you have objected to processing because of your special situation and it is not yet verified whether our legitimate grounds override yours.

  Where processing of your personal data has been restricted, such personal data shall, with the exception of storage, only be processed with the your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State. If the restriction of processing has been limited, you will be informed by the data controller before such a limitation is cancelled.

• Right to data erasure (“right to be forgotten”), Art. 17 of the GDPR:

  You have the right to immediately delete your personal data if the conditions of Art. 17 Par. 1 of the GDPR are fulfilled. However, the right to data erasure does not apply, e.g., if processing is necessary for exercising the right of freedom of expression and information, or for compliance with a legal obligation, or for reasons of public interest, or for the establishment, exercising or defence of legal claims.

• Right to being notified, Art. 19 of the GDPR:

  If you have exercised your right to correct or delete your data or to restrict its processing, the data controller is obliged to notify all recipients to whom your personal data has been disclosed that the data is corrected, deleted or its processing is restricted, unless this proves impossible or involves disproportionate effort. You also have the right to be informed about who are the recipients.

• Right to data portability, Art. 20 of the GDPR:

  You have the right to receive your personal data that you provided to us, in a structured, commonly used and machine-readable format, or to require the data transmission to another data controller.

• Right to withdraw your consent, Art. 7 Par. 3 of the GDPR:

  You have the right to object at any time to the processing of your personal data based on Art. 6 Par. 1 (e) or (f) of the GDPR. This also applies to profiling based on that GDPR article.

• As a data subject you also have the right to withdraw your consent at any time, with future effect. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal

• Right to lodge a complaint, Art. 77 of the GDPR:

  Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of your personal data infringes the GDPR.

9.2 Right of objection

You have the right to object to your data processing at any time with effect for the future, if we process your data due to our justified interest which overrides yours, after weighing up of interests of both of us.

If you raise an objection, we will no longer process your personal data, unless we can prove urgent reasons for the data processing that overrides over your interests, rights and freedoms, or the data is processed to assert, exercise or defence legal claims.

10. Duration of storage of personal data

The duration of your personal data storage depends on the legal retention period. After expiry of the retention period, the relevant data is routinely deleted if it is no longer required for the contract fulfilment or initiation of a contract and/or there is no legitimate interest in the storage of this data anymore.