Privacy Policy

Privacy statement

Thank you for visiting our online shop. The protection of your privacy is very important to us. In the following, we have provided detailed information about how we handle your data.

Responsible within the meaning of the GDPR is:

TOPLAC Autolackierbedarf GmbH
Hamburger Ring 15,
01665 Klipphausen, Germany
phone: +49 35204 6700
fax: +49 35204 67030
e-mail: info@toplac.de

Head of the responsible office: Lutz Poweleit, Johannes Herrmann

1. Access data and hosting

You can visit our websites without providing any personal information. Each time you access a website, the web server automatically stores a “server log file” which documents the retrieval and contains, for example, the name of the requested file, your IP address, the date and time of retrieval, the transferred data volume and the requesting provider (access data).

This access data is evaluated exclusively for the purpose of ensuring the smooth operation of the website and the improvement of our services. In accordance with Art. 6 (1) 1 lit. f of the GDPR, this preserves our legitimate interests, which predominate in the context of balancing interests regarding the correct presentation of our services and products. All access data will be deleted no later than seven days after the end of your visit to our website.

Hosting services by a third party

A commissioned third party processes data on our behalf to host the services and display the website. This serves to safeguard our legitimate interests, which predominate in the context of balancing interests regarding the correct presentation of our products and services. All data collected while using this website or when completing the forms provided for this purpose in the online shop as described below will be processed on its servers. Processing on other servers only takes place to the extent specified here.
This service provider is located within a country of the European Union or the European Economic Area.

2. Data collection and use for contract processing and opening customer accounts

We collect personal data if you voluntarily provide us with this information as part of your order, when contacting us (e.g. using a contact form or by email) or when opening a customer account. Mandatory fields are marked as such, as we need this data to execute the contract, establish contact with you or open your customer account, and you will not be able to complete the order and/or open your account or get in touch with us without providing this information. The data collected in each case is listed in the respective forms. We use the data you provide to process your order or inquiry in accordance with Art. 6 (1) 1 lit. b of the GDPR. After full execution of the contract or deletion of your customer account, further processing of your data will be restricted and such data will be deleted after expiry of the retention periods as required by tax and commercial laws, unless you have expressly consented to the further use of your data or if we reserve the right to use the data further, to the extent that this is legally permitted and we have informed you in this privacy statement. Your customer account can be deleted at any time, either by sending a message to the contact specified below or using the designated function in your customer account.

3. Disclosure of data

For the fulfilment of the contract in accordance with Art. 6 (1) 1 lit. b of the GDPR, we disclose your data to the shipping company responsible for the delivery to the extent necessary for the delivery of ordered goods. Depending on the payment service provider you choose during the ordering process, we will forward any collected payment data to the credit institution assigned to process the payment and any payment service providers appointed by us or to the payment service. In some cases, the selected payment service providers also collect this data themselves if you have created an account with them. In this case, you will need to log into the payment service provider using your access data during the ordering process. The data privacy policy of the payment service provider applies in this respect.

Disclosure of data to shipping providers

If you have given us your express consent while or after placing your order, we will pass on your email address to the selected shipping provider in accordance with Art. 6 (1) 1 lit. a of the GDPR so that they can contact you before shipping the goods to notify you of the delivery or arrange the delivery with you.

This consent can be withdrawn at any time by sending a message to the contact provided below or by contacting the shipping provider directly using the contact address provided below. After the withdrawal, we will delete the data you provided for this purpose, unless you have expressly consented to the further use of your data or if we reserve the right to use the data further, if legally permitted and if we have informed you in this privacy statement.

DHL Paket GmbH
Sträßchensweg 10
53113 Bonn, Germany

DPD Deutschland GmbH
Wailandtstrasse 1
63741 Aschaffenburg, Germany

4. Email newsletter and postal advertising

Email advertising with newsletter subscription

If you subscribe to our newsletter, we will use the data required for this purpose or data you have provided separately in order to regularly send you our email newsletter on the basis of your consent in accordance with Art. 6 (1) 1 lit. a of the GDPR.
You can unsubscribe from the newsletter at any time, either by sending a message using the contact information provided below or by using the link provided in the newsletter. After you have unsubscribed, we will delete your email address unless you have given your express consent to the further use of your data or if we reserve the right to use the data further, if legally permitted and if we have informed you in this privacy statement.
We have commissioned a service provider to process and send the newsletter and will also pass on your email address to this service provider.
This service provider is located within a country of the European Union or the European Economic Area.

Postal advertising and your right to object

In addition, we reserve the right to use your first and last name as well as your postal address for our own advertising purposes, e.g. to send interesting offers and information about our products by post. This serves to safeguard our legitimate interests, which predominate in the context of balancing interests, in a promotional approach to our customers in accordance with Art. 6 (1) 1 lit. f of the GDPR.

5. Use of data in payment processing/credit checks

If we provide goods and/or services in advance, e.g. when buying on account, we are required to obtain identity and creditworthiness information from specialised service providers (credit reference agencies) in accordance with Art. 22 (2) lit. a of the GDPR. For this purpose, we will be transmitted your personal data required for a credit check to the following company:


Creditreform Boniversum GmbH
Hellersbergstraße 11
41460 Neuss, Germany

Appropriate measures will be taken to safeguard your rights, freedoms and legitimate interests. You have the opportunity to express your point of view and challenge the decision by making contact with the contacts provided below. After completion of the contract, your data processed for this purpose will be deleted unless you have expressly consented to the further use of your data or if we reserve the right to use the data further, if legally permitted and if we have informed you in this privacy statement.

6. Integration of the Trusted Shops Trustbadge

The Trusted Shops Trustbadge is integrated into this website to display our Trusted Shops quality seal and the customer reviews collected and to offer Trusted Shops products for buyers after they have placed an order.
This serves to safeguard our legitimate interests, which predominate in the context of balancing interests regarding the optimal marketing of our products and services in accordance with Art. 6 (1) 1 lit. f of the GDPR. The Trustbadge and the services advertised using this badge are an offer of Trusted Shops GmbH, Subbelrather Str. 15C, 50823 Cologne, Germany.
When the Trustbadge is viewed, the web server automatically saves a server log file which contains, for example, your IP address, date and time of the request, amount of data transmitted and the requesting provider (access data), and which documents the request. This access data will not be evaluated and will be overwritten automatically no later than seven days after the end of your website visit.
Other personal data will only be transferred to Trusted Shops if you have consented to this, if you decide to use Trusted Shops products after placing an order or if you have already registered for use. In this case, the contractual agreement between you and Trusted Shops will apply.

7. Cookies and web analysis

We use “cookies” on several webpages to ensure that your visit to our website is attractive and to enable the use of certain functions in order to display appropriate products or for market research. This serves to safeguard our legitimate interests, which predominate in the context of balancing interests regarding the optimal presentation of our products and services in accordance with Art. 6 (1) 1 lit. f of the GDPR. Cookies are small text files that are stored automatically on your end device. Some of the cookies we use are deleted after the end of the browser session, i.e. when you close your browser (“session cookies”). Other cookies remain on your device and enable us to recognise your browser on your next visit (persistent cookies). The storage duration can be found in the overview in the cookie settings of your web browser. You can set your browser to display notifications when cookies are used and individually decide whether to reject or accept cookies in specific cases or in general. Each browser differs in the way it manages the cookie settings. This is described in the Help menu of each browser, which explains how to change your cookie settings.
These can be found for the respective browser using the following links:

Internet Explorer™: https://support.microsoft.com/en-ph/help/17442/windows-internet-explorer-delete-manage-cookies
Safari™: https://support.apple.com/kb/ph21411?locale=de_DE
Chrome™: https://support.google.com/chrome/answer/95647?co=GENIE.Platform%3DDesktop&hl=en-GB
Firefox™: https://support.mozilla.org/en-US/kb/enable-and-disable-cookies-website-preferences
Opera™: http://help.opera.com/Windows/10.20/de/cookies.html

Failure to accept cookies may limit the functionality of our website.
If you consent to this in accordance with Art. 6 (1) 1 lit. a of the GDPR, this website will also use the “DoubleClick cookie” to recognise your browser when visiting other websites as part of the use of Google Analytics (see below) for advertising purposes. Information automatically generated by the cookie about your visit to this website is transmitted to a Google server in the USA and stored there. Within member states of the European Union or in other states that are party to the Agreement on the European Economic Area, the activation of IP anonymisation on this website will truncate your IP address before transmission. Only in exceptional cases is a full IP address transmitted to a Google server in the United States and truncated there. The anonymised IP address transmitted from your browser by Google Analytics will not be linked with any other data held by Google.

Google will use this information to compile reports about website activities and provide further services related to the website usage. Google may also transfer this information to third parties if this is required by law or to the extent that such third parties process the information on Google's behalf. Once Google DoubleClick is no longer required and is no longer used by us, the data collected in this context will be deleted.
Google Double Click is a service of Google LLC. (www.google.com).
Google LLC is based in the USA and is certified under the EU-US Privacy Shield. A current certificate can be viewed here. Under this agreement between the USA and the European Commission, the latter has established an appropriate level of data protection for companies certified under the Privacy Shield.

You can revoke your consent at any time with future effect by deactivating the DoubleClick cookie via this link. You can also inform the Digital Advertising Alliance about the use of cookies and adjust the settings for this purpose. Finally, you can set your browser to display notifications when cookies are used and individually decide whether to reject or accept cookies in specific cases or in general. Failure to accept cookies may limit the functionality of our website.

Use of Google (Universal) Analytics for web analysis

If you consent to this in accordance with Art. 6 (1) 1 lit. a of the GDPR, this website uses Google (Universal) Analytics, a web analytics service of Google LLC (www.google.com), for the purpose of website analysis. Google (Universal) Analytics uses methods such as cookies to analyse how you use the website. The information automatically generated by your use of this website is usually transmitted to a Google server in the United States and stored there. Within member states of the European Union or in other states which are party to the Agreement on the European Economic Area, the activation of IP anonymisation on this website will truncate your IP address before transmission. Only in exceptional cases is a full IP address transmitted to a Google server in the United States and truncated there. The anonymised IP address transmitted from your browser by Google Analytics will generally not be linked with any other data held by Google. Once Google Analytics is no longer required and is no longer used by us, the data collected in this context will be deleted.

Google LLC is based in the USA and is certified under the EU-US Privacy Shield. A current certificate can be viewed here. Under this agreement between the USA and the European Commission, the latter has established an appropriate level of data protection for companies certified under the Privacy Shield.

You can revoke your consent at any time with future effect by downloading and installing the browser plugin available via the following link: http://tools.google.com/dlpage/gaoptout?hl=en. This will prevent data generated by the cookie relating to your use of the website (including your IP address) from being collected and processed by Google.

As an alternative to the browser plugin, you can click this link to prevent the collection of data by Google Analytics on this website in the future. Here, an opt-out cookie will be stored on your device. If you delete your cookies, you will be asked to give your consent again.

Use of econda for web analysis

If you consent to this in accordance with Art. 6 (1) 1 lit. a of the GDPR, data will be automatically collected and stored on this website and used to create usage profiles with pseudonyms using technology of econda GmbH (www.econda.com) for the purpose of website analysis. Cookies may be used for this purpose. The pseudonymised usage profiles will not be merged with personal data about the bearer of the pseudonym without their separate explicit consent. Once econda is no longer required and is no longer used by us, the data collected in this context will be deleted. You can revoke your consent at any time with future effect by clicking this link.

Once you have revoked your consent, an opt-out cookie will be stored on your device. If you delete your cookies, you will be asked to give your consent again.

8. Advertising via marketing networks/Google AdWords Remarketing

Google Adwords promotes this site in Google's search results and on third-party websites. If you have consented to this in accordance with Art. 6 (1) 1 lit. a of the GDPR, Google's “remarketing cookie” will be used when visiting our website and will automatically enable interest-based advertising using a pseudonymous Cookie ID based on the websites you visit. Once Google AdWords Remarketing is no longer required and is no longer used by us, the data collected in this context will be deleted.

No further data processing will take place unless you have given Google your consent to allow Google to link your web and app browsing history to your Google account and that information from your Google account to be used to personalise advertisements you see on the internet. In this case, if you are logged into Google while visiting our website, Google will use your data along with Google Analytics data to create and define target group lists for cross-device remarketing. To this end, Google will temporarily link your personal data with Google Analytics data to create target groups.

Google AdWords Remarketing is a service of Google LLC. (www.google.com). Google LLC is based in the USA and is certified under the EU-US Privacy Shield. A current certificate can be viewed here. Under this agreement between the USA and the European Commission, the latter has established an appropriate level of data protection for companies certified under the Privacy Shield.

You can revoke your consent at any time with future effect by deactivating the remarketing cookie via this link. You can also inform the Digital Advertising Alliance about the use of cookies and adjust the settings for this purpose.

9. Sending review reminders by email/review reminders by Trusted Shops

To the extent that you have given us your express consent while or after placing your order in accordance with Art. 6 (1) 1 lit. a of the GDPR, we will forward your email address to Trusted Shops GmbH, Subbelrather Str. 15c, 50823 Cologne, Germany, (www.trustedshops.com), so that they can send you a review reminder by email.

This consent can be withdrawn at any time by sending a message to the contact provided below or directly to Trusted Shops.

 

10. Contact details and your rights

As a data subject, you have the following rights:

  • in accordance with Art. 15 of the GDPR, the right of access to your personal data processed by us within the scope defined therein;
  • in accordance with Art. 16 of the GDPR, the right to request the immediate rectification of your personal data stored by us if incorrect, or the completion of personal data stored by us;
  • in accordance with Art. 17 of the GDPR, the right to demand the erasure of your personal data stored by us, unless the further processing is required
    - to exercise the right to freedom of expression and information;
    - to comply with a legal obligation;
    - for reasons of public interest or
    - to establish, exercise or defend legal claims;
  • in accordance with Art. 18 of the GDPR, the right to restrict the processing of your personal data, to the extent that
    - the accuracy of the data is contested by you;
    - the processing is unlawful, but you oppose its erasure;
    - we no longer need your personal data for the purposes of the processing, but you require it to establish, exercise or defend legal claims or
    - You have objected to the processing pursuant to Art. 21 of the GDPR;
  • in accordance with Art. 20 of the GDPR, the right to receive your personal data provided to us in a structured, commonly used and machine-readable format or to request the transmission of the data to another controller;
  • in accordance with Art. 77 of the GDPR, the right to lodge a complaint with a supervisory authority. You can generally contact the supervisory authority of your habitual residence, place of work or our company headquarters.


If you have any questions about the collection, processing and use of your personal data, regarding the access, rectification, blockage or erasure of data as well as the revocation of any consent granted or objecting to a particular use of data, please contact our company’s data protection officer:

Ronny Seffner
Hamburger Ring 11a
01665 Klipphausen, Germany
+49 35204 392050
datenschutz@toplac.de


Right to object
To the extent that we process personal data as explained above in order to safeguard our legitimate interests, which predominate in the context of balancing interests, you can object to this processing with future effect. If the data is processed for the purpose of direct marketing, you can exercise this right at any time as described above. If the processing takes place for other purposes, you are only entitled to a right of objection for reasons arising from your particular situation.

After you have exercised your right to object, we will no longer process your personal data unless we can provide evidence of compelling legitimate grounds for processing that override your interests, rights and freedoms, or if the processing is required for the establishment, exercise or defence of legal claims.

This does not apply if the processing is for direct marketing purposes. In such a case, we will no longer process your personal data for this purpose.


Privacy statement prepared using the Trusted Shops legal text creator in cooperation with Wilde Beuger Solmecke Rechtsanwälte.

 

Viewed