§ 1 Information on the collection of personal data
(1) Below, we provide information regarding the collection of personal data when using our website. Personal data refers to all data that can be related to you personally, e.g. name, address, email addresses, user behaviour.
(2) The controller pursuant to Article 4(7) of the EU General Data Protection Regulation (GDPR) is
Alber GmbH
, Vor dem Weißen Stein 14
, 72461 Albstadt
, email: info@alber.de
(see our legal notice).
You can contact our Data Protection Officer at lars-holger.krause@bartonbluhm.de
or via our postal address, adding “the Data Protection Officer” to the address.
(3) When you contact us by email or via a contact form, the data you provide (your email address, your name and telephone number where applicable) will be stored by us in order to answer your enquiries. We will delete the data collected in this context once storage is no longer necessary, or restrict processing if statutory retention obligations apply. By submitting your enquiry, you grant us your consent to data processing in accordance with Article 6(1), sentence 1, point (a) of the GDPR.
(4) If we use contracted service providers for individual functions of our service or wish to use your data for marketing purposes, we will inform you in detail below about the respective processes. In doing so, we will also specify the criteria for the storage period.
§ 2 Your rights
(1) You have the following rights vis-à-vis us with regard to your personal data:
- Right of access,
- Right to rectification or erasure,
- Right to restriction of processing,
- Right to object to processing,
- Right to data portability.
(2) The controller pursuant to Article 4(7) of the EU General Data Protection Regulation (GDPR) is
§ 3 Collection of personal data when visiting our website
(1) When you use the website for information purposes only, i.e. if you do not register or otherwise provide us with information, we only collect the personal data that your browser transmits to our server. If you wish to view our website, we collect the following data, which is technically necessary for us to display our website to you and to ensure its stability and security (the legal basis is Article 6(1)(f) of the GDPR):
- IP address
- Date and time of the request
- Time zone difference from Greenwich Mean Time (GMT)
- Content of the request (specific page)
- Access status/HTTP status code
- Amount of data transferred in each case
- Website from which the request originates
- Browser
- Operating system and its interface
- Language and version of the browser software.
(2) In addition to the aforementioned data, cookies are stored on your computer when you use our website. Cookies are small text files that are stored on your hard drive and associated with the browser you are using, and through which certain information is transmitted to the entity that sets the cookie (in this case, us). Cookies cannot run programs or transmit viruses to your computer. They serve to make the website more user-friendly and effective overall.
(3) Use of cookies:
a) This website uses the following types of cookies, the scope and functionality of which are explained below:
- Session cookies (see b)
- Persistent cookies (see c).
b) Session cookies are automatically deleted when you close your browser. These store a so-called session ID, which allows various requests from your browser to be associated with the same session. This enables your computer to be recognised when you return to our website. Session cookies are deleted when you log out or close your browser.
c) Persistent cookies are automatically deleted after a specified period, which may vary depending on the cookie. You can delete cookies at any time via your browser’s security settings.
d) You can configure your browser settings according to your preferences and, for example, refuse to accept third-party cookies or all cookies. Please note that you may then not be able to use all the features of this website. Cookies
e) We use cookies to identify you for subsequent visits if you have an account with us. Otherwise, you would have to log in again for each visit.
f) The Flash cookies used are not recorded by your browser, but by your Flash plug-in. We also use HTML5 storage objects, which are stored on your device. These objects store the necessary data regardless of the browser you use and do not have an automatic expiry date. If you do not wish for Flash cookies to be processed, you must install a suitable add-on, e.g. ‘Clear Flash Cookies’ for Mozilla Firefox (https://addons.mozilla.org/en-US/firefox/addon/clear-flash-cookies/?src=search or the Adobe Flash Killer Cookie for Google Chrome. You can prevent the use of HTML5 storage objects by using private browsing mode in your browser. We also recommend that you regularly delete your cookies and browser history manually.
§ 4 Further functions and services on our website
(1) In addition to the purely informational use of our website, we offer various services which you may use if you are interested. To do so, you will generally need to provide further personal data, which we use to provide the respective service and to which the aforementioned data processing principles apply.
(2) In some cases, we use external service providers to process your data. These have been carefully selected and commissioned by us, are bound by our instructions and are regularly monitored.
(2.1) Algolia
Our website uses the external search engine Algoliafor its search function. The content is indexed there and retrieved directly from Algolia when search queries are made. Technically, this results in a direct request between the user and Algolia. No personal data (PII) is stored.
(2.2) Sentry
We use Sentry for error monitoring. In the event of errors, we receive detailed error reports to ensure the stability and security of the website. No personal data (PII) is stored in this process. Sentry is an external service and is hosted and operated by 21TORR in Reutlingen. The classification of Sentry within consent management is handled separately.
(3) Furthermore, we may pass on your personal data to third parties if contracts are concluded or similar services are offered by us in collaboration with partners. You can obtain further information on this when providing your personal data or in the description of the service below.
(4) Where our service providers or partners are based in a country outside the European Economic Area (EEA), we will inform you of the implications of this in the description of the service.
§ 5 Objection or withdrawal of consent to the processing of your data
(1) If you have given your consent to the processing of your data, you may withdraw this consent at any time. Such a withdrawal affects the lawfulness of the processing of your personal data from the moment you notify us of it.
(2) Where we base the processing of your personal data on a balancing of interests, you may object to the processing. This is the case where the processing is not necessary for the performance of a contract with you, as we will explain in the following description of the functions. If you exercise such a right to object, we ask you to explain the reasons why we should not process your personal data as we currently do. In the event of a justified objection, we will examine the circumstances and either cease or adjust the data processing, or explain to you our compelling legitimate grounds on the basis of which we will continue the processing.
(3) You may, of course, object at any time to the processing of your personal data for the purposes of advertising and data analysis. You may inform us of your objection to advertising using the following contact details: datenschutz@alber.de
§ 6 Use of Google Analytics
(1) This website uses Google Analytics, a web analytics service provided by Google Inc. (“Google”). Google Analytics uses so-called “cookies”, text files that are stored on your computer and enable an analysis of your use of the website. The information generated by the cookie regarding your use of this website is usually transmitted to a Google server in the USA and stored there. However, if IP anonymisation is activated on this website, your IP address will be truncated by Google beforehand within Member States of the European Union or in other signatory states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide other services relating to website and internet usage to the website operator.
(2) The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.
(3) You can prevent the storage of cookies by adjusting your browser software settings accordingly; however, we would like to point out that, in this case, you may not be able to use all the functions of this website to their full extent. You can also prevent the collection of data generated by the cookie and relating to your use of the website (including your IP address) by Google, as well as the processing of this data by Google, by downloading and installing the browser plug-in available via the following link: https://tools.google.com/dlpage/gaoptout?hl=de
(4) This website uses Google Analytics with the extension “_anonymizeIp()”. This ensures that IP addresses are processed in a truncated form, thereby ruling out any possibility of personal identification. Where the data collected about you is personally identifiable, this is therefore immediately excluded and the personal data is deleted without delay.
(5) We use Google Analytics to analyse and regularly improve the use of our website. The statistics obtained enable us to improve our offering and make it more interesting for you as a user. The legal basis for the use of Google Analytics is Article 6(1)(f) of the GDPR.
(6) Third-party provider information: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001. Terms of use: https://www.google.com/analytics/terms/de.html, Privacy policy overview: https://www.google.com/intl/de/analytics/learn/privacy.html, as well as the privacy policy: https://www.google.de/intl/de/policies/privacy and https://privacy.google.de/
(7) This website also uses Google Analytics for cross-device analysis of visitor traffic, which is carried out via a user ID. You can disable cross-device analysis of your usage in your customer account under ‘My data’, ‘Personal data’.
§ 7 Integration of Google Maps
(1) On this website, we use the Google Maps service. This allows us to display interactive maps directly on the website and enables you to use the map function conveniently.
(2) When you visit the website, Google receives the information that you have accessed the relevant subpage of our website. In addition, the data specified in § 3 of this policy is transmitted. This occurs regardless of whether Google provides a user account through which you are logged in, or whether no user account exists. If you are logged in to Google, your data will be directly associated with your account. If you do not wish your data to be associated with your Google profile, you must log out before activating the button. Google stores your data as usage profiles and uses them for the purposes of advertising, market research and/or the customisation of its website. Such analysis is carried out in particular (even for users who are not logged in) to provide tailored advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, in which case you must contact Google to exercise this right (https://policies.google.com/privacy?hl=de).
(3) Further information on the purpose and scope of data collection and its processing by the plug-in provider can be found in the provider’s privacy policy. There you will also find further information regarding your rights in this regard and settings options to protect your privacy: https://policies.google.com/privacy.
§ 8 Cashback promotions
As part of limited-time cashback promotions, Alber GmbH processes the personal data of participating individuals.
(1) Type of data processed
The following data is collected as part of the registration for the cashback promotion:
- First name and surname
- Address
- Telephone number
- Serial number of the purchased product
Once eligibility has been successfully verified, the following additional data will be collected in a second step:
- IBAN
- Account holder’s name
(2) Purpose of processing
Processing is carried out exclusively for the purpose of:
- verifying eligibility to participate (in particular to prevent multiple entries or misuse)
- to carry out the cashback promotion
- to pay out the cashback amount
(3) Legal basis
Processing is carried out on the basis of:
- Article 6(1)(b) of the GDPR (implementation of pre-contractual measures or performance of a contract in the context of the cashback promotion)
- Art. 6(1)(f) GDPR (legitimate interest in preventing abuse and ensuring the proper conduct of the promotion)
(4) Processing of bank details
The bank details collected in the second step (IBAN and name of the account holder):
- are used exclusively for the purpose of making the cashback payment
- are not used for marketing purposes
- are treated confidentially and transmitted only to the parties necessary for payment processing
- will only be stored for as long as is necessary for the payment and to comply with statutory retention obligations
(5) Recipients of the data
To carry out the cashback promotion, we may use service providers who process personal data on our behalf.
This includes, in particular, the use of HubSpot as a CRM and marketing platform.
Processing takes place within the framework of contract processing in accordance with Article 28 of the GDPR.
(6) Transfer to third countries
The transfer of personal data to third countries (in particular to the USA) cannot be ruled out in the context of using service providers.
In such cases, the transfer takes place exclusively on the basis of appropriate safeguards in accordance with Article 44 et seq. of the GDPR, in particular through the conclusion of EU Standard Contractual Clauses.
(7) Retention period
The personal data collected as part of the cashback promotion will be deleted as soon as:
- the cashback promotion has been fully processed and
- there are no longer any statutory retention obligations
(8) Obligation to provide
The provision of personal data is required for participation in the cashback promotion. Without this information, participation or payment is not possible.
§ 9 Facebook Custom Audiences
(1) Furthermore, the website uses the “Custom
Audiences” remarketing function provided by Facebook Inc. (“Facebook”). This allows interest-based advertisements (“Facebook Ads”) to be displayed to users of the website when they visit the social network Facebook or other websites that also use this method. Our aim is to show you adverts that are of interest to you, in order to make our website more appealing to you.
(2) Due to the marketing tools used, your browser automatically establishes a direct connection to Facebook’s server. We have no influence over the scope and further use of the data collected by Facebook through the use of this tool and therefore inform you in accordance with our current knowledge: Through the integration of Facebook Custom Audiences, Facebook receives the information that you have visited the relevant page of our website or clicked on an advertisement from us. If you are registered with a Facebook service, Facebook can associate the visit with your account. Even if you are not registered with Facebook or have not logged in, there is a possibility that the provider may obtain and store your IP address and other identifying characteristics.
(3) The “Facebook Custom Audiences” function can be deactivated [here and] for logged-in users at https://www.facebook.com/settings/?tab=ads#_möglich.
(4) The legal basis for the processing of your data is Article 6(1)(f) of the GDPR. Further information on data processing by Facebook is available at https://www.facebook.com/about/privacy.
§ 10 Use of Instagram
Our website uses so-called social plugins (“plugins”) from Instagram, which is operated by Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland (“Instagram”). The plugins are marked with an Instagram logo, for example in the form of an “Instagram camera”. An overview of the Instagram plugins and their appearance can be found here: https://blog.instagram.com/post/36222022872/introducing-instagram-badges When you visit a page on our website that contains such a plugin, your browser establishes a direct connection to Instagram’s servers. The content of the plugin is transmitted directly from Instagram to your browser and integrated into the page. Through this integration, Instagram receives the information that your browser has accessed the relevant page of our website, even if you do not have an Instagram profile or are not currently logged in to Instagram. This information (including your IP address) is transmitted directly from your browser to an Instagram server in the USA and stored there. If you are logged into Instagram, Instagram can directly associate your visit to our website with your Instagram account. If you interact with the plugins, for example by clicking the ‘Instagram’ button, this information is also transmitted directly to an Instagram server and stored there. The information is also published on your Instagram account and displayed there to your contacts. For the purpose and scope of data collection, as well as the further processing and use of the data by Instagram, and your rights in this regard and settings options for protecting your privacy, please refer to Instagram’s privacy policy: https://help.instagram.com/155833707900388/If you do not want Instagram to directly associate the data collected via our website with your Instagram account, you must log out of Instagram before visiting our website. You can also completely prevent the Instagram plugins from loading by using add-ons for your browser, e.g. the script blocker ‘NoScript’ (https://noscript.net/).
§ 11 Use and disclosure of personal data
(1) If you commission us to provide a service, your personal data will only be used to the extent necessary for the performance of the contract (e.g. to process enquiries or brochure orders). This includes, in particular, the disclosure of your data to transport companies, credit agencies or other service providers engaged to provide the service or process the contract. No further disclosure, in particular the sale of your personal data to third parties, will take place. There are the following
exceptions to this procedure: We disclose customer data and personal data relating to customers if we are legally obliged to do so or if such disclosure is necessary to protect our rights, as well as the rights of our customers and those of third parties (e.g. in the event of attacks on our network infrastructure). This may, for example, involve data sharing with companies specialising in the prevention and minimisation of misuse and credit card fraud and/or in IT security. It is expressly clarified that, in this context, no data will be disclosed to these companies for commercial purposes that would conflict with this privacy policy.
(2) Naturally, our employees and the service providers we engage are bound by a duty of confidentiality and are required to comply with the provisions of the GDPR.
(3) We engage other companies and individuals to carry out tasks on our behalf. Examples include parcel deliveries, sending letters and emails, analysing databases, IT services, advertising activities, processing payments and customer service. These service providers have access to personal information required to perform their tasks. However, they are not permitted to use this information for any other purpose. Furthermore, they are obliged to handle the information in accordance with this privacy policy and the GDPR. To this end, we have entered into appropriate legally compliant contracts with them.