Data Protection Statement pursuant to Art. 13 GDPR for the website of Uhlmann Sonnenschirme e.K.

Thank you for visiting our website. The security of your data is very important to us. We would therefore like to provide you with comprehensive information about how your data is used when you visit our website.

Name and address of the Controller

The Controller within the meaning of the General Data Protection Regulation, other national data protection laws of the EU member states, as well as other requirements under data protection law is:

Uhlmann Sonnenschirme e.K.
Langer Rain 3-5
88524 Uttenweiler-Dentingen
Germany

Telephone: +49 (0)7374 / 920 57 0
Email: infonoSpam@uhlmann-online.de
www.uhlmann-sonnenschirme.de

The Controller’s Data Protection Officer is:

Melanie Schoch
OFFICESCHOCH GmbH
Hauptstrasse 35
73312 Geislingen an der Steige
Germany

Telephone: +49 (0)7331 / 936 43 80
Email: datenschutznoSpam@uhlmann-online.de

Legal basis of data processing

Article 6 (1) sent. 1 lit. a GDPR serves as the legal basis of data processing operations for which we obtain the data subjects’ consent to a certain data processing purpose. If the processing of personal data is necessary to perform a contract with the data subject, e.g. in the case of data processing required for the delivery of goods or another service or return performance, the legal basis for the data processing is Article 6 (1) sent. 1 lit. b GDPR. The same applies to data processing required for the performance of pre-contractual measures, such as in the case of enquiries concerning our products or services. If our company is compelled to process personal data under a legal duty, e.g. in the context of tax obligations, the legal basis of the data processing is Article 6 (1) sent. 1 lit. c GDPR. Exceptional cases may require us to process personal data for the purpose of protecting the vital interests of the data subject or another individual person (Article 6 (1) sent. 1 lit. d GDPR). The processing of data may also be based on Article 6 (1) sent. 1 lit. f GDPR. This forms the legal basis of any processing of data not covered by any of the aforementioned legal bases, provided the data processing is necessary to safeguard a legitimate interest of our company or a third party and insofar as the data subject's interests, fundamental freedoms and fundamental rights do not prevail.

Disclosure of data

Your personal data will not be disclosed for any purposes other than those specified in the following. We will only disclose your personal data to third parties if:

• you have granted your express consent to the disclosure in accordance with Article 6 (1) sent. 1 lit. a GDPR,

• the disclosure is required pursuant to Article 6 (1) sent. 1 lit. f GDPR for asserting, exercising, or defending legal interests and there is no reason to believe that you have a prevailing interest in the non-disclosure of your data,

• there is a compelling legal duty to disclose the data pursuant Article 6 (1) sent. 1 lit. c GDPR and disclosure is

• lawful and necessary for the performance of contractual relationships with you pursuant to Article 6 (1) sent. 1 lit. b GDPR.

Rights of data subjects

You have the following rights:

• pursuant to Article 15 GDPR, you have the right to demand information about your personal data processed by us. You may in particular demand information about the data processing purposes, the category of personal data, categories of recipients to whom your data was or will be disclosed, the planned duration of storage, the existence of a right to the correction and deletion of your data, to restrict the processing of your data, to object against the processing of the data, to lodge a complaint, as well as the origin of your data insofar as they were not collected by us, and the existence of automated decision-making processes including profiling, as well as substantial information pertaining to their respective details;

• pursuant to Article 16 GDPR, you have the right to demand the prompt correction of inaccurate data or completion of incomplete personal data stored by us;

• pursuant to Article 17 GDPR, you have the right to demand the deletion of your personal data stored by us, insofar as the data processing is not required to exercise the right to freedom of expression and freedom of information, to perform a legal obligation, for reasons of public interest, or to assert, exercise or defend legal interests;

• pursuant to Article 18 GDPR, you have the right to demand the processing of your personal data to be restricted insofar as you contest the accuracy of your data and/or the processing is unlawful, but you decline the deletion of your data and we no longer requiring the data, but you require them to assert, exercise or defend legal interests, or if you have objected against data processing pursuant to Article 21 GDPR;

• pursuant to Article 20 GDPR, you have the right to demand the personal data you have made available to us to be provided to you in a structured, common and machine-readable format, or to demand the data to be transferred to a different controller;

• pursuant to Article 22 GDPR you have the right not to be subjected to a decision that is based exclusively on automated data processing - including profiling - and that has legal ramifications for you or significantly affects you in a similar way;

• pursuant to Article 7 (3) GDPR, you have the right to revoke a previously granted declaration of consent at any time. If you revoke your consent, we must and will cease the data processing that was based on the revoked declaration of consent;

• pursuant to Article 77 GDPR, you have the right to lodge a complaint with a supervisory authority without prejudice to any legal remedies available to you under administrative law or through the courts. Data subjects who believe that their data is processed in violation of the General Data Protection Regulation (GDPR) can contact the supervisory authority responsible for the place of their residence, work, or the location of the alleged violation.

Right to information, right the correction, blocking, and deletion of data, and to object against data processing

Upon receipt of a written request, we will inform you about your personal data stored by us. You have the right to demand this data to be corrected, blocked or deleted, and the right to object against the processing of this data. Any requests must be submitted to the address specified in our legal notice.

Right to object

Insofar as your personal data is processed on the basis of legitimate interests, Article 21 GDPR gives you the right to object against the processing of your personal data for reasons resulting from your extraordinary personal circumstances, or against their processing for direct advertising purposes. An objection against data processing for direct advertising purposes will be observed by us without you being required to demonstrate extraordinary personal circumstances. To exercise your right to object against the processing of your personal data or to revoke a previously granted declaration of consent, all you need to do is send an email to info@uhlmann-online.de.

General collection of data

When you access our website or a file, data about this transaction will be recorded in a log file on our web server. The following data may be recorded:

• referrer

• date and time of the access

• name of the accessed page

• success or error while loading

• truncated IP address

• operating system and browser version of your user device

• domain name of the referring website

• name of your Internet service provider

IP addresses are stored exclusively for reasons of data security and to warrant the resilience and security of our system (legal basis: Article 6 (1) sent. 1 lit. f GDPR). We reserve the right to carry out statistical analyses of anonymized data records.

Cookies

Our website uses cookies. A cookie is a data record that is created on the user's system at the time he/she visits our website. The user's browser will transmit the previously received cookie back to our web server at the user’s next visit to our website. The server can then analyze the information collected in this way. Cookies are in particular used to manage the placement of advertisements and to improve the navigation on a web page. In some instances, cookies are required to maintain the operational functionalities of our website (the legal basis is Article 6 (1) sent. 1 lit. f GDPR) and to safeguard the legitimate interests of the operator of this website. We use cookies exclusively in accordance with Article 5 (1) lit. a GDPR, which requires us to abide by the principles of “lawfulness, good faith, and transparency in data processing”.
If you would like to prevent the use of cookies, you can do so by changing the local settings of your Internet browser (e.g. Chrome, Mozilla Firefox, Opera, or Safari).
Unless cookies are strictly necessary for technical reasons, the settings area will also provide you with further information on the cookies used by certain tools and plug-ins.

We use cookies to personalize contents and information, to offer social media functions, and to analyze our website traffic. We also share information about your use of our website with our partners in connection with social media, advertising and analyses. Our partners may merge this information with data collected in connection with your use of these services, or other data you have disclosed to them.

Google Analytics

Our website uses the analysis service Google Analytics. This web analysis service is provided by Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter “Google”). We use Google Analytics to analyze your use of our website and compile reports on user activities. In connection with the redesign of our website, these analyses help us in making our website more user-friendly and providing a visitor- and customer-focused website experience. We use the results to evaluate how our website is received by visitors, and how we need to adjust it for an improved visitor experience.

These purposes constitute our legitimate interest in processing the data. The legal basis for the use of Google Analytics is Section 15 (3) Telemedia Act [TMG] and/or Article 6 (1) lit. f GDPR. This analysis tool works on the basis of cookies. A cookie is a data record that serves the purpose of analyzing your use of the website. It is transmitted to and stored on the user's hard drive at the time he/she visits our website. The information collected by the cookie is usually transmitted to a Google server in the USA and stored there. Google will anonymize your IP address by truncating it within a EU member state or a signatory country to the Agreement on the European Economic Area before transmitting it to the server. Google and our company have entered into an agreement on joint controllers pursuant to Article 26 GDPR.

If you would like to prevent the use of cookies, you can do so by changing the local settings of the Internet browser used on your computer (e.g. Safari, Internet Explorer, Opera, Firefox etc.), meaning the software used to open and display Internet pages. Alternatively, you can prevent the Google cookie from collecting and processing your data by downloading and installing the browser plug-in provided by Google at the following link: https://tools.google.com/dlpage/gaoptout?hl=de.

This will result in the placement of a so-called opt-out cookie, which will prevent the collection of your data during future visits to this website.

Further information about the terms of use and privacy statements of Google and Google Analytics can be found at https://marketingplatform.google.com/about/analytics/terms/de/ and https://policies.google.com/?hl=de&gl=de. Please note that we have activated the „anonymizeIp“ extension in Google Analytics. This warrants the anonymized collection of IP addresses.

Google Remarketing via DoubleClick

We use the Remarketing function provided by Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). This function serves the purpose of displaying interest-targeted advertisements from the Google advertising network DoubleClick to our website users. This is done by the visitor's browser storing cookies that recognize the visitor when he/she accesses websites that are part of the Google advertising network. The visitor may then be served advertisements on these webpages that relate to contents previously accessed by him/her on websites that use the Google Remarketing function. If you object against the use of the Remarketing function, you can deactivate it by changing the respective settings. You can also deactivate the cookies by following the instructions provided by the initiative of advertising networks.

Please note that, for reasons attributable to the Internet protocol, the Cloud Act may permit U.S. intelligence agencies to gain access to personal data that is automatically exchanged with Google in connection with the embedding of this tool.

DoubleClick

Google DoubleClick ("DoubleClick") is a service provided by Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). DoubleClick uses cookies to increase the relevance of advertisements served to users. This entails Google collecting data on the specific advertisements served to you and clicked on by you. The use of DoubleClick cookies allows Google and its advertising network to serve advertisements on the basis of your previous visits to websites (or apps). Google transmits the information generated by the cookies to a Google server for analysis and stores the data there. You can prevent the placement of cookies by changing the respective settings of your browser software. You can also prevent the transmission of the data on your website usage generated by the cookies to Google and the processing of this data by Google. To do so, please access the following link: Data privacy information of DoubleCLick and Google.

Please note that, for reasons attributable to the Internet protocol, the Cloud Act may permit U.S. intelligence agencies to gain access to personal data that is automatically exchanged with Google in connection with the embedding of this tool.

Contact forms

If you use a contact form to submit an enquiry to us, we will store and process the information from the online form including any contact details provided by you for the purpose of handling your enquiry and potential follow-up questions. Your data will be used for the exclusive purpose of processing and responding to your question. The data is processed for contract initiation purposes in accordance with Article 6 (1) sent. 1 lit. b GDPR.

CleverReach Newsletter

We use an email marketing solution provided by CleverReach GmbH & Co. KG, Mühlenstr. 43, 26180 Rastede, Germany ("CleverReach"). When you use a function on our website that requires you to enter an email address, the data you enter may be stored on a CleverReach server. CleverReach carries out a statistical analysis of our newsletter on our behalf. The CleverReach emails sent to you may contain tracking pixels that allow for an understanding of your user behavior (and in particular whether you have opened an email or clicked on links contained in the email). CleverReach can also determine whether you performed any action after clicking on one of the links (e.g. a purchase). Technical information (including the date and time the email is opened, your IP address, information on your browser and operating system) will also be collected. CleverReach collects this data in the form of pseudonymized data that are not linked with any other personal data. You may stop receiving emails by clicking on the link found at the end of an email received from CleverReach (right to revoke consent). Further information can be found in the Data Protection Statement of CleverReach.

CleverReach and our company have entered into a contract data processing agreement that requires CleverReach to handle your data in accordance with the relevant requirements.

We will only send newsletters that contain advertising information with the recipients’ consent or on the basis of a legal permission.
The subscription to our newsletter uses a double-opt-in process: Once you have registered, you will receive an email that asks you to confirm your registration.

This confirmation is necessary to verify you as the owner of the email address.
To evidence the registration in accordance with the legal requirements, the newsletter subscription is recorded in a log file.

This includes recording of the data and time of the registration and confirmation, as well as your IP address. Any additional data you provide when subscribing to the newsletter will also be recorded.

With the exception of the email address, we will only use your information to personalize the newsletter, e.g. your name.

You may unsubscribe from our newsletter at any time. A link to unsubscribe from the newsletter can be found in each newsletter email.

Confidentiality of your dealer login

If you have been granted access to a password-protected area on our website, you are responsible for keeping this password confidential. We kindly ask you to not disclose your password to anyone.

SSL encryption

This website uses SSL encryption (Secure Socket Layer) for the transmission of data from your browser to our servers and servers that provide files embedded in our website.
SSL means that the data transmission is encrypted. The data cannot be modified and the sender cannot be identified.
You can identify an active SSL encryption by the “https” preceding the website address you are accessing in your browser.

Links to third-party websites

This website uses references to third-party websites in the form of so-called links. Data will only be transmitted to the link target when you click the link. This is necessary for technical reasons. The transmitted data includes, in particular: Your IP address, the date and time you have clicked the link, the page on which you have clicked the link, information on your Internet browser. If you do not wish for this data to be transmitted to the link target, please do not click the link.

When you access a link to one of these websites, please note that these websites have their own data protection information (also called data protection statements or data privacy notices), and that we do not assume any liability or warranties for the processing of data in these cases. Please review the data protection statements of these websites before disclosing any personal data to them.

Security notice

We have implemented suitable technical and organizational measures that protect our website and other IT systems against loss, destruction, unauthorized access, unauthorized modification or unauthorized distribution of your data. Despite all prudence exercised, it is not possible to warrant back-to-back protection against all risks in every individual case. As we cannot warrant the uncompromised security of data in email communications, we recommend confidential information to be submitted to us by regular mail.

Modification of this Data Protection Statement

We reserve the right to modify this Data Protection Statement as required in light of changes in law, to this online service, or the method of data collection. This only applies with respect to declarations that concern the processing of data. Insofar as the user's consent is required or components of the Data Protection Statement that regulate the contractual relationship with users, the modification of this Data Protection Statement shall be subject to the user's prior consent.

Please review this Data Protection Information as required, particularly including in cases where you disclose personal information.