Data Protection Statement pursuant to Art. 13 GDPR for the website of Uhlmann Sonnenschirme e.K.

Thank you for visiting our website. The security of your data is very important to us. We would therefore like to provide you with comprehensive information about how your data is used when you visit our website.

Name and address of the Controller

The Controller within the meaning of the General Data Protection Regulation, other national data protection laws of the EU member states, as well as other requirements under data protection law is:

Uhlmann Sonnenschirme e.K.
Langer Rain 3-5
88524 Uttenweiler-Dentingen
Germany

Telephone: +49 (0)7374 / 920 57 0
Email: infonoSpam@uhlmann-online.de
www.uhlmann-sonnenschirme.de

The Controller’s Data Protection Officer is:

Melanie Schoch
OFFICESCHOCH GmbH
Hauptstrasse 35
73312 Geislingen an der Steige
Germany

Telephone: +49 (0)7331 / 936 43 80
Email: datenschutznoSpam@uhlmann-online.de

Legal basis of data processing

Article 6 (1) sent. 1 lit. a GDPR serves as the legal basis of data processing operations for which we obtain the data subjects’ consent to a certain data processing purpose. If the processing of personal data is necessary to perform a contract with the data subject, e.g. in the case of data processing required for the delivery of goods or another service or return performance, the legal basis for the data processing is Article 6 (1) sent. 1 lit. b GDPR. The same applies to data processing required for the performance of pre-contractual measures, such as in the case of enquiries concerning our products or services. If our company is compelled to process personal data under a legal duty, e.g. in the context of tax obligations, the legal basis of the data processing is Article 6 (1) sent. 1 lit. c GDPR. Exceptional cases may require us to process personal data for the purpose of protecting the vital interests of the data subject or another individual person (Article 6 (1) sent. 1 lit. d GDPR). The processing of data may also be based on Article 6 (1) sent. 1 lit. f GDPR. This forms the legal basis of any processing of data not covered by any of the aforementioned legal bases, provided the data processing is necessary to safeguard a legitimate interest of our company or a third party and insofar as the data subject's interests, fundamental freedoms and fundamental rights do not prevail.

Disclosure of data

Your personal data will not be disclosed for any purposes other than those specified in the following. We will only disclose your personal data to third parties if:

• you have granted your express consent to the disclosure in accordance with Article 6 (1) sent. 1 lit. a GDPR,

• the disclosure is required pursuant to Article 6 (1) sent. 1 lit. f GDPR for asserting, exercising, or defending legal interests and there is no reason to believe that you have a prevailing interest in the non-disclosure of your data,

• there is a compelling legal duty to disclose the data pursuant Article 6 (1) sent. 1 lit. c GDPR and disclosure is

• lawful and necessary for the performance of contractual relationships with you pursuant to Article 6 (1) sent. 1 lit. b GDPR.

Rights of data subjects

You have the following rights:

• pursuant to Article 15 GDPR, you have the right to demand information about your personal data processed by us. You may in particular demand information about the data processing purposes, the category of personal data, categories of recipients to whom your data was or will be disclosed, the planned duration of storage, the existence of a right to the correction and deletion of your data, to restrict the processing of your data, to object against the processing of the data, to lodge a complaint, as well as the origin of your data insofar as they were not collected by us, and the existence of automated decision-making processes including profiling, as well as substantial information pertaining to their respective details;

• pursuant to Article 16 GDPR, you have the right to demand the prompt correction of inaccurate data or completion of incomplete personal data stored by us;

• pursuant to Article 17 GDPR, you have the right to demand the deletion of your personal data stored by us, insofar as the data processing is not required to exercise the right to freedom of expression and freedom of information, to perform a legal obligation, for reasons of public interest, or to assert, exercise or defend legal interests;

• pursuant to Article 18 GDPR, you have the right to demand the processing of your personal data to be restricted insofar as you contest the accuracy of your data and/or the processing is unlawful, but you decline the deletion of your data and we no longer requiring the data, but you require them to assert, exercise or defend legal interests, or if you have objected against data processing pursuant to Article 21 GDPR;

• pursuant to Article 20 GDPR, you have the right to demand the personal data you have made available to us to be provided to you in a structured, common and machine-readable format, or to demand the data to be transferred to a different controller;

• pursuant to Article 22 GDPR you have the right not to be subjected to a decision that is based exclusively on automated data processing - including profiling - and that has legal ramifications for you or significantly affects you in a similar way;

• pursuant to Article 7 (3) GDPR, you have the right to revoke a previously granted declaration of consent at any time. If you revoke your consent, we must and will cease the data processing that was based on the revoked declaration of consent;

• pursuant to Article 77 GDPR, you have the right to lodge a complaint with a supervisory authority without prejudice to any legal remedies available to you under administrative law or through the courts. Data subjects who believe that their data is processed in violation of the General Data Protection Regulation (GDPR) can contact the supervisory authority responsible for the place of their residence, work, or the location of the alleged violation.

Right to information, right the correction, blocking, and deletion of data, and to object against data processing

Upon receipt of a written request, we will inform you about your personal data stored by us. You have the right to demand this data to be corrected, blocked or deleted, and the right to object against the processing of this data. Any requests must be submitted to the address specified in our legal notice.

Right to object

Insofar as your personal data is processed on the basis of legitimate interests, Article 21 GDPR gives you the right to object against the processing of your personal data for reasons resulting from your extraordinary personal circumstances, or against their processing for direct advertising purposes. An objection against data processing for direct advertising purposes will be observed by us without you being required to demonstrate extraordinary personal circumstances. To exercise your right to object against the processing of your personal data or to revoke a previously granted declaration of consent, all you need to do is send an email to info@uhlmann-online.de.

General collection of data

When you access our website or a file, data about this transaction will be recorded in a log file on our web server. The following data may be recorded:

• referrer

• date and time of the access

• name of the accessed page

• success or error while loading

• truncated IP address

• operating system and browser version of your user device

• domain name of the referring website

• name of your Internet service provider

IP addresses are stored exclusively for reasons of data security and to warrant the resilience and security of our system (legal basis: Article 6 (1) sent. 1 lit. f GDPR). We reserve the right to carry out statistical analyses of anonymized data records.

Contact forms

If you use a contact form to submit an enquiry to us, we will store and process the information from the online form including any contact details provided by you for the purpose of handling your enquiry and potential follow-up questions. Your data will be used for the exclusive purpose of processing and responding to your question. The data is processed for contract initiation purposes in accordance with Article 6 (1) sent. 1 lit. b GDPR.

CleverReach Newsletter

We use an email marketing solution provided by CleverReach GmbH & Co. KG, Mühlenstr. 43, 26180 Rastede, Germany ("CleverReach"). When you use a function on our website that requires you to enter an email address, the data you enter may be stored on a CleverReach server. CleverReach carries out a statistical analysis of our newsletter on our behalf. The CleverReach emails sent to you may contain tracking pixels that allow for an understanding of your user behavior (and in particular whether you have opened an email or clicked on links contained in the email). CleverReach can also determine whether you performed any action after clicking on one of the links (e.g. a purchase). Technical information (including the date and time the email is opened, your IP address, information on your browser and operating system) will also be collected. CleverReach collects this data in the form of pseudonymized data that are not linked with any other personal data. You may stop receiving emails by clicking on the link found at the end of an email received from CleverReach (right to revoke consent). Further information can be found in the Data Protection Statement of CleverReach.

CleverReach and our company have entered into a contract data processing agreement that requires CleverReach to handle your data in accordance with the relevant requirements.

We will only send newsletters that contain advertising information with the recipients’ consent or on the basis of a legal permission.
The subscription to our newsletter uses a double-opt-in process: Once you have registered, you will receive an email that asks you to confirm your registration.

This confirmation is necessary to verify you as the owner of the email address.
To evidence the registration in accordance with the legal requirements, the newsletter subscription is recorded in a log file.

This includes recording of the data and time of the registration and confirmation, as well as your IP address. Any additional data you provide when subscribing to the newsletter will also be recorded.

With the exception of the email address, we will only use your information to personalize the newsletter, e.g. your name.

You may unsubscribe from our newsletter at any time. A link to unsubscribe from the newsletter can be found in each newsletter email.

Confidentiality of your dealer login

If you have been granted access to a password-protected area on our website, you are responsible for keeping this password confidential. We kindly ask you to not disclose your password to anyone.

SSL encryption

This website uses SSL encryption (Secure Socket Layer) for the transmission of data from your browser to our servers and servers that provide files embedded in our website.
SSL means that the data transmission is encrypted. The data cannot be modified and the sender cannot be identified.
You can identify an active SSL encryption by the “https” preceding the website address you are accessing in your browser.

Links to third-party websites

This website uses references to third-party websites in the form of so-called links. Data will only be transmitted to the link target when you click the link. This is necessary for technical reasons. The transmitted data includes, in particular: Your IP address, the date and time you have clicked the link, the page on which you have clicked the link, information on your Internet browser. If you do not wish for this data to be transmitted to the link target, please do not click the link.

When you access a link to one of these websites, please note that these websites have their own data protection information (also called data protection statements or data privacy notices), and that we do not assume any liability or warranties for the processing of data in these cases. Please review the data protection statements of these websites before disclosing any personal data to them.

Security notice

We have implemented suitable technical and organizational measures that protect our website and other IT systems against loss, destruction, unauthorized access, unauthorized modification or unauthorized distribution of your data. Despite all prudence exercised, it is not possible to warrant back-to-back protection against all risks in every individual case. As we cannot warrant the uncompromised security of data in email communications, we recommend confidential information to be submitted to us by regular mail.

Modification of this Data Protection Statement

We reserve the right to modify this Data Protection Statement as required in light of changes in law, to this online service, or the method of data collection. This only applies with respect to declarations that concern the processing of data. Insofar as the user's consent is required or components of the Data Protection Statement that regulate the contractual relationship with users, the modification of this Data Protection Statement shall be subject to the user's prior consent.

Please review this Data Protection Information as required, particularly including in cases where you disclose personal information.