Privacy Policy
We are pleased that you are visiting our website. The protection and security of your personal information when using our website is very important to us. We would therefore like to take this opportunity to inform you about which of your personal data we collect when you visit our website and for what purposes it is used.
This Privacy Policy applies to the website of Neuhäuser GmbH, which is accessible at the domain www.neuhaeuser.com and its various subdomains (“our website”).
Who is responsible and how can I contact them?
Data Controller
for the processing of personal data within the meaning of the EU General Data Protection Regulation (GDPR)
Neuhäuser GmbH
Scharnhorststr. 11-16
44532 Lünen
DE
02306/949-0
contact@neuhaeuser.com
Data Protection Officer
AGAD Service GmbH
Waldring 43-47
44789 Bochum
DE
datenschutz@agad.de
What is this about?
This Privacy Policy complies with the legal requirements for transparency regarding the processing of personal data. This refers to all information relating to an identified or identifiable natural person. This includes, for example, information such as your name, age, address, phone number, date of birth, email address, IP address, or user behavior when visiting a website. Information for which we cannot establish a connection to your person (or can do so only with disproportionate effort), e.g., through anonymization, is not considered personal data. The processing of personal data (e.g., collection, retrieval, use, storage, or transmission) always requires a legal basis and a defined purpose.
Stored personal data is deleted as soon as the purpose of the processing has been fulfilled and there are no legitimate grounds for further retention of the data. We will inform you of the specific retention periods or criteria for storage in the individual processing operations. Regardless of this, we may store your personal data in individual cases to assert, exercise, or defend legal claims and where statutory retention obligations apply.
Who receives my data?
We will only disclose your personal data, which we process on our website, to third parties if this is necessary to fulfill the purposes and is covered by the legal basis (e.g., consent or the protection of legitimate interests) in each specific case. In addition, we may disclose personal data to third parties in specific cases if this serves to assert, exercise, or defend legal claims. Possible recipients may include, for example, law enforcement agencies, attorneys, auditors, courts, etc.
To the extent that we use service providers to operate our website who process personal data on our behalf as data processors in accordance with Article 28 of the GDPR, these service providers may be recipients of your personal data. For more information on the use of data processors and web services, please refer to the overview of the individual processing operations.
Do you use cookies?
Cookies are small text files that we send to the browser on your device during your visit to our website and that are stored there. As an alternative to cookies, information may also be stored in your browser’s local storage. Some features of our website cannot be provided without the use of cookies or local storage (technically necessary cookies). Other cookies, however, enable us to perform various analyses, allowing us, for example, to recognize the browser you are using when you visit our website again and to transmit various pieces of information to us (non-essential cookies). Among other things, cookies help us make our website more user-friendly and effective for you by, for example, tracking your use of our website and identifying your preferred settings (such as country and language settings). If third parties process information via cookies, they collect this information directly through your browser. Cookies do not cause any damage to your device. They cannot execute programs and do not contain viruses.
We provide information about the specific services for which we use cookies in the individual processing operations. Detailed information about the cookies used can be found in the cookie settings or in the Consent Manager on this website.
What are my rights?
Subject to the provisions of the General Data Protection Regulation (GDPR), you, as a data subject, have the following rights:
How exactly is my data processed?
Below, we provide information about the individual processing operations, the scope and purpose of data processing, the legal basis, the obligation to provide your data, and the respective retention period. No automated decision-making, including profiling, takes place in individual cases.
Provision of the Website
Nature and Scope of Processing
When you access and use our website, we collect the personal data that your browser automatically transmits to our server. The following information is temporarily stored in a so-called log file:
[Our website is not hosted by us directly, but by a service provider who processes the aforementioned data on our behalf in accordance with Article 28 of the GDPR.]
Purpose and Legal Basis
Processing is carried out to safeguard our overriding legitimate interest in displaying our website and ensuring its security and stability, based on Article 6(1)(f) of the GDPR. The collection of data and its storage in log files is absolutely necessary for the operation of the website. There is no right to object to the processing due to the exception under Article 21(1) of the GDPR. To the extent that the continued storage of log files is required by law, processing is carried out on the basis of Article 6(1)(c) of the GDPR. There is no legal or contractual obligation to provide the data; however, accessing our website is technically impossible without providing the data.
Retention Period
The aforementioned data is stored for the duration of the website’s display [and, for technical reasons, for a maximum of [7 days] thereafter].
Contact Form
Nature and Scope of Processing
On our website, we offer you the option to contact us via a provided form. The information collected through required fields is necessary to process your inquiry. In addition, you may voluntarily provide additional information that you believe is necessary for processing your contact request.
When using the contact form, your personal data is not disclosed to third parties.
Purpose and Legal Basis
The processing of your data through the use of our contact form is carried out for the purpose of communication and handling your inquiry based on your consent pursuant to Art. 6(1)(a) GDPR. If your inquiry relates to an existing contractual relationship with us, the processing is carried out for the purpose of fulfilling the contract based on Article 6(1)(b) of the GDPR. There is no legal or contractual obligation to provide your data; however, we cannot process your inquiry without the information in the required fields. If you do not wish to provide this data, please contact us by other means.
Retention Period
If you use the contact form based on your consent, we will store the data collected from each inquiry for a period of three years, beginning with the resolution of your inquiry or until you withdraw your consent.
[If you use the contact form as part of a contractual relationship, we will store the data collected for each inquiry for a period of [three years] from the end of the contractual relationship.]
Contact Form for Job Applicants
Nature and Scope of Processing
We collect and process the personal data of job applicants. Such data processing may also take place electronically, for example, when applicants submit application materials to us via email or through a web form on our website. On our website, we offer you the option to submit applications for advertised job openings to us via email.
Your data will only be stored in an applicant database beyond the current application process if you have provided us with your separate consent to do so.
Purpose and Legal Basis
The processing of your data in connection with your application is carried out for the purpose of reviewing your application and deciding whether to establish an employment relationship, based on Section 26 of the German Federal Data Protection Act (BDSG). In the event that your application documents are shared with third parties—in particular with our affiliated companies—or your data is stored beyond the current application process, the processing of your data is based on Article 6(1), first sentence, letter a of the GDPR. There is no legal or contractual obligation to provide your data; however, processing your application is not possible without the provision of this information.
Retention Period
We store the collected data for a period of six months from the date the position is filled.
Newsletter
Nature and Scope of Processing
If you sign up on our website to receive our newsletter, we collect your email address [and your name…] and store this information along with the date of registration and your IP address. You will then receive an email in which you must confirm your subscription to the newsletter (double opt-in). If you do not confirm your subscription within [XX hours], it will automatically expire and your data will not be processed for the purpose of sending the newsletter.
[We send the newsletter directly. Your data will not be disclosed to third parties or processors within the meaning of Art. 28 of the GDPR.]
[To send the newsletter, we use a service provided by [service provider], who processes your personal data on our behalf in accordance with Article 28 of the GDPR. Your data will not be disclosed to third parties.]
Purpose and Legal Basis
We process your data for the purpose of sending the newsletter based on your consent in accordance with Article 6(1)(a) of the GDPR. By unsubscribing from the newsletter, you may at any time revoke your consent with future effect in accordance with Article 7(3) of the GDPR. There is no legal or contractual obligation to provide your data; however, it is not possible to send the newsletter without your data.
Retention Period
After subscribing to the newsletter, we store your data for a maximum of [XX hours] until your subscription is confirmed.
After successful confirmation, we store your data until you revoke your consent (by unsubscribing from the newsletter) [and, for technical reasons, for a maximum of [7 days] thereafter].
Creating a Customer Account
Nature and Scope of Processing
As part of order processing, we collect your personal data to create a customer account. You can choose whether to place an order as a guest or to register a permanent user account. The information collected via the required fields during registration is identical in both cases and is necessary for processing the order in the online store. When registering a permanent user account, we also collect a password that you set yourself. In addition, you may voluntarily provide additional information that you consider necessary for order processing.
Your personal data will only be disclosed to third parties (e.g., shipping service providers / freight forwarders) and processors pursuant to Art. 28 of the GDPR to the extent necessary for order processing.
Purpose and Legal Basis
We process your personal data for the purpose of registering a customer account to fulfill a contract with you in accordance with Article 6(1)(b) of the GDPR. There is a contractual obligation to provide your data with regard to the required fields, as this information is necessary to identify you and for us to fulfill the contract. There is no legal obligation to provide this data. Without this information, it is not possible to place an order in our online store or, consequently, to enter into a contract. There is no obligation to provide any additional information you choose to provide voluntarily. You may place an order in our online store even without providing this voluntary information.
The additional processing of your password for the registration of a permanent user account is carried out for the purpose of providing a customer account, displaying your previous purchases, and storing your purchase-related data (e.g., billing address, various shipping addresses) based on your consent pursuant to Art. 6(1)(a) of the GDPR. By deleting your customer account, you may revoke your consent at any time with future effect in accordance with Article 7(3) of the GDPR.
Retention Period
If you place an order as a guest, we will store your personal data until your order has been fully processed (end of the contract). If you register a permanent customer account, we store purchase-related data beyond the end of the contract until you revoke your consent (deletion of the customer account). In both cases, your data will only be stored further if statutory retention obligations (e.g., tax and commercial law) apply.
YouTube NoCookie
Nature and Scope of Processing
We have integrated YouTube NoCookie into our website. YouTube NoCookie is a component of the video platform operated by YouTube, LLC, which allows users to upload content, share it via the Internet, and receive detailed statistics.
YouTube NoCookie enables us to integrate content from the platform into our website.
YouTube NoCookie uses cookies and other browser technologies to analyze user behavior, recognize users, and create user profiles. This information is used, among other things, to analyze the activity of the content accessed and to generate reports. If a user is registered with YouTube, LLC, YouTube NoCookie can associate the videos played with that user’s profile.
When you access this content, you establish a connection to servers operated by YouTube, LLC, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, during which your IP address and, if applicable, browser data such as your user agent are transmitted.
Purpose and Legal Basis
We intend to transfer personal data to third countries outside the European Economic Area, in particular the United States. Data transfers to the United States are carried out in accordance with Article 45(1) of the GDPR on the basis of the European Commission’s adequacy decision. The U.S. companies involved and/or their U.S. subprocessors are certified under the EU-U.S. Data Privacy Framework (EU-U.S. DPF).
In cases where no adequacy decision by the European Commission exists (including U.S. companies that are not certified under the EU-U.S. DPF), we have agreed upon other appropriate safeguards with the recipients of the data in accordance with Articles 44 et seq. of the GDPR. Unless otherwise specified, these are the European Commission’s Standard Contractual Clauses pursuant to Implementing Decision (EU) 2021/914 of June 4, 2021. You can view a copy of these standard contractual clauses at https://eur-lex.europa.eu/legal-content/DE/TXT/HTML/?uri=CELEX:32021D0914&from=DE.
In addition, prior to such a transfer to a third country, we obtain your consent in accordance with Article 49(1), first sentence, letter a of the GDPR, which you provide via the Consent Manager (or other forms, registrations, etc.). Please note that transfers to third countries may involve risks whose specific nature is unknown (e.g., data processing by security authorities in the third country, the exact scope of which and the consequences for you we do not know, over which we have no influence, and of which you may not become aware).
Retention Period
We have no influence over the specific retention period of the processed data; it is determined by YouTube, LLC. For further information, please refer to the privacy policy for YouTube NoCookie: policies.google.com/privacy.