data privacy policy
Data privacy: Your rights – our obligations
You can rely on the privacy, protection and security of your personal data in our hands. At KLOTZ AIS we take protection of your privacy and your rights concerning personal data processing very seriously, and have integrated it into all our business processes.
Accordingly, this Data Privacy Policy is to inform you about how we treat your personal data.
How do we use your data?
KLOTZ AIS collects, processes and uses all personal data resulting from your visits to our website exclusively and solely in accordance with the applicable regulations governing personal data privacy.
We use your personal data only for the purposes stated in this Data Privacy Policy (e.g. for processing your enquiries or, if applicable, for the conclusion of insurance contracts. When we collect personal data from forms, we inform you of the purpose for which we are collecting the data and any other circumstances, in accordance with the provisions of Article 13 GDPR. We do not use your data for any other purposes.
Responsibility (Controller)
Responsibility under the General Data Protection Regulation (GDPR) is held by:
KLOTZ AIS GmbH
Johann-Sebastian-Bach-Str. 36
85591 Vaterstetten / Munich, Germany
Tel.: +49.(0)8106.308.0
Mail: info(at)klotz-ais.com
Data protection officer
You may contact our Data Protection Officer at any time for further information:
What kind of information do we collect?
You can use virtually all areas of our website without needing to submit personal data. A small number of our offers and services on our website require personal data to be submitted before they can be used.
-
Provision of website
When you visit our website, our Internet servers (Web servers) automatically record and evaluate technical access data (browser type, browser version, operating system used, referrer URL, host name, time of server request, IP address). However, these data cannot be associated with a specific individual; individual users remain completely anonymous. The access data are never combined with other data. The lawful basis for this processing of your data is given by Art. 6 1 f GDPR (legitimate interest with the purpose of ensuring fault-free technical display and optimization of the website). The data are only stored for the period required by the specified purpose.
-
Cookies
Please note that this website uses cookies. Cookies are small text files which are stored in the Web browser of the user’s computer system. The lawful basis for the use of cookies is given by Art. 6 (1) a GDPR (consent to processing for statistical purposes, for the purpose of optimizing the website display or for marketing purposes). If consent to the use of cookies is not granted, the user may be unable to use some website features to their full extent or at all.
Explanations of the commonest types of cookies for your information:
-
Session cookies
When you are active on a website, a session cookie containing a session ID is temporarily saved on your computer. This allows you to move to different webpages without needing to repeat the login procedure. Session cookies are automatically deleted when you log out and become invalid if your visit automatically times out.
-
Permanent or protocol cookies
A permanent or protocol cookie stores a file on your computer for the duration defined by the file’s expiration date. These cookies enable websites to remember your information and settings the next time you visit them. This speeds up your access and improves convenience; for example, you do not need to adjust your language settings for our website every time. Once the expiration date of the cookie is reached, the cookie is automatically deleted when you visit the website that generated the cookie.
-
Third party cookies
Third party cookies originate from providers who are not the operator of the website. They can be used to collect information for purposes such as advertising, user-defined content and web statistics.
Information on cookies used on our website:
| Name | Use | Duration of storage | Cookie type |
|---|---|---|---|
| _grid | This cookie is used by Google Analytics to distinguish users. | 1 day | Third party cookie |
| _gat | This cookie is used by Google Analytics to limit the demand rate. | 1 day | Third party cookie |
| _ga | Registers a unique ID used to generate statistical data about | 2 years | Third party cookie |
The following cookies are used if you visit our online shop:
| Name | Use | Duration of storage | Cookie type |
|---|---|---|---|
| _utma | This cookie stores the main information for the purpose of tracking visitors. It contains a unique visitor ID, the date and time of the user’s first visit, the time at which the active visit starts and the number of visits made by a unique visitor to the website. | 3 years | Third party cookie |
| _utmb | This cookie is used by Google Analytics to detect whether a visit has expired and the page depth of the visit. It stores the number of page views and start time of the user’s current visit. | 30 minutes | Third party cookie |
| _utmc | This cookie is no longer used by Google Analytics. However, it is still used for backward compatibility of sites that still use the urchin.js tracking code. It expires when the browser is closed. It can be ignored for debugging purposes or when the new ga.js tracking code is used. | Deleted when session is closed | Third party cookie |
| _utmt | This cookie is used to reduce query rates. | 30 minutes | Third party cookie |
| _utmx | This cookie is only set during correct use and implementation of the Google Website Optimizer. If the GWO code is correctly executed the cookie stores the details of the page variations or site elements that were opened by the respective user. | 2 years | Third party cookie |
| _utmz | Visitor source cookie. It contains all visitor source information for the current visit, including information transferred from campaign tracking parameters. The cookie also stores information about whether the visitor source of the last visit was different from the current source. If no visitor source information is available the cookie is not changed. The cookie enables Google Analytics to assign visitor information such as conversions or eCommerce transactions to a visitor source. The cookie does not contain historical information about past visitor sources. | 6 months | Third party cookie |
| _cid | This corresponds to the second value of the _utma cookie for sites using Javascript tracking. | 1 day | Third party cookie |
The online shop also uses cookies that are essential for the technical operation of the website. They do not contain any personal details and are not read by third parties.
| Name | Use | Duration of storage | Cookie type |
|---|---|---|---|
| CATEGORY_INFO | Saves the category information of the site and allows pages to load faster. | 1 hour | Protocol cookie |
| COMPARE | Elements added to comparison list. | 1 hour | Protocol cookie |
| CURRENCY | Your preferred currency option | 1 hour | Protocol cookie |
| CUSTOMER | Encrypted version of your shop customer ID. | 1 hour | Protocol cookie |
| CUSTOMER_AUTH | Indicates you are signed into the shop. | 1 hour | Protocol cookie |
| CUSTOMER_INFO | Encrypted version of your customer group. | 1 hour | Protocol cookie |
| CUSTOMER_SEGMENT_IDS | Saves your customer segment ID. | 1 hour | Protocol cookie |
| EXTERNAL_NO_CACHE | Signals whether caching is deactivated. | 1 hour | Protocol cookie |
| FRONTEND | Your session ID on the server. | 1 hour | Protocol cookie |
| GUEST-VIEW | Allows guest orders to be processed. | 1 hour | Protocol cookie |
| LAST_CATEGORY | Most recently visited category. | 1 hour | Protocol cookie |
| LAST_PRODUCT | Product you have just viewed. | 1 hour | Protocol cookie |
| NEWMESSAGE | Displays newly received messages | 1 hour | Protocol cookie |
| NO_CACHE | Shows whether caching is allowed or not. | 1 hour | Protocol cookie |
| PERSISTENT_SHOPPING_CART | Link that displays the current and previous contents of your shopping cart. | 1 hour | Protocol cookie |
| POLL | Gives information about which surveys you have responded to. | 1 hour | Protocol cookie |
| POLLN | ID of all surveys to which you responded recently. | 1 hour | Protocol cookie |
| RECENTLYCOMPARED | Displays recently compared products. | 1 hour | Protocol cookie |
| STF | Product information that has been forwarded to friends. | 1 hour | Protocol cookie |
| STORE | Your selected shop view or language. | 1 hour | Protocol cookie |
| USER_ALLOWED_SAVE_COOKIE | Shows permission for use of cookies. | 1 hour | Protocol cookie |
| VIEWED_PRODUCT_IDS | Most recently viewed products. | 1 hour | Protocol cookie |
| WISHLIST | Encrypted product list added to your wishlist. | 1 hour | Protocol cookie |
| WISHLIST_CNT | Number of items in your wishlist. | 1 hour | Protocol cookie |
-
Email contact
Submission of further information is voluntary. As an alternative, the company may be contacted using the email address given. We process the data in your request in order to reply to you. The lawful basis of this data processing is Art. 6 (1) b GDPR, with processing of your enquiry as the purpose. The stored data will be deleted when the purpose of processing no longer applies and when no further statutory or contractual obligations of retention apply. As a general rule, data from your enquiry is stored for 12 months unless no further purpose of processing (e.g. order, quotation) results from your enquiry.
-
Web shop
If you use the services of our Web shop, the following personal data are requested and stored upon conclusion of a contract:
- Company / VAT ID and/or
- Name and/or position
- Billing and delivery address
- Tel / fax numbers
- Payment method
- Order
The lawful basis of this data processing is Art. 6 (1) b GDPR, The purpose of processing the data is the initiation or fulfilment of a contract. The stored data will be deleted when the purpose of processing no longer applies and when no further statutory or contractual obligations of retention apply. The statutory period of retention in this case is 6 years.
-
Newsletter
Our website offers the option of subscribing to a newsletter. The following data are collected and stored for the purpose of mailing the newsletter and traceability:
- Email address
- Name
- Date and time of registration
- Date and time of confirmation mail (double opt-in method)
The lawful basis is Art. 6 (1) a GDPR (consent). In the newsletter registration process you are asked to give consent and referred to this Data Privacy Policy. A double opt-in method is used; after giving your consent, you receive an email from us with a link which you click to confirm and complete the registration process.
You can withdraw your consent to receive our newsletter at any time with prospective (future) effect. Your data are then deleted immediately unless statutory or contractual obligations of retention apply.
-
Further processing activities
Inclusion of services and content from third parties
The website may contain links to other websites which are beyond our control and to which this Data Privacy Policy does not apply. If you access other websites using the links provided, the operators of those websites can collect information about you and use it in accordance with their data privacy policies, which may differ from ours.
The website may also offer you the opportunity to share information on or to follow KLOTZ AIS, its website or the products and/or services available from it, in the form of a social network function (e.g. “share this”, “like” or “follow” buttons).
We offer this function to create interest in the website among members of your social networks and to give you the opportunity to share opinions, news and recommendations from the website with your contacts and follow them. However, please note that where personal data are submitted in a social network, these data may be recorded by the social network provider and made publicly accessible by means of Internet search engines.
Carefully read the data privacy policy of every website you visit or every social network you use to share information, to ensure you are fully informed about their data protection practices.
On the lawful basis of Art. 6 (1) f GDPR, we use content from the following third party providers:
YouTube
Our website uses plugins from YouTube, which is operated by Google. The operator of the pages is YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, USA.
If you visit one of our pages featuring a YouTube plugin, a connection to the YouTube servers is established. The YouTube server is thus informed about which of our pages you have visited.
If you are logged in to your YouTube account, YouTube allows you to associate your browsing behaviour directly with your personal profile. You can prevent this by logging out of your YouTube account.
The use of YouTube is done in the interest of enhancing the attractive presentation of our website. This constitutes a justified interest pursuant to Art. 6 (1) f GDPR.
Orbit VU
This site uses plugins from ORBITVU Sp. z o.o. to display 3D product images. IP addresses are transferred to ORBITVU as part of this process.
The use of Orbit VU is done in the interest of enhancing the attractive presentation of our website. This constitutes a justified interest pursuant to Art. 6 (1) f GDPR.
Further information about treatment of user data can be found in ORBITVU’s privacy policy at https://orbitvu.com/warranty-terms-and-conditions.
Google Maps
This site uses the Google Maps map service via an API. The service is provided by Google Inc., 1600 Amphitheatre Parkway Mountain View, CA 94043, USA.
To use Google Maps, it is necessary to store your IP address. This information is generally transferred to a Google server in the USA and stored there. The provider of this site has no influence on this data transfer. Google Maps is used in the interests of making our website attractive and facilitating the location of places specified by us on the website. This constitutes a justified interest pursuant to Art. 6 (1) f GDPR.
Visitor analysis
This website uses visitor analysis processes to gain information about the behaviour of visitors to the website and thus improve their user experience.
Google Analytics
This website uses Google Analytics, a web analysis service by Google Inc. („Google“). Google Analytics uses „cookies“, text files that are stored on your computer and allow your use of the website to be analysed. The information about your visit collected by the cookie is transferred to a Google server and stored there. The IP address used for your visit to the website is only stored in anonymized form (by means of a non-reversible truncation of the IP address). You can also prevent Google Analytics from recording, transmitting to Google and processing the data related to your website visit (including your IP address) generated by the cookies by downloading and installing the browser plugin from the following link: http://tools.google.com/dlpage/gaoptout?hl=en
The lawful basis of this data processing is Art. 6 (1) f GDPR (legitimate interest for the purpose of statistical analysis and optimizing our service). An agreement with Google Inc. concerning contract data processing is in place in accordance with Art. 28 GDPR.
Sharing personal data with third parties
On the lawful basis of Art. 6 (1) f GDPR, personal data is shared with the following third party providers:
External service providers are only commissioned to provide services if they contractually commit to compliance with Art. 28 GDPR.
Sharing personal data as part of order fulfillment
As part of fulfilling the sales contract arising from your order, the personal details we collect are passed to the shipping company commissioned to deliver your order if this is necessary to deliver the goods. This data sharing is limited to data required for the purpose of delivering your goods.
If you choose to pay by PayPal, by credit card via PayPal, by direct debit via PayPal or – if available – “purchase on account” via PayPal, as part of the payment process we transfer your payment details to PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter “PayPal”). PayPal reserves the right to apply for a credit report in connection with the payment methods of credit card via PayPal, by direct debit via PayPal or – if available – “purchase on account” via PayPal. PayPal uses the result of the credit report with respect to statistical probability of default to decide whether to provide the payment method in question. The credit report may contain probability forecasts (credit score). Credit scores which are included in the credit report results are based on a scientifically proven mathematical and statistical method. Data including address data are used to calculate credit scores. For further data protection information including information on the credit agencies used, see the PayPal Data Privacy Policy: https://www.paypal.com/de/webapps/mpp/ua/privacy-prev?locale.x=en_GB
Privacy protection of minors aged under 16 on the Internet
KLOTZ AIS never knowingly collects or uses personal data of minors (aged under 16) in any way. The age of visitors to our website is not generally disclosed. However, we have not taken any specific actions to provide special protection of such data. Individuals aged under 16 may not transfer personal data without the express permission of their parents or guardians.
Your rights concerning processing of your personal data
Right of access: The data subject shall have the right to obtain from the controller confirmation as to whether or not personal data concerning him or her are being processed, and where that is the case, access to the personal data and the following information as listed in Article 15 GDPR.
Right to rectification: The data subject shall have the right to obtain from the controller without undue delay the rectification of inaccurate personal data concerning him or her and, where applicable, to have incomplete personal data completed (Article 16 GDPR).
Right to erasure: The data subject shall have the right to obtain from the controller the erasure of personal data concerning him or her without undue delay where one of the grounds listed in Article 17 GDPR applies, e.g. the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed (right of erasure, ‘right to be forgotten’).
Right to restriction of processing: The data subject shall have the right to obtain from the controller restriction of processing where one of the grounds listed in Article 18 GDPR applies, e.g. where the data subject objects to the processing; said restriction shall apply for a period enabling the controller to verify the accuracy of the personal data.
Notification obligation: The data subject has the right to be informed of the recipients of his or her personal data. The data controller will communicate any rectification or erasure of personal data or restriction of processing carried out in accordance with Articles 16, 17(1) and 18 GDPR to each recipient to whom the personal data have been disclosed unless such notification proves impossible or involves disproportionate effort (Art. 19 DSGVO).
Right to data portability: A data subject has the right to receive his or her personal data which the subject has provided to a controller, in a structured, commonly used and machine-readable format. The subject further has the right to request transmission of those data to another controller in accordance with Article 20 GDPR, where technically feasible.
Right to object: The data subject has the right to object, on grounds relating to his or her particular situation, at any time to processing of personal data concerning him or her. The controller shall no longer process the personal data unless the controller demonstrates compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject or where the processing serves for the establishment, exercise or defence of legal claims (Article 21 GDPR).
Right to lodge a complaint with a supervisory authority: Without prejudice to any other administrative or judicial remedy, every data subject shall have the right to lodge a complaint with a supervisory authority if the data subject considers that the processing of personal data relating to him or her infringes the GDPR (Article 77 GDPR). The data subject may exercise this right in the Member State of his or her habitual residence, place of work or place of the alleged infringement. In Bavaria the responsible supervisory authority is:
Bayerisches Landesamt für Datenschutzaufsicht (BayLDA) (Bavarian State Data Protection Authority)
Promenade 27
91522 Ansbach, Germany
How do we ensure the security of your data?
The data you provide to KLOTZ AIS are protected by appropriate technical and organizational measures designed to safeguard the data against accidental or deliberate manipulation, loss, destruction, access by unauthorized individuals or unauthorized disclosure to third parties. We monitor and improve our security measures on an ongoing basis in line with technological developments and organizational possibilities.