Privacy Policy

1. Data controller responsible for data processing (hereinafter: "we"):

Althea Deutschland GmbH
Im Goldäcker 14
88630 Pfullendorf

Phone: +49 (0) 75 52/928 010
Fax: +49 (0) 75 52/928 0111
E-Mail: de.info@althea-group.com

You can find more details about us in our provider identification.

2. Personal data, purposes of their processing and legal bases

It is generally possible to use our website without having to provide personal data. The provision of personal data is voluntary.

Personal data means any information relating to an identified or identifiable natural person (hereinafter referred to as "data subject"). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the identity of that natural person.

The purpose of data processing is to operate this website with information about our range of services, including contact options and online application options.

Personal data is only collected on our website if this is necessary to

  • for the use of the website (legal basis: Art. 6 para. 1 sentence 1 lit. a) and/or Art. 6 para. 1 sentence 1 lit. b) General Data Protection Regulation (GDPR),
  • to safeguard our interest in improving the user experience and maintaining the security of use (legal basis: Art. 6 para. 1 sentence 1 lit. f) GDPR),
  • for the use of the services offered on the website as well as pre-contractual measures, in particular for form entries (legal basis: Art. 6 para. 1 sentence 1 lit. a) and/or Art. 6 para. 1 sentence 1 lit. b) GDPR) or
  • for the conclusion and performance of a contract (legal basis: Art. 6 para. 1 sentence 1 lit. a) and lit. b) GDPR)

is required.

Further details on the processing of data can be found below under the relevant headings:

3. Access data/server log files

When you visit our website, the servers automatically store the information that your browser sends, so-called server log files. The information includes

  • Name of the website accessed,
  • File,
  • Date and time of retrieval,
  • Notification of successful retrieval,
  • Browser type and version,
  • Operating system of the user,
  • Referrer URL,
  • Provider.

This data is not merged with other data sources. The information is used exclusively to analyze and maintain the technical operation of the servers and the network in accordance with Art. 6 para. 1 sentence 1 lit. f) GDPR.

4. Cookies

Our website stores cookies. Cookies are small files that make it possible to store specific, device-related information on the user's access device (PC, smartphone, etc.). On the one hand, they serve the user-friendliness of websites and thus the users (e.g. storage of login data). On the other hand, they are used to collect statistical data on website usage and to analyze it for the purpose of improving the offer. You can find more detailed information in the following sections of our privacy policy. If you give your consent for cookies that are not required, the legal basis is Section 25 (1) TTDSG, Article 6 (1) sentence 1 lit. a) GDPR (consent). You can find further information on this and on the cookies and services used in our consent management tool and revoke your consent at any time freely and without detriment with effect for the future.

As a user, you can influence the use of cookies. Most browsers have an option to restrict or completely prevent the storage of cookies. However, it should be noted that the use and in particular the ease of use are restricted without cookies.

5. Contact via e-mail

If you send us inquiries by e-mail, your details from the e-mail, including the contact details you provide there, will be stored by us for the purpose of processing the inquiry and in the event of follow-up questions in accordance with Art. 6 Para. 1 S. 1 lit. b) GDPR. We will never pass on this data without your consent. We will treat the data you provide voluntarily as strictly confidential. We store and use the personal data you provide voluntarily to the extent necessary for further correspondence with you.

6. Contact form

If you send us inquiries via the contact form, your details from the inquiry form, including the contact data you provide there, will be stored by us for the purpose of processing the inquiry and in the event of follow-up questions in accordance with Art. 6 Para. 1 S. 1 lit. b) GDPR. We will not pass on this data without your consent.

7. Customer account

If you place an order with us via our website or place a repair order, you can create a customer account with us. The information required for this (mandatory information) is provided to customers during the registration process. It is necessary to provide this data so that we can set up the customer account for you. The data processing is based on the need to carry out pre-contractual measures or to perform the contract in accordance with Art. 6 para. 1 sentence 1 lit. b) GDPR.

8. Google Analytics

Our website uses Google Analytics. The provider is Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA, in order to analyze our website and usage and thus make it more user-friendly and effective and to advertise and offer our services more optimally. The legal basis for this is Art. 6 para. 1 sentence 1 lit. f) GDPR or, if you have given your consent to the use of cookies on the basis of a notice ("cookie banner") provided by us on the website, the legality of the use is governed by Art. 6 para. 1 sentence 1 lit. a) GDPR, § 25 para. 1 TTDSG.

For users who have their habitual residence in the European Economic Area or Switzerland, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, EU is the responsible controller for Google services (hereinafter: "Google"). Google Ireland Limited is a company affiliated with Google LLC, whose services we integrate and which must also comply with the General Data Protection Regulation.

Since July 10, 2023, the European Commission has published the adequacy decision for the new EU-US Data Privacy Framework (DPF). US companies can join the DPF by committing to comply with detailed data protection requirements. Google LLC already participates in this and is certified accordingly.

Google Analytics uses cookies, which are text files placed on your computer, to help the website analyze how users use the site. The information generated by cookies about your use of this website is usually transmitted to a Google server in the USA and stored there. However, the IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. IP anonymization is activated on our website. This means that your IP address will be shortened by Google within member states of the European Union or in other signatory states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. Google will use this information on our behalf for the purpose of evaluating your use of the website, compiling reports on website activity and providing us with other services relating to website activity and internet usage.

You can give your consent to the use of analytics via the cookie policy in the cookie settings by means of opt-ins (activation) and then deactivate it again by means of opt-out. You can also prevent the storage of cookies by setting your browser software accordingly; however, we would like to point out that in this case you may not be able to use all the functions of our website to their full extent. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by clicking on the link: https://tools.google.com/dlpage/gaoptout?hl=en to download and install the available browser plugin: Further information on Google's terms of use and data protection can be found here resp. there.

9. Google Tag Manager

Our website also uses the Google Tag Manager from Google LLC. The Google Tag Manager is a solution with which the operators of a website can manage so-called tags via an interface. The Google Tag Manager records your IP address. However, IP anonymization is activated on our website. This means that your IP address will be shortened by Google beforehand within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. Further information can be found there: https://marketingplatform.google.com/intl/en/about/analytics/tag-manager/use-policy/. The legal basis for this is Art. 6 para. 1 sentence 1 lit. f) GDPR or, if you have given your consent to the use of cookies on the basis of a notice ("cookie banner") provided by us on the website, the legality of the use is governed by Art. 6 para. 1 sentence 1 lit. a) GDPR, § 25 para. 1 TTDSG. You can also give your consent to the use of the Tag Manager via the cookie policy in the cookie setting opt-ins (activation) and also deactivate it again via opt-out.

10. PayPal

For the purpose of payment processing, we use the payment service provider PayPal in addition to the option of payment in advance and payment by invoice. This is an online payment service of PayPal (Europe) S.à.r.l. & Cie. S.C.A., 22-24 Boulevard Royal, 2449 Luxembourg.

Your payment data will only be transmitted to PayPal if this is necessary for payment processing. The legal basis is Art. 6 para. 1 sentence 1 lit. b) GDPR. If you use PayPal as a payment method, the bank details you have stored with PayPal will be used by PayPal for payment. We have no access to this data. You can access PayPal's privacy policy here.

PayPal reserves the right to carry out a credit check for the payment methods credit card via PayPal, direct debit via PayPal and purchase on account. For this purpose, your payment data will be passed on to credit agencies in accordance with Art. 6 para. 1 lit. a) GDPR on the basis of your consent to the determination of your solvency. PayPal uses the result of the credit check with regard to the statistical probability of non-payment for the purpose of deciding on the provision of the respective payment method. The credit report may contain probability values (so-called score values). If score values are included in the result of the credit report, they are based on a scientifically recognized mathematical-statistical procedure. The calculation of the score values includes, but is not limited to, address data. Further data protection information, including information on the credit agencies used, can be found in PayPal's privacy policy.

You can object to this processing of your data at any time by sending a message to us or to PayPal. However, PayPal may then continue to be entitled to process your personal data if this is necessary for contractual payment processing in accordance with Art. 6 para. 1 sentence 1 lit. b) GDPR.

11. Recipients of personal data

We share personal data with the following categories of recipients:

To our employees and to the hoster of our website. The hoster is Hetzner Online GmbH, Industriestr. 25; 91710 Gunzenhausen.

In addition, your personal data will not be passed on to third parties without your express consent, unless we are legally obliged to do so within the meaning of Art. 6 para. 1 sentence 1 lit. c) GDPR or the transfer of data is mandatory pursuant to Art. 6 para. 1 sentence 1 lit. b) GDPR for the execution of a contractual relationship.

We would like to point out that data transmission over the Internet (e.g. when communicating by e-mail) may be subject to security vulnerabilities. Complete protection of data against access by third parties is not possible.

12. Duration of storage

We delete your personal data immediately after the purpose has been achieved. For example, we store your data from your emails and the contact form until your request has been fully processed and dealt with. After that, the data is usually deleted.

In addition, an annual check is carried out to determine whether your stored data can be deleted.

Session cookies are automatically deleted by us after your visit to the website. Access data and server log files are deleted after one week.

Please note that certain data must be stored for at least six (§ 257 HGB) or ten (§ 147 AO) years under commercial and tax law.

13. Rights of the data subjects

You are not legally obliged to provide your personal data. However, the provision of such data may be necessary for the conclusion of a contract or for website functions. If you do not provide it, it may not be possible to offer a contract or a function on the website.

There is no automated decision-making on the website and no profiling takes place.

The rights of data subjects arise in particular from Articles 15 to 23 and Article 77 GDPR and from Sections 32 to 37 of the Federal Data Protection Act (BDSG)-new.

With regard to your personal data, you have the right of

  • Information, Art. 15 GDPR
  • Rectification, Art. 16 GDPR
  • Deletion, Art. 17 GDPR
  • Restriction of processing, Art. 18 GDPR
  • Transferability, Art. 20 GDPR.

If you have given your consent to the processing of personal data, you have the right of

  • Withdrawal, Art. 7 GDPR

with effect for the future.

You also have the right of

  • objection of processing of your personal data, Art. 21 GDPR

.

1. You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on point (f) of Article 6(1) GDPR (data processing based on a balancing of interests).

If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or the processing serves the establishment, exercise or defense of legal claims.

2. In individual cases, we process personal data for the purpose of direct advertising. If this is the case for you, you have the right to object at any time to the processing of data concerning you for the purpose of such advertising.

If you object to processing for direct marketing purposes, we will no longer process your personal data for these purposes.

The objection can be made informally and should preferably be addressed to us, see above under 1.

If you believe that the processing of your personal data violates data protection law, you always have the

  • right to complain

with the competent supervisory authority, see Art. 77 GDPR. Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of personal data relating to you infringes the GDPR.

The contact details of the data protection officers in the federal states, the supervisory authorities for the non-public sector, broadcasting, the churches, in Europe and in other countries as well as the Virtual Data Protection Office can be found there: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html .

The supervisory authority responsible for us is the State Commissioner for Data Protection and Freedom of Information Baden-Württemberg, Lautenschlagerstraße 20, 70173 Stuttgart.

Please note that this page has been translated automatically by a machine translation tool. As a result, errors in translation may occur. The legally binding version of the document is the German version.