As of 15.05.2018

1. Data protection information

We take the protection of your personal data very seriously. In the following, we would like to provide you with comprehensive and detailed information about what we collect your personal data for, what we do with it, to whom we may disclose this data and where and for how long we store your data. In addition, you as the data subject have numerous rights, about which we would also like to inform you. We make this information available to you on the basis of Regulation (EU) 679/2016 on the protection of individuals with regard to the processing of personal data, on the free movement of data and on the repeal of Directive 95/46/EC, hereinafter referred to as DSGVO. 

2. Who processes your personal data?

We, these are the positions listed below. We operate the data processing jointly and, as jointly responsible persons in accordance with Art. 26 DSGVO, are your contact persons in all data protection matters. 

Scheurich GmbH & Co. KG
Gottlieb – Wagner Strasse 2
63924 Kleinheubach 

Represented by 

Ralf Schwinn, Björn Hansen, Marcus Grothaus
Phone: +49 (0)9371-507-0

Our data protection officer, Mr. Marc Dauenhauer (contact@datenschutz@scheurich.de), is at your disposal for all questions regarding the processing of your data.

3. Principles of data processing

3.1 Legal bases

3.1.1 General information

We process your personal data in accordance with the legal requirements of the DSGVO and the Federal Data Protection Act in the current version. We process your personal data in detail:

  • within the scope of statutory obligations,
  • insofar as we need them to fulfil contracts that we have concluded with you,
  • as far as they are necessary for pre-contractual measures (e.g. offers),
  • if you have given your consent,
  • within the framework of our legitimate interests, which include marketing and direct advertising, as well as the
  • Protection of our legal claims.

3.2 Passing on of data

In principle, we do not pass on data to third parties, unless,

  • You have agreed to the transfer, 
  • we are obliged by law to do so,
  • it is necessary to fulfill a contract with you, 
  • it is necessary to protect our legitimate interests,
  • we commission external service providers to carry out tasks.

In this case, we ensure that our service providers provide sufficient guarantees that appropriate technical and organisational measures are in place and that processing is in compliance with the DSGVO (Art. 28 DSGVO). For this reason we select such service providers very carefully. 

3.3 Consents

3.3.1 Obtaining consent

We will obtain your consent to the processing of personal data – if necessary – electronically or in writing. We secure electronic consents by means of an appropriate double opt-in procedure and record your consent.

3.3.2 Revocation

You can revoke your consent once given at any time with effect for the future. The legality of data processing based on the consent until revocation is not affected by this. You can address your revocation to one of the offices listed under 2.

3.3.3 Legal consequences of the revocation

If processing of your personal data is based on your consent, we will terminate it as a result of your revocation. This may also mean that services you have received (e.g. newsletters) can no longer be provided. 

3.4 Processing in third countries

We process your data within the EU or the European Economic Area. An exception is the use of IT systems of partners and service providers operating in the USA or other third countries. In these cases, we ensure before the transmission of your personal data that appropriate guarantees exist to protect your personal data.  The processing of your data in the USA is carried out in accordance with Art. 46 para. 2 lit. c and d DSGVO on the basis of corresponding contracts. We will be happy to provide you with further information on request.

3.5 Online forms

3.5.1 Contact form

If you send us enquiries using the contact form, your details from the enquiry form, including the contact data you provided there, will be stored for the purpose of processing the enquiry and in the event of follow-up questions. We will not pass on this data without your consent. 

The data entered in the contact form is therefore processed exclusively on the basis of your consent (Art. 6 para. 1 lit. a DSGVO). You can revoke this consent at any time. All you need to do is send us an informal e-mail. The legality of the data processing processes carried out up to the revocation remains unaffected by the revocation. 

The data entered by you in the contact form will remain with us until you request us to delete, your consent for storage revoked or the purpose for data storage no longer applies (e.g. after your request has been processed). We will also use your contact details for further contact and direct advertising in accordance with section 4.1. Mandatory statutory provisions – in particular retention periods – remain unaffected. 

3.6 Storage and deletion periods

We store your personal data only as long as it is necessary to fulfil their processing purpose or due to legal storage obligations. After that, the personal data will be deleted. 

Deviating from this, we delete your contact data only after 3 years in which you have not contacted us, subscribed to our newsletter, participated in one of our events or used one of our other offers. 

Of course, your rights to deletion, blocking, restriction of processing or the right to oblivion remain unaffected.

3.7 Rights of the persons concerned

3.7.1 Right to information (Art. 15 DSGVO)

Data subjects have the right to request information as to whether or not personal data relating to them are processed. If personal data is processed by our company, we are entitled to information about: 

  • the processing purposes; 
  • the categories of personal data (type of data) to be processed;
  • the recipients or categories of recipients to whom their data have been or will be disclosed, in particular where data have been or are to be disclosed to recipients in third countries outside the scope of the DSGVO;
  • the planned storage period, if possible; if it is not possible to specify the storage period, the criteria for determining the storage period (e.g. statutory retention periods, etc.) must be provided;
  • Your right to correction and deletion of data concerning you, including the right to limitation of processing and/or the possibility of objection (see also the following paragraphs); 
  • the existence of a right of appeal to a supervisory authority;
  • the origin of the data, if personal data were not collected directly from the data subject. 

You are also entitled to information as to whether your personal data is the subject of an automated decision within the meaning of Art 22 DSGVO and, if this is the case, which decision criteria form the basis of such an automated decision (logic) or which effects and scope the automated decision may have for you. 

If personal data are transferred to a third country outside the scope of the DSBER, you are entitled to information as to whether and if so on the basis of which guarantees an appropriate level of protection within the meaning of Articles 45, 46 DSBER is ensured at the data recipient in the third country. 

You have the right to request a copy of your personal data. As a matter of principle, we make data copies available in electronic form, unless you have indicated otherwise. The first copy is free of charge; an appropriate fee may be charged for further copies. It is made available subject to the rights and freedoms of other persons who may be affected by the transmission of the data copy.

3.7.2 Right to correction (Art. 16 DSGVO)

You have the right to request us to correct your data if it is inaccurate, inaccurate and/or incomplete; the right to correct includes the right to supplement it with additional explanations or notifications. Corrections and/or additions must be made immediately – i.e. without culpable delay.

3.7.3 Right to cancellation (Art. 17 DSGVO)

You have the right to request us to delete your personal data if 

  • the personal data are no longer necessary for the purposes for which they were collected and processed;
  • the data processing is based on a consent given by you and you have revoked the consent, unless there is another legal basis for the data processing;
  • you have filed an objection to data processing pursuant to Art. 21 DSGVO and there are no overriding legitimate reasons for further processing,
  • you have filed an objection to data processing for the purpose of direct advertising pursuant to Art. 21 para. 2 DSGVO; 
  • your personal data have been processed unlawfully; 
  • it is data of a child collected in relation to information society services pursuant to Art. 8 para. 1 DSGVO..

There is no right to delete personal data if 

  • the right to freedom of expression and information precludes the request for cancellation; 
  • the processing of personal data is necessary (i) to fulfil a legal obligation (e.g. statutory retention obligations), (ii) to perform public tasks and interests under EU law and/or the law of the member states (this also includes interests in the field of public health) or (iii) for archiving and/or research purposes; 
  • the personal data required to assert, exercise or defend legal claims. 

The deletion must take place immediately – i.e. without culpable delay. If personal data has been made public by us (e.g. on the Internet), we must, to the extent technically possible and reasonable, ensure that third party data processors are also informed of the request for deletion, including the deletion of links, copies and/or replications. 

3.7.4 Right to limitation of processing (Art. 18 DSGVO)

You have the right to have the processing of your personal data restricted in the following cases: 

  • If you have disputed the accuracy of your personal data, you can demand that we do not use your data for other purposes for the duration of the accuracy check and limit them in this respect. 
  • In the event of unlawful data processing, you may request the restriction of data use in accordance with Art. 18 DSGVO instead of data deletion in accordance with Art. 17 (1) (d) DSGVO; 
  • If you need your personal data to assert, exercise or defend legal claims, but otherwise your personal data are no longer required, you can request us to restrict processing to the aforementioned legal prosecution purposes; 
  • If you have filed an objection to data processing pursuant to Art. 21 para. 1 DSGVO and it is not yet clear whether our interests in processing outweigh your interests, you may demand that your data not be used for other purposes for the duration of the examination and be restricted in this respect.

Personal data whose processing has been restricted at your request may – subject to storage – only be processed (i) with your consent, (ii) to assert, exercise or defend legal claims, (iii) to protect the rights of other natural or legal persons, or (iv) for reasons of an important public interest. If a processing restriction is lifted, you will be informed of this in advance. 

3.7.5 Right to data transferability (Art. 20 DSGVO)

Subject to the following provisions, you have the right to demand the surrender of the data concerning you in a common electronic, machine-readable data format. The right to data transmission includes the right to transfer the data to another person responsible; on request, we will therefore – as far as technically possible – transfer data directly to a person responsible named or to be named by you. The right to transfer data exists only for data provided by you and presupposes that the processing is based on a consent or for the execution of a contract and is carried out using automated procedures. The right to data transmission according to Art. 20 DSGVO does not affect the right to data deletion according to Art. 17 DSGVO. Data transmission is subject to the rights and freedoms of other persons whose rights may be affected by the data transmission.

3.7.6 Right of objection (Art. 21 DSGVO)

In the case of processing personal data to perform tasks in the public interest (Art. 6 para. 1 lit e DSGVO) or to safeguard legitimate interests (Art. 6 para. 1 lit f DSGVO), you can object to the processing of your personal data at any time with future effect. In the event of an objection, we shall refrain from any further processing of your data for the aforementioned purposes, unless, 

  • there are compelling, legitimate grounds for processing which outweigh your interests, rights and freedoms, or 
  • the processing is necessary to assert, exercise or defend legal claims. 

You can object to the use of your data for the purpose of direct advertising at any time with effect for the future; this also applies to profiling, insofar as it is connected with direct advertising. In the event of objection, we must refrain from any further processing of your data for the purpose of direct marketing. 

3.7.7 Prohibition of automated decisions / profiling (Art. 22 DSGVO)[where relevant]

Decisions that have legal consequences for you or significantly affect you must not be based solely on automated processing of personal data, including profiling. This does not apply if the automated decision 

  • is necessary for the conclusion or performance of a contract with you, 
  • is admissible under Union or Member State law, provided that such law contains appropriate measures to safeguard your rights, freedoms and legitimate interests, or 
  • with your express consent. 

Decisions based exclusively on automated processing of special categories of personal data are inadmissible in principle, unless Art. 22 para. 4 in conjunction with Art. 9 para. 2 lit a or lit. g DSGVO applies and appropriate measures have been taken to protect the rights and freedoms as well as the legitimate interests of your person. 

3.7.8 Legal protection / right of appeal to a supervisory authority

In the event of complaints, you can contact the competent supervisory authority of the Union or the Member States at any time. The supervisory authority referred to in Section II is responsible for our company. 

4. Detailed information on individual processing operations

In the following we have listed in detail the various purposes for which we collect and process personal data, which data we process and how we handle the personal data and to whom we forward them if necessary. 

4.1 Processing for the purpose of communication with interested parties and customers, advertising to interested parties and customers, marketing and public relations work 

4.1.1 Purpose and legal basis

For the purpose of direct advertising for our products and services, we process your personal data on the basis of our legitimate interest pursuant to Art 6 Para. 1 lit. f DSGVO. 

4.1.2 Scope of data processing

In order to contact you and to inform you according to your interests, we process the following data: 

  • Names,
  • Address,
  • Email-sdress,
  • Telephone number,
  • Areas of interest

4.1.3 Origin of data

We have received this information from you personally or from public sources. If you entered the data yourself using one of our online contact forms, we refer you to Section 3.5.1 

4.1.4 Storage and deletion periods

According to the basic rules of 3.6 

4.2 Processing for the fulfilment of contracts with customers and suppliers and for the enforcement of legal claims

4.2.1 Purpose and legal basis

We process your personal data, as far as 

  • this is necessary for the fulfilment of a contract with you, 
  • it is necessary for the implementation of pre-contractual measures, 
  • we are obliged to do so by law, 
  • it is necessary to protect our legitimate interests within the framework of the execution of the contract. 
  • you have given your consent for processing 

We pursue justified interests in particular in connection with the enforcement of legal claims, e.g. for payment of agreed fees for the provision of services. 

4.2.2 Scope of data processing

We may process the following categories of data: 

  • Name, address, 
  • Contract data 
  • Performance data for the service provided (e.g. location, date, expenses) 
  • costs for the provision of services 
  • Bank details 
  • Dunning and payment data 
  • Collection data 
  • Creditworthiness data 

4.2.3 Origin of data

We have received the data from you, our partners, public authorities. 

4.2.4 Transfer of data, processing in third countries

In principle, we process your data only within the framework of the principles listed under 3.2 and 3.4. To safeguard our legitimate interests, we pass on personal data to our debt collection service provider – Akzepta Inkasso GmbH, München. In addition, we obtain credit information from the following service providers:
Creditreform International e.V.
Creditsafe Deutschland GmbH
Dun & Bradstreet (D&B)

4.2.5 Storage and deletion periods

According to the principles of 3.6 

4.3 Processing of applicant data

4.3.1 Purpose and legal basis

If you would like to work with us, we look forward to receiving your application. We process the personal data that you have made available to us as part of your application as well as the data that arises in the course of the application process. These are pre-contractual measures. 

We assume that by sending us your data you have given us your consent for processing as part of the application process. If we accept your application, we will continue to store your data within the scope of your cooperation in accordance with Art 6 Para. 1 lit. b DSGVO in conjunction with §26 BDSG 2018. 

If we reject your application, we will store the records of the application process for a maximum of a further 6 months to safeguard our legitimate interests. 

4.3.2 Scope of data processing

We process the following data in the application process: 

  • Name, address 
  • marital status 
  • denomination 
  • Qualifications 
  • Professional career 
  • Economic information (e.g. salary request) 
  • Individual information that you have provided to us in the application process. 

4.3.3 Storage and deletion periods

We will delete this data 6 months after rejection of your application with the exception of your contact data, unless longer storage periods are provided for by law. We will store your contact data for the purposes of 4.1 beyond this period. 

4.4 Processing to optimize and secure our online offer

4.4.1 Purpose and legal basis

We offer numerous online services for our customers and interested parties. These include our website, an online shop and an online blog. In order to ensure and further optimise the security, functionality and user-friendliness of our online offers, we collect personal data as soon as you use one of our online offers including mobile apps. 

4.4.2 Scope of data processing

We regularly collect the following data: 

  • Your IP address, 
  • the date and time of the request, 
  • Access status/http status code, 
  • browser software used as well as its language and version, 
  • the operating system used, 
  • URLs you come from and go to next,  
  • the amount of data transferred and 
  • the information whether the request was successful. 

4.4.3 Disclosure of data

We also use external service providers to provide our online services, including mobile apps. These may also come into contact with your personal data. We carefully select these service providers and ensure that your data is protected by appropriate guarantees and technical-organizational measures. For more information, see 3.2 

4.4.4 Storage and deletion periods

These data will be deleted within 7 days unless they are exceptionally required for a longer period to protect legitimate interests. This may be necessary, for example, to correct errors or to prosecute criminal acts. 

4.4.5 Notes on the use of cookies on our Internet pages

Each time you visit our website, so-called “cookies” are also stored on your terminal device. Cookies are information files. As soon as you visit our website, your Internet browser automatically saves it on your computer or data carrier. 

Cookies are used to make your visit to our site easier and more pleasant and to develop our site further. If you have already visited our site and made settings there, for example, a cookie with appropriate information is stored. When you visit our website again, our system recognizes this information so that you do not have to re-enter it each time you visit it. In addition, the information obtained serves exclusively to compile statistics on the use of our website in order to adapt them to your wishes and to make the use of our online offer as comfortable as possible. No personal data, such as your name or address, will be generated or passed on. Therefore, you cannot be personally identified on the basis of this information. Cookies also cannot run programs or damage your computer’s hard drive. Most of the cookies we use are so-called “session cookies”. They are automatically deleted at the end of your visit. Some so-called long-term cookies remain on your computer and will be recognized on your next visit to our site. This allows us to provide you with better access to our site. In particular, this website uses the following types of cookies: 

  • Transient cookies (temporary use) – 
  • Persistent cookies (temporary use) 
  • Third-party cookies (from third parties). 

Transient cookies are automatically deleted when you close your browser. This includes in particular the session cookies. These store a so-called session ID, with which different requests of your browser can be assigned to the common session. This allows your computer to be recognized when you return to the website. Session cookies are deleted when you log out or close your browser. 

Persistent cookies are automatically deleted after a specified period, which may vary depending on the cookie. You can delete cookies at any time in the security settings of your browser. 

Third-party cookies originate from third-party providers, e.g. in the context of the use of the web analysis service Google Analytics. The information stored by the use of cookies is stored separately from any other data we may have provided. In particular, the data in the cookies are not linked to your other data.

4.5 Data collection on our online blog schreurich-blog.de

In principle, we only collect personal data on our online blog in accordance with Section 4.5. 

If you use the comment function, we will also collect your name, your e-mail address and your comment. We collect this data on the basis of your consent for processing. You can revoke this consent at any time. 

We do not pass the e-mail address on to third parties but only use it to contact you regarding your comment. We need your name in order to be able to contact you with an answer. You are free to use a pseudonym. 

4.6 Use of web analytics services, social networking plug-ins and third-party services

4.6.1 Facebook-Plugins (Like & Share-Button)

Our pages include plugins from the social network Facebook, provider Facebook Inc, 1 Hacker Way, Menlo Park, California 94025, USA. You can recognize the Facebook plugins by the Facebook logo or the “Like” button on our page. An overview of the Facebook plugins can be found here: developers.facebook.com/docs/plugins/. 

When you visit our pages, the plugin establishes a direct connection between your browser and the Facebook server. Facebook receives the information that you have visited our site with your IP address. If you click the Facebook “Like” button while logged into your Facebook account, you can link the contents of our pages on your Facebook profile. This allows Facebook to associate the visit to our pages with your user account. We would like to point out that, as the provider of the pages, we have no knowledge of the content of the data transmitted or of their use by Facebook. For more information, please see Facebook’s Privacy Policy at: de-de.facebook.com/policy.php. 

If you do not want Facebook to associate your visit to our pages with your Facebook account, please log out of your Facebook account. 

4.6.2 Pinterest Plugin

On our site we use social plugins of the social network Pinterest, which is operated by Pinterest Inc. 808 Brannan Street, San Francisco, CA 94103-490, USA (“Pinterest”). 

When you access a page that contains such a plugin, your browser establishes a direct connection to Pinterest’s servers. The plugin transfers protocol data to Pinterest’s server in the USA. This log information may include your IP address, the address of the sites you visit, which may also include pinterest features, the type and settings of your browser, the date and time of your request, your use of Pinterest, and cookies. 

For more information about Pinterest’s purpose, scope and further processing and use of the data and your rights and means of protecting your privacy, please see Pinterest’s privacy policy: about.pinterest.com/de/privacy-policy. 

4.6.3 Matomo

4.6.3.1 General information

This website uses the open source web analytics service Matomo.

With the help of Matomo, we are able to collect and analyse data about the use of our website by website visitors. This enables us to find out, among other things, when which page views were made and from which region they came. We also collect various log files (e.g. IP address, referrer, browsers and operating systems used) and can measure whether our website visitors perform certain actions (e.g. clicks, purchases, etc.).

The use of this analysis tool is based on Art. 6 para. 1 lit. f DSGVO. The website operator has a legitimate interest in analysing user behaviour in order to optimise both its website and its advertising. If a corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a DSGVO and § 25 para. 1 TTDSG (Telecommunications Telemedia Data Protection Act), insofar as the consent includes the storage of cookies or access to information in the user’s terminal device (e.g. device fingerprinting) as defined by the TTDSG. The consent can be revoked at any time.

4.6.3.2 IP anonymization

We use IP anonymisation for the analysis with Matomo. Your IP address is shortened before analysis so that it can no longer be clearly assigned to you.

4.6.3.3 Analysis without cookies

We have configured Matomo so that it does not store cookies in your browser.

4.6.3.4 Hosting in the Matomo cloud

We host Matomo with the following provider:

InnoCraft Ltd, 7 Waterloo Quay PO625, 6140 Wellington, New Zealand.

The data is processed on servers in Germany. There is no third country transfer of the data.

4.6.3.5 Order processing

We have concluded an order processing agreement for the use of the above-mentioned service with the provider.

5. Use of the link to the Scheurich online shop on our website

If you click on the link to the Scheurich Shop when visiting our website, you leave our online offer and switch to the online offer of our partner olerum.de. We are not responsible for the data processing on its pages. Please therefore observe its data protection regulations and contact the contact addresses indicated there in all data protection matters. 

We do not forward any personal data to the shop provider.

Scheurich prevents the collection of your data on future visits to this website: Disable Google Analytics. 

More information on how Google Analytics handles user data can be found in Google’s privacy policy: support.google.com/analytics/answer/6004245.