Privacy Policy Information

Status: September 2018

Marquardt sees it as part of its corporate responsibility to protect the information and data entrusted to the company. The protection of your privacy is important to us.
We process your personal data in compliance with the data protection laws of the Federal Republic of Germany and the European General Data Protection Regulation (GDPR).
In the following we would like to inform you in detail about the handling of your data.

1. Who is responsible for the processing of my data?

Controller for the processing of your personal data is

Marquardt GmbH
Schloss-Straße 16
78604 Rietheim-Weilheim

Phone: +49 74 24 / 99-0
Fax: +49 74 24 / 99-23 99 
E-mail: marquardt@marquardt.de

and with Marquardt GmbH i.S.d. § 15 AktG (Stock corporation Act) associated companies.

For all questions regarding the processing of your personal data you can contact our data protection officer at the above postal address as well as at the e-mail address dataprivacy@marquardt.com at any time.

2. When do we collect information about you?

Calling up our website / access data
Every time you use our website, we collect the access data that your browser automatically transmits to enable you to visit the website. The access data includes in particular:

• IP address of the requesting device 
• date and time of the request 
• the address of the website accessed and of the requesting website 
• information about the browser and operating system used
• Online identifiers (e.g. device identifiers)

The data processing of this access data is necessary to enable a visit to the website and to ensure the long-term functionality and security of our systems. The access data is also temporarily stored in internal log files for the purposes described above. The legal basis is Art. 6 para. 1 sentence 1 lit. b GDPR.
The information stored in the log files does not allow any direct conclusion to your person.

Contacting
You have the possibility to contact us via the contact form and via e-mail. In this context, we process data exclusively for the purpose of communication and to process your request. The data collected by us when using the contact form will be encrypted during transmission and automatically deleted after complete processing of your request, unless we still need your request to fulfil contractual or legal obligations (see section "Storage period"). The legal basis is Art. 6 para. 1 lit. b GDPR.

We would like to point out that data transmission over the Internet (e.g. communication by e-mail) can have security gaps. Despite our protective measures, we cannot completely rule out unlawful processing by third parties.

Registration
You have the possibility to register for our login area in order to use the full range of functions of our website. We have marked the data you are required to provide as mandatory fields.
This is the following data:

• Company
• Salutation
• First name, Last name
• Business contact address
• Business e-mail address

Without these data a registration is not possible. The legal basis for processing is Art. 6 para. 1 lit. b GDPR.

Purchase orders
In the case of an order process, we collect mandatory information necessary for the execution of the contract:

• First and last name
• E-mail address
• Password
• Billing and shipping address

Optional information such as telephone and fax numbers are possible, so that we can also contact you in these ways in case of queries. The legal basis of the processing is Art. 6 para. 1 sentence 1 lit. b GDPR.

Newsletter
You have the possibility to order our newsletter, in which we inform you regularly about our products and promotions.
To subscribe to our newsletter we use the double opt-in procedure, i.e. we will only send you newsletters by e-mail if you confirm in our notification e-mail by clicking on a link that you are the owner of the e-mail address provided.

If you confirm your e-mail address, we will store your e-mail address, the time of registration and the IP address used for registration until you unsubscribe from the newsletter. The sole purpose of the storage is to send you the newsletters and to be able to prove your registration. You can unsubscribe from the newsletter at any time. A corresponding unsubscribe link can be found in every newsletter. You can also unsubscribe at https://www.marquardt-shop.com/de/anmelden-registrieren/newsletter-abmeldung.html Alternatively, you can also send your unsubscription request at any time to the above-mentioned contact data.

The legal basis of the processing is your consent pursuant to Art. 6 para. 1 lit. a GDPR.

3. What do we use your data for?

For the fulfilment of contractual obligations (Art. 6, para. 1, letter b GDPR)
We use your data with the aim of offering you the best possible service experience. We handle your data responsibly. We use your data in detail for the processing of your (service) requests and the processing of payments for purchases and other services.

In the context of further balancing of interests (Article 6, para. 1, letter f GDPR)
We may also use your data on the basis of a balance of interests to protect the legitimate, usually economic interests of us or of third parties, whereby we process pseudonymised or anonymised data wherever possible. This is done for the following purposes:

• Control, optimization and further development of services 
• Assertion of legal claims and defence in legal disputes
• Detection, prevention and investigation of criminal offences
• Ensuring the security and operability of our IT systems

On the basis of your consent (Art. 6, para. 1, letter a GDPR)
If you have given us your consent to process your data, the respective consent is the legal basis for the processing covered by the consent. This includes the following:

• Establishment of contact
• Shipment of products, information
• Newsletter Subscription

For the fulfilment of legal obligations (Art. 6, para. 1, letter c GDPR)
We are subject to various legal obligations, e.g. statutory retention obligations with regard to business documents for the administration of our business or for the enforcement of our General Terms and Conditions, etc.

4. Transfer of your data

The data collected by us will only be passed on if:

• you have given your express consent pursuant to Art. 6 para. 1 sentence 1 lit. a GDPR,
• the disclosure pursuant to Art. 6 para. 1 sentence 1 f GDPR is necessary to assert, exercise or defend legal claims and there is no reason to assume that you have an overriding interest worthy of protection in not disclosing your data,
• we are legally obliged pursuant to Art. 6 para. 1 sentence 1 lit. c GDPR to pass on or
• this is legally permissible and is required under Art. 6 para. 1 sentence 1 lit. b GDPR for the processing of contractual relationships with you or for the implementation of pre-contractual measures that are taken at your request.

Part of the data processing can be carried out by service providers. If we pass data on to our service providers, they may use the data exclusively for the fulfilment of their tasks. The service providers have been carefully selected and commissioned by us. They are contractually bound by our instructions, have appropriate technical and organisational measures in place to protect the rights of the persons concerned and are regularly monitored by us.
In addition, it may be disclosed in connection with official inquiries, court orders and legal proceedings if it is necessary for legal prosecution or enforcement.

If service providers and Marquardt Group companies process your data outside the European Union, this may result in your data being transferred to a country that does not offer the same data protection standards as the European Union. In this case, we ensure that the respective recipients of your data contractually or otherwise guarantee an equivalent level of data protection to that of the European Union.

5. What do we use cookies for?

We use cookies to make the navigation and use of our websites as user-friendly as possible. Cookies are smaller files with text information that are stored on your hard disk during the retrieval of the offer. Cookies serve the temporary storage of information - for example for statistical evaluations or for the purpose of connection control during a visit to a website. Cookies are also used to store the preferences of visitors. This enables us to tailor the content of our website to your specific needs and thus improve our services for you. We cannot make any reference to users with the cookies.

You can deactivate the option to save these cookies at any time in the system settings of your browser and delete existing cookies. Every user can also view the offer without cookies. If you do not accept cookies, however, this can lead to a functional limitation of our offer.

Some of the cookies we use are automatically deleted from your hard disk at the end of the browser session (session cookies). In addition, we also use cookies that remain on your hard drive for a certain period of time after the browser session. These persistent cookies are stored on your hard disk and deleted by the browser after the specified time. Cookies may also be from third parties.

6. When do we delete your data?

In principle, we only store personal data for as long as necessary to fulfil contractual or statutory obligations for which we have collected the data. Afterwards we delete the data immediately, unless we need the data until the end of the statutory limitation period for purposes of proof for civil law claims or due to statutory retention obligations.

For evidence purposes, we must keep contract data for another three years from the end of the year in which the business relationship with you ends. Any claims become statute-barred after the statutory period of limitation at the earliest at this point in time.

Even after that, we still have to store some of your data for accounting reasons. We are obliged to do so on the basis of statutory documentation obligations that may result from, among other things, the German Commercial Code (HGB) or the Tax Code (AO). The periods specified there for keeping documents are two to ten years.

7. What data protection rights do you have?

You have the right to request information about the processing of your personal data by us at any time. We will explain the data processing and provide you with an overview of the data stored about you as part of the provision of information.

If data stored with us is incorrect or no longer up-to-date, you have the right to have this data corrected.

You may also request that your data be deleted. Should the deletion not be possible due to other legal regulations, the data will be blocked so that they are only available for this legal purpose.

You may also have the processing of your data restricted, e.g. if you believe that the data we have stored is incorrect.

You also have the right to data transferability.

To exercise your rights as described here, you may contact the above contact details at any time.

In addition, you have the right to object to data processing based on Art. 6 para. 1 lit. e or f GDPR.

Furthermore, you have the right to complain to the data protection supervisory authority responsible for us.

8. Right of revocation

In accordance with Article 7 (2) GDPR, you have the right to revoke your consent to us at any time. As a result, we will not continue processing data based on this consent in the future. The revocation of consent does not affect the legality of the processing carried out on the basis of the consent until revocation.
Insofar as we process your data on the basis of legitimate interests pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR, you have the right to object to the processing of your data in accordance with Art. 21 GDPR, insofar as there are reasons for this arising from your particular situation or the objection to direct advertising is directed. In the latter case, you have a general right of objection, which we will also implement without giving reasons.

If you would like to make use of your right of revocation or objection, a message to the above-mentioned contact data is sufficient.

9. How do we protect your data?

We maintain current technical measures to guarantee data security, in particular to protect your personal data from the dangers of data transmission and before third parties become aware of them. These are adapted to the current state of the art in each case. To secure the personal information you provide on our website, we use Transport Layer Security (TLS), which encrypts the information you enter.

10. May the privacy policy change?

In the course of the further development of our website and the implementation of new legal requirements, new technologies or in order to improve our service for you, changes to this data protection declaration may become necessary.