Privacy Policy

Data Controller

The controller within the meaning of data protection laws, in particular the EU General Data Protection Regulation (GDPR), is:

Blaueishütte Raphael Hang

Data Protection Officer

We have appointed the following Data Protection Officer:

Raphael Hang

Your Data Subject Rights

Under the provided contact details, you can exercise the following rights at any time in accordance with the EU General Data Protection Regulation (GDPR):

• Information about your data stored by us and its processing (Art. 15 GDPR),
• Rectification of incorrect personal data (Art. 16 GDPR),
• Erasure of your data stored by us (Art. 17 GDPR),
• Restriction of data processing if we are not yet permitted to delete your data due to legal obligations (Art. 18 GDPR),
• Objection to the processing of your data by us (Art. 21 GDPR), and
• Data portability, provided you have consented to the data processing or have concluded a contract with us (Art. 20 GDPR).

If you have given us consent, you can revoke it at any time with effect for the future.

You can contact a supervisory authority with a complaint at any time, e.g., the competent supervisory authority of the federal state of your residence or the authority responsible for us as the controller.

A list of supervisory authorities (for the non-public sector) with addresses can be found at: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.

Processing Activities

Collection of General Information When Visiting Our Website

Nature and Purpose of Processing

When you access our website, i.e., if you do not register or otherwise submit information, information of a general nature is automatically collected. This information (server log files) includes, for example, the type of web browser, the operating system used, the domain name of your Internet Service Provider, your IP address, and similar details.

In particular, it is processed for the following purposes:

• Ensuring a smooth connection setup of the website
• Ensuring a smooth use of the website
• Ensuring and evaluating system security and stability, in particular for detecting abuse
• For technically error-free display and optimization of the website

We do not use your data to draw conclusions about your person. However, we reserve the right to check the server log files retroactively if there are concrete indications of unlawful use.

Legal Basis and Legitimate Interest

Processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR based on our legitimate interest in improving the stability and functionality of our website as well as ensuring system security and abuse detection.

Recipients

Recipients of the data may be technical service providers who act as data processors for the operation and maintenance of our website.

Storage Period

Data stored in server log files in a form that permits identification of data subjects is retained for a maximum of 7 days, unless a security-relevant event occurs (e.g., a DDoS attack).

In the event of such an occurrence, server log files are stored until the security-relevant event is resolved and fully clarified.

Provision Mandatory or Required

The provision of the aforementioned personal data is neither legally nor contractually required. However, without the IP address, the service and functionality of our website cannot be guaranteed. Furthermore, individual services and functionalities may be unavailable or restricted.

Objection

Please read the information regarding your right to object according to Art. 21 GDPR below.

Contacting Us

Nature and Purpose of Processing

A contact form is available on our website, which can be used for electronic contact. If a user takes advantage of this option, the data entered in the input mask will be transmitted to us and stored.

Contact can also be made via the provided email addresses. In this case, the personal data of the user transmitted with the email will be stored. This includes the date and time the email was sent, the email address, IP addresses, and information on the servers involved in the email communication.

You can contact us via the phone numbers provided. In doing so, we collect log data containing your telephone number and the duration of the call.

Regardless of the chosen communication method, we collect the content of your inquiry. Your data will be stored for the purpose of individual communication with you.

Legal Basis

The processing of data is carried out on the basis of a legitimate interest (Art. 6 para. 1 lit. f GDPR).

Our legitimate interest in processing your data is to enable uncomplicated contact.

If you contact us to request a quote, processing of the data is carried out for the performance of pre-contractual measures (Art. 6 para. 1 lit. b GDPR).

Recipients

Recipients of the data may be technical service providers who act as data processors for the operation and maintenance of our website.

Storage Period

Data will be deleted no later than 6 months after processing the contact request.

If a contractual relationship arises, we are subject to statutory retention periods. These are generally 6 or 10 years due to proper accounting and tax law requirements.

Provision Mandatory or Required

The provision of your personal data is voluntary. However, we can only process your request if you provide us with the necessary data and the reason for the inquiry.

Objection

Please read the information regarding your right to object according to Art. 21 GDPR below.

Provision of Paid Services

Nature and Purpose of Processing

We process the data provided by you as part of an order for the execution and fulfillment of your order. This also includes returns, exchanges, and complaints concerning items.

Your personal data will only be used to the extent necessary to process the order and deliver the requested products and services.

Legal Basis

The processing of data necessary for the conclusion of the contract is based on Art. 6 para. 1 lit. b GDPR.

Recipients

Recipients of the data may be technical service providers who act as data processors for the operation and maintenance of our website.

For contract fulfillment, we pass on your name and address to the shipping company commissioned with the delivery, insofar as this is necessary for the delivery of ordered goods.

Depending on which payment service provider you select during the ordering process, we forward the payment data collected for this purpose to the credit institution commissioned with payment handling and, where applicable, to payment service providers commissioned by us.

Storage Period

We store this data in our systems until the statutory retention periods have expired. These are generally 6 or 10 years due to proper accounting and tax law requirements.

Provision Mandatory or Required

The provision of your personal data is contractually required. Without providing your personal data, we cannot fulfill the order.

Use of the Tracking Tool Google Analytics

Nature and Purpose of Processing

Insofar as you have given your consent, Google Analytics 4 is used on this website, a web analytics service provided by Google Ireland Limited (Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland).

Google Analytics uses cookies that enable an analysis of your use of the website. The information collected is usually transferred to a Google server in the USA and stored there.

In Google Analytics, automatic IP address anonymization is enabled by default. Due to the activation of IP anonymization on this website, your IP address will be truncated by Google within member states of the EU or EEA. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. According to information available from Google, the IP address transmitted by your browser within the scope of Google Analytics will not be merged with other Google data.

During your visit to our website, your user behavior is recorded in the form of so-called events, such as:

• Page views
• Start of a session
• Dwell time
• User engagement
• First visit to a website
• Scrolls (when a visitor scrolls 90% down to the end of the page)
• Clicks on external links
• Ads viewed or clicked
• Internal searches
• Interaction with video content
• Downloads
• Language settings

In addition, the following information is recorded:

• Your approximate location (region)
• Your IP address (in truncated form)
• Technical information such as browser, internet provider, device, and screen resolution
• Source of origin (referrer URL) of your visit (i.e., via which website or advertising medium you came to us)

For more detailed information on terms of use and data protection, please visit https://www.google.com/analytics/terms/de.html and https://policies.google.com/?hl=en.

On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity, and to provide other services related to website usage and internet usage to the website operator.

Legal Basis

The legal basis for this data processing is your consent pursuant to Art. 6 para. 1 sentence 1 lit. a GDPR.

Recipients

We use technical service providers for the operation and maintenance of our website and for the evaluation of cookies, who act as our processors.

Further recipients of the data are Google Ireland Limited (Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland). Google Ireland Limited uses Google LLC in the USA (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) as a service provider.

Storage Period

Data sent by us and linked to cookies will be automatically deleted after: 14 months.

The maximum lifespan of Google Analytics cookies is two years. Deletion of data whose retention period has been reached takes place automatically once a month.

Third-Country Transfer

Since Google's headquarters are located in the USA, processing of data on Google servers in the USA cannot be excluded. This entails the risk that your data may be processed by US authorities for control and monitoring purposes without you having legal remedies available. To ensure an adequate level of data protection, we have concluded EU Standard Contractual Clauses with Google, which can be viewed here: https://business.safety.google/adscontrollerterms/sccs/eu-c2c/

Revocation of Consent

You can revoke your consent at any time in the cookie settings with effect for the future.

Furthermore, you can prevent tracking by Google Analytics on our website by clicking this link. An opt-out cookie will be installed on your device. This prevents future collection by Google Analytics for this website and this browser as long as the cookie remains installed in your browser.

You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plugin available under the following link: Browser Add-On to Disable Google Analytics.

 

Cookies

A cookie is a small data set created when visiting a website and cached on the website visitor's system. If the server of this website is called up again by the user, the user's browser sends the previously received cookie back to the server. The server can evaluate the information received through this procedure. In particular, cookies can facilitate navigation on a website.

Detailed information about cookies and which cookies are used on this website for what purpose can be accessed at any time in the cookie settings.

Deleting Cookies

You can delete individual cookies or all stored cookies. In addition, you can obtain information and instructions on how these cookies can be deleted or their storage blocked in advance. Depending on your browser provider, you can find the necessary information at the following links:

• Mozilla Firefox: https://support.mozilla.org/en-US/kb/clear-cookies-and-site-data-firefox
• Microsoft Edge: https://support.microsoft.com/en-us/microsoft-edge/delete-cookies-in-microsoft-edge-63947406-40ac-c3b8-57b9-2a946a29ae09
• Google Chrome: https://support.google.com/accounts/answer/61416?hl=de
• Opera: https://help.opera.com/en/latest/web-preferences/#cookies
• Safari: https://support.apple.com/guide/safari/manage-cookies-sfri11471/mac

Additionally, you can block the loading of scripts by default. NoScript allows the execution of JavaScript, Java, and other plugins only on trusted domains of your choice.

Information and instructions on how to edit this function can be obtained via your browser provider (e.g., for Mozilla Firefox: https://addons.mozilla.org/en-US/firefox/addon/noscript/).

Technically Necessary Cookies

Nature and Purpose of Processing

We use cookies to make our website more user-friendly. Some elements of our website require that the calling browser can be identified even after a page change.

The purpose of using technically necessary cookies is to simplify the use of websites for users. Some functions of our website cannot be offered without the use of cookies. For these, it is necessary that the browser is recognized even after a page change.

We require cookies for the following applications:

An overview of the cookies used can be found in our cookie consent tool.

Legal Basis and Legitimate Interest

The data processing is carried out solely on the basis of our legitimate interest in a user-friendly design of our website and in documenting consent pursuant to Art. 6 para. 1 lit. f GDPR in conjunction with a balancing of interests under § 25 para. 2 TDDDG.

Recipients

Recipients of the data may be technical service providers who act as data processors for the operation and maintenance of our website.

Storage Period

Please refer to the cookie consent tool for the respective storage period of the cookies.

Provision Mandatory or Required

The provision of the aforementioned personal data is neither legally nor contractually required. However, without this data, the service and functionality of our website cannot be guaranteed. Furthermore, individual services and functions may be unavailable or restricted.

Objection

Please read the information regarding your right to object according to Art. 21 GDPR below.

Third-Country Transfer

The data collected may be transferred to the following third countries:

USA

The following data protection guarantees are in place:

Provision Mandatory or Required

Providing your data is voluntary, solely based on your consent. However, we would like to point out that in this case, you may not be able to use all features of this website to their full extent.

Revocation of Consent

You can revoke your consent in the cookie consent tool for the future.

Profiling

With the help of technically non-essential cookies, website visitor behavior can be evaluated and interests analyzed. For this purpose, we create a pseudonymous user profile.

 

Information About Your Right to Object Pursuant to Art. 21 GDPR

Individual Right to Object

You have the right, for reasons arising from your particular situation, to object at any time to the processing of personal data concerning you which is carried out on the basis of Art. 6 para. 1 lit. f GDPR (data processing based on a balancing of interests); this also applies to profiling based on this provision within the meaning of Art. 4 No. 4 GDPR.

If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for processing that override your interests, rights, and freedoms, or the processing serves the establishment, exercise, or defense of legal claims.

Recipient of an Objection

Blaueishütte Raphael Hang

 

Changes to Our Privacy Policy

We reserve the right to adapt this privacy policy so that it always complies with current legal requirements or to implement changes to our services in the privacy policy, e.g., when introducing new services. The new privacy policy will then apply to your next visit.

 

Questions Regarding Data Protection

If you have any questions regarding data protection, please send us an email to the responsible person mentioned above.

 

Copyright Notice

This privacy policy was created with the help of activeMind AG – experts for external Data Protection Officers (Version #2024-10-25).