Datenschutzerklärung

Privacy Policy

1) Introduction and contact details of the data controller

1.1 We are pleased that you are visiting our website and thank you for your interest.

Below, we explain how we handle your personal data when you use our website. Personal data means any information that can be used to identify you personally.

1.2 The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Christoph Olf, Elektro Olf, Goethestr. 15, 64380 Roßdorf, Germany, Tel.: +49615483990, Email: info@elektro-olf.de.

The controller responsible for processing personal data is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data.

2) Data collection when you visit our website

2.1 When you use our website for information purposes only—that is, if you do not register or otherwise provide us with information—we collect only the data that your browser transmits to the page server (so-called “server log files”). When you visit our website, we collect the following data, which is technically necessary for us to display the website to you:

Our website you visited
Date and time of access
Amount of data sent in bytes
Source/referrer from which you arrived at the page
Browser used
Operating system used
IP address used (if applicable: in anonymized form)

Processing is carried out in accordance with Art. 6(1)(f) GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data is not disclosed or otherwise used. However, we reserve the right to review server log files retrospectively if there are concrete indications of unlawful use.

2.2 For security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or enquiries to the data controller), this website uses SSL or TLS encryption. You can recognise an encrypted connection by “https://” and the padlock symbol in your browser’s address bar.

3) Hosting & Content Delivery Network

IONOS

We use a content delivery network from the following provider: 1&1 IONOS Internet SE, Elgendorfer Str. 57, 56410 Montabaur, Germany

This service enables us to deliver large media files such as graphics, page content or scripts more quickly via a network of regionally distributed servers. Processing is carried out to protect our legitimate interest in improving the stability and functionality of our website pursuant to Art. 6(1)(f) GDPR.

We have entered into a data processing agreement with the provider to ensure the protection of our website visitors' data and prohibit its unauthorised disclosure to third parties.

4) Cookies

To make our website more attractive and enable the use of certain features, we use cookies—small text files stored on your device. Some cookies are automatically deleted when you close your browser (so-called “session cookies”), while others remain on your device for longer and allow page settings to be saved (so-called “persistent cookies”). In the latter case, you can find the storage period in your web browser’s cookie settings overview.

If any personal data is processed through individual cookies we use, processing is carried out in accordance with Art. 6(1)(b) GDPR to perform the contract, in accordance with Art. 6(1)(a) GDPR if consent has been given, or in accordance with Art. 6(1)(f) GDPR to protect our legitimate interests in ensuring the best possible functionality of the website and a customer-friendly and effective browsing experience.

You can configure your browser to notify you when cookies are set, so you can decide whether to accept them individually, or block cookies in certain cases or altogether.

Please note that if you do not accept cookies, some features of our website may not work.

5) Contact

5.1 WhatsApp Business

Visitors to our website can contact us via the WhatsApp messaging service, operated by WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. For this purpose, we use the so-called “Business version” of WhatsApp.

If you contact us via WhatsApp in connection with a specific transaction (such as an order you have placed), we store and use the mobile number you use on WhatsApp and, if provided, your first and last name in accordance with Art. 6(1)(b) GDPR to process and respond to your enquiry. On the same legal basis, we may ask you to provide additional information via WhatsApp (order number, customer number, address or email address) so we can associate your enquiry with a specific transaction.

If you use our WhatsApp contact for general inquiries (such as questions about our range of services, availability or website), we store and use the mobile phone number you use on WhatsApp and, if provided, your first and last name pursuant to Art. 6(1)(f) GDPR, based on our legitimate interest in providing the requested information efficiently and promptly.

Your data will only ever be used to respond to your enquiry via WhatsApp.

Your data will not be shared with third parties.

Please note that WhatsApp Business has access to the address book on the mobile device we use for this purpose and automatically transfers phone numbers stored in the address book to a server operated by its parent company, Meta Platforms Inc., in the USA. To operate our WhatsApp Business account, we use a mobile device whose address book contains only the WhatsApp contact details of users who,

who have also contacted us via WhatsApp.

This ensures that anyone whose WhatsApp contact details are stored in our address book has already consented, upon first using the app on their device by accepting WhatsApp’s terms of use, to the transfer of their WhatsApp phone number from the address books of their chat contacts in accordance with Art. 6(1)(a) GDPR. Accordingly, the transfer of data relating to users who do not use WhatsApp and/or have not contacted us via WhatsApp is ruled out.

For details about the purpose and scope of data collection and the further processing and use of your data by WhatsApp, as well as your related rights and privacy settings, please refer to WhatsApp’s privacy policy: https://www.whatsapp.com /legal /?eea=1#privacy-policy

We have entered into a data processing agreement with the provider that protects our website visitors’ data and prohibits its disclosure to third parties.

As part of the processing activities described above, data may be transferred to servers

from Meta Platforms Inc. in the USA.

For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with European data protection standards on the basis of an adequacy decision by the European Commission.

5.2 When you contact us (e.g. via the contact form or by email), personal data is collected. The information collected when you use a contact form is shown on the form itself. This data is stored and used solely to respond to your enquiry, contact you and administer the process technically.

The legal basis for processing this data is our legitimate interest in responding to your enquiry in accordance with Art. 6(1)(f) GDPR. If you contact us with a view to entering into a contract, the additional legal basis for processing is Art. 6(1)(b) GDPR. Your data will be deleted once your enquiry has been fully processed. This is the case when the circumstances indicate that the matter has been conclusively resolved and provided there are no statutory retention obligations.

6) Website features

6.1 Instagram Plugins

This website uses plugins from the social network operated by the following provider: Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland

These plugins enable direct interaction with content on the social network.

To better protect your data when you visit our website, the plugins are initially disabled and embedded using a so-called “2-click” or “Shariff” solution.

This integration ensures that no connection to the provider’s servers is established when you visit a page on our website that contains such plugins.

Only when you activate the plugins and thereby consent to data transfer pursuant to Art. 6(1)(a) GDPR does your browser establish a direct connection to the provider’s servers. Regardless of whether you are logged in to an existing user profile, certain information about your device (including your IP address), browser and browsing history is transmitted to the provider and may be further processed there. If you are logged in to an existing user profile on the provider’s social network, information about interactions carried out through the plugins will also be published there and shown to your contacts. You can withdraw your consent at any time by clicking the activated plugin again to deactivate it. However, withdrawing your consent does not affect data that has already been transmitted to the provider.

Data may also be transferred to: Meta Platforms Inc., USA

We have entered into a data processing agreement with the provider to ensure the protection of our website visitors' data and prohibit its unauthorised disclosure to third parties.

6.2 Google Maps

This website uses an online mapping service provided by the following provider: Google Maps (API) by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”).

Google Maps is a web service for displaying interactive maps and presenting geographical information visually. Using this service shows you our location and makes it easier to plan your journey.

As soon as you visit a page that contains the Google Maps map, information about your use of our website (such as your IP address) is transmitted to and stored on Google’s servers. This may also involve transferring data to Google LLC’s servers in the USA. This takes place regardless of whether Google provides a user account that you are logged into or whether you have an account. If you are logged into Google, your data is directly associated with your account. If you do not want your data associated with your Google profile, you must log out before activating the button. Google stores your data (even for users who are not logged in) as usage profiles and analyses it.

Data collection, storage and analysis are carried out in accordance with Art. 6(1)(f) GDPR on the basis of Google’s legitimate interest in displaying personalized advertising, conducting market research and/or tailoring Google websites to users’ needs. You have the right to object to the creation of these user profiles. To exercise this right, you must contact Google. If you do not consent to the future transfer of your data to Google when using Google Maps, you can also disable the Google Maps web service entirely by turning off JavaScript in your browser. Google Maps, and therefore the map display on this website, will then be unavailable.

Where legally required, we have obtained your consent to the processing of your data described above in accordance with Art. 6(1)(a) GDPR. You may withdraw your consent at any time, with effect for the future. To withdraw your consent, please follow the procedure described above for exercising your right to object.

Further information about Google’s privacy policy is available here: https://business.safety.google /intl /de /privacy /

6.3 Google reCAPTCHA

We use the CAPTCHA service provided by the following provider on this website: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland

Data may also be transferred to: Google LLC, USA. The provider uses “Google Fonts”, fonts loaded from the internet by Google, to style the CAPTCHA window. No information other than that mentioned above, which is already transmitted to Google through the functionality of reCAPTCHA, is processed.

The service checks whether an entry was made by a natural person or through abusive machine-based and automated processing, and blocks spam, DDoS attacks and similar automated malicious access. To ensure that an action is performed by a human and not an automated bot, the provider collects the IP address of the device used, identifying data about the browser and operating system type, and the date and duration of the visit, and transmits this information to the provider’s servers for analysis.

The legal basis is our legitimate interest in determining individual responsibility on the internet and preventing misuse and spam pursuant to Art. 6(1)(f) GDPR.

We have entered into a data processing agreement with the provider, which ensures the protection of our website visitors’ data and prohibits its unauthorized disclosure to third parties.

Further information on Google’s privacy policy can be found here: https://business.safety.google /intl /de /privacy /

6.4 Google Customer Reviews (formerly Google Certified Shop Program)

We work with Google as part of the “Google Customer Reviews” programme. The provider is Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). This programme allows us to collect customer reviews from users of our website. After making a purchase on our website, you will be asked whether you would like to take part in a Google email survey.

If you give your consent in accordance with Art. 6(1)(a) GDPR, we will share your email address with Google. You will receive an email from Google Customer Reviews asking you to rate your experience of purchasing from our website. Your review will then be combined with our other reviews and displayed in our Google Customer Reviews logo and Merchant Center dashboard. Your review will also be used for Google Seller Ratings. Use of Google Customer Reviews may also involve the transfer of personal data to Google LLC's servers in the USA.

You may withdraw your consent at any time by sending a message to the data controller or to Google.

Further information on Google's privacy policy can be found here:

https://business.safety.google /intl /de /privacy /

7) Tools and other services

Cookie consent tool

This website uses a so-called “cookie consent tool” to obtain effective user consent for cookies and cookie-based applications that require consent. When users visit the website, the “cookie consent tool” appears as an interactive user interface where they can give consent for specific cookies and/or cookie-based applications by ticking a box. The tool ensures that cookies/services requiring consent are only loaded if the user has given consent by ticking the relevant box. This ensures that such cookies are only stored on the user’s device if consent has been given.

The tool uses technically necessary cookies to store your cookie preferences. As a rule, no personal user data is processed in this context.

If, in an individual case, personal data (such as the IP address) is processed to store, assign or log cookie settings, this is done in accordance with Art. 6(1)(f) GDPR on the basis of our legitimate interest in legally compliant, user-specific and user-friendly cookie consent management, and therefore in the legally compliant design of our website.

A further legal basis for processing is Art. 6(1)(c) GDPR. As the data controller, we are legally required to make the use of cookies that are not technically necessary subject to the user’s consent.

Where necessary, we have entered into a data processing agreement with the provider to ensure the protection of our website visitors’ data and prohibit its unauthorized disclosure to third parties.

For more information about the operator and the settings available in the cookie consent tool, please visit the relevant interface directly on our website.

8) Data subject rights

8.1 Applicable data protection law grants you the following rights as a data subject with regard to the processing of your personal data by the data controller (rights of access and intervention). The legal basis for each right is specified below:

Right of access under Art. 15 GDPR;
Right to rectification pursuant to Art. 16 GDPR;
Right to erasure under Art. 17 GDPR;
Right to restriction of processing under Art. 18 GDPR;
Right to be informed pursuant to Art. 19 GDPR;
Right to data portability pursuant to Art. 20 GDPR;
Right to withdraw consent pursuant to Art. 7(3) GDPR;
Right to lodge a complaint pursuant to Art. 77 GDPR.

8.2 RIGHT TO OBJECT

IF WE PROCESS YOUR PERSONAL DATA ON THE BASIS OF OUR OVERRIDING LEGITIMATE INTERESTS AS PART OF A BALANCING OF INTERESTS, YOU HAVE THE RIGHT TO OBJECT TO THIS PROCESSING AT ANY TIME, WITH EFFECT FOR THE FUTURE, ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED. HOWEVER, WE RESERVE THE RIGHT TO CONTINUE PROCESSING IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS THAT OVERRIDE YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FREEDOMS, OR IF THE PROCESSING IS NECESSARY TO ESTABLISH, EXERCISE OR DEFEND LEGAL CLAIMS.

IF WE PROCESS YOUR PERSONAL DATA FOR DIRECT MARKETING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA FOR SUCH ADVERTISING. YOU MAY EXERCISE YOUR RIGHT TO OBJECT AS DESCRIBED ABOVE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED FOR DIRECT MARKETING PURPOSES.

9) Retention period for personal data

The length of time personal data is stored depends on the applicable legal basis, the purpose of processing and, where applicable, the relevant statutory retention period (e.g. retention periods under commercial and tax law).

Where personal data is processed on the basis of explicit consent pursuant to Art. 6(1)(a) GDPR, the data concerned will be stored until you withdraw your consent.

If statutory retention periods apply to data processed in connection with contractual or quasi-contractual obligations on the basis of Art. 6(1)(b) GDPR, this data is routinely deleted after the retention periods expire, provided it is no longer required for contract fulfillment or initiation and/or we have no legitimate interest in retaining it.

When personal data is processed on the basis of Art. 6(1)(f) GDPR, it is stored until you exercise your right to object under Art. 21(1) GDPR, unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or the processing is for the establishment, exercise or defence of legal claims.

When personal data is processed for direct marketing purposes on the basis of Art. 6(1)(f) GDPR, it is stored until you exercise your right to object under Art. 21(2) GDPR.

Unless otherwise stated in the information in this notice about specific processing situations, stored personal data will be deleted once it is no longer necessary for the purposes for which it was collected or otherwise processed.