The following statements are intended to provide you with transparent and, we believe, comprehensible information about the type, scope and purposes of the collection and use of personal data on our website. If you have any further questions related to data protection in connection with our website, or you want to report any potential data protection breaches, please contact us at:
Definitions of the terms used (e.g. ‘personal data’ or ‘processing’) can be found in Art. 4 GDPR.
The controller of this website is Reedmaster GmbH, Lülsdorfer Straße 38, 53842 Troisdorf, Germany. Further information about our company can be found in our legal notice.
Which data is processed?
The server on which our website is hosted is located in a data centre in the European Union, namely in Germany. The data centre is operated by a German company.
Our hosting provider is subject in full to the data protection stipulations applicable in Germany. A data processing agreement that complies with the requirements of Art. 28 GDPR has been entered into with the hosting provider.
When you visit our website, personal data is also processed. In order for the website to be displayed in your browser, the IP address of the end device you use needs to be processed. Added to this is further information about the browser on your end device.
We are also obliged under data protection law to guarantee the confidentiality and integrity of the personal data processed using our IT systems.
When visitors access our website, these visitors’ IP addresses are collected and stored in log files. We store the IP addresses of the visitors to our website for a maximum of seven days for purposes of identification and to avert attacks.
Detailed statistics and log files tell us who is visiting our website and how often. Our webserver logs each individual access to an element (e.g. an HTML file or an image) within our website. Failed or rejected access attempts (e.g. due to password protection) are noted. The server writes the domain from which the access attempt occurred, at what time and which element (e.g. which page or image) was accessed to what is termed a ‘log file’. Our server also logs the browser used to access the element.
The hostname or the IP address of the client accessing our website is anonymised in the log files. Only the entries for the host of the client or, if this cannot be identified, the IP address of the client are anonymised. The first 9 bits of the IP address of the entry are converted into a hash value. An anonymised IP address remains valid for a maximum of 24 hours. After this the same initial IP address produces a different ‘anonymous’ IP address.
A maximum of 400 days can be presented in the statistics. Only the data of the log files is processed. The IP addresses are stored in an anonymous form and thus can no longer be allocated to a given data subject.
The data is further also used to rectify errors on our website.
Our website uses session cookies. Session cookies temporarily store the Internet access and are deleted when the browser is closed. This type of cookie stores no information about the user.
The legal basis for the data processing activities performed is Art. 6 (1) (f) GDPR. Our ‘interest’ as defined in Art. 6 (1) (f) is the operation of this website, the implementation of the protective goals, and the confidentiality, integrity and availability of the data.
On our websites we offer a contact form that you can use to request information about the products and services we offer or generally to make contact with us. The personal information is provided on a voluntary basis. The only information we request from you is:
- E-mail address
- Your message to us
We need the information to process your request at all, to address you in the correct manner and to send you a response.
If you contact us via the contact form, your personal data is only collected, processed and used for the purpose of processing your request.
We regularly review whether personal data can be deleted. If data is no longer needed in the context of a relationship with a (prospective) customer, or there is an overriding opposing interest of the customer, we will delete the data in question unless this is precluded by statutory retention obligations.
The legal basis for this data processing is Art. 6 (1) (f) GDPR. Our ‘interest’ as defined in Art. 6 (1) (f) is communication with customers and prospective customers.
If you use our webshop and submit an order, we process the personal data of yours that is necessary to manage your order and for customer service purposes (name, addresses, e-mail address, order details, payment details, customer number, date of birth, telephone number, IP address) as well as the data that you additionally volunteer to us.
If you place an order with us, we need to ask for your name, e-mail address and shipping address. We require this data for handling the order and payment and it is processed in that context. This enables us to fulfil your order optimally and promptly. The legal basis for this data processing is Art. 6 (1) sent. 1 (b) GDPR, performance of a contract.
If you do not provide us with the data necessary for handling the order (name, addresses, e-mail address, order data, payment data, customer number, date of birth, telephone number), we cannot perform your order.
The data you provide is stored permanently in your customer account. Unless precluded by statutory retention obligations or you make a specific request for erasure, your personal data will be deleted when the data is no longer required to perform the purpose being pursued when the data was saved or if it is legally impermissible to store it for other reasons.
In the course of handling the order, service providers deployed by us (such as transport and logistics companies, banks) will be given the data required for handling the order and assignment. We transfer your e-mail address to the logistics company commissioned by us in order for a parcel notification to be sent. This parcel notification enables you to influence this parcel delivery and change the delivery place or date.
We currently only transfer the data to the following company:
DHL Paket GmbH
The legal basis for this data processing is Art. 6 (1) sent. 1 (b) GDPR, performance of a contract.