Privacy Policy
I. Responsible party in accordance with data protection regulations
Latex Berlin Handelsgesellschaft mbH
Managing Director: Thomas Bischoff
Seelower Straße 5
10439 Berlin
Phone: + 49 (0)30 44 68 85 95
Email: supatex-eu@latex-berlin.de
Website: www.supatex.eu
II. Data protection officer
The company data protection officer is Mr Peter Guthrie. He can be contacted using the above contact details and by email at datenschutz@latex-berlin.de.
III. Scope of processing of personal data, legal basis for processing personal data, duration of storage/deletion
The protection and security of your data is very important to us. We secure our website and other systems through technical and organisational measures against loss, destruction, access, modification or distribution of your data by unauthorised persons. To protect the transmission of personal data, this website uses SSL encryption, which you can recognise by the https in the browser line.
Please note: This translation is for information purposes only. Only the German text is legally binding.
1. Data collection when visiting our website
In principle, you can visit our website without providing your name.
However, when you access our website, data is automatically stored in a log file (known as a log file) on the server of our provider, who processes our data for hosting and displaying the website in accordance with our instructions.
The following data is retrieved and stored:
• IP address
• Date and time of access
• Internet service provider of the user
• Websites from which the user's system accessed our website
• Websites accessed by the user's system via our website
• Information about the user's browser type and version
• Information about the user's operating system
The creation of personal user profiles is excluded.
The purpose of data processing is to ensure a smooth connection to the website and to make the use of the site more convenient for visitors.
The legal basis for this temporary data processing is Art. 6 para. 1 sentence 1 lit. f) GDPR. Our legitimate interest arises from economic considerations, namely to make our website available to users and to make it more convenient for them to use.
The data will be deleted as soon as it is no longer necessary for the purpose for which it was collected. The access data will be deleted at the latest 7 days after the end of the page view.
2. Cookies
We use so-called cookies on the pages of our website, which are small text files that are stored on the user's device. When cookies are set, user information such as browser and IP addresses is collected and processed.
We use so-called ‘session cookies’ or ‘transient cookies’, which are deleted after you close your browser. These cookies are necessary to display the contents of the shopping basket in our online shop, to enable the login status and to register. These cookies store a so-called session ID, which allows various requests from your browser to be assigned to the same session.
You can always set your browser to notify you when cookies are set and decide individually or generally which cookies should be accepted or rejected. You can find information about cookie settings in your browser menu. If cookies are rejected, the usability of our website may be restricted.
The purpose of setting cookies is to make our website and our offers more attractive to users, to determine the reach of our website and to optimise our positioning on Google. The legal basis for the temporary storage of data is Art. 6 para. 1 sentence 1 lit. f) GDPR. Our legitimate interest arises from economic considerations and the aforementioned purpose of using cookies.
3. Email contact / contact form
You can contact us voluntarily via the email addresses provided and the contact form. If you contact us via these email addresses or the contact form, the personal data transmitted with the email or via the contact form (email address, name, telephone number if applicable, and any other data transmitted to us) will be processed by us. Contact (via email or contact form) is initiated by you voluntarily. Without the provision and processing of personal data, it is not possible to communicate with you.
The data will be used exclusively for processing your enquiry. It will only be passed on to third parties with your consent.
The legal basis for the processing of data transmitted in the course of sending an email or using the contact form is Art. 6 para. 1 sentence 1 lit. f) GDPR. Our legitimate interest arises from our ability to respond to your enquiry. If the enquiry is aimed at concluding a contract, the additional legal basis for processing is Art. 6 para. 1 sentence 1 lit. b) GDPR. After processing the enquiry, the processing of the data may be necessary in accordance with Art. 6 para. 1 sentence 1 lit. c) in order to comply with our tax retention obligations. Within the scope of the balancing of interests, we may process your data beyond the actual fulfilment of the contract and statutory retention obligations in accordance with Art. 6 para. 1 sentence 1 lit. f) GDPR in order to defend ourselves against the assertion of claims. If you have given your consent to the processing operations, the legal basis for the processing is Art. 6 para. 1 sentence 1 lit. a) GDPR.
If you send us an application in response to a job advertisement, your application documents will be deleted or destroyed as soon as the application process has been completed.
If an enquiry by e-mail or contact form is followed by the conclusion of a contract, our customers will receive further information about the scope of the processing of personal data.
The data will be deleted after the request has been processed, unless we are obliged to store it for longer due to tax and/or commercial law retention and documentation obligations (e.g. under the German Commercial Code (HGB), the German Criminal Code (StGB) or the German Fiscal Code (AO)) (usually up to 10 years). We may store your data for the purpose of retaining evidence for the period during which claims can be asserted against us (in individual cases up to thirty years).
4. Registration
You can voluntarily open a customer account on our website. The data provided there (mandatory information: name, address, email address, password to be created; voluntary information: company, VAT ID, telephone number, fax number) will be processed by us. The purpose of this data collection is to maintain the customer account in order to simplify the ordering process for you when placing further orders. The data in the customer account will not be passed on to third parties. The legal basis for the processing of the data is Art. 6 para. 1 sentence 1 lit. b) GDPR. Since we also obtain your consent when creating the customer account, an additional legal basis is Art. 6 para. 1 sentence 1 lit. a) GDPR. The customer account will be deleted after you revoke your consent, unless we are obliged to store it for longer due to tax and/or commercial law retention and documentation obligations (e.g. under the German Commercial Code (HGB), the German Criminal Code (StGB) or the German Fiscal Code (AO)) (usually up to 10 years).
5. Newsletter
You can subscribe to our newsletter on our website by providing your email address. The newsletter usually informs you once a month about new products and events. After registering on our website, we will send an email containing a confirmation link to the address you provided. You must click on this link to finally subscribe to the newsletter. This double opt-in procedure ensures that you have actually consented to receiving the newsletter and to the processing of your data.
The email address you provide, the date of registration and the confirmation will be stored. The data will be stored until you withdraw your consent. If you do not confirm, your email address will be deleted one week after we have sent you the confirmation email.
The sole purpose of processing the data is to send you the newsletter.
Since you have given us your consent to use your personal data for sending the newsletter and processing the data for this purpose when you ordered the newsletter, the legal basis for the processing of personal data is Art. 6 para. 1 sentence 1 lit. a) GDPR.
You can revoke your consent to the use of your email address for sending the newsletter at any time with future effect by clicking on the corresponding link in the newsletter or by sending us an email. The revocation does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation. The data will be deleted after revocation.
We use Cleverreach, a service provided by CleverReach GmbH & Co. KG, Mühlenstr. 43, 26180 Rastede, Germany (‘Cleverreach’), to send our newsletters. A corresponding contract for order processing has been concluded with Cleverreach. The email addresses are processed there. Neither complete IP addresses nor cookies are used or processed for reach measurement.
6. Ordering goods
If you order goods from our online shop, you must provide personal data during the ordering process (name, address, email address, telephone number if applicable).
The purpose of processing this data is to be able to contact you, to fulfil our contractual obligations towards you, to send you the goods you have ordered, to invoice you for the delivery of the goods, to defend or assert any existing claims and to fulfil our legal obligations (e.g. tax retention obligations).
The legal basis for the processing of personal data is Art. 6 para. 1 sentence 1 lit. b) GDPR.
Failure to provide and process the data would mean that the contractual relationship could not be established. After the contract has been processed, the processing of the data is necessary in accordance with Art. 6 para. 1 sentence 1 lit. c) in order to comply with our tax retention obligations. Within the framework of the balancing of interests, we may process your data beyond the actual fulfilment of the contract and statutory retention obligations in accordance with Art. 6 para. 1 sentence 1 lit. f) GDPR in order to defend ourselves against the assertion of claims. If you have given your consent to the processing operations, the legal basis for the processing is additionally Art. 6 para. 1 sentence 1 lit. a) GDPR.
The data will be deleted after the contract has been fulfilled, unless we are obliged to store it for longer due to tax and/or commercial law retention and documentation obligations (e.g. under the German Commercial Code (HGB), the German Criminal Code (StGB) or the German Fiscal Code (AO)) (usually up to 10 years). We may store your data for the purpose of retaining evidence for the period during which claims can be asserted against us (in individual cases up to thirty years).
If it's needed to fulfil the contract, your personal data will be passed on to service providers. The legal basis for this is also Art. 6 para. 1 sentence 1 lit. b) GDPR in all cases. The purpose of passing on the data is to be able to fulfil the mutual contractual obligations (delivery of goods, payment).
The shipping service providers (DHL Paket GmbH, iloxx GmbH, UPS) will receive your data for the purpose of delivering the goods. Individual data may also be passed on due to legal obligations to authorities (e.g. tax office). In addition, a tax office will receive invoice documents containing your data for the purpose of preparing our tax returns.
The commissioned credit institutions and payment service providers will receive your data for payment processing.
PayPal
If you have chosen to pay via PayPal when ordering goods, we will pass on the data relevant to the sale (e.g. first name, surname, address, telephone number, IP address, email address, number of items, item number, invoice amount and taxes in percent, invoice information) to PayPal (Europe) S.à.r.l. & Cie., S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg.
We would like to point out that PayPal may carry out credit checks and pass on your personal data to credit agencies for this purpose. PayPal has a legitimate interest in passing on this information in order to determine the probability of payment default and thus to be able to decide on the provision of the payment method. The legal basis for this is Art. 6 para. 1 sentence 1 lit. f) GDPR.
In addition to an address check, PayPal also collects and uses information about the buyer's previous payment behaviour and probability values for this behaviour in the future. PayPal calculates these scores using a scientifically recognised mathematical-statistical method. PayPal also uses your address data. If the calculation shows that you are not creditworthy, PayPal will inform you immediately.
You can revoke your consent to the use of your personal data at any time by contacting PayPal. However, PayPal may be entitled to process, use and transfer your personal data if this is necessary for the contractual payment processing by PayPal's services and/or required by law.
Further information can be found in PayPal's privacy policy at the following link: https://www.paypal.com/de/webapps/mpp/ua/privacy-full
UNZER
If you pay by credit card or direct debit, the payment will also be processed by Unzer Group GmbH, Schöneberger Str. 21 a, 10963 Berlin.
Your personal data will be passed on to Unzer Group GmbH for billing purposes.
Further information and the privacy policy of Unzer Group GmbH can be found via the following links: https://www.unzer.com/de/datenschutz
7. Google Analytics
We use Google Analytics, a web analytics service provided by Google LLC (1600 Amphitheatre Parkway Mountain View, CA 94043, USA; hereinafter referred to as ‘Google’). Google uses so-called cookies, text files that are stored on the browser of the user of our website. The information generated by the cookie about the use of our website is transferred to a Google server. We have activated IP anonymisation when using Google Analytics. This means that the IP address of users of our website is shortened by Google within member states of the European Union or in other states party to the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transferred to a Google server in the USA and stored and shortened there.
Google is certified under the Privacy Shield Agreement. This guarantees compliance with European data protection law (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active). Google will use the information transmitted in accordance with its instructions to evaluate the use of our website, to compile reports on the activities on our website and to provide us with further services related to the use of the website and the Internet. In doing so, it is possible to create pseudonymous user profiles. The IP address transmitted by your browser will not be merged with other data from Google.
You can always set your browser to notify you when cookies are being used and decide individually or generally which cookies you want to accept or reject. You can find out about cookie settings in your browser menu. If cookies are rejected, the usability of our website may be limited.
You also have the option of preventing Google from collecting the data generated by the cookie and relating it to your use of the online offer, as well as preventing Google from processing this data, by downloading and installing the browser plugin available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de.
Further information can be found at the following links:
https://www.google.com/intl/de/policies/privacy/partners
http://www.google.com/policies/technologies/ads
http://www.google.de/settings/ads
https://policies.google.com/privacy?gl=DE&hl=de
https://support.google.com/analytics/answer/6004245?hl=de
The purpose of using Google Analytics is to make our website and our offers more attractive to users, to determine the reach of our website and to optimise our positioning on Google. The legal basis for the temporary storage of data is Art. 6 para. 1 lit. f) GDPR. Our legitimate interest arises from economic considerations and the aforementioned purpose of using the analysis tool. The data will be deleted if it is no longer required for analysis, but no later than after 14 months.
9. Rights of the data subject
As a data subject, you have
• the right to information about the personal data we process about you (Art. 15 GDPR),
• the right to rectification of the processing (Art. 16 GDPR),
• the right to erasure of the processing (Art. 17 GDPR),
• the right to restriction of processing (Art. 18 GDPR),
• the right to be informed (Art. 19 GDPR),
• the right to data portability (Art. 20 GDPR),
• the right to object to processing (Art. 21 GDPR; see also highlighted below),
• the right to lodge a complaint with a supervisory authority (Art. 77 GDPR in conjunction with Section 19 BDSG).
If the processing of the data is based on your consent, you have the following rights under Art. 7 (3) GDPR
• the right to withdraw this consent at any time without affecting the lawfulness of the processing based on the consent until the withdrawal.
If you wish to withdraw your consent, simply send a message to: datenschutz@latex-berlin.de
Right to object pursuant to Art. 21 GDPR
a) Right to object on an individual basis
You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is based on Art. 6 para. 1 lit. e) GDPR (data processing in the public interest) or Art. 6(1)(f) GDPR (data processing based on a balancing of interests), including profiling based on these provisions.
b) Right to object to the processing of data for advertising purposes
If your personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of your personal data for such marketing purposes; this also applies to profiling insofar as it is related to such direct marketing. If you object to processing for direct marketing purposes, we will no longer process your personal data for these purposes.
If you wish to object to the processing, simply send a message to:
The exact wording of the legal provisions regarding your rights as a data subject can be found at the end of the privacy policy.
V. Changes to the privacy policy
We will amend our privacy policy if this becomes necessary due to the further development of our website and/or due to changes in legal requirements. The current version of our privacy policy can be found on our website.
Status of the privacy policy: 1 January 2019
Art. 15 GDPR – Right of access by the data subject
(1) The data subject shall have the right to obtain from the controller confirmation as to whether or not personal data concerning him or her are being processed; if so, he or she shall have the right to obtain access to and rectification of the personal data and the following information:
a) the purposes of the processing;
b) the categories of personal data concerned;
c) the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organisations;
d) where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria for determining this period;
e) the existence of the right to request from the controller rectification or erasure of personal data or restriction of processing or to object to processing;
f) the existence of the right to lodge a complaint with a supervisory authority;
g) where the personal data are not collected from the data subject, any available information as to their source;
h) the existence of automated decision-making, including profiling, referred to in Article 22(1) and (4) and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject.
(2) Where personal data are transferred to a third country or to an international organisation, the data subject shall have the right to be informed of the appropriate safeguards pursuant to Article 46 in connection with the transfer.
(3) The controller shall provide a copy of the personal data undergoing processing. For any further copies requested by the data subject, the controller may charge a reasonable fee based on administrative costs. If the data subject makes the request electronically, the information shall be provided in a commonly used electronic format, unless otherwise specified by the data subject.
(4) The right to obtain a copy pursuant to paragraph 1b shall not adversely affect the rights and freedoms of others.
Art. 16 GDPR - Right to rectification
The data subject shall have the right to obtain from the controller without undue delay the rectification of inaccurate personal data concerning him or her. Taking into account the purposes of the processing, the data subject shall have the right to have incomplete personal data completed, including by means of providing a supplementary statement.
Art. 17 GDPR - Right to erasure (‘right to be forgotten’)
(1) The data subject shall have the right to obtain from the controller the erasure of personal data concerning him or her without undue delay and the controller shall have the obligation to erase personal data without undue delay where one of the following grounds applies:
a) The personal data is no longer necessary for the purposes for which it was collected or otherwise processed.
b) The data subject withdraws consent on which the processing is based according to Article 6(1)(a) or Article 9(2)(a), and there is no other legal basis for the processing.
c) The data subject objects to the processing pursuant to Article 21(1) and there are no overriding legitimate grounds for the processing, or the data subject objects to the processing pursuant to Article 21(2).
d) The personal data has been processed unlawfully.
e) The personal data must be erased to comply with a legal obligation under Union law or the law of the Member States to which the controller is subject.
f) The personal data has been collected in relation to information society services offered in accordance with Article 8(1).
(2) If the controller has made the personal data public and is obliged to erase it in accordance with paragraph 1, it shall take reasonable steps, including technical measures, to inform controllers processing the personal data of the data subject's request for the erasure of any links to, or of copies or replicas of, the personal data.
(3) Paragraphs 1 and 2 shall not apply to the extent that processing is necessary
a) for exercising the right of freedom of expression and information;
b) for compliance with a legal obligation which requires processing in accordance with Union or Member State law to which the controller is subject or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
c) for reasons of public interest in the area of public health in accordance with Article 9(2)(h) and (i) and Article 9(3);
d) for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes in accordance with Article 89(1), in so far as the right referred to in paragraph 1 is likely to render impossible or seriously impair the achievement of the objectives of that processing; or
e) for the establishment, exercise or defence of legal claims.
Art. 18 GDPR - Right to restriction of processing
(1) The data subject shall have the right to obtain from the controller restriction of processing where one of the following conditions applies:
a) the accuracy of the personal data is contested by the data subject, for a period enabling the controller to verify the accuracy of the personal data;
b) the processing is unlawful and the data subject opposes the erasure of the personal data and requests the restriction of their use instead;
c) the controller no longer needs the personal data for the purposes of the processing, but the data subject needs them for the establishment, exercise or defence of legal claims; or
d) the data subject has objected to processing pursuant to Article 21(1) pending the verification of whether the legitimate grounds of the controller override those of the data subject.
(2) Where processing has been restricted in accordance with paragraph 1, such personal data shall, with the exception of storage, only be processed with the consent of the data subject or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State.
(3) A data subject who has obtained restriction of processing pursuant to paragraph 1 shall be informed by the controller before the restriction is lifted.
Art. 19 GDPR - Notification obligation in connection with the rectification or erasure of personal data or the restriction of processing
The controller shall communicate any rectification or erasure of personal data or restriction of processing pursuant to Article 16, Article 17(1) and Article 18 to each recipient to whom the personal data have been disclosed, unless this proves impossible or involves disproportionate effort. The controller shall inform the data subject of these recipients if the data subject requests this.
Art. 20 GDPR - Right to data portability
(1) The data subject shall have the right to receive the personal data concerning him or her, which he or she has provided to a controller, in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller without hindrance from the controller to which the personal data have been provided, where
a) the processing is based on consent pursuant to Article 6(1)(a) or Article 9(2)(a) or on a contract pursuant to Article 6(1)(b) and
b) the processing is carried out by automated means.
(2) When exercising their right to data portability pursuant to paragraph 1, the data subject shall have the right to have the personal data transmitted directly from one controller to another controller, where technically feasible.
(3) The exercise of the right under paragraph 1 of this Article shall not affect Article 17. This right shall not apply to processing necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.
(4) The right under paragraph 2 shall not adversely affect the rights and freedoms of others.
Art. 21 GDPR - Right to object
(1) The data subject shall have the right to object, on grounds relating to his or her particular situation, to processing of personal data concerning him or her which is based on point (e) or (f) of Article 6(1); this also applies to profiling based on those provisions. The controller shall no longer process the personal data unless the controller demonstrates compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defence of legal claims.
(2) Where personal data are processed for direct marketing purposes, the data subject shall have the right to object at any time to the processing of personal data concerning him or her for such marketing; this shall also apply to profiling to the extent that it is related to such direct marketing.
(3) If the data subject objects to processing for direct marketing purposes, the personal data shall no longer be processed for such purposes.
(4) The data subject shall be informed of the right referred to in paragraphs 1 and 2 at the latest at the time of the first communication with the data subject; this information shall be provided in an intelligible manner and separately from other information.
(5) In relation to the use of information society services, the data subject may, notwithstanding Directive 2002/58/EC, exercise his or her right to object by means of automated procedures using technical specifications.
(6) The data subject shall have the right to object, on grounds relating to his or her particular situation, to processing of personal data concerning him or her which are intended for scientific or historical research purposes or statistical purposes in accordance with Article 89(1), unless the processing is necessary for the performance of a task carried out for reasons of public interest.
Art. 22 GDPR - Automated individual decision-making, including profiling
(1) The data subject shall have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning him or her or similarly significantly affects him or her.
(2) Paragraph 1 shall not apply if the decision
a) is necessary for entering into or performing a contract between the data subject and the controller;
(b) is authorised by Union or Member State law to which the controller is subject and that law provides for appropriate measures to safeguard the rights and freedoms and legitimate interests of the data subject; or
(c) is based on the data subject's explicit consent.
(3) In the cases referred to in paragraph 2(a) and (c), the controller shall take reasonable steps to safeguard the rights and freedoms and legitimate interests of the data subject, including at least the right to obtain human intervention on the part of the controller, to express his or her point of view and to contest the decision.
(4) Decisions referred to in paragraph 2 shall not be based solely on special categories of personal data referred to in Article 9(1), unless Article 9(2)(a) or (g) applies and appropriate measures to safeguard the rights and freedoms and legitimate interests of the data subject have been taken.
Art. 77 GDPR - Right to lodge a complaint with a supervisory authority
(1) Without prejudice to any other administrative or judicial remedy, every data subject shall have the right to lodge a complaint with a supervisory authority, in particular in the Member State of his or her habitual residence, place of work or place of the alleged infringement if the data subject considers that the processing of personal data relating to him or her infringes this Regulation.
(2) The supervisory authority with which the complaint has been lodged shall inform the complainant on the progress and outcome of the complaint, including the possibility of a judicial remedy pursuant to Article 78.
Art. 7 para. 3 GDPR - Right to withdraw consent
The data subject shall have the right to withdraw consent at any time. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal. The data subject shall be informed of this prior to giving consent. The withdrawal of consent shall be as simple as the process for giving consent.
004