1. Introduction and Contact Details of the Controller

1.1 We appreciate your interest in our online shop. Protecting your privacy is very important to us. Below, we provide detailed information on how we handle your personal data. Personal data herein refers to any data that can personally identify you.

Responsible for data processing is:

JAKOB SCHMIDEN GmbH
Auf Schmiden 87
72336 Balingen
Germany
Email: info@jakobschmiden.com

1.2 You can visit our websites without providing any personal information. Each time a web page is accessed, the web server automatically stores a so-called server log file, which, for example, contains the name of the requested file, your IP address, date and time of access, amount of data transmitted, and the requesting provider (access data), and documents the access.

1.3 For security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries to the controller), this website uses SSL or TLS encryption. You can recognize an encrypted connection by the string “https://” and the lock symbol in your browser’s address bar. These collected data are technically necessary for us to display the website to you. Processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data is not shared or otherwise used.

2. Cookies and Web Analytics

To make your visit to our website attractive and to enable the use of certain functions, we use cookies, which are small text files that are stored on your device. Some of these cookies are automatically deleted after you close your browser (so-called “session cookies”), while others remain on your device for a longer period and allow the storage of page settings (so-called “persistent cookies”). In the latter case, you can find the storage duration in the overview of the cookie settings of your web browser.

If personal data is also processed by individual cookies we use, the processing is carried out in accordance with Art. 6 para. 1 lit. b GDPR either for the performance of the contract, in accordance with Art. 6 para. 1 lit. a GDPR in the case of consent given, or in accordance with Art. 6 para. 1 lit. f GDPR to safeguard our legitimate interests in the best possible functionality of the website as well as a customer-friendly and effective design of your visit to the site.

You can set your browser to inform you about the setting of cookies and to decide on their acceptance individually or to exclude the acceptance of cookies for certain cases or in general.

Please note that if you do not accept cookies, the functionality of our website may be limited.

3. Data Collection and Use for Contract Processing

We collect personal data when you provide it to us as part of your order or when contacting us (e.g., via email). Mandatory fields are marked as such, as in these cases, we require the data for contract processing or to handle your inquiry, and you cannot complete the order or send the inquiry without providing them. The types of data collected are evident from the respective input forms.

4. Data Transfer

To the extent necessary for contract processing for delivery and payment purposes, the personal data collected by us will be transferred to the commissioned transport company and the commissioned financial institution in accordance with Art. 6 para. 1 lit. b GDPR.

If, based on a corresponding contract, we owe you updates for goods with digital elements or for digital products, we process the contact data provided by you during the order (name, address, email address) to inform you personally, via a suitable communication method (e.g., postal or email), about upcoming updates within the legally prescribed period, in accordance with our legal obligations under Art. 6 para. 1 lit. c GDPR. Your contact details will be strictly used for the purpose of communicating updates owed by us and will only be processed by us to the extent necessary for the respective information.

To process your order, we also cooperate with the following service provider(s), who support us wholly or partially in the execution of concluded contracts. Certain personal data will be transferred to these service providers in accordance with the following information.

5. Email Advertising with Newsletter Subscription

When you subscribe to our newsletter, we will use the data necessary for this purpose or provided separately by you to regularly send you our email newsletter based on your consent in accordance with Art. 6 para. 1 s. 1 lit. a GDPR. The mandatory information required for receiving the newsletter is solely your email address and your name, in order to address you personally.

Unsubscribing from the newsletter is possible at any time and can be done by sending a message to the contact option described below.

6. Social Media Plugins

Our website uses so-called social plugins (“plugins”) from social networks.

When you visit a page of our website that contains such a plugin, your browser establishes a direct connection to the servers of Facebook, Google, Twitter, or Instagram. The content of the plugin is transmitted directly to your browser by the respective provider and integrated into the page. By integrating the plugins, the providers receive the information that your browser has accessed the corresponding page of our website, even if you do not have a profile or are not currently logged in. This information (including your IP address) is transmitted directly from your browser to a server of the respective provider.

7. Our Online Presence on Facebook, Twitter, Instagram

Our presence on social networks and platforms is aimed at better, active communication with our customers and interested parties. We provide information there about our products and ongoing special promotions.

When you visit our online presence on social media, your data may be used for market research and advertising purposes.

8. Contact Information and Your Rights

The applicable data protection law grants you the following rights with regard to the processing of your personal data by the controller (information and intervention rights), whereby the legal basis for exercising these rights is referred to:

• Right to information pursuant to Art. 15 GDPR;
• Right to rectification pursuant to Art. 16 GDPR;
• Right to erasure (“right to be forgotten”) pursuant to Art. 17 GDPR;
• Right to restriction of processing pursuant to Art. 18 GDPR;
• Right to notification pursuant to Art. 19 GDPR;
• Right to data portability pursuant to Art. 20 GDPR;
• Right to withdraw consent granted pursuant to Art. 7 para. 3 GDPR;
• Right to lodge a complaint pursuant to Art. 77 GDPR.

9. Right to Object

To the extent that we process personal data as explained above to safeguard our legitimate interests, which prevail within the scope of a balance of interests, you have the right to object to this processing with effect for the future.

You have the right to object to this processing at any time, for reasons arising from your particular situation, with effect for the future.

If you exercise your right to object, we will cease processing the affected data. However, further processing is reserved if we can demonstrate compelling legitimate grounds for processing that override your interests, fundamental rights, and freedoms, or if processing serves to assert, exercise, or defend legal claims.

If we process your personal data to conduct direct advertising, you have the right to object to the processing of personal data concerning you for the purposes of such advertising at any time. You can exercise the right to object as described above.

10. Duration of Personal Data Storage

The duration of the storage of personal data is determined by the respective legal basis, the purpose of processing, and, where applicable, additionally by the respective statutory retention period (e.g., commercial and tax retention periods).

When processing personal data based on explicit consent pursuant to Art. 6 para. 1 lit. a GDPR, the relevant data will be stored until you revoke your consent.

If there are statutory retention periods for data processed in the context of contractual or contract-like obligations based on Art. 6 para. 1 lit. b GDPR, this data will be routinely deleted after the retention periods have expired, provided that they are no longer necessary for the fulfillment or initiation of the contract and/or there is no longer a legitimate interest on our part in continued storage.

When processing personal data based on Art. 6 para. 1 lit. f GDPR, this data will be stored until you exercise your right to object under Art. 21 para. 1 GDPR, unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing is necessary for the establishment, exercise, or defense of legal claims.

When processing personal data for the purpose of direct marketing based on Art. 6 para. 1 lit. f GDPR, this data will be stored until you exercise your right to object under Art. 21 para. 2 GDPR.

Unless otherwise indicated in the other information in this statement about specific processing situations, stored personal data will be deleted when they are no longer necessary for the purposes for which they were collected or otherwise processed.