Within the scope of this data protection declaration, VOLIMEA GmbH & Cie. KG informs you about how we process your personal data, with special attention to the processing of personal data in accordance with the basic data protection regulation EU 2016/679 (“EU DS-GVO”) and the applicable national data protection laws.
1 – Name and address of the controller
Person in charge for the collection, processing and use of your personal data in accordance with Art. 4 No. 7 DS-GVO:
VOLIMEA GmbH & Cie. KG
37308 Heilbad Heiligenstadt
Phone: +49 (0) 3606 – 50 666 0
Fax: +49 (0) 3606 – 50 666 10
Link zum Impressum:
2 – Name and address of the Data Protection Officer
The data protection officer of the controller is
37308 Heilbad Heiligenstadt
If you have any questions or comments on data protection, please contact the data protection officer.
3 – Purposes of processing personal data
We use personal data for the purpose of operating the website.
When you visit our websites, we store certain information about the browser and operating system you use, the date and time of your visit, the access status (e.g. whether you were able to access a website or received an error message), the use of website functions, the search terms you may have entered, the frequency with which you access individual web pages, the name of files accessed, the amount of data transferred, the website from which you accessed our websites and the website that you visit from our websites, whether by clicking on links on our websites or by entering a domain directly in the input field of the same tab (or window) of your browser in which you opened our websites. We also store your IP address and the name of your internet service provider for seven days for security reasons, in particular to prevent and detect attacks on our websites or attempted fraud.
We only store other personal data if you provide us with this information, e.g. as part of a registration, a contact form, a survey, a competition or in order to implement a contract, and in these cases only to the extent that we are permitted to do so on the basis of your consent or in accordance with the applicable legal provisions (for further information, please refer to the section “Legal basis of processing” below).
You are neither legally nor contractually obliged to provide your personal data. However, it is possible that certain functions of our websites depend on the provision of personal data. If you do not provide personal data in these cases, this may mean that functions are not available or only available to a limited extent.
4 – Legal bases for the processing of personal data
4.1 – Hosting
The hosting services we use serve to provide the following services: Infrastructure and platform services, computing capacity, storage space and database services, security services and technical maintenance services that we use for the purpose of operating the website.
We process inventory data, contact data, content data, contract data, usage data, meta and communication data of customers, interested parties and visitors of this website.
The legal basis for this processing of personal data is our legitimate interest in the efficient and secure provision of our website in accordance with Art. 6 (1) sentence 1 letter f) DS-GVO in conjunction with Art. 28 DS-GVO.
4.2 – Access data
We collect information about you when you use this website.
We automatically collect information about your usage patterns and your interaction with us and register data about your computer or mobile device. We collect, store and use data about every access to our website (so-called server log files).
The access data include:
- Name and URL of the retrieved file:
- Date and time of the retrieval
- Transmitted data volume
- Successful retrieval message (HTTP response code)
- Browser type and version
- Operating system
- Referer URL (i.e. the previously visited page)
- Websites that are accessed by the user’s system via our website
- Internet service provider of the user
- IP address and the requesting provider
We use this log data without allocation to your person or other profiling for statistical evaluations for the purpose of operating, security and optimisation of our website, but also for anonymous recording of the number of visitors to our website (traffic) and the extent and type of use of our website and services, as well as for billing purposes to measure the number of clicks received from cooperation partners. This information enables us to provide personalised and location-based content and to analyse traffic, troubleshoot and correct errors and improve our services.
We reserve the right to check the log data retrospectively if there is a justified suspicion of illegal use based on concrete evidence.
We store IP addresses for a short, limited period of time in the log files if this is necessary for security purposes or if it is necessary for the provision of a service or the invoicing of a service, e.g. if you use one of our offers. After completion of the order or cancellation of the process or after receipt of payment, we delete the IP address if it is no longer required for security purposes. We also save IP addresses if we have a concrete suspicion of a criminal offence in connection with the use of our website. We also save the date of your last visit as part of your account (e.g. during registration, login, clicking on links, etc.).
This is done on the legal basis of our legitimate interests in accordance with Art. 6 (1) sentence 1 lit. f) DS-GVO in order to improve and make our data traffic and IT services more secure.
4.2.1 – Cookies
We use so-called session cookies to optimise our website.
A session cookie is a small text file that is sent by the respective servers when you visit a website and is temporarily stored on your hard drive
This file as such contains a so-called session ID, with which various requests from your browser can be assigned to the shared session. This allows your computer to be recognised when you return to our website. These cookies are deleted after you close your browser. They serve, for example, to enable you to use the shopping basket function over several pages.
We also use persistent cookies (also small text files which are stored on your terminal device) to a small extent, which remain on your terminal device and enable us to recognise your browser on your next visit. These cookies are stored on your hard drive and delete themselves after the specified time. Their lifetime is between 1 month and 10 years. This enables us to present our offer to you in a more user-friendly, effective and secure manner and, for example, to display information on the site that is specially tailored to your interests.
This is done on the legal basis of our legitimate interests in accordance with Art. 6 (1) sentence 1 lit. f) DS-GVO in order to make our website more user-friendly, effective and secure.
The following data and information are stored in the cookies:
- Log-in information
- Language settings
- Entered search terms
- Information about the number of times our website is called up and the use of individual functions of our internet presence.
When the cookie is activated, an identification number is assigned to it.
Your personal data will not be assigned to this identification number. Your name, your IP address or similar data that would allow the cookie to be assigned to you will not be placed in the cookie. On the basis of cookie technology, we only receive pseudonymised information, for example about which pages of our shop have been visited, which products have been viewed, etc.
You can set your browser so that you are informed in advance about the setting of cookies and can decide in each individual case whether you want to exclude the acceptance of cookies for certain cases or in general, or whether cookies should be prevented completely. However, this may restrict the functionality of the website.
4.2.2 – Google Analytics
We use Google Analytics, a web analysis service of Google Inc. (“Google”). Google Analytics uses “cookies”, which are text files placed on your computer, to help the website analyse how users use the site.
The information generated by the cookie about the use of this website by visitors to the site is usually transferred to a Google server in the USA and stored there.
Google has submitted to the Privacy Shield Agreement between the European Union and the United States and is certified. Google thereby undertakes to comply with the standards and regulations of European data protection law.
You can find more detailed information in the entry linked below:
We have activated IP anonymisation on this website (anonymizeIp).
However, this will cause your IP address to be shortened by Google within member states of the European Union or in other states which are party to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and shortened there.
On our behalf, Google will use this information to evaluate your use of the website, to compile reports on website activities and to provide us with further services related to website and internet use.
You can also prevent the transfer of the data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plugin available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de.
The processing of your personal data is carried out on the legal basis of our legitimate interests in accordance with Art 6 (1) sentence 1 letter f) DS-GVO in order to be able to adapt our advertising for products and services to the individual needs and interests of users.
4.3 – Data required to fulfil our contractual obligations
We process personal data that we require to fulfil our contractual obligations, such as name, address, e-mail address, products ordered, invoice and payment data. The collection of these data is necessary for the conclusion of the contract.
The data will be deleted after expiry of the warranty periods and statutory retention periods. Data linked to a user account will be retained in any case for the period of time that this account is maintained.
This is done on the legal basis pursuant to Art. 6 (1) sentence 1 lit. b) DS-GVO in order to be able to fulfil our contractual obligations to our business partners.
4.4 – User account
You can create a user account on our website.
If you wish to do so, we need the personal data requested during login. When you log in later, only your email or user name and the password you have chosen are required.
For new registration we collect master data (e.g. name, address), communication data (e.g. e-mail address) and payment data (bank details) as well as access data (user name and password).
In order to ensure your proper registration and to prevent unauthorised registrations by third parties, you will receive an activation link by e-mail after your registration to activate your account. Only after your registration has been completed do we permanently store the data you provide in our system.
You can have a user account, once created, deleted by us at any time without incurring any costs other than the transmission costs according to the basic rates. A notification in text form to the above-mentioned contact data (e.g. e-mail, fax, letter) is sufficient for this purpose. We will then delete your stored personal data, unless we still need to store it for the processing of orders or due to statutory storage obligations.
The legal basis for the storage of your personal data is your consent pursuant to Art. 6 (1) sentence 1 lit. a) DS-GVO.
4.5 – Newsletter
To register for the newsletter, the data requested in the registration process is required. The registration for the newsletter is logged. After registering, you will receive a message at the email address you provided, asking you to confirm your registration (“double opt-in”). This is necessary to prevent third parties from registering with your email address.
You can revoke your consent to receive the newsletter at any time and thus cancel the newsletter. A message in text form to the above-mentioned contact data (e.g. e-mail, fax, letter) is sufficient for this purpose. Of course you will also find an unsubscribe link in every newsletter.
We store the registration data for as long as they are needed to send the newsletter. We store the registration protocol and the dispatch address as long as there was an interest in the proof of the originally given consent, as a rule these are the limitation periods for civil law claims, i.e. a maximum of three years.
The legal basis for sending the newsletter is your consent in accordance with Art. 6 (1) S. 1 lit. a) in conjunction with Art. 7 DS-GVO in conjunction with § 7 (2) No. 3 UWG.
The legal basis for recording the notification is our legitimate interest in accordance with Art 6 (1) sentence 1 lit. f) DS-GVO for the purpose of proving that the shipment was made with your consent.
4.6 – Product recommendations
We will send you regular product recommendations by e-mail, independently of the newsletter. In this way, we will send you information about products from our range that you may be interested in based on your recent purchases of goods or services from us.
In doing so, we comply strictly with the legal requirements. You can object to this at any time without incurring any costs other than the transmission costs according to the basic tariffs. A notification in text form to the above-mentioned contact data (e.g. e-mail, fax, letter) is sufficient for this purpose. Of course you will also find an unsubscribe link in every e-mail.
The legal basis for this is our legitimate interest pursuant to Art. 6 (1) sentence 1 lit. f) DS-GVO in conjunction with § 7 (3) UWG.
4.7 – Enquiries by email or contact form
If you contact us (e.g. via contact form or e-mail), we will process your data to process the enquiry and in case follow-up questions arise.
If the data processing is carried out to carry out pre-contractual measures which are carried out at your request or, if you are already our customer, to carry out the contract, this is done on the legal basis in accordance with Art. 6 (1) S. 1 lit. b) DS-GVO.
We only process other personal data if you give your consent in accordance with Art. 6 (1) sentence 1 letter a) DS-GVO or if we have a justified interest in processing your data in accordance with Art. 6 (1) sentence 1 letter f) DS-GVO.
4.8 – Applications and application procedures
We collect and process the personal data of applicants for the purpose of processing the application procedure. The processing can take place by post or electronically.
This is done on the legal basis pursuant to Art. 6 (1) sentence 1 lit. b) DS-GVO for the implementation of pre-contractual measures, which is carried out at the request of the applicants.
Please note that application documents sent by email are transmitted unencrypted. To protect your application documents during transmission, you can contact our personnel department.
We then offer you the possibility to transmit your data via a secure access. If the person responsible concludes an employment contract with an applicant, the transmitted data is stored for the purpose of processing the employment relationship in compliance with the statutory provisions. If the data controller does not conclude an employment contract with the applicant, the application documents are automatically deleted six months after notification of the rejection decision, provided that no other legitimate interests of the data controller conflict with deletion. Other legitimate interests in this sense include, for example, a duty of proof in proceedings under the “Allgemeines Gleichbehandlungsgesetz” (AGG).
The legal basis for this is our legitimate interest in accordance with Art. 6 (1) sentence 1 lit. f) DS-GVO.
4.9 – Registration for events and workshops
In order to be able to invite you to events, we record your title, first name, surname, e-mail address, company and participation in the event.
The legal basis for this is our legitimate interest in accordance with Art. 6 (1) sentence 1 lit. f) DS-GVO.
In order to be able to process your registration for our workshops, we record title, first name, surname, e-mail address, company and type of workshop.
This is done on the legal basis pursuant to Art. 6 (1) sentence 1 lit. b) DS-GVO for the implementation of contractual measures.
4.10 – Video surveillance
The company premises are under video surveillance.
Video surveillance is used to exercise domestic authority, to avoid criminal offences and to preserve evidence in the event of criminal offences.
The legal basis of video surveillance is Art. 6 para. 1 lit. f) DSGVO, §4 BDSG whereby our interests result from the above-mentioned purposes (protection of property, prosecution of criminal offences).
5 – Storage duration
We only store personal data for as long as this is necessary to fulfil the purposes pursued. Afterwards the data will be deleted immediately.
The data from the video surveillance is stored for a maximum of 72 hours.
Please note that due to legal storage periods we may still be obliged to store certain personal data of yours even after a request for deletion or “forgetting”.
The legislator provides for fixed retention periods for personal data, for example in tax or commercial law.
In these cases, the data will be stored by us for these legal purposes and will be blocked or deleted after expiry of the legal retention period in accordance with the legal regulations and the state of the art.
6 – Your rights as data subject
You have various rights regarding your personal data.
If you wish to exercise these rights, please send your request by e-mail or by post to the above address, clearly identifying yourself.
- In particular, you have the following rights:
- Right to correct and, if necessary, supplement your personal data processed by us.
- Right to transparent information about the handling of your personal data processed by us.
- Right of access to your personal data processed by us.
- Right to block or delete and the right to be “forgotten”.
- Right to restrict processing.
- Right to data transferability.
- Right of appeal.
- Right to revoke a consent already granted with effect for the future.
- Right to complain to the competent supervisory authority for data protection.
6.1 – Right to confirmation and information
You have the right to receive information about the processing of your personal data.
You have the right to obtain confirmation from us at any time as to whether personal data concerning you is being processed. If this is the case, you have the right to request from us free of charge information about the personal data stored about you, together with a copy of this data.
6.2 – Right of rectification
You have the right to ask us to correct and, if necessary, complete personal data concerning you. In consideration of the purposes of the processing, you have the right to request the completion of incomplete personal data, also by means of a supplementary declaration.
6.3 – Right of cancellation (“right to be forgotten”)
In accordance with Art. 17 (1) DS-GVO, you have the right to have personal data relating to you deleted immediately, and we are obliged to delete personal data immediately if one of the following reasons applies:
- The personal data are no longer necessary for the purposes for which they were collected or otherwise processed.
- You revoke your consent on which the processing was based pursuant to Art. 6 (1) sentence 1 lit. a) DS-GVO or Art. 9 (2) lit. a) DS-GVO and there is no other legal basis for the processing.
- You object to the processing pursuant to Art. 21 (1) DS-GVO and there are no overriding legitimate reasons for the processing or you object to the processing pursuant to Art. 21 (2) DS-GVO
- Personal data were processed unlawfully.
- The deletion of personal data is necessary to comply with a legal obligation under Union law or the law of the Member States.
- The personal data was collected in relation to information society services offered in accordance with Art. 8 (1) DS-GVO.
6.4 – Right to limit processing
You have the right to request us to restrict processing if one of the following conditions is met:
- The accuracy of the personal data will be disputed by you for a period of time that allows us to verify the accuracy of the personal data.
- The processing is unlawful and you refused to delete the personal data and instead requested that the use of personal data be restricted
- We no longer need the personal data for the purposes of the processing, but you need the data to assert, exercise or defend legal claims; or
- You have lodged an objection to the processing in accordance with Art. 21 (1) DS-GVO, as long as it has not yet been established whether the legitimate reasons of our company outweigh yours.
6.5 – Right to data transferability
You have the right to receive the personal data concerning you that you have provided to us in a structured, common and machine-readable format and you have the right to transfer this data to another responsible person without hindrance from us, provided that
- Processing on the basis of a consent pursuant to Art. 6 (1) sentence 1 lit. a) DS-GVO or Art. 9 (2) lit. a) DS-GVO or
- Is based on a contract pursuant to Art. 6 (1) sentence 1 lit. b) DS-GVO and
- The processing is carried out by means of automated procedures.
When exercising your right to data transfer in accordance with paragraph 1, you have the right to request that the personal data be transferred directly from us to another responsible party, insofar as this is technically feasible.
6.6 – Right of objection
You have the right to object at any time, for reasons arising from your particular situation, to the processing of personal data concerning you which is carried out pursuant to Article 6 (1) sentence 1 letter e) or letter f) of the DPA, unless the processing is necessary for the performance of a task carried out in the public interest.
This also applies to profiling based on these provisions.
We will no longer process personal data unless we can prove compelling reasons for processing worthy of protection that outweigh your interests, rights and freedoms, or unless the processing serves to assert, exercise or defend legal claims.
If personal data are processed by us for the purpose of direct advertising, you have the right to object at any time to the processing of personal data concerning you for the purpose of such advertising.
This also applies to profiling, insofar as it is connected with such direct advertising.
6.7 – Automated decisions including profiling
There is no automated decision making on the basis of the personal data collected.
6.8 – Right to revoke a data protection consent
You have the right to revoke your consent to the processing of personal data at any time with effect for the future.
6.9 – Right of appeal to a supervisory authority
You have the right to complain to a supervisory authority, in particular in the Member State in which you are resident, your place of work or the place where the suspected infringement occurred, if you consider that the processing of personal data concerning you is unlawful.
7 – Data security
We make every effort to ensure the security of your data within the framework of the applicable data protection laws and technical possibilities.
Your personal data will be transmitted encrypted.
This applies to your orders and also to the customer login. We use the coding system SSL (Secure Socket Layer), but we would like to point out that data transmission on the Internet (e.g. communication by e-mail) can have security gaps. A complete protection of data against access by third parties is not possible.
To protect your data, we maintain technical and organisational security measures in accordance with Art. 32 DS-GVO, which we continually adapt to the state of the art.
We do not guarantee that our offer is available at certain times. Disturbances, interruptions or failures cannot be excluded. The data on the server used by us is regularly backed up.
8 – Transfer of data to third parties (“order processing”), data transfer to non-EU countries
As a matter of principle, we only use your personal data within our company.
If and to the extent that we involve third parties in the fulfilment of contracts (e.g. logistics service providers), they will only receive personal data to the extent that the transmission is necessary for the corresponding service.
In the event that we outsource certain parts of data processing (“contract processing”), we contractually oblige contract processors to use personal data only in accordance with the requirements of data protection laws and to ensure the protection of the rights of the data subject.
There is no data transfer to entities or persons outside the EU and no such transfer is planned.
9 – Name and address of the competent supervisory authority
The supervisory authority for data protection responsible for us is:
The Thuringian State Commissioner for Data Protection and Information Security
PO Box 90 04 55
Tel.: 03 61 / 57 311 29 00
Fax: 03 61 / 57 311 29 04
10 – Changes to the data protection regulations
We reserve the right to adapt this data protection declaration if necessary so that it always meets the current legal requirements or to implement changes to our services in the data protection declaration, e.g. when introducing new services. The updated data protection declaration will be published on our website. Subject to the applicable legal provisions, all changes come into force as soon as the updated data protection declaration is published.
11 – Validity
This data protection declaration is valid for an indefinite period of time from the time of its publication..
Announced on: 22 May 2018