Privacy and Data Protection

R. Cegla GmbH & Co. KG
Horresser Berg 1
D-56410 Montabaur
Telephone: +49(0) 2602 9213-0
Fax: +49 (0) 2602 9213-15
Email: info@cegla.de

Thank you for visiting our website. Your privacy and the associated protection of personal data are important to us. We therefore ensure that our business activities comply with the relevant data protection and data security legislation. We want to make sure that you feel safe and secure during your visit. To make sure that this is the case, our Data Protection Officer monitors compliance with the data protection requirements.

We are aware of the importance of the data that you entrust to us and would like to inform you of the following:

  • the purposes for which your (personal) data are collected, processed and used,
  • how we handle and protect your data,
  • who we make the data available to and
  • how you can exercise your rights.

Please read the following information carefully. If you have any questions, please contact our Data Protection officer. The contact details are provided in this privacy policy.

1 Definitions

Privacy is a complex topic. We have provided the following list to help you understand the concepts and make this privacy policy easier to follow.

“Processing” within the meaning of Art. 28 of the General Data Protection Regulation (GDPR) [formerly “data processing” pursuant to Section 11 of the Federal data Protection Act (BDSG)] refers to a service where a service provider (“processor” according to the GDPR) collects, processes and/or uses personal data on behalf of and as instructed by the controller. Before this kind of order is placed with a service provider, we conclude a special contract with the service provider and take additional measures to protect your personal data.

“Cookies” are small text files that are stored on your terminal (e.g. computer or smartphone), which store certain settings and data for exchange with our system via your browser. Cookies normally contains the name of the visited website from which the cookie data were sent, information on the age of the cookie and an alphanumeric identification code. Cookies enable the systems to recognise the user’s device and immediately make any preferences available.

A third party is a natural or legal person or body other than the data subject, controller, processor and persons who, under the direct authority of the controller or processor, are authorised to process personal data, cf. Art. 4, no. 10 GDPR. For example, a third party is not involved, if personal data are forwarded to a service provider as part of processing in accordance with Art. 28 GDPR, or formerly Section 11 BDSG.

IP addresses are numerical sequences that can be assigned to individual IT devices or a group of devices. The IP is used to assign data to the right recipient, similar to a postal address.

“Personal data” means any information relating to an identified or identifiable natural person, in particular the first name and surname, date of birth, email address, residential address as well as bank and payment data, but also health data, cf. Art. 4, no. 1 GDPR (information on an identified or identifiable natural person, formerly Section 3 (1) BDSG).

The “controller” pursuant to Art. 4, no. 7 GDPR (formerly also “controller” in accordance with Section 3 (7) BDSG) is person or body which, alone or jointly with others, determines the purposes and means of the processing of personal data. (in this case: the website operator).

2 Controller

The controller in relation to your personal data on this website is:

R. Cegla GmbH & Co. KG
Horresser Berg 1
D-56410 Montabaur
Telephone: +49(0) 2602 9213-0
Fax: +49 (0) 2602 9213-15
Email: info@cegla.de

If a body other than the aforementioned controller takes over the role of “controller” within the meaning of the General Data Protection Regulation or the BDSG, you will be explicitly and separately informed of this circumstance, unless this is clearly apparent.

3 Use of the Website

We automatically collect and store information in your server log files, which your browser transfers to us. The following information is sent:

  • Browser type/version
  • Operating system used
  • Referrer URL (the previously visited website)
  • Host name of the accessing computer (IP address)
  • Time of the server request

We cannot assign these data to specific persons. These data are not combined with other data sources.

3.1 Cookies

Data are recorded whenever this website is accessed; this also applies for any files that are accessed. We use your IP address or set cookies to collect data, which primarily takes place via your browser, your computer and the subpages you visit. We need these data to make your visit to this website as enjoyable as possible. However, we do not create individual profiles on your usage behaviour. The usage behaviour is always analysed in anonymised form. The website can generally also be used without cookies. However, we cannot rule out a restriction of the use of the website or that it may be less user-friendly. Unfortunately, the use of certain areas, especially the “Shop” and “Cart” areas is not possible without cookies.

Most established browsers allow cookies to be disabled or restricted for certain websites. Browsers generally also have an option which informs you when cookies are set. As a precaution, we make sure that you are informed of the use of cookies when accessing this website.

You can delete cookies from your terminal’s hard drive at any time. However, we once again cannot rule out a restriction of the use of the website or that it may be less user-friendly. Our external Data Protection Officer provides the “Displaying, removing and deleting cookies – Privacy with Firefox, Safari, Chrome, Internet Explorer and co.” guideline on their internet site (caution: external link/s). If you use a different browser, you can also find out about cookies on your browser manufacturer’s websites.

3.2 Communication via email, contact form, telephone or fax

If you contact us via email, fax, telephone or via one of the available contact forms, we use your information to establish contact and to specifically advise you according to your request from your enquiry.
Any further use of your personal data only takes place if this is permitted by law or you have provided your consent.

3.3 Forwarding your data, use of service providers

We collect and use your data in accordance with the legal requirements and only for internal purposes. Your data are not forwarded to third parties, unless we are legally required to do so or you have provided your consent in this respect.

If we use other service providers to provide our offer and grant them access to your data, if necessary, we will naturally have concluded a processing agreement pursuant to Art. 28 of the General Data Protection Regulation (formerly Section 11 BDSG) with our service providers for the processing (processors). We remain responsible for protecting your data. By concluding a contact, the assigned service providers are no longer considered third parties.

4 Ordering/Use of our Online Shop

We collect, process and use personal data if and to the extent that this is necessary to establish, implement or terminate the relevant transaction and/or to set up a customer account. This normally includes payment processing, the completion of the order and the processing of returns.

Our specialists are available to provide advice between Monday and Thursday 8:00 AM to 5:00 PM and on Friday from 8:00 AM to 3:00 PM. You can find our availability under “Customer Information”.

Any further use of your personal data only takes place if this is permitted by law or you have provided your consent.

4.1 Customer account

After registering, we set up access to our stored data (“My Account”) for every customer with password-protected access. This is where you can find out about your personal data that we have stored, including your name, addresses and order history. Treat your access data as strictly confidential, use secure passwords and do not disclose these data to unauthorised third parties. We cannot accept any liability for the misuse of the passwords in use, unless we were responsible for the misuse.

If you wish to delete your user account, please let us know via the contact form or send us an email to cegla-shop.com - Customer Service.

Please note that, in this case, your personal data will be erased, unless this is not possible due to statutory storage requirements and if the data is no longer required for the purpose for which they were stored, or if their storage is prohibited for other legal reasons. In this case, your data will be blocked rather than erased.

4.2 Use of Trusted Shops

If you wish to protect your purchase and press the “Protect for free” button, you consent to the forwarding of your email address to Trusted Shops GmbH. Trusted Shops GmbH uses your email address to register your Trusted Shops membership and to remind you to submit reviews. Further information can be found in the Trusted Shops GmbH privacy policy:
http://www.trustedshops.de/impressum/

4.3 Forwarding your data for payment processing

We collect your payment details exclusively to process the payment. These data are only forwarded to the bank assigned to execute the payment or to the payment service provider you selected in the order process in order to transact the payment.

Please note that, in some circumstances, your selected payment services provider may first perform a credit check to decide whether to provide the relevant method of payment.

4.3.1 Payment via PayPal

When paying via PayPal, we pass your payment details on to PayPal (Europe) S.à r.l. et Cie, S.C.A. (“PayPal”) as part of the payment processing.

PayPal reserves the right to perform a credit check for the credit card via PayPal, direct debit via PayPal or, if offered, “Purchase on account” via PayPal methods of payment. PayPal uses the result of the credit check to decide whether to provide the relevant method of payment. The credit check may contain probability values (score values). If score values flow into the result of the credit check, they are based on a scientifically recognised mathematical and statistical procedure. Address data is also used to calculate the score values.

Additional privacy information, including the credit agencies used, can be found in the PayPal privacy policy:
https://www.paypal.com/de/webapps/mpp/ua/privacy-full

4.3.2 Payment by credit card

When paying by credit card in the online shop, your credit card data is entered in the ordering process. The order data and the credit card data are forwarded to the credit card companies directly involved in the payment process. We essentially do not store your credit card data.

4.4 Duration of the data use/storage

Your personal data are erased if they are not required to meet statutory archiving obligations and if you have requested the erasure of the data, if the data are no longer required to fulfil the purpose for which the data were stored or if storage is not permitted for other statutory reasons.

4.5 Place of data use

Your data are generally processed in Germany. In exceptional cases, information that you transmit to us may be stored on servers within the European Union (EU). As the “controller”, we will notify you if we deviate from the above.

5 Integration of Third Party Services and Content

5.1 General information

Third party content, such as YouTube videos, map material from Google Maps or graphics from other websites, may be integrated into this website. This always requires the providers of this content (“third party providers”) to use the user’s IP address. Without this IP address, they generally could not send the content to the respective user’s browser. The IP address is therefore necessary to display this content. We endeavour to only use content whose providers solely use the IP address to deliver the content. However, we have no influence on whether third party providers store the IP address, e.g. for statistical purposes. We clarify this with users if this is known to us.

5.2 Use of Google Analytics

This website uses the “Google Analytics” web analysis service provided by Google Inc., which stores cookies (small text files) on your computer. These cookies enable an analysis of the use of the website. The information generated about your use of this website by a cookie is generally transmitted to a Google Inc. server in the USA where it is also stored.

Google generally first abbreviates your IP address within the member states of the European Union or in other states party to the agreement on the European Economic Area (EEA). In exceptional cases, your full IP address may be transmitted to a Google Inc. server in the USA and therefore may only be abbreviated in the USA.

Google Inc. uses this information to evaluate your use of the website on behalf of the website operator. Google does not combine these collected data with other data.

If you do not want cookies to be stored, you can prevent this by modifying the settings in your browser. However, please note that, in this case, you may not have access to all of the website’s functions. If you only wish to prevent Google Inc. from processing the data, you can download and install a browser plugin from the following website: http://tools.google.com/dlpage/gaoptout?hl=de

The browser plugin is available for the following browsers: Microsoft Internet Explorer (current version), Google Chrome, Mozilla Firefox, Apple Safari and Opera.

As an alternative to the browser plugin, you can click on this link to prevent Google Analytics from collecting data on this website in future. This stores an opt-out cookie on your terminal. If you delete your cookies, you will be asked to provide your consent once again.

As the operator of this website, we have concluded a separate data processing agreement with Google Analytics Germany.

5.3 Use of YouTube

A YouTube plug-in is integrated into our website. YouTube is a Google Inc. company domiciled in San Bruno/California, USA. A connection to YouTube's servers is established as soon as you visit websites equipped with a YouTube plugin. The YouTube server is informed of the specific part of our website that you visited. If you are also logged in to your YouTube account, you would allow YouTube to assign your surfing behaviour directly to your personal profile. You can prevent this assignment by first logging out of your account. Further information on the collection and use of your data by YouTube is available from the company’s privacy policy at https://policies.google.com/privacy?hl=en.

5.4 Use of Google DoubleClick

Our website uses the Google DoubleClick service. This tool is used to place advertisements if you visit our website. DoubleClick uses information (but not personal data, such as your name or email address) about your visits to this and other websites to place advertisements on products and services of interest to you. Further information on this and how you can prevent this is available at http://www.google.de/policies/technologies/ads/.

6 Data Security/Secure Data Transfer

It is important to note that security gaps may arise when transferring data on the internet (e.g. via email). Seamless protection against access by third parties is therefore not possible. We use technical and organisational measures (TOM) to protect our IT systems (including the website/s) against unwanted access, transmission, input, loss and dissemination as well as destruction and modification by unauthorised parties.

Your personal data are transferred securely over the internet via the Secure Socket Layer coding system (128 bit SSL encryption).

In addition, your IP address as well as the date and time of your visit are logged for the purposes of data security.

7 Rights of Data Subjects/Data Protection Officer

The point of contact to exercise your rights as a data subject is our Data Protection Officer (contact data provided below).

7.1 Right to object

You can object to the use of your information at any time with effect for the future.

7.2 Right to rectification

Moreover, you can request incorrect personal information to be rectified, if you cannot rectify it independently.

7.3 Right of access

Subject to the statutory requirements, as part of your right of access, you can naturally obtain information on the specific data that we have stored about you and the purpose of the storage.

7.4 Right to data portability

You have the right to request the transmission of your data to another body by us.

7.5 Right to lodge a complaint

In accordance with Art. 77 GDPR, you have the right to lodge a complaint with a supervisory authority or a competent body, if you have a reason to lodge such a complaint.

7.6 Data Protection Officer

If you would like to exercise your rights as a data subject as well as your right to erasure or blocking, please contact our Data Protection Officer with adequate identification, preferably in writing:

Brands Consulting | Privacy & Consulting
Mr Christopher Paffhausen
Auf dem Hahn 11
D-56412 Niedererbach (Westerwald)

Homepage: www.brands-consulting.eu
Email: cegla@rlp.brands-consulting.eu

or you can naturally also use the R. Cegla GmbH & Co. KG address to contact the Data Protection Officer:

Data Protection Officer
R. Cegla GmbH & Co. KG
Horresser Berg 1
56410 Montabaur/Germany

8 External Links and Information on the Website

We accept no liability for external links and the resulting access to third-party websites and offers. Moreover, please be aware that the information on this website is exclusively intended to obtain information and that it is not legally binding.

9 Amendments to the Privacy Policy

Advances in technology, legal requirements or even modified processes can also have an impact on this privacy policy. We therefore reserve the right to amend this privacy policy at any time with effect for the future. The current version of the privacy policy is available on this website. Please visit this subpage of the homepage on a regular basis to familiarise yourself with the applicable provisions.

Dated: 18/05/2018