PRIVACY POLICY

1. Legal Basis

1.1. The EU General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG), and the German Telecommunications and Telemedia Data Protection Act (TTDSG) serve to protect personal data. We process your data exclusively on the basis of these legal provisions.

2. General Information

2.1. This privacy policy applies to Signage Multi Profile Deutschland GmbH, Am Gewerbepark 20, D-92670 Windischeschenbach, Commercial Register: HRB 5987, Amtsgericht Weiden i.d.OPf., VAT ID: DE357526858, Managing Director: Ing. Oliver Zwiauer, BA.

2.2. Data controller pursuant to the GDPR: Ing. Oliver Zwiauer, BA, Managing Director, Phone: +49 (0) 151 706 817 36, Email: office@aluprofile-smp.de.

2.3. The appointment of a Data Protection Officer is not legally required, as fewer than 20 persons are regularly involved in the automated processing of personal data within the company.

2.4. We are committed to protecting and safeguarding all personal data entrusted to us. This document provides information on how we use and process your personal data.

3. Purpose Limitation, Legal Basis, Retention Period, and Data Recipients

3.1. We process personal data only for the purposes for which it was collected. Data is only shared where necessary for the performance of a contract, due to legal obligations, or on the basis of your consent.

3.2. Personal data will be deleted or blocked once the purpose of storage ceases to apply, unless statutory retention obligations exist (e.g. commercial and tax law retention periods of up to 10 years pursuant to the German Commercial Code (HGB) and the German Fiscal Code (AO)).

4. Online Shop and Contract Processing

4.1. We operate an online shop. In the course of processing orders, we collect the following personal data: name, address, email address, phone number, payment data, and order information. The legal basis is Art. 6 (1) (b) GDPR (performance of a contract).

4.2. For payment processing, we use the payment service provider Unzer (Vienna). When making a payment, the data required for payment processing is transmitted to Unzer. The legal basis is Art. 6 (1) (b) GDPR.

4.3. For the shipment of your order, we share your delivery address and, where applicable, contact details with the following shipping service providers: Emons GmbH & Co. KG, GO! Overnight, DHL Express, and UPS. The legal basis is Art. 6 (1) (b) GDPR (performance of a contract).

5. Customer Registration

5.1. Our website offers the option to create a customer account. The following data is collected: name, company name, address, email address, phone number, and where applicable, VAT ID. This data is used to manage your customer account and to simplify future orders. The legal basis is Art. 6 (1) (b) GDPR.

5.2. Your customer account can be deleted at any time. Please contact office@aluprofile-smp.de.

6. Contact via Email

6.1. When you contact us by email, the data you provide (name, email address, content of the message) will be processed for the purpose of handling your enquiry. The legal basis is Art. 6 (1) (f) GDPR (legitimate interest) or Art. 6 (1) (b) GDPR, where the enquiry is aimed at entering into a contract.

6.2. Data submitted in the course of contacting us will be stored as long as there is a legitimate interest in its retention (e.g. for follow-up purposes or within the scope of statutory retention obligations). Your data will be deleted upon your request, provided no statutory retention obligations prevent this. Please contact office@aluprofile-smp.de.

7. Newsletter

7.1. Our website offers the option to subscribe to a newsletter. The newsletter is sent via Mailchimp (The Rocket Science Group LLC, Atlanta, USA). The legal basis is your consent pursuant to Art. 6 (1) (a) GDPR.

7.2. Mailchimp is a US-based company. The transfer of data to the USA is based on the EU-US Data Privacy Framework. For further information, please refer to Mailchimp's privacy policy at https://mailchimp.com/legal/privacy/.

7.3. You may unsubscribe from the newsletter at any time. An unsubscribe link is included in every newsletter.

8. Tax Advisor

8.1. In the course of fulfilling our tax and accounting obligations, we share necessary data (e.g. invoice data) with our tax advisor, the firm KRGA, Passau. The legal basis is Art. 6 (1) (c) GDPR (legal obligation).

9. Cookies and Web Analytics

9.1. Our website uses cookies. Technically necessary cookies are used on the basis of Art. 6 (1) (f) GDPR. For all other cookies, we obtain your consent pursuant to Art. 6 (1) (a) GDPR.

9.2. We use Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics uses cookies to enable an analysis of website usage. The information generated is generally transmitted to and stored on a Google server in the USA. The data transfer is based on the EU-US Data Privacy Framework.

9.3. Google Analytics is only activated with your consent (Art. 6 (1) (a) GDPR). You may revoke your consent at any time via the cookie settings on our website. For further information, please refer to Google's privacy policy at https://policies.google.com/privacy.

10. Your Rights

10.1. You have the following rights regarding your personal data: right of access (Art. 15 GDPR), right to rectification (Art. 16 GDPR), right to erasure (Art. 17 GDPR), right to restriction of processing (Art. 18 GDPR), right to data portability (Art. 20 GDPR), and right to object to processing (Art. 21 GDPR).

10.2. If you have given us your consent, you may revoke it at any time with effect for the future.

10.3. You have the right to lodge a complaint with a data protection supervisory authority. The competent supervisory authority is the Bavarian State Office for Data Protection Supervision (BayLDA), Promenade 18, 91522 Ansbach, Germany.

11. Data Security

11.1. Our website uses SSL/TLS encryption for security purposes. We employ technical and organisational measures to protect your data against loss, destruction, access, modification, or dissemination by unauthorised persons.