The data controller is:
Santos Machine Tools UG
We appreciate your interest in our online shop. Protecting your privacy is very important to us. Below we inform you in detail about the handling of your data.
1. Access data and hosting
You can visit our websites without giving any personal information. Each time a website is accessed, the web server only automatically stores a so-called server log file, which contains, for example, the name of the requested file, your IP address, the date and time of the retrieval, the amount of data transferred and the requesting provider (access data) and documents the retrieval.
This access data is evaluated exclusively for the purpose of ensuring trouble-free operation of the site and the improvement of our offer. This is served in accordance with Art. 6 sec. 1 p. 1 lit. f GDPR of the protection of our overriding legitimate interests in the context of a balancing of interests in a correct presentation of our offer. All access data will be deleted no later than seven days after the end of your page visit.
Hosting services through a third party
As part of our processing on our behalf, a third party provides us with the services for hosting and displaying the website. All data collected in connection with the use of this website or in forms provided for this purpose in the online shop as described below will be processed on its servers. Processing on other servers takes place only within the framework described here.
This service provider is located within a country of the European Union or the European Economic Area.
2. Data collection and use for contract processing, contact ingestion and opening of a customer account
We collect personal data if you voluntarily provide it to us as part of your order or when you contact us (e.g. via contact form or e-mail). Mandatory fields are marked as such, as in these cases we absolutely need the data for the execution of the contract or for the processing of your contact and you cannot send the order or the contact without their indication. The data collected can be seen from the respective input forms. We use the data provided by them in accordance with Art. 6 sec. 1 p. 1 lit. b GDPR for contract processing and processing of your enquiries.
Insofar as you have given your consent in accordance with Art. a GDPR by choosing to open a customer account, we use your data for the purpose of opening the customer account.
After the complete execution of the contract or deletion of your customer account, your data will be restricted for further processing and deleted after expiry of the tax and commercial retention periods, unless you have expressly consented to further use of your data or we reserve the right to use any further data, which is permitted by law and about which we inform you in this declaration. The deletion of your customer account is possible at any time and can be done either by sending a message to the contact option described below or via a function provided for this purpose in the customer account.
3. Data transfer
For the performance of the contract in accordance with Art. b GDPR, we pass on your data to the shipping company commissioned with the delivery, insofar as this is necessary for the delivery of ordered goods. Depending on which payment service provider you select in the ordering process, you canfor the processing of payments, we pass on the payment data collected for this purpose to the credit institution commissioned with the payment and, if applicable, to the payment service provider commissioned by us or to the selected payment service. In some cases, the selected payment service providers also collect this data themselves, insofar as you create an account there. In this case, you must log in to the payment service provider with your access data during the ordering process. In this respect, the data protection declaration of the respective payment service provider applies.
We use payment service providers and shipping service providers based in a country outside the European Union. The transfer of personal data to these companies is only within the scope of the need to fulfil the contract.
The same applies to the transfer of data to our manufacturers or wholesalers in cases where they take over the shipping for us (route business).
Transfer of data to debt collection companies
For the performance of the contract in accordance with Art. b GDPR, we pass on your data to a commissioned debt collection company, insofar as our payment claim has not been settled despite the previous reminder. In this case, the claim is collected directly by the debt collection company. In addition, the transfer serves to safeguard our overriding legitimate interests in the context of a balancing of interests in an effective assertion or enforcement of our payment claim in accordance with Art. 6 sec. 1 p. 1 lit. f GDPR.
4. E-mail newsletter
E-mail advertising with registration for the newsletter
When you subscribe to our newsletter, we use the data required or separately provided by you to regularly provide you with our e-mail newsletter on the basis of your consent in accordance with Art. 6 sec. 1 p. 1 lit. a GDPR.
You can unsubscribe from the newsletter at any time and can be done either by sending a message to the contact option described below or via a dedicated link in the newsletter. After unsubscribing, we will delete your e-mail address from the recipient list, unless you have expressly consented to further use of your data or we reserve the right to use any further data, which is permitted by law and about which we inform you in this declaration.
The newsletter is sent as part of a processing on our behalf by a service provider to whom we pass on your e-mail address for this purpose. This service provider is located within a country of the European Union or the European Economic Area.
In order to make the visit to our website attractive and to enable the use of certain functions, to display suitable products or for market research, we use so-called cookies on various pages. This serves to safeguard our legitimate interests, which are predominant in the context of a balancing of interests, in an optimised presentation of our offer in accordance with Art. 6 sec. 1 p. 1 lit. f GDPR. Cookies are small text files that are automatically stored on your device. Some of the cookies we use are deleted after the end of the browser session, i.e. after closing your browser (so-called session cookies). Other cookies remain on your device and allow us to recognize your browser the next time you visit (persistent cookies). The duration of storage can be found in the overview in the cookie settings of your web browser. You can set your browser so that you are informed about the setting of cookies and decide individually on their acceptance or exclude the acceptance of cookies for certain cases or in general. Each browser differs in the way it manages the cookie settings. This idescribed in the help menu of each browser, which explains how to change your cookie settings. These can be found for the respective browsers under the following links:
6. Online marketing
Our website markets space for third-party ads and advertising networks through Google AdSense. These ads appear to you in various places on this website. Insofar as you give us your consent in accordance with Art. 6 sec. 1 p. 1 lit. a GDPR, the so-called DoubleClick cookie from Google is set as part of the integration of Google AdSense.
This enables the display of interest-oriented advertising by automatically assigning a pseudonymous UserID, with the help of which the interests are determined by visiting these and other websites. After our use of Google AdSense has been used for purpose and the end of our use, the data collected in this connection will be deleted.
Google AdSense is an offer of Google Ireland Limited, a company registered and operated under Irish law with registered office in Gordon House, Barrow Street, Dublin 4, Ireland (www.google.de).
Insofar as information is transferred to and stored on Google's servers in the USA, the American company Google LLC is certified under the EU-US Privacy Shield. A current certificate can be viewed here:https://www.privacyshield.gov/list. As a result of this agreement between the US and the European Commission, the latter has established an appropriate level of data protection for companies certified under the Privacy Shield.
You can revoke your consent at any time with effect for the future by disabling the DoubleClick cookie via thislink. In addition, you can check with theDigital Advertising Alliance about the setting of cookies and make settings for them.
For the purpose of protecting against misuse of our web forms as well as against spam, we use the Google reCAPTCHA service within the framework of some forms on this website. Google reCAPTCHA is an offer of Google Ireland Limited, a company registered and operated under Irish law with registered office in Gordon House, Barrow Street, Dublin 4, Ireland. (www.google.de). By checking a manual input, this service prevents automated software (so-called bots) from performing abusive activities on the website. This is served in accordance with Art. 6 sec. 1 p. 1 lit. f GDPR of the observance of our overriding interests in the context of ainterests in the protection of our website against misuse as well as in a trouble-free presentation of our online presence.
A reading or storage of personal data from the input fields of the respective form does not take place.
Insofar as information is transferred to and stored on Google's servers in the USA, the American company Google LLC is certified under the EU-US Privacy Shield. A current certificate can be viewedhere. As a result of this agreement between the US and the European Commission, the latter has established an appropriate level of data protection for companies certified under the Privacy Shield.
7. Social media
Use of social plugins from Facebook, Twitter, Instagram, Pinterest, Xing, AddThis, using the Shariff solution.
Social buttons from social networks are used on our website.
This serves to safeguard our legitimate interests, which are overriding within the framework of a balancing of interests, in the optimal marketing of our offer in accordance with Art. 6 sec. 1 p. 1 lit. f GDPR. In order to increase the protection of your data when visiting our website, these buttons are not fully integrated as plugins, but only by using an HTML link in the page. This integration ensures that when a page of our website containing such buttons is called up, no connection is made to the servers of the provider of the respective social network.
Click on one of the buttons, open a new window of your browser and go to the page of the respective service provider, where you can (if necessary after entering your login data) press the Like or Share button.
The purpose and scope of the data collection and the further processing and use of the data by the providers on their pages as well as a contact option and your rights in this regard and setting options for the protection of your privacy can be found in the data protection notices of the providers:
Our online presence on Facebook, Twitter, Youtube, Instagram, Pinterest, Xing, LinkedIn
Our presence on social networks and platforms serves to improve, active communication with our customers and prospects. We inform you about our products and ongoing special promotions.
When you visit our online social media presences, your data can be automatically collected and stored for market research and advertising purposes. From this data, so-called user profiles are created using pseudonyms. These can be used, for example, to display advertisements inside and outside the platforms that are presumed to be in your interests. For this purpose, cookies are usually used on your device. These cookies store the visitor's behaviour and the interests of users. This is served in accordance with Art. f. GDPR of the protection of our overriding legitimate interests in an optimized presentation of our offer and effective communication with customers and interested parties. If you are asked by the respective social media platform operators for consent (consent) to the data processing, e.g. with the help of a checkbox, the legal basis of the data processing is Art. a GDPR.
To the extent that the aforementioned social media platforms are headquartered in the USA, the following applies: the US has a recommendation from the European Commission. This goes back to the EU-US Privacy Shield. An up-to-date certificate for the respective company can be viewedhere.
The detailed information on the processing and use of the data by the providers on their pages as well as a contact option and your rights in this regard and setting options for the protection of your privacy, in particular opt-out, can be found in the data protection notices of the providers linked below. If you still need help with this, you can contact us.
The data processing is carried out on the basis of an agreement between joint controllers in accordance with Article 26 GDPR, which you can viewhere.
Further information on data processing when visiting a Facebook fan page (information about Insights data) can be foundhere.
Google/ YouTube: https://policies.google.com/privacy?hl=de
Follow us on Twitter:https://twitter.com/de/privacy
Possibility of opposition (opt-out):
Google/ YouTube: https://adssettings.google.com/authenticated?hl=de
Follow us on Twitter: https://twitter.com/personalization
8. Contact options and your rights
As a person concerned, you have the following rights:
• pursuant to Article 15 GDPR, the right to request information about your personal data processed by us to the extent specified therein;
• pursuant to Article 16 GDPR, the right to request immediate correction of inaccurate or complete your personal data stored by us;
• pursuant to Art. 17 GDPR, the right to request the deletion of your personal data stored by us, unless further processing
- the exercise of the right to freedom of expression and information;
- to fulfil a legal obligation;
- for reasons of public interest, or
- for the assertion, exercise or defence of legal claims
• pursuant to Article 18 GDPR, the right to request the restriction of the processing of your personal data, insofar as
- the accuracy of the data is disputed by you;
- the processing is unlawful, but you refuse to delete it;
- we no longer need the data, but you need it to assert, exercise or defend legal claims, or
- you have objected to the processing in accordance with Article 21 GDPR;
• pursuant to Article 20 GDPR, the right to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request the transfer to another controller;
• the right to complain to a supervisory authority in accordance with Article 77 GDPR. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or our registered office.
If you have any questions about the collection, processing or use of your personal data, information, correction, restriction or deletion of data, as well as revocation of consents or opposition to a specific use of data, please contact us directly via the contact details in our impresSum.
Right to object
After exercising your right to object, we will not process your personal data for these purposes, unless we can prove compelling legitimate grounds for the processing that outweigh your interests, rights and freedoms, or if the processing serves to assert, exercise or defend legal claims.
This does not apply if the processing is carried out for the purposes of direct marketing. We will not process your personal data for this purpose.