Privacy Policy

The controller responsible for data processing is:
Prowebco GmbH
Große Str. 5
27374 Visselhövede

Email: info@prowebco.de
Telephone: +49 4262 9597520

Thank you for your interest in our online shop. Protecting your privacy is very important to us. Below, we provide detailed information about how we handle your data.

1. Access data and hosting

You can visit our website without providing any personal information. Whenever a page is accessed, the web server automatically stores only a server log file, which contains information such as the name of the requested file, your IP address, the date and time of access, the volume of data transferred and the requesting provider (access data), and documents the access. This access data is evaluated exclusively to ensure the smooth operation of the website and to improve our services. In accordance with Article 6(1), first sentence, point (f) GDPR, this serves to safeguard our legitimate interests in the proper presentation of our services, which prevail following a balancing of interests. All access data is deleted no later than thirty days after the end of your visit to the website.

 Hosting

Some of the services for hosting and displaying the website are provided by our service providers, who process data on our behalf. Unless otherwise explained in this Privacy Policy, all access data and all data collected through the designated forms on this website are processed on their servers. If you have any questions about our service providers or the basis of our cooperation with them, please contact us using the contact details provided in this Privacy Policy.

2. Data processing for contract performance and communication

2.1 Data processing for contract performance

For the purpose of performing the contract (including enquiries concerning and the handling of any existing claims relating to defects or failures in performance, as well as any statutory obligations to provide updates), we collect personal data in accordance with Article 6(1), first sentence, point (b) GDPR when you voluntarily provide it to us as part of your order. Mandatory fields are marked as such because, in these cases, we require the data to perform the contract and cannot dispatch your order without it. The data collected is apparent from the respective input forms.

Further information about the processing of your data, particularly its disclosure to our service providers for order processing, payment processing and shipping, can be found in the following sections of this Privacy Policy. Once the contract has been fully performed, further processing of your data will be restricted, and your data will be deleted after the retention periods required under tax and commercial law have expired, in accordance with Article 6(1), first sentence, point (c) GDPR, unless you have expressly consented to further use of your data in accordance with Article 6(1), first sentence, point (a) GDPR or we reserve the right to use your data beyond this to the extent permitted by law and as explained in this Privacy Policy.

2.2 Customer account

If you have given your consent in accordance with Article 6(1), first sentence, point (a) GDPR by choosing to open a customer account, we use your data to create your customer account and to store your data for future orders on our website. You can delete your customer account at any time, either by sending a message using the contact details provided in this Privacy Policy or by using the designated function in your customer account. Once your customer account has been deleted, your data will be deleted unless you have expressly consented to further use of your data in accordance with Article 6(1), first sentence, point (a) GDPR or we reserve the right to use your data beyond this to the extent permitted by law and as explained in this Privacy Policy.

2.3 Contacting us

As part of our customer communications, we collect personal data to handle your enquiries in accordance with Article 6(1), first sentence, point (b) GDPR when you voluntarily provide it to us when contacting us, for example via a contact form or email. Mandatory fields are marked as such because, in these cases, we require the data to handle your enquiry. The data collected is apparent from the respective input forms. Once your enquiry has been fully handled, your data will be deleted unless you have expressly consented to further use of your data in accordance with Article 6(1), first sentence, point (a) GDPR or we reserve the right to use your data beyond this to the extent permitted by law and as explained in this Privacy Policy.

3. Data processing for shipping

To perform the contract in accordance with Article 6(1), first sentence, point (b) GDPR, we disclose your data to the shipping service provider commissioned to deliver the goods, insofar as this is necessary for the delivery of the goods ordered.

The same applies to the disclosure of data to our manufacturers or wholesalers in cases where they handle shipping on our behalf (drop shipping). They are considered shipping service providers for the purposes of this Privacy Policy.

Disclosure of data to shipping service providers for delivery notifications

If you have given us your express consent during or after placing your order, we disclose your email address and telephone number to the selected shipping service provider on the basis of that consent in accordance with Article 6(1), first sentence, point (a) GDPR, so that the provider can contact you before delivery to announce or coordinate the delivery.
You may withdraw your consent at any time by sending a message using the contact details provided in this Privacy Policy or by contacting the shipping service provider directly at the address listed below. After you withdraw your consent, we will delete the data you provided for this purpose unless you have expressly consented to further use of your data or we reserve the right to use your data beyond this to the extent permitted by law and as explained in this Privacy Policy.

General Logistics Systems Germany GmbH & Co. OHG
GLS Germany-Straße 1 - 7
DE-36286 Neuenstein
Germany

4. Data processing for payment processing

When processing payments in our online shop, we work with the following partners: technical service providers, credit institutions and payment service providers.

4.1 Data processing for transaction processing

Depending on the payment method selected, we disclose the data required to process the payment transaction to our technical service providers, who process data on our behalf, to the commissioned credit institutions or to the selected payment service provider, insofar as this is necessary to process the payment. This serves to perform the contract in accordance with Article 6(1), first sentence, point (b) GDPR. In some cases, payment service providers collect the data required to process the payment themselves, for example on their own website or through a technical integration in the ordering process. In such cases, the privacy policy of the respective payment service provider applies.
If you have any questions about our payment processing partners or the basis of our cooperation with them, please contact us using the contact details provided in this Privacy Policy.

4.2 Data processing for fraud prevention and the optimisation of our payment processes

Where applicable, we provide our service providers with additional data, which they use together with the data required to process the payment, acting as our processors, for fraud prevention and to optimise our payment processes (for example, invoicing, handling disputed payments and providing accounting support). In accordance with Article 6(1), first sentence, point (f) GDPR, this serves to safeguard our legitimate interests in protecting ourselves against fraud and managing payments efficiently, which prevail following a balancing of interests.

4.3 Identity and creditworthiness checks when selecting Klarna payment services

Klarna direct debit, payment on account via Klarna, Klarna instalment payments
If you choose the payment services of Klarna Bank AB (publ), Sveavägen 46, 111 34 Stockholm, Sweden (hereinafter “Klarna”), we ask for your consent in accordance with Article 6(1), first sentence, point (a) GDPR to transmit to Klarna the data required for payment processing and an identity and creditworthiness check. In Germany, the credit reference agencies listed in Klarna's Privacy Policy may be used for identity and creditworthiness checks. Klarna uses the information obtained about the statistical probability of payment default to make a balanced decision about establishing, performing or terminating the contractual relationship. You may withdraw your consent at any time by sending a message using the contact details provided in this Privacy Policy. This may mean that we can no longer offer you certain payment options. You may also withdraw your consent to this use of your personal data directly with Klarna at any time.

4.4 Identity and creditworthiness checks when selecting payment on account via PayPal and Ratepay

If you choose payment on account (offered through Ratepay GmbH, Franklinstraße 28-29, 10587 Berlin (hereinafter “Ratepay”), and PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, 2449 Luxembourg (hereinafter “PayPal”)), we ask for your consent in accordance with Article 6(1), first sentence, point (a) GDPR to transmit to Ratepay the data required for payment processing and an identity and creditworthiness check. In Germany, the credit reference agencies listed in Ratepay's Privacy Policy may be used for identity and creditworthiness checks. Ratepay uses the information obtained about the statistical probability of payment default to make a balanced decision about establishing, performing or terminating the contractual relationship. You may withdraw your consent at any time by sending a message using the contact details provided in this Privacy Policy. This may mean that we can no longer offer you certain payment options. Additional information about data protection at PayPal can be found here.

5. Email advertising

 Email newsletter with subscription

If you subscribe to our newsletter, we use the data required for this purpose or separately provided by you to send you our email newsletter regularly on the basis of your consent in accordance with Article 6(1), first sentence, point (a) GDPR. You may unsubscribe from the newsletter at any time, either by sending a message using the contact details provided below or by using the designated link in the newsletter. After you unsubscribe, we will delete your email address from the mailing list unless you have expressly consented to further use of your data in accordance with Article 6(1), first sentence, point (a) GDPR or we reserve the right to use your data beyond this to the extent permitted by law and as explained in this Privacy Policy.

Our service providers are based in and/or use servers in Israel. The European Commission has adopted a decision finding that Israel provides an adequate level of data protection. Our service providers also use servers in the USA, South Korea and Taiwan, as well as in other countries outside the EU and the EEA for which the European Commission has not adopted an adequacy decision. Our cooperation with them is based on the European Commission's standard contractual clauses.

6. Cookies and other technologies

 General information

To make visiting our website appealing and enable the use of certain functions, we use technologies, including cookies, on various pages. Cookies are small text files that are automatically stored on your device. Some of the cookies we use are deleted at the end of your browser session, i.e. when you close your browser (session cookies). Other cookies remain on your device and allow us to recognise your browser when you next visit (persistent cookies).

Privacy protection on devices
When you use our online services, we use strictly necessary technologies to provide the telemedia service you have expressly requested. In this respect, storing information on your device or accessing information already stored on your device does not require your consent.

For functions that are not strictly necessary, storing information on your device or accessing information already stored on your device requires your consent. Please note that if you do not give your consent, some parts of the website may not be fully usable. Any consent you have given remains valid until you adjust or reset the relevant settings on your device.

Any subsequent data processing through cookies and other technologies
We use technologies that are essential for the use of certain functions of our website, such as the shopping cart function. These technologies collect and process your IP address, the time of your visit, device and browser information, and information about your use of our website, such as information about the contents of your shopping cart. In accordance with Article 6(1), first sentence, point (f) GDPR, this serves our legitimate interests in the optimised presentation of our services, which prevail following a balancing of interests.

We also use technologies to fulfil the legal obligations to which we are subject, for example to provide evidence of consent to the processing of your personal data, as well as for web analytics and online marketing. Further information, including the respective legal basis for data processing, can be found in the following sections of this Privacy Policy.

You can find the cookie settings for your browser at the following links: Microsoft Edge™ / Safari™ / Chrome™ / Firefox™ / Opera™

If you have consented to the use of these technologies in accordance with Article 6(1), first sentence, point (a) GDPR, you may withdraw your consent at any time by sending a message using the contact details provided in this Privacy Policy.

7. Use of cookies and other technologies

If you have given your consent in accordance with Article 6(1), first sentence, point (a) GDPR, we use the following third-party cookies and other technologies on our website. The data collected in this context will be deleted once the purpose no longer applies and we stop using the respective technology. You may withdraw your consent at any time with effect for the future. Further information about your withdrawal options can be found in the section “Cookies and other technologies”. Further information, including the basis of our cooperation with the individual providers, can be found under the respective technologies. If you have any questions about the providers or the basis of our cooperation with them, please contact us using the contact details provided in this Privacy Policy.

7.1 Use of Google services

We use the technologies described below provided by Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). The information automatically collected by Google's technologies about your use of our website is generally transmitted to a server operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, and stored there. The European Commission has not adopted an adequacy decision for the USA. Our cooperation with them is based on the European Commission's standard contractual clauses.  If your IP address is collected through Google's technologies, it is shortened before being stored on Google's servers through the activation of IP anonymisation. Only in exceptional cases is the full IP address transmitted to a Google server and shortened there. Unless otherwise specified for the individual technologies, data processing takes place on the basis of a joint controller agreement concluded for the respective technology in accordance with Article 26 GDPR. Further information about data processing by Google can be found in Google's Privacy Policy.

 Google Analytics

For website analytics, Google Analytics automatically collects and stores data (IP address, time of visit, device and browser information, and information about your use of our website), from which usage profiles are created using pseudonyms. Cookies may be used for this purpose. Your IP address is generally not combined with other data held by Google. Data processing takes place on the basis of a data processing agreement with Google.

To optimise the marketing of our website, we have enabled the data sharing settings for “Google products and services”. This allows Google to access the data collected and processed by Google Analytics and subsequently use it to improve Google services. Data is shared with Google under these data sharing settings on the basis of an additional agreement between controllers. We have no influence over Google's subsequent processing of the data.

To optimise the marketing of our website, we use the User-ID feature. This feature allows us to assign a unique, permanent ID to your interaction data from one or more sessions on our online platforms, enabling us to analyse your user behaviour across devices and sessions.

 Google Ads

For website analytics and event tracking, we use Google Ads Conversion Tracking to measure your subsequent usage behaviour if you have reached our website through a Google Ads advertisement. Cookies may be used for this purpose, and data may be collected (IP address, time of visit, device and browser information, and information about your use of our website based on events defined by us, such as visiting a page or subscribing to a newsletter), from which usage profiles are created using pseudonyms.

 Google Tag Manager

Google Tag Manager allows us to manage various codes and services on our website. When implementing individual tags, Google may also process personal data, such as IP addresses and online identifiers, including cookies. Data processing takes place on the basis of a data processing agreement with Google.

Google Tag Manager enables the integration of various services and technologies.
If you do not wish to use individual tracking services and have therefore disabled them, they will remain disabled for all relevant tracking tags integrated through Google Tag Manager.

 YouTube video plugin

To integrate third-party content, the YouTube video plugin, used by us in enhanced privacy mode, collects data (IP address, time of visit, device and browser information), transmits it to Google and allows Google to process it subsequently only when you play a video.

7.2 Use of Facebook services

 Use of the Facebook Pixel

We use the Facebook Pixel in connection with the technologies described below provided by Meta Platforms Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland (“Facebook (by Meta)” or “Meta Platforms Ireland”). The Facebook Pixel automatically collects and stores data (IP address, time of visit, device and browser information, and information about your use of our website based on events defined by us, such as visiting a page or subscribing to a newsletter), from which usage profiles are created using pseudonyms. As part of advanced matching, information that can identify individuals, such as names, email addresses and telephone numbers, is also collected and stored in hashed form for matching purposes. For this purpose, the Facebook Pixel automatically sets a cookie when you visit our website, allowing your browser to be recognised automatically through a pseudonymous cookie ID when you visit other websites. Facebook (by Meta) will combine this information with other data from your Facebook account and use it to compile reports on website activity and provide other services related to website use, particularly personalised and audience-based advertising.
The information automatically collected by Facebook (by Meta) technologies about your use of our website is generally transmitted to a server operated by Meta Platforms, Inc., 1 Hacker Way, Menlo Park, California 94025, USA, and stored there. The European Commission has not adopted an adequacy decision for the USA. Where the transfer of data to the USA falls within our responsibility, our cooperation is based on the European Commission's standard contractual clauses. Further information about data processing by Facebook can be found in the Privacy Policy of Facebook (by Meta).

 Facebook Ads (Ads Manager)

We use Facebook Ads to advertise this website on Facebook (by Meta) and other platforms. We determine the parameters of each advertising campaign. Facebook (by Meta) is responsible for the precise implementation, particularly the decision about which advertisements are displayed to individual users. Unless otherwise specified for the individual technologies, data processing takes place on the basis of a joint controller agreement in accordance with Article 26 GDPR. Joint controllership is limited to the collection of data and its transmission to Meta Platforms Ireland. Subsequent data processing by Meta Platforms Ireland is not covered by this arrangement.

Based on the statistics about visitor activity on our website created using the Facebook Pixel, we use Facebook Custom Audience to carry out audience-based advertising on Facebook (by Meta) by defining the characteristics of the respective target audience. Facebook (by Meta) acts as our processor for the advanced matching carried out to determine the respective target audience (see above).

Based on the pseudonymous cookie ID set by the Facebook Pixel and the data collected about your usage behaviour on our website, we use Facebook Pixel Remarketing to carry out personalised advertising.

We use Facebook Pixel Conversions for web analytics and event tracking to measure your subsequent usage behaviour if you have reached our website through a Facebook Ads advertisement. Data processing takes place on the basis of a data processing agreement with Facebook (by Meta).

8. Integration of the Trusted Shops Trustbadge and other widgets

If you have given your consent in accordance with Article 6(1), first sentence, point (a) GDPR, Trusted Shops widgets are integrated into this website to display Trusted Shops services, such as the trustmark and collected reviews, and to offer Trusted Shops products to buyers after an order.

The Trustbadge and the services advertised through it are provided by Trusted Shops AG, Subbelrather Str. 15C, 50823 Köln (“Trusted Shops”), with whom we act as joint controllers under data protection law in accordance with Article 26 GDPR. Below, as part of this Privacy Policy, we inform you of the essential contents of the agreement in accordance with Article 26(2) GDPR.

Within the framework of the joint controllership between us and Trusted Shops AG, please preferably contact Trusted Shops with any data protection questions or to exercise your rights, using the contact details provided in the data protection information. Regardless of this, you may always contact the controller of your choice. If necessary, your enquiry will then be forwarded to the other controller for a response.

8.1 Data processing when integrating the Trustbadge and other widgets

The Trustbadge is provided by a US-based CDN provider (content delivery network). An adequate level of data protection is ensured through standard contractual clauses and additional contractual measures.

When the Trustbadge is accessed, the web server automatically stores a server log file that also contains your IP address, the date and time of access, the volume of data transferred and the requesting provider (access data), and documents the access. The IP address is anonymised immediately after collection so that the stored data cannot be linked to you personally. The anonymised data is used primarily for statistical purposes and error analysis.

8.2 Data processing after completion of an order

If you have given your consent, the Trustbadge accesses order information stored on your device (order total, order number and, where applicable, the purchased product) and your email address after you complete your order, and your email address is hashed using a cryptographic one-way function. The hash value is then transmitted to Trusted Shops together with the order information in accordance with Article 6(1), first sentence, point (a) GDPR.
This is used to check whether you are already registered for Trusted Shops services. If this is the case, further processing takes place in accordance with the contractual agreement between you and Trusted Shops. If you are not yet registered for the services or do not consent to automatic recognition through the Trustbadge, you will subsequently have the opportunity to register manually to use the services or to arrange protection under any existing user agreement you may have.

For this purpose, after you complete your order, the Trustbadge accesses the following information stored on the device you are using: order total, order number and email address. This is necessary so that we can offer you Buyer Protection. Data is transmitted to Trusted Shops only when you actively choose to take out Buyer Protection by clicking the appropriately labelled button in the Trustcard. If you decide to use the services, further processing is governed by the contractual agreement with Trusted Shops in accordance with Article 6(1), point (b) GDPR, in order to complete your registration for Buyer Protection, protect your order and, where applicable, subsequently send you review invitations by email.

Trusted Shops uses service providers for hosting, monitoring and logging. The legal basis is Article 6(1), point (f) GDPR for the purpose of ensuring smooth operation. Processing may take place in third countries (the USA and Israel). An adequate level of data protection is ensured in the USA through standard contractual clauses and additional contractual measures, and in Israel through an adequacy decision. Further information can be found here.

9. Social media

 Our online presence on Facebook (by Meta), Instagram (by Meta), YouTube and Pinterest

If you have given your consent to the respective social media operator in accordance with Article 6(1), first sentence, point (a) GDPR, your data is automatically collected and stored for market research and advertising purposes when you visit our online profiles on the social media platforms listed above, and usage profiles are created from this data using pseudonyms. These profiles may be used, for example, to display advertisements within and outside the platforms that are presumed to match your interests. Cookies are generally used for this purpose. For detailed information about the processing and use of data by the respective social media operator, contact details, your related rights and the settings available to protect your privacy, please refer to the providers' privacy policies linked below. If you still need assistance, you may contact us.

Facebook (by Meta) is provided by Meta Platforms Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland (“Meta Platforms Ireland”). The information automatically collected by Meta Platforms Ireland about your use of our online presence on Facebook (by Meta) is generally transmitted to a server operated by Meta Platforms, Inc., 1 Hacker Way, Menlo Park, California 94025, USA, and stored there. The European Commission has not adopted an adequacy decision for the USA. Our cooperation with them is based on the European Commission's standard contractual clauses.  Data processing when visiting a Facebook (by Meta) fan page takes place on the basis of a joint controller agreement in accordance with Article 26 GDPR. Further information (information about Insights data) can be found here.

Instagram (by Meta) is provided by Meta Platforms Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland (“Meta Platforms Ireland”). The information automatically collected by Meta Platforms Ireland about your use of our online presence on Instagram is generally transmitted to a server operated by Meta Platforms, Inc., 1 Hacker Way, Menlo Park, California 94025, USA, and stored there. The European Commission has not adopted an adequacy decision for the USA. Our cooperation with them is based on the European Commission's standard contractual clauses.  Data processing when visiting an Instagram (by Meta) fan page takes place on the basis of a joint controller agreement in accordance with Article 26 GDPR. Further information (information about Insights data) can be found here.

YouTube is provided by Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). The information automatically collected by Google about your use of our online presence on YouTube is generally transmitted to a server operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, and stored there. The European Commission has not adopted an adequacy decision for the USA. Our cooperation with them is based on the European Commission's standard contractual clauses. 

Pinterest is provided by Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland (“Pinterest”). The information automatically collected by Pinterest about your use of our online presence on Pinterest is generally transmitted to a server operated by Pinterest, Inc., 505 Brannan St., San Francisco, CA 94107, USA, and stored there. The European Commission has not adopted an adequacy decision for the USA. Our cooperation with them is based on the European Commission's standard contractual clauses. 

10. Contact details and your rights

10.1 Your rights

As a data subject, you have the following rights:

• Under Article 15 GDPR, the right to request access to the personal data we process about you, to the extent specified in that Article;
• Under Article 16 GDPR, the right to request the rectification of inaccurate personal data or the completion of incomplete personal data stored by us without undue delay;
• Under Article 17 GDPR, the right to request the erasure of your personal data stored by us, unless further processing is necessary
  • to exercise the right to freedom of expression and information;
  • to comply with a legal obligation;
  • for reasons of public interest; or
  • for the establishment, exercise or defence of legal claims;
• Under Article 18 GDPR, the right to request restriction of the processing of your personal data where
  • you contest the accuracy of the data;
  • the processing is unlawful, but you oppose its erasure;
  • we no longer need the data, but you require it for the establishment, exercise or defence of legal claims; or
  • you have objected to processing under Article 21 GDPR;
• Under Article 20 GDPR, the right to receive the personal data you have provided to us in a structured, commonly used and machine-readable format, or to request its transmission to another controller;
• Under Article 77 GDPR, the right to lodge a complaint with a supervisory authority. As a rule, you may contact the supervisory authority at your habitual residence, place of work or the location of our registered office.

10.2 Contact details

If you have any questions about the collection, processing or use of your personal data, wish to request access to, rectification, restriction or erasure of data, withdraw any consent you have given or object to a particular use of your data, please contact us directly using the contact details in our legal notice.

Privacy Policy created using the Trusted Shops legal text generator