Privacy Policy – CVC.de

§ 1 General Information

Your personal data (e.g. title, name, address, e-mail address, telephone number and, where required for the selected payment method, payment data) is processed by us only in accordance with German and European data protection law.

This privacy policy informs you about the purposes of processing, recipients, legal bases, storage periods, your rights and the controller responsible for processing your data. It applies only to our websites. If you follow links to third-party websites, please refer to the privacy information provided there.

§ 2 Data Processing for Contract Fulfilment and Pre-contractual Enquiries

(1) Purpose of Processing

Personal data provided during the ordering process is processed for the purpose of concluding and performing the contract, including delivery of the goods and payment processing. If you contact us before concluding a contract, for example by e-mail or contact form, we process the data provided in order to answer your enquiry and take pre-contractual measures.

(2) Legal Basis

Art. 6 (1) (b) GDPR.

(3) Categories of Recipients

Payment service providers, shipping service providers, hosting providers, our inventory / merchandise management systems and, where necessary for order fulfilment, suppliers. Shipping service providers receive the data required to deliver the shipment. We do not transmit the customer's e-mail address to shipping service providers for tracking e-mails; tracking information is sent by CVC itself.

(4) Storage Period

Data required for contract processing is stored for as long as necessary for the contractual relationship and the applicable statutory warranty and, where applicable, contractual guarantee periods. Documents subject to commercial or tax retention obligations are retained for the legally prescribed periods. These include, in particular, eight years for accounting vouchers and ten years for books, records, inventories, opening balance sheets and annual financial statements; other business correspondence may be subject to six-year retention periods. Pre-contractual enquiry data is deleted when it is clear that no contract will be concluded, unless another legal basis requires longer storage.

§ 3 PayPal Transactions

If PayPal is selected as a payment method, the data required to process the payment is transmitted to PayPal. PayPal's privacy information is available at:
https://www.paypal.com/de/webapps/mpp/ua/privacy-full

§ 4 Credit Checks via atriga

For certain requests for purchase on account or payment terms, we may carry out a credit check on a case-by-case basis. For this purpose, the personal data required for the check may be transmitted to:

atriga GmbH
Pittlerstr. 47
63225 Langen
Germany

The purpose of the credit check is to assess the economic risk associated with granting purchase on account or payment terms. The legal basis is Art. 6 (1) (f) GDPR. Our legitimate interest is to avoid payment defaults and protect our economic interests.

Further information on data protection at atriga:
https://www.atriga.com/datenschutz/

§ 5 Consent Management / Google Consent Mode

We use a consent banner on our website. Non-essential services, in particular analytics and marketing services, are activated only after you have given the corresponding consent. Your consent can be withdrawn at any time with effect for the future by reopening the cookie settings using the “change cookie settings” function in the footer.

Legal basis: Art. 6 (1) (a) GDPR and, where information is stored on or accessed from your terminal device, Section 25 (1) TDDDG.

§ 6 Web Analytics with Google Analytics 4

Subject to your consent, this website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics is used to statistically analyse the use of our website and to optimise our online offering.

According to Google, for access originating in the EU, IP addresses are used only to derive location information and are then deleted before the traffic is forwarded for further processing.

Legal basis: Art. 6 (1) (a) GDPR and Section 25 (1) TDDDG, based on your consent via the consent banner.

Recipients: Google Ireland Limited and, where applicable, Google LLC (USA). A transfer to the USA may take place. Google LLC participates in the EU-U.S. Data Privacy Framework.

Data retention configured for our Google Analytics property: event data 2 months and user data 14 months. The retention period for user data is reset on new user activity according to our current Analytics setting.

You can withdraw your consent at any time with effect for the future via the “change cookie settings” function in the footer.

§ 7 Google Ads Conversion Tracking and Enhanced Conversions

Subject to your consent, we use Google Ads conversion tracking to measure whether an advertisement has led to an action such as a purchase.

We also use Enhanced Conversions. Data entered during the ordering process, in particular the e-mail address, may be hashed on our website using SHA-256 before being transmitted to Google in hashed form. The purpose is to improve conversion attribution and measurement.

Legal basis: Art. 6 (1) (a) GDPR and Section 25 (1) TDDDG, based on your consent via the consent banner. Recipients are Google Ireland Limited and, where applicable, Google LLC (USA). You can withdraw your consent at any time with effect for the future via the cookie settings.

§ 8 Cookies

We use technically necessary cookies, for example for session management, the shopping cart and the storage of consent settings. These cookies are required for the operation of the website and are used without consent where the legal requirements for this are met.

Non-essential cookies and similar technologies for analytics or marketing are activated only after your consent. Their storage periods depend on the respective service and cookie. You can change your consent choices at any time via the cookie settings in the footer and can also delete cookies using your browser settings.

§ 9 Rights of Data Subjects

If your personal data is processed, you have the rights provided for by the GDPR, in particular the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), withdrawal of consent (Art. 7 (3)) and the right to lodge a complaint with a supervisory authority (Art. 77).

Under Art. 21 GDPR, you may object to processing based on legitimate interests for reasons arising from your particular situation. You may object to processing for direct marketing purposes at any time without giving reasons.

Controller

CVC Volker Bier
Bahnhofstraße 62
66629 Freisen
Germany
Phone: +49 (0)6855 996046
info@cvc.de