Privacy Policy – CVC.de
§ 1 General Information
Your personal data (e.g. title, name, address, e-mail address, telephone number and, where required for the selected payment method, payment data) is processed by us only in accordance with German and European data protection law.
This privacy policy informs you about the purposes of processing, recipients, legal bases, storage periods, your rights and the controller responsible for processing your data. It applies only to our websites. If you follow links to third-party websites, please refer to the privacy information provided there.
§ 2 Data Processing for Contract Fulfilment and Pre-contractual Enquiries
(1) Purpose of Processing
Personal data provided during the ordering process is processed for the purpose of concluding and performing the contract, including delivery of the goods and payment processing. If you contact us before concluding a contract, for example by e-mail or contact form, we process the data provided in order to answer your enquiry and take pre-contractual measures.
(2) Legal Basis
Art. 6 (1) (b) GDPR.
(3) Categories of Recipients
Payment service providers, shipping service providers, hosting providers, our inventory / merchandise management systems and, where necessary for order fulfilment, suppliers. Shipping service providers receive the data required to deliver the shipment. We do not transmit the customer's e-mail address to shipping service providers for tracking e-mails; tracking information is sent by CVC itself.
(4) Storage Period
Data required for contract processing is stored for as long as necessary for the contractual relationship and the applicable statutory warranty and, where applicable, contractual guarantee periods. Documents subject to commercial or tax retention obligations are retained for the legally prescribed periods. These include, in particular, eight years for accounting vouchers and ten years for books, records, inventories, opening balance sheets and annual financial statements; other business correspondence may be subject to six-year retention periods. Pre-contractual enquiry data is deleted when it is clear that no contract will be concluded, unless another legal basis requires longer storage.
§ 3 PayPal Transactions
If PayPal is selected as a payment method, the data required to process the payment is transmitted to PayPal. PayPal's privacy information is available at:
https://www.paypal.com/de/webapps/mpp/ua/privacy-full
§ 4 Credit Checks via atriga
For certain requests for purchase on account or payment terms, we may carry out a credit check on a case-by-case basis. For this purpose, the personal data required for the check may be transmitted to:
atriga GmbH
Pittlerstr. 47
63225 Langen
Germany
The purpose of the credit check is to assess the economic risk associated with granting purchase on account or payment terms. The legal basis is Art. 6 (1) (f) GDPR. Our legitimate interest is to avoid payment defaults and protect our economic interests.
Further information on data protection at atriga:
https://www.atriga.com/datenschutz/
§ 5 Consent Management / Google Consent Mode
We use a consent banner on our website. Non-essential services, in particular analytics and marketing services, are activated only after you have given the corresponding consent. Your consent can be withdrawn at any time with effect for the future by reopening the cookie settings using the “change cookie settings” function in the footer.
Legal basis: Art. 6 (1) (a) GDPR and, where information is stored on or accessed from your terminal device, Section 25 (1) TDDDG.
§ 6 Web Analytics with Google Analytics 4
Subject to your consent, this website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics is used to statistically analyse the use of our website and to optimise our online offering.
According to Google, for access originating in the EU, IP addresses are used only to derive location information and are then deleted before the traffic is forwarded for further processing.
Legal basis: Art. 6 (1) (a) GDPR and Section 25 (1) TDDDG, based on your consent via the consent banner.
Recipients: Google Ireland Limited and, where applicable, Google LLC (USA). A transfer to the USA may take place. Google LLC participates in the EU-U.S. Data Privacy Framework.
Data retention configured for our Google Analytics property: event data 2 months and user data 14 months. The retention period for user data is reset on new user activity according to our current Analytics setting.
You can withdraw your consent at any time with effect for the future via the “change cookie settings” function in the footer.
§ 7 Google Ads Conversion Tracking and Enhanced Conversions
Subject to your consent, we use Google Ads conversion tracking to measure whether an advertisement has led to an action such as a purchase.
We also use Enhanced Conversions. Data entered during the ordering process, in particular the e-mail address, may be hashed on our website using SHA-256 before being transmitted to Google in hashed form. The purpose is to improve conversion attribution and measurement.
Legal basis: Art. 6 (1) (a) GDPR and Section 25 (1) TDDDG, based on your consent via the consent banner. Recipients are Google Ireland Limited and, where applicable, Google LLC (USA). You can withdraw your consent at any time with effect for the future via the cookie settings.
§ 8 Cookies
We use technically necessary cookies, for example for session management, the shopping cart and the storage of consent settings. These cookies are required for the operation of the website and are used without consent where the legal requirements for this are met.
Non-essential cookies and similar technologies for analytics or marketing are activated only after your consent. Their storage periods depend on the respective service and cookie. You can change your consent choices at any time via the cookie settings in the footer and can also delete cookies using your browser settings.
§ 9 AI-assisted Product Advisor and AI-assisted Image Optimisation
(1) Purpose of Processing
We provide an AI-assisted product advisor on our website. If you use this product advisor, the search or consultation text you enter is evaluated automatically in order to identify suitable products from our range and generate a product recommendation.
Use of the product advisor is voluntary. Please do not enter personal, confidential or sensitive information that is not required for a product recommendation.
(2) Data Processed
When using the product advisor, the following data in particular may be processed:
- the search or consultation text entered by you,
- technical data relating to use of the service, in particular pseudonymised session information used to limit automated or abusive use,
- the product candidates identified by the system and the generated product recommendation.
IP addresses and session identifiers used for internal rate limiting are not stored in plain text but are processed in pseudonymised form.
(3) Use of OpenAI and Anthropic
We use external AI services to provide the product advisor technically.
For semantic analysis of the search request, we use the OpenAI API. The request is processed in order to create a mathematical representation of the search text, which is used to identify suitable products from our range.
To generate the advisory text, we use the Anthropic API. For this purpose, the search request and selected product information are transmitted to Anthropic so that a product recommendation can be generated.
According to the providers, data from commercial API services is not used by default to train their generative models.
(4) Legal Basis
The legal basis for processing is Art. 6 (1) (f) GDPR. Our legitimate interest is to provide visitors to our website with voluntary, automated assistance in selecting suitable products from our range and to ensure the quality, security and functionality of this service.
If use of the product advisor is connected with a specific pre-contractual enquiry, processing may additionally be based on Art. 6 (1) (b) GDPR.
(5) Transfers to Third Countries
In connection with the use of AI services, personal data may be processed outside the European Union or the European Economic Area. Where required, suitable safeguards for such transfers are used in accordance with Chapter V GDPR, in particular adequacy decisions and/or the European Commission's Standard Contractual Clauses.
(6) Storage by CVC
For technical security, error analysis and quality control, search requests and the results generated by the product advisor may be stored temporarily in an internal log.
The log data is not used for advertising purposes and is automatically deleted no later than 30 days after it is recorded.
(7) No Automated Decision with Legal Effect
The AI-assisted product advisor is used solely as non-binding support for product selection. The recommendations generated do not produce legal effects concerning you and do not constitute automated decision-making within the meaning of Art. 22 GDPR.
Binding information on products, prices, availability and technical characteristics is provided on the respective product page or in an individual statement by CVC.
(8) AI-assisted Optimisation of Product Images
Some product images may be technically optimised using AI-assisted image processing. Such optimisation is limited to correcting photographic deficiencies, for example exposure, noise, sharpness or similar image-quality issues. It is not intended to alter the product itself, its technical characteristics, features or scope of delivery.
§ 10 Rights of Data Subjects
If your personal data is processed, you have the rights provided for by the GDPR, in particular the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), withdrawal of consent (Art. 7 (3)) and the right to lodge a complaint with a supervisory authority (Art. 77).
Under Art. 21 GDPR, you may object to processing based on legitimate interests for reasons arising from your particular situation. You may object to processing for direct marketing purposes at any time without giving reasons.
Controller
CVC Volker BierBahnhofstraße 62
66629 Freisen
Germany
Phone: +49 (0)6855 996046
info@cvc.de
