We appreciate your interest in our online shop. Protecting your privacy is very important to us. Below, we provide detailed information about how we process your personal data.
Table of Contents
-
Access Data and Hosting
- Hosting
-
Data Processing for Contract Performance and Customer Communication
- 2.1 Data Processing for Contract Performance
- 2.2 Customer Account
- Contacting Us
-
Data Processing for Shipping
- Transfer of Data to Shipping Service Providers for Delivery Notifications
-
Data Processing for Payment Processing
- 4.1 Data Processing for Transaction Processing
- 4.2 Data Processing for Fraud Prevention and Optimization of Our Payment Processes
- 4.3 Credit Assessment
- 4.4 Debt Collection Services
-
Advertising by Email and Post
- 5.1 Email Newsletter Subscription
- 5.2 Newsletter Distribution
- 5.3 Requests for Product Reviews by Email
- 5.4 Postal Advertising and Your Right to Object
-
Cookies and Other Technologies
- 6.1 General Information
- 6.2 Consent Manager Platform (CMP)
-
Use of Cookies and Other Technologies
- Use of Google Services
-
Integration of the Trusted Shops Trustbadge / Other Widgets
- 8.1 Data Processing When Integrating the Trustbadge / Other Widgets
- 8.2 Data Processing After Completion of an Order
-
Contact Details and Your Rights
- 9.1 Your Rights
- 9.2 Contact Options
Data Controller
The controller responsible for data processing is:
KWS Küttler GmbH
Gilsatalstraße 42
34599 Neuental/Gilsa
Germany
Email: info@kws-shop.com
Telephone: +49 (0) 66 93 / 91 109 - 0
We appreciate your interest in our website. Protecting your privacy is very important to us. Below, we provide detailed information about how we handle your personal data.
1. Access Data and Hosting
You may visit our website without providing any personal information. Whenever you access our website, the web server automatically stores a so-called server log file, which contains, for example, the name of the requested file, your IP address, the date and time of access, the amount of data transferred, and the requesting internet service provider (access data), and documents the access.
These access data are evaluated solely for the purpose of ensuring the smooth operation of the website and improving our services. This serves to safeguard our legitimate interests in the proper presentation of our website and services, which prevail in the context of a balancing of interests pursuant to Article 6(1)(f) GDPR.
All access data are deleted no later than 30 days after the end of your visit to our website.
Access data are processed only for as long as necessary to achieve the purposes described above.
Hosting
The hosting and presentation services for this website are provided in part by our service providers acting on our behalf.
Unless otherwise stated in this Privacy Policy, all access data and all data collected through forms provided on this website are processed on their servers.
If you have any questions regarding our service providers or the legal basis of our cooperation with them, please contact us using the contact details provided in this Privacy Policy.
2. Data Processing for Contract Performance and Customer Communication
2.1 Data Processing for Contract Performance
For the purpose of fulfilling the contract (including responding to inquiries regarding existing warranty claims, claims arising from contractual performance issues, withdrawal rights, and any statutory update obligations) pursuant to Article 6(1)(b) GDPR, we collect personal data if you voluntarily provide it to us when placing an order.
Mandatory fields are marked as such because the information is required to process your order. Without this information, we are unable to process or ship your order. The specific data collected can be seen in the respective input forms.
Further information regarding the processing of your personal data, particularly the disclosure of data to our service providers for order processing, payment processing, and shipping, can be found in the following sections of this Privacy Policy.
After full performance of the contract, your personal data will be restricted for further processing and deleted after the expiry of the statutory retention periods under tax and commercial law pursuant to Article 6(1)(c) GDPR, unless you have expressly consented to further use of your data pursuant to Article 6(1)(a) GDPR or unless we reserve the right to further process your data where legally permitted and as described in this Privacy Policy.
2.2 Customer Account
If you have given your consent pursuant to Article 6(1)(a) GDPR by choosing to create a customer account, we use your personal data to create and maintain your customer account and to store your data for future orders placed through our website.
You may delete your customer account at any time either by contacting us using the contact details provided in this Privacy Policy or by using the corresponding function within your customer account.
Once your customer account has been deleted, your personal data will also be deleted unless you have expressly consented to further use of your data pursuant to Article 6(1)(a) GDPR or unless we reserve the right to further processing where legally permitted and as described in this Privacy Policy.
Contacting Us
As part of our customer communication, we collect personal data to process your inquiries pursuant to Article 6(1)(b) GDPR whenever you voluntarily provide such data when contacting us (for example via our contact form, live chat, or email).
Mandatory fields are identified accordingly because this information is required to process your inquiry. The specific data collected can be seen in the respective input forms.
After your inquiry has been fully processed, your personal data will be deleted unless you have expressly consented to further use of your data pursuant to Article 6(1)(a) GDPR or unless we reserve the right to further processing where legally permitted and as described in this Privacy Policy.
3. Data Processing for Shipping
For the purpose of performing the contract pursuant to Article 6(1)(b) GDPR, we transfer your personal data to the shipping service provider commissioned with the delivery, insofar as this is necessary for the delivery of the goods you have ordered.
If you have any questions regarding our service providers or the legal basis of our cooperation with them, please contact us using the contact details provided in this Privacy Policy.
Transfer of Data to Shipping Service Providers for Delivery Notifications
If you have expressly consented during or after placing your order, we will transfer your email address and telephone number to the selected shipping service provider pursuant to Article 6(1)(a) GDPR, enabling the provider to contact you before delivery for the purpose of delivery notification or delivery coordination.
You may withdraw your consent at any time by contacting us using the contact details provided in this Privacy Policy.
Following withdrawal of your consent, we will delete the data provided for this purpose unless you have expressly consented to further use of your data or we are legally entitled to continue processing your data as described in this Privacy Policy.
4. Data Processing for Payment Processing
To process payments in our online shop, we cooperate with technical service providers, financial institutions and payment service providers.
4.1 Data Processing for Transaction Processing
Depending on the payment method you select, we transfer the data required for processing the payment transaction either to our technical service providers, the financial institution involved, or the selected payment service provider, insofar as this is necessary to process your payment.
This processing is carried out for the performance of the contract pursuant to Article 6(1)(b) GDPR.
In some cases, payment service providers collect the data required for payment processing themselves, for example via their own websites or through technical integration during the checkout process. In such cases, the privacy policy of the respective payment service provider applies.
Depending on the selected payment method, personal data may be transferred to countries outside the EU/EEA for which the European Commission has adopted an adequacy decision.
Where personal data are transferred to countries outside the EU/EEA for which no adequacy decision exists, such transfers are based on the European Commission's Standard Contractual Clauses (SCCs).
If you have any questions regarding our payment partners or the legal basis of our cooperation with them, please contact us using the contact details provided in this Privacy Policy.
4.2 Fraud Prevention and Optimization of Our Payment Processes
Where appropriate, we provide our service providers with additional information which, together with the data required for payment processing, is used for fraud prevention and the optimization of our payment processes (for example invoicing, handling disputed payments, or accounting support).
This processing is carried out pursuant to Article 6(1)(f) GDPR in order to safeguard our legitimate interests in fraud prevention and efficient payment management.
4.3 Credit Assessment
Where we provide services in advance (for example when purchasing on account), we obtain identity and creditworthiness information from specialized credit reference agencies.
For this purpose, we transfer the personal data required for the credit assessment to:
AKV EUROPA – Alpenländischer Kreditorenverband
Schleifmühlgasse 2
1041 Vienna
Austria
Creditreform Boniversum GmbH
Hammfelddamm 13
41460 Neuss
Germany
This processing is carried out pursuant to Article 6(1)(f) GDPR in order to safeguard our legitimate interests in assessing the creditworthiness and willingness to pay of prospective customers before concluding a contract and thereby preventing payment defaults.
Where applicable, the automated decision-making involved is necessary for entering into the contract pursuant to Article 22(2)(a) GDPR.
Appropriate safeguards are implemented to protect your rights, freedoms and legitimate interests. You have the right to express your point of view and to contest the decision by contacting us using the contact details provided in this Privacy Policy.
Once the contract has been fully performed, the personal data processed for this purpose will be deleted unless you have expressly consented to further processing or we are legally entitled to continue processing your data as described in this Privacy Policy.
4.4 Debt Collection Services
If our payment claim remains unpaid despite a prior reminder, we transfer your personal data to the commissioned debt collection agency:
Creditreform Oldenburg Bolte KG
Neue Donnerschweer Straße 36
26123 Oldenburg
Germany
The outstanding claim will then be collected directly by the debt collection agency.
This processing is necessary for the performance of the contract pursuant to Article 6(1)(b) GDPR and to safeguard our legitimate interests in the effective assertion and enforcement of payment claims pursuant to Article 6(1)(f) GDPR.
5. Advertising by Email and Post
5.1 Email Newsletter Subscription
If you subscribe to our newsletter, we use the data required for this purpose or separately provided by you to send you our regular email newsletter on the basis of your consent pursuant to Article 6(1)(a) GDPR.
You may unsubscribe from the newsletter at any time either by contacting us using the contact details provided below or by clicking the unsubscribe link included in every newsletter.
After unsubscribing, we will delete your email address from our mailing list unless you have expressly consented to further use of your data or we are legally entitled to continue processing your data as described in this Privacy Policy.
5.2 Newsletter Distribution
Our newsletter may also be distributed by service providers acting on our behalf.
If you have any questions regarding these service providers or the legal basis of our cooperation with them, please contact us using the contact details provided in this Privacy Policy.
Our service providers are located and/or use servers in the following countries for which the European Commission has adopted an adequacy decision:
- United States
- Canada
For transfers to the United States, an adequacy decision exists where the respective provider is certified under the applicable framework.
Until certification has been completed, data transfers continue to rely on the European Commission's Standard Contractual Clauses (SCCs).
Our service providers also operate in:
- India
As no adequacy decision exists for India, data transfers are safeguarded by the European Commission's Standard Contractual Clauses (SCCs).
5.3 Requests for Product Reviews by Email
If you have expressly consented during or after placing your order pursuant to Article 6(1)(a) GDPR, we use your email address to invite you to submit a review of your order through the review system we use.
You may withdraw your consent at any time either by contacting us using the contact details provided in this Privacy Policy or by clicking the corresponding link contained in the review request.
After withdrawal of your consent, your email address will be removed from the distribution list unless you have expressly consented to further processing or we are legally entitled to continue processing your data.
Review invitations may be sent by our service provider:
Trusted Shops SE
Subbelrather Straße 15C
50823 Cologne
Germany
As part of this process, we receive status information from Trusted Shops (for example whether the review invitation has been sent and delivered).
This processing is carried out pursuant to Article 6(1)(f) GDPR to safeguard our legitimate interest in obtaining information regarding review invitations in order to optimize our services, as well as the legitimate interest of Trusted Shops in providing this service.
For sending review invitations and processing and displaying review and status information, Trusted Shops and we act as joint controllers pursuant to Article 26 GDPR.
For data protection inquiries and the exercise of your rights, we recommend contacting Trusted Shops directly using the contact details provided in its Privacy Policy. Further information on data protection is available in the Trusted Shops Privacy Policy.
Alternatively, you may always contact us using the contact details provided in this Privacy Policy. If necessary, your request will be forwarded to the other joint controller for further handling.
5.4 Postal Advertising and Your Right to Object
We reserve the right to use your first name, last name and postal address for our own advertising purposes, for example to send you information about interesting offers and our products by post.
This processing is carried out pursuant to Article 6(1)(f) GDPR in order to safeguard our legitimate interest in marketing our products to existing customers.
You may object to the storage and use of your personal data for these purposes at any time by contacting us using the contact details provided in this Privacy Policy.
Upon receipt of your objection, your postal address will be removed from the relevant mailing list unless you have expressly consented to further processing or we are legally entitled to continue processing your data.
Postal advertising is carried out by a service provider acting on our behalf, to whom we disclose the data necessary for this purpose. If you have any questions regarding this service provider or the legal basis of our cooperation, please contact us using the contact details provided in this Privacy Policy.
6. Cookies and Other Technologies
6.1 General Information
To make your visit to our website more attractive and to enable the use of certain functions, we use various technologies on our website, including so-called cookies.
Cookies are small text files that are automatically stored on your device. Some of the cookies we use are deleted automatically at the end of your browser session, i.e. when you close your browser (session cookies). Other cookies remain stored on your device and enable us to recognize your browser the next time you visit our website (persistent cookies). The storage period can be found in your browser's cookie settings.
Protection of Privacy on End Devices
When you use our online services, we employ technologies that are strictly necessary to provide the digital service you have expressly requested.
The storage of information on your device or access to information already stored on your device does not require your consent where such technologies are strictly necessary.
For technologies that are not strictly necessary, the storage of information on your device or access to information already stored on your device requires your prior consent.
Please note that if you do not provide your consent, parts of the website may not function properly. Any consent you have given will remain valid until you change or reset the relevant settings on your device.
Subsequent Data Processing by Cookies and Other Technologies
We use technologies that are essential for providing certain functions of our website. These technologies collect and process information such as:
- IP address
- Date and time of your visit
- Device information
- Browser information
- Information about your use of our website
This processing serves our legitimate interests in ensuring an optimized presentation of our website pursuant to Article 6(1)(f) GDPR.
In addition, we use technologies to comply with legal obligations (for example, to document and demonstrate your consent to the processing of personal data), as well as for web analytics and online marketing.
Further information, including the legal basis for the respective processing activities, can be found in the following sections of this Privacy Policy.
Cookie Settings
You can manage your browser's cookie settings using the following links:
- Microsoft Edge™
- Safari™
- Chrome™
- Firefox™
- Opera™
Where you have given your consent to the use of cookies pursuant to Article 6(1)(a) GDPR, you may withdraw that consent at any time by contacting us using the contact details provided in this Privacy Policy.
Alternatively, you may click the Privacy Settings button available on our website.
Please note that disabling cookies may limit the functionality of our website.
6.2 Consent Manager Platform (CMP)
We use a Consent Manager Platform (CMP) on our website to inform you about the cookies and other technologies used on our website and, where required, to obtain, manage and document your consent to the processing of your personal data by these technologies.
This processing is necessary pursuant to Article 6(1)(c) GDPR in conjunction with Article 7(1) GDPR, as we are legally required to demonstrate that valid consent has been obtained.
The Consent Manager Platform used is provided by:
Papoo Software & Media GmbH
Auguststraße 4
53229 Bonn
Germany
Papoo processes your personal data on our behalf.
After you submit your cookie preferences, the web server stores the following information:
- IP address
- Device information
- Browser information
- Selected language
- Website visited and/or URL
- Date and time of your consent
- Information about your consent preferences
The following technologies are also used to document your consent:
- Cookies
- Log files
Your personal data will be deleted unless you have expressly consented to further processing or unless further processing is legally permitted and described in this Privacy Policy.
7. Use of Cookies and Other Technologies
We use the following cookies and third-party technologies on our website.
Unless otherwise stated for a particular technology, processing is based on your consent pursuant to Article 6(1)(a) GDPR.
The data collected in connection with each technology will be deleted once the respective purpose no longer applies and the technology is no longer used.
You may withdraw your consent at any time with future effect.
Further information about withdrawing your consent can be found in the section "Cookies and Other Technologies."
If you have any questions regarding the providers or the legal basis of our cooperation with them, please contact us using the contact details provided in this Privacy Policy.
Use of Google Services
We use the technologies described below provided by
Google Ireland Limited
Gordon House
Barrow Street
Dublin 4
Ireland
The information automatically collected by Google technologies regarding your use of our website is generally transferred to and stored on servers operated by
Google LLC
1600 Amphitheatre Parkway
Mountain View, CA 94043
USA
Unless otherwise specified for a particular technology, data processing is carried out on the basis of an agreement between joint controllers pursuant to Article 26 GDPR.
Further information about Google's processing of personal data can be found in Google's Privacy Policy.
Our service providers are located and/or use servers in countries outside the European Union and the European Economic Area.
Where the European Commission has adopted an adequacy decision, data transfers are based on that decision.
Where no adequacy decision exists, transfers are safeguarded by the European Commission's Standard Contractual Clauses (SCCs).
Google Ads
For advertising purposes in Google Search results and on third-party websites, a Google Remarketing Cookie is placed when you visit our website.
This cookie automatically enables interest-based advertising by collecting and processing:
- IP address
- Date and time of your visit
- Device information
- Browser information
- Information about your use of our website
A pseudonymous Cookie ID is used to display advertisements based on the pages you have visited.
Further data processing only takes place if you have enabled personalized advertising in your Google Account.
If you are logged into your Google Account while visiting our website, Google may combine your data with Google Analytics information to create and define audience lists for cross-device remarketing.
Google Ads Conversion Tracking
For website analytics and conversion measurement, we use Google Ads Conversion Tracking to record your subsequent use of our website if you have reached it via a Google advertisement.
For this purpose, cookies may be used and the following information may be collected:
- IP address
- Date and time of your visit
- Device information
- Browser information
- Information about your use of our website
- Events defined by us (for example visiting a specific webpage or subscribing to our newsletter)
Pseudonymous usage profiles may be created from this information.
Google Fonts
To ensure a consistent presentation of content on our website, the script code Google Fonts collects information such as:
- IP address
- Date and time of your visit
- Device information
- Browser information
This information is transmitted to Google and subsequently processed by Google.
We have no influence over this subsequent processing.
Google Tag Manager
We use Google Tag Manager to manage various codes and services on our website.
When implementing individual tags, Google may also process personal data such as:
- IP addresses
- Online identifiers (including cookies)
Data processing is carried out on the basis of a Data Processing Agreement concluded with Google.
Google Tag Manager itself enables the integration and management of other services and technologies.
If you have disabled individual tracking services, this setting remains effective for all corresponding tracking tags integrated via Google Tag Manager.
8. Integration of the Trusted Shops Trustbadge / Other Widgets
To display the Trusted Shops services (e.g. Trustmark, collected customer reviews) and to offer Trusted Shops products to buyers after an order has been placed, Trusted Shops widgets are integrated into this website.
This serves to safeguard our legitimate interests in the optimal marketing of our services by enabling secure shopping pursuant to Article 6(1)(f) GDPR.
The Trustbadge and the services advertised through it are provided by:
Trusted Shops SE
Subbelrather Straße 15C
50823 Cologne
Germany
For the purposes described, Trusted Shops and we act as joint controllers pursuant to Article 26 GDPR.
In accordance with Article 26(2) GDPR, we provide the following information regarding the essential contents of this joint controllership agreement.
For data protection inquiries and the exercise of your rights, we recommend contacting Trusted Shops using the contact details provided in its Privacy Policy. Regardless of this, you may also contact either controller at any time. Where necessary, your request will be forwarded to the other controller for further processing.
8.1 Data Processing When Integrating the Trustbadge / Other Widgets
The Trustbadge is provided via a Content Delivery Network (CDN) operated by a service provider located in the United States.
An adequate level of data protection is ensured by an adequacy decision of the European Commission where applicable.
Service providers located in the United States are generally certified under the EU-U.S. Data Privacy Framework (DPF).
Where a provider is not certified under the DPF, data transfers are safeguarded by the European Commission's Standard Contractual Clauses (SCCs).
Whenever the Trustbadge is accessed, the web server automatically stores a server log file containing:
- IP address
- Date and time of access
- Amount of data transferred
- Requesting internet service provider
- Other access data required to document access
Immediately after collection, the IP address is anonymized so that the stored information can no longer be attributed to you personally.
The anonymized data are used in particular for statistical purposes and error analysis.
8.2 Data Processing After Completion of an Order
If you have given your consent, the Trustbadge accesses the following information stored on your device after completion of your order:
- Order value
- Order number
- Purchased product (where applicable)
- Email address
Your email address is converted into a hash value using a one-way cryptographic function.
The hash value, together with the order information, is transmitted to Trusted Shops pursuant to Article 6(1)(a) GDPR.
This serves to verify whether you are already registered for Trusted Shops services.
If you are already registered, further processing is carried out in accordance with the contractual agreement concluded between you and Trusted Shops.
If you are not yet registered or have not consented to automatic recognition via the Trustbadge, you will subsequently have the opportunity to register manually or activate buyer protection under an existing Trusted Shops contract.
Following registration, access to the order information stored on your device (order value, order number and email address) and any further processing are governed by the contractual relationship between you and Trusted Shops pursuant to Article 6(1)(b) GDPR.
This enables completion of your registration for buyer protection, securing your purchase and, where applicable, sending review invitations by email.
If you choose not to register, all transmitted data are automatically deleted by Trusted Shops and can no longer be linked to an identifiable individual.
Trusted Shops uses service providers for hosting, monitoring and logging purposes.
The legal basis for this processing is Article 6(1)(f) GDPR in order to ensure the reliable operation of the service.
Processing may take place in third countries, including:
- United States
- United Kingdom
- Israel
Where applicable, transfers are based on an adequacy decision of the European Commission.
For providers in the United States, transfers generally rely on certification under the EU-U.S. Data Privacy Framework (DPF).
Where no such certification exists, transfers are safeguarded by the European Commission's Standard Contractual Clauses (SCCs).
9. Contact Details and Your Rights
9.1 Your Rights
As a data subject, you have the following rights under the General Data Protection Regulation (GDPR):
- Right of access (Article 15 GDPR) – You have the right to obtain information about the personal data we process concerning you.
- Right to rectification (Article 16 GDPR) – You have the right to request the correction of inaccurate personal data and the completion of incomplete personal data.
-
Right to erasure (Article 17 GDPR) – You have the right to request the deletion of your personal data unless processing remains necessary:
- for exercising the right of freedom of expression and information;
- for compliance with a legal obligation;
- for reasons of public interest; or
- for the establishment, exercise or defence of legal claims.
-
Right to restriction of processing (Article 18 GDPR) – You have the right to request restriction of processing where:
- you contest the accuracy of your pe
