Privacy Policy

1. SCOPE OF APPLICATION

This Privacy Policy applies to the websites of DR.SCHNELL GmbH & Co. KGaA under the domains www.dr-schnell.com, www.campus.dr-schnell.com, and www.servicecockpit.dr-schnell.com. It does not apply to the websites of other service providers that are merely referenced via a link.

2. CONTACT INFORMATION FOR THE DATA CONTROLLER AND THE DATA PROTECTION OFFICER

3. HOW WE PROCESS YOUR DATA

3.1 USE OF COOKIES AND SIMILAR TECHNOLOGIES

For information on the processing of personal data through the use of cookies and similar technologies on our website, please refer to our Cookie Policy, which is an integral part of this statement.

3.2 ACCESS TO WEB PAGES AND FILES ON OUR WEBSITE

Every time a user accesses a page on our website or downloads a file, data regarding this activity is automatically stored and processed in a log file on our web server.

Specifically, the following data is stored for each access/request:

• IP address of the requesting computer;
• Date and time of the request;
• Page accessed/Name of the file accessed;
• amount of data transferred;
• A message indicating whether the access/retrieval was successful;
• The Internet address from which the page or data was accessed or the desired function was initiated;
• Web browser used.

The data mentioned above, including the IP address, is stored for the duration of the communication process to enable the use of our website. In addition, the IP address is stored for a short period of time to ensure IT security, in particular to protect our IT systems from misuse and to defend against attacks.

3.3 CONTACT FORM / CONTACT BY E-MAIL

You can contact us directly by filling out the contact form on our website (https://www.dr-schnell.com/kontakt).

Your data (identification and contact information) will be used exclusively to contact you, process your inquiry, and respond to it.
The legal basis for this processing is our legitimate interest in responding to your inquiry, complaint, or concern, in accordance with Article 6(1)(f) of the GDPR.

Your data will be stored for 3 years from the date your request is processed. After this period expires, your personal data will be deleted.

3.4 NEWSLETTER SUBSCRIPTION

You have the option to subscribe to our newsletter to receive information about new products, promotional offers, or events.
We use the “Brevo” service provided by Sendinblue GmbH, Köpenicker Str. 126, 10179 Berlin (Sendinblue), to send our newsletters. For this purpose, we share the following personal data with Sendinblue: email address, last name, first name.
After subscribing to the newsletter, you will receive a confirmation email. You will only be added to the newsletter mailing list after clicking the link contained in that email (double opt-in procedure).
Sendinblue is the recipient of your personal data and acts as our contracted data processor with regard to the distribution of our newsletters.
The legal basis for this processing is your consent pursuant to Article 6(1)(a) of the GDPR. You have the right to withdraw your consent at any time and to stop receiving the newsletters. All email messages contain a link that allows you to unsubscribe from our mailing list. You may also withdraw your consent using the contact options provided. Withdrawing your consent does not affect the lawfulness of the processing that has taken place up to that point.
Your data will be processed as long as the corresponding consent is in effect. Beyond that, it will be deleted upon termination of the contract between us and Sendinblue, unless legal requirements mandate further storage.

3.5 Personalized Product Recommendations and Updates on Our Platforms via Email

As part of our services, we present information and offers from DR.SCHNELL as part of our contractual obligations. When selecting product recommendations, we primarily use data from your previous orders in compliance with legal requirements. You will therefore receive a limited number of product recommendations, surveys, and exclusive offers from us, even if you have not subscribed to a newsletter. The legal basis for this processing is our legitimate interest pursuant to Article 6(1)(f) of the GDPR. You have the right to object to this processing at any time.

3.6 ONLINE STORE

3.6.1 CUSTOMER ACCOUNT (CREATION)

In general, you can visit our website without registering. However, to use certain services, you must register for a personal customer account. You can create a customer account HERE.

After registering, you will receive an automatic confirmation email from us at the email address you provided. Once you click “Complete Registration,” you will be able to access your customer account. The following personal data is collected to create a customer account:

• Identification information (title, last name, first name);
• Contact information (email address, mailing address, and phone number);
• Company Information.

The legal basis for the processing is your consent pursuant to Article 6(1)(a) of the GDPR. You have the right to withdraw your consent and delete your customer account at any time. To delete your customer account, please contact info@dr-schnell.de, call our Customer Service Center at +49 89 3506080, or fill out the contact form available at https://www.dr-schnell.com/contact

3.6.2 CUSTOMER ACCOUNT

In your account, your personal data may be processed as part of the following processing activities:

• Customer Account Management
• Orders

3.6.2.1 MANAGING THE CUSTOMER ACCOUNT

In your customer account, you can change the information about the company and the contact person. From a data protection perspective, however, only the contact person’s information (last name, first name, email address) is considered personal data. Editing the customer account by the user is voluntary and is based on the user’s consent. The personal data will be stored until the information is updated or the customer account is deleted. To make changes, please contact our Customer Service Center at +49 89 3506080 or fill out the contact form available at https://www.dr-schnell.com/kontakt

3.7 SERVICE COCKPIT (ACCOUNT CREATION)

To use the SERVICECOCKPIT, you must create an account. As part of the account creation process, we collect the following personal data from you:

• Contact Information (Email Addresses)
• Company Information

The legal basis for the processing is your consent pursuant to Article 6(1)(a) of the GDPR. You have the right to withdraw your consent at any time and to delete your Service Cockpit account. To delete your Service Cockpit account, please contact info@dr-schnell.de, call our Customer Service Center at +49 89 3506080, or fill out the contact form available at https://www.dr-schnell.com/contact

3.7.1.1 ORDERS

If you would like to place an order through your customer account, you must enter the information we need to process your order in order to conclude the contract. As part of the contract fulfillment process, the following information is processed: company details (shipping address, billing address, and contact person), customer number, and products ordered. Your data will be retained for 10 years. This statutory retention period is based on Section 257(1)(1) and (4), and (4) of the German Commercial Code (HGB) and Section 147(1)(1) and (4), and (3) of the German Fiscal Code (AO). The data will be deleted upon expiration of this period.

3.8 CAREER

You can apply for open positions through our careers website (https://www.dr-schnell.com/unternehmen/karriere).

Personal data (identification data, contact information, and application documents) will be processed exclusively for the purpose of evaluating the application in accordance with Article 6(1)(b) of the GDPR in conjunction with Section 26 of the BDSG. Our data processor (HRworks GmbH) assists us in the application process.

If an application is unsuccessful, it will be destroyed within 6 months in accordance with Section 15(4) of the General Equal Treatment Act (AGG) and Section 61b(1) of the Labor Court Act (ArbGG) in conjunction with Section 26(1) of the Federal Data Protection Act (BDSG).

If the application is successful, the application documents will be transferred to the personnel file.

3.9 ENTERING INTO CONTRACTS AND PAYMENT

When you enter into a contract with us (e.g., in our online store), we need information such as your company name, your first and last name, the billing address, and—if you’re ordering goods—a shipping address if applicable; and—if the contract is to be concluded online via our website (e.g., in our online store) – your email address, in order to conclude and fulfill the contract, specifically to send you an email confirming receipt of your order, notify you of the acceptance or rejection of your order via email, and, if applicable, send you confirmation that the ordered goods have been shipped, as well as to transport the goods to the delivery address or arrange for their transport, and to issue an invoice and send it to the billing address.
Unless the required information is provided in full and accurately, we cannot provide our services.
We collect and process the data you provide to the extent necessary for the establishment, execution, and termination of the contract, including the conclusion of the contract, the provision of services (in particular, the processing of goods delivery) and payment, as well as the handling of any complaints and warranty claims. The legal basis for this processing is Article 6(1)(b) of the GDPR.
To fulfill sales contracts—that is, to process the delivery of the goods and the payment of the purchase price and, if applicable, shipping costs—we will, to the extent necessary, disclose your data to the service providers we engage for this purpose. For example, we share your first and last name and the shipping address with a company (DPD Deutschland GmbH, Schenker Deutschland AG) that we have commissioned to deliver the goods to the agreed-upon recipient.
When you place an order through our online store, we encrypt the transmitted data using Secure Socket Layer (SSL) technology to protect the data from unauthorized access or alteration by third parties during transmission. This requires that your web browser supports the SSL protocol.

3.10 E-LEARNING (CAMPUS)

You can take various courses online. Online courses can only be booked after prior registration. You can create a user account on the Campus Portal here. You can take various courses online. Online courses can only be booked after prior registration. You can create a user account on the Campus Portal here. The following personal data is collected when creating a user account:

• Identification information (title, last name, first name, username);
• Contact information (email address);
• Company Information (Company, Department).

The legal basis for the processing is your consent pursuant to Article 6(1)(a) of the GDPR. You have the right to withdraw your consent and delete your user account at any time. To delete your user account, please click on “Delete Profile” in your user account. Please note, however, that deleting your data may take some time and that, after deletion, data you have created may remain in the system in an anonymous form (e.g., course content, forum posts, and messages you have sent).

3.11 PLUGINS

Our website uses social media links from the following social networks.

3.11.2 YOUTUBE

The company that provides the service in the European Economic Area and Switzerland is Google Ireland Limited, a company incorporated and operating under Irish law (registration number: 368047) with its registered office at Gordon House, Barrow Street, Dublin 4, Ireland (referred to as “YouTube,” “we,” “us,” or “our”). References in these Terms of Service to YouTube’s “affiliates” refer to the companies of the Alphabet Inc. group of companies in accordance with Sections 15 et seq. of the German Stock Corporation Act.

You will encounter video content from YouTube on this website. YouTube is a so-called third-party provider that collects your IP address when you view the respective video. This is necessary because otherwise the content cannot be sent to the user’s browser. Your IP address is therefore required to display the content and videos. DR.SCHNELL makes every effort to use only content whose provider (YouTube) uses the user’s IP address solely for the purpose of delivering the content. However, DR.SCHNELL has no control over whether YouTube stores the IP address for other purposes, such as statistical analysis, or uses it in any other way. Should the reasons for such other uses become known, DR.SCHNELL will inform the users of the site accordingly.

If you are logged in to YouTube with your user account, YouTube may analyze your user behavior. You can prevent this by logging out of your personal user account before watching the video. For more information about the purpose and scope of data collection, as well as the further processing and use of your data by YouTube, and your related rights and privacy settings, please refer to YouTube’s privacy policy.

3.11.3 Econda

Tracking Measures and Cookie Placement

We want to provide you with the best possible user experience on our websites, in our online store, and with our advertisements—one that is tailored to your individual needs. To do this, we work with various service providers and technology providers and use cookies and tracking methods. You’ll find detailed information below:

Web and App Analytics with “econda Analytics”

To tailor this website to user needs and to optimize it, pseudonymized data is collected and stored using solutions and technologies provided by econda GmbH (Zimmerstraße 6, 76137 Karlsruhe, www.econda.de), and usage profiles are created from this data using pseudonyms. econda acts on our behalf. The disclosure of this data to third parties or its transfer to third countries is strictly prohibited.

By visiting the DR.SCHNELL website, I consent to the processing of my personal data as follows:

• econda Analytics (pseudonymized): Collection of IP addresses (truncated), information about the device used, and pages viewed during the visit for the purpose of measuring reach, as well as for analyzing and optimizing our website.
• econda Analytics (personalized): Collection of IP addresses (truncated), information about the device used, pages viewed during the visit, customer master data, and data from the ordering process for the purpose of measuring reach, as well as for analyzing and optimizing our website.

Purposes of data processing:

• Analytics
• Optimization

Without your opt-in, econda solutions operate in anonymous mode based on the current session. No personally identifiable data, such as IP addresses, customer numbers, or order numbers, is stored. No cookies are set. You will not be recognized during subsequent visits, and profiling is not possible.

When you opt in, cookies are used for the purpose described above to enable the recognition of an Internet browser. However, usage profiles are not linked to data about the person behind the pseudonym without the visitor’s express consent. In particular, IP addresses are anonymized immediately upon receipt, making it impossible to link usage profiles to IP addresses. You may, of course, revoke your consent at any time.

Technologies Used:

• Cookie
• Local storage

The use of anonymized tracking is based on Article 6(1)(f) of the GDPR. The company has a legitimate interest in measuring its reach in order to continuously optimize its online presence. Personalized tracking is only carried out if you have given your consent (Article 6(1)(a) of the GDPR).

The following data is collected:

• Information About the Device Being Used
• Information about pages viewed during a visit to the website
• Information Provided During the Order Process
• Information on Access Data
• Customer Data Upon Login or Access

Visitors to this website may object to this collection and storage of data at any time for the future by clicking here.

The opt-out applies only to the device and the web browser on which it was set; please repeat the process on all devices if necessary. If you delete the opt-out information from cookies and local storage, requests will once again be sent to econda.

Data is processed and stored only for the period necessary to achieve the respective purpose of processing or for as long as a statutory retention period (particularly under commercial and tax law) applies. Once the purpose has been fulfilled or the retention obligation has expired, the relevant data is routinely deleted.

For more information:
Click here for more information: Econda Privacy Policy

3.11.4 Google Analytics

On our Service Cockpit at https://servicecockpit.dr-schnell.com/ and our website at https://www.dr-schnell.com , we use Google Tag Manager as a tag management system to track user behavior on our website.

Google Analytics is a web analytics service provided by Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”). The “Google Analytics 4” mode is used. This allows data, sessions, and interactions across multiple devices to be assigned to a pseudonymous user ID, thereby enabling the analysis of a user’s activities across devices.

Google Analytics uses “cookies” that enable the website to analyze how users use the site. The legal basis for the use of Google Analytics is Article 6(1)(a) of the GDPR, namely your consent. The data we send that is linked to cookies, user identifiers (e.g., user ID), or advertising IDs is automatically deleted after 14 months. Data that has reached the end of its retention period is automatically deleted once a month.

Please note that you have the right to withdraw your consent at any time, effective for the future. The lawfulness of the processing carried out prior to the withdrawal remains unaffected.

The information generated by the cookie regarding your use of this website is generally transmitted to a Google server in the United States and stored there. The user’s IP address is immediately truncated during this process, so that it is no longer possible to identify the user via the IP address. The IP address transmitted by your browser as part of Google Analytics is not combined with other data held by Google. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity, and to provide the website operator with other services related to website and internet usage.

The legal basis for the transfer of personal data to the United States is the European Commission’s Adequacy Decision of July 10, 2023, available at: commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en. Based on the Adequacy Decision, personal data may be securely transferred from the EU to U.S. companies participating in the EU-U.S. Privacy Shield Framework. Google Inc. has joined the EU-U.S. Privacy Shield Framework and has committed to complying with a set of privacy principles listed in Annex 1 of the Adequacy Decision. The list of companies that have joined the program can be found at www.dataprivacyframework.gov/s/participant-search.

For more information about the Terms of Service and privacy policy, visit www.google.com/analytics/terms/en.html. For more information about how Google uses information, visit policies.google.com/technologies/partner-sites.

3.11.5 Google Tag Manager

On our Service Cockpit at https://servicecockpit.dr-schnell.com/ and our website at https://www.dr-schnell.com/, we use Google Tag Manager as a tag management system to track user behavior on our website.

Google Tag Manager is a tag management system provided by Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”). It allows tags to be integrated centrally via a user interface. Tags are small pieces of code that can track activities. Script code from other tools is integrated via Google Tag Manager. Tag Manager allows you to control when a specific tag is triggered.

Google Tag Manager uses “cookies” that store aggregated data about tag firing on the website. The legal basis for the use of Google Analytics is Article 6(1)(a) of the GDPR, namely your consent. The data we send that is linked to cookies, user identifiers (e.g., User-ID), or advertising IDs is automatically deleted after 14 months. Data that has reached the end of its retention period is automatically deleted once a month.

Please note that you have the right to withdraw your consent at any time, effective for the future. The lawfulness of the processing carried out prior to the withdrawal remains unaffected.

The information generated by the cookie regarding your use of this website is generally transmitted to a Google server in the United States and stored there. The user’s IP address is immediately truncated during this process, so that it is no longer possible to identify the user via the IP address. The IP address transmitted by your browser as part of Google Analytics is not combined with other data held by Google. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity, and to provide the website operator with other services related to website and internet usage.

The legal basis for the transfer of personal data to the United States is the European Commission’s Adequacy Decision of July 10, 2023, available at: commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en. Based on the Adequacy Decision, personal data may be securely transferred from the EU to U.S. companies participating in the EU-U.S. Privacy Shield Framework. Google Inc. has joined the EU-U.S. Privacy Shield Framework and has committed to complying with a set of privacy principles listed in Annex 1 of the Adequacy Decision. The list of companies that have joined the program can be found at www.dataprivacyframework.gov/s/participant-search.

For more information about the Terms of Service and privacy policy, visit www.google.com/analytics/terms/en.html. For more information about how Google uses information, visit policies.google.com/technologies/partner-sites.

3.11.6. CCM19

Our websites use CCM19, among other tools, to obtain your consent to the storage of certain cookies on your device or to the use of certain technologies, and to document this in compliance with data protection regulations. This technology is provided by Papoo Software & Media GmbH, Auguststr. 4, 53229 Bonn (hereinafter “CCM19”).

When you visit our website, a connection is established with CCM19’s servers to obtain your consent and other statements regarding the use of cookies. CCM19 then stores a cookie in your browser to associate the consents you have granted—or their revocation—with your session. The data collected in this manner is stored until you request that we delete it, delete the CCM19 cookie yourself, or the purpose for storing the data no longer applies. Mandatory legal retention requirements remain unaffected.

CCM19 is used to obtain the legally required consent for the use of cookies. The legal basis for this is Article 6(1), first sentence, subparagraph (c) of the GDPR.

4. RIGHTS OF DATA SUBJECTS

You also have certain rights regarding the processing of your personal data. Further details can be found in the relevant provisions of the GDPR (Articles 15 through 21). To exercise your rights, please contact info@dr-schnell.de.

We always strive to process your inquiries and requests as quickly as possible in order to protect your rights accordingly. However, depending on the volume of inquiries, it may take up to 30 days before we can provide you with further information regarding your request. If it takes longer, we will promptly notify you of the reasons for the delay and discuss the next steps with you.

Right of Access (Art. 15 GDPR)
You have the right to request confirmation from us as to whether we are processing personal data concerning you. If this is the case, you have the right to receive the following information:

• Information about the categories of personal data we process, the purposes for which we process your personal data, and information about how we determine the applicable retention periods;
• Information about the categories of recipients to whom we may disclose your personal data, and
• a copy of the personal data we have on file about you.

Right to Rectification (Art. 16 GDPR)
You have the right to have any inaccurate or incomplete personal data we hold about you rectified without delay.

Right to Erasure (Art. 17 GDPR)
Under the following circumstances, you may request the immediate erasure of your personal data:

• if your personal data is no longer needed for the purposes for which it was collected;
• if you have withdrawn your consent and there is no other legal basis for data processing;
• if you object to the processing and there are no overriding legitimate grounds for processing the data;
• if your data is processed unlawfully;
• if your personal data must be deleted to comply with legal obligations.

Please note that before we delete your data, we must verify that there is no legitimate reason to process your personal data.

Right to Restriction of Processing (“Right to Restriction”) (Art. 18 GDPR)
You may request that we restrict the processing of your personal data for any of the following reasons:

• if you dispute the accuracy of the data, until we have had the opportunity to verify its accuracy;
• if the data is being processed unlawfully, but you request only that the use of the personal data be restricted rather than that it be deleted;
• if, although we no longer need the personal data for the purposes of processing, you still need it to assert, exercise, or defend legal claims;
• if you have objected to the processing and it has not yet been determined whether your legitimate interests outweigh ours.

Right to Object (Art. 21 of the GDPR)

Right to Object on a Case-by-Case Basis
If the processing is carried out in the public interest or based on a balancing of interests, you have the right to object to the processing for reasons arising from your particular situation. If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing of your data that override your interests, rights, and freedoms, or because your personal data is necessary for the establishment, exercise, or defense of legal claims. The objection does not affect the lawfulness of the processing carried out prior to the objection.

Objection to Marketing
If your personal data is used for marketing purposes, you may object to this form of processing at any time. We will then no longer process your personal data for these purposes.

Right to Data Portability (Art. 20 GDPR)
You have the right to receive, upon request, the personal data you have provided to us for processing in a portable and machine-readable format.

Right to File a Complaint with the Supervisory Authority (Art. 77 GDPR)
If you are not satisfied with our responses and actions, or if you believe that we are in violation of applicable data protection laws, you are free to file a complaint with both our Data Protection Officer and the competent supervisory authority. The supervisory authority responsible for us is:

Bavarian State Office for Data Protection Supervision (BayLDA)
Promenade 18
91522 Ansbach

Privacy Notice Regarding Consent Following a Visit by a DR.SCHNELL/ALEGRIA Employee

The legal basis for the processing is Article 6 of the GDPR, based on consent. We are pleased to inform you of your personal rights.

The data controllers within the meaning of the General Data Protection Regulation are

Information on Data Processing Pursuant to Article 13 of the GDPR

We would like to inform you that, when you enter into a contract with us or in the course of our customer service, we process your personal data (in particular, your last name and first name, email address, and phone number) or transfer it to third-party service providers whose assistance we require to provide our services.

Purposes of Data Processing

Providing information and offers regarding additional products, services, and events, as well as contacting you for the purposes of market and opinion research (advertising)

Legal Basis for Data Processing

The joint controllers process personal data pursuant to Article 6 of the GDPR. This is based on consent to the processing of personal data concerning the data subject for one or more specific purposes, to fulfill a contract or to take steps prior to entering into a contract, or to protect the legitimate interests of the controller or a third party, provided that such interests are not overridden by the interests or fundamental rights and freedoms of the data subject that require the protection of personal data.

Source of the Data

You provided this information during a visit by one of our sales representatives.

Categories of Personal Data

Last name, first name, email address, phone number, company name (if applicable), date of birth (if applicable)
Categories of recipients of personal data
Your data will be processed exclusively by the joint controllers.

Data Retention Period

The two jointly responsible parties store information only for as long as is necessary for the intended purpose or in accordance with other legally prescribed time limits.

Rights of Affected Individuals

Every data subject has the right of access, rectification, erasure, and restriction of processing. These rights, as set forth in Articles 15 through 18 of the GDPR, may be exercised by contacting the two joint controllers at the address listed below.

In addition, you have the option of contacting the supervisory authority responsible for the two jointly responsible parties.

Bavarian State Office for Data Protection Supervision (BayLDA)
Promenade 27
91522 Ansbach
Tel.: +49 (0) 981 53 1300
Fax: +49 (0) 981 53 98 1300
Email: poststelle@lda.bayern.de

If you would like to know what personal data the joint controllers have stored about you and to whom specific data has been disclosed, we will be happy to provide you with this information. You may request a so-called “self-disclosure” there free of charge. Please note that, for data protection reasons, the joint controllers are not permitted to provide any information over the phone, as it is not possible to clearly identify you over the phone. To prevent misuse by third parties, we therefore require the following information from you: last name (maiden name, if applicable), first name(s), date of birth, and current address (street, house number, ZIP code, and city).

Right to Object

Pursuant to Article 21 of the GDPR, you may object to the processing of your personal data by contacting us at the address provided or at widerspruch@dr-schnell.de.

Contact Information for the Joint Controllers and the Data Protection Officer

The data protection officer for the joint controllers can also be reached at the address listed above or by email at the following address: dr-schnell@2b-advice.de