Protecting your privacy and your data is very important to us and is always taken into account in all business transactions.
In general, you can use our website without providing any personal information. However, different rules may apply to certain services, which we will highlight separately below.
The English version of this Privacy Policy is provided for informational purposes only and has been generated through automated translation. While we strive for accuracy, the German original shall prevail in the event of any discrepancies, inconsistencies, or interpretation issues and shall be the sole legally binding version.
The purpose of processing your personal data (hereinafter referred to as “Data”) is to provide information about custom-made sets of building blocks. In this Privacy Policy, we inform you, among other things, about
Markus Raab, A-4910 Ried im Innkreis, Goethestraße 26, Tel: 0043-676-5801585, Email: vasb@ennoevpx.ng.
No data protection officer has been appointed, as this is not required by law.
You have the following rights with respect to the personal data we hold about you:
You also have the right to file a complaint with a data protection supervisory authority regarding our processing of your personal data. If you have any questions about this or other matters related to personal data, please feel free to contact us at any time.
You have the right to receive, at any time and free of charge, information from us regarding the personal data we have stored about you, as well as a copy of that information, including details about
You also have the right to be informed whether personal data has been transferred to a third country or to an international organization. If this is the case, you also have the right to receive information about the appropriate safeguards in connection with the transfer.
You have the right to request the immediate correction of any inaccurate personal data concerning you.
Furthermore, you have the right to request that incomplete personal data be completed—including by means of a supplementary statement—taking into account the purposes of the processing.
You have the right to request that we delete your personal data without delay if any of the following grounds apply and provided that the processing is not necessary:
If we have made the personal data public and our company, as the controller, is obligated under Article 17(1) of the GDPR to erase the personal data, we will take appropriate measures, taking into account the available technology and the costs of implementation, including technical measures, to inform other controllers who process the published personal data that you have requested that these other controllers delete all links to this personal data or any copies or replicas of this personal data, provided that the processing is not necessary.
You have the right to request that we restrict the processing of your personal data if any of the following conditions are met:
You have the right to receive your personal data, as provided by us, in a structured, commonly used, and machine-readable format.
You also have the right to transmit this data to another controller without hindrance from us, provided that the processing is based on consent pursuant to Article 6(1)(a) of the GDPR or Article 9(2)(a) of the GDPR, or on a contract pursuant to Article 6(1)(b) of the GDPR, and the processing is carried out by automated means, provided that the processing is not necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in us.
Furthermore, when exercising your right to data portability, you have the right to request that we transfer your personal data directly to another controller, provided that this is technically feasible and does not infringe upon the rights and freedoms of others.
You have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data that is carried out pursuant to Article 6(1)(e) or (f) of the GDPR. This also applies to profiling based on these provisions.
In the event of an objection, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing is necessary for the establishment, exercise, or defense of legal claims.
If we process personal data for the purpose of direct marketing, you have the right to object at any time to the processing of your personal data for such marketing purposes. This also applies to profiling, to the extent that it is related to such direct marketing.
If you object to our processing of your personal data for direct marketing purposes, we will no longer process your personal data for those purposes.
In addition, you have the right to object, on grounds relating to your particular situation, to the processing of personal data that we carry out for scientific or historical research purposes or for statistical purposes pursuant to Article 89(1) of the GDPR, unless such processing is necessary for the performance of a task carried out in the public interest.
You have the right not to be subject to a decision based solely on automated processing—including profiling—that produces legal effects concerning you or similarly significantly affects you, unless the decision (1) is necessary for entering into or performing a contract between you and us, or (2) is authorized by Union or Member State law to which we are subject, and that law provides for appropriate measures to safeguard your rights and freedoms as well as your legitimate interests; or (3) is based on your explicit consent.
You have the right to withdraw your consent to the processing of personal data at any time. However, your withdrawal of consent does not affect the lawfulness of the data processing that took place prior to the withdrawal.
Our website and services are not intended for use by minors, and we do not intend to collect data from minors. If a parent or guardian of a minor believes that their child may have provided personal data to us, please contact us using the contact information provided below, and we will delete that personal data subject to applicable law and this Policy.
We use appropriate technical and organizational measures and security safeguards (TOMs) designed to prevent unauthorized access, unlawful processing, and the unauthorized or accidental loss of your data.
This includes, for example, encrypting your communications with us via this website using the Secure Socket Layer (SSL) encryption protocol.
You can test the quality of our encryption here: https://www.ssllabs.com/ssltest
It is important to us to point out that data transmission over the Internet may involve security risks, as it is not possible to completely prevent unauthorized third parties from accessing the data.
The server on which this website is hosted is located in Germany and is operated by Mittwald CM Service GmbH & Co KG, with which a (sub)data processing agreement has been concluded.
For more details, please visit https://www.mittwald.de/datenschutz.
Every time you visit our website, an automated system collects a range of general data and information.
This general data and information is stored in our server’s log files by Mittwald CM Service GmbH & Co KG in Germany.
The following can be recorded:
We do not draw any conclusions about you based on the use of this general data and information.
This information is needed to
We analyze this anonymously collected data and information both for statistical purposes and to enhance data protection and data security within our company, with the ultimate goal of ensuring an optimal level of protection for you. In any case, we are permitted to process this data based on our legitimate interest pursuant to Article 6(1)(f) of the GDPR.
The logs are stored separately from any personal data you provide and are deleted after a maximum of 90 days.
For information on the use of cookies and details about your options and rights, please see our cookie banner.
At this time, you can contact us by email, phone, mail, or in person. Please note that unencrypted emails sent over the Internet are not adequately protected against unauthorized access by third parties.
Website Contact Form
If you would like to send us a message using the form provided, you must provide the personal information listed below, which we need to process your inquiry or order. To prevent unauthorized access to your personal information by third parties, the order process is encrypted using SSL technology.
If you contact us, for example, simply to request information from us, we will process your data for that purpose. If you contact us, for example, to enter into a contract, we will process your data for that purpose.
To process your order, including customer service
If you provide your order information via email, contact us by phone, via the contact form, by mail, or in person, the information you provide—including your personal data—will be processed by us and the recipients listed below for the purpose of (pre-)contractual processing within the scope of our business relationship with you, in order to execute and manage your contract and to provide you with customer service.
Website Contact Form
We process the data you provide so that we can respond to your inquiry in the best possible and most personalized way, and to determine the country or location from which the inquiry originates.
Marketing (in general)
To establish and strengthen business relationships with existing and potential customers.
If you contact us, for example, simply to request information from us, we may process your data based on your consent pursuant to Article 6(1)(a) of the GDPR or Article 6(1)(f) of the GDPR. If you contact us, for example, to enter into a contract, we may process your data based on Article 6(1)(b) of the GDPR and, if necessary, store it based on Article 6(1)(c) of the GDPR.
Contract or Order
The processing of your data, including the personal data you have provided, is carried out by us and the recipients listed below on the legal basis of Article 6(1), first sentence, letter b, in order to properly fulfill the relevant service, service, work, or sales contract in question, to correspond with you, and to identify you as a customer. Data processing is carried out at your request and is necessary for the proper fulfillment of the contract for the purposes stated.
Website Contact Form
When we receive a message from you, the legal basis is Article 6(1)(a), Article 6(1)(b), or Article 6(1)(f) of the GDPR, depending on the content of the message.
Marketing (in general)
The legal basis is our legitimate interest pursuant to Article 6(1)(f) of the GDPR. This legitimate interest is our interest in establishing and strengthening business relationships with existing and potential customers.
In general, we expressly ask that you not disclose any data that is likely to be of little or no relevance to your intended purpose; this applies in particular to special categories of personal (“sensitive”) data. The provision of information on your part is strictly voluntary.
Information
If you contact us solely to request information from us, we will process the data you provide.
Orders
To process the contracts, we process the required information; any additional information is voluntary.
Website Contact Form
When we receive a message from you, our web host logs and stores the date and time of the submission and the IP address from which the submission was made. This is solely for evidentiary purposes in the event that an email address is used by an unauthorized person. In addition, you are required to provide your name, address, a valid email address, and an indication of whether you would like to schedule an appointment or visit our office. Providing any additional information is voluntary.
Marketing (in general)
Depending on the information you have voluntarily provided to us, the data we process may include the following:
Your data may be disclosed, in whole or in part—but only to the extent and to the degree necessary—to the following data controllers:
In addition, your data may be disclosed to the following recipients as (sub)processors; a (sub)processing agreement has been concluded with each of them, and the appropriate technical and organizational measures (TOMs) have been verified:
Your data will be stored in a form that allows you to be identified only for as long as is necessary for the purpose for which it is being processed.
Information
By providing us with your information via email, or by contacting us by phone or in person, you expressly consent to the processing of your data—including the personal data you have provided, as well as any special categories of personal data you may have provided unsolicited and voluntarily—by us and the recipients listed above for the duration of the processing of the request in question.
If you contact us solely to request information, your data will therefore be deleted either immediately or after a reasonable period of time appropriate to the content of the communication, depending on the nature of the communication.
If you revoke your consent, we will delete (or have deleted) all of your data—including aggregated data—from all databases.
Contract or Order
Due to corporate and tax law requirements, we are obligated to store your address, payment, and order information for a period of 7 years. If you contact us to enter into a contract, the data will be deleted at the end of the seventh year following the posting of the last document (§ 132 BAO). If a contract is concluded, all data related to the contractual relationship will therefore be stored until the expiration of this period.
Statutory or legal retention requirements, or contractual obligations—for example, toward customers regarding warranties or damages, or toward contractual partners—constitute another basis for continuing to store your data. (Art. 6(1)(c) GDPR; Art. 17(3)(e) GDPR).
In addition, the data categories “Name,” “Address,” “Purchased Items,” and “Purchase Date” are stored until the end of the product liability period (10 years).
Marketing (in general)
Marketing data is retained for up to 3 years after the last contact.