Privacy Policy
Privacy Policy
The protection of your personal data when you visit our website is of great importance to us. Your data is protected in accordance with the relevant legal provisions. We would like to inform you below about the nature and scope of the processing of personal data via this website in accordance with Article 13 of the General Data Protection Regulation (GDPR).
Information on the data controller
KNIPEX-Werk C. Gustav Putsch KG
Tel.: 02 02 / 47 94 - 0
Email: info@knipex.de
Website: https://www.knipex.de
II. Details of the Data Protection Officer
If you have any questions regarding data protection, our external Data Protection Officer will be happy to assist you:
Mr Arndt Halbach of GINDAT GmbH
Wetterauer Str. 6, 42897 Remscheid
Email: datenschutz@gindat.de
Tel. 02191 / 909 430
III. Data processing via the website
Your visit to our website is logged. Initially, the following data – which your browser transmits to us – is recorded:
- the IP address currently being used by your PC or router
- date and time
- browser type and version
- your PC’s operating system
- the pages you have viewed
- Name and size of the file(s) requested
- as well as, where applicable, the URL of the referring website.
This data is collected solely for the purposes of data security, to improve our website and for error analysis on the basis of Article 6(1)(f) of the GDPR. We reserve the right to use this data in the event of system misuse to determine the reasons for and the cause of the misuse, and to take legal action where necessary. Furthermore, your computer’s IP address is only analysed in anonymised form (with the last 3 digits truncated).
You can visit our website without providing any personal details.
Please note that data transmission over the internet (e.g. when communicating by email) may be subject to security vulnerabilities. It is not possible to guarantee complete protection of data against access by third parties. You should therefore send us any confidential data by other means, e.g. by post.
Contact
Personal data (e.g. your name, address details or contact details) that you provide to us voluntarily, for example as part of an enquiry or in any other way, will be stored by us and processed solely for the purpose of corresponding with you and only for the purpose for which you have provided us with this data. This data is processed on the basis of our legitimate interest in responding promptly to enquiries from interested parties, in accordance with Article 6(1)(f) of the GDPR.
Registration
You can register on our website to use additional features on the site. We use the data you provide for this purpose solely for the purpose of using the specific offer or service for which you have registered. The mandatory details requested during registration must be provided in full. Otherwise, we will reject the registration. In the event of important changes, such as to the scope of the service or technically necessary changes, we will use the email address provided during registration to inform you accordingly. The processing of the data entered during registration is based on your consent (Art. 6(1)(a) GDPR). You may withdraw your consent at any time. To do so, simply send us an informal email. The lawfulness of any data processing that has already taken place remains unaffected by the withdrawal. We will store the data collected during registration for as long as you remain on our
Secure data transmission
To protect the security of your data during transmission, we use a state-of-the-art encryption method (SSL) via HTTPS.
Encrypted payment transactions on this website
If, following the conclusion of a contract involving a fee, you are required to provide us with your payment details (e.g. account number for direct debit authorisation) , this data is required for payment processing. Payment transactions using standard payment methods (Visa/MasterCard, direct debit) are carried out exclusively via an encrypted SSL or TLS connection. You can recognise an encrypted connection by the fact that the browser’s address bar changes from “http://” to “https://” and by the padlock icon in your browser bar. With encrypted communication, the payment details you send to us cannot be read by third parties.
Processing of data (customer and contract data)
We process personal data only to the extent that it is necessary for the establishment, content or amendment of the legal relationship (master data). This is carried out on the basis of Article 6(1)(b) of the GDPR, which permits the processing of data for the performance of a contract or pre-contractual measures. We process personal data relating to the use of our website (usage data) only to the extent necessary to enable the user to use the service or to bill them for it. The customer data collected is deleted upon completion of the order or termination of the business relationship. Statutory retention periods remain unaffected.
Data transfer upon conclusion of a contract for services and digital content
We only transfer personal data to third parties where this is necessary for the performance of the contract, for example to companies responsible for delivering the goods or to the bank commissioned to process payments. No further transfer of data takes place, or only if you have expressly consented to such transfer. Your data will not be passed on to third parties without your express consent, for example for advertising purposes. The legal basis for data processing is Article 6(1)(b) of the GDPR, which permits the processing of data for the performance of a contract or pre-contractual measures.
PayPal
On our website, we offer, amongst other things, payment via PayPal. The provider of this payment service is PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter “PayPal”). If you select payment via PayPal, the payment details you enter will be transmitted to PayPal. The transmission of your data to PayPal is based on Article 6(1)(b) of the GDPR (processing for the performance of a contract).
Further information on data collection by PayPal can be found here:
https://www.paypal.com/de/webapps/mpp/ua/privacy-full
IV. Recipients of personal data
We may engage service providers to carry out and process data on our behalf.
Specifically, we have engaged service providers to host our website.
Contractual relationships with our service providers are governed by the provisions of Article 28 of the GDPR, which contain the legally required provisions on data protection and data security.
V. Google Maps
Our website uses the map service Google Maps, operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. In order to actively use the functions of Google Maps, it is necessary to store your IP address. This information is usually transferred to a Google server in the USA and stored there.
Data transfer to the USA
Google LLC, the parent company of Google Ireland Limited, is certified under the EU-US Data Privacy Framework . This certification guarantees an adequate level of data protection in accordance with the requirements of the General Data Protection Regulation (GDPR). It ensures that personal data transferred from the European Union to the USA is processed in accordance with European data protection standards.
Legal basis
The use of Google Maps is based on your consent in accordance with Article 6(1)(a) of the GDPR. You may withdraw your consent at any time with future effect by adjusting the relevant setting in our Cookie Consent Tool.
Further informationDetailed information on the handling of user data can be found in Google’s privacy policy: https://www.google.de/intl/de/policies/privacy/
VI. Data collection via Google Analytics 4
Our website uses Google Analytics, a web analytics service provided by Google Ireland Ltd. (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland, Tel: +353 1 543 1000, Fax: +353 1 686 5660.
Google Analytics uses cookies to analyse how our website is used. The information collected via these cookies regarding your use of this website is usually transferred to a Google server in the USA and stored there.
In Google Analytics 4, IP address anonymisation is enabled by default. As a result of IP anonymisation, your IP address is truncated by Google within Member States of the European Union or in other signatory states to the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and truncated there. According to Google, the IP address transmitted by your browser as part of Google Analytics is not merged with other Google data.
During your visit to the website, your user behaviour is recorded in the form of ‘events’. Events may include:
· Page views
· First visit to the website
· Start of the session
· Webpages visited
· Your ‘click path’, interaction with the website
· Scrolls (whenever a user scrolls to the bottom of the page (90%))
· Clicks on external links
· Internal search queries
· Interaction with videos
· File downloads
· Adverts viewed / clicked
· Language settings
The following is also collected:
· Your approximate location (region)
· Date and time of your visit
· Your IP address (in truncated form)
· Technical information about your browser and the devices you use (e.g. language settings, screen resolution)
· Your internet service provider
· The referrer URL (the website or advertising channel via which you arrived at this website)
Google will use this information to analyse your pseudonymous use of the website and to compile reports on website activity. The reports provided by Google Analytics are used to analyse the performance of our website and to improve the services we offer to our customers.
Possible recipients of your data include Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (as a data processor under Article 28 of the GDPR), as well as Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, and Alphabet Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
The European Commission adopted its adequacy decision for the USA on 10 July 2023. Google LLC is certified under the EU-US Privacy Framework. As Google’s servers are distributed worldwide and a transfer to third countries (for example, to Singapore) cannot be entirely ruled out, we have also entered into the EU Standard Contractual Clauses with the provider.
The data we send, which is linked to cookies, is automatically deleted after 14 months at the latest. The maximum lifespan of Google Analytics cookies is 2 years. Data that has reached the end of its retention period is automatically deleted once a month.
The legal basis for this data processing is your consent in accordance with Article 6(1)(a) of the GDPR and Section 25(1) of the TDDDG. Access your settings here and change your selection there. The lawfulness of the processing carried out on the basis of your consent until such consent is withdrawn remains unaffected.
You can also prevent cookies from being stored in the first place by adjusting the settings in your browser software accordingly. However, if you configure your browser to reject all cookies, this may result in restricted functionality on this and other websites. You can also prevent the collection of data generated by the cookie and relating to your use of the website (including your IP address) by Google, as well as the processing of this data by Google, by
a. not giving your consent to the setting of the cookie, or
b. download and install the browser add-on to disable Google Analytics here: https://tools.google.com/dlpage/gaoptout?hl=de
Further information on the terms of use for Google Analytics and Google’s privacy policy can be found at https://marketingplatform.google.com/about/analytics/terms/de/ and at https://policies.google.com/?hl=de.
You can prevent cookies from being stored by adjusting your browser settings accordingly; however, please note that in this case you may not be able to make full use of all the functions of this website.
VII. Google Web Fonts
Our website uses so-called web fonts, provided by Google, to ensure a consistent display of typefaces. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, Tel: +353 1 543 1000, Fax: +353 1 686 5660, email: support-deutschland@google.com. When you visit a page, your browser loads the required web fonts into its cache to display text and fonts correctly. To do this, the browser you are using must connect to Google’s servers. As a result, Google becomes aware that our website has been accessed via your IP address. The use of Google Web Fonts is in the interests of ensuring a consistent and attractive presentation of our online content. This constitutes a legitimate interest within the meaning of Article 6(1)(f) of the GDPR. If your browser does not support web fonts, a standard font from your computer will be used. Further information on Google Web Fonts can be found in the privacy policy
https://www.google.com/policies/privacy/
VIII. Google Tag Manager
We use Google Tag Manager, a service provided by Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Google Tag Manager is a technical tool that enables us to manage website tags centrally. Google Tag Manager itself does not process any personal data; it merely ensures that other components (e.g. analytics or marketing tags) are loaded, which may in turn collect data. These components are described separately in our privacy policy.
The legal basis for the use of Google Tag Manager is our legitimate interest in the efficient management of website tags in accordance with Article 6(1)(f) of the GDPR. However, where Google Tag Manager loads tags that access data not technically necessary (e.g. marketing tags), this is done exclusively on the basis of your prior consent in accordance with Section 25( 1 of the TDDDG and Article 6(1)(a) of the GDPR.
We have entered into a data processing agreement with Google in accordance with Article 28 of the GDPR. Due to the use of Google services, it cannot be ruled out that technical information (e.g. IP address) may be transferred to the USA. Google is certified under the EU-US Privacy Framework, which was recognised as adequate by the European Commission on 10 July 2023. In addition, we have entered into the EU Standard Contractual Clauses (SCCs) with Google to ensure an adequate level of data protection.
Further information on Google Tag Manager can be found in Google’s privacy policy: https://www.google.de/intl/de/policies/privacy/.
IX. Google Ads and Google Conversion Tracking
Our website uses Google Ads. Google Ads is an online advertising programme operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, Tel: +353 1 543 1000, Fax: +353 1 686 5660, Email: support-deutschland@google.com. As part of Google Ads, we use what is known as conversion tracking. When you click on an advert placed by Google, a conversion tracking cookie is set. Cookies are small text files that the web browser stores on the user’s computer. These cookies expire after 30 days and are not used to personally identify users. If the user visits certain pages on this website and the cookie has not yet expired, Google and we can recognise that the user clicked on the advert and was redirected to that page. Each Google Adscustomer receives a different cookie. The cookies cannot be tracked across the websites of Google Ads customers. The cookies used for conversion tracking
https://www.google.de/policies/privacy/
You can configure your browser to notify you when cookies are set and to allow cookies only on a case-by-case basis, to block the acceptance of cookies in specific cases or generally, and to enable the automatic deletion of cookies when you close your browser. If you disable cookies, the functionality of this website may be restricted.
You can change your settings at any time via the Cookie settings.
X. Use of Shopify as an e-commerce platform
We use Shopify International Ltd., Victoria Buildings, 1–2 Haddington Road, Dublin 4, D04 XN32, Ireland (hereinafter ‘Shopify’) as the platform for operating our online shop.
1. Nature and purpose of processing
Shopify serves as the basis for the operation of our online shop and, in this context, processes personal data in order to technically enable and fulfil orders. The following data may be processed in this process:
- Name, billing address and delivery address
- Order information such as products purchased and payment status
- Payment details depending on the chosen payment method
- User’s IP address
- Information about the device and browser used.
2. Legal basis for processing
The processing of personal data is carried out in accordance with Article 6(1)(b) of the GDPR, as it is necessary for the performance of the contract of sale or pre-contractual measures.
Should Shopify also carry out usage analyses or implement fraud prevention measures, this is based on our legitimate interest pursuant to Article 6(1)(f) of the GDPR. Where tracking technologies or marketing data are used for processing, this is done only with your explicit consent in accordance with Article 6(1)(a) of the GDPR, which may be withdrawn at any time.
3. Transfer of personal data to third countries
Shopify processes data in various countries. Personal data will only be transferred to third countries outside the European Union under the following conditions:
Shopify processes data in Ireland, Canada and the United States of America.
- Data transfers to Canada are carried out on the basis of the European Union’s adequacy decision for Canada.
- For data transfers to the United States of America, Shopify uses the EU Standard Contractual Clauses (SCCs) to ensure an adequate level of data protection.
Further information on data processing by Shopify can be found at: https://www.shopify.com/legal/privacy.
4. Payment service providers
We use various payment service providers to process payments. The processing of personal data depends on the chosen payment method.
Shopify Payments
If you make a payment via Shopify Payments, the transaction is processed by Shopify International Ltd. (Ireland) or Shopify Inc. (Canada/USA).
The transfer of personal data to Canada is based on the European Union’s adequacy decision. Data transfers to the United States of America are carried out in accordance with the EU Standard Contractual Clauses.
PayPal
If you make a payment via PayPal, the payment is processed by PayPal (Europe) S.à r.l. et Cie, S.C.A..
PayPal may transfer personal data to the United States of America. The protection of the transferred data is ensured through the application of the EU Standard Contractual Clauses.
Further information on data processing by PayPal can be found at: https://www.paypal.com/de/webapps/mpp/ua/privacy-full.
Apple Pay
If you make a payment via Apple Pay, the payment will be processed by Apple Inc. (USA).
Apple processes personal data in the United States of America. The protection of the data transferred is ensured through the application of the EU Standard Contractual Clauses.
Further information on data processing by Apple can be found at: https://www.apple.com/legal/privacy/de-ww/.
Google Pay
If you make a payment via Google Pay, the transaction is processed by Google Ireland Ltd. or Google LLC (USA).
Google stores personal data in the United States of America. The protection of the data transferred is ensured through the application of the EU Standard Contractual Clauses.
Further information on data processing by Google can be found at: https://policies.google.com/privacy.
Giropay
If you make a payment via Giropay, the payment is processed by Paydirekt GmbH (Germany).
The processing of personal data takes place exclusively within the European Union. No personal data is transferred to third countries.
Further information on data processing by Giropay can be found at: https://www.giropay.de/rechtliches/datenschutzerklaerung/.
XI. Google Analytics Remarketing
Our website uses the functions of Google Analytics Remarketing in conjunction with the cross-device functions of Google Ads and Google DoubleClick. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, Tel: +353 1 543 1000, Fax: +353 1 686 5660, Email: support-deutschland@google.com. This feature enables the advertising audiences created using Google Analytics Remarketing to be linked to the cross-device features of Google Ads and Google DoubleClick. In this way, interest-based, personalised advertising messages – which have been tailored to you based on your previous usage and browsing behaviour on one device (e.g. mobile phone) can also be displayed on another of your devices (e.g. tablet or PC). If you have given your consent, Google will link your web and app browsing history to your Google Account for this purpose. This allows adverts to be displayed on any device on which you are signed in to your Google Account
https://www.google.com/settings/ads/onweb/
The consolidation of the data collected in your Google Account is carried out exclusively on the basis of your consent, which you may give or withdraw via Google (Article 6(1)(a) of the GDPR). In the case of data collection processes that are not consolidated in your Google Account (e.g. because you do not have a Google Account or have objected to the consolidation), the collection of data is based on Article 6(1)(f) of the GDPR. The legitimate interest arises from the fact that the website operator has an interest in the anonymised analysis of website visitors for advertising purposes. Further information and the data protection provisions can be found in Google’s privacy policy at:
https://www.google.com/policies/technologies/ads/
XII. REVIEWS.io
On our website, you have the option to write reviews. To do this, we use “REVIEWS.io”, a service provided by Liquid New Media Limited, 29 St Nicholas Place, Leicester, LE1 4LD, United Kingdom. REVIEWS.io enables us to collect customer reviews and publish them on our website.
In order for you to write a review, REVIEWS.io requires your name or a pseudonym and your email address (which will not be published). As soon as you write a review via REVIEWS.io, the service automatically creates an account for you.
Data processing is based on your consent (Article 6(1)(a) of the GDPR). You may withdraw your consent at any time. To do so, simply send us an informal email. The lawfulness of data processing that has already taken place