Data protection
DATA PROTECTION
Below we inform you about the details of data protection when visiting our website.
The use of our website is generally possible without providing personal data.
If personal data is collected when you visit our website, we process it exclusively in accordance with the General Data Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG).
The processing of personal data takes place exclusively in accordance with this data protection declaration.
This privacy policy applies to the use of the website at the address (www.kraft-baustoffe.de). For linked content from other providers, the privacy policy provided on the linked website is decisive.
We would like to point out that security gaps may occur during data transmission via the Internet, which cannot be prevented by the technical design of this website. Complete protection of personal data is not possible when using the Internet.
1. Responsible body
The person responsible for the processing of personal data in connection with the use of this website is:
KRAFT Baustoffe GmbH
Drygalski-Allee 15D-81477 Munich
Represented by:
Managing Director: Robert Preuß
Contact:
Telephone: +49 89 78591-0
Telefax: +49 89 78591-1229
Email: info@kraft-baustoffe.de
2nd Data Protection Officer
Our data protection officer is:
Stephan Riepe
NoRisk Datasecurity UG(limited liability)
3. Hosting
Our website is operated on servers of
Cyberstack GmbH
Küstriner Str. 14D-94315 Straubing
We have concluded a data processing agreement with Cyberstack GmbH.
When you access our websites, data is automatically collected and stored in log files on our host's server. This data may contain personal information. The data collected includes:
· Browser type/ browser version
· operating system used
· Referrer URL
· Hostname of the accessing computer
· Date and time of the server request
· Amount of data transferred
· Message about successful retrieval
· The operating system underlying the browser with patch level
· IP address (not anonymized)
The host uses the collected data to ensure the trouble-free operation of the website, to ensure IT security and to improve our offering. If there are concrete indications, the log data may be subsequently analyzed. The temporary storage of the IP address by the host is necessary to enable the website to be delivered to the user's computer. For this purpose, your IP address must be stored for the duration of the session.
This data will not be merged with other data sources.
The legal basis for data collection is Art. 6 Paragraph 1 Clause 1 Letter f of GDPR. Our legitimate interest in data collection arises from the purposes mentioned.
The data is deleted by the host as soon as it is no longer required to achieve the purpose for which it was collected. If the data is collected to provide the website, this is the case when the respective session has ended.
If the data is stored in log files, this technical information will be deleted or made unrecognizable after one week at the latest.
The collection of data to provide the website and the storage of data in log files is essential for the operation of the website. You therefore have no option to object.
In addition to the data mentioned above, cookies are used on your computer when you use and visit our website.
When you visit our website for the first time, you will be asked whether you agree to the use of cookies and, if so, which categories you agree to.
Cookies are small text files that are stored by your browser on your device to save certain information. These cookies are also used to make the use of our services more pleasant and convenient for you or for analytical purposes.
Most of the cookies we use are so-called "session cookies". They are used to provide you with the technical services of our website. After your visit, these cookies are automatically deleted from your browser.
Other cookies remain on your computer and enable us to recognize your device on your next visit (so-called persistent or permanent cookies).
The next time you visit our website using the same device, the information stored in cookies will be read either by our website (“first-party cookie”) or by another website to which the cookie belongs (“third-party cookie”).
These cookies are automatically deleted from your system after a preset period of time, which varies depending on the cookie.
Through the information stored and sent back, the respective website recognizes that you have already accessed and visited it with the browser of your device.
We use this information to optimally design and display the website according to your preferences. Only the cookie itself is identified on your device.
Any further storage of personal data will only take place with your express consent or if this is absolutely necessary in order to be able to use the service offered and accessed by you accordingly.
This website uses the following types of cookies, the scope and functionality of which are explained below:
- Essential cookies: Absolutely necessary cookies ensure functions without which you cannot use our websites as intended. These cookies are used exclusively by us and are used, for example, to ensure that you, as a registered user, remain logged in when accessing various subpages of our website and thus do not have to re-enter your login data every time you access a new page. The legal basis for use is our legitimate interest within the meaning of Art. 6 Paragraph 1 Clause 1 Letter f of GDPR.
- Functional cookies: Enable our website to save information you have already provided and to offer you improved functions based on this. The legal basis for the use of these cookies is your consent in accordance with Art. 6 Paragraph 1 Clause 1 Letter a of GDPR.
- Marketing or tracking cookies: These cookies are used to collect information about the websites visited by the user, to create targeted and more effective advertising for the user and to enable us to identify the interests of website visitors in order to make our website even more interesting in the future.
Marketing and/or tracking cookies are only set after your active consent.
The legal basis for data processing is Art. 6 Para. 1 S. 1 lit. a GDPR.
opt-out for marketing cookies
manage cookies used for online advertising through tools developed in many countries as part of self-regulatory programs, such as the US-based https://www.aboutads.info/choices/ or the EU-based https://www.youronlinechoices.com/de/praferenzmanagement/ .
You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, e.g. third-party cookies (cookies that are set by a third party, i.e. not by the actual website you are currently on), exclude the acceptance of cookies for certain cases or in general, and activate the automatic deletion of cookies when closing the browser. You can delete saved cookies at any time using your web browser.
You have the option of deactivating cookies in your browser at any time.
However, if cookies are deactivated, the functionality of this website may be limited.
Deleting cookies
Cookies are stored on your device until you delete them, which you can do at any time. Furthermore, expired cookies are automatically deleted from your browser if you have set up your browser accordingly. Expired cookies are no longer sent by your browser to our servers and can therefore no longer be used by us.
Here you can find information about how to delete cookies in your browser and manage cookie settings for the most common browsers:
desktop PC / laptop
mobile devices
Unless you have made or make any different settings, cookies that are intended to enable or ensure the necessary technical functions will remain on your device until you close the browser; other cookies may remain on your device for longer (maximum 6 months).
To protect your privacy, you should regularly check the cookies on your device and your browser history and delete them yourself.
We also use so-called local storage and session storage technology (also called “local data” and “local storage” and “session storage”), which means we use the storage capacity of your browser.
With LocalStorage, data is stored locally in your browser's cache, which continues to exist and can be read even after you close the browser window or exit the program if you do not actively delete the cache.
Local Storage enables your preferences when using our websites to be stored on your computer and used by you.
The functionality of Session Storage is the same as that described for LocalStorage, except that the corresponding data is automatically removed from your browser’s cache immediately after you close the browser (“session”).
Third parties cannot access the data stored in LocalStorage and Session Storage. They are not passed on to third parties and are not used for advertising purposes. In particular, this technology is used to present our content to you in an attractive graphic format (e.g. pop-up windows, etc.) and to personalize our offering and navigation on our pages for you.
The data will not be merged with other data (e.g. information from tracking tools that are also stored separately in LocalStorage).
LocalStorage also stores certain information and entries for the tracking tools for transmission and evaluation. This data is only used to analyze and evaluate the surfing behavior of visitors. The data stored in LocalStorage is not used for advertising purposes.
Insofar as the use of this technology is necessary for the operation of the website, the processing is carried out on the basis of our legitimate interest in being able to make you an attractive, fully functional offer, on the basis of Article 6 Paragraph 1 Clause 1 Letter f of GDPR, otherwise on the basis of your consent in accordance with Art. 6 Paragraph 1 Clause 1 Letter a of GDPR.
This site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as orders or inquiries that you send to us as the site operator. You can recognize an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser line.
If SSL or TLS encryption is activated, the data you send to us cannot be read by third parties (end-to-end encryption). The protocols authenticate the communication partner and ensure the integrity of the data being transported.
This website uses the cookie consent technology from Usercentrics to obtain your consent to the storage of certain cookies on your device and to document this in compliance with data protection regulations. The provider of this technology is Usercentrics GmbH, Rosental 4, 80331 Munich, website: https://usercentrics.com/de/ (hereinafter "Usercentrics").
When you enter our website, the following personal data is transferred to Usercentrics:
- Your consent(s) or the revocation of your consent(s)
- your IP address (truncated)
- information about your browser
- information about your device
- time of your visit to the website
Furthermore, Usercentrics stores a cookie in your browser in order to be able to assign the consent granted or its revocation to you. The data collected in this way is stored until you ask us to delete it, delete the Usercentrics cookie yourself or the purpose for storing the data no longer applies. Mandatory statutory retention periods remain unaffected.
This data will not be passed on to any other third parties.
This data processing is carried out in accordance with Art. 6 Paragraph 1 Clause 1 Letter f of GDPR on the basis of our legitimate interest in providing a cookie consent management service for website visitors.
We have concluded a contract for order processing with Usercentrics. This is a contract required by data protection law that guarantees that Usercentrics only processes the personal data of our website visitors in accordance with our instructions and in compliance with the GDPR.
On our website you have the option to contact us via email or contact form.
In this context, your details from the form, including the contact details you provided there, will be stored and processed by us for the purpose of processing your request and in the event of follow-up questions.
This data (e.g. name, email address, IP address) will not be passed on to third parties without your consent.
The data will not be merged with other data collected on this website.
The data may be stored as part of customer relations management (CRM) if you are already a customer of our company.
The contact form is sent using TLS technology. The encryption serves to prevent unauthorized third-party access to your personal data.
This data is processed on the basis of Art. 6 (1) (b) GDPR, provided that your request is related to the fulfillment of a contract or is necessary to carry out pre-contractual measures.
In all other cases, the processing is based on our legitimate interest in the effective processing of the enquiries addressed to us (Art. 6 Para. 1 lit. f GDPR).
The data you provide will remain with us until you request deletion, revoke your consent to storage or the purpose for storing the data no longer applies (e.g. after your request has been processed). Mandatory legal provisions - in particular retention periods - remain unaffected.
9th Newsletter
This website uses Newsletter2Go to send newsletters. The provider is Newsletter2Go GmbH, Nürnberger Straße 8, 10787 Berlin, Germany.
The newsletter will be sent to your email address based on your personal registration with subsequent confirmation (double opt-in), with which you consent to the newsletter being sent.
The legal basis for this is Art. 6 Paragraph 1 Clause 1 Letter a of GDPR.
In order to send the newsletter, we store your email address as well as your first and last name if you have provided them to us voluntarily, and the lists you have subscribed to.
Newsletter2Go is a service that can be used, among other things, to organize and analyze the sending of newsletters. The data you enter for the purpose of subscribing to the newsletter is stored on the Newsletter2Go servers in Germany.
If you do not want Newsletter2Go to analyze your data, you must unsubscribe from the newsletter. We provide a link for this in every newsletter message. You can also unsubscribe from the newsletter directly on the website.
With the help of Newsletter2Go we are able to analyse our newsletter campaigns. For example, we can see whether a newsletter message has been opened and which links have been clicked. This allows us to determine which links have been clicked particularly often.
We can also see whether certain previously defined actions were carried out after opening/clicking (conversion rate). This allows us to see, for example, whether you made a purchase after clicking on the newsletter.
Newsletter2Go also enables us to divide newsletter recipients into different categories (“cluster”). Newsletter recipients can be divided by age, gender or place of residence, for example. This allows the newsletters to be better tailored to the respective target groups.
Detailed information about the functions of Newsletter2Go can be found at the following link: https://www.newsletter2go.de/features/newsletter-software/ .
The data processing is carried out on the basis of your consent (Art. 6 para. 1 lit. a GDPR). You can revoke this consent at any time. The legality of the data processing operations that have already taken place remains unaffected by the revocation.
To ensure that the newsletter is sent with consent, the so-called double opt-in procedure is used. The user receives a confirmation email giving them the opportunity to legally confirm their registration. Only if they confirm will their address be actively added to the mailing list.
This data will be used exclusively to send the requested information and offers.
The data you provide to us for the purpose of subscribing to the newsletter will be stored by us until you unsubscribe from the newsletter and will be deleted from both our servers and the servers of Newsletter2Go after you unsubscribe from the newsletter.
Revocation of consent : You can object to the use of your data at any time with effect for the future. You will find an option to unsubscribe from the newsletter at the end of each newsletter email or under this link: https://www.kraft-baustoffe.de/web/aktuelles/newsletter/ [INSERT LINK]
For more information, please see Newsletter2Go’s privacy policy at: https://www.newsletter2go.de/features/datenschutz-2/.
We have concluded a contract with Newsletter2Go in which we oblige Newsletter2Go to protect our customers' data and not to pass it on to third parties. This contract can be viewed at the following link: https://www.newsletter2go.de/docs/datenschutz/ADV_Muster_Newsletter2Go_GmbH_latest_Form.pdf?x48278 .
10. Web-Shop
When you place an order in our web shop, it is necessary to collect the personal data necessary for the conclusion of the contract.
To use the customer account and to place an order in our web shop, you must register by entering your e-mail address and a password of your choice.
The data you provide will be used to process your order from the web shop.
Depending on the payment method, your payment details may be required. We may forward these to third parties for this purpose (e.g. to our main bank or, in the case of credit card payments, to your credit card provider).
Your personal data may be passed on to the following categories of recipients: customer centers, shipping companies, direct suppliers, payment service providers, and, if applicable, debt collection service providers.
To the extent necessary under data protection law, we have concluded data processing agreements with the respective service providers in accordance with Art. 28 GDPR.
The legal basis for the processing of customer data is Art. 6 Para. 1 S. 1 lit. b GDPR.
Due to various retention and documentation obligations, we are obliged to store your address, payment and order data for a period of ten years. The obligations arise, among other things, from the German Commercial Code (HGB) and the German Tax Code (AO).
The ordering process is encrypted using TLS technology. The encryption serves to prevent unauthorized third-party access to your personal data.
11. Registration Dealer / Private Customer
On our website you can register for our web shop and create a personal customer account.
This allows you to shop quickly, user data and settings can be saved, you can view your order and receive shipment information, and you can manage your newsletter subscription.
We use the so-called double opt-in procedure for registration, i.e. your registration is only complete when you have previously confirmed your registration via a confirmation e-mail sent to you for this purpose by clicking on the link contained therein.
If you do not confirm this within the period stated in this email, your registration will be automatically deleted from our database. Providing the aforementioned data is mandatory for registration.
The data collected for the purpose of registration are (e.g.
- Names, first names
- Address, delivery address if applicable
- E-mail address
- Telephone number/fax number
- Business registration (dealers only)
- Company (dealer only)
- goods/services
- IP address (This is used exclusively to the extent necessary to protect the legitimate interests of the controller or a third party, unless the interests or fundamental rights and freedoms of the data subject which require the protection of personal data prevail (e.g. for the pursuit of legal claims and the investigation of criminal offenses).
- Bank details, depending on the payment method
- if necessary, further information for business customers, e.g. your business number (this can be sent by fax or transmitted directly during registration).
The mandatory information required for contract execution is marked separately; all other information is voluntary.
In this context, we process the data mentioned (except your IP address) to fulfil and process contracts (including payment processing and, if applicable, credit checks), customer inquiries and for our own advertising purposes. The data is also used to fulfil our legal obligations to state and federal authorities (e.g. tax office, customs authorities).
At least your first name, last name and address are required to identify you. When making purchases in the web shop, you must also provide your email address for order confirmation and, for delivery, your delivery address, and, depending on the payment method, your bank details.
We store your data processed for this purpose as part of the registration for the password-protected area until you revoke your access, unless other retention periods conflict with this.
You can close your online account at any time by sending us a short message via email or post: onlineshop@kraft-baustoffe.de.
The legal basis for the processing of customer data is Art. 6 Paragraph 1 Clause 1 Letter b of GDPR.
12. Payment options
12.1 Advance payment
In our web shop we offer payment by “prepayment”, among other things. The provider of this payment method is KRAFT Baustoffe GmbH.
With this payment option, you transfer the stated invoice amount to the KRAFT Baustoffe GmbH account before the goods are delivered.
Please transfer the total amount of your order to our account
Bank name: Postbank Munich
Swift address/ BIC: PBNKDEFF700IBAN: DE58700100800911871801
The transmission of your data to KRAFT Baustoffe GmbH is based on Art. 6 Para. 1 S. 1 lit. a GDPR (consent) and Art. 6 Para. 1 S. 1 lit. b GDPR (processing to fulfill a contract).
You have the option to revoke your consent to data processing at any time.
A revocation does not affect the effectiveness of data processing operations that occurred in the past.
12.2 PayPal
In our web shop, it is possible to process the payment transaction using the online payment service PayPal. PayPal enables online payments to be made to third parties. The European operating company of PayPal is PayPal (Europe) S.à.rl & Cie. SCA, 22-24 Boulevard Royal, 2449 Luxembourg.
A PayPal account is managed via an email address, which is why there is no traditional account number. PayPal enables you to make online payments to third parties or to receive payments. PayPal also performs escrow functions and offers buyer protection services.
If you use PayPal to pay, the payment details you provide will be transmitted to PayPal and the person concerned consents to the transmission of personal data required for payment processing. This usually includes the following data:
• Name
• Address
• Company
• E-mail address
• Telephone and mobile number
• IP address
• or other data necessary for payment processing
Personal data related to the respective order is also necessary for the processing of the purchase contract.
The data transmitted to PayPal may be transmitted by PayPal to credit reporting agencies.
The purpose of this transmission is to check your identity and creditworthiness. PayPal may also pass your data on to third parties if this is necessary to fulfil contractual obligations or if the data is to be processed on their behalf.
You can find PayPal’s privacy policy at https://www.paypal.com/de/webapps/mpp/ua/privacy-full/.
The legal basis for the transmission is: Art. 6 Para. 1 lit. a GDPR and Art. Art. 6 Para. 1 lit. b GDPR.
You can revoke your consent to data processing at any time. The revocation has no effect on the effectiveness of data processing operations that have taken place in the past.
12.3 Payment by credit card (Visa/Mastercard/American Express)
In our web shop we offer payment by Visa/Mastercard/American Express, among others. The provider of this payment service is PayPal (Europe) S.à.rl & Cie. SCA, 22-24 Boulevard Royal, 2449 Luxembourg.
If you choose to pay via Visa/Mastercard/American Express, the payment data you enter will be transmitted to PayPal (Europe) S.à.rl & Cie. SCA, 22-24 Boulevard Royal, 2449 Luxembourg.
The following data is used for the payment: card number, card sequence number, verification number, card type (e.g. VISA, Mastercard, Amex) and card expiry date.
Also the amount, date and time, the ID of the card reader (location, company and branch where you pay), PIN and your signature.
Payment processing is handled securely via an external site of PayPal (Europe) S.à.rl & Cie. SCA, 22-24 Boulevard Royal, 2449 Luxembourg to fully protect your data.
Once the transaction is completed, the invoice amount will be debited from your account conveniently and securely.
Charge back If you dispute a transaction that was made with your card: purchase receipt and, if applicable, other information about you with which the payment recipient wants to prove his claim, e.g. name and address.
The transmission of your data to PayPal (Europe) S.à.rl & Cie. SCA, 22-24 Boulevard Royal, 2449 Luxembourg is based on Art. 6 Para. 1 Clause 1 Letter a of GDPR (consent) and Art. 6 Para. 1 Clause 1 Letter b of GDPR (processing to fulfill a contract).
You have the option to revoke your consent to data processing at any time.
A revocation does not affect the effectiveness of data processing operations that have taken place in the past.
13. Integration of the Trusted Shops Trustbadge
The Trusted Shops Trustbadge is integrated into this website to display our Trusted Shops seal of approval and any reviews collected, as well as to offer Trusted Shops products to buyers after an order has been placed. The Trustbadge and the services advertised with it are an offer from Trusted Shops GmbH, Subbelrather Str. 15C, 50823 Cologne.
This serves to safeguard our legitimate interests in optimal marketing by enabling secure shopping in accordance with Art. 6 (1) sentence 1 lit. f GDPR, which prevail within the framework of a balancing of interests.
The Trustbadge is provided as part of order processing by a CDN provider (Content Delivery Network). Trusted Shops GmbH also uses service providers from the USA. An appropriate level of data protection is ensured. Further information on data protection at Trusted Shops GmbH can be found here: https://www.trustedshops.de/impressum/#datenschutz
When you call up the Trustbadge, the web server automatically saves a so-called server log file, which also contains your IP address, the date and time of the call, the amount of data transferred and the requesting provider (access data) and documents the call. Individual access data is stored in a security database for the analysis of security irregularities.
The log files are automatically deleted no later than 90 days after creation.
Further personal data will be transferred to Trusted Shops GmbH if you decide to use Trusted Shops products after completing an order or if you have already registered to use them. The contractual agreement between you and Trusted Shops applies. For this purpose, personal data is automatically collected from the order data.
Whether you as a buyer are already registered to use a product is automatically checked using a neutral parameter, the email address hashed using a cryptographic one-way function. Before transmission, the email address is converted into this hash value, which Trusted Shops cannot decrypt. After checking for a match, the parameter is automatically deleted.
This is necessary to fulfil our and Trusted Shops' overriding legitimate interests in providing buyer protection linked to the specific order and transactional evaluation services in accordance with Art. 6 (1) sentence 1 lit. f GDPR.
Further details, including on how to object, can be found in the Trusted Shops privacy policy linked above and in the Trustbadge.
14. Transfer of data to third countries
We use various service providers on our website who provide us with different technologies and tools. Some of these service providers transfer personal data to countries outside the European Union or the European Economic Area where there is no adequate level of data protection or no level of data protection that is essentially equivalent to European data protection law.
These countries include in particular the United States of America (USA). The associated transfer of personal data must be permissible in accordance with Art. 44 ff. of the GDPR.
In July 2020, the European Court of Justice (ECJ) ruled that the Privacy Shield Agreement between the EU and the USA (EU-US Privacy Shield) can no longer be used to transfer personal data to the USA. This means that the original adequacy decision has been repealed.
We have therefore concluded the standard data protection clauses issued by the EU Commission, which remain valid, with these service providers affected by this regulation.
Where possible, we also agree on additional guarantees to ensure that adequate data protection is guaranteed in the USA or other third countries.
If a service provider maintains so-called approved rules of conduct (Binding Corporate Rules, BCR) that ensure that European data protection standards are observed within the company, we do not agree on separate standard contractual clauses with the service providers subject to the respective BCR.
However, it may happen that, despite contractual and technical protective measures, the level of data protection in the third country does not correspond to that of the EU. In these cases, we ask you for your consent in accordance with Art. 49 (1) (a) GDPR to the transfer of personal data to a third country as part of the cookie consent, in (contact) forms or for other registrations and logins. This applies in particular to the transfer of data to the USA. There, authorities and intelligence services such as the National Security Agency (NSA) may have access rights and reading options in relation to personal data without us as the data exporter or you as the data subject knowing about this and without suitable legal remedies being available to prevent this or to take action against such access.
However, some of our service providers undertake to exercise and exhaust legal remedies available to them under US law against any government access to your data. Some of them also publish transparency reports in which – where legally possible – government requests and responses are listed.
15. Information about Google services
We use various services from Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland on our website.
This means that Google may receive information from you. It cannot be ruled out that Google will also transmit the information to a server in a third country.
We have concluded a data processing agreement with Google for the transmission of personal data. If data is transferred to the USA or other third countries where an adequate level of data protection cannot be guaranteed, we have concluded EU standard data protection clauses with Google in accordance with Art. 46 GDPR.
Google has committed to complying with the standard contractual clauses for the transfer of personal data to third countries pursuant to Directive 95/46/EC (Standard Contractual Clauses – SCC).
For further information please visit:
https://policies.google.com/privacy/frameworks?hl=de
We cannot influence which data Google actually collects and processes. Google states that in principle the following information (including personal data) can be processed:
- Protocol data (especially the IP address)
- Location-based information
- Unique application numbers
- Cookies and similar technologies
If you are logged into your Google Account, Google may link the processed information to your account, depending on your account settings. You can find more information from Google at https://www.google.com/intl/de/policies/privacy/index.html.
You can prevent this by logging out of your Google account or by making the appropriate account settings in your Google account. You can also prevent the installation of cookies - if Google sets any - by making the appropriate settings in your browser; however, we would like to point out that in this case you may not be able to use all functions of this website to their full extent.
For more information, please see Google’s privacy policy, which you can access here: https://www.google.com/policies/privacy/.
For more information about the individual Google services that we use on this website, please see the additional privacy policy.
We use “Google Tag Manager” on our websites. The service is operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, or if you have your registered office or place of residence in the EU, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”).
The Google Tag Manager provides functionality that allows us to integrate additional services on our website easily, efficiently and dynamically. Code snippets can be implemented more easily in websites or apps. This allows us to quickly configure and adapt services integrated via Google Tag Manager, so-called tags, without having to make technical changes to our website.
The functions of the tags are often used, for example, to analyze the online behavior of users (in general or on the site), to optimize marketing campaigns or to display suitable advertising. Services whose use you have already objected to will not be delivered to your browser by the Google Tag Manager.
The Google Tag Manager does not collect any personal data and does not set any cookies itself. However, it can transfer cookies because the tags used can set cookies. When you call up the Google Tag Manager, however, the IP address and browser fingerprint (also known as device fingerprinting or online fingerprinting) are transferred to Google. This constitutes data processing within the meaning of Art. 4 No. 2 GDPR.
The legal basis for the use of “Google Tag Manager” is your consent in accordance with Art. 6 Paragraph 1 Clause 1 Letter a of GDPR, provided that you give us your consent to do so when you first access the site.
Google processes your data in the USA, among other places. We would like to point out that, in the opinion of the European Court of Justice, there is currently no adequate level of protection for data transfer to the USA. This can involve various risks for the legality and security of data processing. Google uses so-called standard contractual clauses in accordance with Art. 46, Paragraphs 2 and 3 of the GDPR as the basis for data processing by recipients based in third countries (outside the European Union, Iceland, Liechtenstein, Norway, i.e. in particular in the USA) or for data transfer there.
Standard contractual clauses are templates provided by the EU Commission and are intended to ensure that your data complies with European data protection standards even if it is transferred to and stored in third countries (such as the USA).
By concluding these clauses, Google undertakes to comply with the European level of data protection when processing your relevant data, even if the data is stored, processed and managed in the USA. These clauses are based on an implementing decision of the EU Commission. You can find the decision and the corresponding standard contractual clauses here:
https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?locale=de .
Addendum to Data Processing
We have concluded the Google Ads Data Processing Terms with Google. These correspond to the standard contractual clauses and also apply to the Google Tag Manager.
The Google Ads data processing terms can be found at https://business.safety.google/adsprocessorterms/
Please refer to the following link for Google’s privacy policy: https://policies.google.com/privacy?hl=de .
The terms of use of Google Tag Manager can be found under the following link: https://marketingplatform.google.com/about/analytics/tag-manager/use-policy/
This website uses the web analysis service “Google Analytics”, operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, or if you have your registered office or place of residence in the EU, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”).
Google Analytics uses so-called “cookies”, text files that are stored on your computer and that enable an analysis of your use of the website if you have agreed to the use of cookies for marketing purposes.
The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there.
Google Analytics 4 does not log or store individual IP addresses.
No precise location data is provided. Instead, the following metadata is derived from IP addresses: "City" (and the derived latitude and longitude of the city), "Continent", "Country", "Region", "Subcontinent" (and the ID-based equivalents). For access originating from the EU, IP address data is only used to derive location data and is immediately deleted afterwards. It is not logged, is not accessible, and is not used for any other use cases.
When collecting measurement data in Analytics, all IP lookups are performed on EU-based servers before the data is forwarded to Analytics servers for processing.
On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide the website operator with other services relating to website activity and internet usage.
You can prevent cookies from being saved by selecting the appropriate settings on your browser; however, please note that if you do this you may not be able to use the full functionality of this website. The data will be deleted after 14 months.
You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by downloading and installing the browser plug-in available under the following link: http://tools.google.com/dlpage/gaoptout?hl=de.
The terms of use and privacy policy can be found at http://www.google.com/analytics/terms/de.html or at https://www.google.de/intl/de/policies/.
Google processes your personal data on our behalf. We have therefore concluded a data processing agreement with Google in accordance with Art. 28 Para. 3 GDPR, in which Google undertakes to protect your personal data and not to pass it on to third parties for purposes other than those stated above.
The legal basis for the use of Google Analytics is your consent in accordance with Section 25 Paragraph 1 TTDSG and Article 6 Paragraph 1 Clause 1 Letter a of GDPR, provided that you give us your consent to do so when you first access the site.
Since there is no adequacy decision by the EU Commission for the transfer of personal data to the USA ‑, we have concluded standard data protection clauses with Google within the meaning of Art. 46 Para. 2 lit. c GDPR.
You can revoke your consent to data processing and transmission at any time without giving reasons by sending a message to the contact details of our data protection officer, deleting the cookies in your browser or by clicking on the following link:
The legality of data processing that has already taken place is not affected by the revocation of consent.
On this website we use the service “Google Maps”, operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, or if you have your registered office or place of residence in the EU, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”).
Google Maps is integrated into the website via the Google API in order to visualize location information and display it in the form of a map. The files required for this purpose are requested via the Google domains maps.googleapis.com, fonts.googleapis.com and/or fonts.gstatic.com.
Gstatic is a domain used by Google to load static content into another domain name to reduce bandwidth usage and increase network performance for the end user.
In order to display the map, the processing of the IP address by Google Maps is technically necessary. With regard to the other web services integrated using Google APIs, the regulations in the respective section of this data protection declaration for Google APIs apply.
By visiting the website, Google receives the information that you have accessed the corresponding subpage of our website. In addition,
- the IP address,
- Date and time of the request,
- Time zone difference to Greenwich Mean Time (GMT),
- Content of the request (specific page),
- Access status/HTTP status code,
- the amount of data transferred,
- the website from which the request comes (so-called referrer),
- Type and version of the browser used, including the language version used, and
- Type and version of the operating system and interface used
This information (including your IP address) is transmitted from your browser directly to a Google server in the USA and stored there.
The transmission takes place regardless of whether Google provides a user account through which you are logged in or whether no user account exists. If you are logged in to Google, your data will be assigned directly to your account. If you do not want your Google profile to be assigned, you must log out of your Google profile before using our website. Google stores your data as usage profiles and uses them for the purposes of advertising, market research and/or needs-based design of its website. Such an evaluation is carried out in particular (also for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles; you must contact Google to exercise this right.
You can prevent the collection and forwarding of personal data to Google (in particular your IP address) as well as the processing of this data by Google by deactivating the execution of script code in your browser, installing a script blocker in your browser or activating the "Do Not Track" setting in your browser. Google's security and data protection principles can be found at https://policies.google.com/privacy .
Further information on the purpose and scope of data collection and processing by the plug-in provider can be found in the provider's privacy policy. There you will also find further information on your rights in this regard and setting options for protecting your privacy: http://www.google.de/intl/de/policies/privacy .
We have concluded a joint processing agreement with Google with regard to Google Maps. The content can be found at https://privacy.google.com/intl/de/businesses/mapscontrollerterms/ .
The data transfer to the USA is based on your consent in accordance with Art. 6 Paragraph 1 Clause 1 Letter a of GDPR.
You can revoke your consent to data processing at any time with effect for the future. To do so, delete the cookies in your browser or use the link to manage your consent, which you can find in this privacy policy in the section on "Cookies". The revocation of consent does not affect the legality of the data processing carried out up to the time of revocation.
19. Order tracking in the MyKRAFT app
In our MyKRAFT app you have the option of tracking your orders with us. To do this you need your customer number and the relevant receipt number/delivery note number.
After entering the numbers, a comparison is made with our inventory management system and the processing status of your order is displayed in the app. Your data is not saved on your mobile device and is not passed on to third parties.
The legal basis for data processing is our legitimate interest in smooth delivery and compliance with the delivery date (Article 6 (1) sentence 1 lit. f GDPR).
20. Profiles in social networks
Our presence on social networks and video platforms, which we name below, serves to enable active and contemporary communication with our customers and interested parties. We provide information there about our services, products and interesting special offers relating to our company and our services. You can find further information about us as the provider of the social media channel in our https://www.kraft-baustoffe.de/web/rechtliche-informationen-des-anbieters/impressum/<Link to 'Impressum'>.
In the following, we provide you with the data protection information in accordance with Art. 13 of the General Data Protection Regulation (GDPR) regarding the social media presences we operate:
https://www.facebook.com/KraftBaustoffe
https://www.instagram.com/kraft_baustoffe/?igshid=YmMyMTA2M2Y%3D
https://www.youtube.com/@kraft_baustoffe
https://www.xing.com/pages/kraftbaustoffegmbh
20.1 Fan page on Facebook / Facebook presence
The social network Facebook is operated by Meta Platforms, Inc., 1 Hacker Way, Menlo Park, CA 94025, USA, or if you have your registered office or place of residence in the EU, Facebook Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland (“Facebook”).
When you visit our online presence on social media, your data may be automatically collected and stored for market research and advertising purposes. So-called usage profiles are created from this data using pseudonyms. These can be used, for example, to place advertisements within and outside the platforms that presumably correspond to your interests. Cookies are generally used on your device for this purpose.
The function of cookies is explained in our data protection policy, so please see the relevant information there. Visitor behavior and user interests are stored in these cookies. This serves to protect our legitimate interests, which prevail in the context of a balancing of interests, in an optimized presentation of our services and offers as well as effective communication with customers and interested parties. The legal basis for the processing is therefore Art. 6 Para. 1 Clause 1 Letter f of GDPR.
The legal basis for the collection and processing of data is your consent within the meaning of Art. 6 Paragraph 1 Clause 1 Letter a) of GDPR, which you may have given to Facebook when you visit the website there. You can revoke your consent to data processing at any time with effect for the future; please contact Facebook directly to do so. The revocation of consent does not affect the legality of the data processing carried out up to the time of revocation.
For detailed information on the processing and use of data by the providers on their websites as well as a contact option and your related rights and setting options to protect your privacy, in particular objection options (so-called opt-out), please refer to Facebook's privacy policy: https://www.facebook.com/about/privacy/ .
You can find the opt-out option as follows: https://www.facebook.com/settings?tab=ads
The data processing is carried out on the basis of an agreement between joint controllers in accordance with Art. 26 GDPR, which you can view here: https://www.facebook.com/legal/terms/page_controller_addendum
Since there is no adequacy decision by the EU Commission for the transfer of personal data to the USA ‑, we have concluded standard data protection clauses with Facebook within the meaning of Art. 46 Para. 2 lit. c GDPR.
The social network Instagram is operated by Meta Platforms, Inc., 1 Hacker Way, Menlo Park, CA 94025, USA, or if you have your registered office or place of residence in the EU, Facebook Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland (“Facebook”).
When you visit our online presence on social media, your data may be automatically collected and stored for market research and advertising purposes. So-called usage profiles are created from this data using pseudonyms. These can be used, for example, to place advertisements within and outside the platforms that presumably correspond to your interests.
For this purpose, cookies are generally used on your device. The function of cookies is explained in our data protection policy, so please see the relevant information there. Visitor behavior and user interests are stored in these cookies.
This serves to safeguard our legitimate interests, which prevail within the framework of a balancing of interests, in an optimized presentation of our services and offers as well as effective communication with customers and interested parties. The legal basis for the processing is therefore Art. 6 Para. 1 Clause 1 Letter f of GDPR.
The legal basis for the collection and processing of data is your consent within the meaning of Art. 6 Paragraph 1 Clause 1 Letter a) of GDPR, which you may have given to Facebook when you visit the website there.
You can revoke your consent to data processing at any time with effect for the future; to do so, please contact Facebook directly. The revocation of consent does not affect the legality of the data processing carried out up to the time of revocation.
For detailed information on the processing and use of data by the providers on their websites as well as a contact option and your related rights and setting options to protect your privacy, in particular objection options (so-called opt-out), please refer to the privacy policy of the Instagram service: https://help.instagram.com/519522125107875 .
You can find the option to opt out in the privacy settings of your Instagram account at: https://www.instagram.com/accounts/login/?next=/accounts/privacy_and_security/ .
Furthermore, we have concluded standard data protection clauses with Facebook within the meaning of Art. 46 (2) (c) GDPR for the transfer of data to the USA.
The YouTube video platform is operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, or if you have your registered office or place of residence in the EU, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”).
The following information does not concern any direct integration of YouTube videos on our website.
When you visit our channel on YouTube, your data may be automatically collected and stored for market research and advertising purposes. So-called usage profiles are created from this data using pseudonyms. These can be used, for example, to place advertisements within and outside the video platform that presumably correspond to your interests. Cookies are usually used on your device for this purpose. The function of cookies is explained in the data protection information there, so please see the relevant information there. Visitor behavior and the interests of users are stored in these cookies.
Furthermore, we receive a statistical evaluation from the data collected to determine which groups of people are interested in our individual videos posted on YouTube. In particular, the number of views and playing times of videos are provided to us in this context. The data is provided for statistical evaluations in such an anonymized form that it is not possible to draw conclusions about individual people. The information contained includes the approximate geographical location, age group and other summary characteristics.
The legal basis for the collection and processing of data is your consent within the meaning of Art. 6 Paragraph 1 Clause 1 Letter a of GDPR, which you may have given to Google when you visit the website(s) there. You can revoke your consent to data processing at any time with effect for the future; please contact Google directly to do so. The revocation of consent does not affect the legality of the data processing carried out up to the time of revocation.
For detailed information on the processing and use of data by Google on the YouTube website, as well as a contact option and your rights and setting options for protecting your privacy, please refer to Google's privacy policy, which you can find under the following link: https://policies.google.com/privacy?hl=de&gl=de
Since there is no adequacy decision by the EU Commission for the transfer of personal data to the USA ‑, we have concluded standard data protection clauses with Google within the meaning of Art. 46 Para. 2 lit. c GDPR.
These Terms supplement the agreement between you ("Customer") and Google regarding your use of the YouTube Services ("Agreement"). This Agreement may include the YouTube Terms of Service or a license agreement to the extent they apply to the Customer. Please take the time to read these data processing terms carefully (https://www.youtube.com/t/terms_dataprocessing).
“Standard Contractual Clauses” means the European Commission’s standard contractual clauses available at https://privacy.google.com/businesses/processorterms/mccs , which are standard data protection clauses for the transfer of personal data to processors established in third countries that do not provide an adequate level of data protection, as described in Article 46 of the EU GDPR.
We operate websites on XING and Kununu to present our company. The provider of XING and Kununu is New Work SE, Dammtorstraße 30, 20354 Hamburg.
Our XING profile is designed to actively and contemporary address potential employees in a professional environment. On this page we also share information about our company and present ourselves to the outside world. We provide information about our services, products, interesting special offers and job opportunities in our company.
If Xing asks you for consent to data processing, e.g. by checking a checkbox, the legal basis for data processing is Art. 6 (1) sentence 1 lit. a GDPR.
For detailed information on the processing and use of data by the providers on their websites, as well as a contact option and your rights and setting options for protecting your privacy, please refer to Xing's privacy policy: https://privacy.xing.com/de/datenschutzerklaerung
Kununu primarily offers users the opportunity to make and view reviews of employers. At the same time, we use the online presence at kununu to provide information about our company, career opportunities, our products and services.
When you visit our page on kununu and during other interactions with our page on kununu, kununu collects personal data from users, for example through the use of cookies. Such data collection by kununu can also occur from users who are not logged in or registered with kununu. Information about data collection and further processing by kununu can be found in kununu's data protection information at https://privacy.xing.com/de/datenschutzerklaerung/druckversion.
The data processing takes place as joint processing. For content that you make available directly on the platform, i.e. comments, private messages or similar, New Work SE and we act as joint controllers in accordance with Art. 26 GDPR.
The legal basis for the processing of the data is your consent in accordance with Art. 6 Paragraph 1 Clause 1 Letter a of the General Data Protection Regulation (GDPR), insofar as you have given it, as well as the protection of legitimate interests in accordance with Art. 6 Paragraph 1 Clause 1 Letter f of the GDPR. If you contact us, the legal basis may also be Art. 6 Paragraph 1 Clause 1 Letter b of the GDPR (necessity for carrying out pre-contractual measures).
The legitimate interest mentioned is that we would like to communicate with you via our kununu page and inform you about our company, career opportunities and jobs, our products and services.
You can find out about how XING and Kununu process your data in XING's privacy policy, which applies to all New Work SE services: https://privacy.xing.com/de/datenschutzerklaerung/allgemeine-hinweise.
Since only New Work SE has information about the data actually collected and its use on the respective platforms, requests for information and the assertion of other data subject rights should be made directly there. Of course, you can also address inquiries in this regard to us; we will forward them to the operator for further processing.
We only process data that you provide to us directly via the XING and Kununu platforms. This includes comments, inquiries, your user profile, ratings and similar information. This is retained for the duration of the website's existence.
The data we use is only processed within the EU or EEA. We do not transfer data to third countries.
20.5 Order service via WhatsApp via MessengerPeople
We use the services of MessengerPeople GmbH, Herzog-Heinrich-Str. 9, 80336 Munich to send you requested content via various messenger services. The data protection information of our service provider MessengerPeople GmbH applies to the use: https://www.messengerpeople.com/de/datenschutzerklaerung/.
WhatsApp is a service provided by WhatsApp Inc., which in turn is part of Facebook, Inc. We use this external application exclusively for orders.
Messenger People processes personal data on our behalf. We have therefore concluded a data processing agreement with MessengerPeople in accordance with Art. 28 Para. 3 GDPR, in which MessengerPeople undertakes to protect your personal data and not to pass it on to third parties for purposes other than those stated above.
By sending a start message to MessengerPeople, you agree that MessengerPeople may use your personal data (e.g. first and last name, telephone number, Messenger ID, profile picture, messages) for direct communication and the data processing required for this purpose using the selected messenger.
To use this service, you need an existing WhatsApp user account.
The responsible provider is WhatsApp, Inc., 1601 Willow Road, Menlo Park, California 94025, USA. Privacy policy available at https://www.whatsapp.com/legal/#privacy-policy .
Please read WhatsApp's privacy policy ( https://www.whatsapp.com/legal/ ) carefully before using WhatsApp. By using WhatsApp, you automatically agree to these policies.
However, please note the WhatsApp terms of use, over which we have no influence: If you install and use WhatsApp on your phone, you agree to the WhatsApp terms of use.
These include, among other things, granting WhatsApp Inc. access to your phone number and the contacts stored on your phone.
By using the WhatsApp messenger, the provider receives personal data (in particular communication metadata), which is also processed on servers in countries outside the EU (e.g. USA) where an adequate level of data protection cannot be guaranteed.
The legal basis for the processing of your personal data in the USA is Art. 6 Para. 1 S. 1 lit. a GDPR (your consent).
We will obtain your consent by you sending us a message and your message will be confirmed by us.
In its ruling of July 16, 2020, the European Court of Justice declared the EU-US Privacy Shield invalid. This means that the USA is classified as an unsafe third country because EU data protection standards are not adequately met. In particular, there is a risk that your data will be processed by US authorities for control and monitoring purposes. You as the data subject may then have no legal recourse.
If you send us an order via WhatsApp, you are sending us your telephone number. We only use the number for WhatsApp communication with you and the chat content only to process your order.
In order for us to process your order, the following information is necessary:
- First name Last Name
- customer number
- Construction site
- Article name / article number
- Delivery + period OR collection + branch
The legal basis for data processing is therefore Art. 6 Para. 1 S. 1 lit. b GDPR (initiation or performance of a contract).
We are in no way responsible for the content and data shared, uploaded and processed via WhatsApp outside of our own network. WhatsApp's privacy policy applies here.
21. Your rights and assertion of rights
You are entitled to the rights listed below. You can assert these against us. To assert your rights, please use the data listed above or contact us by email at: datenschutz@kraft-baustoffe.de
According to Art. 15 GDPR, you have the right to request information about your personal data processed by us. In particular, you can request information about the purposes of processing, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right to lodge a complaint, the origin of your data if it was not collected from us, as well as the existence of automated decision-making including profiling and, if applicable, meaningful information on its details;
Correction:
According to Art. 16 GDPR, you have the right to immediately request the correction of inaccurate or incomplete personal data stored by us;
Deletion:
According to Art. 17 GDPR, you have the right to request the erasure of your personal data stored by us, unless the processing is necessary to exercise the right to freedom of expression and information, to fulfill a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims;
Restriction of processing:
According to Art. 18 GDPR, you have the right to request the restriction of the processing of your personal data if you contest the accuracy of the data, the processing is unlawful but you refuse to delete it and we no longer need the data, but you require it to assert, exercise or defend legal claims or you have objected to the processing in accordance with Art. 21 GDPR;
Data portability:
According to Art. 20 GDPR, you have the right to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request that it be transmitted to another controller;
Revocation of your consent:
According to Art. 7 Para. 3 GDPR, you have the right to revoke your consent at any time. This means that we may no longer continue the data processing based on this consent in the future. The revocation of the consent does not affect the legality of the processing carried out on the basis of the consent until the revocation.
Please send your revocation to the details provided above or by email to: datenschutz@kraft-baustoffe.de
right of objection
You have the right to object at any time to the processing of personal data concerning you which is carried out on the basis of Art. 6 (1) sentence 1 lit. e) or f) GDPR, for reasons related to your particular situation; this also applies to profiling based on these provisions.
The controller will no longer process the personal data concerning you unless he can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or unless the processing serves to assert, exercise or defend legal claims.
If the personal data concerning you is processed for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for the purposes of such advertising; this also applies to profiling insofar as it is related to such direct marketing.
If you object to processing for direct marketing purposes, the personal data concerning you will no longer be processed for these purposes.
In connection with the use of information society services, you have the option of exercising your right of objection by means of automated procedures that use technical specifications, notwithstanding Directive 2002/58/EC.
Automated decision in individual cases including profiling
You have the right not to be subjected to a decision based solely on automated processing – including profiling – which produces legal effects concerning you or similarly significantly affects you. This shall not apply if the decision is necessary for entering into or fulfilling a contract between you and the controller, is permitted by Union or Member State law to which the controller is subject, and this law contains appropriate measures to safeguard your rights and freedoms as well as your legitimate interests, or is made with your explicit consent.
However, these decisions must not be based on special categories of personal data pursuant to Art. 9 (1) GDPR, unless Art. 9 (2)(a) or (g) GDPR applies and appropriate measures to protect your rights and freedoms as well as your legitimate interests have been taken.
Complaint to a supervisory authority:
According to Art. 77 GDPR, you have the right to complain to a supervisory authority. As a rule, you can contact the supervisory authority of your usual place of residence or work or of our company headquarters.
22. Status of the data protection information
The constant development of the Internet makes it necessary to adapt our privacy policy from time to time. We reserve the right to make changes at any time.
Status: April 2024
