Data protection

We inform you below in accordance with the statutory provisions of data protection law (in particular the new version of the Federal Data Protection Act (BDSG) and the European General Data Protection Regulation (GDPR)) about the type, scope, and purpose of the processing of personal data by our company. This privacy policy also applies to our websites and social media profiles. Regarding the definition of terms such as "personal data" or "processing," we refer to Art. 4 GDPR.

Name and contact details of the responsible person
Our responsible person (hereinafter "responsible person") within the meaning of Art. 4 (1) GDPR. 7 GDPR is:

KIPPFIX - Wiechers Schaubacktechnik GmbH
Rodendamm 26
28816 Stuhr
Germany

Phone: +49(0) 421 899020
Fax: -
Email: info@kippfix.de

Data types, purposes of processing and categories of data subjects

Below we inform you about the type, scope and purpose of the collection, processing and use of personal data.

1. Types of data we process
Inventory data (name, address, etc.), contact details (telephone number, email, fax, etc.), payment data (bank details, account details, payment history, etc.), contract data (subject of the contract, term, etc.), content data (text entries, videos, photos, etc.), communication data (IP address, etc.),

2. Purposes of processing according to Art. 13 (1) c) GDPR
Processing of contracts, evidentiary purposes / preservation of evidence, technically and economically optimizing the website, enabling easy access to the website, fulfilling contractual obligations, fulfilling statutory retention periods, optimizing and statistically evaluating our services, supporting commercial use of the website, improving the user experience, making the website user-friendly, marketing / sales / advertising, compiling statistics, handling an application process, customer service and customer care, processing contact requests, providing websites with functions and content, security measures,

3. Categories of data subjects pursuant to Art. 13 (1) (e) GDPR
Visitors/users of the website, customers, interested parties, applicants, employees of customers or suppliers,

The data subjects are collectively referred to as "users".

Legal basis for the processing of personal data

Below, we inform you about the legal basis for the processing of personal data:

1. If we have obtained your consent to process personal data, Art. 6 (1) (a) GDPR is the legal basis.
2. If processing is necessary to fulfill a contract or to carry out pre-contractual measures that are carried out at your request, Art. 6 (1) (b) GDPR is the legal basis.
3. If processing is necessary to fulfill a legal obligation to which we are subject (e.g. statutory retention periods), Art. Article 6 (1) (c) GDPR is the legal basis.
4. If processing is necessary to protect the vital interests of the data subject or another natural person, Article 6 (1) (d) GDPR is the legal basis.
5. If processing is necessary to protect our legitimate interests or the legitimate interests of a third party and your interests or fundamental rights and freedoms do not override them, Article 6 (1) (f) GDPR is the legal basis.

Disclosure of personal data to third parties and processors

We generally do not disclose any data to third parties without your consent. Should this be the case, the disclosure will be based on the aforementioned legal grounds, e.g., when data is disclosed to online payment providers for the purpose of contract fulfillment or due to a court order or due to a legal obligation to disclose the data for the purposes of criminal prosecution, to avert danger, or to enforce intellectual property rights.
We also use processors (external service providers, e.g., for web hosting our websites and databases) to process your data. If data is disclosed to the processors as part of a contract processing agreement, this always occurs in accordance with Art. 28 GDPR. We carefully select our processors, monitor them regularly, and have been granted the right to issue instructions regarding the data. In addition, the processors must have implemented appropriate technical and organizational measures and comply with data protection regulations in accordance with the new version of the German Federal Data Protection Act (BDSG) and the GDPR.

Data transfer to third countries

The adoption of the European General Data Protection Regulation (GDPR) created a uniform basis for data protection in Europe. Your data will therefore primarily be processed by companies to which the GDPR applies. Should processing take place through third-party services outside the European Union or the European Economic Area, these third-party services must meet the specific requirements of Articles 44 et seq. of the GDPR. This means that processing is carried out on the basis of special guarantees, such as the official recognition by the EU Commission of a level of data protection equivalent to that of the EU or compliance with officially recognized specific contractual obligations, the so-called "standard contractual clauses." For US companies, compliance with the so-called "Privacy Shield," the data protection agreement between the EU and the US, fulfills these requirements.

Deletion of data and storage period

Unless expressly stated in this privacy policy, your personal data will be deleted or blocked as soon as the purpose for storage no longer applies, unless further retention is necessary for evidentiary purposes or if statutory retention obligations conflict with this. These include, for example, commercial retention obligations for business letters according to Section 257 (1) of the German Commercial Code (HGB) (6 years) and tax retention obligations for receipts according to Section 147 (1) of the German Fiscal Code (AO) (10 years). When the prescribed retention period expires, your data will be blocked or deleted unless storage is still required to conclude or fulfill a contract.

Existence of automated decision-making

We do not use automated decision-making or profiling.

Provision of our website and creation of log files

1. If you use our website for information purposes only (i.e., without registering or otherwise transmitting information), we only collect the personal data that your browser transmits to our server. If you wish to view our website, we collect the following data: • IP address;
   • Internet service provider of the user;
   • Date and time of access;
   • Browser type;
   • Language and browser version;
   • Content of the access;
   • Time zone;
   • Access status/HTTP status code;
   • Data volume;
   • Websites from which the request originates;
   • Operating system.
   This data is not stored together with other personal data.
   
   
2. This data serves the purpose of delivering our website to you in a user-friendly, functional, and secure manner, with functions and content, as well as their optimization and statistical evaluation.
   
   
3. The legal basis for this is our legitimate interest in data processing pursuant to Art. 6 (1) (f), which also lies in the above purposes. GDPR.
   
   
4. For security reasons, we store this data in server log files for a storage period of 90 days. After this period, the data is automatically deleted unless we need to retain it for evidential purposes in the event of attacks on the server infrastructure or other legal violations.

Cookies

1. We use so-called cookies when you visit our website. Cookies are small text files that your Internet browser saves on your computer. When you visit our website again, these cookies provide information to automatically recognize you. The information obtained in this way is used to technically and economically optimize our web offerings and to provide you with easier and secure access to our website. When you visit our website, we will inform you about the use of cookies for the purposes stated above and how you can object to this or prevent their storage ("opt-out") by means of a reference to our privacy policy. Our website uses session cookies, persistent cookies and third-party cookies:
   
   • Session cookies: We use so-called cookies to recognize repeated use of an offer by the same user (e.g. if you have logged in to determine your login status). When you visit our site again, these cookies provide information to automatically recognize you. The information obtained in this way is used to optimize our offers and to give you easier access to our site. When you close the browser or log out, the session cookies are deleted.
   
   • Persistent cookies: These are automatically deleted after a specified period of time, which can vary depending on the cookie. You can delete cookies at any time in your browser's security settings.
   
   • Third-party cookies: You can configure your browser settings according to your preferences and, for example, refuse to accept third-party cookies or all cookies. However, we would like to point out that if you do this, you may not be able to use all the features of this website. For more information about these cookies, please refer to the respective third-party privacy policies.
   
   
2. The legal basis for this processing is Art. 6 (1) (b) GDPR if the cookies are set to initiate a contract, e.g., when placing orders. Otherwise, we have a legitimate interest in the effective functionality of the website, so that in this case Art. 6 (1) (f) GDPR is the legal basis.
   
   
3. Objection and "Opt-Out": You can generally prevent cookies from being stored on your hard drive by selecting "do not accept cookies" in your browser settings. However, this may result in a restriction of the functionality of our services. You can object to the use of third-party cookies for advertising purposes via a so-called "opt-out" via this American website (https://optout.aboutads.info) or this European website (http://www.youronlinechoices.com/de/praferenzmanagement/).

Processing of contracts

1. We process inventory data (e.g., company, title/academic degree, names, and addresses as well as contact details of users, e-mail), contract data (e.g. services used, names of contact persons) and payment data (e.g. bank details, payment history) for the purpose of fulfilling our contractual obligations (knowledge of the contractual partner; justification, content and processing of the contract; checking the plausibility of the data) and services (e.g. contacting customer service) in accordance with Art. 6 (1) (b) GDPR. Entries marked as mandatory in online forms are required for the conclusion of the contract.
   
   
2. This data will generally not be passed on to third parties unless it is necessary to pursue our claims (e.g., transfer to a lawyer for debt collection) or to fulfill the contract (e.g., transfer of data to a payment provider), or there is a legal obligation to do so pursuant to Art. 6 (1) (c) GDPR.
   
   
3. We may also process the data you provide to inform you about other interesting products from our portfolio or to send you emails with technical information.
   
   
4. The data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected. This is the case for inventory and contract data when the data is no longer required to execute the contract and no further claims can be asserted under the contract because they have expired (warranty: two years / standard limitation period: three years). Due to commercial and tax law requirements, we are obliged to store your address, payment, and order data for a period of ten years. However, upon termination of the contract after three years, we restrict processing; this means that your data will only be used to comply with legal obligations. Information in the user account remains until it is deleted.
   
   

Contact via contact form / email / fax / mail

1. When you contact us via contact form, fax, mail, or email, your information will be processed for the purpose of processing your contact request.
   
   
2. The legal basis for processing the data, if you have given your consent, is Art. 6 (1) (a) GDPR. The legal basis for processing data transmitted in the course of a contact request or email, letter, or fax is Art. 6 (1) (f) GDPR. The controller has a legitimate interest in processing and storing data in order to respond to user inquiries, to preserve evidence for liability reasons, and, if necessary, to comply with its statutory retention obligations for business letters. If the contact is aimed at concluding a contract, the additional legal basis for processing is Art. 6 (1) (b) GDPR.
   
   
3. We may store your information and contact requests in our Customer Relationship Management System ("CRM System") or a comparable system.
   
   
4. The data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected. For personal data from the contact form input mask and data sent via email, this is the case when the respective conversation with you has ended. The conversation is concluded when it can be inferred from the circumstances that the matter in question has been conclusively resolved. We store requests from users who have an account or contract with us for a period of two years after the contract has ended. In the case of statutory archiving obligations, deletion occurs after their expiration: end of the commercial (6 years) and tax (10 years) retention period.
   
   
5. You have the option of revoking your consent to the processing of personal data at any time in accordance with Art. 6 (1) (a) GDPR. If you contact us by email, you can object to the storage of personal data at any time.
   
   

Contacting us by phone

1. When you contact us by phone, your telephone number will be processed to process the contact request and its handling and will be temporarily stored or displayed in the RAM/cache of the telephone device/display. Data is stored for liability and security reasons, to provide evidence of the call, and for economic reasons, to enable a return call. In the event of unauthorized advertising calls, we block the phone number.
   
   
2. The legal basis for processing the telephone number is Art. 6 (1) (f) GDPR. If the contact is aimed at concluding a contract, the additional legal basis for processing is Art. 6 (1) (b) GDPR.
   
   
3. The device cache stores calls for two days and successively overwrites or deletes old data. When the device is disposed of, all data is deleted and the memory may be destroyed. Blocked phone numbers are reviewed annually to determine whether blocking is necessary.
   
   
4. You can prevent the phone number from being displayed by calling with a withheld number.
   
   

Newsletter

1. You can subscribe to our newsletter with your voluntary consent by entering your email address. Only this is required. Providing further data is voluntary and serves only for the purpose of personal contact. We use the so-called "double opt-in process" for registration. After registering with your email address, you will receive an email from us with a confirmation link to confirm your registration. If you click this confirmation link, your email address will be added to the newsletter distribution list and saved for the purpose of sending emails. If you do not click the confirmation link within 24 hours, your registration data will be blocked and automatically deleted after 24 days.
   
   
2. We also log the IP address you used during registration, as well as the date and time of the double opt-in (registration and confirmation). The purpose of this storage is to fulfill legal requirements regarding proof of registration and to prevent misuse of your email.
   
   
3. Within the scope of your declaration of consent, the content (e.g., advertised products/services, offers, advertising, and topics) of the newsletter will be specifically described.
   
   
4. We use the following shipping service provider to send emails:
   Allinkl.com (Hauptstraße 68, D-02742 Friedersdorf), whose privacy policy can be found here https://all-inkl.com/datenschutzinformationen/. We have concluded a data processing agreement with the shipping service provider in accordance with Art. 28 GDPR.
   
   
5. When sending the newsletter, we evaluate your user behavior. For this purpose, the newsletters contain so-called "web beacons" or "tracking pixels," which are called up when the newsletter is opened. For evaluation purposes, we link the web beacons to your email address and a unique ID. Links received in the newsletter also contain this ID. The data is collected exclusively in a pseudonymized form, meaning the IDs are not linked to your other personal data, preventing any direct personal identification. This data allows us to determine whether and when you opened the newsletter and which links in the newsletter were clicked. This serves the purpose of optimizing and statistically evaluating our newsletter.
   
   
6. The legal basis for sending the newsletter, measuring success, and storing the email is your consent in accordance with Art. 6 (1) (a) GDPR in conjunction with Section 7 (2) No. 3 of the German Unfair Competition Act (UWG), and for logging your consent, Art. 6 (1) (f) GDPR serves our legitimate interest in legal evidence.
   
   
7. You can object to tracking at any time by clicking the unsubscribe link at the end of the newsletter. In this case, however, your newsletter subscription would also be terminated. If you deactivate the display of images in your email software, tracking is also not possible. However, this may limit the functionality of the newsletter, and any images contained will not be displayed.
   
   
8. You can revoke your consent to receive the newsletter at any time. You can revoke your consent by clicking on the unsubscribe link at the end of the newsletter, by sending an email, or by contacting us via our contact details above. We will store your data as long as you are subscribed to the newsletter. After unsubscribing, your data will only be stored anonymously for statistical purposes.
   
   

Contests

1. To conduct contests, the email address will be saved for contact purposes and, in the event of a win, the address details will be saved for delivery of the prize. The address details may be passed on to a shipping service provider. The data will not be passed on to third parties. Participation in the competition is permitted from the age of 18.
   
   
2. The legal basis is Art. 6 (1) (b) GDPR.
   
   
3. The data will be deleted 2 months after the winner has been determined.
   
   

YouTube Videos

1. We have embedded YouTube videos from youtube.com on our website using the embedded function, so that they can be accessed directly on our website. YouTube is owned by Google Ireland Limited, registration number: 368047, Gordon House, Barrow Street, Dublin 4, Ireland. We have embedded the videos in so-called "extended data protection mode," without using cookies to record usage behavior in order to personalize video playback. Instead, the video recommendations are based on the currently playing video. Videos played in enhanced privacy mode in an embedded player do not affect which videos are recommended to you on YouTube. When you start a video (click on the video), YouTube receives the information that you have accessed the corresponding subpage of our website. The data collected is transferred to the USA and stored there. This also occurs without a Google user account. If you are logged into your Google account, Google can assign the above data to your account. If you do not want this to happen, you must log out of your Google account. Google creates user profiles from such data and uses this data for the purposes of advertising, market research, or optimizing its websites.
   
   
2. The legal basis for this is our legitimate interest in data processing pursuant to Art. 6 (1) (f) GDPR, which also lies in the above purposes.
   
   
3. You have the right to object to Google creating user profiles. Please contact Google directly via the privacy policy below. You can opt out of advertising cookies in your Google account here:
   https://adssettings.google.com/authenticated.
   
   
4. YouTube's Terms of Use at https://www.youtube.com/t/terms and Google's Privacy Policy for Advertising at https://policies.google.com/technologies/ads provide further information on the use of Google cookies and their advertising technologies, storage duration, anonymization, location data, functionality, and your rights. Google's General Privacy Policy: https://policies.google.com/privacy.
   
   
5. Google is certified under the EU-US Privacy Shield (https://www.privacyshield.gov/EU-US-Framework) and is therefore obligated to comply with European data protection law.
   
   

Social Media Presence

1. We maintain social media profiles or fan pages to communicate with connected and registered users and to provide information about our products, offers, and services. The US providers are certified under the so-called Privacy Shield and are therefore obligated to comply with European data protection regulations. When you use and access our profile on the respective network, the respective data protection information and terms of use of the respective network apply.
   
   
2. We process the data you send to us via these networks in order to communicate with you and to respond to your messages there.
   
   
3. The legal basis for the processing of personal data is our legitimate interest in communicating with users and our external presentation for advertising purposes in accordance with Art. 6 (1) (f) GDPR. If you have given the social network controller your consent to the processing of your personal data, the legal basis is Art. 6 (1) (a) and Art. 7 GDPR.
   
   
4. The data protection information, information options, and opt-out options for the respective networks can be found here:
   
   • Facebook (Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland) Privacy Policy: https://www.facebook.com/about/privacy/, Opt-Out: https://www.facebook.com/settings?tab=ads and http://www.youronlinechoices.com, Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active.
   
   • Instagram (Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA) – Privacy Policy/ Opt-Out: http://instagram.com/about/legal/privacy/.

Social Media Plug-ins

1. We use social media plug-ins from social networks on our website. We use the so-called "two-click solution" Shariff from c't and heise.de. When you access our website, no personal data is transmitted to the plug-in providers. Next to the logo or brand of the social network, you will find a control that you can click to activate the plug-in. After activation, the provider of the social network receives the information that you have accessed our website and that your personal data will be transmitted to the plug-in provider and stored there. These are so-called third-party cookies. Some providers, such as Facebook and XING, anonymize your IP address immediately after collection.
   
   
2. The plug-in provider stores the data collected about the user as user profiles. These are used for advertising, market research, and/or to tailor its website to meet customer needs. Such evaluations are carried out, in particular (even for users who are not logged in) to display tailored advertising and to inform other users of the social network about the user's activities on our website. The user has the right to object to the creation of these user profiles; to exercise this right, they must contact the respective plug-in provider.
   
   
3. The legal basis for the use of plug-ins is our legitimate interest in improving and optimizing our website by increasing our visibility through social networks, as well as the possibility of interacting with you and users through social networks in accordance with Art. 6 (1) (f) GDPR.
   
   
4. We have no influence on the data collected and the data processing procedures. We also have no knowledge of the extent of data collection, the purpose of processing, or the retention periods. We also have no information on the deletion of the collected data by the plug-in provider.
   
   
5. Regarding the purpose and scope of data collection and processing, we refer to the respective privacy policies of the social networks. You will also find information about your rights and settings options for protecting your personal data there.
   
   

Facebook

1. We have integrated plug-ins from the social network Facebook.com (headquarters in the EU: Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland) on our website as part of the so-called "two-click solution" from Shariff. You can recognize these by the Facebook logo "f" or the addition "Like", "Like" or "Share".
   
   
2. As soon as you intentionally activate the Facebook plug-in, a connection is established from your browser to the Facebook servers. Facebook receives the information, including your IP address, that you have accessed our website and transmits this information to Facebook servers in the USA, where it is stored. If you are logged into your Facebook account, Facebook can assign this information to your account. When you use the plug-in functions, e.g., by clicking the "Like" button, this information is also transferred from your browser to Facebook's servers in the USA and stored there. It is also displayed on your Facebook profile and, if applicable, on the pages of your friends.
   
   
3. The purpose and scope of data collection, as well as its further processing and use by Facebook, as well as your related rights and setting options for protecting your privacy, can be found in Facebook's privacy policy:https://www.facebook.com/about/privacy/. Data collection when using the "Like" button: https://www.facebook.com/help/186325668085084. You can manage your settings regarding the use of your profile data for advertising purposes on Facebook and object here: https://www.facebook.com/ads/preferences/.
   
   
4. If you log out of Facebook before visiting our website and delete your cookies, no data about your visit to our website will be assigned to your Facebook profile when the plug-in is activated.
   
   
5. You can also prevent the Facebook plug-in from loading using so-called "Facebook Blockers," which you can install as an add-on for your browser: Facebook Block

Data protection for applications and the application process

1. Applications sent electronically or by post to the responsible party will be processed electronically or manually for the purpose of completing the application process.
   
   
2. We expressly point out that application documents containing "special categories of personal data" according to Art. 9 GDPR (e.g., a photo that reveals your ethnic origin, religion, or marital status) are undesirable, with the exception of any severe disability that you wish to disclose of your own free will. You should submit your application without this data. This will not affect your application prospects.
   
   
3. The legal basis for processing is Art. 6 (1) (b) GDPR and Section 26 of the German Federal Data Protection Act (BDSG) (new version).
   
   
4. If an employment relationship is entered into with the applicant after the application process has been completed, the applicant data will be stored in compliance with the relevant data protection regulations. If you are not offered a position after the application process has been completed, your submitted application letter and all documents will be deleted 6 months after the rejection was sent in order to satisfy any claims and proof obligations under the General Equal Treatment Act (AGG).

Rights of the data subject

1. Objection or revocation of the processing of your data
   
   If the processing is based on your consent in accordance with Art. 6 (1) (a) GDPR, you have the right to revoke your consent at any time. This does not affect the legality of the processing carried out on the basis of your consent until the revocation.
   
   If we base the processing of your personal data on the balancing of interests in accordance with Art. 6 (1) (f) GDPR, you can object to the processing. This is the case, in particular, if the processing is not necessary to fulfill a contract with you, which we will explain in the following description of the functions. If you exercise such an objection, we ask you to explain the reasons why we should not process your personal data as we do. If your objection is justified, we will examine the situation and will either stop or adapt the data processing or explain to you our compelling legitimate reasons for continuing the processing.
   
   You can object to the processing of your personal data for advertising and data analysis purposes at any time. You can exercise your right of objection free of charge. You can inform us of your objection to advertising using the following contact details:
   
   KIPPFIX - Wiechers Schaubacktechnik GmbH
   Geschäftsführer: Timo Huber
   Rodendamm 26
   28816 Stuhr
   Germany
   Fax: -
   Email: info@deltec-aquaristic.com
   
2. Right to Information
   You have the right to request confirmation from us as to whether personal data concerning you is being processed. If this is the case, you have a right to information about your personal data stored by us in accordance with Art. 15 GDPR. This includes, in particular, information about the processing purposes, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, and the origin of your data, unless it was collected directly from you.
   
   
3. Right to rectification
   You have the right to have inaccurate data rectified or to have correct data completed in accordance with Art. 16 GDPR.
   
   
4. Right to erasure
   You have the right to have your data stored by us erased in accordance with Art. 17 GDPR, unless statutory or contractual retention periods or other statutory obligations or rights to further storage conflict with this.
   
   
5. Right to restriction
   You have the right to request a restriction on the processing of your personal data if one of the conditions in Art. 18 (1) (a) to (d) GDPR is met:
   • If you contest the accuracy of the personal data concerning you for a period enabling the controller to verify the accuracy of the personal data;
   
   • The processing is unlawful and you refuse to delete the personal data and instead request the restriction of their use;
   
   • The controller no longer needs the personal data for the purposes of the processing, but you need them to assert, exercise or defend legal claims, or
   
   • If you have objected to the processing pursuant to Art. 21 (1) GDPR and it has not yet been determined whether the legitimate reasons of the controller outweigh your reasons outweigh.
   
   
6. Right to data portability
   You have a right to data portability according to Art. 20 GDPR, which means that you can receive the personal data we have stored about you in a structured, common, and machine-readable format or request that it be transferred to another controller.
   
   
7. Right to lodge a complaint
   You have the right to lodge a complaint with a supervisory authority. As a rule, you can contact the supervisory authority, in particular in the member state of your residence, place of work, or place of the alleged infringement.
   
   

Data security

In order to protect all personal data transmitted to us and to ensure that we and our external service providers comply with data protection regulations, we have taken appropriate technical and organizational security measures. Therefore, among other things, all data between your browser and our server is transmitted encrypted via a secure SSL connection.

As of: January 2025