1. Collection of personal data

We are delighted that you are interested in Schüco International KG (Schüco). The protection of your personal data is important to us. For this reason, this website contains information about what personal data we collect from you when you use this site, for example. Personal data refers to all data that relates to you personally, e.g. your name, address, email address and user behaviour. 
Our website uses SSL and/or TLS encryption when transmitting confidential content.

This document can be downloaded and archived in the form of a PDF: Link . The free programme Adobe Reader (at www.adobe.de), or a similar programme which exports PDF formats, is required in order to open the PDF file. The document can also be printed.

2. Controller responsible for the collection and processing of data

According to Art. 4 para. 7 of the GDPR, the controller is

Schüco International KG 
Karolinenstraße 1-15
33609 Bielefeld 
Germany
Tel.: 0521 783-0
E-mail: info@schueco.com
Website: www.schueco.com

The contact details of the privacy officer are as follows:

Schüco International KG
Data protection department
Karolinenstraße 1-15
33609 Bielefeld
Germany

If you have any questions and suggestions relating to data protection, please send an email to:

datenschutz@schueco.com

3. Your rights 

(1) You may assert the following rights against us with regard to any personal data that relates to you: 

a) right to information
b) right to rectification
c) right to deletion (right to be forgotten)

d) right to restriction of processing
e) right to data portability
f) right to object
g) right to revoke consent granted under data privacy law

(2) You also have the right to make a complaint to a data protection authority regarding the processing of your personal data by us. 
 

4. Collection of personal data during visits to our website 

(1) When using the website for purely informational purposes, i.e. if you do not register or if you transmit information by other means, we will only collect the personal data that your browser transmits to our server. All collection and processing of data takes place for specific purposes. These may arise from technical requirements, contractual conditions or your explicit request. If you make use of specific services on our website, we shall obtain your consent regarding the collection and processing of the data. 

When our website is viewed, we collect the following data, which is technically necessary in order to display our website and ensure stability and security. The data is also used to correct website errors. The legal basis for the processing of data is therefore Art. 6 para. 1 lit. f) of the GDPR: 

- IP address
- Date and time of the request
- Time zone difference to Greenwich Mean Time (GMT)
- Content of request (specific page)
- Access status / HTTP status code
- Transmitted data quantity
- Website from which the request came
- Browser
- Operating system and its interface
- Language and version of browser software

(2) In addition to the purely informational use of our website, we offer various services which you may use if you are interested and if you consent to data processing (legal basis: Art. 6 para. 1 lit. a) GDPR), such as receiving a newsletter as outlined under clause 6 of this data privacy statement.

You must specify additional personal data for this purpose, which we use to provide you with the respective service or to contact you, and which is covered by the principles stipulated in this data privacy statement. 
If you do not provide the required information, then we may not be able to perform our services.

(3) When you visit this website, your surfing behaviour can be statistically evaluated. This is primarily done using an analytics tool and tools from third-party providers.
Detailed information is provided in this data privacy statement. 
 
(4) Notice on data transmission to the USA. Some of the tools integrated into our website originate from companies headquartered in the USA. If these tools are active, your personal data may be transmitted to the US servers of these companies. Please note that the USA is not considered a safe third country in accordance with EU data protection law. US companies may be obligated to provide personal data to security authorities, and you as the data subject may have no legal recourse to prevent this. Therefore, it is not possible to exclude the possibility that US authorities (such as the Secret Service) may process, evaluate, and permanently store your data which is on US servers for surveillance purposes. We have no influence over these processing activities.

(5) SSL and TLS encryption
For security reasons, and to protect the transmission of confidential content such as inquiries which you send to us as the page operator, this page uses SSL or TLS encryption. You can identify an encrypted connection because the address line of your browser will switch from “http://” to “https://” and a lock symbol will appear in the browser line. If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.
 

5. Cookies

In addition to the data mentioned above, cookies are also stored on your computer when using our website. Cookies are small text files which are assigned to and stored on your hard drive by the browser you are using and which supply specific information to the authority which sets the cookie (us in this instance). Cookies cannot run any programmes or transmit viruses to your computer. They are used to make the internet service more effective and user-friendly on the whole.

Use of cookies:
a) This website uses the following types of cookies, the scope and mode of operation for which are explained below:

- Transient/session cookies (refer to b)
- Persistent cookies (refer to c).

b) Transient cookies are automatically deleted when you close the browser. These include session cookies in particular. These store a so-called session ID which allows various requests from your browser to be allocated to the overall session. As a result, your computer can be recognised once again if you return to our website. The session cookies are deleted when you log out or close the browser.

c) Persistent cookies (such as the “stay signed in on this computer” function) remain on your end device and are automatically deleted after a specified period of time, which may differ depending on the cookie. You can delete the cookies at any time in the security settings of your browser.

In some cases, third party companies may also store cookies on your device when you access our page (third party cookies). These allow us or you to use certain services of the third party company (such as cookies for processing payment services).

Cookies have various functions. Many cookies are required for technical purposes, since certain website functions would not work without them (such as displaying videos). Other cookies are used to analyse user behaviour or display advertisements.

Cookies required to carry out electronic communication (required cookies) or to provide certain functions you request (functional cookies), or to optimise the website (such as cookies for measuring web traffic) are stored on the basis of Art. 6 para. 1 lit. f GDPR, unless another legal basis is indicated. The website operator has a legitimate interest in storing cookies in order to provide its services in an optimised manner and without technical errors. If consent is requested to store the cookies, then the relevant cookies shall be saved solely on the basis of this consent (Art. 6 para. 1 lit. a GDPR); consent may be revoked at any time.

You can change your browser settings so that you will be informed when cookies are saved, and can permit cookies only in individual cases, exclude acceptance of cookies in certain cases or in general, and activate automatic deletion of cookies when  you close your browser. If cookies are deactivated, the functionality of this website may be restricted.

If cookies from third party companies are used, or if cookies are used for analytic purposes, we will inform you of this separately in this data privacy statement and will request your consent if necessary.
 

6. Deletion and blocking of personal data

Your data is deleted as soon as it is no longer required to fulfil the purpose for which it was collected. If the website is used purely for informational purposes, the IP address will be deleted from all systems used in connection with the operation of this website after 7 days at the latest. We will no longer be able to establish a reference to a person from the remaining data. 

If other services of our website are used, your data will typically be stored in our systems for purposes of user management. These are checked on a regular basis to see whether data can be deleted. If, within the context of a customer relationship or relationship with an interested party, data is no longer necessary or it overrides a conflicting interest, we shall delete the data in question, provided that there are no statutory retention requirements. 

Your data shall also be deleted if its storage is inadmissible (e.g. if the data is incorrect and correction is not possible). If there are legal or factual obstacles (such as particular retention requirements) preventing deletion, then blocking shall take place instead.
 

7. Data transfer to third parties

We will not transmit the data you provide to us to third parties. In particular, data shall not be disclosed to third parties for their promotional purposes. 

However, we may use service providers, such as those that provide maintenance services or services related to the expansion of our website, for the operation of this website or for other products of ours. They are carefully selected and commissioned by us, bound by our instructions and inspected at regular intervals.
 

8. Newsletter/advertising  

(1) With your consent, you may subscribe to our newsletter which is used to inform you about our current offers.

(2) We use a double opt-in procedure to subscribe to our newsletter. This means that, following your subscription, we send an email to the address you specify, asking you to confirm that you would like to receive the newsletter. If you do not confirm your subscription within 48 hours, your information shall be blocked and automatically deleted after one month. In each case, we will additionally store the IP address used and the time of subscription and confirmation. The purpose of the procedure is to prove your subscription and, if applicable, to be able to detect any potential misuses of your personal data.

(3) It is only mandatory for you to provide your email address in order to receive the newsletter. The disclosure of other, separately highlighted data is voluntary and used in order to be able to address you personally or to be able to provide you with further information. After your confirmation, we shall store your email address for the purpose of sending out the newsletter. The legal basis is Art. 6 para. 1 sentence 1 lit. a of the GDPR.

(4) You can revoke your consent to receiving the newsletter and unsubscribe from the newsletter at any time. You can declare your revocation by clicking on the link provided in every newsletter email, by emailing newsletter@schueco.com or by sending a message to the contact details specified in the company imprint.

(5) You also have the option elsewhere on our website to consent to receiving further advertising material from us (email, telephone, post). If you would to receive this advertising material, it is mandatory that you specify the data required for the selected method of contact (e.g. email address, telephone number, address). If you subscribe, we shall use the double opt-in procedure described in clause 6 (2). 

(6) You can, of course, object to the processing of your personal data for advertising purposes at any time after providing your consent to advertising. You can inform us of your objection to advertising by emailing datenschutz@schueco.com. 

9. My sliding door contact form/configurator/partner map

(1) If you send us an inquiry via the contact form or via the configurator, we store your information on the inquiry form, including the contact data provided there, for the purpose of processing and coordinating your inquiry. We may provide this data to Schüco partners who can answer your inquiry and contact you directly. This data is processed on the basis of Art. 6 para. 1 lit. b GDPR, if your inquiry is associated with fulfilling a contract or is necessary to carry out pre-contractual measures. In all other cases, processing is based on our legitimate interest in effectively processing the inquiries sent to us (Art. 6 para. 1 lit. f GDPR) or on your consent (Art. 6 para. 1 lit. a GDPR), if this was requested.

(2) We use Hubspot CRM to qualify your inquiry. The provider is Hubspot Inc. 25 Street, Cambridge, MA 02141 USA (hereinafter referred to as Hubspot CRM).
Hubspot CRM makes it possible to manage existing and potential customers and customer contacts, along with other features. Hubspot CRM allows us to record, sort and analyse customer interactions via e-mail, social media or telephone across a variety of channels. The personal data we record can be evaluated and used for communication with the potential customer. Hubspot CRM furthermore allows us to record and analyse the user behaviour of our contacts on our website. We use Hubspot CRM in accordance with Art. 6 para. 1 lit. f GDPR. We have a legitimate interest in ensuring the most efficient customer management and communication possible. If we request your consent for this purpose, then processing is carried out solely on the basis of Art. 6 para. 1 lit. a GDPR; consent may be revoked at any time. For details, please see the Hubspot data privacy policy: https://legal.hubspot.com/de/privacy-policy
Data transmission to the USA is carried out based on the standard contractual clauses of the EU Commission. For further details, see: https://www.hubspot.de/data-privacy/privacy-shield.

Contract processing agreement

We have concluded a contract processing agreement with Hubspot CRM. This is a contract prescribed by data privacy law that ensures that Hubspot CRM only processes the personal data of our website visitors in accordance with our instructions and in compliance with the GDPR.

We retain the data you enter into the contact form until you request that we delete it, or until the purpose for which the data was stored no longer applies.

(3) If we complete the zip code partner map, then we transmit your data to the Schüco partners displayed to you for your specific building project. If none of the Schüco partners displayed to you can answer your inquiry, or if you allow us to choose a suitable partner, then we will transmit your data to the Schüco partner we select. The Schüco partners displayed or sent to you will fulfil the filter criteria you set previously, such as product selection and material. The results list will be displayed automatically by the distance of the Schüco partner.

(4) Inquiries via e-mail, phone or fax
If you contact us via e-mail, phone or fax, your inquiry and all personal data it contains (name, inquiry) will be stored and processed by us for the purpose of handling your concern. We will not disclose this data without your consent.
This data is processed on the basis of Art. 6 para. 1 lit. b GDPR, if your inquiry is associated with fulfilling a contract or is necessary to carry out pre-contractual measures. In all other cases, processing is based on our legitimate interest in effectively processing the inquiries sent to us (Art. 6 para. 1 lit. f GDPR) or on your consent (Art. 6 para. 1 lit. a GDPR), if this was requested.
We will retain the data you send to us in the contact inquiry until you request that we delete it, until you revoke your consent for storage, or until the purpose for which the data was stored no longer applies (for instance after we finish handling your concern). Mandatory legal provisions, in particular statutory retention periods, shall remain unaffected.
 

10. Live chat
We offer a live chat feature on our website. 
To do so, we use a chat software from the company http://www.userlike.com/ Userlike UG (limited liability), Probsteigasse 44-46, 50670 Cologne, Germany. 
You can use the chat function like a contact form to chat with our employees almost in real time. When you start a chat, the following personal data will be collected:

- Date and time of access,
- Browser type / version,
- IP address,
- Operating system used
- URL of the previously visited website,
- Quantity of data transmitted.
- And if provided: First name, last name and e-mail address.

Depending on your discussion with our employees, further personal data may be collected during the chat, as entered by you. The type of data will depend primarily on your inquiry or the problem you are describing to us. All of this data is processed in order to allow you to contact us quickly and efficiently, thereby improving our customer service. All of our employees have been and are trained on data privacy, and on handling customer data in a secure and trustworthy manner. 

When you access the website, the chat widget will be loaded from AWS Cloudfront in the form of a JavaScript file. The chat widget technically contains the source code that is executed on your computer, facilitating the chat.
In addition, Schüco stores the chats for 12 months. The purpose of this is to save you from having to provide extensive information on the history of your inquiry in certain circumstances, and for ongoing quality controlling of our chat service. Therefore, processing is allowed under Art. 6 para. 1 letter f. GDPR. If you do not agree to this, you are welcome to inform us of this under the contact details below. We will then promptly delete any saved chats.

Chat data is also saved in order to ensure the security of our information technology systems. We have a legitimate interest in doing so, and the processing is therefore permitted under Art. 6 para. 1 letter f GDPR.

Further information is provided in the data privacy provisions of Userlike UG (limited liability) http://www.userlike.com/terms#privacy-policy.
 

11. Social media icons in the website footer

Usually, when a user visits a website in which a social media button has been integrated, the button solutions provided by the social networks (such as the ‘like’ button) transmit personal data to the respective social network. 

For us, this is not the case. No plug-in buttons have been incorporated into the footer of our website. Only icons are displayed there. By clicking on these, they direct you to external links within the corresponding social media platforms. They only actively connect with the respective platforms if you actively click on them and log in to the respective platform if necessary. Personal data is not transmitted when you access our website because the social media platform icons are integrated on the page.
 

12. Data privacy statement on the use and application of YouTube 

Components from YouTube have been integrated into our website. YouTube is an online video portal which enables video publishers to upload videos free of charge, and enables other users to watch, rate and comment on these videos, also free of charge. YouTube allows all types of videos to be published, which is why both complete films and television programmes, as well as also music videos, trailers or videos made by the users themselves, can be accessed via the online portal.

The operating company of YouTube is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. YouTube, LLC is a subsidiary of Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043- 1351, USA.

Each time one of the individual pages of this website, which is operated by us and which has an integrated YouTube component (YouTube video), is visited, the respective YouTube component automatically prompts the internet browser on your IT system to download a representation of the corresponding YouTube component from YouTube. Additional information about YouTube can be accessed at https://www.youtube.com/yt/about/de/. Within the framework of this technical process, YouTube and Google receive information about which specific sub-pages from our website are visited by you.

If you are logged into YouTube at the same time, then when a sub-page containing a YouTube video is visited YouTube is able to recognise which specific sub-page from our website you are visiting. This information is collected by YouTube and Google and allocated to your YouTube account.

If you are simultaneously logged into YouTube when you visit our website, then YouTube and Google always receive information via the YouTube component that you have visited our website. This takes place regardless of whether or not you click on the YouTube component. If you do not wish this information to be transmitted to YouTube and Google in this way, you can prevent the transmission by logging out of your YouTube account before visiting our website.

The data privacy statements published by YouTube, which are accessible at https://www.google.de/intl/de/policies/privacy/, provide information about the collection, processing and use of personal data by YouTube and Google.
 

13. Analytic tools: Data privacy statement on the use and application of Google Remarketing

We have integrated the services of Google Remarketing on this website. Google Remarketing is a feature of Google AdWords, which enables a company to allow advertisements to be displayed to internet users who have previously visited the company’s website. The integration of Google Remarketing therefore enables a company to create user-related advertising and to subsequently allow interest-related advertising to be shown to the internet user.

The operating company of the service of Google Remarketing is Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043- 1351, USA.

The purpose of Google Remarketing is to display interest-related advertising. Google Remarketing enables us to display advertising via the Google advertising network or to let it be displayed on other websites which are tailored to the individual requirements and interests of internet users.

Google Remarketing saves a cookie to your IT system. A description of what cookies are is provided above. Setting cookies enables Google to recognise our website users when they subsequently call up websites which are also members of the Google advertising network. Each time you visit a website which has Google Remarketing as an integrated service, your internet browser automatically identifies itself to Google. During this technical process, Google receives personal data such as the IP address or web surfing behaviour of the user, which Google uses to display interest-based advertising, amongst other things.

Personal information, for example the websites you visit, is stored by means of cookies. During each visit to our website, personal data, including the IP address of your internet connection, is transmitted to Google in the United States of America. This personal data is stored by Google in the United States of America. In certain circumstances, Google passes on this personal data collected via the technical process to third parties.

You can prevent cookies from being set by our website as described above at any time by adjusting the settings of your web browser and thereby objecting to cookies on a permanent basis. Adjusting the settings of your internet browser in this way would also prevent Google from setting a cookie on your IT system. In addition, the cookies already set by Google Analytics can be deleted at any time via an internet browser or other software programme.

Furthermore, you have the option to object to interest-related advertising by Google. To do so, you must access the link www.google.de/settings/ads from your web browser and adjust the desired settings.

Additional information and the applicable data privacy statements from Google can be accessed at https://www.google.de/intl/de/policies/privacy/.

The collected data is summarised in your Google account exclusively on the basis of your consent, which you can submit to Google or revoke by a statement to Google at any time (Art. 6 para. 1 lit. a) GDPR). For data collection processes that are not summarised in your Google account (for instance because you do not have a Google account or because you have objected to the summarisation), data is collected on the basis of Art. 6 para. 1 lit. f) GDPR. We have a legitimate interest because we, as the website operator, have an interest in the anonymised analysis of website visitors for advertising purposes.
 

14. Analytic tools: Data privacy statement on the use of Google AdWords and Google Conversion Tracking

This website uses Google AdWords. AdWords is an online advertising program of Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States(“Google”).

We use conversion tracking as part of Google AdWords. If you click an ad displayed by Google, a cookie is set for conversion tracking. Cookies are small text tiles saved by a web browser on a user's computer. These cookies become invalid after 30 days, and are not used to personally identify users. If the user visits certain pages of this website and the cookie is not yet expired, we and Google can detect that the user clicked the ad and was forwarded to this page.

Every Google AdWords customer receives a different cookie. The cookies cannot be tracked via the websites of AdWords customers. The information collected via the conversion cookies is used to create conversion statistics for AdWords customers who have chosen to use conversion tracking. Customers learn the total number of users who clicked on their ad and were forwarded to a page with a conversion tracking tag. However, they do not receive information that can be used to personally identify users. If you do not want to participate in tracking, you can easily object to this use by deactivating the Google conversion tracking cookie under User settings in your web browser. If you do so, you will not be included in the conversion tracking statistics.

“Conversion cookies” are saved on the basis of Art. 6 para. 1 lit. f) GDPR. We have a legitimate interest in analysing user behaviour in order to optimise our website and our advertisements.

More information on Google AdWords and Google conversion tracking is available in the Google data privacy policy at: https://www.google.de/policies/privacy/.

You can change your browser settings so that you will be informed when cookies are saved, and can permit cookies only in individual cases, exclude acceptance of cookies in certain cases or in general, and activate automatic deletion of cookies when you close your browser. If cookies are deactivated, the functionality of this website may be restricted.
 

15. Analytic tools: Data privacy statement on the use and application of DoubleClick

Components from DoubleClick by Google have been integrated into our website. DoubleClick is a Google brand which is predominately used to market specific online marketing solutions to advertising agencies and publishing houses.

The operating company of DoubleClick by Google is Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043- 1351, USA.

DoubleClick by Google transmits data to the DoubleClick server both upon each impression, as well as through clicks or other activities. Each of these data transmissions triggers a cookie request to your browser. If the browser accepts the request, then DoubleClick sets a cookie on your IT system. A description of what cookies are is provided above. The purpose of cookies is to optimise and display advertisement. Cookies are used to control and display user-related advertising, as well as to create reports for advertising campaigns or to improve these, amongst other things. In addition, cookies serve to prevent the same advertisement from being displayed multiple times.

DoubleClick uses a cookie ID which is necessary to implement the technical process. For example, the cookie ID is required in order to display an advertisement in a browser. Through the cookie ID, DoubleClick can record which advertisements have already been displayed in a browser in order to prevent adverts being shown twice. In addition, the cookie ID makes it possible to record conversions. For example, conversions are recorded if a DoubleClick advertisement has previously been displayed to a user and the user subsequently completes a purchase on the website of the advertiser using the same internet browser.

There is no personal data contained in DoubleClick cookies. However, a DoubleClick cookie can contain additional campaign identifiers. A campaign identifier serves to identify the campaigns with which the user has already come into contact with.

Each time you visit one of the individual pages of this website which has an integrated DoubleClick component, the respective DoubleClick component automatically prompts the internet browser on your IT system to transmit data to Google for the purpose of online advertisement and calculating commissions. Within the framework of this technical process, Google receives information about data which is also used by Google to create commission calculations. Google can, among other things, retrace the particular links on our website that you have clicked on.

We use Google DoubleClick in the interest of providing targeted advertising measures. This is part of our legitimate interests in the sense of Art. 6 para. 1 lit. f GDPR. If we request your consent for this purpose (such as consent to save cookies), then the processing is carried out solely on the basis of Art. 6 para. 1 lit. a GDPR; consent may be revoked at any time.
Further information on your options for objecting to advertisements displayed by Google is provided at: https://policies.google.com/technologies/ads and https://adssettings.google.com/authenticated.
 

16. Plug-ins and tools: Integration of Google Maps

The Google Maps service is used on this website. As a result, we are able to directly show you interactive maps within the website and make it easy for you to use the maps function.
The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

In order to use the functions of Google Maps, we must store your IP address. This information is generally transferred to a Google server in the USA and saved there. The provider of this website has no influence over this data transmission
We use Google Maps in order to provide our online services in an appealing manner, and to make it easier to find the locations we offer on the website. This is part of our legitimate interests in the sense of Art. 6 para. 1 lit. f GDPR. If we request your consent for this purpose, then the processing is carried out solely on the basis of Art. 6 para. 1 lit. a GDPR; consent may be revoked at any time.

Data transmission to the USA is carried out based on the standard contractual clauses of the EU Commission. For further details, see: 
https://privacy.google.com/businesses/gdprcontrollerterms/  and https://privacy.google.com/businesses/gdprcontrollerterms/sccs/ 
More information on how user data is handled is provided in the Google privacy policy: https://policies.google.com/privacy?hl=de
 

17. Legal basis for processing

Art. 6 I lit. a of the GDPR serves as Schüco's legal basis for the processing procedures, during which consent is obtained for a particular processing purpose (e.g. newsletters, My Workplace, careers page). If the processing of personal data is required for the fulfilment of a contract for which the contracting party is the data subject, as, for example, is the case during the processing procedures required for a delivery of goods or the provision of another service or return service, then the processing shall be subject to Art. 6 I lit. b) of the GDPR. The same applies to any processing operations that are necessary for the implementation of pre-contractual measures. For example, in the event of an inquiry about our products or services, we are subject to a legal obligation which requires the processing of personal data, such as for the fulfilment of tax obligations, and the processing shall be based on Art. 6 I lit. c) of the GDPR. In rare cases, the processing of personal data could be necessary in order to protect vital interests of the data subject, or to protect another individual. For example, this would be the case if a visitor was injured and consequently had to pass on details about their name, age, health insurance funds or other vital information to a doctor, hospital or other third party. In this instance, the processing is based on Art. 6 I lit. d) of the GDPR. Ultimately, processing procedures could be based on Art. 6 I lit. f) of the GDPR. Processing procedures which are not covered by any of the aforementioned legal foundations are based on this legal foundation if the processing is required to safeguard our legitimate interest or that of a third party, unless the interests, legal foundations and fundamental freedoms of the data subject take precedence. In particular, we are authorised to carry out such processing procedures as they have been specifically referred to by the European legislator. In this respect, the legislator took the view that a legitimate interest could be accepted if the data subject is a client of the responsible party (recital 47 sentence 2 of the German General Data Protection Regulation - GDPR).
 

Status as of: February 2021