THE BAG COMPANY · BESPOKE BAGS FOR OVER 20 YEARS +49 40 83 98 72 80 info@pro-factory.de Mon–Fri 9 am–5 pm
DE
Request a quote

Privacy Policy

Data Protection

The data controller is:

Pro Factory Werbemittel GmbH & Co. KG
25 Liliencronstraße
21629 Neu Wulmstorf
Germany

info@pro-factory.de

We are delighted that you are interested in our online shop. Protecting your privacy is very important to us. Below, we provide detailed information on how we handle your data.

1. Access data and hosting

You can visit our website without providing any personal details. Each time you access a web page, the web server automatically stores a so-called server log file, which contains, for example, the name of the file requested, your IP address, the date and time of the request, the amount of data transferred and the requesting internet service provider (access data), and which documents the request.

This access data is analysed solely for the purpose of ensuring the smooth operation of the website and improving our service. This serves, in accordance with Article 6(1)(f) of the GDPR, to safeguard our legitimate interests – which, following a balancing of interests, take precedence – in the accurate presentation of our services. All access data will be deleted no later than seven days after the end of your visit to the website.

Hosting services provided by a third party
As part of data processing carried out on our behalf, a third-party provider provides us with website hosting and display services. All data collected whilst using this website or via the forms provided for this purpose in the online shop, as described below, is processed on their servers. Processing on other servers takes place only within the scope explained here.

This service provider is based in a country within the European Union or the European Economic Area.

2. Collection and use of data for the purposes of contract fulfilment, establishing contact and opening a customer account

We collect personal data when you voluntarily provide it to us as part of your order or when you contact us (e.g. via the contact form or by email). Mandatory fields are marked as such, as in these cases we require the data to fulfil the contract or to process your enquiry, and you cannot submit your order or enquiry without providing this information. The data collected is specified in the relevant input forms. We use the data you provide to fulfil the contract and process your enquiries in accordance with Article 6(1)(b) of the GDPR.
Where you have given your consent to this in accordance with Article 6(1), first sentence, point (a) of the GDPR by choosing to open a customer account, we will use your data for the purpose of opening that customer account. Further information on the processing of your data, in particular regarding its disclosure to our service providers for the purposes of order processing, payment processing and dispatch, can be found in the following sections of this privacy policy.
Once the contract has been fully discharged or your customer account has been deleted, your data will be subject to restrictions on further processing and will be deleted once the retention periods under tax and commercial law have expired, in accordance with Article 6(1), first sentence, point (c) of the GDPR, provided that you have not expressly consented to the further use of your data in accordance with Article 6(1), first sentence, point (a) of the GDPR, or we reserve the right to use your data beyond this scope where such use is permitted by law and about which we inform you in this policy. You may delete your customer account at any time, either by contacting us via the contact details provided in this privacy policy or by using the function provided for this purpose within your customer account.

3. Data disclosure

For the purposes of fulfilling the contract in accordance with Article 6(1), first sentence, point (b) of the GDPR, we pass on your data to the delivery company commissioned to carry out the delivery, insofar as this is necessary for the delivery of the goods ordered. Depending on which payment service provider you select during the ordering process, we will pass on the payment details collected for this purpose to the bank responsible for processing the payment and, where applicable, to payment service providers commissioned by us or to the selected payment service, for the purpose of processing payments. In some cases, the selected payment service providers also collect this data themselves, provided you create an account with them. In this case, you must log in to the payment service provider using your login details during the ordering process. In this respect, the privacy policy of the respective payment service provider applies.

We also use an external stock management system to process orders and contracts. The transfer and processing of data carried out in this context is based on data processing on behalf of a client.

Disclosure of data to debt collection agencies
For the purposes of fulfilling the contract in accordance with Article 6(1), first sentence, point (b) of the GDPR, we will pass on your data to a commissioned debt collection agency if our payment claim has not been settled despite a prior reminder. In this case, the claim will be collected directly by the debt collection agency. Furthermore, the transfer serves to safeguard our legitimate interests – which, following a balancing of interests, are deemed to prevail – in the effective assertion and enforcement of our payment claim in accordance with Article 6(1), first sentence, point (f) of the GDPR.

4. Cookies and web analytics

In order to make your visit to our website more appealing and to enable the use of certain functions, to display relevant products or for market research purposes, we use so-called cookies on various pages, provided you have given your consent in accordance with Article 6(1), first sentence, point (a) of the GDPR.

Cookies are small text files that are automatically stored on your device. Some of the cookies we use are deleted at the end of the browser session, i.e. once you close your browser (so-called session cookies). Other cookies remain on your device and enable us to recognise your browser the next time you visit (persistent cookies). You can find the storage duration in the overview within your web browser’s cookie settings. You can configure your browser so that you are notified when cookies are set and can decide on a case-by-case basis whether to accept them, or you can block the acceptance of cookies in specific cases or generally. If you do not accept cookies, the functionality of our website may be restricted. Each browser manages its cookie settings differently. This is described in each browser’s help menu, which explains how you can change your cookie settings. You can find these for the respective browsers via the following links:

Microsoft Edge™ / Safari™ / Chrome™ / Firefox™ / Opera™

Furthermore, you may withdraw your consent at any time by sending a message via the contact details provided in the privacy policy.

Consent management with Real Cookie Banner

We use the „Real Cookie Banner“ consent tool to manage the cookies and similar technologies (tracking pixels, web beacons, etc.) used on our website and to manage consent in this regard. You can find details on how „Real Cookie Banner“ works at https://devowl.io/de/rcb/datenverarbeitung/.

The legal basis for the processing of personal data in this context is Article 6(1)(c) of the GDPR and Article 6(1)(f) of the GDPR. Our legitimate interest is the management of the cookies and similar technologies used, and the associated consents.

When you make a choice in the cookie banner, we store the following to provide evidence of your consent: a randomly generated consent ID, the time, your selection and the button clicked, the status of the banner settings at that time, the screen size of your device, and the page you were viewing. We do not store your IP address in the process; it is stored solely as a non-reversible hash value. In addition, your decision is stored in a cookie in your browser so that the banner does not reappear every time you visit the page. After 120 days, we will ask for your consent again.

The provision of personal data is neither contractually required nor necessary for the conclusion of a contract. You are not obliged to provide personal data. If you do not provide personal data, we will be unable to manage your consents.

You can view, change or withdraw your decision at any time:
Change privacy settings · History of your consents · Revoke consents

Use of Google Analytics 4 (GA4) for web analytics Where you have given your consent in accordance with Article 6(1), first sentence, point (a) of the GDPR, this website uses Google Analytics 4 for the purpose of website analytics. The service is integrated via the Google tag of the WordPress plugin Google Site Kit and is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (www.google.de). Google Analytics 4 uses methods, such as cookies, that enable an analysis of your use of the website. The information collected automatically about your use of this website is generally transmitted to a Google server in the USA and stored there.

Data is transferred to the USA on the basis of the European Commission’s adequacy decision of 10 July 2023 regarding the EU-US Data Privacy Framework (EU-US DPF). Google LLC is certified under the EU-US Data Privacy Framework. You can view the certification at https://www.dataprivacyframework.gov/ view.

Google Analytics 4 does not collect or process full IP addresses. The IP address is anonymised (IP masking) in the browser before it is transmitted to Google.

Once the purpose no longer applies and we have stopped using Google Analytics 4, the data collected in this context will be deleted. You may withdraw your consent at any time with future effect via our cookie banner.

5. Social media

Our online presence on Facebook, Instagram and LinkedIn

Our presence on social media and online platforms is designed to facilitate better, more active communication with our customers and prospective clients. We use these channels to provide information about our products and current special offers.
When you visit our social media pages, your data may be automatically collected and stored for market research and advertising purposes. Using pseudonyms, this data is used to create so-called user profiles. These may be used, for example, to display adverts both on and off the platforms that are likely to match your interests. Cookies are generally used on your device for this purpose. These cookies store information on visitor behaviour and users’ interests. In accordance with Article 6(1)(f) of the GDPR, this serves to safeguard our legitimate interests – which, following a balancing of interests, take precedence – in optimising the presentation of our services and communicating effectively with customers and prospective customers. If you are asked by the respective social media platform operators to give your consent to data processing, e.g. by ticking a box, the legal basis for the data processing is Article 6(1)(a) of the GDPR.
Insofar as the aforementioned social media platforms have their headquarters in the USA, the following applies: The European Commission issued an adequacy decision on 10 July 2023 for the USA, known as the EU-US Data Privacy Framework (EU-US DPF). Meta Platforms Ireland Ltd. (Facebook, Instagram) and LinkedIn Ireland Unlimited Company are certified under the EU-US Data Privacy Framework. Information on the certification can be found at https://www.dataprivacyframework.gov/.
For detailed information on how the providers process and use data on their websites, as well as contact details, your rights in this regard and the settings available to protect your privacy – in particular, your right to object (opt-out) – please refer to the providers’ privacy policies linked below. Should you nevertheless require assistance in this regard, please do not hesitate to contact us.

Facebook: https://www.facebook.com/about/privacy/
Data processing is carried out on the basis of an agreement between joint controllers in accordance with Article 26 of the GDPR, which you here can view.
Further information on data processing in connection with visiting a Facebook fan page (information on Insights data) can be found here.

Instagram: https://help.instagram.com/519522125107875

LinkedIn: https://www.linkedin.com/legal/privacy-policy
Data processing on LinkedIn company pages is carried out on the basis of an agreement between joint controllers in accordance with Article 26 of the GDPR. Further information can be found in the LinkedIn Page Insights Joint Controller Addendum.

Right to object (opt-out):

Facebook: https://www.facebook.com/settings?tab=ads

Instagram: https://help.instagram.com/519522125107875 LinkedIn: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out

6. How to contact us and your rights

As a data subject, you have the following rights:

  • in accordance with Article 15 of the GDPR, the right to request information, to the extent specified therein, regarding your personal data processed by us;
  • in accordance with Article 16 of the GDPR, the right to request, without delay, the rectification of inaccurate personal data or the completion of your personal data held by us;
  • in accordance with Article 17 of the GDPR, the right to request the erasure of your personal data stored by us, unless further processing
    • to exercise the right to freedom of expression and information;
    • to comply with a legal obligation;
    • for reasons of public interest, or
    • is necessary for the assertion, exercise or defence of legal claims;
  • in accordance with Article 18 of the GDPR, the right to request the restriction of the processing of your personal data, insofar as
    • you dispute the accuracy of the data;
    • the processing is unlawful, but you object to its erasure;
    • we no longer require the data, but you require it to establish, exercise or defend legal claims, or
    • you have objected to the processing in accordance with Article 21 of the GDPR;
  • in accordance with Article 20 of the GDPR, the right to receive the personal data you have provided to us in a structured, commonly used and machine-readable format, or to request that it be transferred to another controller;
  • In accordance with Article 77 of the GDPR, you have the right to lodge a complaint with a supervisory authority. As a rule, you may contact the supervisory authority for your usual place of residence or place of work, or for the location of our registered office.

If you have any questions regarding the collection, processing or use of your personal data, or if you wish to request information, rectification, restriction or erasure of data, or to withdraw your consent or object to a specific use of your data, please contact us directly using the contact details provided in our legal notice.

Right to object
Where we process personal data as explained above in order to safeguard our legitimate interests, which prevail following a balancing of interests, you may object to such processing with effect for the future. If the processing is carried out for direct marketing purposes, you may exercise this right at any time as described above. Where processing is carried out for other purposes, you have a right to object only if there are grounds arising from your particular situation. Once you have exercised your right to object, we will no longer process your personal data for these purposes, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or where the processing serves to establish, exercise or defend legal claims

This does not apply if the processing is carried out for direct marketing purposes. In that case, we will not process your personal data any further for this purpose.

Privacy policy created using rechtstexter.de.