Data protection

1) Introduction and contact details of the person responsible

1.1 We are pleased that you are visiting our website and thank you for your interest. We would like to inform you about how your personal data is handled when you use our website. Personal data means any data with which you can be personally identified.

1.2 The data controller for this website within the meaning of the General Data Protection Regulation (GDPR) is Aqualogistik GmbH, Delecker Weg, 30, 59519 Möhnesee, Germany, Tel.: 02924/8775-0, Fax: 02924/8775-10, E-mail: info@aqualogistik.com. The controller is the natural or legal person who, alone or together with others, determines the purposes and means of processing personal data.

1.3 The controller has appointed a data protection officer, who can be contacted as follows: "AGAD Service GmbH, Waldring 43, 44789 Bochum, 0234-282 533-0, datenschutz(at)agad.de"

2) Data collection when visiting our website

2.1 When you simply use our website for informational purposes, meaning you do not register or otherwise transmit information to us, we only collect data that your browser transmits to the server (so-called „server log files“). When you access our website, we collect the following data, which is technically necessary for us to display the website to you:

  • The website we visited
  • Date and time of access
  • Amount of data sent in bytes
  • Referrer/Source from which you arrived at the page
  • Browser used
  • Operating system used
  • Used IP address (if applicable: in anonymised form)

Processing is carried out in accordance with Article 6 (1) lit. f GDPR, based on our legitimate interest in improving the stability and functionality of our website. The data will not be passed on or used in any other way. However, we reserve the right to retrospectively review the server log files should there be concrete indications of unlawful use.

2.2 This website uses SSL or TLS encryption for security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or enquiries to the controller). You can recognise an encrypted connection by the string „https://“, and the padlock symbol in your browser bar.

3) Hosting & Content Delivery Network

For the hosting of our website and the display of page content, we utilise a provider that offers its services exclusively on servers within the European Union, either directly or through selected subcontractors.

All data collected on our website will be processed on these servers.

We have concluded a data processing agreement with the provider, which ensures the protection of our website visitors' data and prohibits unauthorised disclosure to third parties.

4) Cookies

To make visiting our website an attractive experience and to enable the use of certain functions, we use cookies, which are small text files that are stored on your device. Some of these cookies are automatically deleted after closing the browser (so-called „session cookies“), while others remain on your device for longer and allow website settings to be saved (so-called „persistent cookies“). In the latter case, you can find out the storage duration in the overview of your web browser's cookie settings.

Where personal data is also processed by individual cookies used by us, the processing is carried out in accordance with Art. 6(1)(b) GDPR for the performance of the contract, in accordance with Art. 6(1)(a) GDPR in the event of consent granted, or in accordance with Art. 6(1)(f) GDPR for the safeguarding of our legitimate interests in the best possible functionality of the website and a customer-friendly and effective design of the site visit.

You can configure your browser to notify you when cookies are set and to decide on their acceptance individually, or to exclude the acceptance of cookies for specific cases or in general.

Please note that if cookies are not accepted, the functionality of our website may be restricted.

5) Making contact

5.1 WhatsApp Business

You have the option to contact us via the WhatsApp messaging service provided by WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. For this purpose, we use the so-called „Business Version“ of WhatsApp.

If you contact us via WhatsApp regarding a specific transaction (e.g., a placed order), we will store and use the mobile number you use on WhatsApp, as well as your first and last name if provided, in accordance with Article 6 (1) (b) of the GDPR to process and respond to your request. On the same legal basis, we may ask you to provide further data via WhatsApp (order number, customer number, address, or email address) in order to assign your query to a specific transaction.

Please save and use our WhatsApp contact for general enquiries (e.g. about our range of services, availability or our website) and we will use the mobile number you use on WhatsApp and – should you provide them – your first and last name in accordance with Art. 6 (1) lit. f GDPR based on our legitimate interest in providing the desired information efficiently and promptly.

Your data will always only be used to respond to your request via WhatsApp. It will not be passed on to third parties.

Please note that WhatsApp Business will access the address book of the mobile device used for this purpose and will automatically transmit phone numbers stored in the address book to a server of the parent company Meta Platforms Inc. in the USA. For the operation of our WhatsApp Business account, we use a mobile device whose address book exclusively stores the WhatsApp contact details of users who have also contacted us via WhatsApp.

This ensures that each person whose WhatsApp contact details are stored in our address book has already consented to the transfer of their WhatsApp phone number from the address books of their chat contacts in accordance with Art. 6 (1) (a) GDPR by accepting the WhatsApp terms of use upon first use of the app on their device. Consequently, the transfer of data from users who do not use WhatsApp and/or have not contacted us via WhatsApp is excluded.

For information on the purpose and scope of data collection, and further processing and use of your data by WhatsApp, as well as your rights and options for controlling your privacy, please refer to WhatsApp's Privacy Policy. https://www.whatsapp.com/legal/?eea=1#privacy-policy

We have concluded a data processing agreement with the provider, which protects the data of our website visitors and prohibits its disclosure to third parties.

In the context of the above-mentioned processing, data may be transferred to servers of Meta Platforms Inc. in the USA.

For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which, based on an adequacy decision by the European Commission, ensures compliance with European data protection standards.

5.2 When you contact us (e.g. via contact form or email), personal data will be processed solely for the purpose of handling and responding to your request, and only to the extent necessary for this.

The legal basis for processing this data is our legitimate interest in responding to your enquiry in accordance with Art. 6 (1) (f) of the GDPR. If your contact is aimed at a contract, the additional legal basis for processing is Art. 6 (1) (b) of the GDPR. Your data will be deleted when the circumstances indicate that the matter concerned has been finally clarified and provided that there are no statutory retention obligations to the contrary.

6) Use of customer data for direct advertising

CleverReach

We use the following provider for sending our email newsletters and other promotional email communication: CleverReach GmbH & Co. KG, Mühlenstr. 43, 26180 Rastede, Germany.

On the basis of our legitimate interest in effective and user-friendly email marketing, we will pass on the data you provided during registration to this provider in accordance with Art. 6(1)(f) GDPR to enable them to send emails on our behalf.

Subject to your explicit consent pursuant to Art. 6(1)(a) GDPR, the provider will also carry out a statistical success evaluation of mail campaigns using web beacons or tracking pixels in the emails sent, which can measure opening rates and specific interactions with the newsletter content. Device information (e.g., time of access, IP address, browser type, and operating system) is also collected and evaluated, but is not merged with other data sets.

You can withdraw your consent to mail tracking at any time with effect for the future.

We have concluded a data processing agreement with the provider, which protects the data of our website visitors and prohibits its disclosure to third parties.

7) Data processing for order processing

7.1 Sending image files for order processing by email

On our website, we offer customers the opportunity to commission product personalisation by submitting image files via email. The submitted image motif is then used as a template for the personalisation of the selected product.

The customer can send one or more image files from the storage of the device used to our company via the email address provided on the website. We then exclusively record, store, and use the files transmitted in this way to produce the personalised product as described in the respective service description on our website. If the transmitted image files are passed on to special service providers for the production and processing of the order, you will be explicitly informed about this in the following paragraphs. No further disclosure will take place. If the transmitted files or the digital motifs contain personal data (in particular, images of identifiable persons), all the processing operations mentioned above will be carried out exclusively for the purpose of processing your online order in accordance with Art. 6 para. 1 lit. b GDPR.

Once the order has been fully processed, the submitted image files will be automatically and permanently deleted.

7.2 Submission of image files for order processing via upload function

On our website, we offer customers the opportunity to commission the personalisation of products by submitting image files via an upload function. The submitted image motif is then used as a template for the personalisation of the selected product.

The customer can use the upload form on the website to send one or more image files directly to us from the storage of the device used, via automated, encrypted data transmission. We will then record, store, and use the transmitted files solely for the creation of the personalised product as described in the respective service description on our website. If the transmitted image files are passed on to special service providers for the creation and processing of the order, you will be explicitly informed about this in the following paragraphs. No further disclosure will occur. If the transmitted files or digital motifs contain personal data (especially images of identifiable persons), all the aforementioned processing operations are carried out exclusively for the purpose of processing your online order in accordance with Art. 6(1)(b) GDPR.

Once the order has been fully processed, the submitted image files will be automatically and permanently deleted.

7.3 For the purposes of contract processing for delivery and payment, the personal data collected by us will be passed on to the commissioned transport company and the commissioned credit institution in accordance with Art. 6 para. 1 lit. b GDPR.

Where we owe you updates for goods with digital elements or for digital products based on a corresponding contract, we process the contact details you provided during the order to inform you personally within the scope of our statutory information obligations pursuant to Art. 6(1)(c) GDPR. Your contact details will be strictly used for the specific purpose of communicating updates that we owe and will only be processed by us for this purpose to the extent necessary for the respective information.

Furthermore, we work with the following service provider(s) to process your order, who assist us in fulfilling the concluded contracts, either fully or in part. Certain personal data will be transmitted to these service providers in accordance with the following information.

7.4 Disclosure of personal data to shipping service providers

Deutsche Post

As a transport service provider, we use the following supplier: Deutsche Post AG, Charles-de-Gaulle-Straße 20, 53113 Bonn, Germany

We will pass on your email address and/or phone number to the supplier in accordance with Art. 6(1)(a) GDPR before the delivery of the goods for the purpose of arranging a delivery date or for delivery notification, provided that you have given your explicit consent during the ordering process. Otherwise, for the purpose of delivery in accordance with Art. 6(1)(b) GDPR, we will only pass on the recipient's name and delivery address to the supplier. The transfer will only take place if it is necessary for the delivery of the goods. In this case, it is not possible to arrange a delivery date with the supplier or to notify you of the delivery beforehand.

The consent can be revoked at any time with effect for the future to the controller named above or to the provider.
- DHL

As a transport service provider, we use the following supplier: DHL Paket GmbH, Sträßchensweg 10, 53113 Bonn, Germany

We will pass on your email address and/or phone number to the supplier in accordance with Art. 6(1)(a) GDPR before the delivery of the goods for the purpose of arranging a delivery date or for delivery notification, provided that you have given your explicit consent during the ordering process. Otherwise, for the purpose of delivery in accordance with Art. 6(1)(b) GDPR, we will only pass on the recipient's name and delivery address to the supplier. The transfer will only take place if it is necessary for the delivery of the goods. In this case, it is not possible to arrange a delivery date with the supplier or to notify you of the delivery beforehand.

The consent can be revoked at any time with effect for the future to the controller named above or to the provider.
DHL Express

As a transport service provider, we use the following supplier: DHL Express Germany GmbH, Heinrich-Brüning-Str. 5, 53113 Bonn, Germany

We will pass on your email address and/or phone number to the supplier in accordance with Art. 6(1)(a) GDPR before the delivery of the goods for the purpose of arranging a delivery date or for delivery notification, provided that you have given your explicit consent during the ordering process. Otherwise, for the purpose of delivery in accordance with Art. 6(1)(b) GDPR, we will only pass on the recipient's name and delivery address to the supplier. The transfer will only take place if it is necessary for the delivery of the goods. In this case, it is not possible to arrange a delivery date with the supplier or to notify you of the delivery beforehand.

The consent can be revoked at any time with effect for the future to the controller named above or to the provider.
- General Overnight (GO!)

As a transport service provider, we use the following supplier: GO! Express & Logistics (Deutschland) GmbH, Brühler Straße 9, 53119 Bonn, Germany

We will pass on your email address and/or phone number to the supplier in accordance with Art. 6(1)(a) GDPR before the delivery of the goods for the purpose of arranging a delivery date or for delivery notification, provided that you have given your explicit consent during the ordering process. Otherwise, for the purpose of delivery in accordance with Art. 6(1)(b) GDPR, we will only pass on the recipient's name and delivery address to the supplier. The transfer will only take place if it is necessary for the delivery of the goods. In this case, it is not possible to arrange a delivery date with the supplier or to notify you of the delivery beforehand.

The consent can be revoked at any time with effect for the future to the controller named above or to the provider.
Hellmann Worldwide Logistics

As a transport service provider, we use the following supplier: Hellmann Worldwide Logistics SE & Co. KG, Elbestraße 1, 49090 Osnabrück

We will pass on your email address and/or phone number to the supplier in accordance with Art. 6(1)(a) GDPR before the delivery of the goods for the purpose of arranging a delivery date or for delivery notification, provided that you have given your explicit consent during the ordering process. Otherwise, for the purpose of delivery in accordance with Art. 6(1)(b) GDPR, we will only pass on the recipient's name and delivery address to the supplier. The transfer will only take place if it is necessary for the delivery of the goods. In this case, it is not possible to arrange a delivery date with the supplier or to notify you of the delivery beforehand.

The consent can be revoked at any time with effect for the future to the controller named above or to the provider.

7.5 Use of Payment Service Providers

Paypal

One or more online payment methods from the following provider are available on this website: PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg

When selecting a payment method from a provider where you pay in advance, your payment details provided during the ordering process (including name, address, bank and payment card information, currency, and transaction number) as well as information about the content of your order will be shared with that provider in accordance with Art. 6(1)(b) GDPR. The transfer of your data in this case takes place exclusively for the purpose of payment processing with the provider and only to the extent necessary for this.

When selecting a payment method where we make an advance payment, you will also be asked to provide certain personal details during the order process (first name, surname, street, house number, postcode, town/city, date of birth, email address, telephone number, and if applicable, details of an alternative payment method).

In such cases, to safeguard our legitimate interest in determining your creditworthiness, these data will be forwarded to the provider in accordance with Art. 6 (1) lit. f GDPR for the purpose of a credit check. The provider will check, based on the personal data you have provided and other data (such as shopping basket, invoice amount, order history, payment experiences), whether the payment method you have selected can be granted with regard to payment and/or default risks.

The credit information report may contain probability values (so-called score values). Where score values are included in the result of the credit information report, they are based on a scientifically recognised mathematical-statistical procedure. Address data, among other things, but not exclusively, are incorporated into the calculation of the score values.

You can object to this processing of your data at any time by sending us a message or by objecting to the provider. However, the provider may still be entitled to process your personal data if this is necessary for contractually agreed payment processing.

8) Web analysis services

Plausible

This website uses „Plausible“, a web analytics tool from Plausible Insights OÜ, Västriku tn 2, 50403, Tartu, Estonia.

This is used to anonymously record and analyse the interactions of randomly selected individual visitors with the website in order to gather information about website usage (such as visitor numbers, page views, bounce rates, and dwell time).

At no time will personal data be processed. When using this website, Plausible exclusively collects non-personal data such as information about the browser and user agent. This is stored in a non-personally identifiable form and analysed for statistical purposes. Data will be deleted as soon as it is no longer needed for our analysis purposes.

If personal data is processed in individual cases, processing will be carried out based on our legitimate interest in the statistical evaluation of user behaviour for optimisation purposes in accordance with Art. 6(1)(f) GDPR.

9) Page functionalities

9.1 Adobe Fonts (Typekit)

This page uses so-called Web Fonts from the following provider for uniform font display: Adobe Systems Incorporated, 345 Park Avenue, San Jose, CA 95110-2704, USA

When a page is loaded, your browser downloads the required web fonts into its browser cache to display text and fonts correctly, and establishes a direct connection to the provider's servers. In doing so, certain browser information, including your IP address, is transmitted to the provider.

The processing of personal data in connection with establishing contact with the font provider will only be carried out if you have given us your express consent in accordance with Art. 6 (1) (a) GDPR. You can revoke your consent at any time with future effect by deactivating this service via the „Cookie Consent Tool“ provided on the website. If your browser does not support web fonts, a standard font from your computer will be used.

For data transfers to the USA, the provider has acceded to the EU-US Data Privacy Framework, which, based on an adequacy decision by the European Commission, ensures compliance with the European data protection level.

9.2 Friendly Captcha

On this website, we use the CAPTCHA service from the following provider: Friendly Captcha GmbH, Am Anger 3-5, 82237 Wörthsee

The service checks whether an input is made by a natural person or fraudulently by machine and automated processing, and blocks spam, DDoS attacks, and similar automated malicious access.

When you visit a page on our website that contains captcha elements from the provider, your browser establishes a direct connection to the provider's servers to load the elements correctly. During this process, certain browser information, including your IP address, is transmitted to the provider.

The legal basis for this is our legitimate interest in determining individual accountability on the internet and preventing misuse and spam in accordance with Art. 6(1)(f) of the GDPR.

Following submission, the browser information collected will be automatically anonymised immediately, meaning no personal data will be processed to verify the human origin of a page interaction.

We have concluded a contract processing agreement with the provider, which ensures the protection of our website visitors' data and prohibits unauthorised disclosure to third parties.

10) Tools and Sundries

Cookie consent tool

This website uses a „cookie consent tool“ to obtain effective user consent for cookies and cookie-based applications that require consent. The „cookie consent tool“ is displayed to users in the form of an interactive user interface when they visit the page, where consent for specific cookies and/or cookie-based applications can be given by ticking boxes. By using this tool, all cookies/services requiring consent are only loaded if the respective user has given their consent by ticking the boxes. This ensures that such cookies are only placed on the respective user's end device if consent has been given.

The tool uses technically necessary cookies to save your cookie preferences. Personal user data is not processed in principle.

In individual cases, if personal data (such as the IP address) are processed for the purpose of storing, assigning, or logging cookie settings, this occurs in accordance with Art. 6(1)(f) GDPR based on our legitimate interest in lawful, user-specific, and user-friendly cookie consent management, and therefore in lawful design of our website.

Further legal basis for the processing is also Art. 6(1)(c) GDPR. As controllers, we are subject to the legal obligation to make the use of technically non-essential cookies dependent on the respective user's consent.

Where necessary, we have concluded a data processing agreement with the provider, which ensures the protection of our site visitors' data and prohibits unauthorised disclosure to third parties.

Further information on the operator and the configuration options for the cookie consent tool can be found directly in the corresponding user interface on our website.

11) Data Subject Rights

11.1 The applicable data protection law grants you, in relation to the data controller, the following data subject rights (rights of access and intervention) concerning the processing of your personal data, with reference being made to the cited legal basis for the respective requirements for exercising them:

  • Right of access pursuant to Article 15 GDPR;
  • Right to rectification according to Article 16 GDPR;
  • Right to erasure under Article 17 GDPR;
  • Right to restriction of processing under Art. 18 GDPR;
  • Right to information according to Art. 19 GDPR;
  • Right to data portability pursuant to Art. 20 GDPR;
  • Right to withdraw consent given, pursuant to Art. 7(3) GDPR.;
  • Right to lodge a complaint pursuant to Article 77 GDPR.

11.2 Right of objection

If we process your personal data as part of a balancing of interests due to our overriding legitimate interest, you have the right to object to this processing at any time for reasons arising from your particular situation, with effect for the future.

If you exercise your right to object, we will stop processing the relevant data. However, further processing is reserved if we can prove compelling legitimate grounds for processing that override your interests, fundamental rights and freedoms, or if the processing serves the establishment, exercise or defence of legal claims.

IF WE PROCESS YOUR PERSONAL DATA FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR THE PURPOSES OF SUCH MARKETING. YOU MAY EXERCISE THIS RIGHT AS DESCRIBED ABOVE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE SHALL CEASE PROCESSING THE RELEVANT DATA FOR DIRECT MARKETING PURPOSES.

12) Duration of personal data retention

The duration of the storage of personal data is determined by the respective legal basis, the purpose of processing, and – where applicable – additionally by the respective statutory retention period (e.g. commercial and tax law retention periods).

When processing personal data based on explicit consent in accordance with Article 6(1)(a) of the GDPR, the data concerned will be stored until you withdraw your consent.

Are there statutory retention periods for data processed in the context of contractual or contract-like obligations under Article 6(1)(b) GDPR? Shall this data be routinely deleted upon expiry of the retention periods, provided it is no longer required for the performance or initiation of a contract and/or our legitimate interest in further storage does not persist.

When processing personal data on the basis of Art. 6(1)(f) of the GDPR, this data will be stored until you exercise your right to object under Art. 21(1) of the GDPR, unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or the processing serves to establish, exercise or defend legal claims.

When processing personal data for direct marketing purposes on the basis of Article 6(1)(f) GDPR, this data will be stored until you exercise your right to object under Article 21(2) GDPR.

Unless otherwise indicated by other information in this declaration regarding specific processing situations, personal data that is stored will otherwise be deleted when it is no longer necessary for the purposes for which it was collected or otherwise processed.

Navigation

Product categories