Privacy policy
Sachsen Fahnen takes the protection of personal data very seriously. Adherence to legislation and other legal provisions is a matter of course for Sachsen Fahnen. Sachsen Fahnen has therefore taken up technical and organisational measures to make sure that regulations concerning data protection are respected and complied with both bySachsen Fahnen and also by the third parties engaged for fulfilment of the contract.
When you use this website, a variety of personal data are collected. Personal data are data with which you can be identified personally. The current privacy policy explains which data we collect and what we use it for. It also explains, how and for what purpose this is done.
We would like to point out that transmitting data over the Internet (e.g. when communicating via e-mail) carries with it some security risks. Complete protection of data against unauthorised access by third parties is not possible.
Data collection on our website
Data are collected on the one hand when you disclose it to us in the context of an ordering process or when you enter it into a contact form.
Other data are collected automatically by the IT systems when you visit the website. This is mainly technical data (e.g. Internet browser, operating system and the time of accessing the website).
Some of the data are collected to ensure the smooth running of the website. Other data can be used for analysis of user behaviour.
SSL encryption
This website uses SSL encryption for security reasons and to protect the transmission of confidential content, such as enquiries that you send to us in our role as the site operator.
SSL is the abbreviation for “Secure Socket Layer”. The SSL technology ensures that your personal data, your log-in data and your order and payment information are transferred safely through the Internet.
As soon as sensitive data are entered, the SSL certificate logo appears. This logo verifies the encryption status of the website. You can recognise an encrypted connection by the automatic change in the address bar from “http://...” to “https://...” (short form for Hyper Text Transfer Protocol Secure).
Storage of access data in server log files
If you access our web page, information of general nature is automatically collected. This general data and information are stored in the log files of the server. The type of data collected can include, for instance, the type of web browser and its versions, the operating system, the web page from which a requesting system accessed our web page (so-called referrer web page), the domain name of your Internet service provider, the date and the time of access, an Internet protocol address (IP-address) and other similar data. We do not draw any inferences on the person concerned (or the owner of the connection) when using this general data and information.
This information is technically necessary for purposes of delivering contents of web pages requested by you correctly, to optimise the contents of our web page and also to ensure the functionality of the information technological systems and our website’s technology. This anonymously collected data and information is statistically evaluated by us to optimise our Internet content and the underlying technology. The anonymous data in the server log files are stored separately from all personal data submitted by a data subject.
This access data are evaluated by us exclusively for the purpose of guaranteeing smooth operation of the website as well as the improvement of our web content. This serves the purpose of preserving our legitimate interest in accordance with Article 6 (1)(1), Point f of the General Data Protection Regulation (GDPR), and our overriding legitimate interest in the correct presentation of our web content within the framework of balance of interests.
Data collection and use for contract processing
We collect personal data when you submit it to us voluntarily for example when you are making contact with us (e.g. through a contact form, e-mail, telephone). The type of data collected can be seen from the respective input forms. Required fields are marked as such since we absolutely need the data in these cases for contract processing or for the processing of your inquiry and because you cannot complete the order and/or the account opening, or send the inquiry without indicating these details.
The processing of the data submitted during registration takes place on the basis of your consent (Article 6 (1), Point b of the GDPR). You can revoke your consent any time. To do this, an informal e-mail message to us suffices.
We use the data you sent to us for contract processing and the processing of your inquiries. After complete processing of the contract, your data will be blocked from any further use and then deleted after expiry of the mandatory retention period dictated by tax and commercial legislation, provided that you have not explicitly consented to further use of your data, or as long as we have not reserved our right for continued use of your data extending beyond the consent period, which is legally permitted and about which we shall inform you afterwards.
Data transmission for fulfilment of a contract
We shall forward your data to the shipping company engaged to do the delivery as far as this is required for the delivery of the ordered goods.
Legal basis for data processing is Article 6 (1), Point b of the GDPR, which permits the processing of data for the fulfilment of a contract or for pre-contractual measures.
Data use for subscription to the e-mail newsletter
If you subscribe to the newsletter offered on our website, we shall need your e-mail address and other information, which will enable us to verify that you are the owner of the e-mail address and that you consent to receiving the newsletter. No further data will be collected unless you give it voluntarily.
The processing of the data entered into the newsletter subscription form takes place exclusively on the basis of your consent (Article 6 (1), Point a of the GDPR). You can revoke the consent you granted for the storage of your data, e-mail address as well as its use for sending out the newsletter any time, for instance through the “Unsubscribe” link in the newsletter or via the unsubscribe form https://www.sachsenfahnen.com/newslettersubscription/unsubscribe/
By newsletter tracking we mean the tracking or storage of the behaviour of recipients. It includes the opening of a mailing, clicking on text or picture links or downloading of pictures in an e-mail programme. The newsletter tracking is done exclusively anonymously; only the behaviour of a recipient is stored. There is no possibility of any inference being made about the recipient himself.
This website uses Inxmail for mailing newsletters. The provider is Inxmail GmbH, Wentzingerstr. 17, 79106 Freiburg/Germany. Inxmail is a service through which the mailing of newsletters can be organised and analysed. The data entered by you for the purpose of receiving the newsletter (e.g. e-mail address) will be stored on the servers of Inxmail in Germany.
We have signed a contract with Inxmail for the processing of order data, and we implement the strict provisions of the German data protection authorities fully when using Inxmail.
Data use for post advertising and your right of revocation
Furthermore, we reserve the right to store and use your first name and surname, your postal address and – as long as we received these other supplementary details from you in connection with our contractual relationship – your title, academic degree and your professional, industry-specific or business name in compiled lists, and to utilise them for our own advertising purposes, e.g. for sending out interesting offers and information about our products by post. You can revoke the storage and use of your data for these purposes any time, by sending a message to the contact address described below.
This serves the purpose of preserving our overriding legitimate interest in commercially addressing our customers within the framework of balance of interests, in accordance with Article 6 (1)(1), Point f of the (GDPR).
Use of Cookies
Cookies which are necessary for the execution of the electronic communication process or for the provision of particular functions required by you (e.g. shopping cart function), are stored on the basis of Article 6 (1), Point f of the GDPR. The website operator has a legitimate interest in the storage of Cookies for purposes of providing technically sound and optimised services. As long as other Cookies (e.g. Cookies for analysis of your surfing behaviour) are stored, these are treated separately in this privacy policy.
Cookies are small text files stored on your terminal device. Some of the Cookies we use are deleted again after the end of the browser session, that is after you have closed your browser (so-called session Cookies). Other Cookies remain on your terminal device and enable us to identify your browser the next time you pay a visit (persistent Cookies). You can configure your browser in such a way that you are informed about the use of Cookies and are able to decide on individual basis whether to accept them, or you can exclude Cookies for specific cases or in general. If you disallow Cookies, the functionality of this website may be restricted.
Use of Google Analytics for web analysis
This website uses Google Analytics, a web analysis service of Google Inc. The company that runs Google Analytics is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”).
Google LLC has its headquarters in the USA and is certified under the EU-US-Privacy Shield. The current certificate can be viewed here. Based on this agreement between the USA and the European Commission, the latter has set an appropriated data protection standard for enterprises certified under the Privacy Shield.
Google Analytics uses methods which make it possible for us to analyse your use of our website. “Cookies” – these are text files which are stored on your computer. The storage of Google Analytics Cookies is based on Article 6 (1), Point f of the GDPR.
The website operator has a legitimate interest in the analysis of user behaviour, in order to optimise both his/her web content and his/her advertisements.
Information generated regarding your usage of this website is generally transmitted to a Google server in the USA and stored there. We have activated the IP anonymisation function on this website. Through this function your IP-address will first be truncated by Google within the member states of the European Union or in other states which are signatories to the Convention of the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. The IP address transmitted by your browser within the context of Google Analytics will not be merged with other data by Google.
Browser Plugin
Furthermore, you can prevent the transmission of data generated by Cookies regarding your usage of the website (including your IP address) to Google, as well as the processing of this data by Google, by downloading and installing the browser plug-in available through the following link https://tools.google.com/dlpage/gaoptout?hl=de.
You can prevent the collection of your data by Google Analytics by clicking on the following link. An Opt-Out-Cookie is installed on your device and this will prevent the collection of your data at future visits to this website: Deactivating Google Analytics. If you delete your Cookies, then you have to click on the link again.
You can find further information on data use by Google and on the possibilities of changing settings as well as the possibility of revocation on Google’s website: https://www.google.com/intl/de/policies/privacy/partners (“Data use by Google when you use the websites or Apps”), https://www.google.com/policies/technologies/ads (“Data use for advertising purposes”), https://www.google.de/settings/ads (“Manage information, which Google uses to display adverts for you”).
We have signed a contract with Google for the processing of order data, and we implement the strict provisions of the German data protection authorities fully when using Google Analytics.
Demographic features at Google Analytics
This website uses the “demographic features” function of Google Analytics. This function enables the creation of reports which contain statements about age, sex and interests of the website visitors. These data stem from interest-related advertising by Google, as well as visitor data from third party providers. These data cannot be assigned to any particular person. You can deactivate this function any time using the Ad settings in your Google account or prohibit the collection of your data by Google Analytics generally.
Freshchat
Our website uses the Freshchat service to provide our customers with a live chat option. Freshchat is a service provided by Freshworks Inc, 1250 Bayhill Drive, Suite 315, San Bruno, CA 94066, USA. When you use our live chat, the data you enter is transmitted to and stored by Freshchat. This data usually includes your name and email address, as well as the messages you send via the chat. The data is used solely to process your requests and for statistical purposes. Freshchat uses cookies to enable the chat function. These cookies are stored on your computer and allow the chat to be resumed if you leave it and reopen it later. You can disable the use of cookies at any time through your browser settings. The use of Freshchat is based on Art. 6 para. 1 lit. f DSGVO. Our legitimate interest is to be able to offer you a fast and uncomplicated communication option via our live chat. For more information about Freshchat's data protection, please see the Freshworks privacy policy at: Privacy Policy.
For purpose of customer communication, we use live chat tool from WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland ("WhatsApp"). This serves to safeguard our overriding legitimate interests in effective and improved customer communication in accordance with Article 6 Paragraph 1 Section 1 lit. f GDPR. WhatsApp works for us on our behalf. The phone numbers we store on our mobile device are automatically processed on servers of Meta Platforms, Inc., 1 Hacker Way, Menlo Park, California 94025, USA. Only telephone numbers of customers who have previously contacted us via WhatsApp and have therefore already accepted WhatsApp's terms of use and data protection are saved. The European Commission has not issued an adequacy decision for the USA. Our cooperation is based on standard data protection clauses of the European Commission.
YouTube components with extended data protection mode
We use components (videos) of the YouTube Company on our website. YouTube, LLC 901 Cherry Ave., 94066 San Bruno, CA, USA, is a company of Google Inc., Amphitheatre Parkway, Mountain View, CA 94043, USA.
We use the so-called “Extended Data Protection Mode” of the provider for the integration of videos. With this, a Cookie will only be stored on your computer when you play a video. According to Youtube, no personal Cookie information is stored for purposes of playing the embedded videos using extended data protection. If you want to be sure that none of your data are stored at Youtube, do not click on the embedded videos. The use of YouTube is done in the interest of an attractive presentation of our online content. This represents legitimate interest in the meaning of Article 6 (1), Point f of the GDPR.
You can find more information on the handling of user data in the privacy policy of YouTube at: https://www.google.de/intl/de/policies/privacy.
Assessment request by e-mail
Provided that you have granted us your express consent either during or after placement of your order by activating the relevant checkbox or clicking on the button designated for this, we shall use your e-mail address to request you to give an assessment of the handling of your order using our assessment system. You can revoke this consent any time by sending a message to the contact address described below.
Your rights
As a data subject, you have the following rights:
- The right to demand information about your personal data which have been processed by us to the extent indicated, in accordance with Article 15 of the GDPR.
- The right to demand immediate rectification of any false personal data or completion of your incomplete personal data stored with us, in accordance with Article 16 of the GDPR.
- In accordance with Article 17 of the GDPR, the right to demand immediate erasure of your personal data stored with us, provided further processing is not required
- to exercise of the right to freedom of expression and information
- to fulfil a legal obligation
- for reasons of public interest, or to assert, execute or defend legal claims. - The right to demand restriction of the processing of your personal data, in accordance with Article 18 of the GDPR, provided
- the correctness of the data is disputed by you
- the processing is unlawful, but you reject the deletion of the data
- we no longer need the data, but you need it for assertion, execution or defence of legal claims, or you have raised objection to the processing of the data in accordance with Article 21 of the GDPR. - The right to receive your personal data, which you provided to us, in a structured, standard and machine-readable format, or to demand the transmission of the data to another Controller, in accordance with Article 20 of the GDPR.
- The right to complain to a supervisory authority, in accordance with Article 77 of the GDPR. In principle, you can consult the supervisory authority in your area of residence or place of work, or that of our business headquarters.
Deletion of data
The data stored with us is deleted as soon as it is no longer required for its intended purpose and provided there are no legal obligations against its deletion. Provided that the data of the users is not deleted because it is required for other legally permissible purposes, its processing will be restricted. That means, the data will be blocked and not processed for other purposes. This applies, for example, to data of users, that must be kept for reasons relating to commercial or fiscal law.
According to legal provisions, the storage of the data is done for 6 years in accordance with Article 257 (1) of the German Commercial Code (trade books, inventories, opening balances, annual accounts, trade letters, booking receipts, etc.), as well as for 10 years in accordance with Article 147 (1) of the German Fiscal Code (books, records, progress reports, booking receipts, trade and business letters, relevant documents for taxation, etc.).
Name and address of the Controller
The Controller according to the General Data Protection Regulation and other national Data Protection Acts of the member states, as well as other legal data protection regulations, is:
Sachsen Fahnen GmbH & Co. KG
Am Wiesengrund 2
01917 Kamenz
Germany
Tel.: +49 (0) 3578 359-0
The right to information and possibility of contact
You have the right to free information about your data stored with us, as well as a right to rectification, blockage or deletion of this data, if necessary. For any inquiries regarding the collection, processing or use of your personal data, and for any information, rectification, blocking or deletion of data, as well as for revocation of consent possibly granted or revocation of some particular data use, please contact our operational data protection specialist:
Annett Wagner
Am Wiesengrund 2
01917 Kamenz
Germany
Tel.: +49 (0) 3578 359-0
E-Mail: annett.wagner@sachsenfahnen.de
In the case of data protection breaches, the data subject has the right to complain to the supervisory authority responsible. A responsible supervisory authority in legal matters of data protection is the regional data protection specialist of the federal state in which our enterprise has its headquarters. A list of the data protection specialists as well as their contact details can be accessed through the following link: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.