General Information on Data Processing
The use of our website is generally possible without providing personal data. To the extent that personal data is collected on our pages, this is regularly done on a voluntary basis if possible. The data collected will never be passed on to third parties without the consent of the person concerned. In accordance with Article 13 of the General Data Protection Regulation (GDPR), we would like to inform you in the following which data is stored and processed for which purpose.
Details of the Responsible Company
The person responsible for data processing on this website in terms of the General Data Protection Regulation and other national data protection laws of the Member States as well as other data protection provisions is:
Schlosserei Wolff GmbH
In der Krause 62
Phone: 02403 66904
Fax: 02403 64853
Purpose of and Legal Basis for Data Processing
According to Article 6 of the General Data Protection Regulation (GDPR), the processing of personal data is legitimate under certain conditions. Article 6 GDPR serves as the legal basis in these cases.
If the consent of the person concerned is obtained for the processing of personal data, Art. 6 para. 1 lit. a GDPR forms the legal basis.
If personal data are necessary for the fulfilment of a contract of which the person concerned is a contracting party, Art. 6 para. 1 lit. b GDPR serves as the legal basis for processing these data. This also applies to processing operations that are necessary for the implementation of pre-contractual measures.
Provided that the processing of personal data is necessary for the fulfilment of a legal obligation to which our company is subject, Art. 6 para. 1 lit. c GDPR forms the legal basis.
If the processing of personal data is necessary to protect the vital interests of the person concerned or another natural person, Art. 6 para. 1 lit. d GDPR serves as the legal basis.
If the processing is necessary to safeguard the legitimate interests of our company or a third party, Art. 6 para. 1 lit. f GDPR shall serve as the legal basis for the processing, provided that the interests, fundamental rights and fundamental freedoms of the person concerned do not predominate.
Storage Time of the Data
Personal data stored through our website or through electronic contact with us will be deleted as soon as the purpose of storage no longer applies. If the legislator specifies the storage of the data by regulations or laws, the deletion takes place at the end of the storage period. For the purpose of concluding or fulfilling a contract, however, further storage of the data is necessary.
Use of our Website
A counter at the bottom of our homepage shows the visitor frequency of our website. Each time our website is accessed, a visitor is noticed. Thereby, our system neither collects nor stores data or information about the computer system of the accessing PC. An assignment of the accessing PC to a user is not possible.
We do not employ user data, which are collected by technically necessary cookies, to create user profiles. Most cookies process and store data only for the duration of the visit to the website. In the case of permanent cookies, this depends on the respective processing purpose.
Our Contact Form
For technical reasons, filling out our contact form is connected to the storage of the following personal data:
Upon submitting the contact form, the date and time of contact will also be transmitted. By sending the form, you consent to the processing of data in accordance with our data protection declaration, which you will be notified of at the end of the contact form.
When contacting us via the e-mail address provided, the sender's personal data transmitted with the e-mail will be stored. The purpose of the data storage is merely to answer the contact request and, in the case of a requested contract offer or conclusion, to issue the latter. Personal data will not be passed on to third parties without your explicit consent. We would like to point out that data transmission over the internet (e.g. communication via e-mail) can be subject to security risks. A gapless protection of the data against access by third parties is not possible.
The legal basis for the storage of personal data, when sending the contact form, is Art. 6 para. 1 lit. a GDPR. In the case of e-mail correspondence, Art. 6 para. 1 lit. f GDPR serves as the legal basis. If the contact request is aimed at a contract offer or the conclusion of a contract, it is also referred to Art. 6 para. 1 lit. b GDPR.
The data will be deleted as soon as the purpose of storage no longer applies. In the case of a contact request, this is given as soon as the conversation has ended and no business relationship has resulted from it. For the preparation of an offer or a contract, the further processing of the personal data is necessary. If the legislator specifies the storage of the data by regulations or laws, the deletion takes place after the expiry of the storage period.
The consent to the processing of personal data can be revoked at any time. For the revocation of a consent already given, an informal notification by e-mail is sufficient. The legality of the data processing operations, carried out until the revocation, remains unaffected by the revocation. In case of a contact request with us, a revocation leads to the fact that the conversation cannot be continued.
1&1 IONOS SE
Under certain circumstances, personal data may be stored or processed on the servers of our web host, 1&1 IONOS SE – based in Elgendorfer Straße 57 in 56410 Montabaur, Germany. Pursuant to Art. 28 GDPR, we have concluded an order processing contract with 1&1 IONOS SE, which ensures the processing of personal data on servers of 1&1 IONOS in accordance with the General Data Protection Regulation. To this end, technical and organisational measures are taken to ensure the lasting protection of the rights of the person concerned.
For more information about the processing of personal data, please refer to the Terms of Privacy of 1&1 IONOS SE.
For the display of video content on our website, we embed YouTube videos. When the person concerned accesses one of our pages with an integrated YouTube plug-in, a connection to the servers of YouTube is established. A cookie is set regardless of whether the person plays the video or not. YouTube uses the data of the person concerned to provide and improve its services.
If the person concerned is logged into his or her YouTube account when accessing our page, it is possible that YouTube may use his or her browsing behaviour to create a personal profile. This can be prevented by logging out of the personal YouTube account beforehand.
YouTube is used in the interest of an appealing presentation of our advertising and product videos. This constitutes a legitimate interest as defined by Art. 6 para. 1 lit. f GDPR.
For details on data processing, please refer to the Terms of Privacy of YouTube LLC – based in 901 Cherry Ave., San Bruno, CA 94066, USA – or Google LLC – based in 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
For the display of directions to our company, we embed interactive maps from Google Maps on our website. When the person concerned accesses one of our pages with integrated Google Maps, a connection to the servers of Google is established. Cookies are automatically set and information such as the URL of the page visited and the IP-address of the person concerned is transmitted. Google uses the data of the person concerned for the provision, support and improvement of its services. Which data Google collects and how these data are used, depends on the privacy settings of the person concerned.
If the person concerned is logged into his or her Google account when visiting our page, it is possible that Google may collect personal information and store it in the respective Google account. This can be prevented by logging out of the personal Google account in advance.
Google Maps is used to illustrate the location of our company headquarters. This represents a legitimate interest as defined by Art. 6 para. 1 lit. f GDPR. For details on data processing, please refer to the Terms of Privacy of Google LLC – based in 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
Rights of the Person Concerned
1. Right of Access
Pursuant to Art. 15 GDPR, the person concerned has the right of access to the processing of his or her personal data which is to be granted by the responsible person. Besides the disclosure of the processing purposes, this also includes the planned storage duration.
2. Right to Correction
Likewise, the person concerned has the right to rectification and/or completion of his or her personal data (Art. 16 GDPR).
3. Right to Deletion
The right to immediate deletion (Art. 17 GDPR) of personal data applies if
a) the data are no longer necessary for the purposes of processing,
b) the consent, on which the processing is based pursuant to Art. 6 para. 1 lit. a
or Art. 9 para. 2 lit. a GDPR, is revoked by the person concerned and there is
no other legal basis for the processing,
c) the right of objection to the processing according to Art. 21 GDPR is asserted,
d) the personal data have been processed in violation of the law,
e) the deletion of personal data is necessary to fulfil a legal obligation under
Union law or the law of the Member States to which the responsible person is
f) the personal data have been collected in relation to services offered by the
information society according to Art. 8 para. 1 GDPR.
4. Right to Restriction of Processing
In addition, the person concerned may require the restriction of the processing (Art. 18 GDPR) of personal data relating to him or her, if
a) the accuracy of the personal data relating to him or her is disputed for a
period of time which enables the person responsible to verify the accuracy of
b) the processing is unlawful and instead of deletion, the restriction of the use of
personal data is demanded,
c) the personal data are no longer needed by the responsible person for the
purposes of processing, but the person concerned nonetheless needs them for
the assertion, exercise or defence of legal claims,
d) an objection has been lodged against the processing pursuant to Art. 21 para.
1 GDPR and it has not yet been clarified whether the legitimate reasons of the
responsible party outweigh those of the person concerned.
5. Right to Data Portability
The right to data portability (Art. 20 GDPR) and the associated receipt of the personal data concerned in a structured, common and machine-readable format may be exercised provided that
a) the processing of data is based on a consent in accordance with Art. 6 para. 1
lit. a or Art. 9 para. 2 lit. a GDPR or on a contract pursuant to Art. 6 para. 1 lit.
b GDPR and
b) the processing is carried out using automated procedures.
6. Right of Objection
Similarly and pursuant to Art. 21 GDPR, the person concerned has the right to object to the processing of his or her personal data, which takes place on the basis of Art. 6 para. 1 lit. e or f GDPR, for reasons arising from his or her particular situation.
The responsible person shall no longer process personal data, unless evidence of compelling legitimate reasons for the processing can be provided, outweighing the interests, rights and freedoms of the person concerned, or the processing serves the purpose of asserting, exercising or defending legal rights.
In the case of personal data being processed for the purposes of direct advertising, the person concerned shall have the right to object to the processing of his or her personal data for the purposes of such advertising at any time. If an objection is lodged, the personal data shall no longer be processed for these purposes.
7. Right to Revoke Consent
If the processing of data is based on Art. 6 para. 1 lit. a or Art. 9 para. 2 lit. a GDPR, the person concerned is granted the right to revoke his or her consent to the processing of personal data at any time, without affecting the legality of the processing which has taken place because of the consent prior to revocation.
8. Right to Lodge a Complaint with a Supervisory Authority
If the person concerned thinks that the processing of his or her personal data constitutes a violation of data protection law, he or she has the right to submit a complaint to the competent supervisory authority based on Art. 77 and 78 GDPR.