ARKU Shop’s Privacy Policy

Data Protection Declaration

1. Privacy at a glance

Welcome to our E-Shop and thank you for your interest in our company, our products and our services. The protection of your personal data is important to us. Therefore, we would like to explain to you what kind of data we collect and how we use the data during your E-Shop visit.

Data Controller within the meaning of the Data Protection Law
Responsible for data processing on our E-Shop is:

ARKU Maschinenbau GmbH
Siemensstrasse 11
76532 Baden-Baden
Phone: +49 7221 / 50 09-0
E-mail: info[at]arku.com


The data controller is the natural or legal person, who alone or together with others will determine the purposes and means of processing personal data (such as names, e-mail addresses or similar).

Statutory Data Protection Officer
Our company has appointed a data protection officer. You can email the Privacy Officer at dsb[at]arku.com or send a letter to the postal address listed above.

General information
The following information will give you a brief overview of what happens with your personal data, when you visit our E-Shop. Personal data is any piece of information that allows to identify you. Please read the detailed information on data protection in our Privacy Policy listed below this text.

Data Collection and our E-Shop
Who is responsible for the data collection on this E-Shop?
Data from this E-Shop is processed by the operator of the E-Shop. The contact details are listed in the imprint of this E-Shop.

How do we collect your data?
On the one hand, information that you provided to us is collected. This could be information you have entered into a contact form.
Other data is automatically collected by our IT systems when you visit the E-Shop. Basically, this is technical data (for example, your Internet browser, operating system or the time of your visit). This data is collected automatically as soon as you visit our E-Shop.

How do we use your data and what is the legal basis to do this?
We collect some data to ensure that our E-Shop operates  perfectly - the legal basis for this is our legitimate interest to ensure that your shop visit is trouble-free  (Article 6(1)(f) GDPR).
We also process your data in order to answer your inquiries, prepare quotations, fulfill our contract, for after-sales and correspondence in accordance with Article 6(1)(b) GDPR and in compliance with legal obligations in accordance with Article  6(1)(c) GDPR.
Data collection and evaluation for usage analysis takes place only after you have effectively given  your consent in accordance with Article 6(1)(b) GDPR, which you can be revoked at any time in the future.

2. General information and compulsory information

Data Protection
We take the protection of your personal data very seriously. We treat your personal data confidentially and according to the statutory data protection regulations as well as this Privacy Policy.
When you use this E-Shop, we collect different personal data from you. Personal data is any piece of information that allows to identify you. Here in this Privacy Policy, we explain which data we collect and how we use it. Likewise here, we explain why we do this and the purpose.
We point out that data transmission on the Internet (for example, communication by email) may have security gaps. An absolute protection of the data against access by third parties is not possible.

Withdrawing your consent to data processing
Many of the data processing operations require your explicit consent. You can revoke an already given consent at any time. You can do this easily by sending an email to us. The legality of data processed before revoking your consent remains unaffected by the withdrawal of consent.

The right to complain to the competent supervisory authority
In the case of data protection violations, the affected person has the right to lodge a complaint with any competent data protection authority. The data protection authority for data protection matters is the State Commissioner for Data Protection of the federal state, where our company is based. You can contact the data protection authority responsible for us here: https://www.baden-wuerttemberg.datenschutz.de/kontakt-aufnehmen/.

Right to data portability
You have the right that data, which we automatically process or process in order to fulfill our contractual duties, is handed over to you or to a third party in a common, machine-readable format. Should you require a direct transfer of the data to another controller, this will take place only as far as this is technically feasible.

The rights to information, restrictions, erasure
In the context of the applicable statutory provisions, you have the right to information about your personal data stored, their source and recipient and the purpose for data processing and, if necessary, a right to correct, restrict or erase this data. If you have further questions about the topic of personal data, please contact us at any time under the address specified in the imprint.

Storage
We store personal data in accordance with the currently applicable regulations, and for as long as it is necessary to fulfill the purpose described.

The right to object to promotional mailing
We herewith object to the use of contact information, which has been published in accordance with the editorial requirements, for the transmission of not expressly solicited advertising and information material. The operators of the webpages expressly reserve the right to take legal action in the event of unsolicited advertising information, such as spam emails.

SSL or TLS encryption
The site uses SSL or TLS encryption for security reasons and to protect the transfer of confidential content, such as orders or requests that you send to us as the website operator.  You know that a connection is encrypted when the address bar of the browser changes from “http://” to “https://” and a padlock icon appears in your address bar.
If SSL or TLS encryption is enabled, the information that you submit to us cannot be read by third parties.

3. Data collection and our E-Shop

Cookies
Sometimes the websites use so-called cookies. Cookies do not harm your computer and do not contain viruses. Cookies help us to make our offering more user-friendly, more effective and safer. Cookies are small text files that are stored on your computer and saved in your browser.
Most of the cookies we use are so-called “session cookies”. They are automatically deleted when you leave the site. Other cookies will remain on your device until you delete them. These cookies enable us to recognize your browser on your next visit.
You can configure your browser so that you will be informed when a cookie is set and allow cookies only in individual cases. However, functional cookies are required so that the technical operation of the E-Shop is not affected. Deactivating cookies can impact the functionality of this E-Shop.
Cookies, which are required for the electronic communication process or for providing certain functions (for example, the shopping cart), are stored in accordance with Art. 6 (1)(f) GDPR. The E-Shop operator has a legitimate interest to use cookies for the technically error-free and optimized provision of services. To the extent that other cookies (such as cookies to analyze your surfing behavior) are stored, they are addressed separately in this Privacy Policy

Server Log Files
The provider of the webpages automatically collects and stores information in so-called server log files (retained for max. 52 days), which your browser will automatically send to us.
These are:
• Browser and browser version
• Operating system used
• Referrer URL
• Hostname of the computer used
• Time the server request was sent
• IP address (stored anonymized)

This data will not be merged with other data sources. Data is processed in accordance with Article 6 (1)(f) GDPR, which permits such processing to safeguard the legitimate interests of the Data Controller.

Contact forms and contact by email
When you send us emails or contact forms, we save and store the information contained in the email or the form including the contact details so that we can process your request and in case of  follow-up questions.
Thus we process information contained in an email or contact form exclusively on the basis of a possible contract preparation (Article 6 (1)(b) GDPR). We store this information for 180 days.
Data you entered in the forms will remain with us until you inform us to delete the information, revoke your consent to store information or the purpose for data storage is eliminated. You can revoke this consent at any time. You can do this easily by sending an email to us. The legality of data processed before revoking your consent remains unaffected by the withdrawal of consent.
Mandatory statutory provisions - especially retention periods - remain in place.


Comments and ratings
You can rate and comment on our products, so that we are able to offer our users the best possible shopping experience and to provide optimized offerings at the same time. As the user, you are responsible for the content of ratings and comments posted. Ratings and comments will be saved until you demand to delete them. We use these functions to encourage exchanges between users and to contact you with regard to your comments or queries via the email address, which you have provided. However, in this context, other users will see your email address in an anonymous form.

Using the ARKU Shop
Only after your registration, you will be able to login to the ARKU Shop and use the shop. Thus, you will be required to create a user account and provide company-related data. Besides mandatory fields such as the company name and addresses, also an email address is required for shop usage and to contact you. You can provide also the optional personal information when you create your account. The account is protected by a password of your choice that you can update at any time. That way, only you as the customer can access the account. After verifying your newly created user account, we activate your account and you can log in to the ARKU Shop. On the one hand, our Shop offers you information about our products, and you can send requests and orders. And on the other hand, you can manage your user account to store your addresses, change your payment method, view your order history or track your current orders and payments.
You must specify a payment and shipping method when you order. Depending on the payment method you have selected, you will then be forwarded to our payment service provider, PayPal, which is linked with the shop via a secure API interface. The data you then need to enter will be processed in accordance with the privacy policy of this service provider (see: https://www.paypal.com/de/webapps/mpp/ua/privacy-full), and we have no influence on the data processing processes. Moreover, in order to fulfill the contract, we will have to forward your address data to the shipping company commissioned by us. Often, this is implemented via the secure API interface to DHL. In this case, data processing is governed by  DHL’s Privacy Policy (see: https://www.dpdhl.com/en/data-protection.html) and outside our responsibility.
You can request the deletion of your user account at any time; however, we can only delete your account, if no contractual or legal obligations are violated.

4. Newsletter

Newsletter data
On our E-Shop you have the opportunity to subscribe to our company’s newsletter. The personal data that will be sent to the data processor when you sign up for the newsletter are shown in the form used for this purpose.
We use the newsletter to inform you periodically about our company’s offers. Basically, you can only receive the ARKU newsletter if you provided a valid e-mail address and have signed up for the newsletter.
For legal grounds, we first send a confirmation email as double-opt-in to the email address provided. This confirmation email is used to verify that the owner of the email address as the affected person has authorized the newsletter mailing.
No other data, besides additionally provided optional data, is collected. We use this data exclusively for sending the requested information and do not share data with third parties.
Data entered into the newsletter registration form is only processed based on your expressed consent (Article 6 (1)(a) GDPR). You can revoke your consent to the storage of your data and email address and their use to send the newsletter at any time, for example via the “Opt out” link in the newsletter.
The legality of data processed before revoking your consent remains unaffected by the withdrawal of consent.
The data stored by us for the purposes of the newsletter mailing will be retained by us until you subscribe from the newsletter and deleted after the cancellation of your newsletter subscription. Data we store for other purposes (such as your email addresses for the member area) remain unaffected. You can unsubscribe from the newsletter via your user account or by sending a newsletter cancellation to the following email address: info[at]arku.com

Newsletter Tracking
Our newsletters contain so-called tracking pixels. A tracking pixel is a mini graphic embedded in such emails and sent in HTML format to enable log file recording and log file analysis. This allows us to a statistically evaluate the success or failure of our online marketing campaigns. By means of this embedded tracking pixel, we can see, if and when an email has been opened by an affected person, and also which links in the email this affected person has opened.
Such personal data collected by way of the newsletter’s tracking pixel are stored and evaluated by the Data Processor to optimize the newsletter mailing and tailor the content of future newsletter even better to your interests. This personal data is not shared with third parties. Persons affected have the right to withdraw their relevant informed consent given during the double-opt-in process at any time. After such a revocation, these personal data will be erased by the Data Processor. We automatically interpret a newsletter unsubscription as revocation.

Legal basis
Data is processed based on your consent (Article 6 (1)(1)(a) GDPR. You can revoke this consent at any time. The legality of data processed before revoking your consent remains unaffected by the withdrawal of consent.

Data retention period
The data stored for the purposes of the newsletter mailing will be retained by us until you unsubscribe from the newsletter, and deleted from our servers after you have canceled the newsletter mailing. Data stored by us for other purposes (such as email addresses for the shop) remain unaffected.