Privacy policy

1. data protection at a glance

General information
The following information provides a simple overview of what happens to your personal data when you visit our website. Personal data is any data that can be used to identify you personally. You can find detailed information in the following data protection declaration.

Data collection on our website
Data processing on this website is carried out by us as the website operator and by our hosting service provider Shopify (Shopify International Limited, Ireland). You can find our contact details in the legal notice of this website.

How do we collect your data?
On the one hand, your data is collected when you provide it to us (e.g. data that you enter in a contact form or when you place an order). Other data is collected automatically by Shopify's IT systems when you visit the website (e.g. IP address, internet browser, operating system).

What do we use your data for?
Some of the data is collected to ensure that the website is provided without errors. Other data may be used to analyze your user behavior or to process orders and payments.

What rights do you have?
You have the right to receive information free of charge at any time about the origin, recipient and purpose of your stored personal data. You also have the right to rectification, erasure or restriction of processing of this data and the right to data portability. You also have the right to lodge a complaint with the competent supervisory authority. You can contact us at any time if you have any further questions on the subject of data protection.

2 General notes and mandatory information

Data protection
We treat your personal data confidentially and in accordance with the statutory data protection regulations and this privacy policy. Please note that data transmission over the Internet (e.g. when communicating by e-mail) may be subject to security vulnerabilities. Complete protection of data against access by third parties is not possible.

Note on the responsible body
The party responsible for data processing on this website is

Reinhart GmbH & Co KG
Tempelhofer Str. 21
52068 Aachen
Telephone: 0049 241 99123283
E-mail: info@reinhart-wholesale.com

The controller is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data (e.g. names, e-mail addresses, etc.).

Withdrawal of your consent
Many data processing operations are only possible with your express consent. You can withdraw your consent at any time. All you need to do is send us an informal email. The legality of the processing carried out until the revocation remains unaffected by the revocation.

Right to lodge a complaint
In the event of breaches of data protection law, you have the right to lodge a complaint with the competent supervisory authority. The competent authority for our company headquarters is the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (LDI NRW), https://www.ldi.nrw.de.

An overview of the data protection supervisory authorities and their contact details can be found at: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.

Right to data portability
You have the right to have data that we process automatically on the basis of your consent or to fulfill a contract handed over to you or to a third party in a common, machine-readable format. If you request the direct transfer of the data to another controller, this will only take place if it is technically feasible.

Information, rectification, erasure, restriction of processing
Within the framework of the applicable legal provisions, you have the right to obtain information free of charge at any time about your stored personal data, its origin and recipients and the purpose of the data processing. If applicable, you also have the right to correct, delete or restrict the processing of this data. You can contact us at any time at the address given in the legal notice if you have further questions on the subject of personal data.

Objection to advertising e-mails
We hereby object to the use of contact data published as part of our obligation to provide a legal notice for the purpose of sending unsolicited advertising and information material. We expressly reserve the right to take legal action in the event of the unsolicited sending of advertising information, such as spam e-mails.

SSL/TLS encryption
This website uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as orders or inquiries that you send to us. You can recognize an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser line. If encryption is activated, data that you transmit to us cannot be read by third parties.

3. data protection officer

We have appointed a data protection officer for our company:

Lukas Reinhart
Tempelhofer Str. 21
52068 Aachen, Germany
Phone: 0049 241 99123283
E-mail: info@reinhart-wholesale.com

4. data collection on our website

Server log files (Shopify)
Our website is hosted by Shopify International Limited, 2nd Floor, 1-2 Victoria Buildings, Haddington Road, Dublin 4, D04 XN32, Ireland ("Shopify"). When you visit our website, Shopify automatically collects information in so-called server log files, which your browser automatically transmits. These are in particular

IP address
Date and time of access
Browser type and browser version
Operating system used
referrer URL
Device and network information
Host name of the accessing computer

This data is not merged with other data sources. The processing is carried out on the basis of Art. 6 para. 1 lit. f GDPR. We have a legitimate interest in the technically error-free presentation, stability, security and optimization of our website.

Shopify may process server log data in countries outside the EU/EEA (in particular Canada and the USA). The transfer takes place on the basis of suitable guarantees, in particular standard contractual clauses of the EU Commission.
Further information can be found in Shopify's privacy policy: https://www.shopify.com/legal/privacy.

Contact form
If you send us inquiries via the contact form, your details from the form, including the contact details you provide there, will be stored by us for the purpose of processing the inquiry and in the event of follow-up questions. We will not pass on this data without your consent.

The processing of the data entered in the contact form is based on your consent (Art. 6 para. 1 lit. a GDPR). You can revoke this consent at any time. All you need to do is send us an informal email. The legality of the data processing carried out until the revocation remains unaffected by the revocation.

The data you enter in the contact form will remain with us until the purpose for data storage no longer applies (e.g. after your request has been processed), you request us to delete it or you revoke your consent. Mandatory statutory provisions - in particular retention periods - remain unaffected.

Processing of customer and contract data
We collect, process and use personal data only insofar as it is necessary for the establishment, content or modification of the contractual relationship (inventory data). This is done on the basis of Art. 6 para. 1 lit. b GDPR. We only process personal data about the use of our website (usage data) insofar as this is necessary to enable the user to use the service or to bill the user.

The customer data collected will be deleted after completion of the order or termination of the business relationship, provided there are no statutory retention obligations to the contrary.

Data transmission for contract fulfillment (shipping & payment)
We only transfer personal data to third parties if this is necessary in the context of contract processing, for example to the companies entrusted with the delivery of the goods or the payment service provider commissioned with payment processing. Any further transmission will only take place if you have expressly consented or if there is a legal obligation. The legal basis is Art. 6 para. 1 lit. b GDPR.

5. analysis tools and advertising

Google Analytics (GA4)
This website uses Google Analytics in the version Google Analytics 4 (GA4), a web analysis service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics uses cookies or similar technologies to analyze your use of the website. The information generated in this way is generally transferred to Google servers and stored there; it may be transferred to third countries (in particular the USA).

We use Google Analytics exclusively on the basis of your consent (Art. 6 para. 1 lit. a GDPR in conjunction with § 25 para. 1 TTDSG). You can revoke your consent at any time with effect for the future via the cookie settings on our website. We have activated IP anonymization so that your IP address is truncated within the EU/EEA.

Google may transfer data to third countries and relies, among other things, on standard contractual clauses of the EU Commission. Further information on data processing by Google can be found in Google's privacy policy: https://policies.google.com/privacy.

Google reCAPTCHA
We use "Google reCAPTCHA" on our website, a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. reCAPTCHA is used to check whether data entries on our website (e.g. in a contact form) are made by a natural person or by automated programs. For this purpose, reCAPTCHA analyzes the behavior of the website visitor based on various characteristics (e.g. IP address, length of stay, mouse movements).

The processing is based on your consent (Art. 6 para. 1 lit. a GDPR in conjunction with § 25 para. 1 TTDSG), insofar as reCAPTCHA is integrated via the consent tool. Data may be transferred to Google servers in third countries (in particular the USA). Further information on Google reCAPTCHA and Google's privacy policy can be found at: https://policies.google.com/privacy.

6 Plugins and tools

YouTube
Our website integrates videos from the YouTube platform. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. When a page containing a YouTube video is accessed, a connection to the YouTube servers is established. This tells the YouTube server which of our pages you have visited.

YouTube may store cookies on your device or use similar technologies to collect information about visitors. This happens regardless of whether you have a YouTube/Google account or are logged in to it. If you are logged into your YouTube or Google account, YouTube can assign your surfing behavior to your personal profile. You can prevent this by logging out of your YouTube/Google account.

The use of YouTube is in the interest of an appealing presentation of our online offers and the provision of multimedia content. The legal basis is your consent in accordance with Art. 6 para. 1 lit. a GDPR in conjunction with § 25 para. 1 TTDSG. You can revoke your consent at any time via the cookie settings on our website.

Data may be transferred to Google servers in third countries (in particular the USA). Google uses standard contractual clauses as guarantees for this.
Further information can be found in Google's privacy policy:
https://policies.google.com/privacy?hl=de

7. payment provider

Viva Payments (credit card, Apple Pay, Google Pay)
We offer payment via the payment service provider Viva Payments SA (Viva.com), 18-20 Amalias Avenue, 10557 Athens, Greece.

Depending on the payment method selected, the following data in particular is processed as part of payment processing Payment data (e.g. credit card number, validity, card verification number), transaction identifiers, purchase amount, date and time, billing and delivery information, name, contact details, IP address and other data required for payment processing.

The legal basis for processing is Art. 6 para. 1 lit. b GDPR (implementation of pre-contractual measures and fulfillment of the contract), Art. 6 para. 1 lit. f GDPR (legitimate interest in secure and efficient payment processing and fraud prevention) and, if required by law, your consent (Art. 6 para. 1 lit. a GDPR).

Viva Payments may transfer data to third countries. Further information on data processing by Viva Payments can be found in Viva's privacy policy: https://www.viva.com/de-eu/policies/privacy-policy.