Privacy policy

1. Privacy at a Glance

General Information
The following information provides a simple overview of what happens to your personal data when you visit our website. Personal data is any data that can personally identify you. Detailed information on data protection can be found in the full privacy policy below.

Data Collection on Our Website
Data processing on this website is carried out by us as the website operator and by our hosting provider Shopify (Shopify International Limited, Ireland). Our contact details can be found in the imprint.

How Do We Collect Your Data?
Some data is collected when you provide it to us (e.g. by entering data into a contact form or submitting an order). Other data is automatically collected by Shopify’s IT systems when you visit the website (e.g. IP address, browser, operating system).

What Do We Use Your Data For?
Part of the data is collected to ensure error-free provision of the website. Other data may be used to analyze user behavior or to process orders and payments.

Your Rights
You have the right to receive free information about the origin, recipients, and purpose of your stored personal data at any time. You also have the right to request correction, deletion, or restriction of processing. Additionally, you have a right to data portability, and you may lodge a complaint with the competent supervisory authority. You may contact us at any time regarding these rights.

2. General Information and Mandatory Disclosures

Data Protection
We treat your personal data confidentially and in accordance with the statutory data protection regulations and this privacy policy. Please note that data transmission over the internet (e.g. communication by email) may have security gaps. A complete protection of data against access by third parties is not possible.

Responsible Entity
The controller responsible for data processing on this website is:

Reinhart GmbH & Co. KG
Tempelhofer Str. 21
52068 Aachen
Germany
Phone: 0049 241 99123283
Email: info@reinhart-wholesale.com

The controller is the natural or legal person who, alone or jointly with others, decides on the purposes and means of the processing of personal data (e.g. names, email addresses, etc.).

Withdrawal of Your Consent
Many data processing operations are only possible with your express consent. You may revoke consent at any time. An informal email to us is sufficient. The legality of the data processing carried out prior to the withdrawal remains unaffected.

Right to Lodge a Complaint
In the event of data protection violations, the affected person has the right to lodge a complaint with the competent supervisory authority. For our company, this is the State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia (LDI NRW):
https://www.ldi.nrw.de

A list of supervisory authorities and their contact details can be found here:
https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html

Right to Data Portability
You have the right to have data we process automatically based on your consent or in fulfillment of a contract handed over to you or a third party in a commonly used, machine-readable format. If you request the direct transfer of your data to another controller, this will only take place where technically feasible.

Right of Access, Rectification, Deletion, Restriction
You have the right to request information about your stored personal data, its origin and recipients, and the purpose of data processing at any time as well as the right to correct, delete, or restrict processing of this data. You may contact us at any time regarding this or any further questions on the topic of personal data.

Objection to Promotional Emails
We hereby object to the use of contact data published within the legal notice requirements for sending promotional and informational materials that were not expressly requested. We expressly reserve the right to take legal action in the event of unsolicited advertising, such as spam emails.

SSL / TLS Encryption
This website uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as orders or inquiries. You can recognize an encrypted connection by the “https://” in the browser address bar and the lock icon in your browser. When encryption is active, transmitted data cannot be read by third parties.

3. Data Protection Officer

We have appointed a data protection officer:

Lukas Reinhart
Tempelhofer Str. 21
52068 Aachen
Germany
Phone: 0049 241 99123283
Email: info@reinhart-wholesale.com

4. Data Collection on Our Website

Server Log Files (Shopify)
Our website is hosted by Shopify International Limited, 2nd Floor, 1-2 Victoria Buildings, Haddington Road, Dublin 4, D04 XN32, Ireland. When you visit our website, Shopify automatically collects and stores information in server log files which your browser automatically transmits, such as:

IP address
Date and time of access
Browser type and version
Operating system
Referrer URL
Device and network information
Hostname of the accessing computer

These data are not merged with other data sources. The processing is based on Art. 6 (1) (f) GDPR (legitimate interest in a technically flawless, stable, secure website).

Shopify may process log files in countries outside the EU/EEA (especially Canada and the USA). Transfers are based on Standard Contractual Clauses. Shopify Privacy Policy:
https://www.shopify.com/legal/privacy

Contact Form
When you send us a message via the contact form, your information—including contact details—will be stored for handling your inquiry and for follow-up questions. We do not share such data without your consent.

Processing is based on your consent (Art. 6 (1) (a) GDPR). You may withdraw your consent at any time by emailing us. The legality of processing carried out before withdrawal remains unaffected.

Data submitted via the contact form remain stored until the purpose ceases to apply (e.g. your inquiry is resolved), you request deletion, or withdraw consent. Statutory retention obligations remain unaffected.

Customer and Contract Data
We collect, process, and use personal data only to the extent necessary to establish, structure, or modify the contractual relationship (inventory data), based on Art. 6 (1) (b) GDPR.

Usage data required to enable or bill the use of our website are likewise processed only where necessary. Customer data will be deleted after contract completion, unless statutory retention rules require longer storage.

Data Transfer for Contract Fulfillment (Shipping & Payment)
Personal data is transferred to third parties only when necessary to fulfill the contract—such as to shipping companies or payment providers. Further transfer only occurs if you have given explicit consent or if a legal obligation applies. Legal basis: Art. 6 (1) (b) GDPR.

5. Analytics and Advertising

Google Analytics (GA4)
This website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited, Dublin. Google Analytics uses cookies or similar technologies to analyze how users interact with our website. Data may be transferred to servers in third countries (especially the USA).

We use Google Analytics exclusively with your consent (Art. 6 (1) (a) GDPR in conjunction with § 25 (1) TTDSG). You may withdraw your consent at any time through our cookie settings. IP anonymization is active on this website.

Google relies on Standard Contractual Clauses for international data transfers. Google Privacy Policy:
https://policies.google.com/privacy

Google reCAPTCHA
We use “Google reCAPTCHA” provided by Google Ireland Limited to determine whether data entered on our website (e.g. contact forms) is by a human or an automated program. reCAPTCHA analyzes user behavior (e.g. IP address, time spent on page).

Processing is based on your consent (Art. 6 (1) (a) GDPR in conjunction with § 25 (1) TTDSG). Data may be transferred to third countries, including the USA. More information:
https://policies.google.com/privacy

6. Plugins and Tools

YouTube
Our website uses embedded videos from YouTube, operated by Google Ireland Limited. When visiting a page containing a YouTube video, a connection to YouTube’s servers is established.

YouTube may store cookies or similar technologies. If you are logged into your YouTube/Google account, your browsing behavior may be linked to your profile. You may prevent this by logging out of your account.

The use of YouTube is based on your consent (Art. 6 (1) (a) GDPR in conjunction with § 25 (1) TTDSG). You may withdraw consent at any time through the cookie settings.

Data may be transferred to Google servers in third countries (especially the USA). Google uses Standard Contractual Clauses. More information:
https://policies.google.com/privacy?hl=en

7. Payment Providers

Viva Payments (Credit Card, Apple Pay, Google Pay)
We offer payment via Viva Payments SA, 18–20 Amalias Avenue, 10557 Athens, Greece.

During payment processing, the following data may be processed: payment data (e.g. credit card number), transaction details, amount, date/time, billing/shipping address, name, contact details, IP address, and fraud-prevention data.

Legal basis:
Art. 6 (1) (b) GDPR – contract fulfillment
Art. 6 (1) (f) GDPR – legitimate interest in fraud prevention and secure payment processing
Art. 6 (1) (a) GDPR – where consent is required

Viva Payments may transfer data to third countries. More information:
Viva Privacy Policy