Privacy policy

1. data protection at a glance

General information
The following information provides a simple overview of what happens to your personal data when you visit our website. Personal data is any data that can be used to identify you personally. You can find detailed information in the following data protection declaration.

Data collection on our website
Data processing on this website is carried out by us as the website operator and by our hosting service provider Shopify (Shopify International Limited, Ireland). You can find our contact details in the legal notice of this website.

How do we collect your data?
On the one hand, your data is collected when you provide it to us (e.g. data that you enter in a contact form or when you place an order). Other data is collected automatically by Shopify's IT systems when you visit the website (e.g. IP address, internet browser, operating system).

What do we use your data for?
Some of the data is collected to ensure that the website is provided without errors. Other data may be used to analyze your user behavior or to process orders and payments.

What rights do you have?
You have the right to receive information free of charge at any time about the origin, recipient and purpose of your stored personal data. You also have the right to rectification, erasure or restriction of processing of this data and the right to data portability. You also have the right to lodge a complaint with the competent supervisory authority. You can contact us at any time if you have any further questions on the subject of data protection.

2 General notes and mandatory information

Data protection
We treat your personal data confidentially and in accordance with the statutory data protection regulations and this privacy policy. Please note that data transmission over the Internet (e.g. when communicating by e-mail) may be subject to security vulnerabilities. Complete protection of data against access by third parties is not possible.

Note on the responsible body
The party responsible for data processing on this website is

Reinhart GmbH & Co KG
Charlottenburger Allee 7
52068 Aachen, Germany
Telephone: 0049 241 99123283
E-mail: info@reinhart-wholesale.com

The controller is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data (e.g. names, e-mail addresses, etc.).

Withdrawal of your consent
Many data processing operations are only possible with your express consent. You can withdraw your consent at any time. All you need to do is send us an informal email. The legality of the processing carried out until the revocation remains unaffected by the revocation.

Right to lodge a complaint
In the event of breaches of data protection law, you have the right to lodge a complaint with the competent supervisory authority. The competent authority for our company headquarters is the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (LDI NRW), https://www.ldi.nrw.de.

An overview of the data protection supervisory authorities and their contact details can be found at: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.

Right to data portability
You have the right to have data that we process automatically on the basis of your consent or to fulfill a contract handed over to you or to a third party in a common, machine-readable format. If you request the direct transfer of the data to another controller, this will only take place if it is technically feasible.

Information, rectification, erasure, restriction of processing
Within the framework of the applicable legal provisions, you have the right to obtain information free of charge at any time about your stored personal data, its origin and recipients and the purpose of the data processing. If applicable, you also have the right to correct, delete or restrict the processing of this data. You can contact us at any time at the address given in the legal notice if you have further questions on the subject of personal data.

Objection to advertising e-mails
We hereby object to the use of contact data published as part of our obligation to provide a legal notice for the purpose of sending unsolicited advertising and information material. We expressly reserve the right to take legal action in the event of the unsolicited sending of advertising information, such as spam e-mails.

SSL/TLS encryption
This website uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as orders or inquiries that you send to us. You can recognize an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser line. If encryption is activated, data that you transmit to us cannot be read by third parties.

3. data collection on our website

Server log files (Shopify)
Our website is hosted by Shopify International Limited, 2nd Floor, 1-2 Victoria Buildings, Haddington Road, Dublin 4, D04 XN32, Ireland ("Shopify"). When you visit our website, Shopify automatically collects information in so-called server log files, which your browser automatically transmits. These are in particular

IP address
Date and time of access
Browser type and browser version
Operating system used
referrer URL
Device and network information
Host name of the accessing computer

This data is not merged with other data sources. The processing is carried out on the basis of Art. 6 para. 1 lit. f GDPR. We have a legitimate interest in the technically error-free presentation, stability, security and optimization of our website.

Shopify may process server log data in countries outside the EU/EEA (in particular Canada and the USA). The transfer takes place on the basis of suitable guarantees, in particular standard contractual clauses of the EU Commission.
Further information can be found in Shopify's privacy policy: https://www.shopify.com/legal/privacy.

Contact form
If you send us inquiries via the contact form, your details from the form, including the contact details you provide there, will be stored by us for the purpose of processing the inquiry and in the event of follow-up questions. We will not pass on this data without your consent.

The processing of the data entered in the contact form is based on your consent (Art. 6 para. 1 lit. a GDPR). You can revoke this consent at any time. All you need to do is send us an informal email. The legality of the data processing carried out until the revocation remains unaffected by the revocation.

The data you enter in the contact form will remain with us until the purpose for data storage no longer applies (e.g. after your request has been processed), you request us to delete it or you revoke your consent. Mandatory statutory provisions - in particular retention periods - remain unaffected.

Processing of customer and contract data
We collect, process and use personal data only insofar as it is necessary for the establishment, content or modification of the contractual relationship (inventory data). This is done on the basis of Art. 6 para. 1 lit. b GDPR. We only process personal data about the use of our website (usage data) insofar as this is necessary to enable the user to use the service or to bill the user.

The customer data collected will be deleted after completion of the order or termination of the business relationship, provided there are no statutory retention obligations to the contrary.

Data transmission for contract fulfillment (shipping & payment)
We only transfer personal data to third parties if this is necessary in the context of contract processing, for example to the companies entrusted with the delivery of the goods or the payment service provider commissioned with payment processing. Any further transmission will only take place if you have expressly consented or if there is a legal obligation. The legal basis is Art. 6 para. 1 lit. b GDPR.

4. Maps and embedded services

Google Maps
On our contact page we embed a map from Google Maps. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. When you open the page, a connection to Google's servers is established; Google learns your IP address and which of our pages you have opened.

We embed the map so that our location is easy to find. The legal basis is Art. 6(1)(f) GDPR. Data may be transferred to Google servers in third countries (in particular the USA); Google relies on the European Commission's standard contractual clauses, among other safeguards. Further information is available in Google's privacy policy: https://policies.google.com/privacy.

5. Newsletter, product registration and reviews

Newsletter (Klaviyo)
We use the Klaviyo service of Klaviyo, Inc., 125 Summer Street, Boston, MA 02110, USA to send our newsletter. If you sign up, your email address and the data collected during sign-up are transferred to Klaviyo and stored there. The legal basis is your consent (Art. 6(1)(a) GDPR). You can unsubscribe at any time; every newsletter contains an unsubscribe link. The transfer to the USA is based on the European Commission's standard contractual clauses. Further information: https://www.klaviyo.com/legal/privacy-notice.

Product registration and extended warranty
If you register your device using the form on our registration page, we process the details you enter – name, email address, device, place of purchase, date of purchase and price – in order to record the registration and grant the extended warranty. The form submission runs through a service we operate at Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA. The confirmation email is sent via Resend, Inc., 2261 Market Street, San Francisco, CA 94114, USA. The legal basis is Art. 6(1)(b) GDPR together with our legitimate interest in handling the warranty extension (Art. 6(1)(f) GDPR).

Product reviews
Reviews you submit for our products are stored together with the name you provide and published on the relevant product page. The legal basis is your consent (Art. 6(1)(a) GDPR). You can ask us to delete a review at any time by email.

6. payment provider

Viva Payments (credit card, Apple Pay, Google Pay)
We offer payment via the payment service provider Viva Payments SA (Viva.com), 18-20 Amalias Avenue, 10557 Athens, Greece.

Depending on the payment method selected, the following data in particular is processed as part of payment processing Payment data (e.g. credit card number, validity, card verification number), transaction identifiers, purchase amount, date and time, billing and delivery information, name, contact details, IP address and other data required for payment processing.

The legal basis for processing is Art. 6 para. 1 lit. b GDPR (implementation of pre-contractual measures and fulfillment of the contract), Art. 6 para. 1 lit. f GDPR (legitimate interest in secure and efficient payment processing and fraud prevention) and, if required by law, your consent (Art. 6 para. 1 lit. a GDPR).

Viva Payments may transfer data to third countries. Further information on data processing by Viva Payments can be found in Viva's privacy policy: https://www.viva.com/de-eu/policies/privacy-policy.