Data protection of Reinhart GmbH & Co. KG

1. Controller

The controller responsible for data processing on this website is:

Reinhart GmbH & Co. KG
Charlottenburger Allee 7
52068 Aachen, Germany
Phone: +49 241 99123-283
E-mail: info@reinh.art

Data protection officer: Lukas Reinhart, address as above, e-mail: info@reinh.art

2. Principles

We process personal data only where this is necessary to provide this website and our services or where you have given your consent. Depending on the purpose, the legal bases are Art. 6 (1) (b) GDPR (contract and pre-contractual measures), (c) (legal obligation), (f) (legitimate interest) and (a) (consent); for storing and reading information on your device additionally § 25 TDDDG.

This shop is aimed exclusively at commercial customers. We therefore mainly process data of contact persons at commercial customers.

3. Hosting and shop system

This website runs on the Shopify platform. The provider is Shopify International Limited, Victoria Buildings, 1–2 Haddington Road, Dublin 4, D04 XN32, Ireland, which provides the technical infrastructure and acts as our processor pursuant to Art. 28 GDPR. Shopify processes all data you enter in the shop or that arises during your visit and may transfer data to its parent company Shopify Inc. in Canada and to service providers in the United States. The transfer is safeguarded by the European Commission's standard contractual clauses; an adequacy decision also exists for Canada. The legal basis is Art. 6 (1) (f) GDPR, and Art. 6 (1) (b) GDPR within the scope of order processing.

Fonts and image files are delivered via Shopify's content delivery network; your IP address is transmitted to Shopify in the process. We do not embed Google Fonts.

4. Server log files

When the website is accessed, information transmitted by your browser is automatically recorded: browser type and version, operating system used, referrer URL, host name of the accessing computer, time of the server request and IP address. Processing serves the delivery of the page, system security and error analysis on the basis of Art. 6 (1) (f) GDPR.

5. Cookies and consent

We use cookies and comparable technologies. Technically necessary cookies – for the shopping cart, logging in to the customer account and the language selection, for example – are required to operate the shop; the legal basis is § 25 (2) no. 2 TDDDG in conjunction with Art. 6 (1) (f) GDPR.

All other cookies, in particular for analysis purposes, are set only with your consent pursuant to § 25 (1) TDDDG and Art. 6 (1) (a) GDPR. You can withdraw your consent at any time with effect for the future via the privacy settings in the shop.

Among others we use: _shopify_y and _shopify_s (Shopify, session and reach measurement), localization (selected language), kalles_shown_pages (display settings of the shop design).

6. Dealer account and registration

For registration as a specialist retailer we collect the company name, VAT identification number, names of the contact persons, e-mail address, telephone number and address. We use this data to verify commercial activity and to create the customer account. The legal basis is Art. 6 (1) (b) GDPR.

The registration form is technically provided by POWR.io (POWr HQ, 44 Tehama Street, San Francisco, CA 94105, USA) and embedded in our page. When the registration page is opened, a connection to POWR's servers is established and your IP address is transmitted there; the data you enter is processed there and forwarded to us. The transfer to the United States is safeguarded by standard contractual clauses. The legal basis is Art. 6 (1) (b) GDPR.

In the customer account we store master data, addresses and order history. You can have the account deleted at any time; statutory retention periods remain unaffected.

7. Order processing, payment and shipping

To process your order we process order, invoice and delivery data. The legal basis is Art. 6 (1) (b) GDPR; for the retention of invoice documents Art. 6 (1) (c) GDPR in conjunction with § 147 of the German Fiscal Code and § 257 of the German Commercial Code.

For delivery we pass on the name, delivery address and, where necessary for shipment tracking, e-mail address and telephone number to the commissioned shipping company. Depending on the shipment these are UPS, DPD, DHL or Hermes.

We offer advance payment by bank transfer and – for approved dealers – purchase on account. In this context we process your payment data to monitor incoming payments and, where necessary, to enforce outstanding claims. We do not offer credit card or wallet payments.

8. Contact and notifications

If you contact us by e-mail or telephone, we process your details to handle the enquiry on the basis of Art. 6 (1) (b) or (f) GDPR.

For the "notify me when available again" function we use the Back in Stock service (Amp Digital Ventures Pty Ltd, Australia). Your e-mail address and the desired item are processed in order to inform you once about availability. The legal basis is Art. 6 (1) (a) GDPR.

9. Newsletter

For the newsletter we require your e-mail address. Registration uses the double opt-in procedure: after signing up we send you an e-mail in which you confirm receipt. We store the IP address and the time of registration and confirmation in order to be able to prove the sign-up. The newsletter is sent via Shopify. The legal basis is Art. 6 (1) (a) GDPR; you can withdraw your consent at any time via the unsubscribe link in every e-mail.

10. Reach measurement and analysis

To provide the shop statistics, Shopify collects pseudonymised usage data such as pages viewed, origin of the visit and device type.

11. Other integrated services

When the shop is opened, Shopify's Shop Pay payment function is prepared; a connection to shop.app may be established in the process. To monitor technical availability, Shopify sends metrics to its own servers.

On our pages we link to our profile on Vimeo. Data is only transmitted to Vimeo once you click the link; no embedding takes place.

12. Recipients and transfers to third countries

Recipients of personal data are the platform operator Shopify, the shipping company commissioned in each case, our bank, our tax adviser and, in the event of the enforcement of claims, lawyers. Transfers to third countries take place only on the basis of an adequacy decision, standard contractual clauses or your express consent.

13. Storage period

We store personal data only for as long as is necessary for the purposes stated. Data from orders and invoices is retained in accordance with commercial and tax law periods of up to ten years. We delete customer accounts on request, provided no retention obligations conflict with this.

14. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and the right to withdraw consent given at any time with effect for the future (Art. 7 (3)).

Right to object: Where we process data on the basis of legitimate interests, you may object to that processing at any time on grounds relating to your particular situation (Art. 21 GDPR).

You also have the right to lodge a complaint with a supervisory authority. The authority responsible for us is the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia, Kavalleriestraße 2–4, 40213 Düsseldorf, Germany.

15. Changes to this policy

We adapt this privacy policy when the legal situation or our processing activities change. The version published in the shop at the time applies.