We are pleased that you are visiting our website. The protection and security of your personal information when using our website is very important to us. We would therefore like to inform you about which of your personal data we collect when you visit our website and for what purposes this data is used.
This Privacy Policy applies to the website of plus H GmbH & Co. KG, which is accessible under the domain plus-h.de and its various subdomains (“our website”).
for the processing of personal data within the meaning of the EU General Data Protection Regulation (GDPR)
plus H GmbH & Co. KG
Ahornstraße 59
08525 Plauen, Germany
info@plus-H.de
Legaltrust GmbH
Herr Rechtsanwalt
Lev Lexow
Lietzenburger Str. 93-95
10719 Berlin
Tel.: 030 887 27 609
datenschutz@legaltrust.de
This privacy policy complies with the legal requirements for transparency in the processing of personal data. This is all information that relates to an identified or identifiable natural person. This includes, for example, information such as your name, age, address, telephone number, date of birth, email address, IP address, or user behavior when visiting a website. Information that we cannot (or can only) establish with disproportionate effort to link to you personally, e.g., through anonymization, is not personal data. The processing of personal data (e.g., collection, retrieval, use, storage, or transmission) always requires a legal basis and a defined purpose.
Stored personal data will be deleted as soon as the purpose of processing has been achieved and there are no legitimate reasons for further retention. We will inform you about the specific retention periods and criteria for storage in each processing operation. Irrespective of this, we will store your personal data in individual cases to assert, exercise, or defend legal claims and if statutory retention obligations apply.
We only share your personal data that we process on our website with third parties if this is necessary to fulfill the purposes and is covered by the legal basis in the individual case (e.g., consent or protection of legitimate interests). In addition, we share personal data with third parties in individual cases if this serves the assertion, exercise, or defense of legal claims. Possible recipients may then include law enforcement authorities, lawyers, auditors, courts, etc.
To the extent that we use service providers to operate our website who process personal data on our behalf as part of contract processing in accordance with Art. 28 GDPR, these service providers may be recipients of your personal data. Further information on the use of contract processors and web services can be found in the overview of individual processing operations.
Cookies are small text files that we send to your device’s browser when you visit our website and store them there. As an alternative to using cookies, information can also be stored in your browser’s local storage. Some functions of our website cannot be offered without the use of cookies or local storage (technically necessary cookies). Other cookies, however, enable us to perform various analyses, so that we are able, for example, to recognize the browser you use when you visit our website again and to transmit various information to us (non-essential cookies). Cookies enable us, among other things, to make our website more user-friendly and effective for you by, for example, tracking your use of our website and determining your preferred settings (e.g., country and language settings). If third parties process information via cookies, they collect the information directly from your browser. Cookies do not cause any damage to your device. They cannot run programs and do not contain viruses.
We provide information about the respective services for which we use cookies in the individual processing operations. Detailed information on the Cookies can be found in the cookie settings or in the consent manager of this website.
Subject to the legal provisions of the General Data Protection Regulation (GDPR), you as the data subject have the following rights:
Below, we inform you about the individual processing operations, the scope and purpose of data processing, the legal basis, the obligation to provide your data, and the respective storage period. Automated decision-making in individual cases, including profiling, does not take place.
When you access and use our website, we collect the personal data that your browser automatically transmits to our server. The following information is temporarily stored in a so-called log file:
Our website is hosted by us. All personal data collected when you visit our website is processed exclusively on our own servers. Our servers are protected by technical and organizational measures in accordance with the requirements of the General Data Protection Regulation (GDPR).
The processing is carried out to protect our overriding legitimate interest in displaying our website and ensuring security and stability on the basis of Art. 6 (f) GDPR. The collection of data and its storage in log files is mandatory for the operation of the website. There is no right to object to processing due to the exception under Art. 21 (1) GDPR. To the extent that the further storage of log files is required by law, Processing is carried out on the basis of Art. 6 (1) (c) GDPR. There is no legal or contractual obligation to provide the data; however, accessing our website is technically impossible without providing the data.
The aforementioned data will be stored for the duration of the website display [and, for technical reasons, for a maximum of [7 days]].
If you register on our website to receive our newsletter, we will collect your email address, name, city, and customer number, and store this information together with the date of registration and your IP address. You will then receive an email in which you must confirm your subscription to the newsletter (double opt-in). If you do not confirm your registration within 48 hours, it will automatically expire and the data will not be processed for newsletter distribution.
The newsletter will be sent directly by us. Your data will not be shared with third parties or processors within the meaning of Art. 28 GDPR.
To send the newsletter, we use a service provided by GetResponse S.A., which processes your personal data on our behalf in accordance with Art. 28 GDPR. Your data will not be shared with third parties.
We process your data for the purpose of sending the newsletter based on your consent in accordance with Art. 6 (1) (a) GDPR. By unsubscribing from the newsletter, you can revoke your consent at any time with future effect in accordance with Art. 7 (3) GDPR. There is no legal or contractual obligation to provide your data; however, sending the newsletter is not possible without providing your data.
After registering for the newsletter, we store the data for a maximum of 48 hours until your registration is confirmed. After successful confirmation, we store your data until you revoke your consent (unsubscribe from the newsletter), and for a maximum of 7 days thereafter for technical reasons.
A user account is generally required to use our online shop and certain areas of our website. Our services are aimed exclusively at commercial customers. A user account will only be activated after verification and acceptance as a commercial customer.
The information collected during registration via the mandatory fields is required to provide access to the user account. In addition, you can voluntarily provide additional information for additional (convenience) functions.
To register as a commercial customer for the shop, you must either complete our registration form or contact our customer service directly. We need the mandatory information requested during registration to verify your status as a commercial customer, to identify you, and to fulfill our contractual relationship (Art. 6 (1) (b) GDPR). Without this information, registration or activation of the user account is not possible.
When registering a user account, your personal data will be shared exclusively in accordance with this privacy policy.
We process your data for the purpose of providing a user account to fulfill a contract with you in accordance with Art. 6 (1) (b) GDPR. There is a contractual obligation to provide your data, as this information is necessary to identify you and to fulfill the contract on our part. There is no legal obligation to provide the data. Without providing this information, registration of a user account and thus the conclusion of a contract is not possible.
Furthermore, additional voluntarily provided information is processed for the purpose of providing additional (convenience) functions based on your consent in accordance with Art. 6 (1) (a) GDPR. By deactivating the functions / by deleting the voluntary information in the user account, you can revoke your consent at any time with future effect in accordance with Art. 7 (3) GDPR.
We store your personal data as part of the provision of the user account for the duration of the contractual relationship. After the end of the contract / deletion of the user account, your data will only be stored further if statutory retention periods apply (e.g., tax and commercial law).
Additional information that you provide to us based on your consent will only be stored until you revoke your consent by deactivating the Functions / by deleting the data, but no later than until the end of the contract underlying the provision of the user account.
We maintain so-called fan pages, accounts, or channels on the networks listed below in order to provide you with information and offers within social networks and to offer you additional ways to contact us and learn about our offers. Below, we will inform you about which data we or the respective social network process in connection with your access to and use of our fan pages/accounts.
If you would like to contact us via messenger or direct message via the respective social network, we generally process your user name, which you use to contact us, and we may store other data you have provided to the extent necessary to process/respond to your request.
The legal basis is Art. 6 (1) Sentence 1 (f) GDPR (processing is necessary to protect the legitimate interests of the controller).
(Static) usage data we receive from social networks
We receive automated statistics about our accounts via Insights functions. The statistics include, among other things, the total number of page views, likes, information on page activity and post interactions, reach, video views, and information on the proportion of men/women among our fans/followers.
The statistics only contain aggregated data that cannot be linked to individual people. You are not identifiable to us.
To view the content of our fan pages or accounts, you do not need to be a member of the respective social network, and a user account for the respective social network is not required.
Please note, however, that when you access the respective social network, the social networks also collect and store data from website visitors without a user account (e.g., technical data to display the website to you) and use cookies and similar technologies, over which we have no control. For details, please refer to the privacy policy of the respective social network (see the relevant links above)
If you wish to interact with the content on our fan pages/accounts, e.g., comment on, share, or like our postings/contributions and/or contact us via messenger functions, prior registration with the respective social network and the provision of personal data is required.
We have no influence on the data processing by the social networks during your use. To the best of our knowledge, your data will be stored and processed, in particular, in connection with the provision of the services of the respective social network, as well as for the analysis of usage behavior (using cookies, pixels/web beacons, and similar technologies) on the basis of which advertising based on your interests will be displayed both within and outside the respective social network. It cannot be ruled out that your data will also be stored by the social networks outside the EU/EEA and passed on to third parties.
Information on the exact scope and purposes of processing your personal data, the storage period/deletion, and guidelines for the use of cookies and similar technologies when registering and using social networks can be found in the social networks’ privacy policies/cookie policies. There you will also find information on your rights and options for objecting.
When you visit our Facebook page, Facebook (Meta) records, among other things, your IP address and other information stored on your PC in the form of cookies. This information is used to provide us, as the operator of the Facebook pages, with statistical information about the use of the Facebook page. Facebook provides further information on this at the following link: https://facebook.com/help/pages/insights.
The statistical information transmitted does not allow us to draw conclusions about individual users. We only use this information to respond to the interests of our users and to continuously improve and ensure the quality of our online presence.
We collect your data via our fan page solely to enable communication and interaction with us. This collection generally includes your name, message content, comment content, and the profile information you have made publicly available.
The processing of your personal data for the purposes stated above is based on our legitimate business and Communicative interest in offering an information and communication channel pursuant to Art. 6 (1) (f) GDPR. If you, as a user, have given your consent to data processing to the respective provider of the social network, the legal basis for processing extends to Art. 6 (1) (a) and Art. 7 GDPR.
Due to the fact that the actual data processing is carried out by the provider of the social network, our access to your data is limited. Only the provider of the social network is authorized to have full access to your data. As a result, only the provider can directly take and implement appropriate measures to fulfill your user rights (request for information, request for deletion,
objection, etc.). The most effective way to assert such rights is therefore directly with the respective provider.
We are jointly responsible with Facebook for the personal content of the fan page. Data subjects’ rights can be asserted with Meta Platforms Ireland Ltd. and with us.
According to the GDPR, Facebook is primarily responsible for processing Insights data, and Facebook fulfills all obligations under the GDPR with regard to the processing of Insights data. Meta Platforms Ireland Ltd. provides the essentials of the Page Insights Addendum to the data subjects.
We do not make decisions regarding the processing of Insights data or the storage period of cookies on user devices.
Further information can be found directly on Facebook (Supplementary Agreement with Facebook): https://www.facebook.com/legal/terms/page_controller_addendum.
Further information, including the exact scope and purposes of processing your personal data, the storage period/deletion, and guidelines for the use of cookies and similar technologies during registration and use, can be found in Facebook’s privacy policy/cookie policy:
https://www.facebook.com/privacy/policy/?entry_point=data_policy_redirect&entry=0
https://www.facebook.com/policies/cookies
When you visit our Instagram page, Instagram (Meta) records, among other things, your IP address and other information stored on your PC in the form of cookies. This information is used to provide us, as the operator of the Instagram pages, with statistical information about the use of the Instagram page. Instagram provides further information on this at the following link.
(Note: By clicking on the following link, you will be taken to the website of the social network Facebook, also part of the Meta Group. However, the information provided via the link applies equally to the social network Instagram): https://facebook.com/help/pages/insights.
The statistical information transmitted does not allow us to draw conclusions about individual users. We only use this information to respond to the interests of our users and to continuously improve and ensure the quality of our online presence.
We collect your data via our fan page solely to enable possible communication and interaction with us. This collection generally includes your name, message content, comment content, and the profile information you have made publicly available.
The processing of your personal data for the purposes stated above is based on our legitimate business and communicative interest in offering an information and communication channel in accordance with Art. 6 (1) (f) GDPR. If you, as a user, have given your consent to the respective provider of the social network for data processing, the legal basis for processing extends to Art. 6 (1) (a) and Art. 7 GDPR.
Due to the fact that the actual data processing is carried out by the provider of the social network, our access to your data is limited. Only the provider of the social network is authorized to have full access to your data. As a result, only the provider can directly take and implement appropriate measures to fulfill your user rights (request for information, request for deletion,
objection, etc.). The most effective way to assert these rights is therefore directly with the respective provider.
We and Instagram are jointly responsible for the personal content of the fan page. Data subjects’ rights can be asserted with Meta Platforms Ireland Ltd. and with us.
According to the GDPR, Instagram is primarily responsible for processing Insights data, and Instagram fulfills all obligations under the GDPR with regard to the processing of Insights data. Meta Platforms Ireland Ltd. provides the essentials of the Page Insights addendum to the data subjects.
We do not make decisions regarding the processing of Insights data and the storage period of cookies on user devices.
Further information can be found directly on Instagram (supplementary agreement with Facebook): https://www.facebook.com/legal/terms/page_controller_addendum.
Further information, including the exact scope and purposes of processing your personal data, the storage period/deletion, and guidelines for the use of cookies and similar technologies during registration and use, can be found in Instagram’s privacy policy/cookie policy (Note: clicking the following link will take you to the Facebook social network’s website):
https://help.instagram.com/519522125107875/?helpref=uf_share
This information can also be found in the help section of the Instagram website via the following link:
https://help.instagram.com/581066165581870
Plus-H uses a YouTube channel owned by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland. We would like to point out that you use the YouTube channel offered here and its functions at your own risk. This applies in particular to the use of the “Discussion” function.
Information about which data is processed by Google and for what purposes can be found in Google’s privacy policy:
https://policies.google.com/privacy?hl=de&gl=de#infocollect
Plus-H has no influence on the type and scope of the data processed by Google, the manner in which it is processed and used, or the transfer of this data to third parties. It also has no effective control options in this regard. When you use Google, your personal data will be collected, transferred, stored, disclosed, and used by Google, regardless of your place of residence, in the United States, Ireland, and any other country in which Google does business, and will be transferred, stored, and used there. Data will be transferred to Google affiliates and other trusted companies or individuals who process it on Google’s behalf.
Google processes your voluntarily entered data, such as your name and username, email address, and telephone number. Google also processes the content you create, upload, or receive from others when using the services. This includes, for example, photos and videos you save, documents and spreadsheets you create, and comments you write on YouTube videos.
On the other hand, Google also evaluates the content you share to determine which topics you are interested in, stores and processes confidential messages you send directly to other users, and can determine your location based on
GPS data, information about wireless networks, or your IP address in order to send you advertising or other content.
For evaluation purposes, Google may use analysis tools such as Google Analytics. Plus-H has no influence on the use of such tools by Google and has not been informed of such potential use. If tools of this type are used by Google for Plus-H’s YouTube channel, Plus-H has neither commissioned this nor otherwise supported it in any way. The data obtained during the analysis is also not made available to Plus-H. Only certain data, such as subscriber profiles, are visible to Plus-H via their account. Furthermore, Plus-H has no way of preventing or deactivating the use of such tools on its YouTube channel.
Finally, Google also receives information when you view content, for example, even if you have not created an account. This so-called “log data” may include your IP address, browser type, operating system, information about the previously visited website and the pages you viewed, your location, your mobile provider, the device you use (including device ID and application ID), the search terms you use, and cookie information.
You have options to restrict the processing of your data in the general settings of your Google account. In addition to these tools, Google also offers specific privacy settings for YouTube. You can learn more about this in Google’s privacy policy guide to data protection in Google products:
https://policies.google.com/technologies/product-privacy?hl=de&gl=de
Further information on these points can be found in Google’s privacy policy under the term “Privacy Settings”:
https://policies.google.com/privacy?hl=de&gl=de#infochoices
You also have the option of requesting information using the Google privacy form:
plus-H also processes your data when you communicate with us via YouTube.
The processing is carried out for the purposes of plus-H’s public relations work in connection with the tasks assigned to it by law (Article 6e (1) (e) GDPR in conjunction with the relevant specialist law).
The initial recipient of the data is Google, where it may be passed on to third parties for their own purposes and under Google’s responsibility. The public, i.e., potentially anyone, is also the recipient of publications. Plus-H itself does not collect any data via its YouTube channel. Even through the integration of Plus-H’s YouTube videos on its website (https://www.plus-H.de), the IP addresses of visitors are not transmitted to Google. In particular, no tracking takes place on the website.
However, the data you enter on YouTube, in particular your username and the content published under your account, will be processed by us to the extent that we may respond to your publications under “Discussions.” The data you freely publish and distribute on YouTube will thus be incorporated into Plus-H’s offering and made accessible to its followers.
We have integrated Usercentrics on our website. Usercentrics is a consent solution from Usercentrics GmbH, Rosental 4, 80331 Munich, Germany, which can be used to obtain and document consent to the storage of cookies. Usercentrics uses cookies or other web technologies to recognize users and store the consent given or withdrawn.
Use of the service is based on obtaining the legally required consent to the use of cookies in accordance with Art. 6 (1) (c) GDPR.
The specific storage period of the processed data cannot be influenced by us; it is determined by Usercentrics GmbH. Further information can be found in the Usercentrics privacy policy: https://usercentrics.com/privacy-policy/.
We use eRecht24 CDN to properly deliver the content of our website. eRecht24 CDN is a service provided by eRecht24 GmbH & Co. KG, which acts as a content delivery network (CDN) on our website.
A CDN helps deliver content from our online offering, especially files such as graphics or scripts, more quickly using regionally or internationally distributed servers. When you access this content, you establish a connection to servers of eRecht24 GmbH & Co. KG, Lietzenburger Str. 94, 10719 Berlin, Germany. Your IP address and, if applicable, browser data such as your user agent are transmitted.
This data is processed exclusively for the purposes stated above and to maintain the security and functionality of eRecht24 CDN.
The use of the content delivery network is based on our legitimate interests, i.e., the interest in the secure and efficient provision and optimization of our online offering in accordance with Art. 6 (1) (f) GDPR.
The specific storage period of the processed data cannot be influenced by us; it is determined by eRecht24 GmbH & Co. KG. Further information can be found in the privacy policy for eRecht24 CDN: https://www.e-recht24.de/datenschutzerklaerung.html.
We offer visitors to our website the opportunity to contact us via the WhatsApp messaging service. For this purpose, we use the “WhatsApp Business Version.”
This service is provided by WhatsApp Inc., a subsidiary of Meta Platforms Inc. The company responsible for the European region is WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.
If you contact us via WhatsApp regarding a specific transaction (for example, an order you have placed), we will store and use the mobile phone number you use for WhatsApp and – if provided – your first and last name in accordance with Art. 6 (1) (b) GDPR to process and respond to your request. Based on the same legal basis, we may ask you via WhatsApp to provide additional data (order number, customer number, address, or email address) so that we can assign your request to a specific process.
If you use our WhatsApp contact for general inquiries (e.g., regarding our range of services, availability, or our website), we will store and use the mobile phone number you use for WhatsApp and – if provided – your first and last name in accordance with Art. 6 (1) (f) GDPR based on our legitimate interest in the efficient and timely provision of the requested information. Your data will only be used to respond to your request via WhatsApp. It will not be shared with third parties.
Please note that WhatsApp Business receives access to the address book of the mobile device we use for this purpose and automatically transfers telephone numbers stored in the address book to a server of the parent company Meta Platforms Inc. in the USA.
To operate our WhatsApp Business account, we use a mobile device whose address book only stores the WhatsApp contact details of users who have contacted us via WhatsApp.
This ensures that every person whose WhatsApp contact details are stored in our address book has consented to the transmission of their WhatsApp telephone number from the address books of their chat contacts in accordance with Art. 6 (1) (a) GDPR by accepting the WhatsApp Terms of Use when using the app on their device for the first time. The transmission of data from users who do not use WhatsApp and/or have not contacted us via WhatsApp is therefore excluded. Information on WhatsApp’s data transfer and the underlying standard contractual clauses of the EU Commission can be found at:
https://www.whatsapp.com/legal/business-data-transfer-addendum/?locale=de_DE
For the purpose and scope of data collection and the further processing and use of the data by WhatsApp, as well as your rights and settings options to protect your privacy, please refer to WhatsApp’s privacy policy: https://www.whatsapp.com/privacy
In addition to the data already provided, we process your date of birth – provided you have expressly consented to this.
Your date of birth will be used exclusively to create and send you personalized birthday offers and greetings, as well as special offers for customer anniversaries.
Your date of birth is processed based on your voluntary consent in accordance with Art. 6 (1) (a) GDPR. You are not obligated to provide your date of birth; entering your data is voluntary.
You can revoke your consent to the use of your date of birth to send personalized birthday offers at any time with future effect, e.g., by email to info@plus-h.de. The legality of the processing carried out up to the time of revocation remains unaffected.
Your date of birth will be deleted no later than three months after the end of the business relationship (e.g., after termination, deletion of your user account, or declared revocation of consent).
In addition to the data already provided, we also process the date your company was founded – provided you have expressly consented to this.
The company founding date will be used exclusively to send you personalized congratulations on your company anniversary as well as special offers or promotions related to this occasion.
You can object to this use at any time with future effect or revoke your consent. Your company founding date will be deleted no later than three months after the end of the business relationship.