Conrad

Privacy Policy

We take data privacy seriously


Protecting your privacy when processing personal data is a matter that is important to us. When you

visit our website, it is standard practice for our web servers to store the IP of your internet service

provider, the website you have accessed us from, the pages you access on our website, and the date

and length of the visit. This information is absolutely necessary for the technical transmission of the

web pages and the secure operation of the servers. The analysis of this data is not personalised.


If you send us data using the contact form, that data is stored on our servers as part of the data

storage. We use your data exclusively for the purpose of processing your request. Your data is

treated strictly confidentially. It is not disclosed to third parties.


Controller:


Conrad Electronic SE 

Klaus-Conrad-Str. 1

92240 Hirschau, Germany

Email: datenschutz@conrad.de


Personal data

Personal data is data about your person. This includes your name, your address and your email

address. You do not have to disclose any personal data to be able to visit our website, but in some

cases we require your name and address as well as other information to be able to offer you the

service you require.


The same applies if we supply you with information material at your request or answer your

requests. In this case, we will always advise you of this fact. Furthermore, we only store data that you

have sent to us automatically or voluntarily.


If you use one of our services, we generally only collect the data that is necessary for us to be able to

offer you our service. We may ask you for further information, but that information is voluntary.

Whenever we process personal data, we do this so as to be able to offer you our service or pursue

our commercial goals.


Contact


When a person contacts us with a request (e.g. using the contact form, by email, by phone or on

social media), this person’s data is processed if this is necessary in order to reply to the contact

request and any measures requested.

In the context of contractual or pre-contractual relationships, contact requests are answered in order

to meet our contractual obligations or to reply to (pre-)contractual requests and, in other respects,

based on the legitimate interest in replying to the requests.

●Types of data processed: Master data (e.g. names, addresses), contact data (e.g. email,

telephone numbers), content data (e.g. data entered in online forms).

● Data subjects: Communication partners.

● Purposes of processing: Contact requests and communication.

● Legal basis: Performance of a contract and requests prior to a contract (Art. 6(1)(b) GDPR),

legitimate interests (Art. 6(1)(f) GDPR)


Automatically stored data


Server log files 


The website provider automatically collects and stores information in server log files which your

browser sends to us automatically. This includes:

● date and time of the request

● name of the requested file

● page from which the file was requested

● access status (file transferred, file not found, etc.)

● browser and operating system used

● full IP address of the requesting computer

● data volume transferred

This data is not combined with other data sources. It is processed according to Art. 6(1)(f) GDPR

based on our legitimate interest in improving the stability and functionality of our website.  

We store this data temporarily for reasons of technical security and particularly to ward off

attempted attacks on our web server. It is not possible for us to trace back any connection to

individuals based on this data. After no more than seven days the data is anonymised on the domain

level by the IP address being shortened so that it is no longer possible to link it to the individual user.

In addition, this data is processed in an anonymised form for statistical purposes; it is not compared

to other databases or divulged to third parties either wholly or in part.


Cookies


When you visit our website, we may store information on your computer in the form of cookies.

Many cookies contain what is called a cookie ID. A cookie ID is the cookie’s unique identifier. This

consists of a sequence of characters which can be used to match websites and servers to the specific

web browser on which the cookie was stored. This makes it possible to distinguish the websites and

servers visited and the data subject’s individual browser from other web browsers containing

cookies. A specific web browser can be recognised and identified using the unique cookie ID.


By applying session cookies, the controller can provide the users of this website with a user-friendly

service which would not be possible without cookies being set. The only cookies used without

consent are those that are technically necessary. This is done on the legal basis of legitimate interests

according to Art. 6(1)(f) GDPR.


We only use personal cookies to improve our website or for marketing or advertising purposes if you

give your consent. The first time you visit the website you can use the cookie banner shown to give

your voluntary consent to tracking or analysis. If necessary, your data will be passed on to partners or

third-party providers. These cookies will only be stored if you give your express consent. The legal

basis for this is then your consent according to Art. 6(1)(a) GDPR.

You can change your settings regarding the use of cookies at any time here:


XXXXX. Link, um den Consent-Banner nochmal aufzurufen. XXXXX


Google Tag Manager


We use Google Tag Manager. The provider is Google Ireland Limited, Gordon House, Barrow Street,

Dublin 4, Ireland.


Google Tag Manager is a tool that helps us to embed tracking or statistics tools and other

technologies on our website. Google Tag Manager does not create any user profiles, store any

cookies or perform independent analyses itself. It purely serves to manage and display the tools

embedded with it. However, Google Tag Manager records your IP address, which can also be

transmitted to Google’s parent company in the United States.


The use of Google Tag Manager is based on Art. 6(1)(f) GDPR. The website operator has a legitimate

interest in the quick and straightforward embedding and management of different tools on its

website.


Google Analytics


This website uses functions from the web analytics service Google Analytics. The provider is Google

Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.


Google Analytics enables the website operator to analyse the behaviour of the visitors to the

website. Here, the website operator receives different usage data, such as page views, session

length, operating systems used and origin of the user. This data is assigned to the user’s end device

in each case. No assignment is made to a device ID.


In addition, we can use Google Analytics to record your mouse and scroll movements and clicks, for

example. Furthermore, Google Analytics uses different modelling approaches in order to supplement

the data sets recorded and applies machine learning technologies in the data analysis.


Google Analytics uses technologies that enable recognition of the user for the purpose of analysing

user behaviour (e.g. cookies or device fingerprinting). The information Google records concerning the

use of this website is generally transmitted to a Google server in the USA and stored there.


The use of this service is based on your consent according to Art. 6(1)(a) GDPR and section 25(1) of

the German Telecommunications-Telemedia Data Protection Act (TTDSG). The consent can be

withdrawn at any time. The data transmission to the USA is based on the standard stipulations by the

European Commission. Go here for details:

https://privacy.google.com/businesses/controllerterms/mccs/.


We use Google Signals. When you visit our website, Google Analytics records your location, search

history and YouTube history as well as demographic data (visitor data), among other things. With the

help of Google Signals this data can be used for personalised advertising. If you have a Google

account, Google Signals links the visitor data to your Google account and uses it for personalised

advertising messages. Apart from that, the data will be used to create anonymised statistics

regarding the user behaviour of our users.


We have concluded a processing contract according to Art. 28 GDPR with the abovementioned

provider. This is a contract prescribed by data protection laws that guarantees that the provider will

only process the personal data of the visitors to our website according to our instructions and in

compliance with the GDPR.


This website uses the Google Analytics function Ecommerce Tracking. With the help of Ecommerce

Tracking, the website operator can analyse the purchase behaviour of the visitors to the website to

improve its digital marketing campaigns. Here, information such as orders placed, average order

values, shipping costs and the time between a product being viewed and purchased is recorded.

Google can summarise this data under a transaction ID which is assigned to the respective user or

the user’s device.


Google Analytics (4)

This website uses functions from the web analytics service Google Analytics. The provider is Google

Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.


Google Analytics enables the website operator to analyse the behaviour of the visitors to the

website. Here, the website operator receives different usage data, such as page views, session

length, operating systems used and origin of the user. This data is summarised in a user ID and

assigned to the respective end device of the visitor to the website.


In addition, we can use Google Analytics to record your mouse and scroll movements and clicks, for

example. Furthermore, Google Analytics uses different modelling approaches in order to supplement

the data sets recorded and applies machine learning technologies in the data analysis.


Google Analytics uses technologies that enable recognition of the user for the purpose of analysing

user behaviour (e.g. cookies or device fingerprinting). The information Google records concerning the

use of this website is generally transmitted to a Google server in the USA and stored there. The use

of this service is based on your consent according to Art. 6(1)(a) GDPR and section 25(1) of the

German Telecommunications-Telemedia Data Protection Act (TTDSG). The consent can be withdrawn

at any time.


The data transmission to the USA is based on the standard stipulations by the European Commission.

Go here for details: https://privacy.google.com/businesses/controllerterms/mccs/.


Browser plugin


You can prevent your data being recorded and processed by Google by downloading and installing

the browser plugin provided under the following link:

https://tools.google.com/dlpage/gaoptout?hl=de. You can find more information on how user data

is handled at Google Analytics in Google’s Privacy Policy:

https://support.google.com/analytics/answer/6004245?hl=de.


Google Signals

We use Google Signals. When you visit our website, Google Analytics records your location, search

history and YouTube history as well as demographic data (visitor data), among other things. With the

help of Google Signals this data can be used for personalised advertising. If you have a Google

account, Google Signals links the visitor data to your Google account and uses it for personalised

advertising messages. Apart from that, the data will be used to create anonymised statistics

regarding the user behaviour of our users.


Google Analytics Ecommerce Tracking


This website uses the Google Analytics function Ecommerce Tracking. With the help of Ecommerce

Tracking, the website operator can analyse the purchase behaviour of the visitors to the website to

improve its digital marketing campaigns. Here, information such as orders placed, average order

values, shipping costs and the time between a product being viewed and purchased is recorded.

Google can summarise this data under a transaction ID which is assigned to the respective user or

the user’s device.


Safety


We have taken technical and administrative safety precautions to protect your personal data from

loss, destruction, manipulation and unauthorised access. All our employees as well as the service

providers operating for us are obligated to comply with the applicable data privacy laws.


Whenever we collect and process personal data, it is encrypted before transmission. That means that

your data cannot be misused by third parties. Here, our safety precautions are subject to a

continuous process of improvement and our privacy notices are constantly revised. Please ensure

that you have the most up-to-date version.


What data is processed and what sources does this data come from?


We process the data we have received from you during the initiation or fulfilment of the contract

based on your consent, or in the context of your application to us or in the context of your

employment with us.


Personal data includes:


For business partners and customers, it includes the name of your representatives in legal

transactions, company name, commercial register number, VAT ID, company number, address,

contact details of contact persons (email address, telephone numbers, fax), bank details and access

data for the portal.


For what purposes is the data processed and what is the legal basis for this?

We process your data in accordance with the provisions of the General Data Protection Regulations

(GDPR) and the German Federal Data Protection Act (BDSG) of 2018 in the version applicable in each

case:


• to meet (pre-)contractual obligations (Art 6(1)(b) GDPR):

For the fulfilment of the contract, your data is processed online or in one of our branches.

For the fulfilment of the contract concerning your employment with us, it is processed in our

company . The data is particularly processed during the initial business contact and when

contracts with you are executed.


• to meet legal obligations (Art 6(1)(c) GDPR):

It is necessary for your data to be processed for the purpose of meeting different statutory

obligations, e.g. arising from the German Commercial Code (HGB) or the German Fiscal Code

(AO).


• to protect legitimate interests (Art 6(1)(f) GDPR):

Due to a balancing of interests, in addition to the actual fulfilment of the contract we can

process data to protect legitimate interests. Data is processed to protect legitimate interests

in the following cases, for example:

- advertising or marketing to existing customers

- measures regarding business management and the further development of products

and services

- keeping an internal customer database to improve customer service

- in the context of legal action


• in the context of your consent (Art 6(1)(a) GDPR):

if you have granted us consent to process your data, e.g. to display analysis tools on the

website or to send you our newsletter


Processing of personal data for marketing purposes


You can object to the use of your personal data for marketing purposes at any time, either as a whole

or regarding specific measures, without this incurring costs other than the costs of transmission

according to the base rate.


According to the statutory requirements of section 7(3) of the German Act Against Unfair

Competition (UWG), we are entitled to use the email address you gave on conclusion of the contract

for the purpose of direct marketing for our own similar products or services. You will receive these

product recommendations from us regardless of whether or not you have subscribed to a

newsletter.

If you do not wish to receive such recommendations from us by email, you can object at any time to

your address being used for this purpose without this incurring costs other than the costs of

transmission according to the base rate. A written notification is sufficient in this regard. Every email

always contains a link for you to cancel as well, of course.


Who receives my data?


If we use a service provider for the purpose of processing, we still remain responsible for protecting

your data. All processors are obligated by contract to treat your data confidentially and only to

process it in the context of providing a service. The processors we commission receive your data if

they require this data in order to perform their service in each case. These include IT service

providers that we need for the operation and security of our IT system as well as advertising and

directory publishers for our own advertising campaigns, for example.

In the case of a statutory obligation or in the context of legal action, authorities, courts and external

auditors can receive your data.

In addition, for the purpose of contract initiation and contract performance, insurance companies,

banks, credit agencies and service providers can receive your data.


How long is my data stored for?


We process your data until the business relationship ends or until the applicable statutory retention

periods expire (such as those arising from the German Commercial Code, the German Fiscal Code or

the German Act on Working Hours (ArbZG)); furthermore, we process it until any legal disputes for

which the data is required as evidence have ended.


Is personal data sent to a third country?


We generally do not send any data to a third country. Data is only sent in individual cases based on

an adequacy decision issued by the European Commission, standard contractual stipulations,

appropriate guarantees or your express consent.


What data privacy rights do I have?


You have a right to information, rectification, erasure or restriction of processing of your stored data,

a right to object to the processing, a right to data portability and a right to make a complaint

pursuant to the requirements of data protection laws at all times.


Right of access:

You can request information from us with regard to whether or not we process your data and if so,

to what extent.


Right to rectification:

If we process data of yours that is incomplete or inaccurate, you can request that we correct or

complete it at any time.


Right to erasure:

You can request that we erase your data if we process it unlawfully or if the processing encroaches

upon your legitimate interest in protection to a disproportionate degree. Please note that there may

be reasons that conflict with immediate erasure, e.g. in the case of retention obligations that are

regulated by statute.

Regardless of the exercising of your right to erasure, we will erase your data immediately and fully

unless there is a conflicting legal or statutory retention obligation in this regard.


Right to restriction of processing:

You can request that we restrict the processing of your data if

- you contest the accuracy of the data, for a period enabling us to verify the accuracy of the

data,

- the processing of the data is unlawful, but you oppose the erasure of the data and request

the restriction of its use instead,

- we no longer need the data for the intended purpose, but you require it for the assertion or

defence of legal claims, or

- you have objected to the processing of the data.


Right to data portability:

You can request that we provide you with the data which you have made available to us and that we

do so in a structured, commonly used and machine-readable format and that you can transmit that

data to another controller without hindrance from us if

- we process that data based on revocable consent you have granted us or in order to

perform the contract between us, and

- this processing is carried out by automated means.

You can request that we transmit your data directly to another controller if this is technically

feasible.


Right to object:

If we process your data due to a legitimate interest, you can object to the processing of this data at

any time; this would also apply to profiling based on those provisions. We will then cease to process

your personal data unless we can establish urgent reasons for the processing which are worthy of

protection and which outweigh your interests, rights and liberties, or the processing serves to assert,

exercise or defend legal claims. You can object to your data being processed for the purpose of direct

marketing at any time without giving reasons.


Right to make a complaint:

If you are of the opinion that we are breaching German or European data protection laws when

processing your data, please contact us so that issues can be clarified. You also have the right, of

course, to contact the supervisory authority responsible for you, the “Landesamt für

Datenschutzaufsicht” [state supervisory data protection authority] in each case.

If you want to assert one of the above rights against us, please contact our data protection officer. If

in doubt, we can request additional information to confirm your identity.


Am I under an obligation to provide data?

The processing of your data is necessary for the contract you have entered into with us to be

concluded or performed. If you do not provide us with this data, we will generally have to refuse to

conclude the contract or we will no longer be able to carry out an existing contract and will therefore

have to terminate it. However, with regard to the contractual performance of data which is not

relevant or is not required by statute, you are not obligated to grant consent to the processing of

data.


Changes to this Privacy Notice


We reserve the right to change our privacy notices if this should be necessary due to new

technologies. Please ensure that you have the most up-to-date version. If fundamental changes are

made to this Privacy Notice, we will announce them on our website.


With regard to questions concerning data privacy, all interested parties and visitors to our website

can reach us here:


Mr Christian Volkmer

Projekt 29 GmbH & Co. KG

Ostengasse 14

93047 Regensburg


Tel.: 0941 2986930

Fax: 0941 29869316

Email: anfragen@projekt29.de

Internet: www.projekt29.de