Privacy Policy

 

Privacy Policy

1. Responsible

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

RoofTech GmbH
Benzstrasse 21
71101 Schoenaich
Germany

Managing Director: Falk Magnus Strobel
Phone: + 49 (0) 7031 7696 520
E‑Mail: info@rooftech.de

2. General information on data processing

The protection of your personal data is very important to us. We process personal data exclusively in accordance with applicable data protection regulations, in particular the General Data Protection Regulation (GDPR), the Federal Data Protection Act (BDSG) and the Telecommunications Digital Services Data Protection Act (TDDDG).

We generally only process personal data to the extent necessary for the provision of our website, our online shop, our products and services, as well as for the performance of a contract or based on your consent.

3. Hosting

Our website, including the online shop, is hosted by an external hosting provider, Webgo.

The following data, in particular, is processed:

• The IP address
• Date and Time
• browser type
• Operating system
• Referrer URL
• pages visited
• logfiles

The processing is carried out to ensure the safe and stable operation of the website.

Legal basis
Art. 6 para. 1 lit. f GDPR

Our legitimate interest lies in the secure provision of our website.

4. Server log files

Information is automatically collected when you visit our website.

This includes in particular:

• The IP address
• Web Browser
• Operating system
• Date
• Time of day
• access status
• transferred amount of data
• visited pages

This data is used exclusively for ensuring technical operation, system security, and error analysis. It is not combined with other data.

Legal basis:
Article 6 paragraph 1 letter f GDPR.

5. Cookies and Consent Management

Our website uses cookies. These are small text files that are stored on your device.

We distinguish between:

• technically necessary cookies
• Statistik-Cookies
• Marketing Cookies
• comfort functions

Technically necessary cookies are stored on the basis of Section 25 Paragraph 2 of the German Telemedia Act (TMG). All other cookies are set exclusively with your consent in accordance with Article 6 Paragraph 1 Letter a of the GDPR and Section 25 Paragraph 1 of the TMG.

You can withdraw or change your consent at any time via the cookie banner.

6. Customer account

You can voluntarily create a customer account. In doing so, we process, in particular:

• Name
• Address
• Billing Address
• Delivery address
• E-mail address
• Telephone number (optional)
• Password (stored encrypted)
• order history

The customer account serves to simplify ordering, manage your orders, view past orders, and process contracts more quickly.

Legal basis is Article 6 paragraph 1 letter b GDPR.

You can have your customer account deleted at any time.

7. Ordering in the online shop

When you order through our online shop, we process the personal data that is necessary for the performance of the contract.

This includes in particular:

• First and Last Name
• Company (optional)
• bill address
• delivery address
• E-mail address
• Phone number
• Payment Information
• ordered products
• Shipping
• Billing Details

The processing is carried out exclusively for:

• Contract execution,
• payment processing,
• Delivery of goods,
• customer communication,
• statutory accounting.

Legal basis:
Article 6 paragraph 1 letter b GDPR.

Tax-related retention periods remain unaffected.

8. Payment processing

To process your payment, we may work with external payment service providers. Depending on the payment method you choose, the necessary data will be transmitted to the respective payment service provider.

This includes, for example:

• Name
• bill address
• Payment amount
• Order details
• Payment Information

The data is processed solely for payment processing purposes.

Legal basis:
Article 6 paragraph 1 letter b GDPR.

The following payment methods can be offered:

• Prepayment
• on account

9. Shipping of goods

To deliver your order, we will transmit the necessary data to the commissioned shipping company DHL, UPS, freight forwarder Emons and their service providers.

This applies in particular to:

• Name
• delivery address
• Phone number (if applicable)
• (e.g., email address)

The data will be transmitted solely for the purpose of delivering your order.

Legal basis:
Article 6 paragraph 1 letter b GDPR.

10. contact

When you contact us by email, contact form or telephone, we process the personal data you provide exclusively for the purpose of processing your request.

This applies in particular to:

• Name
• E-mail address
• Phone number
• Content of your message
• company data (if applicable)

The processing is carried out for the purpose of implementing pre-contractual measures or to answer your request.

Legal basis:
Article 6 paragraph 1 letter b GDPR (initiation or performance of a contract)
Article 6 paragraph 1 letter f GDPR (legitimate interest in efficient communication)

11. Newsletter

If you subscribe to our newsletter, we will use your email address exclusively for sending our newsletter. Registration takes place via the double opt-in procedure.

We also store the following information:

• time of registration
• The IP address
• Time of confirmation

Consent can be revoked at any time with future effect.

Legal basis:
Art. 6 (1) (a) GDPR.

12. Applications

When you apply to us, we only process the personal data that you provide to us as part of your application.

This includes in particular:

• Contact details
• Application documents
• Certificates
• qualifications
• Curriculum vitae

The data is processed solely for the purpose of carrying out the application process.

Legal basis:
Article 6 paragraph 1 letter b GDPR and Section 26 BDSG.

If no employment relationship is established, we will delete your application documents no later than six months after the conclusion of the application process, unless there are legal retention obligations or you have given your consent for longer storage.

13. WP Statistics

Our website uses the analytics tool WP Statistics. WP Statistics is used solely for the statistical analysis of website usage. According to the manufacturer, no personal data is shared with third parties.

If personal data is processed, this is done on the basis of our legitimate interest in the statistical analysis of our website.

Legal basis:
Article 6 paragraph 1 letter f GDPR.

14. YouTube

Our website may contain embedded videos from the YouTube service.

The provider is:
Google Ireland Limited
Gordon House
Barrow Street
Dublin 4
Ireland

When you access a page with an embedded YouTube video, personal data may be transferred to Google. If you have consented to this, the processing is based on Article 6 Paragraph 1 Letter a GDPR and Section 25 Paragraph 1 TDDDG.

For more information, please see Google's privacy policy.

15. Social Media

We maintain company profiles on various social networks.

This can include:

• Facebook
• Instagram
• LinkedIn
• YouTube
• Xing

When you visit our social media pages, the data protection regulations of the respective platform operator apply. Please refer to the privacy policies of the respective providers for further information.

16. Recipients of personal data

To fulfill our contractual and legal obligations, it may be necessary to disclose personal data to third parties.

This includes in particular:

• Hosting-Dienstleister
• IT Service Providers
• payment service
• Shipping company
• Certified Tax Advisor
• Accounting service provider
• Authorities
• banks
• Legal advisor

Data will only be shared if there is a legal basis for doing so.

17. Storage period

We only store personal data for as long as is necessary for the performance of the contract, due to legal retention obligations or to protect legitimate interests.

After the respective retention periods have expired, the data will be deleted or anonymized. Statutory retention periods under tax and commercial law remain unaffected.

18. Data subject rights

You have the right at any time to:

• Information according to Art. 15 GDPR
• Correction according to Art. 16 GDPR
• Deletion according to Art. 17 GDPR
• Restriction of processing pursuant to Art. 18 GDPR
• Data portability according to Art. 20 GDPR
• Objection pursuant to Article 21 GDPR
• Revocation of consent granted pursuant to Art. 7 para. 3 GDPR

Furthermore, you have the right to lodge a complaint with a data protection supervisory authority.

19. Data security

We implement appropriate technical and organizational security measures to protect your personal data against loss, manipulation, unauthorized access or other unauthorized processing.

Our security measures are continuously adapted in line with technological developments.

20. Changes to this Privacy Policy

We reserve the right to amend this privacy policy if this becomes necessary due to legal changes, technical developments or new services.

The privacy policy published at the time of your visit to our website applies.