General Information
We appreciate your interest in our website. Protecting your personal data is an important concern for us. We process your data exclusively on the basis of legal regulations (GDPR, TDDDG).
This privacy policy informs you about the type, scope, and purpose of the processing of personal data within our online offering at https://rohrbiegetechnik.de (hereinafter „website“).
Hosting & Infrastructure
Our website is hosted on a dedicated server by Strato AG, Pascalstraße 10, 10587 Berlin. We have a data processing agreement with Strato in accordance with Art. 28 GDPR. The server location is Germany.
Controller
Wolfgang Tinsel Werkzeuge + Maschinen
Heinkelstraße 19
73614 Schorndorf
Tel.: 07181 - 62078
E-Mail: info@tinsel.de
Collection and Processing of Personal Data
When you use our webshop, we process the following data:
- Company name, contact person, address
- E-mail address and telephone number
- Order and payment information
- Server log data (IP address, access time, user agent)
Processing is based on Art. 6(1)(b) GDPR for the performance of pre-contractual measures and contract fulfillment.
| Purpose | Data Categories | Legal Basis |
|---|---|---|
| Website visit | IP address, date/time, user agent, referrer | referrer Art. 6(1)(f) GDPR – legitimate interest in technically error-free operation |
| Webshop order | Company, contact person, address, e-mail, phone, order & payment data | Art. 6(1)(b) GDPR (contract) |
| Payment processing (Stripe) | Card/bank details, name, billing address | address Art. 6(1)(b) GDPR; Data transfer to the USA based on SCC (Art. 46 GDPR) |
| Web analytics (Google Analytics) | Shortened IP, cookie ID, page views, device data | Consent under § 25(1) TDDDG in conjunction with Art. 6(1)(a) GDPR; IP anonymization is enabled by default. |
| Bot/spam protection (Cloudflare Turnstile) | IP address, header info, possibly device fingerprint | Art. 6(1)(f) GDPR (security interest); data processing by Cloudflare Inc., USA – SCC under Art. 46 GDPR. |
Payment Processing with Stripe
For online payments, we use Stripe (Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland).
Stripe processes your payment data independently. The transfer is based on Art. 6(1)(b) GDPR (contract fulfillment) and Art. 6(1)(f) GDPR (legitimate interest).
Further information:https://stripe.com/de/privacy
Use of Cookies
Our website uses cookies to provide certain features and improve the user experience. These include:
- Session cookies (e.g. shopping cart)
- Preference cookies (e.g. language)
- Analytics cookies
You can disable or delete cookies through your browser settings. This may restrict website functionality.
Technically necessary cookies (e.g. Odoo session, shopping cart) are set on the basis of § 25(2) no. 2 TDDDG / Art. 6(1)(f) GDPR.
Analytics and preference cookies are only set after you have given your consent via our consent banner (§ 25(1) TDDDG, Art. 6(1)(a) GDPR). You can withdraw your consent at any time in the cookie banner.
Web Analytics with Google Analytics
This website uses Google Analytics, a web analytics service provided by Google Ireland Limited. On our behalf, Google processes the following data:
- IP address (shortened/anonymized)
- Usage behavior on the website
- Device and browser information
Processing is based on Art. 6(1)(a) GDPR (consent) via the cookie banner.
You can revoke your consent at any time or disable Google Analytics via a browser plugin:
https://tools.google.com/dlpage/gaoptout
Retention Period
We delete personal data as soon as the processing purpose no longer applies and there are no statutory retention obligations.
- Commercial and tax documents: 6 or 10 years.
- Server log files: 14 days.
- Google Analytics data: 14 months, as configured in GA4.
- Turnstile logs: max. 30 days (Cloudflare standard).
Recipients & Third Country Transfers
- Strato AG (Hosting, Germany)
- Stripe Payments Europe Ltd. (Ireland) – forwarding to Stripe Inc., USA based on SCC.
- Google Ireland Ltd. (Analytics) – possible US transfer via Google SCC.
- Cloudflare Inc., USA (Turnstile) – SCC & minimized data collection.
Contact Forms
All form submissions are transmitted via TLS encryption and protected against spam by Cloudflare Turnstile (Further information: https://www.cloudflare.com/privacypolicy/). The data provided will be processed solely to handle your inquiry (Art. 6(1)(b) or (f) GDPR); it will not be passed on without your consent.
Your Rights
You have the right at any time to:
- Access information about your stored data
- Correct inaccurate data
- Erasure (where legally permissible)
- Restriction of processing
- Data portability
- Object to processing based on legitimate interest
Please direct your request to: info@tinsel.de