Privacy policy

1. Controller

The controller responsible for processing personal data in connection with the operation of this corporate website is:

A. Schmidt & Co. G.m.b.H.
Billstraße 174
20539 Hamburg
Germany

Telephone: +49 40 78 76 53
Email: info@a-schmidtco.de

If you have questions about data protection or wish to exercise your rights, you can contact us using these contact details.

Contact person for data protection enquiries

Robert Hofmann
Telephone: +49 40 78 76 53
Email: info@a-schmidtco.de

2. Hosting and technical access data

We operate this website using hosting services provided by IONOS SE, Elgendorfer Straße 57, 56410 Montabaur, Germany.

When you visit our website, your IP address is technically processed to transmit the requested content to your browser. According to IONOS, the following visitor data is also collected and anonymised directly upon collection:

• previously visited website (referrer),
• requested page or file,
• browser type and version,
• operating system and device type,
• time of access,
• IP address in anonymised form.

Processing serves to provide the website and ensure its security, stability and error analysis. The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is the secure and reliable operation of our website.

According to IONOS, the hosting visitor data described above is stored for eight weeks. IONOS states that this data is not transferred to third countries outside the European Union.

These statements about storage and anonymisation apply exclusively to the hosting visitor data described here. Information about other processing, particularly statistical analysis and contact enquiries, is provided in the relevant sections of this privacy policy.

Further information is available in the IONOS privacy information on web hosting.

3. IONOS WebAnalytics

Statistical analysis using IONOS WebAnalytics

We use IONOS WebAnalytics, a service provided by our hosting provider IONOS SE, Elgendorfer Straße 57, 56410 Montabaur, Germany, for statistical analysis and technical optimisation of our website.

According to IONOS, the IP address processed when a page request is transmitted is anonymised immediately afterwards. The provider states that subsequent statistical analysis does not involve personally identifiable data. WebAnalytics does not use cookies.

To the extent that personal data is processed before anonymisation, processing is based on Article 6(1)(f) GDPR. Our legitimate interest is to understand statistically how our website is used and to improve its technology and content. According to IONOS, subsequent statistical analysis after anonymisation does not involve personally identifiable data.

Further information is available in the IONOS privacy information on WebAnalytics.

4. Contact by email or telephone

If you contact us by email or telephone, we process the personal data you provide. This includes, in particular, your name, contact details, the content of your enquiry and, where applicable, company and product information. Processing serves to handle and respond to your enquiry.

Purposes and legal bases

Where your enquiry concerns entering into or performing a contract with you as a natural person, the legal basis is Article 6(1)(b) GDPR.

Communication with contact persons at a company and other business enquiries are processed on the basis of Article 6(1)(f) GDPR. Our legitimate interest is to handle enquiries and maintain and conduct business relationships.

Email service and security screening

We use a Microsoft Exchange-based email service provided by IONOS to receive, store and send our emails. We also use Barracuda Email Gateway Defense to protect our email communications.

Security screening may involve processing sender and recipient addresses, IP addresses and other technical transmission data, as well as message content and attachments. This serves to detect and prevent spam, malware, phishing and other security threats.

Depending on the configured security rules, suspicious messages may be blocked or temporarily stored in quarantine. Screening may therefore delay or prevent delivery of a message.

The legal basis for these security measures is Article 6(1)(f) GDPR. Our legitimate interest is to protect our IT systems and the confidentiality, integrity and availability of our business communications.

Recipients of the data

Your information is accessible to the employees handling your enquiry and to authorised persons responsible for maintaining our IT systems, to the extent necessary for their tasks.

IONOS and the service providers used for Barracuda Email Gateway Defense are also involved in providing and securing email communications. Processing by service providers acting on our instructions is based on a data processing agreement under Article 28 GDPR.

Retention periods

We retain your enquiry and the associated personal data for as long as necessary to handle your request.

The data is subsequently deleted unless statutory retention obligations apply or further storage is necessary for the establishment, exercise or defence of legal claims. Where messages qualify as business correspondence or other documents subject to statutory retention requirements, the relevant statutory retention periods apply.

Logs and associated messages stored in Barracuda Email Gateway Defense are retained for up to 32 days and then deleted on a rolling basis. This period does not apply to storage in our email mailboxes or in any archives and backups used.

Voluntary provision of information

Contacting us and providing your information are generally voluntary. Without the information necessary to handle your enquiry, we may be unable to respond.

Clicking an email link on our website opens your email application. A message is sent only when you send it from that application.

5. WordPress, essential cookies and product search

Provision of the website and local content

We use WordPress to provide and manage our website. The fonts, images and scripts used by our theme are served through our web server. Retrieving them does not establish a connection to external font or image services.

The technical access data generated in this process is processed as described in the section “Hosting and technical access data”. Information about statistical analysis is provided in the section “IONOS WebAnalytics”.

Essential cookies

When authorised users access the login area and sign in, WordPress uses cookies, particularly to check cookie support and authenticate users. These enable protected access to website administration.

Where these cookies are strictly necessary for the expressly requested access, their storage or access is based on section 25(2), no. 2 of the German Telecommunications Digital Services Data Protection Act (TDDDG). To the extent personal data is processed, the legal basis is Article 6(1)(f) GDPR. Our legitimate interest is the secure administration of our website and protection against unauthorised access.

Cookie notice

When you confirm our cookie notice by selecting “Got it”, we store your acknowledgement in the “asc_cookie_notice” cookie for 180 days. This prevents the notice from appearing automatically on subsequent visits. The cookie contains no individual identifier and is not used for analytics or marketing. It is only stored after you confirm the notice. You can reopen the information at any time using the “Cookie notice” button. You can also delete the cookie through your browser settings.

Product search and product filters

The products displayed are filtered within your browser. Search terms entered are not transmitted to an external search service.

Where search terms form part of a requested internet address, they may be processed in server logs together with technical access data. The purposes, legal bases and retention periods described in the section “Hosting and technical access data” apply to this processing.

Please do not enter personal or confidential information into the product search.

6. External links and route planning

Our website contains links to external websites, including Google Maps for route planning.

The directions map shown on our contact page is provided as an image file through our web server. No interactive Google Maps map is embedded. Simply displaying the directions map therefore does not establish a connection to Google Maps.

If you open the route planning link or the linked directions map, you leave our website and access Google Maps. Google then processes, in particular, your IP address and browser and device information. Depending on your browser settings, the address of the previously visited website may also be transmitted.

If you are signed into your Google account, Google may associate your use of the service with your account. Further information about processing purposes, possible international data transfers and your settings is available in Google’s privacy policy.

When you open other external links, subsequent processing is likewise carried out by the respective provider in accordance with its privacy information.

7. Recipients and transfers

We transfer personal data where there is a basis under data protection law and where necessary for the purposes described in this privacy policy.

Recipients may include our providers of web hosting, email communications, IT support and IT security services. These include IONOS for web hosting and the Exchange email service used, as well as the service providers involved in providing Barracuda Email Gateway Defense. Authorities or other public bodies receive data where a statutory obligation requires this.

Where service providers process personal data on our behalf, processing is based on a data processing agreement under Article 28 GDPR.

Visitor data in web hosting

According to the IONOS product information, the visitor data described there for the web hosting product is not transferred to countries outside the European Union. This statement relates exclusively to that hosting processing.

External links

Our website contains links to external offerings. Processing by the respective provider when these offerings are opened is explained in the section “External links and route planning”.

8. Your rights

Subject to the statutory conditions, you have the following rights regarding your personal data:

• Access to information about the processing of your data, including a copy of the personal data, under Article 15 GDPR.
• Rectification of inaccurate data and completion of incomplete data under Article 16 GDPR.
• Erasure of your data under Article 17 GDPR.
• Restriction of processing under Article 18 GDPR.
• Data portability under Article 20 GDPR, where processing is based on your consent or a contract and is carried out by automated means. This right concerns the data you have provided and includes direct transmission to another controller where technically feasible.

Withdrawal of consent

Where processing is based on your consent, you may withdraw that consent at any time with effect for the future. The lawfulness of processing carried out before withdrawal remains unaffected.

Right to object under Article 21 GDPR

You have the right to object at any time, on grounds relating to your particular situation, to processing of your personal data based on Article 6(1)(f) GDPR. This also applies to profiling based on that provision.

We will then stop processing the data concerned unless we can demonstrate compelling legitimate grounds overriding your interests, rights and freedoms, or processing serves the establishment, exercise or defence of legal claims.

You may object at any time, without giving reasons, to processing of your personal data for direct marketing. This also applies to related profiling. Your data will then no longer be processed for these purposes.

Exercising your rights

To exercise your rights, you may contact us, in particular by email at info@a-schmidtco.de or using the contact details above. No particular form is required.

Requests are generally handled free of charge. We inform you of the action taken without undue delay and no later than one month after receiving your request. Where legally permitted and necessary, this period may be extended by up to two further months. We will inform you of this and the reasons within the first month.

9. Right to lodge a complaint

If you consider that the processing of your personal data infringes the GDPR, you have the right under Article 77 GDPR to lodge a complaint with a data protection supervisory authority. This right exists without prejudice to other administrative or judicial remedies.

You may, in particular, contact a supervisory authority in the Member State of your habitual residence, place of work or place of the alleged infringement.

The supervisory authority generally responsible for our company is:

Der Hamburgische Beauftragte für Datenschutz und Informationsfreiheit
Hamburg Commissioner for Data Protection and Freedom of Information
Ludwig-Erhard-Straße 22
20459 Hamburg
Germany

Email: mailbox@datenschutz.hamburg.de
Website: datenschutz-hamburg.de
Submit a complaint online

Your right to contact another competent data protection supervisory authority remains unaffected.

10. Automated decisions and changes

Automated decisions

Within the processing described in this privacy policy, we do not make decisions based solely on automated processing, including profiling, that produce legal effects concerning you or similarly significantly affect you.

Updates to this privacy policy

We update this privacy policy when our data processing changes or legal requirements make this necessary. This includes, in particular, the introduction of new website functions or changes to the service providers used.

The current version is available on this website.