Privacy Policy
1. Controller
SCS M2 Engineering GmbH
Sportplatzstr. 19
87493 Lauben
Germany
Email address as stated in the legal notice (Imprint)
2. Collection and Processing of Personal Data
We collect personal data only if you voluntarily provide it to us, for example when placing an order, creating a customer account, or contacting us.
The following data may be processed in particular:
Name, address
Email address
Telephone number
Payment and order data
Legal bases:
Art. 6(1)(b) GDPR (performance of a contract)
Art. 6(1)(f) GDPR (legitimate interest in the secure and proper operation of our online shop)
After full execution of the contract, your data will be stored in accordance with statutory retention periods and then deleted.
3. Server Log Files
When visiting our website, information is automatically collected by the web server:
IP address
Date and time of the request
Accessed pages
Browser type and version
Operating system
This data is technically necessary to deliver the website correctly and to ensure system security.
This data is not combined with other data sources.
Legal basis: Art. 6(1)(f) GDPR
4. Customer Account (JTL-Shop 5)
When you create a customer account, the data you provide will be stored.
Legal basis: Art. 6(1)(b) GDPR
You may request deletion of your customer account at any time. Statutory retention obligations remain unaffected.
5. Newsletter
If you subscribe to our newsletter, we will use your email address exclusively for our own promotional purposes.
Legal basis: Art. 6(1)(a) GDPR (consent)
You can unsubscribe at any time.
6. Disclosure of Personal Data
6.1 Shipping Service Providers
For the purpose of delivering goods, we transfer your personal data to the respective shipping service provider.
This includes in particular:
Name
Delivery address
Email address
Telephone number
as well as any other data required for delivery
The transfer is carried out to ensure smooth shipping and, if necessary, to enable contact in the context of delivery (e.g. scheduling or inquiries).
Legal basis: Art. 6(1)(b) GDPR
6.2 Payment Method: PayPal
When paying via PayPal, your payment data will be transmitted to the following payment service provider:
PayPal (Europe) S.à r.l. et Cie, S.C.A.
22–24 Boulevard Royal
L-2449 Luxembourg
The transfer is carried out for payment processing.
Legal basis: Art. 6(1)(b) GDPR
6.3 Payment Method: Bank Transfer (Prepayment)
If you choose payment by bank transfer, we process your payment data solely for the purpose of handling the payment.
No data is transferred to third parties in this context.
Legal basis: Art. 6(1)(b) GDPR
7. Use of JTL Plugins
Our online shop may use plugins from the JTL shop system to provide additional functions and services (e.g. improving usability, processing orders, or integrating additional services).
Depending on the plugin used, personal data may be processed. This processing is carried out exclusively within the scope of the respective plugin function.
Where personal data is processed via plugins, this is done:
for the performance of a contract (Art. 6(1)(b) GDPR)
on the basis of our legitimate interest in an economically efficient and functional operation of our online shop (Art. 6(1)(f) GDPR) or
on the basis of your consent (Art. 6(1)(a) GDPR), where required
We ensure that only plugins that comply with data protection regulations are used.
8. Cookies
Our website uses only technically necessary cookies that are required for the operation of the online shop.
These include in particular:
Shopping cart functionality
Login status
Language settings
No analytics or tracking cookies are used.
Legal basis: Art. 6(1)(f) GDPR
9. Social Media Links
Our website contains only links to our own profiles on social networks (e.g. Facebook, Instagram).
These are simple links. Personal data (e.g. IP address) is only transmitted to the respective provider when you click on such a link.
We have no influence on the type, scope, and purpose of data processing by the respective provider.
10. Your Rights
You have the right at any time to:
Access (Art. 15 GDPR)
Rectification (Art. 16 GDPR)
Erasure (Art. 17 GDPR)
Restriction of processing (Art. 18 GDPR)
Data portability (Art. 20 GDPR)
Object (Art. 21 GDPR)
You also have the right to lodge a complaint with a supervisory authority.
11. Contact
If you have any questions regarding the collection, processing, or use of your personal data, please contact us using the contact details provided in the legal notice (Imprint).