1. Controller
SCS M2 Engineering GmbH
Sportplatzstr. 19
87493 Lauben
Germany
Email address as stated in the legal notice (Imprint)
2. Collection and Processing of Personal Data
We collect personal data only if you voluntarily provide it to us, for example when placing an order, creating a customer account, or contacting us.
The following data may be processed in particular:
Name, address
Email address
Telephone number
Payment and order data
Legal bases:
Art. 6(1)(b) GDPR (performance of a contract)
Art. 6(1)(f) GDPR (legitimate interest in the secure and proper operation of our online shop)
After full execution of the contract, your data will be stored in accordance with statutory retention periods and then deleted.
3. Server Log Files
When visiting our website, information is automatically collected by the web server:
IP address
Date and time of the request
Accessed pages
Browser type and version
Operating system
This data is technically necessary to deliver the website correctly and to ensure system security.
This data is not combined with other data sources.
Legal basis: Art. 6(1)(f) GDPR
4. Customer Account (JTL-Shop 5)
When you create a customer account, the data you provide will be stored.
Legal basis: Art. 6(1)(b) GDPR
You may request deletion of your customer account at any time. Statutory retention obligations remain unaffected.
5. Newsletter
If you subscribe to our newsletter, we will use your email address exclusively for our own promotional purposes.
Legal basis: Art. 6(1)(a) GDPR (consent)
You can unsubscribe at any time.
6. Disclosure of Personal Data
6.1 Shipping Service Providers
For the purpose of delivering goods, we transfer your personal data to the respective shipping service provider.
This includes in particular:
Name
Delivery address
Email address
Telephone number
as well as any other data required for delivery
The transfer is carried out to ensure smooth shipping and, if necessary, to enable contact in the context of delivery (e.g. scheduling or inquiries).
Legal basis: Art. 6(1)(b) GDPR
6.2 Payment Method: PayPal
When paying via PayPal, your payment data will be transmitted to the following payment service provider:
PayPal (Europe) S.à r.l. et Cie, S.C.A.
22–24 Boulevard Royal
L-2449 Luxembourg
The transfer is carried out for payment processing.
Legal basis: Art. 6(1)(b) GDPR
6.3 Payment Method: Bank Transfer (Prepayment)
If you choose payment by bank transfer, we process your payment data solely for the purpose of handling the payment.
No data is transferred to third parties in this context.
Legal basis: Art. 6(1)(b) GDPR
7. Use of JTL Plugins
Our online shop may use plugins from the JTL shop system to provide additional functions and services (e.g. improving usability, processing orders, or integrating additional services).
Depending on the plugin used, personal data may be processed. This processing is carried out exclusively within the scope of the respective plugin function.
Where personal data is processed via plugins, this is done:
for the performance of a contract (Art. 6(1)(b) GDPR)
on the basis of our legitimate interest in an economically efficient and functional operation of our online shop (Art. 6(1)(f) GDPR) or
on the basis of your consent (Art. 6(1)(a) GDPR), where required
We ensure that only plugins that comply with data protection regulations are used.
8. Cookies
Our website uses only technically necessary cookies that are required for the operation of the online shop.
These include in particular:
Shopping cart functionality
Login status
Language settings
No analytics or tracking cookies are used.
Legal basis: Art. 6(1)(f) GDPR
9. Social Media Links
Our website contains only links to our own profiles on social networks (e.g. Facebook, Instagram).
These are simple links. Personal data (e.g. IP address) is only transmitted to the respective provider when you click on such a link.
We have no influence on the type, scope, and purpose of data processing by the respective provider.
10. Your Rights
You have the right at any time to:
Access (Art. 15 GDPR)
Rectification (Art. 16 GDPR)
Erasure (Art. 17 GDPR)
Restriction of processing (Art. 18 GDPR)
Data portability (Art. 20 GDPR)
Object (Art. 21 GDPR)
You also have the right to lodge a complaint with a supervisory authority.
11. Contact
If you have any questions regarding the collection, processing, or use of your personal data, please contact us using the contact details provided in the legal notice (Imprint).
11. Address Verification
On our website, we offer you the option of checking certain entries in the address forms of our webshop in real time for input errors. This is intended to prevent problems with the delivery of the products you have ordered due to incorrect information.
We also want to ensure that your contact details are valid for sending you information about your order or for any necessary follow-up questions.
To provide these functions, we use the service provider Endereco, Balthasar-Neumann-Straße 4b, 97236 Randersacker, Germany. The service provider processes the data exclusively in accordance with our instructions. The legal basis for the transmission, processing, and temporary storage of the data by the service provider is Art. 6(1)(b) GDPR, as it is strictly necessary for the performance of the contract or for carrying out pre-contractual measures that some of the data you enter into the input form be checked for accuracy.
The following data is processed by the service provider:
-
Address: country, city/town, postal code, street, and, where applicable, house number
The data is processed separately by the service provider and is not combined. The requests are deleted by the service provider as soon as the status of the entered data has been determined and storage in the webshop has been completed, but no later than after 30 days.