Data protection

We take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this privacy policy. Personal data is only collected and processed on this website to the extent necessary. The following statement provides an overview of how we ensure this protection and what type of data is collected for what purpose. 

 

Name and address of the responsible body 

Responsible body within the meaning of the General Data Protection Regulation ("GDPR"): 

Kermi Shower Design GmbH
Kurt-Kerschl-Straße 7
D-94447 Plattling 

Email: info@kermi-duschdesign.com

Telephone: +49 9931 7026-0 

Data protection officer 

Statutory data protection officer: 

IDR – Weller, Institute for Data Protection
Law Sascha Weller, Mag. Jur.
Ziegelbräustraße 7
85049 Ingolstadt
Email: dataprotection@kermi-duschdesign.com
Tel.: +49 841 - 885 167 15 

 

Any data subject may contact our data protection officer directly at any time with any questions or suggestions regarding data protection. 

 

1. Personal data 

When you use this website, various personal data is collected. Personal data is data that can be used to identify you personally. In your case, this could be your name, your e-mail address or your telephone number, for example. 

2. Children 

Children (up to the age of 18) should not send us any personal data without the consent of their parents or guardians. We encourage all parents and guardians to instruct their children in the safe and responsible use of personal data on the Internet. In any case, we will not knowingly collect personal data from children or use it in any way or disclose it to third parties. 

3. Collection and processing of personal data 

a) When visiting our website 

When you visit our website, we process data that your browser automatically transmits to us. This data includes your IP address, the time of the server request, browser type and browser version, operating system used, referrer URL and host name of the accessing computer. We only process personal data about the use of our website to the extent necessary to enable the user to use the service. 

This data is collected and processed for internal statistical purposes. The basis for data processing is the processing of data for the fulfilment of a contract or pre-contractual measures. Another basis for data processing is our legitimate interest in processing the data to ensure the stability and security of the website. 

We also use cookies in some cases. Cookies are small text files that are stored on your computer and saved by your browser. Our website uses cookies in several places. They serve to make our offer more user-friendly, effective and secure. Most of the cookies we use are so-called "session cookies". They are automatically deleted at the end of your visit. Cookies do not cause any damage to your computer and do not contain viruses. We have a legitimate interest in storing cookies for the technically error-free and optimised provision of the services on our website. 

How can I prevent cookies from being stored? 

If you wish to block cookies, you can change your browser settings accordingly. Here you will find instructions on how to set cookies in the most important browsers: 

• Internet Explorer
• Chrome
• Safari
• Safari (mobile version)
• Firefox
• Blackberry
• Android 
• Opera 

Blocking cookies means that no information about your device or browsing behaviour is stored when you visit our website. Blocking cookies affects the functionality of our website. This may mean that you are unable to use all the functions and services we offer. 

Other cookies that are stored (e.g. cookies for analysing your surfing behaviour) are dealt with separately in this privacy policy. 

b) When registering on this website 

You can register on our website (e.g. specialist dealer login) to use additional functions on the site. We only use the data entered for this purpose for the use of the respective offer or service for which you have registered. Any mandatory information requested during registration must be provided in full. Otherwise, we will reject your registration. 

For important changes, such as to the scope of the offer, or in the event of technically necessary changes, we will use the email address provided during registration to inform you. 

The data entered during registration is processed on the basis of your consent. You can revoke your consent at any time. To do so, simply send an informal email to dataprotection@kermi-duschdesign.com. The legality of the data processing that has already taken place remains unaffected by the revocation. 

The data collected during registration is stored by us in CRM in Germany for as long as you are registered on our website and is then deleted. Statutory retention periods remain unaffected. 

c) When using a contact form/sending an email 

If you send us an email or fill out the contact form, your voluntarily submitted data (e.g. title, first name, surname, telephone number, company name) will only be used for correspondence with you. Otherwise, we would explicitly point this out to you and ask for your consent. 

As communication by e-mail does not use a secure data connection, please refrain from sending confidential information in this way. Contacts are stored in the inboxes of the respective e-mail addresses. The Arbonia Group's e-mail infrastructure is hosted in Switzerland and Germany. 

Your personal data is processed on the basis of your consent. You can revoke this consent at any time. To do so, simply send an informal email to dataprotection@kermi-duschdesign.com. The legality of the data processing operations carried out up to the point of revocation remains unaffected by the revocation. 

The data you enter in the contact form will remain with us until you request us to delete it, revoke your consent to its storage or the purpose for data storage no longer applies (e.g. after your enquiry has been processed). Statutory retention periods remain unaffected. 

d) Processing of customer and contract data 

We collect, process and use personal data to the extent that it is necessary for the establishment, content or modification of a legal relationship, for the management of customers and customer relationships, and for the sales and marketing activities of the company. 

We process such personal data to enable the processing of transactions, the execution of sales activities, deliveries, the provision of customer service, invoicing and contacting customers in the context of contract fulfilment, marketing and otherwise maintaining customer relationships. We also use personal data, where applicable, to handle incidents and claims and to provide support requested by customers. 

Personal data is obtained directly from the customer or collected with their use of our products and services. Personal data may also be obtained from public registers and other reliable external sources. The processing of personal data is necessary for the performance of the purchase contracts to which the customer company is a party. Furthermore, the processing of personal data is necessary for the legitimate interests we pursue in the context of the company's business objectives. 

Our customer data is stored in a CRM system (salesforce.com Germany GmbH, Erika-Mann-Strasse 31, DE-80636 Munich, Germany) and the CleverReach tool from CleverReach GmbH & Co. KG, Schafjückenweg 2, 26180 Rastede, Germany), which is hosted in Germany. The customer data collected is deleted after completion of the order or termination of the business relationship. Statutory retention periods remain unaffected. 

As a matter of principle, we use personal data exclusively for internal business purposes and do not transfer the data to external parties. Arbonia Group companies may access and process personal data to the extent necessary to fulfil the above-mentioned purposes. We only transfer personal data to third parties outside Arbonia Group companies if this is necessary for the execution of the contract, for example to the companies entrusted with the delivery of the goods or the credit institution with whom we have contracted for payment processing. No further transfer of data takes place, or only if you have expressly consented to the transfer. The design of any transfer of personal data is carried out with respect to the applicable data protection laws, and appropriate contractual, technical and organisational measures are in place. 

e) Data processing in the application process 

We collect and process the personal data of applicants for the purpose of handling the application process. If an employment contract is concluded with an applicant, the data transmitted will be stored for the purpose of handling the employment relationship in compliance with the statutory provisions. 

If no employment contract is concluded with the applicant, the application documents will be automatically deleted six months after notification of the rejection decision, provided that no other legitimate interests of the responsible body prevent deletion. The processing of personal data for the above-mentioned purposes is based on consent or on legitimate interests of the responsible body that prevent deletion. 

We may cooperate with other Arbonia Group companies and other third-party data processors (e.g. IT service providers). We design any transfer of personal data in accordance with the applicable data protection laws, and appropriate contractual, technical and organisational measures are in place. 

Personal data is stored primarily in Germany, Switzerland and Czechia. 

Information about rexx: 

This website uses the services of rexx systems GmbH, Headquarters, Süderstrasse 75–79, 20097 Hamburg, Germany ("rexx"). The Swiss branch, rexx systems Schweiz AG, is located at Sparrenbergstrasse 5 in 8103 Zurich. After you enter and send your data, it can go straight to rexx's servers through an encrypted connection, which only stores the data in encrypted form on the server in Host Europe GmbH's data centre (in Cologne). If this is the case, all data is encrypted using SSL. If you log in with the user data provided after registering, the SSL encryption procedure is also used for this. 

The design of the transmission of personal data involves compliance with the applicable data protection laws, and appropriate contractual, technical and organisational measures are in place. Both the responsible body and the provider use technical and organisational security measures to protect your collected data against accidental or intentional manipulation, loss, destruction or access by unauthorised persons. Our security measures are continuously improved in line with technological developments. 

f) Data processing for the delivery of newsletters and mailings 

If you subscribe to a newsletter offered on the website, the data provided during the newsletter or mailing registration will only be used for sending the newsletter, unless you agree to further use. You agree that we may also transfer this personal data to other Arbonia Group companies and that other Arbonia Group companies may also process this data for the same purpose and that we may send you newsletters about the entire range of services offered by the Arbonia Group companies. We do not pass on your personal data to third parties outside the Arbonia Group companies. 

If you subscribe to email newsletters that require you to provide personal data, you will receive a confirmation email to the email address you provided. Your registration is only complete once you have clicked on the link contained in this email. Processing is carried out exclusively on the basis of your consent. You can revoke your consent to the storage of data, your email address and its use for sending the newsletter at any time using the unsubscribe option provided in the newsletter. The legality of data processing operations that have already taken place remains unaffected by the revocation. 

The data you provide when registering for the newsletter will be stored by us in our CRM system in Germany until you unsubscribe from the newsletter and will be deleted after you unsubscribe. Data stored by us for other purposes or with other consent (e.g. email addresses for another newsletter or for other functions on the website) remains unaffected by this. 

Newsletter - performance measurement 

The newsletters contain a so-called "web beacon", i.e. a pixel-sized file that is retrieved from our server or, if we use a mailing service provider, from their server when the newsletter is opened. The servers are located in the EU. As part of this retrieval, technical information such as information about your browser and your system, as well as your IP address and the time of retrieval, is initially collected. 

This information is used to improve the services on the basis of the technical data or the target groups and their reading behaviour based on their retrieval locations (which can be determined with the IP address) or access times. The statistical surveys also include determining whether the newsletters are opened, when they are opened and which links are clicked. For technical reasons, this information can be assigned to individual newsletter recipients. However, it is neither our intention nor, if used, that of the mailing service provider to monitor individual users. Rather, the evaluations serve to identify the reading habits of our users and to adapt our content to them or to send different content according to the interests of our users. 

Unfortunately, it is not possible to separately revoke the performance measurement; in this case, the entire newsletter subscription must be cancelled. 

Newsletter – dispatch 

To send our newsletter and process the above-mentioned data, we use the Account Engagement tool from the service provider Salesforce (salesforce.com Germany GmbH, Erika-Mann-Strasse 31, DE-80636 Munich, Germany) and the CleverReach tool from CleverReach GmbH & Co. KG, Schafjückenweg 2, 26180 Rastede, Germany) and the CleverReach tool from CleverReach GmbH & Co. KG, Schafjückenweg 2, 26180 Rastede, Germany). We would also like to point out that we evaluate your user behaviour when sending the newsletter. We use Account Engagement for this purpose. The evaluations help us to identify the reading habits of our users and to tailor our content to you or to send different content according to the interests of our users. You can read more about this in our cookie privacy policy. 

4. Evaluation of usage data and use of analysis tools 

We want to tailor the content of our website as precisely as possible to your interests and thus improve our offering for you. We use various web analysis services for the purpose of this needs-based design and ongoing optimisation of our website. You can find more information about these analysis tools in our cookie privacy policy.

5. Disclosure of personal data and data processing by third parties 

We treat your personal data as confidential and only pass it on if you have consented to this, if we are legally obliged or entitled to do so, or if this is necessary to enforce our rights, in particular to enforce claims arising from the contractual relationship. 

In addition, we pass on your personal data to third parties to the extent that this is necessary or appropriate in the context of using the website or for the possible provision of the services you have requested (including outside the website). 

In doing so, we naturally comply with the legal provisions governing the disclosure of personal data to third parties. If we use processors to provide our services, we take appropriate legal precautions and technical and organisational measures to ensure that your data is protected in accordance with the relevant legal provisions. 

If the level of data protection in a country where the data is processed does not comply with the applicable data protection regulations, we contractually ensure that the protection of your personal data complies with that in Switzerland or the EU/EEA at all times, for example by incorporating the EU standard contractual clauses. 

In the event of any data exchange within the Group, we ensure that your data is protected with appropriate contracts and in compliance with the applicable data protection regulations. 

6. Third-party services or content on our website 

We offer third-party services and/or content on our website. If you use such third-party services or if third-party content is displayed, communication data between you and the respective provider is exchanged for technical reasons. We do not control the websites or the data protection practices of the third parties who manage these websites. This privacy policy does not apply to linked third-party sites or services. 

The respective provider of the services or content may also collect additional data and process it for other purposes of its own. To the best of our knowledge, we have configured the services and content of providers who process data for their own purposes in such a way that either communication for purposes other than the display of the services or content on our website is blocked, or personal data is only collected if you have decided to use the respective service. However, as we have no control over data collected and processed by third parties, we are unable to provide binding information about the scope and purpose of such processing of your data by the respective third-party providers. 

a) Website links 

For your optimal information, our pages contain links to third-party sites. As these are websites of other providers, we have no influence whatsoever on their content, for which the respective provider is solely responsible. This privacy policy does not apply to the linked third-party sites. 

b) Tools 

Our website uses various tools to enhance its functionality. 

Information about Google Web Fonts 

Our website uses the "Web Fonts" function provided by Google to ensure a uniform presentation of fonts. When you visit a page, your browser loads the required web fonts into your browser cache in order to display texts and fonts correctly. For this purpose, the browser you are using establishes a connection to Google's servers. This enables Google to know that our website has been accessed via your IP address. 

The use of Google Web Fonts is in the interest of a uniform and appealing presentation of our online offerings. This constitutes a legitimate interest. If your browser does not support web fonts, a standard font from your computer will be used. 

The provider of this function is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Further information on Google's handling of user data can be found in Google's privacy policy. 

Information about Google Maps 

Our website uses functions of the Google Maps map service. To use the functions of Google Maps, it is necessary to store your IP address. This information may be transmitted to a Google server in the USA and stored there. We have no influence on this data transfer. 

The use of Google Maps is in the interest of an appealing presentation of our online offers and to make it easy to find the locations we have indicated on the website. This constitutes a legitimate interest. 

The provider of this function is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. We have concluded a data processing agreement with Google. Further information on the handling of user data by Google can be found in Google's privacy policy. 

c) Social plugins 

Our website also uses various social media plugins ("buttons") from social media platforms such as Facebook, LinkedIn and X. Social media platforms (e.g. Facebook, X, Instagram, Pinterest, YouTube or LinkedIn) allow users of these social media platforms to create links on their social media profiles in order to save them or share them with their social media contacts. 

When you visit our website, the buttons for such social media are disabled by default. No data is sent to the corresponding social networks without your intervention. Before you can use these buttons, you must activate them by clicking on them. They then remain active until you deactivate them again. 

After activation, a direct connection to the server of the respective social network is established. The content of the button is then transmitted directly from the social network to your browser and integrated into the website. After activating a button, the social network can retrieve data regardless of whether you interact with the button or not. If you are logged into a social network, the network can associate your visit to the website with your user account. 

If you are a user of a social network and do not want the data from your visit to our website to be combined with your user data, you must log out of the relevant social network before activating the buttons. 

We have no influence on the scope of data collected by social networks via their buttons. The data usage policies of social networks provide information about the purpose and extent of the data they collect, how this data is processed and used, the rights available to you and the settings you can use to protect your privacy. For further information on the scope and purpose of such collection and processing of your data, please refer to the privacy policies of the providers whose services and/or content we hold responsible for the protection of your data in this context. 

Information about Facebook plugins (Like & Share button) 

Our website uses functions of the social network Facebook. You can recognise the Facebook plugins by the Facebook logo or the "Like" button on our site. When you visit our pages and are logged into Facebook, the plugin establishes a direct connection between your browser and the Facebook server. Facebook thereby receives the information that you have visited our site with your IP address. If you click the Facebook "Like" button while you are logged into your Facebook account, you can link the content of our pages to your Facebook profile. This allows Facebook to associate your visit to our pages with your user account. You can prevent this by logging out of your Facebook user account. Please note that we have no knowledge of the content of the data transmitted or its use by Facebook. 

The provider of these functions is Meta Platforms Inc., 1 Hacker Way, Menlo Park, California 94025, USA. Further information on how Facebook handles user data can be found in Facebook's privacy policy. 

Information about Instagram 

Our website uses features of the Instagram service. If you are logged into your Instagram account, you can link the content of our pages with your Instagram profile by clicking on the Instagram button. This allows Instagram to associate your visit to our website with your user account. Please note that we have no knowledge of the content of the data transmitted or its use by Instagram. 

The provider of these functions is Instagram Inc., 1601 Willow Road, Menlo Park, CA 94025, USA. Further information on Instagram's handling of user data can be found in Instagram's privacy policy. 

7. Deletion of personal data 

Unless we have specified specific retention periods in this privacy policy, the following general rules apply: 

Your data will generally be deleted as soon as it is no longer required for the intended purposes or if you revoke your consent or object to its use on the basis of legitimate interest. Beyond this point in time, storage will only take place if this is required by a legal provision to which we are subject (e.g. tax and commercial law provisions) or if data is required to establish, exercise or defend legal claims. 

8. Data security 

We take technical and organisational security measures to protect your personal data against manipulation, loss, destruction or access by unauthorised persons and to ensure the protection of your rights and compliance with the applicable data protection regulations. 

The measures taken are designed to ensure the confidentiality and integrity of your data and to guarantee the long-term availability and resilience of our systems and services when processing your data. They are also intended to ensure the rapid restoration of the availability of your data and access to it in the event of a physical or technical incident. 

Our data processing and security measures are continuously improved in line with technological developments. 

We also take our own internal data protection very seriously. Our employees and the service providers we commission are obliged to maintain confidentiality and comply with data protection regulations. Furthermore, they are only granted access to personal data to the extent necessary. 

9. Your rights 

Below, we outline your rights with regard to your personal data. Please note that data protection regulations and practices are subject to change. It is therefore advisable and necessary to keep yourself informed about changes in legal regulations and company practices. 

Rights of information and correction 

You can obtain information about your data stored by us at any time without giving reasons by contacting dataprotection@kermi-duschdesign.com. You also have the right to request the correction of your incorrect personal data and, if necessary, the completion of incomplete personal data in our systems. 

Right to restriction of processing 

You can request the restriction of the processing of your personal data via dataprotection@kermi-duschdesign.com. If the processing of personal data concerning you has been restricted, this data – apart from its storage – may only be processed with your consent or for the assertion, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest. 

Right to erasure 

You have the right to request via dataprotection@kermi-duschdesign.com that your personal data be erased, e.g. if the data is no longer required for the purposes pursued. However, if we are obliged to retain your personal data due to legal or contractual retention obligations, we can therefore only restrict or block your personal data to the extent necessary in such cases. 

Right to information 

If you have asserted your right to rectification, erasure or restriction of processing against us, you have the right to be informed via dataprotection@kermi-duschdesign.com about the recipients to whom we have disclosed your personal data. 

Right to data portability 

You have the right to receive your personal data, which we process automatically on the basis of your consent or for the performance of a contract, in a structured, commonly used and machine-readable format via dataprotection@kermi-duschdesign.com, or to request the transfer of this data to a third party. If you request the direct transfer of the data to another controller, this will only be done if it is technically feasible. 

Right to object 

You have the option to object to the collection and storage of data as described in the privacy policy. You can also revoke your consent to the collection and use of data at any time, without giving reasons, for the future at dataprotection@kermi-duschdesign.com. 

Right to lodge a complaint 

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, your place of work or the place of the alleged infringement, if you consider that the processing of personal data relating to you infringes the applicable data protection laws. 

10. Changes to the privacy policy 

This privacy policy may be subject to changes, for example due to changes in the law or changes in processing. We therefore ask you to read this page regularly. 

11. Contact 

Your trust is important to us. We are therefore happy to answer any questions you may have regarding the processing of your personal data at any time. If you have any questions that are not answered by this privacy policy or if you would like more detailed information on a particular point, please contact us by email at dataprotection@kermi-duschdesign.com. 

As of: September 2024