Privacy Notice
 
§ 1 General
Your personal data (e.g. title, name, address, e-mail address, telephone number, bank details, credit card number) will only be processed by us in accordance with the provisions of German data protection law and the data protection law of the European Union (EU). In addition to the purposes of processing, recipients, legal bases, storage periods, the following regulations also inform you about your rights and the person responsible for your data processing. This privacy policy applies only to our websites. If you are redirected to other pages via links on our pages, please inform yourself there about the respective handling of your data.
 
§ 2 Data processing for the performance of a contract
(1) Purpose of processing
Your personal data, which you provide to us during the ordering process, is necessary for the conclusion of a contract with us. You are not obliged to provide your personal data. However, we cannot send you the goods without providing your address. For some payment methods, we need the necessary payment data in order to pass it on to a payment service provider commissioned by us. The processing of your data entered during the order process is therefore carried out for the purpose of fulfilling the contract.
If you send us an inquiry by e-mail, via a contact form, etc. before the conclusion of the contract, we will process the data obtained in this way for the implementation of pre-contractual measures and answer e.g. Your questions about our products.
In the event of opening a customer account, your data (esp. name, address, payment method, e-mail and password) for the registration and creation of a customer login. With the stored data, you can shop with us faster and gain insight into your orders at any time. You can remove the account by sending us a message or using a delete function.
(2) Legal basis
The legal basis for this processing is Art. 6 para. 1 b) GDPR.
(3) Categories of recipients
Payment service provider, shipping service provider, hosting provider, if applicable, merchandise management system, possibly suppliers (dropshipping).
(4) Storage period
We store the data required for the execution of the contract until the expiry of the statutory warranty and, if applicable, contractual guarantee periods.
We store the data required by commercial and tax law for the legally determined periods, usually ten years (cf. §257 HGB, §147 AO).
The data processed for the implementation of pre-contractual measures will be deleted as soon as the measures have been carried out and it is evident that no contract has been concluded.
 
§ 3 Comments
(1) Purpose of processing
It is possible to write a comment. Your data (e.g. name/pseudonym, e-mail address, website) will then only be processed for the purpose of publishing your comment.
(2) Legal basis
The legal basis for this processing is Art. 6 para. 1 f) GDPR.
(3) Legitimate interest
Our legitimate interest is the public exchange of user opinions on certain topics and products. The publication serves, among other things, transparency and opinion-forming. Your interest in data protection is preserved, as you can publish your comment under a pseudonym.
(4) Storage period
There is no specific storage period. You can request the deletion of your comment at any time.
(5) RIGHT TO OBJECT
You have the right to object at any time to data processing that is carried out on the basis of Art. 6 (para. 1 f) GDPR and is not used for direct marketing purposes for reasons arising from your particular situation.
In the case of direct marketing, on the other hand, you can object to the processing at any time without giving reasons.
 
§ 4 PayPal Transactions
Please note that all PayPal transactions are subject to the PayPal Privacy Policy:
https://www.paypal.com/de/webapps/mpp/ua/privacy-full
 
§ 5 Web analysis with Google Analytics
(1) Purpose of processing
This website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Google Analytics 4 uses so-called "cookies", text files that are stored in your device and that enable us to analyse your use of the website. According to Google, Google Analytics 4 does not log or store individual IP addresses. Analytics doesn't provide accurate location data. Instead, the following metadata is derived from IP addresses: "city" (and the city's inferred latitude and longitude), "continent", "country", "region", "subcontinent" (and the ID-based equivalents). In the case of accesses originating from the EU, IP addresses are only used to derive location data and are then deleted immediately. They are not logged, are not accessible, and are not used for other use cases. When collecting metrics in Analytics, all IP lookups are performed on EU-based servers before traffic is routed to Analytics servers for processing. These servers are also located outside the EU.
On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide other services related to website activity and internet use to the website operator.
(2) Legal basis
The legal basis for this processing is your consent in accordance with Art. 6 para. 1a) GDPR.
(3) Categories of recipients
Google and its affiliates.
4. Transfer to a third country
Google Ireland Limited is an affiliate of Google LLC. Google LLC is located in the USA (1600 Amphitheatre Parkway, Mountain View, CA 94043). The basis for the transfer of personal data from the EU to the US is the EU-US data protection framework.
(5) Storage period
14 months
(6) RIGHT OF WITHDRAWAL
You can revoke your consent at any time with effect for the future via our cookie banner or via our website.
You can also prevent the storage of cookies in general by setting your browser software accordingly; however, we would like to point out that in this case you may not be able to use all the functions of this website to their full extent.
You can also prevent the collection of the data generated by the cookie and related to your use of the website by Google and the processing of this data by Google by downloading and installing the browser plugin available at the following link:Optout
 
§ 6 Web analysis
Microsoft Clarity, Microsoft Corporation (One Microsoft Way, Redmond, WA 98052-6399, USA)
(1)Purpose of processing
Microsoft Clarity processes your data for the following purposes:
Improving the usability of our websiteAnalysing user behaviour to better tailor content and features to visitors' needsDetecting and resolving technical problems on the websiteThe data collected is used exclusively for these purposes and not to personally identify individual users.
(2)Legal basis
Your data is processed on the basis of your consent in accordance with Art. 6 (1) (a) GDPR. This consent is given by your active behaviour, for example clicking on "Accept" in the cookie banner. You can revoke your consent at any time with effect for the future.
(3)Data transfer to third countries
The data can be transmitted to servers in the USA. The basis is the EU-US Data Privacy Framework.

(4)Right to object
You have the right to object to the processing of your personal data at any time. To withdraw your consent or object to data processing by Microsoft Clarity, you can:
Configure your browser settings so that no data is collected (e.g., by enabling the "Do Not Track" setting). Revisit the cookie banner on our website and change the appropriate settings. Contact us (see section 1) for further assistance. Please note that the objection has no effect on processing that has already taken place.
 
§ 7 Information about cookies
(1) Purpose of processing
Technically necessary cookies are used on this website. These are small text files that are stored in or from your internet browser on your computer system. These cookies make it possible, for example, to add several products to a shopping cart.
(2) Legal basis
The legal basis for this processing is Art. 6 para. 1 f) GDPR.
(3) Legitimate interest
Our legitimate interest is the functionality of our website. The user data collected by technically necessary cookies is not used to create user profiles. This safeguards your interest in data protection.
(4) Storage period
The technically necessary cookies are usually deleted when the browser is closed. Persistently stored cookies have a different lifespan of a few minutes to several years.
(5) RIGHT TO OBJECT
If you do not want these cookies to be stored, please disable the acceptance of these cookies in your internet browser. However, this may result in a functional restriction of our website. You can also delete permanently stored cookies at any time via your browser.
 

§ 8 Gravatar (only when used)
Purpose of processing
To display avatars in the comments section, we may use the Gravatar service from Automattic Inc., 60 29th Street #343, San Francisco, CA 94110, USA. A hash is formed from your email address and transmitted to Gravatar.
Legal basis
Art. 6 (1) (a) GDPR (consent).
Recipient categories
Automattic Inc. (USA)
Withdrawal
You can withdraw your consent at any time. Alternatively, you can use a pseudonym and an email address not associated with Gravatar in the comments section.

§ 9 Google Conversion Tracking
Purpose of processing
This website uses Google Ads Conversion Tracking, a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. If a user arrives at our website via a Google ad, a cookie is set for conversion tracking. This allows us to see how many users have taken a certain action (e.g. purchase, form filling).
Legal basis
The processing is carried out on the basis of your consent in accordance with Art. 6 (1) (a) GDPR.
Recipient categories
Google Ireland Limited, ggf. Google LLC (USA).
Data transfer to third countries
The data can be transmitted to servers in the USA. The basis is the EU-US Data Privacy Framework.
Withdrawal
You can withdraw your consent at any time via our cookie banner.

§ 10 Google Tag Manager
Purpose of processing
The Tag Manager does not process any data itself, but only manages tools – each of which has its own legal basis.
Legal basis
Recommendation for consent via cookie banners when Tag Manager loads privacy-related services (e.g. Google Analytics).
Recipient categories
Google Ireland Limited, ggf. Google LLC (USA).
Hint
If you object to the use of analytics or marketing services, this will also be implemented via the Tag Manager.

§ 11 Google reCAPTCHA
Purpose of processing
To protect against misuse of our forms (e.g. by bots), we use Google reCAPTCHA. Among other things, IP address, mouse movements, dwell time and, if necessary, other data are recorded.
Legal basis
Art. 6 (1) (a) GDPR (consent)
Recipient categories
Google Ireland Limited, ggf. Google LLC (USA).
Data transfer to third countries
United States; Secured via EU-US data protection framework.
Withdrawal
The consent can be revoked at any time.

§ 12 Adobe Fonts
Purpose of processing
We use so-called web fonts, which are provided by Adobe, for the uniform display of fonts. When you call up a page, your browser loads the required web fonts directly from the Adobe servers.
Legal basis
The processing is carried out on the basis of your consent in accordance with Art. 6 (1) (a) GDPR.
Recipient categories
Adobe Systems Software Ireland Limited, 4-6 Riverwalk, Citywest Business Campus, Dublin 24, Irland.
Data transfer to third countries
United States; The basis is the EU-U.S. Data Privacy Framework.
Withdrawal
You can withdraw your consent at any time via our cookie banner.

§ 13 YouTube (with extended data protection mode)
Purpose of processing
Our website embeds videos from the YouTube platform (Google Ireland Limited). Advanced privacy mode prevents YouTube from storing data without your active interaction. However, when a video is played, data (e.g. IP address, usage information) is transmitted to YouTube .
Legal basis
Your consent in accordance with Art. 6 (1) (a) GDPR.
Recipient categories
Google Ireland Limited, ggf. Google LLC (USA).
Data transfer to third countries
United States; The basis is the EU-US Data Privacy Framework.
Withdrawal
Consent can be revoked at any time via our cookie banner.

§ 14 Communication via WhatsApp Business Chat
Purpose of processing
For customer communication, we offer WhatsApp (WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland). If you contact us via WhatsApp, we will store your mobile number and communication history.
Legal basis
Your voluntary contact is considered consent in accordance with Art. 6 (1) (a) GDPR.
Recipient categories
WhatsApp Ireland Ltd. sowie ggf. Meta Platforms Inc. (USA)
Data transfer to third countries
United States; Secured via EU-US Data Privacy Framework.
Withdrawal
You can withdraw your consent at any time. Alternatively, please contact us by e-mail or telephone.

§15 Newsletter
(1) Purpose of processing
When you register for the newsletter, your e-mail address will be used for advertising purposes, i.e. within the framework of the newsletter, we will inform you in particular about products from our range. For statistical purposes, we can evaluate which links are clicked in the newsletter. It is not clear to us which specific person clicked. You have given the following consent separately or, if applicable, expressly in the course of the ordering process: Subscribe to the newsletter.
(2) Legal basis
The legal basis for this processing is Art. 6 para. 1 a) GDPR.
(3) Categories of recipients
If applicable, newsletter dispatch provider
(4) Storage period
Your e-mail address will only be stored for the duration of the desired registration for the purpose of sending the newsletter.
(5) Double opt-in procedure
In order to record your consent to receive our newsletter in a legally compliant and comprehensible manner, we use the so-called double opt-in procedure. After registering via our online form, you will receive a confirmation email to the email address provided. Only when you click on the confirmation link contained in this e-mail will your registration be fully completed. This ensures that only you, as the owner of the email address, can subscribe to the newsletter.

(6) Right of withdrawal
You can revoke your consent at any time with effect for the future. If you no longer wish to receive the newsletter, you can unsubscribe as follows: Via an unsubscribe link in the newsletter
 
§16 Note on order processing agreements for third-party services

To provide our services, we use external service providers (e.g. forhosting, newsletter dispatch or web analysis). This ensures that these third-party providers process personal data exclusivelyon the basis of our instructions and within the framework of a contractually agreed order processing agreement (DPA) in accordance with Art. 28 GDPR. This ensures that your data is protected in accordance with the high requirements of data protection. Such a contract regulates the processing purposes, data security and compliance with legal requirements, among other things.


§ 17 Your rights as a data subject

If your personal data is processed, you are a data subject within the meaning of the GDPR and you have the following rights vis-à-vis us as the controller:
1. Right to information
You can request information about your personal data processed by us within the framework of Art. 15 GDPR.
2. Right to rectification
If the information concerning you is not (or no longer) accurate, you can request correction in accordance with Art. 16 GDPR. If your data is incomplete, you can request that it be completed.
3. Right to erasure
You can request the deletion of your personal data under the conditions of Art. 17 GDPR.
4. Right to restriction of processing
Within the framework of the requirements of Art. 18 GDPR, you have the right to demand a restriction of the processing of data concerning you.
5. Right to data portability
In accordance with Art. 20 GDPR, you have the right to receive the personal data concerning you that you have provided to us in a structured, commonly used and machine-readable format or to request that it be transmitted to another controller.
6. Right to revoke the declaration of consent under data protection law
In accordance with Art. 7 (3) GDPR, you have the right to revoke your declaration of consent under data protection law at any time. This does not affect the lawfulness of the processing carried out on the basis of consent before its revocation.
7. Right to lodge a complaint with a supervisory authority
If you believe that the processing of personal data concerning you violates the GDPR, you have the right to lodge a complaint with a supervisory authority (in particular in the Member State of your residence, your place of work or the place of the alleged infringement) in accordance with Art. 77 GDPR.
Please also note your right to object according to Art. 21 GDPR:
a) General: reasoned objection required
Is the processing of personal data concerning you
- to safeguard our overriding legitimate interest (legal basis according to Art. 6 para. 1 f) GDPR) or
- in the public interest (legal basis according to Art. 6 para. 1 e) GDPR),
you have the right to object to processing at any time on grounds relating to your particular situation; this also applies to profiling based on the provisions of the GDPR.
In the event of an objection, we will no longer process the personal data concerning you, unless we can demonstrate compelling legitimate grounds for the processing that outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.
b) Special case of direct advertising: simple objection is sufficient
If the personal data concerning you is processed for the purpose of direct marketing, you have the right to object to such processing at any time and without giving any reason; this also applies to profiling, insofar as it is related to such direct advertising.
If you object to the processing for direct marketing purposes, the personal data concerning you will no longer be processed for these purposes.

Data protection supervisor
A data protection officer is not required for our company according to the legal requirements. We do not process personal data to an extent that would make it necessary to appoint a mandatory data protection officer under the German Federal Data Protection Act (BDSG) or the General Data Protection Regulation (GDPR). Our data processing processes are designed in accordance with legal requirements and are regularly reviewed. If the legal framework changes or the requirements for the appointment of a data protection officer are met, we will of course take the necessary measures immediately.

 
Data Controller:
Andreas Klöss
LöSi Getriebe-Steuerungungen-Hydraulik GmbHMerkurstraße 5267663 KaiserslauternPhone: +49 631 351240
shop@loesi.de




Last updated: June 2025