Privacy policy

Privacy Policy

1. General Information on the Collection and Processing of Personal Data

1.1

The following information explains the collection of personal data when you use our website.
Personal data refers to all data that can be related to you personally, e.g., name, address, e-mail addresses, user behavior.

Controller pursuant to Art. 4 (7) EU General Data Protection Regulation (GDPR):
Josef Schmitt Werkzeug GmbH
Weinbrennerstraße 4, 68753 Waghäusel, Germany
Phone: +49 (0) 7254 957618 – 0
Fax: +49 (0) 7254 957618 – 9
Email: shop@jswerkzeug.de

(See also our legal notice, hereinafter referred to as “we” or “us.”)

1.2

When you contact us by e-mail or via a contact form, the data you provide (e-mail address, name, and, if provided, your telephone number) will be stored by us in order to respond to your inquiries.
The legal basis for this is Art. 6(1) sentence 1 lit. a GDPR.
If the information you provide serves the fulfillment of a contract to which you are a party or the implementation of pre-contractual measures, Art. 6(1) lit. b GDPR serves as an additional legal basis.

We delete the data arising in this context once storage is no longer necessary, or restrict processing if statutory retention obligations exist.

Please note that data transmission over the Internet (e.g., communication by e-mail) may have security vulnerabilities. Complete protection of data against access by third parties is not possible.
If you contact us by e-mail or provide us with your e-mail address via the contact form, we assume—unless you explicitly indicate otherwise—that we may reply to you by e-mail, even though unencrypted e-mail communication may potentially be read by third parties.

2. Collection and Processing of Personal Data When Visiting Our Website

2.1

When using the website for informational purposes only, i.e., if you do not register or otherwise provide us with information, we collect only the personal data that your browser transmits to our server.
When you view our website, we collect the following data:

  • Date and time of the request
  • Time zone difference to Greenwich Mean Time (GMT)
  • Content of the request (specific page)
  • Access status/HTTP status code
  • Amount of data transmitted
  • Referring website (from which the request originates)
  • Browser type and version, including language
  • Operating system and its interface
  • Websites accessed by the user’s system via our website
  • Behavior on our website (duration of visit and clicks)

This data is stored in the log files of our system. It is not stored together with other personal data of the user.

2.2

The legal basis for collecting and storing this data is Art. 6(1) lit. f GDPR.

2.3

This data is technically necessary for us to display our website to you and to ensure stability and security. Storage in log files serves to ensure the website’s functionality.
Furthermore, the data helps us to optimize the website and maintain the security of our IT systems.
These purposes also constitute our legitimate interest in data processing pursuant to Art. 6(1) lit. f GDPR.

2.4

The data will be deleted as soon as it is no longer required to achieve the purpose of its collection.
In the case of data collected for the provision of the website, this occurs when the respective session ends.
If data is stored in log files, this happens after seven days at the latest.
Longer storage is possible; in such cases, IP addresses are anonymized so that identification of the client is no longer possible.

2.5

The collection and storage of this data is strictly necessary for the operation of the website.
Therefore, there is no option to object. If you do not agree, we recommend leaving the website.

3. Collection and Processing of Additional Personal Data Through Cookies

3.1

In addition to the aforementioned data, cookies are stored on your device when you use our website.
Cookies are small text files that are stored on your hard drive and assigned to the browser you use. They allow certain information to flow to the entity that sets the cookie (in this case, us).
Cookies cannot execute programs or transmit viruses to your computer.
They serve to make the overall online experience more user-friendly and effective, and to analyze user behavior on our website.

When visiting our website, you are informed about the use of cookies via an information banner and referred to this Privacy Policy.

3.2

There are different types of cookies, which vary in scope and functionality.

Session cookies are automatically deleted when you close the browser. They store a session ID, which allows various requests from your browser to be assigned to the same session. This enables your computer to be recognized when you return to our website. Session cookies are deleted when you log out or close your browser.

Persistent cookies are automatically deleted after a specified duration, which varies depending on the cookie.
You can delete cookies in your browser’s security settings at any time.

This website uses the following persistent cookies:

  • Google Analytics
  • Shopify CDN
  • Shopify Storefront
  • Shopify Tracking

3.3

The legal basis for processing personal data using cookies is Art. 6(1) lit. f GDPR.
Where cookies are used for analytical purposes and you have given your consent, the legal basis is Art. 6(1) lit. a GDPR.

3.4

The purpose of using cookies is to simplify the use of websites for users.
We use both technically necessary cookies (“essential cookies”) and those that allow analysis of user behavior (“functional cookies”).
Cookies enable website functions such as product variant selection, cart functionality, and order processing, as well as user recognition and storage of language settings or shopping cart contents.

This website uses the following essential and functional cookies:

Functional cookies:

  • Google Maps
  • Instagram Content
  • Shopify Tracking
  • YouTube Video

Essential cookies:

  • Shopify
  • Shopify CDN
  • Shopify Storefront
  • Usercentrics Consent Management

Analytical cookies are used to improve the quality of our website and its content.
They allow us to learn how the website is used and to optimize our offerings accordingly.
The collected data is pseudonymized through technical measures, preventing identification of the user.
Such data is not stored together with other personal data.
This constitutes our legitimate interest under Art. 6(1) lit. f GDPR.

3.5

Cookies are stored on your computer and transmitted to our website.
You therefore have full control over the use of cookies. By adjusting the settings of your internet browser, you can disable or restrict the transmission of cookies.
Stored cookies can be deleted at any time, including automatically.
If cookies are disabled, some website functions may no longer be fully available.

4. Use of Google Analytics

4.1

This website uses Google Analytics, a web analytics service provided by Google Inc. (“Google”).
Google Analytics uses “cookies,” text files that are stored on your computer and allow analysis of website usage.
The information generated by the cookie is usually transmitted to a Google server in the USA and stored there.
If IP anonymization is activated, Google will shorten your IP address within EU or EEA member states before transmission.
Only in exceptional cases is the full IP address sent to a Google server in the USA and shortened there.

Google will use this information on behalf of the website operator to analyze website usage, compile activity reports, and provide other services related to website and internet use.
The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

4.2

You can prevent the storage of cookies by selecting the appropriate settings in your browser software.
However, please note that if you do so, you may not be able to use all the functions of this website fully.
You can also prevent Google’s collection and processing of cookie-generated data (including your IP address) by downloading and installing the browser plug-in available here:
http://tools.google.com/dlpage/gaoptout?hl=en

4.3

This website uses Google Analytics with the extension “_anonymizeIp()”, ensuring that IP addresses are processed in a shortened form and cannot be linked to individuals.
Any personal reference in collected data is immediately excluded and deleted without delay.

4.4

We use Google Analytics to analyze and regularly improve the use of our website.
The resulting statistics allow us to improve our offerings and make them more interesting for users.
In exceptional cases where personal data is transferred to the USA, Google complies with the EU-US Privacy Shield Framework.
The legal basis for using Google Analytics is Art. 6(1) sentence 1 lit. f GDPR.

4.5

Third-party provider information:
Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland
Fax: +353 (1) 436 1001
Terms of Service: http://www.google.com/analytics/terms/en.html
Privacy Overview: http://www.google.com/intl/en/analytics/learn/privacy.html
Privacy Policy: http://www.google.com/intl/en/policies/privacy

5. Your Rights

5.1

You have the following rights regarding your personal data:

  • Right of access (Art. 15 GDPR) – to obtain detailed information about the data we hold about you.
  • Right to rectification or erasure (Art. 16–17 GDPR) – to correct, complete, or delete your personal data.
  • Right to restriction of processing (Art. 18 GDPR) – e.g., to limit processing while accuracy or legitimacy is verified.
  • Right to data portability (Art. 20 GDPR) – to receive your personal data in a structured, commonly used, and machine-readable format.

5.2

You also have the right to lodge a complaint with a supervisory authority, e.g.,
The State Commissioner for Data Protection and Freedom of Information Baden-Württemberg
(www.baden-wuerttemberg.datenschutz.de).

5.3

If you have given consent to data processing, you may withdraw your consent at any time (Art. 7(3) GDPR).
Such withdrawal will only affect the lawfulness of processing after the withdrawal has been declared.

You may also object to the processing of your personal data for advertising or data analysis purposes at any time.
Please send your objection or any inquiries regarding data collection, processing, correction, restriction, or deletion to the contact details provided in Section 1.

5.4

Where we base the processing of your personal data on legitimate interests, you have the right to object to such processing (Art. 21 GDPR).
If you exercise this right, please provide reasons why we should not process your data as we have been doing.
In case of a justified objection, we will review the situation and either stop or adapt data processing or demonstrate compelling legitimate grounds that override your interests.