Privacy Policy
1) Introduction and Contact Details of the Controller
1.1 We are pleased that you are visiting our website and thank you for your interest. Below, we inform you about how your personal data is handled when using our website. Personal data means all data by which you can be personally identified.
1.2 The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Ambe Parkett GmbH, Brauhausstraße 4, 29221 Celle, Germany, Tel.: 051417096063, Email: [email protected]. The controller responsible for the processing of personal data is the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data.
2) Data Collection When Visiting Our Website
2.1 When you use our website for informational purposes only, meaning if you do not register or otherwise transmit information to us, we only collect the data that your browser transmits to the website server, known as “server log files”. When you access our website, we collect the following data, which is technically necessary for us to display the website to you:
- Our visited website
- Date and time of access
- Amount of data sent in bytes
- Source/referrer from which you accessed the page
- Browser used
- Operating system used
- IP address used, if applicable in anonymized form
Processing is carried out pursuant to Art. 6(1)(f) GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data is not passed on or otherwise used. However, we reserve the right to subsequently check the server log files if there are concrete indications of unlawful use.
2.2 For security reasons and to protect the transmission of personal data and other confidential content, such as orders or enquiries sent to the controller, this website uses SSL or TLS encryption. You can recognize an encrypted connection by the character sequence “https://” and the lock symbol in your browser bar.
3) Hosting & Content Delivery Network
Cloudflare
We use a content delivery network provided by the following provider: Cloudflare Inc., 101 Townsend St., San Francisco, CA 94107, USA.
This service enables us to deliver large media files such as graphics, page content or scripts more quickly via a network of regionally distributed servers. Processing is carried out to safeguard our legitimate interest in improving the stability and functionality of our website pursuant to Art. 6(1)(f) GDPR. We have concluded a data processing agreement with the provider, which ensures the protection of our website visitors’ data and prohibits unauthorized disclosure to third parties.
For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision by the European Commission.
4) Cookies
To make visiting our website attractive and to enable the use of certain functions, we use cookies, i.e. small text files that are stored on your device. Some of these cookies are automatically deleted after closing the browser, known as “session cookies”, while others remain on your device for a longer period and allow page settings to be stored, known as “persistent cookies”. In the latter case, you can find the storage period in the overview of your web browser’s cookie settings.
If personal data is also processed by individual cookies used by us, processing is carried out pursuant to Art. 6(1)(b) GDPR either for the performance of a contract, pursuant to Art. 6(1)(a) GDPR in the case of consent given, or pursuant to Art. 6(1)(f) GDPR to safeguard our legitimate interests in the best possible functionality of the website as well as a customer-friendly and effective design of the website visit.
You can configure your browser so that you are informed about the setting of cookies and decide individually whether to accept them, or exclude the acceptance of cookies for specific cases or in general.
Please note that if cookies are not accepted, the functionality of our website may be restricted.
5) Contacting Us
5.1 Trustpilot
For review reminders, we use the services of the following provider: Trustpilot A/S, Pilestræde 58, 1112 Copenhagen, Denmark.
Exclusively on the basis of your explicit consent pursuant to Art. 6(1)(a) GDPR, we transmit your email address and, where applicable, further customer data to the provider so that the provider can contact you by email with a review reminder.
You may revoke your consent at any time with future effect either towards us or towards the provider.
We have concluded a data processing agreement with the provider, which ensures the protection of our website visitors’ data and prohibits unauthorized disclosure to third parties.
5.2 WhatsApp Business
You have the option of contacting us via the WhatsApp messaging service of WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. For this purpose, we use the so-called “Business version” of WhatsApp.
If you contact us via WhatsApp in connection with a specific transaction, such as an order placed, we store and use the mobile phone number you use with WhatsApp and, if provided, your first and last name pursuant to Art. 6(1)(b) GDPR to process and respond to your request. On the basis of the same legal basis, we may ask you via WhatsApp to provide further data, such as order number, customer number, address or email address, in order to assign your request to a specific process.
If you use our WhatsApp contact for general enquiries, such as about our range of services, availability or our website, we store and use the mobile phone number you use with WhatsApp and, if provided, your first and last name pursuant to Art. 6(1)(f) GDPR on the basis of our legitimate interest in the efficient and timely provision of the requested information.
Your data will always only be used to respond to your request via WhatsApp. It will not be passed on to third parties.
Please note that WhatsApp Business obtains access to the address book of the mobile device used by us for this purpose and automatically transmits telephone numbers stored in the address book to a server of the parent company Meta Platforms Inc. in the USA. For the operation of our WhatsApp Business account, we use a mobile device whose address book contains only the WhatsApp contact details of users who have also contacted us via WhatsApp.
This ensures that every person whose WhatsApp contact details are stored in our address book has already consented, when first using the app on their device by accepting the WhatsApp terms of use, to the transmission of their WhatsApp telephone number from the address books of their chat contacts pursuant to Art. 6(1)(a) GDPR. Transmission of data of users who do not use WhatsApp and/or have not contacted us via WhatsApp is therefore excluded.
For the purpose and scope of data collection and the further processing and use of data by WhatsApp, as well as your related rights and settings options for protecting your privacy, please refer to WhatsApp’s privacy policy: https://www.whatsapp.com/legal/?eea=1#privacy-policy
We have concluded a data processing agreement with the provider, which protects the data of our website visitors and prohibits disclosure to third parties.
As part of the processing described above, data may be transferred to servers of Meta Platforms Inc. in the USA.
For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision by the European Commission.
5.3 When contacting us, for example via contact form or email, personal data is processed exclusively for the purpose of processing and responding to your enquiry and only to the extent necessary for this purpose.
The legal basis for processing this data is our legitimate interest in responding to your enquiry pursuant to Art. 6(1)(f) GDPR. If your contact is aimed at concluding a contract, an additional legal basis for processing is Art. 6(1)(b) GDPR. Your data will be deleted when it can be inferred from the circumstances that the matter concerned has been conclusively clarified and provided that there are no statutory retention obligations to the contrary.
6) Data Processing When Opening a Customer Account
Pursuant to Art. 6(1)(b) GDPR, personal data will continue to be collected and processed to the extent necessary if you provide it to us when opening a customer account. The data required for opening an account can be found in the input form of the corresponding form on our website.
You may delete your customer account at any time by sending a message to the above address of the controller. After deletion of your customer account, your data will be deleted, provided that all contracts concluded through it have been fully processed, no statutory retention periods apply, and we have no legitimate interest in further storage.