Privacy Policy

The responsible party for data processing is:
rollholz GmbH
Reiterstraße 28
79100 Freiburg im Breisgau
Germany
info@rollholz.com

Phone: 0761 48896334

We are pleased that you are interested in our online shop. Protecting your privacy is very important to us. Below, we inform you in detail about how we handle your data.

1. Access Data and Hosting

You can visit our website without providing any personal information. Each time a website is accessed, the web server automatically stores a so-called server log file, which contains, for example, the name of the requested file, your IP address, the date and time of access, the data transferred, and the requesting provider (access data), and documents the access. This access data is evaluated solely for the purpose of ensuring the smooth operation of the website and improving our offerings. This serves to safeguard our overriding legitimate interests in the proper presentation of our offerings, in accordance with Art. 6(1) sentence 1 lit. f GDPR. All access data will be deleted no later than seven days after your visit to the site.

2. Data Processing for Contract Fulfillment and Contact

2.1 Data Processing for Contract Fulfillment

We collect personal data if you voluntarily provide it to us as part of your order or when contacting us (e.g., via contact form or email). Mandatory fields are marked as such, as in these cases we require the data to process the contract or to handle your contact request, and without this information, you cannot complete the order or send the contact request. The specific data collected can be seen from the respective input forms.
We use the data you provide to process contracts and handle your inquiries in accordance with Art. 6(1) sentence 1 lit. b GDPR. More information on the processing of your data, particularly regarding the transfer of data to our service providers for order processing, payment processing, and shipping, can be found in the following sections of this privacy policy. After the contract is fully processed, your data will be restricted for further processing and deleted after the expiration of any retention periods required by tax and commercial laws, unless you have expressly consented to further use of your data in accordance with Art. 6(1) sentence 1 lit. a GDPR, or we reserve the right to use your data for other purposes, as permitted by law and of which we will inform you in this policy.

 Inventory Management System

We use external service providers' inventory management systems to process orders and contracts. These service providers act as processors on our behalf. If you have any questions regarding our service providers and the basis of our cooperation with them, please contact us using the information provided in this privacy policy.

2.2 Contacting Us

3. Data Processing for Shipping Purposes

In order to fulfill the contract in accordance with Art. 6(1) sentence 1 lit. b GDPR, we transfer your data to the shipping company responsible for delivery, to the extent that this is necessary for the delivery of ordered goods.

 Data Transfer to Shipping Providers for Delivery Notification

If you have given us your express consent during or after your order, we will transfer your email address and phone number to the selected shipping company based on this consent, in accordance with Art. 6(1) sentence 1 lit. a GDPR, so that the shipping company can contact you before delivery to notify or coordinate the delivery with you.
You may revoke your consent at any time by sending a message to the contact information provided in this privacy policy or by contacting the shipping company directly at the following address. After revoking your consent, we will delete the data you provided for this purpose unless you have expressly consented to further use of your data or we reserve the right to use your data for other purposes, as permitted by law and of which we will inform you in this policy.

DHL Paket GmbH
Sträßchensweg 10
53113 Bonn
Germany

LOGSTA Germany GmbH
Elbestraße 2
84453 Munich
Germany

4. Data Processing for Payment Processing

We work with the following partners to process payments in our online shop: technical service providers, credit institutions, payment service providers.

4.1 Data Processing for Transaction Handling

Depending on the payment method you choose, we transfer the necessary payment data to our technical service providers, who act as processors on our behalf, or to the commissioned credit institutions or the selected payment service provider, to the extent that this is necessary for the payment transaction. This serves the fulfillment of the contract in accordance with Art. 6(1) sentence 1 lit. b GDPR. In some cases, the payment service providers collect the required payment data themselves, e.g., on their own website or through a technical integration during the order process. In this case, the privacy policy of the respective payment service provider applies.
If you have any questions about our payment partners and the basis of our cooperation with them, please contact us using the information provided in this privacy policy.

4.2 Data Processing for Fraud Prevention and Optimization of Our Payment Processes

We may share additional data with our service providers, which they use together with the data necessary for processing payments, as processors, to prevent fraud and optimize our payment processes (e.g., invoicing, handling of disputed payments, supporting accounting). This serves our legitimate interests in safeguarding against fraud and ensuring efficient payment management, in accordance with Art. 6(1) sentence 1 lit. f GDPR.

5. Email Advertising

5.1 Email Newsletter with Subscription

If you subscribe to our newsletter, we use the data required for this or separately provided by you to send you our email newsletter regularly based on your consent in accordance with Art. 6(1) sentence 1 lit. a GDPR. You can unsubscribe from the newsletter at any time by sending a message to the contact information provided below or via a link provided in the newsletter. After unsubscribing, we will delete your email address from the mailing list unless you have expressly consented to further use of your data in accordance with Art. 6(1) sentence 1 lit. a GDPR or we reserve the right to use your data for other purposes, as permitted by law and of which we will inform you in this policy.

5.2 Newsletter Dispatch

The newsletter may also be sent by our service providers as part of a processing agreement on our behalf. If you have any questions about our service providers and the basis of our cooperation with them, please contact us using the information provided in this privacy policy.

Our service providers are based in and/or use servers located in the USA and other countries outside the EU and EEA. These countries do not have an adequacy decision by the European Commission. Our cooperation with them is based on the European Commission's standard data protection clauses. 

6. Cookies and Other Technologies

 General Information

Privacy Policy

Responsible for data processing is:
rollholz GmbH
Reiterstraße 28
79100 Freiburg im Breisgau
Germany
info@rollholz.com

Phone: 0761 48896334

We are pleased about your interest in our online shop. Protecting your privacy is very important to us. Below, we inform you in detail about the handling of your data.

1. Access Data and Hosting

You can visit our websites without providing any personal information. Each time a webpage is accessed, the web server automatically stores a so-called server log file, which contains the name of the requested file, your IP address, the date and time of the retrieval, the amount of data transferred, and the requesting provider (access data) and documents the retrieval. This access data is exclusively evaluated for the purpose of ensuring the trouble-free operation of the site as well as improving our offering. This serves to protect our legitimate interests in a correct presentation of our offering, which prevail in the context of a balancing of interests in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR. All access data will be deleted no later than seven days after your visit to the site.

2. Data Processing for Contract Processing and Contact

2.1 Data Processing for Contract Execution

We collect personal data if you voluntarily provide it to us in the context of your order or when contacting us (e.g. via contact form or email). Required fields are marked as such, as we need the data in these cases for contract processing or to process your contact request, and without this information, you cannot complete the order or send the contact request. The data that is collected can be seen in the respective input forms.
We use the data you provide to process the contract and handle your inquiries in accordance with Art. 6 para. 1 sentence 1 lit. b GDPR. Further information on the processing of your data, particularly on its transfer to our service providers for order, payment, and shipping processing, can be found in the following sections of this privacy policy. After the contract has been fully processed, your data will be restricted for further processing and deleted after the expiration of any applicable tax and commercial retention periods in accordance with Art. 6 para. 1 sentence 1 lit. c GDPR, unless you have expressly consented to further use of your data in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR or we reserve the right to use your data for purposes beyond this, as permitted by law and about which we inform you in this declaration.

Inventory Management System

For order and contract processing, we use external service providers' inventory management systems. Our service providers operate on our behalf within the framework of order processing. If you have any questions about our service providers and the basis of our cooperation with them, please contact the point of contact described in this privacy policy.

2.2 Contacting Us

If you contact us via email or our contact form, we collect your personal data in order to process your request. This data will not be used for other purposes unless we have your explicit consent.

3. Data Processing for Shipping Purposes

In order to fulfill the contract in accordance with Art. 6 para. 1 sentence 1 lit. b GDPR, we forward your data to the shipping service provider responsible for delivering your order, to the extent necessary for the delivery of ordered goods.

Data Transfer to Shipping Service Providers for the Purpose of Shipping Notification

If you have given us your express consent during or after your order, we will forward your email address and phone number to the selected shipping service provider based on this consent, in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR, so that they can contact you for delivery notification or coordination.
Consent can be revoked at any time by sending a message to the contact option described in this privacy policy or by contacting the shipping service provider directly using the contact information provided below. After revoking your consent, we will delete the data provided for this purpose unless you have expressly consented to further use of your data or we reserve the right to use it for other legally permitted purposes, as explained in this declaration.

DHL Paket GmbH
Sträßchensweg 10
53113 Bonn
Germany

LOGSTA Germany GmbH
Elbestraße 2
84453 Munich
Germany

4. Data Processing for Payment Processing

For payment processing in our online shop, we work with these partners: technical service providers, credit institutions, and payment service providers.

4.1 Data Processing for Transaction Processing

Depending on the selected payment method, we forward the necessary payment transaction data to our technical service providers, who act on our behalf as data processors, or to the commissioned credit institutions or the selected payment service provider, to the extent that this is necessary for the payment processing. This is done to fulfill the contract in accordance with Art. 6 para. 1 sentence 1 lit. b GDPR. In some cases, the payment service providers collect the data required for payment processing themselves, e.g. on their own website or via an integrated process during the order process. In this case, the privacy policy of the respective payment service provider applies.
If you have any questions about our partners for payment processing and the basis of our cooperation with them, please contact the point of contact described in this privacy policy.

4.2 Data Processing for Fraud Prevention and Optimization of Our Payment Processes

We may also provide additional data to our service providers, which they use, together with the necessary data for payment processing, as our data processors to prevent fraud and optimize our payment processes (e.g. invoicing, processing disputed payments, supporting accounting). This serves our legitimate interest in protecting against fraud and ensuring efficient payment management in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR.

5. Email Marketing

5.1 Email Newsletter with Subscription

If you subscribe to our newsletter, we use the data required or separately provided by you to regularly send you our email newsletter based on your consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR. You can unsubscribe from the newsletter at any time, either by sending a message to the contact option described below or by using a link provided in the newsletter. After unsubscribing, we will delete your email address from the mailing list, unless you have expressly consented to further use of your data or we reserve the right to use your data for other legally permitted purposes, which we inform you about in this declaration.

5.2 Newsletter Distribution

The newsletter may also be distributed by our service providers, who act as data processors on our behalf. If you have any questions about our service providers and the basis of our cooperation with them, please contact the point of contact described in this privacy policy.

Our service providers may be based in or use servers located in the USA and other countries outside the EU and EEA. For these countries, there is no adequacy decision by the European Commission. Our cooperation with them is based on standard data protection clauses of the European Commission.

6. Cookies and Other Technologies

General Information

To make your visit to our website more attractive and to enable the use of certain functions, we use various technologies, including cookies, on different pages. Cookies are small text files that are automatically stored on your device. Some of the cookies we use are deleted at the end of your browser session (session cookies), while other cookies remain on your device and allow us to recognize your browser the next time you visit (persistent cookies).
We use technologies that are strictly necessary for the use of certain functions of our website (e.g., shopping cart function). Through these technologies, IP addresses, visit times, device and browser information, as well as information about your use of our website (e.g., shopping cart content) are collected and processed. This serves to protect our legitimate interests in an optimized presentation of our offering, which prevail in the context of a balancing of interests in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR.

In addition, we use technologies to comply with legal obligations (e.g., to prove consent to the processing of your personal data) and for web analysis and online marketing purposes. Further information on this, including the respective legal basis for data processing, can be found in the following sections of this privacy policy.

You can find the cookie settings for your browser under the following links: Microsoft Edge™ / Safari™ / Chrome™ / Firefox™ / Opera™

If you have consented to the use of technologies according to Art. 6 para. 1 sentence 1 lit. a GDPR, you can revoke your consent at any time by sending a message to the contact option described in the privacy policy.

7. Use of Cookies and Other Technologies for Web Analysis and Advertising Purposes

If you have given your consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR, we use the following cookies and other technologies from third-party providers on our website. After the purpose has been fulfilled and the respective technology is no longer used, the data collected in this context will be deleted. You can revoke your consent at any time with future effect. Further information on revocation options can be found in the section "Cookies and other technologies". Further information, including the basis of our cooperation with the individual providers, can be found in the individual technologies. If you have any questions about the providers and the basis of our cooperation with them, please contact the contact option described in this privacy policy.

Use of Google Services for Web Analysis and Advertising Purposes

We use the following technologies from Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). The information automatically collected by the Google technologies about your use of our website is generally transmitted to a server of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, and stored there. There is no adequacy decision by the European Commission for the USA. Our cooperation with them is based on standard data protection clauses of the European Commission. Where your IP address is collected through Google technologies, it is truncated by activating IP anonymization before being stored on Google's servers. Only in exceptional cases is the full IP address transmitted to a Google server and shortened there. Unless otherwise stated for the individual technologies, the data processing takes place based on a data processing agreement between jointly responsible parties in accordance with Art. 26 GDPR. Further information on data processing by Google can be found in Google's privacy notices.

Google Analytics

For the purpose of website analysis, data (IP address, visit time, device and browser information, and information about your use of our website) is automatically collected and stored by Google Analytics, from which usage profiles are created using pseudonyms. Cookies may be used for this purpose. Your IP address is not merged with other data from Google. Data processing is based on an agreement with Google for commissioned data processing.

To optimize the marketing of our website, we have activated the "data sharing settings for Google products and services." This allows Google to access and use the data collected and processed by Google Analytics for the improvement of Google services. The data sharing with Google is based on an additional agreement between the responsible parties. We have no control over the subsequent data processing by Google.

To optimize the marketing of our website, we use the so-called "User-ID function". This feature allows us to assign your interaction data from one or more sessions on our online presences to a unique, permanent ID and thus analyze your user behavior across devices and sessions.

For test creation and implementation, we also use the Google Analytics extension function Google Optimize.

For web analysis, the Google Analytics extension function Google Signals enables so-called "Cross-Device Tracking". If your internet-enabled devices are linked to your Google account and you have activated the "personalized advertising" setting in your Google account, Google can generate reports on your usage behavior (in particular, cross-device user numbers) even if you switch devices. No personal data is processed by us in this context; we only receive statistics based on Google Signals.

For web analysis and advertising purposes, the Google Analytics extension function called the DoubleClick cookie enables the recognition of your browser when visiting other websites. Google uses this information to compile reports on website activities and provide other services related to website usage.

Google AdSense

Our website markets ad spaces for third-party providers through Google AdSense. These ads are displayed to you in various places on this website. The DoubleClick cookie allows interest-based advertising by collecting and processing data (IP address, visit time, device and browser information, and information about your use of our website) and automatically assigning a pseudonymous UserID, which allows determining interests based on visits to this and other websites.

YouTube Video Plugin

To integrate third-party content, the YouTube Video Plugin in the extended data protection mode we use collects data (IP address, visit time, device and browser information), which is transmitted to Google and processed by Google only if you play a video.

8. Social Media

Our Online Presence on Facebook, Instagram, YouTube

As long as you have given your consent according to Art. 6 para. 1 sentence 1 lit. a GDPR to the respective social media operator, your data is automatically collected and stored for market research and advertising purposes when visiting our online presences on the aforementioned social media platforms. Pseudonymous usage profiles are created from this data. These may be used to serve advertisements inside and outside the platforms that are presumed to be of interest to you. Cookies are usually used for this purpose. For detailed information on data processing and usage by the respective social media operators, as well as contact information and your rights regarding privacy protection, please refer to the privacy notices of the providers linked below. If you need further assistance, you can contact us.

Facebook is a service offered by Facebook Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland ("Facebook Ireland"). The information automatically collected by Facebook Ireland about your use of our online presence on Facebook is generally transmitted to a server of Facebook, Inc., 1601 Willow Road, Menlo Park, California 94025, USA, and stored there. There is no adequacy decision by the European Commission for the USA. Our cooperation with them is based on standard data protection clauses of the European Commission. The data processing during the visit to a Facebook fan page is based on an agreement between joint controllers in accordance with Art. 26 GDPR. Further information (about Insights data) can be found here.

Instagram is a service offered by Facebook Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland (“Facebook Ireland”). The information automatically collected by Facebook Ireland regarding your use of our online presence on Instagram is generally transmitted to a server of Facebook, Inc., 1601 Willow Road, Menlo Park, California 94025, USA, and stored there. There is no adequacy decision by the European Commission for the USA. Our cooperation with them is based on the European Commission's standard contractual clauses. Data processing in connection with the visit of an Instagram fan page is carried out based on a joint responsibility agreement according to Art. 26 GDPR. For more information (about Insights data), see here.

YouTube is a service offered by Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). The information automatically collected by Google regarding your use of our online presence on YouTube is generally transmitted to a server of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, and stored there. There is no adequacy decision by the European Commission for the USA. Our cooperation with them is based on the European Commission's standard contractual clauses.

9. Contact Options and Your Rights

9.1 Your Rights

As a data subject, you have the following rights:

• According to Art. 15 GDPR, you have the right to request information about your personal data that we process;
• According to Art. 16 GDPR, you have the right to request the immediate correction of incorrect or completion of your personal data stored with us;
• According to Art. 17 GDPR, you have the right to request the deletion of your personal data stored with us, unless further processing is required
  • to exercise the right to freedom of expression and information;
  • to fulfill a legal obligation;
  • for reasons of public interest or
  • to establish, exercise, or defend legal claims;
• According to Art. 18 GDPR, you have the right to request the restriction of the processing of your personal data, provided that
  • the accuracy of the data is contested by you;
  • the processing is unlawful, but you oppose its deletion;
  • we no longer need the data, but you need it to establish, exercise, or defend legal claims; or
  • you have objected to processing according to Art. 21 GDPR;
• According to Art. 20 GDPR, you have the right to receive your personal data that you have provided to us in a structured, commonly used, and machine-readable format or to request its transmission to another controller;
• According to Art. 77 GDPR, you have the right to lodge a complaint with a supervisory authority. As a rule, you can contact the supervisory authority of your habitual residence or workplace or the location of our company headquarters for this purpose.

Right to Object Where we process personal data to safeguard our overriding legitimate interests as explained above, you can object to this processing with effect for the future. If the processing is for direct marketing purposes, you can exercise this right at any time as described above. If the processing is for other purposes, you only have the right to object if there are reasons arising from your particular situation. After you exercise your right to object, we will stop processing your personal data for these purposes unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or if the processing serves to establish, exercise, or defend legal claims. This does not apply to processing for direct marketing purposes. In that case, we will no longer process your personal data for this purpose.

9.2 Contact Options

If you have any questions about the collection, processing, or use of your personal data, for information, correction, restriction, or deletion of data, or if you wish to revoke consents or object to a specific data use, please contact us directly via the contact details provided in our imprint.