Privacy Policy

Data Controller
The data controller responsible for processing personal data is:
Sintron Distribution GmbH
Südring 14
76473 Iffezheim
Germany
Email: info@sintron.de
Thank you for your interest in our online shop. Protecting your privacy is very important to us. This Privacy Policy explains in detail how we collect, process and protect your personal data.
Your personal data is processed in accordance with the General Data Protection Regulation (GDPR) and, where applicable, Section 165 (3) of the Austrian Telecommunications Act (TKG).

1. Access Data and Hosting

You may visit our website without providing any personal information.
Whenever you access our website, the web server automatically stores a so-called server log file, which may include:
• the name of the requested file;
• your IP address;
• the date and time of access;
• the volume of data transferred;
• your internet service provider.
These access data are processed exclusively to ensure the secure and uninterrupted operation of our website and to improve our online services.
The processing is based on our legitimate interests pursuant to Article 6(1)(f) GDPR.
Access data are deleted no later than seven days after your visit.
Hosting
Hosting services and website presentation are partly provided by external service providers acting on our behalf under data processing agreements pursuant to Article 28 GDPR.
Unless otherwise stated in this Privacy Policy, all access data and all information entered into forms on this website are processed on the servers of these service providers.
If you have any questions regarding our service providers or the legal basis of our cooperation with them, please contact us using the contact details provided in this Privacy Policy.
Our service providers are established and/or operate servers in the following countries for which the European Commission or the Swiss Federal Council has recognized an adequate level of data protection:
• United Kingdom
• Canada
• United States
Transfers to the United States are based on the EU-U.S. Data Privacy Framework, provided that the respective service provider is certified.
Until certification has been completed, transfers continue to rely on the European Commission's Standard Contractual Clauses (SCCs).
Our service providers also operate servers located in:
• Germany
Personal data are processed exclusively within Germany or the European Union in accordance with the provisions of the GDPR.

Privacy Policy (Continued)

2. Processing of Personal Data for Contract Performance and Customer Communication

2.1 Processing of Personal Data for Contract Performance

For the purpose of performing the contract, including handling warranty claims, statutory update obligations and any claims arising from defects, we collect the personal data that you voluntarily provide when placing an order.
The legal basis for this processing is Article 6(1)(b) GDPR.
Mandatory fields are clearly identified because the requested information is necessary for processing your order. Without this information, we cannot conclude or fulfil the contract.
The categories of personal data collected are apparent from the respective input forms.
Further information regarding the processing of your data, particularly concerning the disclosure of data to our service providers responsible for order processing, payment processing and shipping, can be found in the following sections of this Privacy Policy.
After the contract has been fully performed, your personal data will be restricted for further processing and deleted after the expiration of the statutory retention periods required under tax and commercial law pursuant to Article 6(1)(c) GDPR, unless:
• you have expressly consented to further processing pursuant to Article 6(1)(a) GDPR, or
• we are legally permitted to continue processing your data as described in this Privacy Policy.

2.2 Customer Account

You may voluntarily create a customer account in our online shop.
For this purpose, we collect the personal information you provide during registration.
Mandatory fields are identified as such because the information is required to establish and maintain your customer account.
The data stored in your customer account are used exclusively for:
• fulfilling contractual obligations;
• managing your customer account;
• processing your enquiries.
The legal basis for processing is Article 6(1)(b) GDPR.
You may delete your customer account at any time by:
• contacting us using the contact details provided in this Privacy Policy; or
• using the account deletion function available in your customer account.
Following deletion of your account, your personal data will be erased unless statutory retention obligations apply or you have expressly consented to further processing.

2.3 Contacting Us

If you contact us—for example via our contact form, live chat or email—we process the personal data you voluntarily provide in order to respond to your enquiry.
The legal basis is Article 6(1)(b) GDPR.
Mandatory fields are marked accordingly whenever certain information is required to process your request.
Once your enquiry has been fully processed, your personal data will be deleted unless:
• you have consented to further processing;
• or statutory provisions permit or require continued storage.

3. Processing of Personal Data for Shipping Purposes

For the purpose of fulfilling our contractual obligations pursuant to Article 6(1)(b) GDPR, we transfer the personal data necessary for delivery to the shipping company responsible for delivering the ordered goods.
Only the data required for shipment are disclosed.
If you have any questions regarding our logistics service providers or the legal basis for this cooperation, please contact us using the contact details provided in this Privacy Policy.

Privacy Policy

4. Processing of Personal Data for Payment Processing

For payment processing in our online shop, we cooperate with:
• technical service providers;
• banks;
• payment service providers (including PayPal, Ratepay, advance payment and cash on delivery).

4.1 Processing of Payment Transactions

Depending on the payment method you select, we transfer the personal data required to process the payment transaction to:
• our technical service providers acting as data processors;
• the respective banking institution; or
• the selected payment service provider,
to the extent necessary for payment processing.
The legal basis is Article 6(1)(b) GDPR.
In some cases, payment service providers collect the data required for payment processing themselves, for example via their own website or through a technical integration during the checkout process.
In such cases, the privacy policy of the respective payment provider applies.
If you have any questions regarding our payment partners or the legal basis of our cooperation, please contact us using the contact details provided in this Privacy Policy.

4.2 Fraud Prevention and Optimisation of Payment Processes

Where appropriate, we may provide our service providers with additional information that they process on our behalf for the purposes of:
• fraud prevention;
• invoice processing;
• handling disputed payments;
• accounting support;
• optimisation of payment processes.
This processing is based on our legitimate interests pursuant to Article 6(1)(f) GDPR.

4.3 Credit Assessment

Where we provide services in advance (for example, when purchasing on account), we obtain identity and credit information from specialised credit reference agencies.
For this purpose, the personal data required for the credit assessment are transmitted to:
CRIF GmbH
Radlkoferstraße 2
81373 Munich
Germany
The purpose of this processing is:
• assessing the creditworthiness of prospective customers before concluding a contract;
• reducing the risk of payment defaults;
• ensuring responsible credit risk management.
The legal basis is:
• Article 6(1)(f) GDPR (legitimate interests); and
• where applicable, Article 22(2)(a) GDPR regarding automated decision-making.
Appropriate safeguards are implemented to protect your rights and freedoms.
You have the right to:
• express your point of view;
• request human intervention;
• contest any decision based on automated processing.
The personal data processed for this purpose will be deleted after the contractual relationship has been completed unless statutory retention obligations apply or you have consented to further processing.

4.4 Debt Collection

If an outstanding payment remains unpaid despite prior reminders, we may transfer the necessary personal data to our appointed debt collection agency:
CRIF GmbH
Leopoldstraße 244
80807 Munich
Germany
The collection of outstanding claims is then carried out directly by this service provider.
The legal basis for this processing is:
• Article 6(1)(b) GDPR (performance of the contract); and
• Article 6(1)(f) GDPR (our legitimate interest in enforcing outstanding payment claims).

5. Email and Postal Marketing

5.1 Email Newsletter

If you subscribe to our newsletter, we will use your email address to send you regular information about our products, services and special offers.
Processing is based exclusively on your consent pursuant to Article 6(1)(a) GDPR.
You may unsubscribe at any time by:
• clicking the unsubscribe link included in every newsletter; or
• contacting us directly.
Following your unsubscribe request, your email address will be removed from our mailing list unless we are legally entitled to retain it or you have expressly consented to further processing.

Privacy Policy

5.2 Newsletter Delivery

Our newsletter may also be distributed by external service providers acting on our behalf under a data processing agreement pursuant to Article 28 GDPR.
These service providers process your personal data solely in accordance with our instructions and exclusively for the purpose of sending our newsletters.
If you have any questions regarding our service providers or the legal basis of our cooperation, please contact us using the contact details provided in this Privacy Policy.

5.3 Postal Advertising and Your Right to Object

We reserve the right to use your first name, last name and postal address to send you information about our products and services by regular mail.
This processing is based on our legitimate interest in promoting our products and services to existing customers pursuant to Article 6(1)(f) GDPR.
You may object to this processing at any time by contacting us using the contact details provided in this Privacy Policy.
Upon receipt of your objection, your address will be removed from our mailing list unless we are legally entitled or obliged to continue processing your data.
Postal mailings may be carried out by external service providers acting on our behalf under a data processing agreement.

6. Cookies and Similar Technologies

General Information

To make our website user-friendly and to enable certain functions, we use various technologies, including cookies.
Cookies are small text files that are automatically stored on your device.
Some cookies are deleted automatically when you close your browser (session cookies).
Other cookies remain stored on your device and allow us to recognize your browser during your next visit (persistent cookies).

Protection of Privacy on End Devices

We use only those technologies that are strictly necessary to provide the online service explicitly requested by the user.
In these cases, storing information on your device or accessing information already stored on your device does not require your consent.

Subsequent Data Processing by Means of Cookies

We use cookies and similar technologies that are essential for providing certain website functions, including:
• shopping cart functionality;
• customer login;
• website security;
• technical operation of the website.
The following information may be processed:
• IP address;
• date and time of the visit;
• browser information;
• device information;
• website usage data;
• shopping cart contents.
This processing is based on our legitimate interests pursuant to Article 6(1)(f) GDPR.

Types of Cookies Used

Strictly Necessary Cookies
These cookies are essential for the operation of our website.
They enable functions such as:
• logging into your customer account;
• using the shopping cart;
• secure navigation;
• maintaining technical website functionality.
Without these cookies, certain website features cannot function properly.

Cookie Settings

You can manage or delete cookies at any time via your browser settings.
Information is available for the following browsers:
• Microsoft Edge
• Google Chrome
• Mozilla Firefox
• Safari
• Opera

7. Contact Information and Your Rights

Under the General Data Protection Regulation (GDPR), you have the following rights:
• Right of Access (Article 15 GDPR) – to obtain information about the personal data we process concerning you.
• Right to Rectification (Article 16 GDPR) – to request correction of inaccurate or incomplete personal data.
• Right to Erasure (Article 17 GDPR) – to request deletion of your personal data where the statutory requirements are met.
• Right to Restriction of Processing (Article 18 GDPR).
• Right to Data Portability (Article 20 GDPR) – to receive your personal data in a structured, commonly used and machine-readable format or to request transmission to another controller.
• Right to Lodge a Complaint (Article 77 GDPR) with the competent supervisory authority.

Right to Object

Where we process your personal data on the basis of our legitimate interests pursuant to Article 6(1)(f) GDPR, you have the right to object to such processing on grounds relating to your particular situation.
Where personal data are processed for direct marketing purposes, you may object at any time without giving reasons.
Following your objection, we will cease processing your personal data for these purposes unless we can demonstrate compelling legitimate grounds for processing that override your interests, rights and freedoms or where processing is necessary for the establishment, exercise or defence of legal claims.
This exception does not apply to processing for direct marketing purposes.

7.2 Contact Details

If you have any questions regarding the collection, processing or use of your personal data, or if you wish to exercise your rights of access, rectification, erasure, restriction of processing, data portability, withdraw your consent or object to the processing of your personal data, please contact us using the contact details provided in our legal notice (Imprint).