Privacy policy

Introduction

With this privacy policy, we would like to inform you about the processing of personal data when using our website.

Data controller

The party responsible for this website is:

Cramer Möbel+Design Leipzig GmbH Meinekestr. 11 D-10719 Leipzig leipzig@cramer.de

Data protection officer

We have appointed a data protection officer for our company. You can contact them at: datenschutz@cramer.de

Personal data we collect

When you visit our website, we process the following data:

  • IP address
  • Date and time of access
  • Browser type
  • Language and version of browser software
  • Operating system of the requesting computer
  • Name of the file accessed
  • Volume of data transferred
  • Referring URL

We process the aforementioned data for the following purposes:

  • Ensuring a smooth connection to the website,

  • Ensuring comfortable use of our website,

  • Evaluating system security and stability, and

  • for other administrative purposes.

The legal basis for data processing is Article 6(1)(f) GDPR. Our legitimate interest follows from the purposes for data collection listed above.

Purpose of data processing

We only use the personal data you actively provide for the agreed purpose and only to the extent necessary. Further information can be found in the respective sections regarding individual data processing operations.

Legal basis for data processing

When you visit our website, we process personal data based on the following legal grounds:

  • Consent (Article 6(1)(a) GDPR)
  • Performance of a contract (Article 6(1)(b) GDPR)
  • Compliance with a legal obligation (Article 6(1)(c) GDPR)
  • Balancing of interests (Article 6(1)(f) GDPR)

The legal basis we rely on in each individual case is stated in the notice for the respective processing activity.

In the case of consent, you have the right to withdraw it at any time with effect for the future.

If we process data based on a balancing of interests, you as the data subject have the right to object to the processing under the requirements of Article 21 GDPR.

Hosting

This website is hosted by an external provider (Onepage GmbH, Hanauer Landstraße 172, 60314 Leipzig am Main). All data we collect to operate our website is stored on the host's servers. This primarily includes login data (see above), but also communication with our customers and any other data we process in connection with our website.

The host is contractually obliged to process the data only as necessary to fulfil its service obligations.

For potential customers, data processing is carried out for the purpose of contract fulfilment or initiation. Otherwise, it is based on a balancing of interests. In doing so, we pursue the legitimate interest of providing our website in a modern and secure manner.

Purpose of data processing: Provision of our website

Legal basis: Article 6(1)(b) GDPR, Article 6(1)(f) GDPR

Recipients or categories of recipients

Your personal data will not be transmitted to third parties for purposes other than those listed below.

We only pass your personal data to third parties if:

  • you have given your express consent,
  • the disclosure is necessary for the establishment, exercise or defence of legal claims and there is no reason to assume that you have an overriding interest in the non-disclosure of your data,
  • in the event that there is a legal obligation to disclose the data, and
  • this is legally permissible and necessary for the processing of contractual relationships with you.

Please refer to this privacy notice for exceptions to this rule (e.g. via third-party providers).

Transfer to a third country or an international organisation

The controller does not actively transfer data to a third country or an international organisation. Please refer to this privacy notice for exceptions to this rule (e.g. via third-party providers).

Storage period

As a general rule, we delete your data when there is no longer a requirement for storage. Such a requirement primarily exists when the data is needed to fulfil contractual services, or to grant or defend against warranty or guarantee claims.

Your rights

If a user's personal data is processed, they are a 'data subject' within the meaning of the GDPR. You have the following rights against us as the controller:

  • Right of access
  • Right to rectification or erasure
  • Right to restriction of processing
  • Right to data portability
  • Right to object to processing

To exercise the rights listed above, please contact our data protection contact person at: datenschutz@cramer.de

Withdrawal of consent

If you have given us your consent for data processing, you have the right to withdraw this at any time. Please address your withdrawal of consent to: datenschutz@cramer.de

Complaint to a supervisory authority

If you believe that the processing of data concerning you violates data protection regulations, you have the right to lodge a complaint with a supervisory authority.

Contact options

If you send us a message via our contact form, we use the data you provide to process your enquiry. For specific enquiries, data processing is carried out for the purpose of fulfilling a contract or initiating a contract. For all other enquiries, it is based on a legitimate interest in responding to your request.

Alternatively, you can contact us via our email address. In this case, the data transmitted with the email will be stored.

Purpose of data processing: Communication with website visitors

Legal basis: Art. 6(1)(b) GDPR, or Art. 6(1)(f) GDPR

Application process

If you apply to us electronically, your details will be used exclusively for processing your application and will not be passed on to third parties. Please note that applications you send to us by email are transmitted unencrypted. There is therefore a risk that unauthorised persons could intercept and use this data. To protect your data, you have the option of encrypting your attachments yourself (e.g. 7zip). Please send the password provided by telephone or in a separate email to the HR department.

Storage period: 6 months

Legal basis: Art. 6(1)(b) GDPR in conjunction with Section 26 of the BDSG

Cookies

When you visit our website, small text files (cookies) are stored on your computer. Some cookies are deleted after your visit ends (session cookies). Other cookies remain on your device until you delete them. This makes it possible to recognise the user in order to personalise the website. You can adjust the use of cookies as you wish using your web browser. Under certain circumstances, this may result in our website being only partially usable.

The use of cookies is based on a balancing of interests (necessary cookies) or on consent. As the operator of our website, we have a legitimate interest in the use of cookies to ensure a user-friendly visit.

Purpose of data processing: Proper and functional provision of our website

Legal basis: Art. 6(1)(a) GDPR and Art. 6(1)(f) GDPR in conjunction with Section 25 of the TTDSG

Cookie banner

On this website, we use a cookie banner to obtain your consent for the storage of certain cookies on your device or for the use of certain technologies and to document this in a data-protection-compliant manner. The provider of this technology is: (Onepage GmbH, Hanauer Landstraße 172, 60314 Leipzig am Main).

When you visit our website, the following personal data is transmitted to the provider:

  • Your consent(s) or the withdrawal of your consent(s)
  • Your IP address
  • Information about your browser
  • Information about your device
  • Time of your visit to the website

Furthermore, we store a cookie in your browser to be able to assign the consents given or their withdrawal to you. The data collected in this way is stored until you ask us to delete it or the purpose for data storage no longer applies. Mandatory statutory retention periods remain unaffected.

This is used to obtain the legally required consent for the use of certain technologies.

Legal basis: Art. 6(1)(c) GDPR.

Google Analytics

This website uses functions of the web analytics service Google Analytics. The provider is Google Ireland Limited ('Google Search'), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics enables the website operator to analyse the behaviour of website visitors. The website operator receives various usage data, such as page views, duration of visit, operating systems used and the origin of the user. This data is assigned to the user's respective device. No assignment to a user ID takes place.

Furthermore, we may use Google Analytics to record your mouse and scroll movements, as well as your clicks. Google Analytics also uses various modelling approaches to supplement the collected data sets and employs machine learning technologies for data analysis.

Google Analytics uses technologies that enable user recognition for the purpose of analysing user behaviour (e.g. cookies or device fingerprinting). The information collected by Google regarding your use of this website is generally transmitted to a Google server in the USA and stored there.

On 10 July 2023, the European Commission adopted its adequacy decision for the USA. Google LLC is certified under the EU-US Data Privacy Framework. As Google servers are distributed globally and a transfer to third countries (for example, Singapore) cannot be entirely ruled out, we have also concluded the EU Standard Contractual Clauses with the provider.

IP anonymisation

We have activated the IP anonymisation function on this website. Consequently, your IP address will be truncated by Google within member states of the European Union or in other states party to the Agreement on the European Economic Area before being transmitted to the USA. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide other services relating to website and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other data held by Google.

Browser plugin

You can prevent the collection and processing of your data by Google by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=en.

For more information on how user data is handled by Google Analytics, please refer to Google's privacy policy: https://support.google.com/analytics/answer/6004245?hl=en.

Data processing agreement

We have concluded a data processing agreement with Google and fully implement the strict requirements of the German data protection authorities when using Google Analytics.

Purpose of data processing: Evaluation of statistics to optimise the website. Storage period: 14 months. Legal basis: Art. 6(1)(a) GDPR in conjunction with § 25(1) TTDSG.

Changes to this privacy notice

This privacy notice is updated regularly as required. You can find the current version on our website.