Privacy policy

Responsible for data processing:

Rolf Östling
Broßhauserstr. 27
42697 Solingen, Germany
+49 (0) 212 269 62 20
info@ostling.com

Thank you for your interest in our online shop. The protection of your privacy is very important to us. In the following we inform you in detail about the handling of your data.

1. Access data and hosting

You can visit our websites without providing any personal information. Each time a website is accessed, the web server only automatically saves a so-called server log file, which contains the name of the requested file, your IP address, date and time of access, transferred data volume and the requesting provider (access data) and documents the access.

This access data is evaluated exclusively for the purpose of ensuring trouble-free operation of the site and improving our services. In accordance with Art. 6 Para. 1 S. 1 lit. f DSGVO, this serves to safeguard our predominantly legitimate interests in a correct presentation of our offer as part of a weighing of interests. All access data will be deleted at the latest seven days after the end of your page visit.

Third-party hosting services

In the context of processing on our behalf, a third party provider provides us with the services of hosting and display of the website. This serves to protect our predominantly legitimate interests in a correct presentation of our offer within the scope of a weighing of interests. All data collected within the framework of the use of this website or in the forms provided for this purpose in the online shop as described below will be processed on its servers. A processing on other servers takes place only in the framework explained here.

This service provider is located within a country of the European Union or the European Economic Area.

2. Collection and use of data for the purpose of processing contracts, establishing contact and opening a customer account

We collect personal data when you voluntarily provide us with it in connection with your order, when you contact us (e.g. via contact form or e-mail) or when you open a customer account. Mandatory fields are marked as such, because in these cases we need the data to process the contract, or to process your contact or open a customer account, and you can not complete the order and/or open an account without their information, or send the contact can not. Which data are raised, are evident from the respective input forms. We use the data provided by you pursuant to Art. 6 Para. 1 S. 1 lit. b DSGVO for the processing of contracts and your enquiries. After complete completion of the contract or deletion of your customer account, your data will be restricted for further processing and deleted after expiry of the tax and commercial retention periods, unless you have expressly consented to further use of your data or we reserve the right to use data beyond this, which is permitted by law and about which we inform you in this declaration. The deletion of your customer account is possible at any time and can take place either by a message to the contact possibility described below or over a function intended for it in the customer account.

3. Data transfer

In order to fulfil the contract pursuant to Art. 6 Para. 1 S. 1 lit. b DSGVO, we pass on your data to the shipping company commissioned with the delivery, insofar as this is necessary for the delivery of ordered goods. Depending on which payment service provider you select in the ordering process, we will pass on the payment data collected for this purpose to the credit institution and payment service provider commissioned by us or to the selected payment service in order to process payments. In some cases, the selected payment service providers also collect this data themselves if you create an account there. In this case, you must register with the payment service provider using your access data during the ordering process. In this respect, the data protection declaration of the respective payment service provider applies.

We use payment service providers and shipping service providers based in a country outside the European Union. The transfer of personal data to these companies is only carried out within the framework of the necessity to fulfil the contract.

Data transfer to debt collection companies

In order to fulfil the contract pursuant to Art. 6 Para. 1 S. 1 lit. b DSGVO, we shall pass on your data to an authorised collection agency if our payment claim has not been settled despite a previous reminder. In this case, the claim will be collected directly by the collection agency. In addition, the passing on of the data serves to safeguard our predominantly legitimate interests in an effective assertion or enforcement of our payment claim in accordance with Art. 6 Para. 1 S. 1 lit. f DSGVO.

4. E-mail newsletter and postal advertising

E-mail advertising with newsletter registration

If you subscribe to our newsletter, we will use the data required for this purpose or provided separately by you in order to send you our e-mail newsletter regularly on the basis of your consent pursuant to Art. 6 Para. 1 S. 1 lit. a DSGVO.

You can unsubscribe from the newsletter at any time and either by sending a message to the contact person described below or via a link in the newsletter provided for this purpose. After you have unsubscribed, we will delete your e-mail address unless you have expressly consented to the further use of your data or unless we reserve the right to use further data that is permitted by law and about which we inform you in this declaration.

The newsletter will be sent as part of processing on our behalf by a service provider, to whom we will forward your e-mail address.

This service provider is located within a country of the European Union or the European Economic Area.

CleverReach

Scope of the processing of personal data

Our e-mail newsletter is sent via the technical service provider CleverReach GmbH & Co KG, Mühlenstr. 43, 26180 Rastede (“CleverReach”), to whom we forward the data provided by the user when registering for the newsletter. The data entered by users for newsletter subscription purposes (e.g. e-mail address) is stored on CleverReach’s servers in Germany and Ireland. CleverReach uses this information for sending and statistical evaluation of the newsletter on our behalf. For statistical purposes, the e-mails sent contain so-called web beacons or tracking pixels, which represent one-pixel image files stored on our website. This enables us to determine whether a newsletter message has been opened and which links have been clicked. With the help of so-called conversion tracking, it can also be analyzed whether a predefined action has taken place after clicking the link in the newsletter. In addition, technical information is recorded (e.g. time of access, IP address, browser type and operating system). The data is collected exclusively under a pseudonym and is not linked to any other personal data of the user, a direct personal reference is excluded. This data is used exclusively for statistical analysis of newsletter campaigns. The results of these analyses can be used to better adapt future newsletters to the interests of the recipients.

Postal advertising and your right of objection

Furthermore, we reserve the right to use your first and last name as well as your postal address for our own advertising purposes, e.g. to send you interesting offers and information about our products by letter post. This serves to protect our predominantly legitimate interests in advertising to our customers in accordance with Art. 6 Para. 1 S. 1 lit. f DSGVO.

Advertising mailings are processed on our behalf by a service provider to whom we forward your data.
You can object to the storage and use of your data for these purposes at any time by sending a message to the contact person described below.

5. Cookies and Web Analytics

In order to make visiting our website attractive and to enable the use of certain functions, to display suitable products or for market research, we use so-called cookies on various pages. This serves to safeguard our predominantly legitimate interests in an optimised presentation of our offer in accordance with Art. 6 Para. 1 S. 1 lit. f DSGVO as part of a weighing of interests. Cookies are small text files that are automatically stored on your terminal device. Some of the cookies we use are deleted after the end of the browser session, i.e. after closing your browser (so-called session cookies). Other cookies remain on your end device and enable us to recognise your browser the next time you visit (persistent cookies). You can find the duration of the storage in the overview in the cookie settings of your web browser. You can set your browser so that you are informed about the setting of cookies and decide individually whether to accept them or whether to exclude the acceptance of cookies in certain cases or in general. Each browser differs in the way it manages the cookie settings. This is described in the help menu of each browser, which explains how you can change your cookie settings. These can be found for each browser under the following links:

Internet Explorer™: https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies
Safari™: https://support.apple.com/de-de/guide/safari/sfri11471/12.0/mac/10.14
Chrome™: https://support.google.com/chrome/answer/95647?hl=de&hlrm=en
Firefox™ https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
Opera™ : https://help.opera.com/de/latest/web-preferences/#cookies

If cookies are not accepted, the functionality of our website may be restricted.

If you have given your consent in accordance with Art. 6 Para. 1 S. 1 lit. a DSGVO, this website also uses the so-called DoubleClick cookie for advertising purposes as part of the application of Google Analytics (see below), which enables your browser to be recognised when you visit other websites. The information automatically generated by the cookie about your visit to this website is generally transmitted to and stored by Google on servers in the United States. The IP address is shortened by activating IP anonymisation on this website before transmission within the member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and shortened there. The anonymous IP address transmitted by your browser as part of Google Analytics is not merged with other Google data.

Google will use this information to compile reports on website activity and to provide other services relating to website activity. Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google’s behalf. After purpose discontinuation and end of the use of Google DoubleClick by us, the data collected in this context will be deleted.

Google Double Click is an offer of Google Ireland Limited, a company registered and operated under Irish law with its registered office in Gordon House, Barrow Street, Dublin 4, Ireland. (www.google.de). Insofar as information is transferred to Google servers in the USA and stored there, the American company Google LLC is certified under the EU-US Privacy Shield.

A current certificate can be viewed here. On the basis of this agreement between the USA and the European Commission, the latter has established an appropriate level of data protection for companies certified under the Privacy Shield.

You can revoke your consent at any time with effect for the future by using the DoubleClick cookie at this link deactivate> deactivate this link In addition, you can inform yourself about the setting of cookies at Digital Advertising Alliance and make settings for this. Finally, you can set your browser so that you are informed about the setting of cookies and decide individually whether to accept them or whether to exclude the acceptance of cookies in certain cases or in general. If cookies are not accepted, the functionality of our website may be restricted.

Use of Google (Universal) Analytics for web analytics

If you have given your consent in accordance with Art. 6 Para. 1 S. 1 lit. a DSGVO, this website uses Google (Universal) Analytics for the purpose of website analysis. The web analytics service is provided by Google Ireland Limited, a company incorporated and operated under Irish law and having its registered office at Gordon House, Barrow Street, Dublin 4, Ireland. (www.google.de). Google (Universal) Analytics uses methods that permit analysis of your use of the website, such as cookies. The automatically collected information about your use of this website is generally transmitted to and stored by Google on servers in the United States. By activating IP anonymisation on this website, the IP address is shortened before transmission within the member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and shortened there. The anonymous IP address transmitted by your browser as part of Google Analytics is not merged with other Google data. The data collected in this context will be deleted after we have stopped using Google Analytics for the intended purpose and at the end of its use.

Insofar as information is transferred to Google servers in the USA and stored there, the American company Google LLC is certified under the EU-US Privacy Shield. A current certificate can be viewed here. On the basis of this agreement between the USA and the European Commission, the latter has established an appropriate level of data protection for companies certified under the Privacy Shield.

You can revoke your consent at any time with effect for the future by downloading and installing the browser plug-in available under the following link: https://tools.google.com/dlpage/gaoptout?hl=en. This prevents the collection of data generated by the cookie and related to your use of the website (including your IP address) and the processing of this data by Google.

As an alternative to the browser plug-in, you can click this link to prevent Google Analytics from collecting this data on this website in the future. An opt-out cookie is stored on your end device. If you delete your cookies, you will again be asked to give your consent.

If you have given your consent in accordance with Art. 6 Para. 1 S. 1 lit. a DSGVO, this website also uses Google Signals. This is an extension function of Google Analytics that enables so-called “cross-device tracking”. This means that if your Internet-enabled devices are linked to your Google Account, Google can generate reports on user behaviour (in particular the number of users across devices), even if you change your terminal device. Google will use data for this purpose if you have activated the “personalised advertising” setting in your Google Account.

We do not process personal data in this respect, we only receive statistics based on Google Signals.
You can revoke your consent at any time with effect for the future by downloading and installing the browser plug-in available under the following link: https://tools.google.com/dlpage/gaoptout?hl=en . This prevents the collection of data generated by the cookie and related to your use of the website (including your IP address) and the processing of this data by Google. In addition, you can deactivate the setting “personalised advertising” in your Google account. Details can be found here.

Google Maps

This website uses Google Maps for the visual representation of geographical information. Google Maps is a service provided by Google Ireland Limited, a company incorporated and organised under the laws of Ireland and having its registered office at Gordon House, Barrow Street, Dublin 4, Ireland (www.google.de). This serves to safeguard our predominantly legitimate interests in an optimised presentation of our offer as well as easy accessibility to our locations in accordance with Art. 6 para. 1 lit. f) DSGVO.

When Google Maps is used, Google transmits or processes data on the use of the Maps functions by website visitors, which may include in particular the IP address and location data. We have no influence on this data processing.
Insofar as information is transferred to Google servers in the USA and stored there, the American company Google LLC is certified under the EU-US Privacy Shield. A current certificate can be viewed here. On the basis of this agreement between the USA and the European Commission, the latter has established an appropriate level of data protection for companies certified under the Privacy Shield.
In order to deactivate the Google Maps service and thus prevent data transmission to Google, you must deactivate the Java Script function in your browser. In this case, Google Maps cannot be used or can only be used to a limited extent.
Further information on data processing by Google can be found in the data protection information of Google. The terms of use for Google Maps contain detailed information about the map service.

The data processing is carried out on the basis of an agreement between jointly responsible persons pursuant to Art. 26 DSGVO, which you can view here.

Google reCAPTCHA

For the purpose of protection against misuse of our web forms and against spam, we use the Google reCAPTCHA service within the framework of some forms on this website. Google reCAPTCHA is a service provided by Google Ireland Limited, a company incorporated and operated under the laws of Ireland and located at Gordon House, Barrow Street, Dublin 4, Ireland. (www.google.de). By checking a manual entry, this service prevents automated software (so-called bots) from performing abusive activities on the Website. Pursuant to Art. 6 para. 1 sentence 1 lit. f DSGVO, this serves to safeguard our predominantly legitimate interests in the protection of our website from misuse and in a trouble-free presentation of our online presence as part of a balancing of interests.

Google reCAPTCHA uses a code embedded in the website, a so-called JavaScript, to check the methods that allow an analysis of the use of the website by you, such as cookies. The automatically collected information about your use of this website including your IP address is usually transferred to a Google server in the USA and stored there. In addition, other cookies stored in your browser by Google services are evaluated by Google reCAPTCHA.

A reading or saving of personal data from the input fields of the respective form does not take place.
Insofar as information is transferred to Google servers in the USA and stored there, the American company Google LLC is certified under the EU-US Privacy Shield. A current certificate can be viewed here. On the basis of this agreement between the USA and the European Commission, the latter has established an appropriate level of data protection for companies certified under the Privacy Shield.
You may refuse the use of cookies by selecting the appropriate settings on your browser, which will prevent the collection and processing of data (including your IP address) about you and your use of the website by Google, which is generated by JavaScript or cookies. Please note that this may restrict the functionality of our website for your use.
Further information on Google’s data protection policy can be found here.

Google Fonts

On this website the script code “Google Fonts” is integrated. Google Fonts is an offer from Google Ireland Limited, a company incorporated and operated under Irish law with its registered office at Gordon House, Barrow Street, Dublin 4, Ireland. (www.google.de). This serves to safeguard our predominantly legitimate interests in a uniform presentation of the contents on our website in accordance with Art. 6 para. 1 lit. f) DSGVO.

Within this framework, a connection is established between the browser you use and the Google servers. As a result, Google becomes aware that our website has been accessed via your IP address.

Where information is transmitted to and stored by Google on servers in the United States, the U.S. company Google LLC is certified under the EU-US Privacy Shield. A current certificate can be viewed here. On the basis of this agreement between the USA and the European Commission, the latter has established an appropriate level of data protection for companies certified under the Privacy Shield.
Further information on data processing by Google can be found in the privacy policy of Google.

6. Social Media PlugIns

Use social plugins from Facebook, Google, Twitter, Instagram, Pinterest, Xing, Whatsapp using the Shariff solution.

On our website, social buttons are used by social networks.

This serves to safeguard our predominantly legitimate interests in an optimal marketing of our offer in accordance with Art. 6 Para. 1 S. 1 lit. f DSGVO. In order to increase the protection of your data when you visit our website, these buttons are not integrated into the page without restriction as plug-ins, but only using an HTML link. This integration ensures that when a page of our website containing such buttons is accessed, no connection is established with the servers of the provider of the respective social network.

If you click on one of the buttons, a new window of your browser opens and calls up the page of the respective service provider, on which you can press (if necessary after input of your login data) e.g. the Like or Share button.

The purpose and scope of the data collection and the further processing and use of the data by the providers on their pages, as well as a contact option and your rights and setting options in this regard for the protection of your privacy, please refer to the privacy notices of the providers.

https://www.facebook.com/policy.php
https://twitter.com/privacy
https://developers.google.com/+/web/buttons-policy
https://help.instagram.com/155833707900388
https://about.pinterest.com/de/privacy-policy
https://www.xing.com/privacy
https://www.whatsapp.com/legal/#privacy-policy

Youtube Video Plugins

On this web page contents of third offerers are merged. This content is provided by Google (“Provider”).
YouTube is a service provided by Google Ireland Limited, a company incorporated and operated under Irish law with its registered office at Gordon House, Barrow Street, Dublin 4, Ireland (www.google.de).

For videos from Youtube that are embedded on our site, the extended privacy setting is activated. This means that no information is collected and stored on Youtube by website visitors unless they play the video. The integration of the videos serves to safeguard our predominantly legitimate interests in an optimal marketing of our offer in accordance with Art. 6 Para. 1 S. 1 lit. f DSGVO.

The purpose and scope of the data collection and the further processing and use of the data by the providers as well as your rights in this regard and setting options to protect your privacy can be found in Google’s data protection information https://policies.google.com/privacy.

Vimeo Video Plugins

On this web page contents of third offerers are merged. This content is provided by Vimeo LLC (“Provider”). The integration of Videso serves to safeguard our legitimate interests, which are predominant in the weighing of interests, in an optimal marketing of our offer in accordance with Art. 6 para. 1 sentence 1 lit. f DSGVO.

Vimeo is operated by Vimeo LLC, 555 West 18th Street, New York 10011, USA (“Vimeo”).
The tracking tool Google Analytics is automatically integrated in videos from Vimeo that are integrated on our website. We do not have any influence on the settings of the tracking and the analysis results collected on this basis, nor can we view them. In addition, web beacons are set via the embedding of Vimeo videos by the website visitors.

In order to prevent the setting of Google Analytics Tracking Cookies, you can prevent the storage of cookies by setting your browser software accordingly; however, we would like to point out that in this case you may not be able to use all the functions of this website to their full extent.

You can also prevent Google from collecting the data generated by the cookie and related to your use of the website (including your IP address) as well as Google from processing this data by downloading and installing the browser plug-in available under the following link: https://tools.google.com/dlpage/gaoptout?hl=en

As an alternative to the browser plugin, you can click this link to prevent Google Analytics from capturing data from this website in the future. An opt-out cookie will be stored on your device. If you delete your cookies, you must click the link again.

The purpose and scope of the data collection and the further processing and use of the data by the providers as well as your related rights and setting options to protect your privacy can be found in the Privacy notice of Vimeo

Our online presence on Facebook, Google, Twitter, Instagram, Xing, LinkedIn

Our presence on social networks and platforms serves a better, active communication with our customers and prospective customers. We inform them about our products and ongoing special promotions.
When you visit our online presence in social media, your data may be automatically collected and stored for market research and advertising purposes. From this data, so-called usage profiles are created using pseudonyms. These can be used, for example, to place advertisements inside and outside the platforms that presumably correspond to your interests. Cookies are generally used on your terminal device for this purpose. The visitor behaviour and the interests of the users are stored in these cookies. This serves in accordance with Art. 6 Para. 1 lit. f. DSGVO to safeguard our predominantly legitimate interests in an optimised presentation of our offer and effective communication with customers and interested parties within the scope of a weighing of interests. If you are asked by the respective social media platform operators for their consent to data processing, e.g. with the help of a checkbox, the legal basis for data processing is Art. 6 Para. 1 lit. a DSGVO.

Insofar as the aforementioned social media platforms have their headquarters in the USA, the following applies: The European Commission has issued an adequacy decision for the USA. This goes back to the EU-US Privacy Shield. A current certificate for the respective company can be viewed here.

The detailed information on the processing and use of the data by the providers on their pages as well as a contact option and your rights and setting options in this regard to protect your privacy, in particular opt-out options, can be found in the data protection information of the providers linked below. Should you nevertheless require help in this regard, you can contact us.
Facebook: https://www.facebook.com/about/privacy/

Data processing is carried out on the basis of an agreement between jointly responsible parties pursuant to Art. 26 DSGVO, which you can view here:
https://www.facebook.com/legal/terms/page_controller_addendum

Google/ YouTube: https://policies.google.com/privacy
Twitter: https://twitter.com/de/privacy
Instagram: https://help.instagram.com/519522125107875
LinkedIn: https://www.linkedin.com/legal/privacy-policy
Xing: https://privacy.xing.com/de/datenschutzerklaerung

Objection possibility (Opt-Out):
Facebook: https://www.facebook.com/settings?tab=ads
Google/ YouTube: https://adssettings.google.com/authenticated
Twitter: https://twitter.com/personalization
Instagram: https://help.instagram.com/519522125107875
LinkedIn: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out
Xing: https://privacy.xing.com/de/datenschutzerklaerung/welche-rechte-koennen-sie-geltend-machen/widerspruchsrecht

7. Contact possibilities and your rights

As a data subject, you have the following rights:

  • in accordance with Art. 15 DSGVO, you have the right to request information about the personal data processed by us to the extent specified therein;
  • in accordance with Art. 16 DSGVO the right to immediately request the correction of incorrect or incomplete personal data stored by us;
  • in accordance with Art. 17 DSGVO, you have the right to demand the deletion of your personal data stored by us, insofar as no further processing is required.
    – on the exercise of freedom of expression and information;
    – to fulfil a legal obligation;
    – for reasons of public interest, or
    – for the assertion, exercise or defence of legal claims
    is required;
  • in accordance with Art. 18 DSGVO the right to demand the restriction of the processing of your personal data in so far as
    – the correctness of the data is denied by you;
    – the processing is unlawful, but you refuse to delete it;
    – we no longer need the data, but you need it to assert, exercise or defend legal claims, or
    – you have lodged an objection against the processing pursuant to Art. 21 DSGVO;
  • in accordance with Art. 20 DSGVO the right to receive your personal data which you have provided to us in a structured, common and machine-readable format or to request the transmission to another responsible person;
  • in accordance with Art. 20 DSGVO the right to receive your personal data which you have provided to us in a structured, common and machine-readable format or to request the transmission to another responsible person;
  • in accordance with Art. 20 DSGVO the right to receive your personal data which you have provided to us in a structured, common and machine-readable format or to request the transmission to another responsible person;
  • in accordance with Art. 20 DSGVO the right to receive your personal data in a structured, common format or to request the transmission to another responsible person;
  • in accordance with Art. 20 DSGVO under Art. 77 DSGVO the right to complain to a supervisory authority. As a rule, you can contact the supervisory authority of your usual place of residence or place of work or our company headquarters for this purpose.

The following online forms are available to you: delete personal data or information on personal data.

If you have any questions regarding the collection, processing or use of your personal data, for information, correction, restriction or deletion of data as well as revocation of any consent given or objection to a specific use of data, please contact us:

Rolf Östling
Broßhauserstr 27
42697 Solingen, Germany
+49 (0)212 269 62 20
info@ostling.com

Right of objection
Insofar as we process personal data as described above in order to safeguard our predominantly legitimate interests as part of a weighing of interests, you may object to this processing with effect for the future. If the processing is carried out for the purposes of direct marketing, you can exercise this right at any time as described above. If the processing is carried out for other purposes, you are only entitled to object if there are reasons arising from your particular situation.

After exercising your right of objection, we will not process your personal data further for these purposes unless we can prove compelling reasons worthy of protection for the processing, which outweigh your interests, rights and freedoms, or if the processing serves the assertion, exercise or defence of legal claims.

This shall not apply if the processing is carried out for the purposes of direct marketing. Then we will not further process your personal data for this purpose.