Privacy
Paidi Möbel GmbH privacy policy
We appreciate your visit to our website and are pleased that you are interested in our company. We take the protection of your personal data very seriously. We process your data in compliance with the applicable legal provisions for protecting personal data, with particular reference to the EU General Data Protection Regulation (EU GDPR) and the applicable country-specific implementing legislation. We will use this privacy policy to provide you with in-depth information about the processing of your personal data by the company PAIDI Möbel GmbH, and the rights you have.
Personal data is information that can be used to identify a natural person. This particularly includes your name, date of birth, address, telephone number, e-mail address, as well as your IP address.
‘Anonymous data’ is where no personal reference can be made to the user.
Controller and data protection officer
PAIDI Möbel GmbH
Hauptstraße 87
97840 Hafenlohr
09391 / 501 0
Contact details of the data protection officer
Your rights as a data subject
We would first like to inform you here about your rights as a data subject. These rights are standardised in Articles 15-22 of the EU GDPR. These include:
- Right of access to information (Article 15 of the EU GDPR);
- Right to erasure (Article 17 of the EU GDPR);
- Right to rectification (Article 16 of the EU GDPR);
- Right to data portability (Article 20 of the GDPR);
- Right to restriction of processing (Article 18 of the EU GDPR); and
- Right of objection to processing (Article 21 of the EU GDPR).
To assert these rights, please contact:
PAIDI Möbel GmbH
Hauptstraße 87
97840 Hafenlohr
09391 / 5010
datenschutz@paidi.de
This also applies if you have questions about data processing within our company. You also
have the right to lodge a complaint with a data protection supervisory authority.
Right of objection
Please note the following in relation to the right to object:
If we process your personal data for purposes of direct marketing, you have the right to object to this data processing for purposes of direct marketing at any time without stating any reasons for this. This also applies to profiling if it relates to direct marketing.
If you object to processing for the purposes of direct marketing, we shall no longer process your personal data for these purposes. It is free to object and your objection can be informal, preferably sent to:
or
Paidi Möbel GmbH
Hauptstraße 87
97840 Hafenlohr
or
09391 / 5010
If we process your data to safeguard legitimate interests, you can object to this processing at any time for reasons relating to your particular situation; this also applies to profiling based on these provisions.
We shall then no longer process your personal data unless we can prove that there are compelling legitimate grounds for processing that outweigh your interests, rights and freedoms, or if processing serves to assert, exercise or defend legal claims.
Purposes and legal bases for data processing
When processing your personal data, we comply with the provisions of the EU GDPR and all other applicable provisions under data protection law. The legal bases for data processing stem particularly from Article 6 of the EU GDPR.
We use your data to initiate business, to fulfil contractual and statutory obligations, to implement the contractual relationship, to provide products and services and to strengthen the customer relationship, which may also include analyses for marketing purposes and for direct marketing.
Your consent is also considered to be a permission instruction under data protection law. We hereby want to explain to you the purposes of data processing and to clarify your right of withdrawal. If your consent also relates to the processing of special categories of personal data, we shall expressly refer to this when you give consent.
Special categories of personal data within the meaning of Article 9 (1) of the EU GDPR are only processed, if this is required based on legal provisions and if there is no reason to believe that your legitimate interests in excluding processing outweigh all others.
Sharing data with third parties
We only share your data with third parties within the scope of legal provisions or if relevant consent has been given. Otherwise, data is not shared with third parties unless we are obligated to do so due to mandatory legal provisions (sharing data with external bodies such as supervisory authorities or law enforcement authorities).
Data recipients/categories of recipients
Within our company, we ensure that only those people who require your data for the fulfilment of contractual and statutory obligations, receive it.
In many cases, service providers support our departments in fulfilling their tasks. The regulatory agreements required under data protection law have been concluded with all service providers. We shall also share your address with logistics service providers for purposes of sending our goods or requested materials.
Third country transmissions/intention for third-country transmissions
Data is only transmitted to third countries (outside the European Union or the European Economic Area) if this is required for the implementation of the contractual relationship, if it is legally prescribed or if you have given us your consent to do so.
In principle, data is not sent to third countries.
Data storage period
We store your data for as long as it is required for the respective processing purpose. Please note that several retention periods require that we continue to store data even thereafter. This particularly applies to retention obligations under commercial law or tax law (e.g. the Commercial Code, Tax Code, etc.). If no further retention duties apply, the data is automatically erased after the purpose has been achieved.
In addition, we may store data if you have given us consent to do so, or if there are legal disputes and we use evidence as part of statutory limitation periods that may be up to thirty years; the regular limitation period is three years.
Secure transfer of your data
To best protect the data we store against any accidental or intentional manipulation, loss, destruction or access by unauthorised persons, we take all relevant technical and organisational security measures. The security level is reviewed together with security experts on an ongoing basis and adapted to new security standards.
Data exchange from and to our website is always encrypted. We use HTTPS as a transmission protocol, which uses current encryption protocols, for our website. We also provide our users with content encryption within the scope of the contact form. Only we are able to decrypt this data. There is also the option of using other forms of communication (e.g. post).
Obligation to provide data
Various personal data is required to establish, implement and terminate the contractual relationship and fulfil the associated contractual and statutory obligations. The same applies to the use of our website and the various functions available.
We have provided details on this in the preceding section. In certain cases, data must be collected or provided on the basis of statutory provisions. Please note that it is not possible to process your request or implement the underlying contractual relationship without providing this data.
Categories, sources and origin of data
Each context determines what kind of data we process: This depends on whether you have, for example, submitted an order online or whether you have sent your request via our contact form, whether you have submitted an application to us or if you have submitted a complaint.
Please note that we may also separately provide information to suitable bodies for certain processing situations, e.g. when uploading application documents or when contacting us.
When you visit our website, the web server’s access logs record the pages you accessed and at what time. These logs contain the following data:
IP, directory protection user, date, time, pages accessed, logs, status code, volume of data, referrer, user agent and the host name accessed.
IP addresses are stored in an anonymous way. To achieve this, the last three numbers are removed, i.e. 127.0.0.1 becomes 127.0.0.*. IPv6 addresses are also anonymised. The anonymised IP addresses are stored for 60 days. Information about the directory protection user used is anonymised after one day.
Error logs, which record errors when pages are accessed, are deleted after seven days. As well as error messages, these include the accessing IP address and, depending on the error, the website accessed.
We collect and process the following data when you contact us:
- First name
- Surname
- Street
- Post code
- Town/city
- Country
- Telephone number
- E-mail address
- Request message
- Information on how you found out about PAIDI
We process the following data when you place an order for fittings:
- Salutation
- First name
- Surname
- Street
- House number
- Post code
- Town/city
- Country
- Telephone number
- E-mail address
- Purchase agreement number
- Date of purchase/how old the piece of furniture is
- Model name/item number
- Information on how you found out about PAIDI
- Request message
- Option to upload files
We process the following data when you register a product:
- Salutation
- First name
- Surname
- Street
- Post code
- Town/city
- Country
- Telephone number
- E-mail address
- Consent to be contacted by e-mail for marketing campaigns
- Consent to be contacted by post for marketing campaigns
- Programme name
- Retailer name
- Retailer location
- Date of purchase
- Details of how you obtain information online
- Information of how you found out about PAIDI
- Information about pregnancy
- Gender of the child
- Age of the child
- expected date of birth
We collect and process the following data when you order a catalogue:
- Salutation
- First name
- Surname
- Street
- Post code
- Town/city
- Country
- E-mail address
- Child’s date of birth
Contact form/contacting us by e-mail (Article 6 (1) points a) & b) of the EU GDPR)
We have a contact form on our website that you can use to contact us electronically. If you write to us through the contact form, we shall process your data submitted in connection with the contact form message, in order for us to be able to get in touch with you and to respond to your inquiries and requests.
In doing so, we observe the principle of data economy and data avoidance, whereby you only have to provide data that is absolutely required to get in touch. This includes your e-mail address and the message field. You IP address is also processed out of technical necessity and as a legal safeguard. All other data is provided in optional fields and can be provided on a voluntary basis (e.g. to individually respond to your request).
If you contact us by e-mail, we shall only process the personal data shared in the e-mail for purposes of processing your request. If you do not use the form provided to get in touch, no additional data will be collected.
Newsletter (Article 6 (1) point a) of the EU GDPR)
You can subscribe to a free newsletter via our website. The e-mail address and name given when subscribing to the newsletter are used to send a personalised newsletter. Consent to receive the newsletter can be given in the product registration form or the catalogue order form.
In so doing, the principle of data economy and data avoidance is observed, as only the e-mail address field is marked as required (possibly also name for personalised newsletters). Your IP address is also processed when registering for newsletters out of technical necessity and as a legal safeguard.
If you have voluntarily disclosed information about your gender, age, date of birth or your child’s expected date of birth, we shall use this data to send you newsletters that take into account the specified data.
We are also able to evaluate how high the opening and click rates are for each recipient. This means that we are able to see whether you have opened our newsletter.
You can of course terminate the subscription at any time by clicking on the ‘Unsubscribe’ option in the newsletter, thus withdrawing your consent. You also have the option of unsubscribing from the newsletter at any time directly on our website.
Advertising purposes for existing customers (Article 6 (1) point f) of the GDPR)
PAIDI Möbel GmbH is interested in maintaining a customer relationship with you and providing you with information and offers. We therefore process data so that we are able to send you the relevant information and offers by e-mail.
If you don’t want us to do this, you can object to the use of your personal data for purposes of direct marketing at any time; this also applies to profiling if it relates to direct marketing. If you object, we shall no longer use your data for these purposes.
You can send your objection in an informal way, without stating any reasons, preferably by phone on 09391 / 5010, by e-mail to datenschutz@paidi.de or by post to Padi Möbel GmbH, The Data Protection Officer, Hauptstraße 87, 97840 Hafenlohr.
Cookies (Article 6 (1) point f) of the EU GDPR / Article 6 (1) point a) of the EU GDPR in the case of consent)
Our website uses ‘cookies’ in several sections. These are used to make our website more user-friendly, effective and secure. Cookies are small text files that are placed on your computer and saved by your browser (locally on your hard drive).
These cookies allow us to analyse how users use our websites. We are then able to design our website content in accordance with user needs. Cookies also allow us to measure the effectiveness of a particular advert and to place adverts, for example, based on a user’s interests.
Most of the cookies we use are ‘session cookies’. These are automatically deleted after your visit. Permanent cookies are automatically deleted by your computer when they expire (generally after six months) or if you delete them before they expire.
Most browsers automatically accept cookies. However, you can normally change your browser’s settings if you would rather not have information transmitted. You can still use our website without any restrictions (exception: configuration tools).
We use cookies to make our website more user-friendly, effective and secure. We also use cookies so that we are able to analyse how users use our website. We are then able to design the content in accordance with visitor needs. Cookies also allow us to measure the effectiveness of a particular advert and to place adverts, for example, based on a user’s interests.
Cookies are saved on the user’s computer and transmitted by the computer to our site. As such, you as a user have full control over the use of cookies. You can deactivate or restrict the transmission of cookies by changing your web browser settings. Cookies already stored can also be deleted from your web browser or other software programs at any time. It is possible to do so in all standard web browsers.
Please note: if you deactivate cookies, it may not be possible to use all of our website's functions to their full extent.
User profiles/web tracking processes
Google Analytics
On the basis of our legitimate interests (i.e. the interest in the analysis, optimisation and economic operation of our online service within the meaning of Art. 6(1)(f) of the GDPR), we use Google Analytics, a web-based analysis service of Google LLC (‘Google’).
Google Analytics uses so-called ‘cookies’. These are text files which are stored on your computer and enable us to analyse your use of the website. The information the cookie generates about your use of this website is usually transferred to a Google server in the USA and stored there.
IP anonymisation has been activated. This means that your IP address is truncated by Google beforehand within member states of the European Union or in other signatory States of the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and truncated there.
Google uses this information on behalf of the operator of this website to evaluate your use of the website, to compile reports on website activities and to deliver other services related to use of the website and use of the internet to the operator of the website.
The data is stored for 14 months.
You can prevent cookies from being stored by changing the settings of your browser software; however, we would like to point out that if you do so, you may not be able to make full use of this website’s features. You can also prevent the data generated by the cookie on your use of the website from being transmitted to Google (incl. your IP address) as well as the processing of these data by Google by downloading and installing the browser add-on available at the following link. The current link is 
http://tools.google.com/dlpage/gaoptout?hl=de.“
If your internet browser does not support the above link to the Google browser add-on (e.g. when accessing our website from your Smartphone), you can also prevent the collection of data by Google Analytics by clicking on the following link. An opt-out cookie will then be set which prevents future collection of your data when visiting this website:
YouTube
We embed videos from YouTube platform of Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA on our website. The videos have been embedded using extended privacy mode.
Embedding the video in enhanced privacy mode means that no cookies are saved that track user behaviour to personalise video playback. However, enhanced privacy mode only relates to recording user behaviour, and not ad serving.
When accessing our site, a device ID is created in the web browser’s local storage and saved after the session. In addition, accessing the site results in connecting to the Google DoubleClick network. Playing the video could result in more data processing. We have no influence over this.
If you're signed in to Google, your data is directly assigned to your account. If you do not want it to be assigned to your profile on YouTube, you must sign out before clicking on the button.
YouTube stores your data in user profiles and uses it for the purposes of advertising, market research and/or customising its website. Such an evaluation is particularly carried out (even for users who are not signed in) to provide appropriate advertising and to inform other social network users about their activities on our website. You have a right to object to the creation of these user profiles, and you must contact YouTube to exercise this right.
Option to object: https://adssettings.google.com/authenticated
For more information on the purpose and scope of data collection and data processing by YouTube, please see Google’s privacy policy. You can also find more information on your rights and settings to protect your privacy at: https://www.google.de/intl/de/policies/privacy
Google processes your personal data in the USA and is subject to the EU-US Privacy Shield: https://www.privacyshield.gov/EU-US-Framework.
Social plug-ins from social networks
We do not use any social plug-ins from social networks.
Links to other providers
Our website also contains clearly identifiable links to websites of other companies. If there are links to websites of other providers, we have no control over the content of such websites. As such, we cannot assume any guarantee or liability for this content. The respective provider or operator of the website is responsible for the contents of these web pages.
The linked pages were checked for possible legal breaches and identifiable infringements at the time of linking. Illegal content was not detected at the time of linking. However, permanent content monitoring for the linked pages is not deemed reasonable in the absence of concrete evidence of infringements. If infringements are found, such links will be removed immediately.
