We are pleased that you are visiting our website. The protection and security of your personal information when using our website is very important to us. We would therefore like to inform you at this point which of your personal data we collect when you visit our website and for what purposes it is used.

This data protection declaration applies to the website of Schirmer Kaffee GmbH, which can be reached under the domain schirmer-kaffee.de as well as the various subdomains (“our website”).

Who is responsible and how do I contact you?

Responsible
for the processing of personal data within the meaning of the EU General Data Protection Regulation (GDPR)

Schirmer Kaffee GmbH
Heßlingsweg 28
44309 Dortmund
DE
Tel: +49 (0) 231 / 55 71 88 -0
E-Mail: info@schirmer-kaffee.de

Data Protection Officer
AGAD Service GmbH
Waldring 43-47
44789 Bochum
DE
Nils Dr. Helmke
E-Mail: helmke@agad.de

What is this about?

This data protection declaration meets the legal requirements for transparency in the processing of personal data. It covers any information that relates to an identified or identifiable natural person, such as your name, age, address, telephone number, date of birth, e-mail address, IP address, or user behavior when visiting a website. Information that cannot be traced back to you personally, for example through anonymization, is not considered personal data. The processing of personal data (e.g. collection, querying, use, storage, or transmission) always requires a legal basis and a defined purpose.

Stored personal data are deleted as soon as the purpose of the processing has been achieved and there are no legitimate reasons for further retention. We will inform you about the specific storage periods and criteria for storage in the individual processing operations. In any case, we may store your personal data to assert, exercise, or defend legal claims or if there are statutory retention requirements.

Who gets my data?

We only pass on your personal data that we process on our website to third parties if it is necessary for the fulfillment of the purposes and is covered by the legal basis (e.g. consent or protection of legitimate interests). Additionally, we may pass on personal data to third parties to assert, exercise, or defend legal claims. Possible recipients include, for example, law enforcement authorities, lawyers, auditors, and courts.

If we use service providers for operating our website who, as part of order processing on our behalf, process personal data in accordance with Art. 28 GDPR, these processors may also receive your data. Detailed information on the use of processors and web services can be found in the overview of the individual processing operations.

Do you use cookies?

Cookies are small text files that we send to the browser of your device and store during your visit to our website. Alternatively, information may also be stored in the local storage of your browser. Some functions of our website cannot be offered without the use of cookies or local storage (technically necessary cookies). Other cookies allow us to perform various analyses, for example to recognize your browser upon your next visit and to transmit various information to us (non-necessary cookies).

Cookies enable us to make our website more user-friendly and effective, for instance by tracking your use of our website and determining your preferred settings (e.g. country and language settings). If third parties process information via cookies, they collect the information directly through your browser. Cookies do not cause any damage to your device and cannot run programs or contain viruses.

We inform you about the respective services for which we use cookies in the individual processing operations. Detailed information on the cookies used can be found in the cookie settings or in the Consent Manager of this website.

What rights do I have?

Under the statutory provisions of the General Data Protection Regulation (GDPR), you as a data subject have the following rights:

• Right to Information (Art. 15 GDPR): You are entitled to obtain meaningful information on the details of the processing and a copy of your data.
• Right to Correction (Art. 16 GDPR): You may have inaccurate or incomplete data corrected.
• Right to Deletion (Art. 17 GDPR): You can request the deletion of your data, provided the processing is not necessary for the exercise of the right to freedom of expression and information, compliance with a legal obligation, public interest, or for the assertion, exercise, or defense of legal claims.
• Right to Restriction of Processing (Art. 18 GDPR): In cases of disputed accuracy, unlawful processing, or if you have objected to the processing under Art. 21 GDPR, you may request that the processing is restricted.
• Right to Data Portability (Art. 20 GDPR): If you have provided personal data based on consent (Art. 6 sec. 1 lit. a GDPR) or for the execution of a contract (Art. 6 sec. 1 lit. b GDPR) and the processing is automated, you are entitled to receive your data in a structured, commonly used, and machine-readable format, or have it transmitted directly to another controller where technically feasible.
• Right to Object (Art. 21 GDPR): You may object to the processing of your personal data based on your particular situation or for direct marketing purposes, unless overriding reasons for processing are demonstrated or the processing is necessary for legal claims.
• Right to Withdraw Consent (Art. 7 sec. 3 GDPR): You may revoke your consent with effect for the future.
• Right to Complain (Art. 77 GDPR): If you believe the processing of your personal data violates the GDPR, you can lodge a complaint with a supervisory authority. Typically, you may contact the supervisory authority of your usual place of residence, your workplace, or our company headquarters.

How will my data be processed in detail?

Below you will find information on the individual processing operations, the scope and purpose of the data processing, the legal basis, the obligation to provide your data, and the respective storage period. No automated individual decision-making or profiling takes place.

Provision of the Website

Type and Scope of Processing
When you visit and use our website, we collect the personal data that your browser automatically transmits to our server. The following information is temporarily stored in a so-called log file:

• IP address of the requesting computer
• Date and time of access
• Name and URL of the retrieved file
• Website from which access is made (referrer URL)
• Browser used, and if applicable, the operating system of your computer, as well as the name of your access provider

[Our website is not hosted by us but by a service provider who processes the aforementioned data on our behalf in accordance with Art. 28 GDPR.]

Purpose and Legal Basis
The processing is carried out to safeguard our overriding legitimate interest in displaying our website and ensuring security and stability, based on Art. 6 para. 1 lit. f GDPR. The collection of data and storage in log files is essential for the operation of the website. There is no right to object to this processing due to the exception under Art. 21 para. 1 GDPR. Where further storage of the log files is required by law, the processing is based on Art. 6 para. 1 lit. c GDPR. There is no legal or contractual obligation to provide the data, but it is technically not possible to call up our website without providing it.

Storage Duration
The aforementioned data are used for the duration of the display of the website [and, for technical reasons, for a maximum of [7 days] beyond that].