Privacy Policy

Unless otherwise stated in this Privacy Policy, the provision of your personal data is neither a legal nor a contractual requirement, nor is it necessary for the conclusion of a contract. You are not obligated to provide such data, and failure to do so will not result in any consequences, unless otherwise indicated in the data processing activities described below. Personal data refers to any information relating to an identified or identifiable natural person.

Server Log Files

You may visit our website without providing any personal data. Each time you access our site, your web browser transmits usage data to us or to our hosting/IT service provider. This data is stored in log files (so-called Server-Logfiles). It includes, among other things, the name of the page accessed, the date and time of access, the IP address, the amount of data transferred, and the Internet service provider. The processing of this data is based on Article 6(1)(f) of the GDPR, based on our overriding legitimate interest in ensuring the smooth operation of our website and in continuously improving our offerings.

Contact

Data Controller/Data Protection Officer Please contact us if you have any questions. The data controller for Horizont Rolos Sp. z o.o. is: Steffen Müller, Homberger Weg 4–6, 34497 Korbach, Germany, +49 5631 565 0, info@horizont.com

You can contact our Data Protection Officer directly at: datenschutz@horizont.com

Data processing within the whistleblower protection system

If you submit information to the internal reporting office as part of the established whistleblower protection system, we collect your personal data (first and last name, email address, address, message content, information on violations within the meaning of Section 3(3) of the HinSchG, information on the identity of protected persons in accordance with the HinSchG) only to the extent you have provided it. The processing of data serves to fulfill the tasks, obligations, and rights of the internal reporting office assigned to it by the HinSchG. Data processing is carried out to fulfill a legal obligation pursuant to Article 6(1)(c) of the GDPR in conjunction with § 10 of the HinSchG. Your data will then be deleted in accordance with statutory retention periods (3 years after the conclusion of proceedings within the meaning of § 18 of the HinSchG).

Customer contact via email on your own initiative

If you contact us via email on your own initiative, we collect your personal data (first and last name, email address, message content) only to the extent you provide it. Data processing serves to handle and respond to your inquiry. If the contact serves to carry out pre-contractual measures (e.g., consultation regarding a purchase, preparation of an offer) or relates to a contract already concluded between you and us, data processing is based on Article 6(1)(b) of the GDPR. If contact is established for other reasons, data processing is based on Article 6(1)(f) of the GDPR, based on our overriding legitimate interest in handling and responding to your inquiry. In this case, you have the right, for reasons arising from your particular situation, to object at any time to the processing of your personal data based on Article 6(1)(f) of the GDPR. We use your email address exclusively to handle your inquiry. Your data will then be deleted in accordance with statutory retention periods, unless you have consented to further processing and use.

Collection and processing of data when using the contact form

When you use the contact form, we collect your personal data (first and last name, email address, message content) only to the extent you provide it. The data is processed for the purpose of establishing contact. If establishing contact serves the purpose of pre-contractual measures (e.g., consultation regarding a purchase, preparation of an offer) or relates to a contract already concluded between you and us, data processing is based on Article 6(1)(b) of the GDPR. If contact is established for other reasons, data processing is based on Article 6(1)(f) of the GDPR, based on our overriding legitimate interest in handling and responding to your inquiry. In this case, you have the right, for reasons arising from your particular situation, to object at any time to the processing of your personal data based on Article 6(1)(f) of the GDPR. We use your email address exclusively to handle your inquiry. Your data will then be deleted in accordance with statutory retention periods, unless you have consented to further processing and use.

Collection and Processing of Data When Submitting Applications via Email

Visitors to the website may, if interested in the job openings advertised on our website, submit applications via email. For this purpose, we collect your personal data only to the extent you provide it. This includes your contact information (e.g., first and last name, email address, phone number), information regarding your professional qualifications and education, information regarding further professional training, and evidence of your achievements. The processing of your data serves to establish contact and make a decision regarding the establishment of an employment relationship with you. Providing your data is necessary to conduct the recruitment process. The processing of your personal data is based on Article 6(1)(b) of the GDPR in conjunction with Section 26(1) of the BDSG for the purpose of carrying out pre-contractual measures (the recruitment process as a step toward entering into an employment contract). If you have given us your consent to process your personal data for inclusion in our candidate database, e.g., by checking a checkbox, the processing is based on Article 6(1)(a) of the GDPR. You may withdraw your consent at any time, without affecting the lawfulness of the processing carried out on the basis of your consent prior to its withdrawal. If, as part of the recruitment process, special categories of personal data within the meaning of Article 9(1) of the GDPR are collected, such as information regarding the degree of disability, this is done on the basis of Article 9(2)(b) of the GDPR, so that we may exercise our rights under labor law and social security and social protection law and fulfill our related obligations. We store your personal data for as long as necessary to make a decision regarding your application. Your data will then be deleted no later than six months after the recruitment process concludes, unless you have consented to further processing and use. If an employment relationship is established following the conclusion of the recruitment process, the data provided will continue to be processed pursuant to Article 6(1)(b) of the GDPR in conjunction with Section 26(1) of the BDSG for the purposes of the employment relationship and will subsequently be transferred to your personnel file.

Collection and Processing of Data When Using the Application Form

When using the application form, we collect your personal data only to the extent you provide it. This includes your contact details (e.g., first and last name, email address, phone number), information regarding your professional qualifications and education, information regarding further professional training, and evidence of your achievements. Data processing serves the purpose of establishing contact and making a decision regarding the establishment of an employment relationship with you. Providing your data is necessary to conduct the recruitment process. The processing of your personal data is based on Article 6(1)(b) of the GDPR in conjunction with Section 26(1) of the BDSG for the purpose of carrying out pre-contractual measures (the recruitment process as a step toward entering into an employment contract). If you have given us your consent to process your personal data for inclusion in our candidate database, e.g., by checking a checkbox, the processing is based on Article 6(1)(a) of the GDPR. You may withdraw your consent at any time, without affecting the lawfulness of the processing carried out on the basis of your consent prior to its withdrawal. If, as part of the recruitment process, special categories of personal data within the meaning of Article 9(1) of the GDPR are collected, such as information regarding the degree of disability, this is done on the basis of Article 9(2)(b) of the GDPR, so that we may exercise our rights under labor law and social security and social protection law and fulfill our related obligations. We store your personal data for as long as necessary to make a decision regarding your application. Your data will then be deleted no later than six months after the recruitment process concludes, unless you have consented to further processing and use. If an employment relationship is established following the conclusion of the recruitment process, the data provided will continue to be processed pursuant to Article 6(1)(b) of the GDPR in conjunction with Section 26(1) of the BDSG for the purposes of fulfilling the employment relationship and will subsequently be transferred to your personnel file.

Use of WeTransfer

We use the WeTransfer service provided by WeTransfer B.V. (Willem Fenengastraat 19, 1096 BL Amsterdam, Netherlands; “WeTransfer”) to send files up to 2 GB in size at your request. This service is used to transfer large files in high quality. For this purpose, we provide your email address and the file to be transferred to WeTransfer. WeTransfer generates a download link, which is sent to you and to us via email. The data is encrypted during transmission and storage by WeTransfer and can only be downloaded via the download link. Your personal data may be transferred to WeTransfer’s servers in the U.S. and temporarily stored there (in some cases unencrypted). For the US, there is an EU Commission adequacy decision, the Trans-Atlantic Data Privacy Framework (TADPF). WeTransfer is not certified under the TADPF. The transfer of data is based, among other things, on standard contractual clauses as appropriate safeguards for the protection of personal data, available at: https://commission.europa.eu/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_de. Processing is based on Article 6(1)(a) of the GDPR with your consent, provided that you have expressly consented to the use of WeTransfer. You may withdraw your consent at any time by notifying us, without affecting the lawfulness of the processing carried out on the basis of your consent prior to its withdrawal. For more information on data protection when using WeTransfer, please visit: https://wetransfer.com/legal/privacy.

Customer Account | Orders

Customer Account When you create a customer account, we collect your personal data to the extent specified there. The processing of this data serves to improve your shopping experience and simplify order fulfillment. Processing is based on Article 6(1)(a) of the GDPR with your consent. You may withdraw your consent at any time by notifying us, without affecting the lawfulness of the processing carried out on the basis of consent prior to its withdrawal. Your customer account will then be deleted.

Collection, processing, and transfer of personal data for orders When you place an order, we collect and process your personal data only to the extent necessary to fulfill and process your order and to handle your inquiries. Providing your data is necessary for the conclusion of a contract. Failure to provide your data will result in the inability to conclude a contract. Processing is based on Article 6(1)(b) of the GDPR and is necessary for the performance of the contract with you. Your data is transferred, for example, to courier companies, dropshipping/fulfillment providers, payment service providers, order processing service providers, and IT service providers. In all cases, we strictly comply with statutory regulations. The scope of data transfer is limited to the minimum necessary.

Advertising

Use of your email address for sending newsletters We use your email address, independently of the performance of the contract, exclusively for our own advertising purposes to send you a newsletter, provided you have given your explicit consent. Processing is based on Article 6(1)(a) of the GDPR with your consent. You may withdraw your consent at any time, without affecting the lawfulness of the processing carried out on the basis of your consent prior to its withdrawal. You may unsubscribe from the newsletter at any time by using the appropriate link in the newsletter or by notifying us. Your email address will then be removed from the distribution list.

Use of CleverReach We use the services of CleverReach GmbH & Co. KG (Schafjückenweg 2, 26180 Rastede; “CleverReach”) as a data processor. We provide CleverReach with the information you provided when you subscribed to the newsletter (email address, and possibly your first and last name). Data processing serves the purpose of sending the newsletter and its statistical evaluation. To evaluate newsletter campaigns, the newsletters sent contain a 1x1-pixel graphic (tracking pixel) or a tracking link. This allows us to determine whether you opened the newsletter and whether you clicked on any integrated links. Through conversion tracking, we can analyze whether, for example, a purchase was made after clicking a link in the newsletter or whether you registered on our website. In this context, we collect your personal data, such as your IP address, browser and device type, and the time. Based on this data, pseudonymous usage profiles may be created. The collected data is not used to personally identify you. The collected data is used exclusively for statistical evaluation to improve our newsletter campaigns. The processing of your personal data is based on Article 6(1)(f) of the GDPR, grounded in our overriding legitimate interest in a targeted, advertising-oriented, and user-friendly newsletter system. You have the right, for reasons arising from your particular situation, to object at any time to the processing of your personal data. For more information and Cleverreach’s privacy policy, please visit: https://www.cleverreach.com/de-de/datenschutz/ and https://www.cleverreach.com/de-de/newsletter-tool/newsletter-reporting/.

 

Shipping Service Provider | Warehouse Management

Sharing your email address with the shipping company to provide shipment status updates We share your email address with the shipping company as part of fulfilling the contract, provided you have given your explicit consent during the ordering process. This sharing is intended to inform you via email about the shipment status. Processing is based on Article 6(1)(a) of the GDPR with your consent. You may withdraw your consent at any time by notifying us or the shipping company, without affecting the lawfulness of processing carried out on the basis of consent prior to its withdrawal.

Use of an External Warehouse Management System To fulfill the contract, we use a warehouse management system as part of commissioned processing. For this purpose, your personal data collected as part of the order is transferred to: Pimcore hosted on AWS by Blackbit Digital Commerce GmbH, Ernst-Ruhstrat-Straße 6, 37079 Göttingen. The processing of your personal data serves to fulfill the contract concluded with you and is based on Article 6(1)(b) of the GDPR.

Payment Service Providers

Use of the payment service provider Stripe On our website, we use the Stripe payment service provided by Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland. The processing of data serves the purpose of enabling you to make payments via this service. When you select and use Stripe, the data necessary to process the payment is transmitted to Stripe for the purpose of fulfilling the contract with you using the selected payment method. This processing is based on Article 6(1)(b) of the GDPR. Stripe reserves the right to obtain creditworthiness information based on mathematical-statistical procedures using a credit reporting agency. For this purpose, Stripe transfers the personal data necessary for the credit assessment to a credit reporting agency and uses the information received regarding the statistical probability of non-payment to make a balanced decision regarding the establishment, performance, or termination of the contractual relationship. The creditworthiness assessment may include probability values (scores) that are calculated based on scientifically recognized mathematical and statistical procedures, and address data, among other factors, is taken into account in these calculations. Your legitimate interests are taken into account in accordance with the law. Data processing serves the purpose of assessing creditworthiness for the purpose of entering into a contract. Processing is carried out pursuant to Article 6(1)(f) of the GDPR based on our overriding legitimate interest in protecting against non-payment when Stripe makes advance payments. You have the right, for reasons arising from your particular situation, to object at any time to the processing of your personal data based on Article 6(1)(f) of the GDPR by notifying Stripe. Providing your data is necessary to conclude a contract using your chosen payment method. Failure to provide this data will result in the inability to conclude a contract with your chosen payment method. All Stripe transactions are subject to Stripe’s privacy policy. You can find it at https://stripe.com/de/privacy.

Cookies

Our website uses cookies. Cookies are small text files that are stored in or by the web browser on the user’s computer system. When you visit a website, a cookie may be stored on your operating system. This cookie contains a unique string of characters that allows the browser to be uniquely identified when you revisit the website.

Cookies are stored on your computer. You therefore have full control over the use of cookies. By selecting the appropriate technical settings in your web browser, you can be notified before cookies are set and decide individually whether to accept them, as well as prevent the storage of cookies and the transmission of the data they contain. Cookies that have already been saved can be deleted at any time. Please note, however, that in this case you may not be able to fully use all the features of this website.

You can find out how to manage (including disabling) cookies in the most popular browsers via the links below: Chrome: https://support.google.com/accounts/answer/61416?hl=pl Microsoft Edge: https://support.microsoft.com/de-de/microsoft-edge/cookies-in-microsoft-edge-lB6schen -63947406-40ac-c3b8-57b9-2a946a29ae09 Mozilla Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen Safari: https://support.apple.com/de-de/guide/safari/manage-cookies-and-website-data-sfri11471/mac

Technically Necessary Cookies Unless otherwise specified in the privacy policy below, we use these technically necessary cookies solely to make our website more user-friendly, efficient, and secure. Additionally, cookies enable our systems to recognize your browser even after you navigate away from a page and to provide you with services. Some features of our website cannot be provided without the use of cookies. For this purpose, it is necessary to recognize your browser even after you navigate to another page. The use of cookies or similar technologies is based on § 25(2) of the TDDDG. The processing of your personal data is based on Article 6(1)(f) of the GDPR, grounded in our overriding legitimate interest in ensuring optimal website functionality and in designing our website in a user-friendly and efficient manner. You have the right, for reasons arising from your particular situation, to object at any time to the processing of personal data concerning you.

Use of Usercentrics On our website, we use the Usercentrics consent management tool from Usercentrics GmbH (Rosenthal 4, 80331, Munich; “Usercentrics”). This tool allows you to grant consent to data processing via the website, in particular to the setting of cookies, as well as to exercise your right to withdraw consent already granted. The data processing serves the purpose of obtaining and documenting the necessary consents for data processing and thereby complying with legal obligations. Cookies may be used for this purpose. The following information, among others, may be collected and transmitted to Usercentrics: date and time of the page visit, information about the browser and device used, anonymous IP address, opt-in and opt-out data. Usercentrics uses the Google Cloud Platform provided by Google Ireland Limited, which may result in the transfer of your data to the U.S. There is no EU Commission adequacy decision for the US. The transfer of data is based, among other things, on standard contractual clauses as appropriate safeguards for the protection of personal data, available at: https://policies.google.com/privacy/frameworks. Data processing is carried out to fulfill a legal obligation pursuant to Article 6(1)(c) of the GDPR. Proof of the withdrawal of previously granted consent is retained for a period of three years. For more information on data protection at Usercentrics, please visit: https://usercentrics.com/privacy-policy/.

Analysis | Ad Tracking

Use of Google Analytics 4 On our website, we use the web analytics service Google Analytics provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; “Google”). Data processing serves the purpose of analyzing this website and its users, as well as for marketing and advertising purposes. To this end, Google, on behalf of the operator of this website, will use the information obtained to evaluate your use of the website, to compile reports on website activity, and to provide other services related to website and internet usage to the website operator. The following information, among others, may be collected: IP address, date and time of the page visit, clickstream, information about the browser and device used, pages visited, referring URL (the website from which you accessed our site), location data, and purchasing activity. Your data may be combined by Google with other data, such as your search history, your personal accounts, data regarding the use of other devices, and any other data that Google holds about you.

Your IP address is first shortened by us on our own servers. Google thus receives only pseudonymized data.

Google uses technologies such as cookies, browser storage, and tracking pixels to analyze your use of the website. The use of cookies or similar technologies is based on your consent pursuant to Section 25(1) sentence 1 of the TDDDG in conjunction with Article 6(1)(a) of the GDPR.