DISCLAIMER
The operator of this website is Schuberth GmbH. Schuberth GmbH holds all rights to and content of this website. Schuberth GmbH makes every effort to produce all content, information and data with the greatest possible care. But any guarantee or liability for the correctness, completeness and/or up-to-date nature is explicitly excluded. All content of this website is used exclusively for the purposes of providing information. It contains neither an offer nor any other binding declaration and must not be understood as such.
Schuberth GmbH is not liable for damage caused by or as a result of using this website unless the actions of Schuberth GmbH were deliberate. In all cases liability for subsequent damages is excluded.
Schuberth GmbH points out that it is not obliged to update the contents of this website and is in particular permitted to modify the content at any time and / or to close the website at any time.
If reference is made to other websites using hyperlinks, Schuberth GmbH accepts no liability for the content of the sites accessed by hyperlinks or any damage and / or subsequent damage caused in connection with the link to these websites. Schuberth GmbH does not make the third-party websites or their content its own. Schuberth GmbH is not responsible either for the availability or the contents of third-party websites. The creation of a connection to the third-party websites occurs at the user's own risk.
DATA PROTECTION STATEMENT OF SCHUBERTH GMBH
1) Information on the collection of personal data and data controller’s contact details
1.1 We appreciate you taking the time to visit our website and thank you for your interest. We have compiled this document to inform you about the handling of your personal data while using our website. Personal data for this purpose means all data that can be used to personally identify you. The protection of your personal data is one of our top priorities. We will treat your personal data confidential and in accordance with the statutory data protection requirements and the provisions of this Data Protection Statement.
1.2 The Data Controller for the processing of data on this website in the meaning of the General Data Protection Regulation (GDPR) is SCHUBERTH GmbH, Stegelitzer Strasse 12, 39126 Magdeburg, Germany, Tel.: +49 391 8106 292, Email: kundenservice@schuberth.com. The Data Controller in charge of the processing of personal data is the legal entity or individual person who, alone or jointly with others, decides on the purposes and means of processing personal data.
1.3 The Data Controller has appointed a Data Protection Officer, who can be reached at the following contact details: Mr Matthias Kunert, cubeoffice GmbH & Co. KG Fichtestr. 29a 39112 Magdeburg, Germany, Telephone: +49 391 61128-69 Email: datenschutz@cubeoffice.de
1.4 For security reasons and to protect the transmission of personal data and other confidential information (e.g. orders or enquiries to the Data Controller), this website uses SSL and/or TLS encryption. You can identify an encrypted connection by the “https://” prefix and the padlock symbol in your browser address bar.
2) External hosting
This website is hosted by an external service provider (the hosting company). The personal data collected on this website will be stored on the hosting company’s servers. This data may in particular include IP addresses, contact enquiries, meta and communication data, contract data, contact data, names, website accesses and other data generated on a website.
We have involved the hosting company in the data processing for the purpose of performing our contractual obligations owed to our potential and current customers (Article 6 (1) lit. b GDPR), as well as in the interest of a secure, swift and efficient delivery of our online services via a professional service provider (Article 6 (1) lit. f GDPR).
Our hosting company will only process your data to the extent their processing is necessary for the hosting company to perform its contractual obligations and abide by our instructions issued with respect to this data. We have entered into a contract data processing agreement with our hosting company to assure that the processing of data complies with the pertinent data protection requirements.
3) Collection of data while visiting our website
If you only use our website to gather information without registering or otherwise transmitting any information to us, we will only collect the data that your browser transmits to our servers (so-called „server-logfiles“). When you access our website, we will process the following data, which we require for technical reasons in order to make the website available to you:
- Our website visited by you
- The date and time of the access
- Transmitted data volume in bytes
- Source/referrer from where you navigated to our website
- The type of internet browser
- Your type of operating system
- Your IP address (anonymised, if necessary)
The data processing takes place pursuant to Article 6 (1) lit. f GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data is not disclosed to third parties or used for any other purposes. We reserve the right to review our server logfiles if necessary to investigate specific indications that suggest an unlawful use of our online services.
4) Cookies
Some of our websites use so-called cookies that assist us in creating an attractive website experience and allow us to make certain functions available to you. Cookies are small text files that are stored on your user device. Some of the cookies we use are deleted at the end of the browser session, when you close your browser (so-called session cookies). Other cookies remain on your user device and allow us, or our partner companies (third-party cookies), to recognise your browser on your next visit to our website (persistent cookies). If cookies are placed, they will collect and process an individually determined scope of user information, such as browser type, location data and your IP address. Persistent cookies are automatically deleted after a certain period, which varies between the different cookies.
Some of the cookies serve the purpose of simplifying the order process by hashing certain settings (e.g. remembering the content of a virtual shopping cart for a later visit to the website). In as far as individual cookies implemented by us result in the processing of personal data, the data processing takes place pursuant to Article 6 (1) lit. b GDPR either for the purpose of performing a contract, or pursuant to Article 6 (1) lit. f GDPR for safeguarding our legitimate interest in the best-possible functionality of the website and a customer-friendly and effective website experience.
We may in certain circumstances cooperate with advertising partners, who assist us in creating more interesting online content for you. For this purpose, your visit to our website will in these cases also result in the placement of cookies from partner companies on your hard drive (third-party cookies). In each instance we cooperate with advertising partners, we will personally and separately inform you about any use of these types of cookies and the scope of the respectively collected information in accordance with the following clauses.
Please note that you can change the settings of your browser to be informed before a cookie is placed and asked whether you wish to accept the cookie in each individual case, or to configure your browser to reject all cookies or only certain cookies. Each browser is different in the way the cookie settings are administered. The settings are explained in the help menu of your browser, where you can find information on how to change your cookie settings.
Please remember that some of the functions offered on our website may be unavailable to you if you have set your browser to reject cookies.
Cloudflare In the interest of safeguarding our legitimate interests in accordance with Article 6 (1) lit. f GDPR, we use certain services provided by Cloudflare, 101 Townsend St., San Francisco, CA 94107 USA for the purpose of improving the performance and security of our website. The service provider is an active participant in the “EU-US Privacy Shield” and on this basis warrants an adequate level of data protection. More information on the processing of your data can be found in Cloudflare’s Data Protection Statement, which is available at: https://www.cloudflare.com/privacypolicy.
5) Contacting us
If you contact us (e.g. by phone or email), we will store and process certain personal data for the purpose of processing your request. Any disclosure of this data is strictly subject to your express prior consent. The legal basis for the processing of the data is our legitimate interest in responding to your request in accordance with Article 6 (1) lit. f GDPR. If your contact serves the purpose of entering into a contract, the data processing will also be based on Article 6 (1) lit. b GDPR. We will delete your data once your request has been closed, which is the case if the circumstances indicate that the concerned issue has been fully resolved, and subject to the deletion not being opposed by any statutory retention obligations.
6) Data processing when opening a customer account and for contractual purposes
In accordance with Article 6 (1) lit. b GDPR, we may continue to collect and process personal data for purposes related to the performance of a contract or opening of a customer account. The type of data that will be collected results from the respective data input forms. You may at any time request your customer account to be blocked or deleted by sending a notice to the data controller at the address specified above. We will store and use the data you have disclosed to us for purposes related to the performance of our contractual obligations. Once the contract has been fully performed or your customer account has been deleted we will, subject to applicable retention periods under tax and commercial law and their expiry, delete your data, unless you have expressly consented to the further use of your data, or unless we are permitted to further use the data under a statutory provision and subject to us informing you accordingly.
7) Use of your data for direct advertising purposes
7.1 Subscription to our email newsletter
You can receive regular updates on our offers by subscribing to our email newsletter. Your email address is the only mandatory information required to subscribe to the newsletter. Any additional data is disclosed voluntary and will be used to personalise our communications with you. The subscription to the newsletter uses a double opt-in registration process. This means that we will only start sending our email newsletter to your email address once you have expressly consented to receiving our newsletters. We will send you a confirmation email that contains a confirmation link. You are requested to click on the link and thereby confirm that you wish to receive future issues of our newsletter.
By activating the confirmation link, you declare your consent to the use of your personal data in accordance with Article 6 (1) lit. a GDPR. When you subscribe to our newsletter, we will also store your IP address transmitted by the Internet Service Provider (ISP) along with the date and time of your subscription and may later use this data to investigate any fraudulent use of your email address. We will use the data collected when subscribing to the newsletter exclusively for purposes related to the advertising communications contained in the newsletter. You may unsubscribe from the newsletter at any time by clicking on the unsubscribe link contained in each newsletter email, or by sending a request to the Data Controller at the address specified above. Once you have unsubscribed, your email address in our newsletter mailing list will be blocked from any future use. You may at any time re-subscribe to the newsletter by following the steps described above.
7.2 Sending of newsletters via CleverReach
Our email newsletters are sent out via the systems of our technical service provider CleverReach GmbH & Co. KG, Mühlenstr. 43, 26180 Rastede („CleverReach“), to whom we will disclose the personal data you have provided when subscribing to our newsletter. The disclosure is based on Article 6 (1) lit. f GDPR and serves our legitimate interest in using an advertising-effective, secure and user-friendly newsletter system. The data you have entered when subscribing to our newsletter (e.g. email address) will be stored on CleverReach servers in Germany and/or Ireland.
CleverReach uses this information to send out the newsletter and to generate statistical analyses about them on our behalf. For analysis purposes, the email messages contain so-called web beacons and/or tracking pixels, which are single-pixel image files that are stored on our website. They allow us to determine whether a newsletter email was opened and which of the links in the message were clicked on. We also use so-called conversion tracking to analyse whether a click on a link contained in the newsletter has resulted in a predefined action (e.g. purchase of a product on our website). We also collect technical information (e.g. date and time of access, IP address, browser type and operating system). The data is without exception collected in pseudonymised form and will not be linked to any other of your personal data. Any direct reference to an individual person is excluded. This data exclusively serves the purpose of generating statistical analyses of newsletter campaigns. The results of these analyses can be used to better gear future newsletters to the interests of their recipients.
If you object against the analysis of your data for statistical analysis purposes, you will have to unsubscribe from the newsletter.
We have entered into a contract data processing agreement with CleverReach. This agreement requires Clever Reach to treat the data of our customers in compliance with all relevant requirements under applicable data protection law.
Further information on the data analyses carried out by CleverReach can be found at: www.cleverreach.com/de/funktionen/reporting-und-tracking/ CleverReach’s data protection statement may be reviewed at: www.cleverreach.com/de/datenschutz/.
8) Data processing for order processing purposes
8.1 We will process your order in cooperation with the following service provider(s), who we have engaged to support us in the full or partial performance of our contractual obligations. We will disclose certain personal data to these service providers in accordance with the following provisions.
In as far as necessary to effect delivery of the goods, we will disclose the personal data collected by us to the transport company handling the shipment. We will disclose your payment data to our bank in as far as necessary to successfully process your payment. You are explicitly informed about the involvement of the payment service providers listed in the next clause. The legal basis for the disclosure of the data is Article 6 (1) lit. b GDPR.
8.2 Involvement of payment service providers
§ Heidelpay Credit card payments via Heidelpay are processed by our payment service provider Heidelberger Payment GmbH, Vangerowstrasse 18, 69115 Heidelberg, Germany (hereinafter “Heidelpay”). This requires us to disclose the data you have provided to us during the ordering process for the purpose of processing your payment in accordance with Article 6 (1) lit. b GDPR. We will only disclose your data to the extent it is required for processing the individual payment transaction. Heidelpay will - to the extent necessary - disclose your data in accordance with Article 6 (1) lit. b GDPR to HUELLEMANN & STRAUSS ONLINESERVICES S.A., 1, Place du Marché, 6755 Grevenmacher, Luxembourg, for downstream payment processing purposes. If you have selected the payment method “Purchase on account via Heidelpay” or “Direct Debit via Heidelpay”, the ordering process will prompt you to enter your personal data (first and last name, street, house number, postcode, town, date of birth, email address and telephone number). To safeguard our legitimate interest in determining the creditworthiness of our customers, we will disclose this data to Heidelberger Payment GmbH, Vangerowstr. 18, 69115 Heidelberg, Germany, in accordance with Article 6 (1) lit. f GDPR for the purpose of performing a credit assessment. Heidelpay will use the personal data provided by you together with other data (e.g. shopping cart, invoice amount, order history, payment history) to determine whether the assessed payment and default risks allows us to offer your preferred method of payment. An accordance with Article 6 (1) lit. f GDPR, a decision on the inception and performance of a contractual relationship may also include an assessment of identity or credit information obtained from the following sources:
- SCHUFA Holding AG, Kormoranweg 5, 65201 Wiesbaden
- CRIF Bürgel GmbH, Gasstrasse 18, 22761 Hamburg
- Arvato Infoscore GmbH, Rheinstrasse 99, 76532 Baden-Baden
- Deltavista GmbH, Kaiserstrasse 217, 76133 Karlsruhe
- UNIVERSUM Business GmbH, Hugo-Junkers-Strasse 3, 60386 Frankfurt am Main
- Bisnode International Group, Robert-Bosch-Strasse 11, 64293 Darmstadt
- Regis24 GmbH, Wallstrasse 58, 10179 Berlin
- Creditreform AG, Hellersbergstrasse 12, 41460 Neuss
The credit report may also contain probability values (so-called scoring values). In as far as scoring values form part of the result of the credit report, these values are based on a scientifically recognised mathematical-statistical method. Among other parameters, the scoring value is to some degree also calculated on the basis of address data. You may at any time object against this processing of your data by sending a notice of objection to the Data Controller or Heidelpay. Heidelpay may however continue to be authorised to process your personal data in as far as the processing is necessary for the contractually agreed processing of a payment.
9) Use of social media: Videos
Use of YouTube videos This website uses the YouTube embedding function to serve and play videos provided by “YouTube”, a company of Google LLC., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA („Google“).
Embedded content is served in the extended data protection mode, which - according to information from the providers of these services - only causes user data to be collected after the video playback has been started. If embedded YouTube videos are started, the service provider will use YouTube cookies for the purpose of collecting information on user behaviour. According to YouTube, this information is also used to compile video statistics, improve user-friendliness and prevent fraudulent use and behaviour. If you are logged into your Google account, your data will be attributed directly to your account when you click on a video. If you object against the attribution of data to your profile when using YouTube, you will have to log out before activating the button. Google will store your data (even if you are logged out) in the form of user profiles, which Google analyses for its own purposes. You have the right to object against the generation of these user profiles and should contact YouTube directly if you wish to exercise this right.
Irrespective of whether an embedded video is played or not, your access to our website will establish a connection to the Google “DoubleClick” network, which may cause other data processing operations that are outside of our sphere of control.
Google LLC with registered office in the USA is certified under the “EU-US Privacy Shield”, which warrants a level of data protection that is equal to the level required within the EU.
Further information on data protection when using YouTube can be found in the service provider’s data production statement available at: www.google.de/intl/de/policies/privacy
10) Tools and miscellaneous
10.1 Google reCAPTCHA
This website also uses the reCAPTCHA function provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA („Google“). The main purpose of this function is to determine whether an input is made by a genuine person or by computerised and automated means for fraudulent purposes. The service includes the retrieval of the IP address and, if necessary, other data required by Google for the reCAPTCHA service to Google. It is based on Article 6 (1) lit. f GDPR due to our legitimate interest in determining the legal effectiveness of an individual’s actions performed on the Internet, and to prevent abuse and spam.
Google LLC with registered office in the USA is certified under the “EU-US Privacy Shield”, which warrants a level of data protection that is equal to the level required within the EU.
Further information on Google reCAPTCHA and Google’s data protection policy can be reviewed at: www.google.com/intl/de/policies/privacy/
10.2 Google Maps
Our website uses Google Maps API provided by Google LLC., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). Google Maps is a web service that displays interactive maps that can be used to visually present geographic information. Using this service allows us to display our location to you and provide helpful information on how to find us.
When you access a webpage that features an embedded map from Google Maps, data on your use of our website (e.g. your IP address) will be transmitted to a Google server in the USA and stored there. This takes place irrespective of whether or not you are logged in to a Google user account. If you are logged in your Google account, your data will be attributed directly to your account. If you object against the attribution of your data to your Google profile, you will have to log out before activating the button. Google will store your data (even if you are logged out) in the form of user profiles, which Google analyses for its own purposes. You have the right to object against the generation of these user profiles and should contact Google directly if you wish to exercise this right.
Google LLC with registered office in the USA is certified under the “EU-US Privacy Shield”, which warrants a level of data protection that is equal to the level required within the EU.
If you object against the future transmission of your data to Google when using Google Maps, you may also completely deactivate the Google Maps Web service by deactivating the application JavaScript in your browser. You will then no longer be able to use Google Maps and the maps embedded on this website.
The Google Terms of Use can be reviewed at www.google.de/intl/de/policies/terms/regional.html, the additional Terms of Use for Google Maps can be found at www.google.com/intl/de_US/help/terms_maps.html Detailed information on data protection when using Google Maps can be found on the Google website (“Google Privacy Policy”) available at: http://www.google.de/intl/de/policies/privacy/
11) Google Tag Manager
This website uses the Google Tag Manager. The Google Tag Manager is a service that provides a user interface for the administration of website tags. The Google Tool Manager is only used to import tags. This means: No cookies will be placed and no personal data will be collected. The Google Tool Manager may activate other tags that may themselves collect certain data. The Google Tag Manager will however not access this data. A deactivation on domain- or cookie-level will remain active for all tracking tags that were implemented using the Google Tag Manager.
12) Rights of data subjects
12.1 The current data protection law provides for extensive rights for data subjects with respect to the processing of their personal data, which they may exercise against the data controller. The following information serves the purpose of informing you about your rights as a data subject:
- Right to information pursuant to Article 15 GDPR: You have the right to receive information on your personal data processed by us, the purposes of their processing, the categories of process personal data, the recipients or categories of recipients to whom your data is or was disclosed, the planned duration of storage and/or criteria for determining the duration of storage, the existence of a right to the correction and deletion of your data and a right to restrict the processing of your data, the right to object against the processing of your data, the right to complain with a supervisory authority, the right to know the source of any of your personal data that was not collected by us, the existence of an automated decision-making process including profiling and, if applicable, meaningful information about the involved logic and the intended effects of such a processing of data and the impact of these effects on you, as well as your right to receive information on guarantees in accordance with Article 46 GDPR with respect to the transfer of your data to third countries;
- Right to the correction of your data pursuant to Article 16 GDPR: You have the right to the prompt correction of any incorrect personal data and/or the completion of any incomplete personal data stored by us;
- Right to be forgotten pursuant to Article 17 GDPR: Subject to meeting the conditions stipulated in Article 17 (1) GDPR, you have the right to demand your personal data to be deleted. This right is however excluded if the processing of data is necessary to exercise the right to freedom of expression and freedom of information, for assuring compliance with a legal obligation, for reasons of public interest, or for asserting, exercising or defending legal interests.
- Right to demand the data processing to be restricted pursuant to Article 18 GDPR: You have the right to demand the processing of your personal data to be restricted for as long you continue to investigate the contested accuracy of your data, if you have declined the deletion of your data due to unlawful data processing and instead demand the processing of your data to be restricted, if you require your data for asserting, exercising or defending legal interests, after we have achieved the purpose of the data processing and no longe require the data, or if you have lodged an objection for reasons resulting from your personal circumstances and in this case for as long as it remains uncertain whether our legitimate interests prevail;
- Right to notification pursuant to Article 19 GDPR: If you have exercised your right to the correction of your data, the right to be forgotten or the right to restrict the processing of your data against the Data Controller, the Data Controller will be required to notify all recipients to whom your personal data was disclosed of the correction or deletion of the data or their restriction for processing, unless such notification is infeasible or entails a disproportionate effort. You have the right to be notified of these recipients.
- Right to data portability pursuant to Article 20 GDPR: You have the right to receive your personal data made available to us in a structured, commonly used and machine-readable format, or - in as far as technically feasible - to demand the data to be transferred to another data controller.
- Right to revoke previously granted declarations of consent pursuant to Article 7 (3) GDPR: You have the right to at any time revoke a previously granted declaration of consent to the processing of data with effect for the future. We will promptly delete the concerned data if you revoke your consent and no legal basis that does not require your consent can be invoked for a further processing of the data. A revocation of consent is without prejudice to the lawfulness of any data processing that took place before your revocation notice.
- Right to lodge a complaint pursuant to Article 77 GDPR: If you believe that the processing of your personal data infringes against the GDPR, you have - without prejudice to any other administrative or judicial legal remedies - the right to lodge a complaint with a supervisory authority in general, and in particular in the Member State of your place of residence, your workplace or the place where the alleged infringement took place.
12.2 RIGHT TO OBJECT AGAINST THE COLLECTION OF DATA IN SPECIAL CIRCUMSTANCES AND AGAINST DIRECT ADVERTISING (ARTICLE 21 GDPR)
IF THE DATA PROCESSING IS BASED ON ARTICLE 6 (1) LIT. E OR F GDPR, YOU HAVE THE RIGHT TO AT ANY TIME OBJECT AGAINST THE PROCESSING OF YOUR PERSONAL DATA FOR REASONS RESULTING FROM YOUR SPECIAL CIRUCUMSTANCES; THIS ALSO APPLIES TO PROFILING BASED ON THE SAME LEGAL STIPULATIONS. THE RESPECTIVE LEGAL BASIS FOR THE PROCESSING OF DATA IS SPECIFIED IN THIS DATA PROTECTION STATEMENT. IF YOU OBJECT, WE WILL ASSESS WHETHER WE ARE ABLE TO CEASE THE PROCESSING OF YOUR PERSONAL DATA, UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE REASONS FOR THE DATA PROCESSING THAT PREVAIL OVER YOUR INTERESTS, RIGHTS AND FREEDOMS, OR UNLESS THE DATA PROCESSING SERVES THE PURPOSE OF ASSERTING, EXERCISING OR DEFENDING LEGAL INTERESTS (OBJECTION PURSUANT TO ARTICLE 21 (1) GDPR).
IF WE PROCESS YOUR PERSONAL DATA FOR DIRECT ADVERTISING PURPOSES, YOU HAVE THE RIGHT TO AT ANY TIME OBJECT AGAINST THE PROCESSING OF YOUR PERSONAL DATA FOR THESE KINDS OF ADVERTISING PURPOSES. THIS ALSO APPLIES TO PROFILING THAT IS RELATED TO SUCH DIRECT ADVERTSING PURPOSES. YOU MAY EXERCISE YOUR RIGHT TO OBJECT IN THE MANNER DESCRIBED ABOVE.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE TO PROCESS YOUR PERSONAL DATA FOR DIRECT ADVERTISING PURPOSES (OBJECTION PURSUANT TO ARTICLE 21 (2) GDPR).
13) Duration of the storage of personal data
The duration of storage of personal data is based on the relevant statutory retention period (e.g. under commercial or tax law). The relevant data will be deleted after expiry of the respective period in as far as the data is no longer required for the inception or performance of a contract and/or we no longer have a legitimate interests in continuing their storage.
14) Future amendments to our Data Protection Statement
We reserve the right to amend our Data Protection Statement from time to time and thereby assure compliance with the current statutory requirements. This also applies if the Data Protection Statement is amended due to new or modified performances, e.g. new services, products or functions on our website, or due to other data processing activities. Your next visit will then be governed by our amended Data Protection Statement.
We greatly appreciate your understanding.