Data protection

Thank you for your interest in our company. We take data protection seriously.

You can generally use our website without providing any personal data. If a data subject wishes to use our company's services via our website, processing of personal data may be necessary. If the processing of personal data is necessary and there is no legal basis for such processing, we will always obtain the consent of the data subject.

The processing of personal data (e.g. name, address, e-mail address or telephone number of a data subject) is always carried out in accordance with the General Data Protection Regulation (GDPR) and in accordance with the country-specific data protection regulations applicable to us.

With the following privacy policy, we would like to inform the public about the nature, scope, and purpose of the personal data we collect, use, and process. This privacy policy also informs data subjects about their rights.

As the controller, we have implemented numerous technical and organizational measures to ensure the most complete protection possible for personal data processed through our website. However, data transmissions over the Internet can generally contain security gaps. Therefore, 100% protection cannot be guaranteed. Therefore, any The data subject can of course also transmit personal data alternatively, for example by telephone.

Definitions

This privacy policy is based on the definitions used by the European legislator for the adoption of the GDPR (Article 4 GDPR). This privacy policy is intended to be both easy to read and understand for everyone. To ensure this, we would first like to explain the terms used. Among other things, the following definitions are used in this privacy policy:

  • ‘ personal data ’ means any information relating to an identified or identifiable natural person (hereinafter ‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person;
  • “ data subject ” means any identified or identifiable natural person whose personal data is processed by the controller.
  • “ processing ” means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction;
  • ‘ restriction of processing ’ means the marking of stored personal data with the aim of limiting their future processing;
  • ‘ Profiling ’ means any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to a natural person, in particular to analyse or predict aspects concerning that natural person’s performance at work, economic situation, health, personal preferences, interests, reliability, behaviour, location or movements;
  • ‘ controller ’ means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law;
  • ‘ recipient ’ means a natural or legal person, public authority, agency or other body to which personal data are disclosed, whether a third party or not. However, public authorities which may receive personal data in the framework of a particular inquiry in accordance with Union or Member State law shall not be considered recipients; the processing of those data by those public authorities shall be in compliance with the applicable data protection rules and in accordance with the purposes of the processing;
  • ‘ third party ’ means a natural or legal person, public authority, agency or body other than the data subject, controller, processor and persons who, under the direct authority of the controller or processor, are authorised to process personal data;
  • “ Consent ” of the data subject means any freely given, specific, informed and unambiguous indication of the data subject’s wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her.

Name and contact details of the controller

This privacy policy applies to data processing by:

Responsible : Christian Rziczny, Auf den Höfften 7, 49434 Neuenkirchen-Vörden, Telephone: 0160/97270188, Fax: 05495/994591, Email: info@crz-raceparts.de

Our website is encrypted for security reasons (SSL or TLS encryption).

You can use an encrypted connection by the lock symbol in the browser line and the string “https://” in the browser.

Collection and storage of personal data as well as the nature and purpose of their use

When you visit the website

You can generally use our website without revealing your identity. When you visit our website, the browser used on your device automatically sends information to our website server. This information is temporarily stored in a so-called log file. The following information is collected without your intervention and stored until automatically deleted:

  • IP address of the requesting computer,
  • Date and time of access,
  • Name and URL of the retrieved file,
  • Website from which access is made (referrer URL),
  • browser used and, if applicable, the operating system of your computer as well as the name of your access provider.

We process the above data for the following purposes:

  • Ensuring a smooth connection to the website,
  • Ensuring comfortable use of our website,
  • Evaluation of system security and stability as well as
  • for further administrative purposes.

The legal basis for data processing is Art. 6 (1) (f) GDPR. Our legitimate interest arises from the purposes for data collection listed above. Under no circumstances will we use the collected data to draw conclusions about you personally.

In addition, we use cookies and analytics services when you visit my website. Further information can be found in sections 5 and 7 of this privacy policy.

When using our contact form

If you have any questions, you can contact us using a form provided on our website. You must provide a valid email address so that we know who sent the inquiry and can respond to it. You can provide additional information voluntarily. It is your free choice whether you wish to enter this information in the contact form.

Data processing for the purpose of contacting us is carried out in accordance with Art. 6 (1) (a) GDPR on the basis of your voluntarily given consent.

The personal data we collect when you use the contact form will be automatically deleted after your request has been processed.

When ordering via our website

You can either place orders on our website as a guest without registering, or register as a customer in our shop for future orders. Registration has the advantage that you can log in to our shop directly with your email address and password for future orders without having to enter your contact information again.

Your personal data will be entered into an input mask and transmitted to us and stored. When you place an order through our website, we initially collect the following data, both in the case of a guest order and when registering in the shop:

  • Title, first name, last name,
  • a valid email address,
  • Address,
  • Telephone number (landline and/or mobile)

This data is collected

  • to identify you as our customer;
  • to process, fulfill and handle your order;
  • to correspond with you;
  • for invoicing;
  • to process any liability claims that may arise and to assert any claims against you;
  • to ensure the technical administration of our website;
  • to manage our customer data.

As part of the ordering process, your consent to the processing of this data will be obtained.

The data processing takes place in response to your order and/or registration and is necessary according to Art. 6 (1) (b) GDPR for the stated purposes for the appropriate processing of your order and for the mutual fulfillment of obligations arising from the purchase contract.

The personal data collected by us for the processing of your order will be stored until the end of the statutory retention period and then deleted, unless we are obliged to store the data for a longer period in accordance with Article 6 (1) (c) GDPR due to retention and documentation obligations under tax and commercial law (from the German Commercial Code, the German Criminal Code or the German Fiscal Code) or you have consented to longer storage in accordance with Article 6 (1) (a) GDPR.

Sharing of data

We will only share your personal data (name, delivery address) with third parties involved in the contract execution, such as the logistics company commissioned with the delivery and the credit institution responsible for payment matters, insofar as this is necessary for the delivery of the goods or for payment processing. The legal basis for the transfer of data is Art. 6 (1) (b) GDPR.

You can revoke your consent at any time with future effect by contacting the data protection officer named above or the respective shipping service provider.

We work with external shipping partners to fulfill our contractual obligations to our customers. Therefore, based on Art. 6 (1) (b) GDPR, we will only share your name and delivery address with our shipping partners for the purpose of delivering the goods.

- PayPal

When paying via PayPal, credit card via PayPal, direct debit via PayPal or "purchase on account" via PayPal, we will pass your payment data on to PayPal (Europe) S.à rl et Cie, SCA, 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter "PayPal") as part of the payment processing. PayPal reserves the right to conduct a credit check for the payment methods credit card via PayPal, direct debit via PayPal or "purchase on account" or "installment payment" via PayPal. For this purpose, your payment data may be transferred to PayPal on the basis of Art. 6 (1) (f) GDPR. transmitted to credit agencies.

PayPal uses the results of the credit check regarding the statistical probability of default to decide whether to provide the respective payment method. The credit report may contain probability values (so-called score values). To the extent that score values are included in the credit report, they are based on a scientifically recognized mathematical-statistical procedure. Address data, among other things, is included in the calculation of the score values. Further information on data protection can be found in the PayPal Privacy Policy: https://www.paypal.com/de/webapps/mpp/ua/privacy-full

You can object to the processing of your data at any time by notifying PayPal. However, PayPal may still retain the right to process your personal data if this is necessary for contractual payment processing.

Your personal data will not be transferred to third parties for purposes other than those stated above.

We will only share your personal information with third parties if:

  • You have given your express consent in accordance with Art. 6 (1) (a) GDPR,
  • the transfer is necessary according to Art. 6 (1) (f) GDPR to assert, exercise or defend legal claims and there is no reason to assume that you have an overriding legitimate interest in not disclosing your data,
  • in the event that there is a legal obligation to transfer data pursuant to Art. 6 (1) (c) GDPR, and
  • this is legally permissible and is necessary for the processing of contractual relationships with you according to Art. 6 (1) (b) GDPR.

As part of the ordering process, your consent will be obtained to pass on your data to third parties.

Use of cookies

We use cookies on our website. These are small files that your browser automatically creates and that are stored on your device (laptop, tablet, smartphone, etc.) when you visit our website. Cookies do not cause any damage to your device and do not contain viruses, Trojans, or other malware.

The cookie stores information related to the specific device used. However, this does not mean that we directly know your identity.

The use of cookies serves, on the one hand, to make using our services more pleasant for you. For example, we use so-called session cookies to recognize that you have already visited individual pages of our website. These are automatically deleted after you leave our site.

In addition, we also use temporary cookies to optimize user experience. These cookies are stored on your device for a specific period of time. If you visit our site again to use our services, it will automatically recognize that you have already visited us and the entries and settings you have made, so you don't have to enter them again.

We also use cookies to statistically record the use of our website and to evaluate it for the purpose of optimizing our offering for you (see Section 7). These cookies enable us to automatically recognize that you have already visited our site when you visit it again. These cookies are automatically deleted after a defined period of time.

The data processed by cookies are necessary for the purposes mentioned to protect our legitimate interests and those of third parties in accordance with Art. 6 (1) (f) GDPR.

Most browsers automatically accept cookies. However, you can configure your browser to refuse cookies or to always prompt you before a new cookie is created. However, completely disabling cookies may prevent you from using all the features of our website.

Links to third-party websites

The links published on our website are researched and compiled by us with the greatest possible care. However, we have no influence on the current and future design and content of the linked pages. We are not responsible for the content of the linked pages and expressly do not adopt the content of these pages as our own. The provider of the website to which reference is made is solely liable for illegal, incorrect or incomplete content as well as for damages resulting from the use or non-use of the information. The liability of the person who merely refers to the publication through a link is excluded. We are only responsible for third-party references if we have positive knowledge of them, i.e. also of any potentially illegal or criminal content, and if it is technically possible and reasonable for us to prevent their use.

Social media plugins (if already available)

Based on Art. 6 (1) (f) GDPR, we use social network plugins (e.g., Facebook, Twitter, Google+) on our website to raise awareness of our company. The underlying advertising purpose is considered a legitimate interest within the meaning of the GDPR. Responsibility for ensuring compliance with data protection regulations rests with the respective providers. We integrate these plugins using the so-called two-click method to best protect visitors to our website.

Twitter

Our website integrates plug-ins from the short message network of Twitter Inc. (Twitter). You can recognize the Twitter plug-in (tweet button) by the Twitter logo on our site. An overview of tweet buttons can be found at this link on Twitter: https://dev.twitter.com/web/tweet-button

When you visit a page on our website that contains such a plugin, a direct connection is established between your browser and the Twitter server. Twitter thus receives the information that you have visited our page using your IP address. If you click the Twitter "tweet button" while logged into your Twitter account, you can link the content of our pages to your Twitter profile. This allows Twitter to associate your visit to our pages with your user account. We would like to point out that, as the provider of the pages, we have no knowledge of the content of the transmitted data or how Twitter uses it.

If you do not want Twitter to be able to associate your visit to our website, please log out of your Twitter account.

Further information can be found in Twitter's privacy policy, which you can view here: https://twitter.com/de/privacy

Google “+1” button

Our website uses the "+1" button of the social network Google, which is operated by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043-1351, USA. The button is marked with a "+1."

The "+1" button is shorthand for "that's pretty cool" or "check this out." The button is not used to track your web visits.

If a web page on our website contains the "+1" button, your browser will load and display this button from the Google server. The page on our website you visited is automatically communicated to the Google server. When a +1 button is displayed, Google does not permanently log your browsing history, but only for a period of up to two weeks.

Google retains this data about your visit for this period for system maintenance and troubleshooting purposes. However, this data is not structured according to individual profiles, user names, or URLs. This information is also not accessible to website publishers or advertisers. This information is used solely for maintenance and troubleshooting of Google's internal systems. Your visit to a page with a +1 button is not evaluated by Google in any other way.

There will be no further analysis of your visit to a website on our website with a “+1” button.

The +1 itself is a public process, meaning anyone who performs a Google search or visits content you've +1'd can potentially see that you've +1'd that content. Therefore, only +1 if you're absolutely sure you want to share this recommendation with the world.

Clicking this +1 button serves as a recommendation for other users in Google's search results. You can publicly announce that you like our website, approve of our website, or recommend our website. If you are registered for Google+ and logged in, the +1 button will turn blue when clicked. The +1 will also be added to the +1 tab in your Google profile. On this tab, you can manage your +1s and decide whether you want to make the +1 tab public.

To save your +1 recommendation and make it publicly accessible, Google collects information about the URL you recommended, your IP address, and other browser-related information from your profile. If you revoke your +1, this information will be deleted. All of your +1 recommendations are listed in the +1 tab in your profile.

Further information and Google's applicable privacy policy can be found at https://www.google.de/intl/de/policies/privacy/. Further information from Google regarding the Google+1 button can be found at https://developers.google.com/+/web/buttons-policy

Rights of those affected

You have the right:

  • Pursuant to Art. 15 GDPR, you have the right to request information about your personal data processed by us. In particular, you can request information about the purposes of processing, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right to lodge a complaint, the origin of your data, if it was not collected from me, as well as the existence of automated decision-making, including profiling, and, where applicable, meaningful information about its details.
  • to request the immediate correction or completion of any inaccurate personal data stored by us in accordance with Art. 16 GDPR;
  • to request the deletion of your personal data stored by us in accordance with Art. 17 GDPR, unless the processing is necessary to exercise the right to freedom of expression and information, to fulfill a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims;
  • to request the restriction of the processing of your personal data in accordance with Art. 18 GDPR if you contest the accuracy of the data, the processing is unlawful but you refuse to delete it and we no longer need the data, but you need it to assert, exercise or defend legal claims or you have objected to the processing in accordance with Art. 21 GDPR;
  • pursuant to Art. 20 GDPR, to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request that it be transmitted to another controller;
  • According to Art. 7 (3) GDPR, you have the right to revoke your consent at any time. This means that we may no longer continue the data processing based on this consent in the future and
  • Pursuant to Art. 77 GDPR, you have the right to lodge a complaint with a supervisory authority. As a rule, you can contact the supervisory authority of your usual place of residence or work or our company headquarters.

Right of objection

If your personal data is processed on the basis of legitimate interests pursuant to Art. 6 (1) (f) GDPR, you have the right to object to the processing of your personal data pursuant to Art. 21 GDPR, provided there are reasons for doing so that arise from your particular situation or if the objection is directed against direct marketing. In the latter case, you have a general right of objection, which we will implement without specifying a particular situation.

If you wish to exercise your right of objection, simply send an email to the email address of the data controller mentioned above.

Data security

During your visit to our website, we use the widespread SSL (Secure Socket Layer) method in conjunction with the highest level of encryption supported by your browser. This is generally 256-bit encryption. If your browser does not support 256-bit encryption, we use 128-bit v3 technology instead. You can tell whether an individual page of our website is being transmitted encrypted by the closed key or lock symbol in the lower status bar of your browser.

We also use appropriate technical and organizational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction, or unauthorized access by third parties. Our security measures are continuously improved in line with technological developments.