Privacy Policy

11 1 330 3051-1

Privacy Policy

The protection of your personal data is important to us. Below, we explain which personal data we process when you use our website, online shop and other online services, for what purposes this processing takes place and which rights you have.

1. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) and other applicable data protection laws is:

Könitz Porzellan GmbH
Bahnhofstraße 2
07333 Unterwellenborn, OT Könitz
Germany

Phone: +49 36732 344-0
Fax: +49 36732 344-77
E-mail: info@koenitz-group.com

2. Data Protection Officer

Our Data Protection Officer is:

DataGAP GmbH
Bessemerstraße 51, 1st floor
12103 Berlin
Germany

3. General Information on Data Processing

3.1 Legal bases

We process personal data only where there is a legal basis for doing so. Depending on the respective processing purpose, processing is carried out in particular on the basis of the following provisions:

  • Art. 6(1)(a) GDPR, where you have given us your consent;
  • Art. 6(1)(b) GDPR, where processing is necessary for the performance of a contract or in order to take steps prior to entering into a contract;
  • Art. 6(1)(c) GDPR, where processing is necessary for compliance with a legal obligation;
  • Art. 6(1)(f) GDPR, where processing is necessary for the purposes of our legitimate interests or those of a third party and your interests or fundamental rights and freedoms do not override those interests.

3.2 Storage period

We generally store personal data only for as long as this is necessary for the respective processing purpose. We may retain data for longer where statutory retention or documentation obligations apply.

If the processing purpose no longer applies and there is no statutory or contractual obligation requiring further storage, the relevant data will be deleted or anonymised.

3.3 Recipients of personal data

Where necessary for the provision of our services, personal data may be transferred to service providers and contractual partners engaged by us. These may include, in particular, IT and hosting service providers, payment service providers, shipping and logistics companies, as well as providers of analytics and communication services.

Where required by law, service providers are contractually obliged to comply with applicable data protection requirements.

4. Provision of the Website and Server Log Files

4.1 Scope of processing

Each time our website is accessed, technical data required to deliver and securely operate the website is processed automatically. This may include, in particular:

  • IP address;
  • date and time of access;
  • page accessed or file requested;
  • amount of data transferred;
  • referrer URL;
  • browser type and browser version;
  • operating system;
  • HTTP user agent.

As a general rule, this data is not combined with other personal data within the server log files.

4.2 Purpose and legal basis

The processing is necessary to provide the website technically, ensure its functionality, analyse errors and protect our information technology systems against attacks and misuse.

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in providing a secure, reliable and technically fault-free website.

4.3 Storage period

IP addresses and HTTP user agents may be stored in web server log files for a maximum period of six weeks, in particular for the purpose of detecting and analysing technical faults and attacks on our systems.

Longer storage takes place only where this is necessary in an individual case to investigate a security incident or to comply with legal obligations.

5. Cookies and Similar Technologies

5.1 Technically necessary technologies

Our website and online shop use cookies and comparable technologies where these are required for the operation of our services.

Such technologies may be necessary in particular to:

  • maintain a session;
  • provide login functionality;
  • enable the shopping cart and checkout process;
  • store language and display settings;
  • provide security functions;
  • prevent duplicate submissions or technical malfunctions.

Where the storage of information on your device or access to information already stored on your device is strictly necessary in order to provide a digital service expressly requested by you, this is carried out on the basis of Section 25(2) TDDDG.

Subsequent processing of personal data is carried out, depending on the purpose, in particular on the basis of Art. 6(1)(b) or Art. 6(1)(f) GDPR.

5.2 Analytics and marketing technologies

Analytics, statistics or marketing technologies that are not strictly necessary are generally activated only after you have given your consent.

In these cases, the legal basis for storing information on your device or accessing information already stored there is Section 25(1) TDDDG. The legal basis for subsequent processing of personal data is Art. 6(1)(a) GDPR.

You can withdraw or change your consent at any time with effect for the future using the privacy settings available on our website.

6. Newsletter and Direct Marketing

6.1 Newsletter subscription

If you voluntarily subscribe to our newsletter, we process your e-mail address and, where applicable, additional information voluntarily provided by you in order to send you information about our products, offers and news.

The legal basis is your consent pursuant to Art. 6(1)(a) GDPR.

To verify your subscription, a confirmation procedure may be used under which you confirm your registration by clicking a link in an e-mail.

You can withdraw your consent at any time with effect for the future. In particular, you may use the unsubscribe link included in every newsletter.

6.2 Advertising to existing customers

Where permitted by law, we may use an e-mail address obtained in connection with the sale of goods or services to advertise our own similar goods or services.

The legal basis under data protection law is Art. 6(1)(f) GDPR. The competition-law requirements are governed in particular by Section 7(3) UWG.

You may object to the use of your e-mail address for this purpose at any time with effect for the future without incurring any costs other than the transmission costs according to the basic rates.

7. Competitions and Promotions

If you participate in a competition or promotion organised by us, we process the personal data required for its administration, in particular to conduct the competition, verify eligibility, select and notify winners and, where applicable, deliver prizes.

The legal basis is generally Art. 6(1)(b) GDPR.

Data will be used for advertising or other additional purposes only where there is a separate legal basis, for example your consent.

Additional information may be set out in the respective terms and conditions of participation.

8. Customer Account and Registration

8.1 Registration

Where available, you may create a customer account on our website. We process the data required to set up and manage the customer account.

This may include, in particular:

  • first and last name;
  • company or business name;
  • billing and delivery address;
  • e-mail address;
  • telephone number;
  • customer account login credentials.

For security and documentation purposes, the IP address as well as the date and time of registration may also be stored.

The legal basis is Art. 6(1)(b) GDPR.

8.2 Customer account

The customer account is used in particular to facilitate orders, use stored address data, view previous and current orders and use additional shop functions such as wish lists.

You may generally request the deletion of your customer account at any time. Statutory retention obligations relating to contractual, invoice and order data remain unaffected.

9. Orders and Contract Processing

When you place an order through our online shop, we process the data required to process and perform the contract.

This may include, in particular:

  • name and contact details;
  • billing and delivery address;
  • order information;
  • invoice information;
  • selected payment method;
  • where applicable, information required for tax purposes.

The legal basis is Art. 6(1)(b) GDPR.

Where we are legally required to retain commercial and tax documentation, further storage is carried out on the basis of Art. 6(1)(c) GDPR.

For the performance of the contract, the data required for delivery may be transferred to the shipping or logistics company commissioned with the delivery.

10. Payment Processing

Various payment methods are available in our online shop. Depending on the payment method you select, the data required to process the payment will be transferred to the respective payment service provider.

The legal basis for this transfer is Art. 6(1)(b) GDPR.

10.1 PayPal

If you choose to pay via PayPal, the data required to process the payment is transmitted to:

PayPal (Europe) S.à r.l. et Cie, S.C.A.
22–24 Boulevard Royal
L-2449 Luxembourg

PayPal processes the transmitted data in connection with payment processing partly under its own responsibility as a controller.

Further information is available in PayPal's Privacy Statement:
https://www.paypal.com/de/datenschutz

10.2 Mollie

We use the following payment service provider for various payment methods:

Mollie B.V.
Keizersgracht 126
1015 CW Amsterdam
Netherlands

Depending on availability and the selected payment method, payments via Mollie may include, for example, credit card payments, SEPA direct debit, Apple Pay or other payment services.

Mollie processes the data required for payment processing and may, depending on the selected payment method, transfer this data to additional payment service providers, credit card companies or financial institutions involved in the transaction.

Further information is available in Mollie's Privacy Statement:
https://www.mollie.com/legal/privacy

11. Contact Form and E-mail Communication

You can contact us using the contact options provided on our website, in particular through contact forms or by e-mail.

We process the information you provide, for example:

  • name;
  • company;
  • contact details;
  • address information;
  • your message and any additional information you voluntarily provide.

If your enquiry relates to the preparation or performance of a contract, processing is based on Art. 6(1)(b) GDPR.

Other enquiries are processed on the basis of Art. 6(1)(f) GDPR. Our legitimate interest lies in efficiently processing enquiries addressed to us.

Technical information may also be processed to protect contact forms against spam, automated attacks or other misuse.

The data will be deleted once your enquiry has been conclusively dealt with and there are no statutory or contractual grounds requiring further retention.

12. Product Reviews

If you submit a product review in our online shop, we process the information you provide for this purpose, in particular your name, your review and, where applicable, your e-mail address.

Your e-mail address is not published together with the review.

Processing takes place for the purpose of publishing, managing and, where appropriate, reviewing product reviews and preventing misuse.

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in providing our customers with authentic product reviews and preventing abusive or fraudulent reviews.

13. Facebook and Other Social Media Profiles

We maintain profiles on social networks, in particular Facebook, in order to provide information about our company and products and to communicate with customers and interested parties.

Facebook and Instagram are operated in Europe by:

Meta Platforms Ireland Limited
Merrion Road
Ballsbridge
Dublin 4, D04 X2K5
Ireland

When you visit our social media profiles, the respective platform provider processes personal data under its own responsibility. This may also occur if you are not logged in to the respective platform.

The type and extent of this processing are largely determined by the respective platform provider.

13.1 Page Insights

Meta provides us with aggregated statistics concerning visitors to and interactions with our Facebook and, where applicable, Instagram profiles.

To the extent that Könitz Porzellan GmbH and Meta Platforms Ireland Limited jointly determine the purposes and means of processing such Insights Data, they act as joint controllers within the meaning of Art. 26 GDPR.

As a general rule, we receive only aggregated statistical information and cannot readily identify individual visitors on the basis of this information.

Our use of social media profiles is based on Art. 6(1)(f) GDPR. Our legitimate interest lies in communicating with customers and interested parties and presenting our company and products.

Further information about data processing by Meta is available at:
https://www.facebook.com/privacy/policy/

14. Google Tag Manager

We use Google Tag Manager provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google Tag Manager is used for the technical management and deployment of website tags and enables us to centrally integrate services such as analytics tools.

Where Google Tag Manager is used to load analytics or marketing services that are not technically necessary, these services are activated only after you have given the relevant consent.

In such cases, the legal basis is Art. 6(1)(a) GDPR. Where information is stored on or accessed from your device, Section 25(1) TDDDG applies additionally.

You may change or withdraw your consent at any time with effect for the future using the privacy settings on our website.

15. Google Analytics 4

Subject to your consent, we use Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics helps us understand how visitors use our website and enables us to improve our services accordingly.

The following information may be processed in particular:

  • pages and content viewed;
  • interactions with the website;
  • time and approximate duration of the visit;
  • browser and device information;
  • approximate geographical information;
  • referrer information;
  • technical and pseudonymous identifiers.

According to Google, individual IP addresses of users in the European Union are not logged or stored in Google Analytics. The IP address may be used temporarily to derive approximate geographical information and is subsequently discarded.

Google Analytics is activated only after you have given your consent.

The legal bases are Section 25(1) TDDDG and Art. 6(1)(a) GDPR.

You may withdraw your consent at any time with effect for the future using the privacy settings on our website.

Further information is available at:
https://policies.google.com/privacy

16. Microsoft Clarity

Subject to your consent, we use Microsoft Clarity, an analytics service provided by Microsoft.

Clarity allows us to understand how visitors use our website and interact with its content. For this purpose, aggregated usage statistics, heatmaps and information relating to individual usage sessions may be generated.

The following information may be processed in particular:

  • pages viewed;
  • clicks and scrolling behaviour;
  • mouse movements and interactions with page content;
  • duration of visits;
  • browser and device information;
  • technical identifiers and network information.

For visitors from the European Economic Area, Clarity is fully activated only after an appropriate consent signal has been transmitted.

The legal bases are Section 25(1) TDDDG and Art. 6(1)(a) GDPR.

You may withdraw your consent at any time with effect for the future using the privacy settings on our website.

Further information about data protection at Microsoft is available at:
https://privacy.microsoft.com/privacystatement

17. Your Rights

Subject to the applicable statutory requirements, you have the following rights in relation to your personal data:

  • Right of access pursuant to Art. 15 GDPR;
  • Right to rectification pursuant to Art. 16 GDPR;
  • Right to erasure pursuant to Art. 17 GDPR;
  • Right to restriction of processing pursuant to Art. 18 GDPR;
  • Right to notification pursuant to Art. 19 GDPR;
  • Right to data portability pursuant to Art. 20 GDPR;
  • Right to object pursuant to Art. 21 GDPR;
  • Right to withdraw consent with effect for the future;
  • Right to lodge a complaint with a data protection supervisory authority.

17.1 Right to object

Where we process personal data on the basis of Art. 6(1)(e) or Art. 6(1)(f) GDPR, you have the right to object to such processing at any time on grounds relating to your particular situation.

Where personal data is processed for direct marketing purposes, you may object to such processing at any time. Following your objection, your personal data will no longer be processed for these purposes.

17.2 Withdrawal of consent

You may withdraw consent previously granted at any time with effect for the future. The lawfulness of processing carried out up to the time of withdrawal remains unaffected.

17.3 Right to lodge a complaint

If you believe that the processing of your personal data infringes the GDPR, you may lodge a complaint with a data protection supervisory authority.

The supervisory authority responsible for us is:

Thüringer Landesbeauftragter für den Datenschutz und die Informationsfreiheit (TLfDI)
Häßlerstraße 8
99096 Erfurt
Germany

Phone: +49 361 57-3112900
E-mail: poststelle@datenschutz.thueringen.de
Website: https://www.tlfdi.de/

18. Updates to this Privacy Policy

We may update this Privacy Policy where necessary, in particular if our website, the services we use or applicable legal requirements change.

The current version published on this website applies.