Data Protection

Preamble

Your privacy is very important to us. For your information, we set out below the general conditions under which we collect information about our users. This data protection notice describes how we collect information, what information we collect and how Schneider GmbH uses this information.

1. Name and address of the responsible entity

The responsible entity within the meaning of the General Data Protection Regulation and other national data protection laws of the member states as well as other data protection regulations is the company:

Schneider Schreibgeräte GmbH, Schwarzenbach 9, 78144 Schramberg, Telephone: +49 (0) 7729 - 888 0, E-Mail: info@schneiderpen.de.

Our data protection officer can be contacted via the e-mail address datenschutz@schneiderpen.de as well as at the above address. Please send postal letters with the indication "data protection".

2. Use of personal data

2.1 Provision of the website

Each time our website is accessed, our system automatically collects data and information from the computer system of the accessing computer. The following data is collected:

• Information on the operating system in use
• Information about the browser type and version used
• The user's IP address
• Date and time of access
• Websites from which the user's system accesses our website

The data is also stored in the log files of our system. This data is not stored together with other personal data of the user. The legal basis for the temporary storage of the data and the log files is Art. 6 para. 1 lit. f DSGVO (GDPR for General Data Protection Regulation). The temporary storage of the IP address by the system is necessary to enable delivery of the website to the user's computer. For this purpose, the user's IP address must remain stored for the duration of the session. The storage in log files is done to ensure the functionality of the website. In addition, we use the data to optimise the website and to ensure the security of our information technology systems. An evaluation of the data for marketing purposes does not take place in this context. These purposes are also our legitimate interest in data processing according to Art. 6 para. 1 lit. f GDPR. The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. In the case of the collection of data for the provision of the website, this is the case after seven days. This data cannot be assigned to specific persons. The collection of data for the provision of the website and the storage of the data in log files is absolutely necessary for the operation of the website. Consequently, there is no possibility for the user to object.

2.2 Inquiry form and e-mail contact

There is an enquiry form on our website which can be used for electronic contact. If a user takes advantage of this option, the data entered in the input mask will be transmitted to us and stored. This data is:

• Title
• First name Last name
• Company / Organisation
• Street, postcode, city
• Country
• Telephone
• Fax
• E-Mail
• Client No.
• Message

The following data is also stored at the time the message is sent:

• Date and time of access

Alternatively, it is possible to contact us via the e-mail address provided. In this case, the user's personal data transmitted with the e-mail will be stored. In this context, the data will not be passed on to third parties. The data is used exclusively for processing the conversation. The legal basis for the processing of data transmitted in the course of sending an e-mail is Art. 6 (1) lit. f GDPR. If the e-mail contact is aimed at concluding a contract, the additional legal basis for the processing is Art. 6 (1) lit. b GDPR. The processing of the personal data from the input mask serves us solely to process the contact. In the case of contact by e-mail, this also constitutes the necessary legitimate interest in processing the data. The other personal data processed during the sending process serve to prevent misuse of the contact form and to ensure the security of our information technology systems. The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. For the personal data from the input mask of the contact form and those sent by e-mail, this is the case when the respective conversation with the user has ended. The conversation is ended when it is clear from the circumstances that the matter in question has been conclusively clarified. The personal data provided during the submission process will not be stored additionally. If the contact leads to the initiation or conclusion of a contract, the data will be deleted if the data is no longer required for the performance of the contract. Even after the conclusion of the contract, there may be a need to store personal data of the contractual partner in order to comply with contractual or legal obligations, such as statutory retention obligations. This is the case in the present case due to the nature of the contract during the term of the contract and a subsequent period of 10 years. If the user contacts us by e-mail, he can object to the storage of his personal data at any time. In such a case, the conversation cannot be continued. You can send your objection at any time to datenschutz@schneiderpen.de. All personal data stored in the course of contacting us will be deleted in this case.

3. Google Analytics

This website uses the "Google Analytics" service, which is offered by Google Inc. (1600 Amphitheatre Parkway Mountain View, CA 94043, USA), to analyse website usage by users. The service uses "cookies" - text files that are stored on your terminal device. The information collected by the cookies is usually sent to a Google server in the USA and stored there.

This website uses IP anonymisation. The IP address of the user is shortened within the member states of the EU and the European Economic Area. This shortening eliminates the personal reference of your IP address. Under the terms of the data commissioning agreement which the website operators have concluded with Google Inc., the latter uses the information collected to evaluate website use and website activity and provides services associated with internet use.

The legal basis for the processing of the data is Art. 6 para. 1 lit. f GDPR. The service enables us to analyse the activities of users on our website. The retention period corresponds to the shortest possible period of 14 months.

You have the option of preventing the cookie from being stored on your device by making the appropriate settings in your browser. It is not guaranteed that you will be able to access all functions of this website without restrictions if your browser does not allow cookies.

Furthermore, you can use a browser plug-in to prevent the information collected by cookies (including your IP address) from being sent to and used by Google Inc. The following link will take you to the corresponding plugin: https://tools.google.com/dlpage/gaoptout?hl=de. By confirming the link, a so-called opt-out cookie is set on your data carrier. Please note that if you delete all cookies on your computer, this opt-out cookie will also be deleted and you will have to set the opt-out cookie again. The opt-out cookie is set per browser and computer. If you visit our websites from home and work or with different browsers, you must activate the opt-out cookie in the different browsers or on the different computers. Here you can find more information on the use of data by Google Inc: https://support.google.com/analytics/answer/6004245?hl=de

4. Google Maps

A link to the services of Google Maps is integrated on our pages. These functions are offered by Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland. If you are logged in to your Google account, you can link the contents of our pages to your Google account by clicking on the link. This enables Google to assign the visit to our pages to your user account. We would like to point out that we, as the provider of the pages, have no knowledge of the content of the data passed on or of its use by Google. You can find more information on this in Google's privacy information at: https://www.google.de/intl/de/policies/privacy/

The use of Google Maps is based on your consent in accordance with Art. 1 para. 1 lit. a GDPR and § 25 para. 1 TTDSG (Telecommunications and Telemedia Data Protection Act). Consent can be revoked at any time.

5. Google Tag Manager

This website uses the Google Tag Manager, which is offered by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The Google Tag Manager is a tool with which tracking or statistics tools and other technologies can be integrated on this website. No user profiles are created by the Google Tag Manager, it does not store any cookies and does not perform any independent analyses. It is used for the administration and playout of the tools integrated via it. It collects your IP address, which is transmitted to the parent company Google in the United States. The legal basis for data processing is Article 6 para. 1 lit. f GDPR.

If a corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR and Section 25 para. 1 TTDSG, insofar as the consent includes the storage of cookies or access to information in the user's terminal device (e.g. device fingerprinting) within the meaning of the TTDSG. Consent can be revoked at any time.

6. Google DoubleClick

This website uses the functions of Google Doubleclick. The provider is Google Limited Gordon House, Barrow Street, Dublin 4, Ireland.

We use Double Click to show you interest-based ads on the Google advertising network. With DoubleClick, advertisements can be targeted to the interests of the respective user. This is how interest-based advertising is displayed in Google search results or banners associated with DoubleClick. DoubleClick uses cookies or comparable recognition technologies (e.g. device fingerprinting) for this purpose. With the information collected, pseudonymous user profiles are created, which are used for interest-based advertising. The use of DoubleClick is based on your consent in accordance with Art. 1 para. 1 lit. a GDPR and § 25 para. 1 TTDSG (Telecommunications and Telemedia Data Protection Act). Consent can be revoked at any time. For more information on how to object to the advertisements displayed by Google, please see the following links: https://policies.google.com/technologies/ads and https://adssettings.google.com/authenticated.

7. Newsletter

This website uses CleverReach to send newsletters. Provider is CleverReach GmbH & Co. KG, Mühlenstr. 43, 26180 Rastede. CleverReach is a service that can be used to organise and analyse newsletter distribution. The data you enter for the purpose of receiving the newsletter (e.g. e-mail address) is stored on CleverReach's servers in Germany or Ireland.

Our newsletters sent with CleverReach allow us to analyse the behaviour of newsletter recipients. Among other things, it can be analysed how many recipients have opened the newsletter message and how often which link in the newsletter was clicked. With the help of so-called conversion tracking, it can also be analysed whether a predefined action (e.g. purchase of a product on our website) has taken place after clicking on the link in the newsletter. For more information on data analysis through CleverReach newsletters, please visit: https://www.cleverreach.com/de/funktionen/reporting-und-tracking/. The data processing is based on your consent (Art. 6 para. 1 lit. a GDPR). You can revoke this consent at any time by unsubscribing from the newsletter. The lawfulness of the data processing operations already carried out remains unaffected by the revocation. If you do not want any analysis by CleverReach, you must unsubscribe from the newsletter. We provide a link for this in every newsletter message. The data you provide for the purpose of receiving the newsletter will be stored by us until you unsubscribe from the newsletter and will be deleted from our servers as well as from the servers of CleverReach after you unsubscribe from the newsletter. Data stored by us for other purposes (e.g. e-mail addresses for the members' area) remain unaffected by this. For more details, please refer to CleverReach's privacy policy at: https://www.cleverreach.com/de/datenschutz/. Conclusion of a contract for commissioned data processing: We have concluded an order data processing contract with CleverReach and fully implement the strict requirements of the German data protection authorities when using CleverReach.

8. Use of cookies

Our website uses cookies. Cookies are text files that are stored in the internet browser or by the internet browser on the user's computer system. When a user accesses a website, a cookie may be stored on the user's operating system. This cookie contains a characteristic string of characters that enables the browser to be uniquely identified when the website is called up again.

We use cookies to make our website more user-friendly. Some elements of our website require that the calling browser can be identified even after a page change.

The legal basis for the processing of personal data using cookies is Art. 6 (1) lit. f GDPR. The purpose of using technically necessary cookies is to simplify the use of websites for users. Some functions of our website cannot be offered without the use of cookies. For these, it is necessary that the browser is recognised even after a page change.

The user data collected through technically necessary cookies are not used to create user profiles. Through optional cookies, we supplement your website visit with practical information which, however, is not relevant for the function of the page:

• Google Analytics for the analysis of general user behaviour, which is exclusively used to improve the offer according to customer wishes on our site.
• Google services for YouTube video overlays, maps, address completions or security questions.

Cookies are stored on the user's computer and transmitted to our site by the user. Therefore, you as a user also have full control over the use of cookies. By changing the settings in your internet browser, you can deactivate or restrict the transmission of cookies. Cookies that have already been saved can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to use all the functions of the website to their full extent.

You can change your cookie settings at any time.

9. Data subjects' rights

If your personal data is processed, you are a data subject within the meaning of the GDPR and you have the following rights vis-à-vis the responsible entity: You have the right:

• to request information about your personal data processed by us in accordance with Art. 15 GDPR. to request in particular information about the processing purposes, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right of complaint, the origin of your data if it has not been collected by us, as well as the existence of automated decision-making including profiling and, if applicable, meaningful information about its details;
• to demand the correction of incorrect or incomplete personal data stored by us without delay in accordance with Art. 16 GDPR;
• to request in accordance with Art. 17 GDPR the erasure of your personal data stored by us, unless the processing is necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the assertion, exercise or defence of legal claims;
• to request the restriction of the processing of your personal data in accordance with Art. 18 GDPR, insofar as the accuracy of the data is disputed by you, the processing is unlawful, but you object to its erasure and we no longer require the data, but you need it for the assertion, exercise or defence of legal claims or you have objected to the processing in accordance with Art. 21 GDPR;
• to receive in accordance with Art. 20 GDPR your personal data that you have provided to us in a structured, common and machine-readable format or to request the transfer to another responsible entity;
• to revoke your consent at any time in accordance with Art. 7 (3) GDPR. This has the consequence that we may no longer continue the data processing based on this consent in the future and
• complain to a supervisory authority in accordance with Art. 77 GDPR. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or our registered office for this purpose.

10. Right of objection

If your personal data is processed on the basis of legitimate interests in accordance with Art. 6 (1) sentence 1 lit. f GDPR, you have the right to object to the processing of your personal data in accordance with Art. 21 GDPR, insofar as there are reasons for doing so that arise from your particular situation or the objection is directed against direct advertising. In the latter case, you have a general right of objection, which is implemented by us without specifying a particular situation. If you wish to use your right of revocation or objection, it is sufficient to send an e-mail to datenschutz@schneiderpen.de.