Privacy Policy
1. Controller
Harald Mohler
Kelheimer Str. 13 b, 84056 Rottenburg
Email: info@pvdach.com
2. Overview & Legal Bases
In accordance with Art. 13 GDPR, we inform you about the processing of your personal data – in particular in connection with orders, user accounts or newsletters. The purpose and legal basis are clearly stated for each data processing activity (Art. 6 GDPR).
3. Access Data & Hosting
When you visit our website, we automatically store server log files (e.g. IP address, timestamp, browser). This is carried out on the basis of our legitimate interest in optimising operations and security (Art. 6(1)(f) GDPR). Data processing is carried out by processors, some of which may also be located outside the EU/EEA – safeguarded by Standard Contractual Clauses or the EU-US Data Privacy Framework.
4. Contract Processing & Contact Forms
• All data relating to order processing, customer accounts, warranties and contacting us is processed in accordance with Art. 6(1)(b) GDPR. Mandatory fields are required for the performance of the contract. After expiry of the statutory retention periods, the data will be deleted unless further consent has been given (Art. 6(1)(a) GDPR).
• Account creation and contact enquiries are carried out with your express consent or on the basis of contract processing. Duplicates in the existing text have been consolidated and clarified.
5. Shipping & Payment Processing
• Shipping data (address, etc.) is transmitted to shipping service providers such as DHL for delivery purposes (Art. 6(1)(b) GDPR). For shipping notifications, we only transmit telephone numbers or email addresses with your separate consent (Art. 6(1)(a) GDPR).
• We transmit payment data to payment service providers or banks – likewise lawfully and in accordance with the contract (Art. 6(1)(b) GDPR). Further processing for fraud prevention and payment optimisation only takes place where such activities are carried out (Art. 6(1)(f) GDPR).
6. Advertising by Email
• Newsletter: Newsletters are only sent with your active consent (Art. 6(1)(a) GDPR). You may unsubscribe at any time.
• Direct marketing after a purchase: Without explicit consent, you will only receive email offers in accordance with Section 7(3) UWG on the basis of a balancing of interests. You may object at any time.
7. Cookies & Tracking
7.1 Consent Requirement & Cookie Consent
We only use cookies that are not technically necessary (e.g. analytics or marketing cookies) with your opt-in consent (Art. 6(1)(a) GDPR). A Consent Management Platform (CMP) ensures that consent is correctly recorded and transmitted.
7.2 Google Services
• We use Google Analytics 4 (GA4). Users from the EU provide consent via the CMP; IP anonymisation is enabled; data is transferred to Google LLC exclusively via Google Ireland. Data retention is reduced to the shortest possible periods (e.g. 2 months). A data processing agreement and Standard Contractual Clauses (and, where applicable, the EU-US Data Privacy Framework) are in place.
• Consent Mode V2 (Basic or Advanced) is implemented in order to model Google ad personalisation and analytics without consent – as required for GA4 and Google Ads under EU guidelines.
Videos are only loaded in enhanced privacy mode. Processing only takes place after the user clicks on the video (Art. 6(1)(a) GDPR).
7.4 Facebook/Instagram Plugins & Pixel
Pixels & Insights are only used if users have given their consent (Art. 6(1)(a) or (f) GDPR). Data is transferred via Meta Ireland and, where applicable, Meta Inc. using Standard Contractual Clauses or EU data protection safeguards.
8. Trusted Shops Trustbadge
Integration only takes place with your separate consent (Art. 6(1)(a) GDPR). We are jointly responsible with Trusted Shops (Art. 26 GDPR). Processing by US or Israeli service providers only takes place where data protection safeguards are provided through the EU-US DPF or Standard Contractual Clauses. Log data (e.g. IP address) is anonymised immediately.
9. Social Media Presence
When you visit our public pages (Facebook, Instagram, YouTube) without interacting with them, no data transfer is triggered. If you have given your consent, processing by Meta/Google takes place in accordance with their respective privacy policies (Art. 6(1)(a) GDPR).
10. Your Rights
You have the following rights at any time:
Art. 15 (access), 16 (rectification), 17 (erasure), 18 (restriction of processing), 20 (data portability), 21 (objection), 77 (right to lodge a complaint with a supervisory authority). You may object to processing based on legitimate interests. You may submit withdrawals of consent and complaints using the contact details provided in the Legal Notice.
If there are any discrepancies, inconsistencies or contradictions between the German version of this contract and a translation into another language, the German version shall prevail exclusively and shall be legally binding.