Privacy Notice

This translation is provided for information. The German version is legally binding.

Controller

The controller responsible for processing personal data in this online shop within the meaning of the General Data Protection Regulation (GDPR) is:

Paul Ferdinand Peddinghaus GmbH
Haßlinghauser Str. 156
58285 Gevelsberg
Germany
Phone +49 (0) 2332 72-0
Email shop@peddinghaus-shop.de
Managing Director: Julia C. Peddinghaus

Data protection officer

Caroline Vanhaecke, Paul Ferdinand Peddinghaus GmbH, Haßlinghauser Str. 156, 58285 Gevelsberg, Germany, email info@peddinghaus-pfp.de

Summary

• The shop is aimed exclusively at businesses. Ordering is only possible with a customer account; payment is by invoice.
• We only use the cookies the shop needs. Visitor statistics with Matomo only run if you consent.
• The shop does not load content from third-party servers. All data remains on our server in Germany.
• We do not sell data or pass it on for advertising.

Visiting the shop and server logs

Each time the shop is accessed, our web server stores the IP address, date and time, the address requested including search terms, the HTTP status code, the amount of data transferred, the previously visited page (referrer) and the browser identifier (user agent). The purpose is to deliver the shop, to defend against attacks and to analyse errors. The legal basis is Art. 6(1)(f) GDPR. The logs are rotated daily and deleted after 14 days.

A web application firewall checks requests for attack patterns, logs suspicious requests and deletes these logs after 14 days at the latest. If attacks from one IP address accumulate, it is blocked for a set period, usually between ten minutes and one week.

Cookies and consent

Cookies are small files stored by your browser. We set technically necessary cookies without consent because the shop would not work otherwise (Section 25(2) No. 2 of the German TDDDG, Art. 6(1)(f) GDPR). We only set all other cookies with your consent (Section 25(1) TDDDG, Art. 6(1)(a) GDPR), which you give or refuse in the cookie notice on your first visit.

You can withdraw or change your consent at any time with effect for the future via the “Cookie settings” link at the bottom of every page.

Visitor statistics with Matomo (only with consent)

If you consent to the “Statistics” category, we record your visits with the software Matomo. Matomo runs on our own server in Germany; the data does not leave our systems. The last two bytes of your IP address are removed before storage, and the country of origin is also determined only from the shortened address. Your browser’s “Do Not Track” setting is respected. We delete the individual access records after 180 days. The legal basis is your consent (Art. 6(1)(a) GDPR, Section 25(1) TDDDG).

Customer account

To order, you create a customer account. We process title, first and last name, company, VAT identification number, address, telephone number, fax number if provided, email address and your password, which is only stored encrypted. The legal basis is Art. 6(1)(b) GDPR. The account remains until you request its deletion; data we must retain for tax and commercial law reasons is blocked until the retention periods expire.

To protect against password guessing, we store the IP address, email address and number of attempts for login attempts and delete this information after 30 days (Art. 6(1)(f) GDPR).

Verification of the VAT identification number

If you enter a VAT identification number, we automatically check its validity via the VAT Information Exchange System (VIES) of the European Commission. Only the number is transmitted. The legal basis is Art. 6(1)(c) GDPR in conjunction with the German VAT Act.

Order, payment and delivery

To process an order, we process the details from your customer account, the items ordered and the billing and delivery address (Art. 6(1)(b) GDPR). Payment is by invoice and bank transfer; we do not use a payment service provider.

For delivery, we pass on name, company, delivery address and, where necessary for delivery, telephone number and email address to the commissioned carrier, usually DPD or DHL, for large consignments a freight forwarder. We store the tracking number for shipment tracking.

We keep order and invoice data for ten years and business letters for six years in accordance with Section 147 of the German Fiscal Code and Section 257 of the German Commercial Code.

Emails from the shop

We send confirmations and messages from the shop via the mail server of our host IONOS in Germany.

Contact form and enquiries

Via the contact form or a product enquiry, you send us your name, email address, telephone number if provided and your message. The security check (captcha) runs on our own server. We process the details to answer your enquiry (Art. 6(1)(b) and (f) GDPR) and delete them once the enquiry has been dealt with and no retention obligation applies. The same applies to contact by phone or email.

Newsletter

For the newsletter we need your email address and your consent (Art. 6(1)(a) GDPR). After registering, you receive an email with a confirmation link (double opt-in). Mailing only starts once you confirm. As proof, we store the time and IP address of registration and confirmation. We delete unconfirmed registrations after 30 days. You can unsubscribe at any time via the link in every issue or by email; we then keep the proof of consent until the three-year limitation period expires.

Reviews

If you review an item, we publish your review with the name you provided (Art. 6(1)(a) GDPR). You can request deletion at any time.

Recipients and processors

Your data is processed only by us and by service providers acting for us as processors under Art. 28 GDPR and bound by our instructions:

• IONOS SE, Elgendorfer Str. 57, 56410 Montabaur: operation of the server and sending of emails, data centre in Germany
• an IT service provider for setting up, maintaining and running the shop. For encrypted backups it uses Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen as a sub-processor, also with a data centre in Germany. Hetzner has no access to the key and cannot read the backups.

Further recipients are the carriers for delivery, the European Commission for verifying the VAT identification number and authorities where we are legally obliged. No data is transferred to countries outside the European Union.

Data security

The connection to the shop is encrypted with TLS, recognisable by “https” in the address bar. Passwords are only stored encrypted. Server and shop are protected by technical and organisational measures, including a firewall, regular security updates and encrypted backups.

Your rights

You have the following rights regarding personal data concerning you:

• access (Art. 15 GDPR)
• rectification (Art. 16 GDPR)
• erasure (Art. 17 GDPR)
• restriction of processing (Art. 18 GDPR)
• data portability (Art. 20 GDPR)
• withdrawal of consent with effect for the future (Art. 7(3) GDPR)

Right to object (Art. 21 GDPR): Where we process data on the basis of Art. 6(1)(f) GDPR, you may object at any time on grounds relating to your particular situation. We will then no longer process the data unless we can demonstrate compelling legitimate grounds that override your interests, or the processing serves the establishment, exercise or defence of legal claims. You may object to the use of your data for the newsletter at any time.

Please contact shop@peddinghaus-shop.de or our data protection officer at info@peddinghaus-pfp.de.

You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen, Kavalleriestraße 2-4, 40213 Düsseldorf, www.ldi.nrw.de.

Obligation to provide data, automated decisions

We need the details in the customer account to conclude and perform contracts; without them an order is not possible. Mandatory fields are marked. There is no automated decision-making, including profiling, under Art. 22 GDPR.

Status of this notice

Status: November 2026. We will update this notice if the shop or the legal situation changes.