Data protection
1. Introduction
With the following information, we would like to provide you, as the "data subject," with an overview of how we process your personal data and inform you about your rights under data protection laws.
As a rule, it is possible to use our website without providing personal data. However, if you wish to make use of special services offered by our company via our website, the processing of personal data may become necessary. If the processing of personal data is required and there is no legal basis for such processing, we will generally obtain your consent.
The processing of personal data, such as your name, address, or email address, is always carried out in accordance with the General Data Protection Regulation (GDPR) and in compliance with the country-specific data protection regulations applicable to AICHELIN Holding GmbH. Through this Privacy Policy, we would like to inform you about the nature, scope, and purpose of the personal data we collect, use, and process.
As the controller responsible for processing, we have implemented numerous technical and organizational measures to ensure the most comprehensive protection possible of personal data processed through this website. Nevertheless, internet-based data transmissions may generally contain security vulnerabilities, so absolute protection cannot be guaranteed. For this reason, you are free to transmit personal data to us via alternative means, such as by telephone or post.
You can also take simple and practical measures to protect yourself against unauthorized access to your data. Therefore, we would like to provide you with some guidance on the secure handling of your data:
Protect your account (login, user account, or customer account) and your IT systems (computer, laptop, tablet, or mobile device) with strong passwords.
Only you should have access to your passwords.
Ensure that you use each password for only one account (login, user account, or customer account).
Do not use the same password for different websites, applications, or online services.
Particularly when using publicly accessible or shared IT systems, always log out after each session on a website, application, or online service.
Passwords should consist of at least 12 characters and should be chosen so that they cannot easily be guessed. Therefore, they should not contain common dictionary words, your own name, or the names of relatives. Instead, they should include a combination of uppercase and lowercase letters, numbers, and special characters.
2. Controller
The controller within the meaning of the GDPR is:
AICHELIN Holding GmbH
Fabriksgasse 3
2340 Mödling
Austria
Representative of the Controller: Managing Director(s)
3. Data Protection Officer
You can contact our Data Protection Officer as follows:
DataOrga® GmbH
Email: [email protected]
You may contact our Data Protection Officer directly at any time with any questions or suggestions regarding data protection.
4. Definitions
This Privacy Policy is based on the terminology used by the European legislator when adopting the General Data Protection Regulation (GDPR). Our Privacy Policy is intended to be easy to read and understand for the public, our customers, and our business partners. To ensure this, we would like to explain the terminology used in advance.
In this Privacy Policy, we use, among others, the following terms:
1. Personal Data
Personal data means any information relating to an identified or identifiable natural person ("data subject"). An identifiable natural person is one who can be identified, directly or indirectly, particularly by reference to an identifier such as a name, identification number, location data, online identifier, or one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person.
2. Data Subject
A data subject is any identified or identifiable natural person whose personal data is processed by the controller (our company).
3. Processing
Processing means any operation or set of operations performed on personal data, whether or not by automated means. This includes collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination, or otherwise making available, alignment or combination, restriction, erasure, or destruction.
4. Restriction of Processing
Restriction of processing means the marking of stored personal data with the aim of limiting its future processing.
5. Profiling
Profiling means any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to a natural person, in particular to analyze or predict aspects concerning work performance, economic situation, health, personal preferences, interests, reliability, behavior, location, or movements.
6. Pseudonymization
Pseudonymization means the processing of personal data in such a manner that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and subject to technical and organizational measures ensuring that the personal data is not attributed to an identified or identifiable natural person.
7. Processor
A processor is a natural or legal person, public authority, agency, or other body which processes personal data on behalf of the controller.
8. Recipient
A recipient is a natural or legal person, public authority, agency, or another body to which personal data is disclosed, regardless of whether it is a third party or not. However, public authorities that may receive personal data in the framework of a particular inquiry in accordance with Union or Member State law shall not be regarded as recipients.
9. Third Party
A third party is a natural or legal person, public authority, agency, or body other than the data subject, the controller, the processor, and persons who, under the direct authority of the controller or processor, are authorized to process personal data.
10. Consent
Consent means any freely given, specific, informed, and unambiguous indication of the data subject’s wishes by which they, through a statement or a clear affirmative action, signify agreement to the processing of personal data relating to them.
5. Legal Basis for Processing
Art. 6(1)(a) GDPR (in conjunction with Section 25(1) TDDDG (formerly TTDSG)) serves as the legal basis for processing operations for which we obtain consent for a specific processing purpose.
If the processing of personal data is necessary for the performance of a contract to which you are a party, such as processing operations required for the delivery of goods or the provision of services or consideration, the processing is based on Art. 6(1)(b) GDPR. The same applies to processing operations necessary for carrying out pre-contractual measures, for example in cases of inquiries regarding our products or services.
If our company is subject to a legal obligation requiring the processing of personal data, such as compliance with tax obligations, the processing is based on Art. 6(1)(c) GDPR.
In rare cases, processing personal data may be necessary to protect the vital interests of the data subject or another natural person. This would be the case, for example, if a visitor were injured on our premises and their name, age, health insurance details, or other vital information had to be passed on to a physician, hospital, or other third party. In such a case, processing would be based on Art. 6(1)(d) GDPR.
Finally, processing operations may be based on Art. 6(1)(f) GDPR. This legal basis applies to processing operations not covered by any of the legal bases mentioned above, where processing is necessary for the purposes of the legitimate interests pursued by our company or by a third party, provided that such interests are not overridden by the interests, fundamental rights, and freedoms of the data subject. Such processing operations are particularly permissible because they have been specifically mentioned by the European legislator, who considered that a legitimate interest could exist if you are a customer of our company (Recital 47 sentence 2 GDPR).
Our services are generally intended for adults. Persons under the age of 16 must not submit personal data to us without the consent of their parents or legal guardians. We do not request, collect, or disclose personal data from children or minors.
6. Transfer of Data to Third Parties
Your personal data will not be transferred to third parties for purposes other than those listed below.
We only disclose your personal data to third parties if:
You have given your explicit consent pursuant to Art. 6(1)(a) GDPR;
The disclosure is permissible pursuant to Art. 6(1)(f) GDPR for the protection of our legitimate interests and there is no reason to assume that you have an overriding legitimate interest in preventing the disclosure of your data;
There is a legal obligation for disclosure pursuant to Art. 6(1)(c) GDPR; or
The disclosure is legally permissible and necessary for the performance of contractual relationships with you pursuant to Art. 6(1)(b) GDPR.
To protect your data and, where necessary, enable transfers to third countries (outside the EU/EEA), we have concluded data processing agreements based on the European Commission’s Standard Contractual Clauses (SCCs). Where the SCCs are not sufficient to ensure an adequate level of protection, your consent pursuant to Art. 49(1)(a) GDPR may serve as the legal basis for transfers to third countries. This does not apply where the European Commission has issued an adequacy decision pursuant to Art. 45 GDPR.
As part of the processing activities described in this Privacy Policy, personal data may be transferred to the United States. Companies in the United States are considered to provide an adequate level of data protection only if they are certified under the EU-U.S. Data Privacy Framework and therefore fall under the European Commission’s adequacy decision pursuant to Art. 45 GDPR. We have explicitly identified such service providers in this Privacy Policy.
In all other cases, we protect your data through data processing agreements based on the European Commission’s Standard Contractual Clauses. If these clauses are insufficient to establish an adequate level of protection, your consent pursuant to Art. 49(1)(a) GDPR may serve as the legal basis for transfers to third countries. This may not apply where an adequacy decision pursuant to Art. 45 GDPR exists.
7. Technology
7.1 SSL/TLS Encryption
To ensure the security of data processing and protect the transmission of confidential content, such as orders, login credentials, or contact inquiries sent to us as the website operator, this website uses SSL or TLS encryption.
You can recognize an encrypted connection by the change in the browser’s address line from “http://” to “https://” and by the lock symbol displayed in your browser.
We use this technology to protect the data you transmit.
7.2 Data Collection When Visiting Our Website
If you use our website for informational purposes only, without registering, providing information, or consenting to processing activities requiring consent, we collect only the data that is technically necessary to provide the service. This generally includes data transmitted by your browser to our server (so-called server log files).
Each time you access a page on our website, our website collects a series of general data and information, which are stored in the server log files. These may include:
Browser types and versions used;
The operating system used by the accessing system;
The website from which an accessing system reaches our website (referrer);
The subpages accessed via an accessing system on our website;
Date and time of access to the website;
A shortened internet protocol address (anonymized IP address);
The internet service provider of the accessing system.
When using these general data and information, we do not draw any conclusions about your identity. Rather, this information is required in order to:
Deliver the content of our website correctly;
Optimize the content of our website and its advertising;
Ensure the long-term functionality of our IT systems and website technology;
Provide law enforcement authorities with the information necessary for prosecution in the event of a cyberattack.
The collected data and information are therefore evaluated statistically and with the aim of increasing data protection and data security within our company to ensure an optimal level of protection for the personal data we process.
The anonymous data contained in the server log files is stored separately from any personal data provided by a data subject.
The legal basis for processing is Art. 6(1)(f) GDPR. Our legitimate interest arises from the purposes for data collection listed above.
7.3 Cloudflare (Content Delivery Network)
Our website uses services provided by Cloudflare, Inc., 665 3rd St. #200, San Francisco, CA 94107, USA.
Cloudflare provides a globally distributed content delivery network (CDN) with DNS services. Technically, information transfer between your browser and our website is routed through Cloudflare’s network.
Cloudflare is therefore able to analyze traffic between users and our websites in order to detect and prevent attacks on our services. Cloudflare may also store cookies on your device for optimization and analysis purposes.
You can configure your browser to notify you when cookies are set, allow cookies only in individual cases, exclude acceptance of cookies for specific situations or generally, and activate automatic deletion of cookies when the browser is closed. Disabling cookies may limit the functionality of this website.
We have concluded a data processing agreement with Cloudflare in accordance with the GDPR and EU Standard Contractual Clauses. Cloudflare collects statistical data regarding visits to this website. Access data includes:
Name of the website accessed;
File accessed;
Date and time of access;
Amount of data transferred;
Notification of successful retrieval;
Browser type and version;
User’s operating system;
Referrer URL (previously visited page);
IP address;
Requesting provider.
Cloudflare uses log data for statistical evaluations related to operation, security, and optimization of its services.
If you have consented to the use of Cloudflare, the legal basis for processing personal data is Art. 6(1)(a) GDPR. We also have a legitimate interest in using Cloudflare to optimize and secure our online services. The corresponding legal basis is Art. 6(1)(f) GDPR.
Personal data is retained only for as long as necessary to fulfill the purpose of processing and is deleted once it is no longer required.
This U.S. company is certified under the EU-U.S. Data Privacy Framework. Accordingly, an adequacy decision pursuant to Art. 45 GDPR exists, allowing the transfer of personal data without additional safeguards.
Further information about Cloudflare can be found at:
https://www.cloudflare.com/privacypolicy/
8. Cookies
8.1 General Information About Cookies
Cookies are small files automatically created by your browser and stored on your IT system (laptop, tablet, smartphone, etc.) when you visit our website.
Information is stored in the cookie that results from the specific device being used. However, this does not mean that we gain direct knowledge of your identity.
The use of cookies serves to make our website more user-friendly. For example, we use session cookies to recognize that you have already visited individual pages of our website. These are automatically deleted after you leave our website.
In addition, we use temporary cookies to optimize usability. These are stored on your device for a defined period. If you revisit our website to use our services, it is automatically recognized that you have visited before and which entries and settings you made, so that you do not have to enter them again.
We also use cookies to statistically record the use of our website and evaluate it for optimization purposes. These cookies allow us to recognize automatically that you have previously visited our website. Such cookies are deleted automatically after a defined period.
The respective storage periods for cookies can be found in the settings of the consent management tool used on our website.
8.2 Legal Basis for the Use of Cookies
The data processed through cookies that are necessary for the proper functioning of the website are required to safeguard our legitimate interests and those of third parties pursuant to Art. 6(1)(f) GDPR.
For all other cookies, processing is based on your consent provided through our opt-in cookie banner in accordance with Art. 6(1)(a) GDPR.
8.3 Information on Preventing Cookies in Common Browsers
You can delete cookies, allow only selected cookies, or completely disable cookies at any time via your browser settings.
Further information can be found on the support pages of the respective providers:
Safari: https://support.apple.com/
Firefox: https://support.mozilla.org/
Microsoft Edge: https://support.microsoft.com/
8.4 Consentmanager (Consent Management Tool)
We use the consent management platform Consentmanager provided by consentmanager AB, Haltegelvägen 1b, 72348 Västerås, Sweden. This service enables us to obtain and manage users’ consent for data processing activities.
When an end user provides consent, Consentmanager automatically records:
Browser information
Date and time of access
Device information
URL of the visited page
Banner language
Consent ID
Consent status of the end user as proof of consent
The consent status is also stored in the end user’s browser so that the website can automatically recognize and apply the user's consent preferences for subsequent page requests and future sessions for up to 12 months.
Consent data (consent and withdrawal of consent) is stored for three years. This retention period corresponds to the regular statutory limitation period under Section 195 of the German Civil Code (BGB). The data is then deleted immediately.
The functionality of the website cannot be guaranteed without this processing. Users have no right to object as long as there is a legal obligation to obtain consent for certain processing activities (Art. 7(1), Art. 6(1)(c) GDPR).
Consentmanager acts as a processor on our behalf. Data processing takes place exclusively within the European Union.
Further information can be found at:
https://www.consentmanager.de/datenschutz/
8.5 Usercentrics (Consent Management Tool)
We use the consent management tool Usercentrics provided by Usercentrics GmbH, Sendlinger Straße 7, 80331 Munich, Germany.
Usercentrics enables us to obtain and manage users’ consent for data processing activities.
When a user provides consent, Usercentrics automatically records:
Browser information
Date and time of access
Device information
URL of the visited page
Geographic location
Website path
Consent status of the end user as proof of consent
The consent status is stored in the user’s browser and can be recognized for future sessions for up to 12 months.
Consent and withdrawal data are stored for three years. After this period, the data is deleted or made available to the responsible party upon request in the form of a data export.
The functionality of the website cannot be guaranteed without this processing. Users have no right to object where consent collection is legally required.
Usercentrics acts as a processor on our behalf.
Further information is available at:
https://usercentrics.com/privacy-policy/
9. Content of Our Website
9.1 Contact Requests / Contact Form
When you contact us (e.g., via contact form or email), personal data is collected.
The specific data collected via a contact form can be seen in the respective form. This data is stored and used exclusively for the purpose of responding to your inquiry and for the related technical administration.
The legal basis for processing is our legitimate interest in responding to your inquiry pursuant to Art. 6(1)(f) GDPR.
If your inquiry is aimed at concluding a contract, the additional legal basis for processing is Art. 6(1)(b) GDPR.
Your data will be deleted once your inquiry has been conclusively processed, provided that no statutory retention obligations prevent deletion.
10. Newsletter
10.1 Newsletter for Existing Customers
If you have provided your email address when purchasing goods or services, we reserve the right to regularly send you offers for similar goods or services from our product range via email.
Under Section 7(3) of the German Unfair Competition Act (UWG), no separate consent is required for this.
Processing is based on our legitimate interest in personalized direct marketing pursuant to Art. 6(1)(f) GDPR.
If you initially objected to the use of your email address for this purpose, you will not receive any emails from us.
You may object to the use of your email address for marketing purposes at any time with future effect by contacting the controller named above.
10.2 CleverReach
This website uses CleverReach for newsletter distribution.
Provider:
CleverReach GmbH & Co. KG
Schafjückenweg 2
26180 Rastede, Germany
The data you provide for receiving newsletters (e.g., your email address) is stored on CleverReach servers in Germany and/or Ireland.
Newsletters sent via CleverReach enable us to analyze recipient behavior. Among other things, we can determine:
How many recipients opened a newsletter
Which links were clicked
How often individual links were clicked
Whether a predefined action (conversion) was performed after clicking a link
Processing is based on your consent pursuant to Art. 6(1)(a) GDPR.
You may revoke your consent at any time by unsubscribing from the newsletter.
Data stored for newsletter purposes will be retained until you unsubscribe and will then be deleted from both our servers and CleverReach's servers.
Further information:
https://www.cleverreach.com/de/datenschutz/
11. Our Activities on Social Networks
To communicate with you and provide information about our services, we maintain profiles on social networks.
When you visit one of our social media pages, we and the respective platform provider are jointly responsible for the resulting data processing activities within the meaning of Art. 26 GDPR.
We are not the original provider of these platforms and only use them within the framework provided by the respective operators.
Please note that your data may also be processed outside the European Union or the European Economic Area. This may involve privacy risks, as enforcing your rights (e.g., access, deletion, objection) may be more difficult.
Social network operators often process data for advertising purposes and user behavior analysis, over which we have no influence.
If user profiles are created by the provider, cookies are frequently used, or usage behavior is linked to your social media account.
Processing is based on our legitimate interest in communicating with users and informing them about our services pursuant to Art. 6(1)(f) GDPR.
Where consent is required by the platform provider, the legal basis is Art. 6(1)(a) in conjunction with Art. 7 GDPR.
As we have no access to the providers’ databases, you should exercise your rights directly with the relevant provider.
11.1 LinkedIn
Controller in Europe:
LinkedIn Ireland Unlimited Company
Wilton Place, Dublin 2, Ireland
Privacy Policy:
https://www.linkedin.com/legal/privacy-policy
11.2 XING (New Work SE)
Controller:
New Work SE
Am Strandkai 1
20457 Hamburg
Germany
Privacy Policy:
https://privacy.xing.com/de/datenschutzerklaerung
Data disclosure requests:
https://www.xing.com/settings/privacy/data/disclosure
11.3 YouTube
Controller in Europe:
Google Ireland Limited
Gordon House, Barrow Street
Dublin 4, Ireland
Privacy Policy:
https://policies.google.com/privacy
12. Web Analytics
12.1 Google Analytics 4 (GA4)
We use Google Analytics 4 (GA4), a web analytics service provided by Google Ireland Limited.
GA4 creates pseudonymized usage profiles and uses cookies.
The information generated may include:
Temporary collection of IP addresses without permanent storage
Location data
Browser type and version
Operating system used
Referrer URL
Time of server request
These pseudonymized data may be transferred to Google servers in the United States.
The information is used to:
Evaluate website usage
Compile reports on website activity
Provide additional services related to website and internet usage
Improve website design based on user needs
Processing takes place only on the basis of your explicit consent pursuant to Art. 6(1)(a) GDPR.
Google’s default data retention period is 14 months.
Google LLC is certified under the EU-U.S. Data Privacy Framework.
Further information:
https://support.google.com/analytics/answer/12017362
12.2 Leadinfo (Lead Generation Service)
We use the lead generation service of Leadinfo B.V., Rivium Quadrant 141, Capelle aan den IJssel, Netherlands.
The service identifies visits from companies based on IP addresses and provides publicly available business information such as company names and addresses.
IP addresses are neither displayed nor stored.
Leadinfo also places two first-party cookies and processes domains entered in forms to correlate companies with website visits.
Data processed typically includes:
IP address (without permanent storage)
Location derived from IP address
Domain from form entries
Processing takes place solely on the basis of consent pursuant to Art. 6(1)(a) GDPR.
Further information:
https://www.leadinfo.com/de/rechtliches/datenschutz/
12.3 LinkedIn Analytics
We use LinkedIn’s retargeting and conversion tracking services.
The LinkedIn Insight Tag allows LinkedIn to collect statistical information about your visit and usage of our website and provides us with aggregated reports.
Typical data collected includes:
IP address
Device information
Browser information
Referrer URL
Timestamp
Processing takes place exclusively on the basis of consent pursuant to Art. 6(1)(a) GDPR.
Data may be transferred to the United States and Singapore.
LinkedIn participates in the EU-U.S. Data Privacy Framework and additionally relies on Standard Contractual Clauses where necessary.
Further information:
https://de.linkedin.com/legal/privacy-policy
13. Advertising
13.1 Google Ads Remarketing / Retargeting
We use Google Ads on this website.
Google places a cookie in your browser that enables interest-based advertising through a pseudonymous cookie ID.
Additional processing takes place only if you have consented to linking your browsing history with your Google account.
Processing is based solely on your consent pursuant to Art. 6(1)(a) GDPR.
Google LLC participates in the EU-U.S. Data Privacy Framework.
Further information:
https://www.google.com/policies/technologies/ads/
13.2 Google AdSense
We use Google AdSense for displaying advertisements.
Google AdSense enables targeted advertising based on user interests and uses cookies and tracking pixels.
Data processed may include:
IP address
Website usage data
Click behavior
Advertising interactions
Processing is based solely on your consent pursuant to Art. 6(1)(a) GDPR.
Google LLC is certified under the EU-U.S. Data Privacy Framework.
Further information:
https://www.google.com/policies/technologies/ads/
14. Plugins and Other Services
14.1 Google Tag Manager
We use Google Tag Manager provided by Google Ireland Limited.
This tool allows website tags to be implemented and managed through a centralized interface.
Google Tag Manager helps us understand which buttons, links, or personalized content are actively clicked by users and allows us to identify which website content is of particular interest.
The tool itself does not access collected data but may trigger other tags that collect data.
Processing takes place only on the basis of your explicit consent pursuant to Art. 6(1)(a) GDPR.
Google LLC participates in the EU-U.S. Data Privacy Framework.
Further information:
https://www.google.com/intl/en/policies/privacy/
15. Your Rights as a Data Subject
15.1 Right to Confirmation
You have the right to obtain confirmation from us as to whether personal data concerning you is being processed.
15.2 Right of Access (Art. 15 GDPR)
You have the right to obtain, at any time and free of charge, information about the personal data stored concerning you, as well as a copy of such data, in accordance with the applicable legal provisions.
15.3 Right to Rectification (Art. 16 GDPR)
You have the right to request the correction of inaccurate personal data concerning you.
Furthermore, taking into account the purposes of the processing, you have the right to have incomplete personal data completed.
15.4 Right to Erasure ("Right to be Forgotten") (Art. 17 GDPR)
You have the right to request that we erase personal data concerning you without undue delay, provided that one of the legal grounds specified by law applies and that processing or storage is not required for legal reasons.
15.5 Right to Restriction of Processing (Art. 18 GDPR)
You have the right to request the restriction of processing where one of the legal requirements is met.
15.6 Right to Data Portability (Art. 20 GDPR)
You have the right to receive the personal data concerning you that you have provided to us in a structured, commonly used, and machine-readable format.
You also have the right to transmit those data to another controller without hindrance from us, where:
the processing is based on consent pursuant to Art. 6(1)(a) GDPR or Art. 9(2)(a) GDPR, or on a contract pursuant to Art. 6(1)(b) GDPR; and
the processing is carried out by automated means.
This right does not apply where processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in us.
Furthermore, when exercising your right to data portability pursuant to Art. 20(1) GDPR, you have the right to have personal data transmitted directly from one controller to another, where technically feasible and provided that doing so does not adversely affect the rights and freedoms of others.
15.7 Right to Object (Art. 21 GDPR)
You have the right to object, on grounds relating to your particular situation, at any time to the processing of personal data concerning you where such processing is based on:
Art. 6(1)(e) GDPR (processing in the public interest), or
Art. 6(1)(f) GDPR (processing based on legitimate interests).
This also applies to profiling based on those provisions within the meaning of Art. 4(4) GDPR.
If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for processing that override your interests, rights, and freedoms, or where processing serves the establishment, exercise, or defense of legal claims.
In individual cases, we process personal data for direct marketing purposes. You have the right to object at any time to the processing of personal data for such marketing purposes.
This also applies to profiling related to direct marketing.
If you object to processing for direct marketing purposes, we will no longer process your personal data for those purposes.
You also have the right, on grounds relating to your particular situation, to object to the processing of personal data concerning you for scientific or historical research purposes or statistical purposes pursuant to Art. 89(1) GDPR, unless the processing is necessary for the performance of a task carried out for reasons of public interest.
You are free to exercise your right to object in connection with the use of information society services by automated means using technical specifications, notwithstanding Directive 2002/58/EC.
15.8 Right to Withdraw Consent
You have the right to withdraw your consent to the processing of personal data at any time with effect for the future.
The withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
15.9 Right to Lodge a Complaint with a Supervisory Authority
You have the right to lodge a complaint with a supervisory authority responsible for data protection if you believe that the processing of your personal data violates applicable data protection laws.
16. Routine Storage, Erasure, and Blocking of Personal Data
We process and store your personal data only for the period necessary to achieve the purpose of storage or as required by the legal regulations applicable to our company.
If the storage purpose no longer applies or a statutory retention period expires, personal data will be routinely restricted, blocked, or deleted in accordance with the applicable legal requirements.
17. Duration of Storage of Personal Data
The criterion for determining the duration of storage of personal data is the respective statutory retention period.
After expiration of the applicable retention period, the corresponding data is routinely deleted, provided it is no longer required for the performance or initiation of a contract.
18. Validity and Amendments to this Privacy Policy
This Privacy Policy is currently valid and was last updated in June 2026.
Due to the further development of our website and services or due to changes in legal or regulatory requirements, it may become necessary to amend this Privacy Policy.
The latest version of the Privacy Policy can be accessed and printed at any time at:
https://www.aichelin.com/privacy
This Privacy Policy was created with the support of the data protection software audatis MANAGER.