Privacy policy

Data protection at a glance

General information

The following information provides a simple overview of what happens to your personal data when you visit our website. Personal data are all data that can be used to identify you as an individual. You can find more detailed information on the subject of data protection in the privacy policy below this text.

Data collection on our website

Who is responsible for data collection on this website?

Data processing on this website is carried out by the website operator. You can see their contact details in the Imprint section of this website.

How do we gather your data?

On the one hand, we gather the data that you share with us. These can, for example, be data that you enter into a contact form.

Other data are automatically gathered by our IT systems when you visit the website. These are mainly technical data (e.g. Internet browser, operating system or time the page is viewed). These data are gathered automatically as soon as you enter our website.

What do we use your data for?

Some of the data are gathered to guarantee error-free provision of the website. Other data can be used to analyse your user behaviour.

What are your rights as far as your data are concerned?

You have the right at any time to receive information free of charge regarding the origin, recipients and purpose of your saved personal data. Furthermore, you have the right to request that said data be rectified, blocked or deleted. To do this, or if you have any other queries regarding data protection, you can contact us any time at the address provided in the Imprint section. You are also entitled to a make a complaint to the supervisory body responsible for data protection.

In certain circumstances, you are also entitled to request that the processing of your personal data be restricted. You can see more details on this under “Right to restriction of processing” in this privacy policy.

Analytics tools and tools from third-party providers

Your browsing habits can be statistically analysed when you visit our website. This is mostly carried out by cookies and analytics programmes. As a rule, your browsing habits are analysed anonymously; your browsing cannot be traced back to you.

You can object to the analysis of your browsing habits or prevent it by not using certain tools. You can see detailed information on these tools and your options if you wish to object in the privacy policy below.

Hosting

External Hosting

This website is hosted externally. Personal data collected on this website are stored on the servers of the host. These may include, but are not limited to, IP addresses, contact requests, metadata and communications, contract information, contact information, names, web page access, and other data generated through a web site.

The external hosting serves the purpose of fulfilling the contract with our potential and existing customers (Art. 6(1)(b) GDPR) and in the interest of secure, fast, and efficient provision of our online services by a professional provider (Art. 6(1)(f) GDPR). If appropriate consent has been obtained, the processing is carried out exclusively on the basis of Art. 6 (1)(a) GDPR and § 25 (1) TTDSG, insofar the consent includes the storage of cookies or the access to information in the user's end device (e.g., device fingerprinting) within the meaning of the TTDSG. This consent can be revoked at any time.

Our host(s) will only process your data to the extent necessary to fulfil its performance obligations and to follow our instructions with respect to such data.

We are using the following host(s):

Werbeagentur Hüper GmbH
im Brühl 1
89520 Heidenheim

Data processing

We have concluded a data processing agreement (DPA) for the use of the above-mentioned service. This is a contract mandated by data privacy laws that guarantees that they process personal data of our website visitors only based on our instructions and in compliance with the GDPR.

General information and mandatory information

Data protection

The operators of this website take the protection of your personal data very seriously. We handle your personal data confidentially according to the legal provisions on data protection and this privacy policy.

When you use this website, different personal data are gathered. Personal data are data that can be used to identify you as an individual. This privacy policy explains what data we gather and what we use them for. It also explains how and why they are gathered.

You should be aware that data transfer on the Internet (e.g. in communication by email) may be subject to security breaches. Total protection from data security breaches by third parties is not possible.

Information on the responsible authority

The responsible authority for data processing on this website is:

Schüller Möbelwerk KG
Rother Straße 1
91567 Herrieden
Germany
Tel: +49 (0) 98 25 83-0
Fax: +49 (0) 98 25 83-1210
E-Mail: info@schueller.de

Data recipients

Your data is not disclosed to third parties unless there is a legal obligation to transfer the data. Such a transfer shall take place on the basis of Article 6(1)(c) GDPR and in conjunction with the directive or legal obligation to which we are subject in the case in question. According to Article (6)(1)(c) GDPR, the processing of personal data is permitted if it is necessary for compliance with a legal obligation to which the controller is subject. Categories of data recipients are: public entities in the event of a legal obligation; processors who process the data gathered online on our behalf; and, where applicable, anyone who is jointly responsible for processing. The following processor is involved: Werbeagentur Hüper GmbH

The responsible authority is the individual or legal entity that alone or together with others decides on the purpose and means of personal data processing (e.g. names, email addresses, and similar).

Storage duration

Unless a more specific storage period has been specified in this privacy policy, your personal data will remain with us until the purpose for which it was collected no longer applies. If you assert a justified request for deletion or revoke your consent to data processing, your data will be deleted, unless we have other legally permissible reasons for storing your personal data (e.g., tax or commercial law retention periods); in the latter case, the deletion will take place after these reasons cease to apply.

General information on the legal basis for the data processing on this website

If you have consented to data processing, we process your personal data on the basis of Art. 6(1)(a) GDPR or Art. 9 (2)(a) GDPR, if special categories of data are processed according to Art. 9 (1) DSGVO. In the case of explicit consent to the transfer of personal data to third countries, the data processing is also based on Art. 49 (1)(a) GDPR. If you have consented to the storage of cookies or to the access to information in your end device (e.g., via device fingerprinting), the data processing is additionally based on § 25 (1) TTDSG. The consent can be revoked at any time. If your data is required for the fulfillment of a contract or for the implementation of pre-contractual measures, we process your data on the basis of Art. 6(1)(b) GDPR. Furthermore, if your data is required for the fulfillment of a legal obligation, we process it on the basis of Art. 6(1)(c) GDPR. Furthermore, the data processing may be carried out on the basis of our legitimate interest according to Art. 6(1)(f) GDPR. Information on the relevant legal basis in each individual case is provided in the following paragraphs of this privacy policy.

Information on data transfer in the USA and other third countries

Among others, we use tools from companies based in the USA or other non-secure third countries in terms of data protection. When these tools are active, your personal data can be transferred to such third countries and processed there. You should be aware that in such countries a level of data protection comparable with that of the EU cannot be guaranteed. For example, US companies are obliged to disclose personal data to security authorities and, as the data subject, you are unable to take any legal action against this. For this reason, it cannot be ruled out that US authorities (e.g. secret services) process, analyse and permanently save any of your data that is on their servers for surveillance purposes. We have no influence over such processing activities.

Recipients of personal data

In the scope of our business activities, we cooperate with various external parties. In some cases, this also requires the transfer of personal data to these external parties. We only disclose personal data to external parties if this is required as part of the fulfillment of a contract, if we are legally obligated to do so (e.g., disclosure of data to tax authorities), if we have a legitimate interest in the disclosure pursuant to Art. 6 (1)(f) GDPR, or if another legal basis permits the disclosure of this data. When using processors, we only disclose personal data of our customers on the basis of a valid contract on data processing. In the case of joint processing, a joint processing agreement is concluded.

Withdrawal of your consent to data processing

Many data processing procedures are only possible with your express consent. You can withdraw your consent at any time after it has been granted. To do this, you simply have to send us an informal message by email. The legality of the data processing up to the moment of withdrawal shall remain unaffected.

Right to object to data collection in particular cases and to object to direct marketing (Art. 21 GDPR)

When data processing takes place on the basis of Art. 6(1)(e) or (f) GDPR, you have the right to object at any time, on grounds relating to your personal situation, to the processing of your personal data; this also applies to profiling on the basis of these provisions. You can see the legal basis for processing in this privacy policy. If you object, we will no longer process your personal data, unless we are able to demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or processing is required to establish, exercise or defend legal claims (right to object according to Art. 21(1) GDPR).

Where your personal data are processed for direct marketing purposes, you shall have the right to object at any time to the processing of personal data concerning you for such marketing; this also applies to profiling to the extent that it is related to such direct marketing. If you object, your personal data will no longer be used for direct marketing purposes (right to object according to Art. 21(2) GDPR).

Right to lodge a complaint with a supervisory authority

In the event of an infringement of the GDPR, the data subject has the right to lodge a complaint with a supervisory authority, particularly in the Member State of their habitual residence, their place of work or place of the alleged infringement. You have the right to lodge a complaint without prejudice to any other administrative or judicial remedy.

Right to data portability

You have the right to allow any data that we process automatically to fulfil a contract or on the basis of your consent to be handed over to yourself or a third party in a commonly used electronic form. If you request that the data be transferred directly to another data controller, this is only possible if technically feasible.

SSL or TLS encryption

For security reasons and to protect the transfer of confidential contents, such as orders or queries that you send us as the website operator, this website uses SSL or TLS encryption. You can recognise an encrypted link by the fact that the address line in the browser changes from “http://” to “https://” and by the lock symbol in the address bar.

When SSL or TLS encryption is activated, the data that you transfer to us cannot be read by third parties.

Access, blocking, erasure and rectification

Within the scope of the applicable legal provisions, you have the right to obtain information free of charge at any time regarding your saved personal data, their origin and recipients, and the purpose of the data processing. Where applicable, you have the right to rectify, block or delete said data. To do this, or if you have any other queries regarding personal data, you can contact us any time at the address provided in the Imprint section.

Right to restrict processing

You have the right to request that the processing of your personal data be restricted. To do this, you can contact us any time at the address provided in the Imprint section. You have the right to restrict processing in the following cases:

• if you challenge the accuracy of your personal data that we have saved; as a rule, we need time to check this. For the duration of the check, you have the right to request that the processing of your personal data be restricted.
• If your personal data have been/are being processed wrongfully, you can request that data processing be restricted instead of having the data erased.
• If we no longer need your personal data, but you need them to exercise, defend or establish legal claims, you have the right to request that data processing be restricted instead of having the data erased.
• If you have lodged an objection under Art. 21(1) GDPR, your and our interests must be weighed up. If it has not yet been established whose interests take precedence, you have the right to request that the processing of your personal data be restricted.

If you have restricted the processing of your personal data, said data – with the exception of their storage – can only be processed in the following instances: if you have given your consent; to exercise, defend or establish legal claims or protect the rights of another individual or legal entity; for reasons of substantial public interest of the European Union or a Member State.

Data collection on our website

Cookies

Some websites use cookies. Cookies do not damage your computer and do not contain viruses. Cookies are used to make our website more user-friendly, effective and safe. Cookies are small text files that are stored on your computer and saved by your browser.

Most of the cookies we use are session cookies. These are automatically deleted at the end of your visit. Other cookies are saved on your end device until you delete them. These cookies enable us to recognise your browser the next time you visit.

You can set your browser so that you are notified about the use of cookies and only enable cookies in certain cases, forbid the use of cookies in certain cases or in general, or activate automatic deletion of cookies upon closing the browser. If cookies are deactivated, the functions of this website may be restricted.

Cookies that are necessary for electronic communication or to provide certain functions that you require (such as the shopping basket function), are stored on the basis of Art. 6(1)(f) GDPR. The website operator has a legitimate interest in the storage of cookies to ensure that its services are provided optimally and without technical errors. If other cookies (e.g. cookies to analyse your browsing habits) are stored, they will be handled separately in this privacy policy.

Server log files

The website provider automatically gathers and saves information in server log files, which your browser automatically transfers to us. These are:

• browser type and browser version
• operating system used
• referrer URL
• host name of the computer accessing the site
• time of the server request
• IP address

These data will not be pooled with other data sources.

These data are gathered on the basis of Art. 6(1)(f) GDPR. The website operator has a legitimate interest in the technically flawless presentation and optimisation of its website. To ensure this, server log files must be captured.

Contact form

If you send queries to us via the contact form, we will save the information that you provide, including the contact data saved in the form, so that we can process the query and in case there are any further questions. We will not pass on these data without your consent.

The data entered in the contact form will therefore only be processed on the basis of your consent (Art. 6(1)(a) GDPR). You can withdraw your consent at any time. To do this, you simply have to send us an informal message by email. The legality of the data processing up to the moment of withdrawal shall remain unaffected.

We will keep the data that you enter in the contact form until you request that we delete them, you withdraw your consent to them being stored or we no longer need to save the data (e.g. after processing your query). Mandatory legal provisions – particularly retention periods – remain unaffected.

Queries by email, telephone or fax

If you contact us by email, telephone or fax, we will save and process your query and all personal data (name, query) accompanying it to be able to process your request. We will not pass on these data without your consent.

If your request is related to the fulfilment of a contract or is required for pre-contractual measures, these data are processed on the basis of Art. 6(1)(b) GDPR. In all other cases, processing is based on your consent (Art. 6(1)(a) GDPR) and/or on our legitimate interests (Art. 6(1)(f) GDPR) as we have a legitimate interest in the effective processing of queries sent to us.

We will keep the data that you send to us by contact form until you request that we delete them, you withdraw your consent or we no longer need to store them (e.g. after processing your request). Mandatory legal provisions – particularly statutory retention periods – remain unaffected.

Analytical tools and advertising

Matomo

This website uses the open source web analytics service Matomo. Matomo uses technologies that enable return users to be recognised across the website in order to analyse user behaviour (e.g. cookies or device fingerprinting). The information that Matomo gathers on the use of this website is saved on our server. The IP address is anonymised before it is saved.

With the help of Matomo, we are in a position to gather and analyse data on the use of our website by visitors. Among other things, it enables us to find out when which pages have been viewed and from which region. We also record different log files (e.g. IP address, referrer, browser and operating systems used) and can detect whether our website visitors perform certain actions (e.g. clicks, purchases, etc.).

This analytics tool is used on the basis of Art. 6(1)(f) GDPR. The website operator has a legitimate interest in the anonymised analysis of user behaviour to optimise both its website and its advertising.

IP anonymisation

When performing analyses using Matomo, we use IP anonymisation. This shortens your IP address before analysis so that it can no longer be clearly attributed to you.

Hosting

We only host Matomo on our own servers, meaning that all analysis data stay with us and are not passed on.

Plug-ins and tools

Google Web Fonts (local hosting)

This page uses web fonts provided by Google to ensure fonts are displayed clearly. Google Fonts is installed locally. There is no link to Google servers.

You can find out more about Google Fonts at https://developers.google.com/fonts/faq and in Google’s privacy policy: https://policies.google.com/privacy?hl=de.

Font Awesome (local hosting)

This website uses Font Awesome to ensure fonts are displayed clearly. Font Awesome is installed locally. There is no link to Fonticons, Inc.’s servers.

You can find out more about Font Awesome in their privacy policy at: https://fontawesome.com/privacy.

YouTube with enhanced privacy

Our website uses plug-ins from the website YouTube. The website operator is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

We use YouTube in enhanced privacy mode. According to YouTube, the website cannot save any information on users who have activated this mode before they watch videos. However, the transfer of data to YouTube partners is not necessarily ruled out by using enhanced privacy mode. Regardless of whether you watch a video or not, YouTube creates a link to the Google DoubleClick network.

As soon as you start a YouTube video on our website, a link to the YouTube servers is created. This informs the YouTube servers which of our web pages you have visited. When you log into your YouTube account, you enable YouTube to directly associate your browsing habits with your personal profile. You can prevent this by logging out of your YouTube account.

Furthermore, after starting a video, YouTube can save different cookies on your end device. These cookies help YouTube to obtain information about visitors to our website. Among other things, this information is used to compile video statistics, improve ease of use and prevent attempted fraud. The cookies stay on your end device until you delete them.

If necessary, after a YouTube video has started, other data processing procedures may be triggered upon which we have no influence.

YouTube is used in the interest of making our website visually appealing. This constitutes a legitimate interest under Art. 6(1)(f) GDPR. If corresponding consent is requested, processing will only be carried out on the basis of Art. 6(1)(a) GDPR and Section 25(1) of the German Telecommunications-Telemedia Data Protection Act (TTDSG), provided that consent includes saving cookies or accessing information on the user’s end device (e.g. device fingerprinting) as defined by the TTDSG. Consent can be withdrawn at any time.

You can find out more about data protection on YouTube in their privacy policy at: https://policies.google.com/privacy?hl=de.

Google Maps

This website uses the map service Google Maps by means of an API. It is provided by Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

To use the functions of Google Maps, it is necessary to save your IP address. As a rule, this information is transferred to a Google server in the USA and saved there. The provider of this website has no influence on this transfer of data.

Google Maps is used in the interest of making our website visually appealing and making the locations that we mention on the website easier to find. This constitutes a legitimate interest under Art. 6(1)(f) GDPR. If corresponding consent is requested, processing will only be carried out on the basis of Art. 6(1)(a) GDPR and Section 25(1) of the German Telecommunications-Telemedia Data Protection Act (TTDSG), provided that consent includes saving cookies or accessing information on the user’s end device (e.g. device fingerprinting) as defined by the TTDSG. Consent can be withdrawn at any time.

You can find out more about how user data are handled in Google’s privacy policy: https://policies.google.com/privacy?hl=de.

In the case of contents on this website that are not created by the operator, third-party property rights are respected. Third-party contents are identified as such. However, should a copyright infringement come to your attention, please let us know. If we become aware of any infringements, we will immediately remove the contents involved.

Social media

Facebook/Instagram

We have a profile on Facebook and Instagram. The provider in both cases is Facebook Inc., 1 Hacker Way, Menlo Park, California 94025, USA.

We have entered into an agreement with Facebook regarding joint responsibility for data processing (Controller Addendum). This agreement sets out which data processing procedures we and Facebook are responsible for when you visit our Facebook fan page. Facebook Ireland assumes primary responsibility pursuant to the GDPR for the processing of insight data. You can see this agreement via the following link:

You can adjust the advertising settings in your user account yourself. To do this, click on the following link and sign in: https://www.facebook.com/settings?tab=ads

You can see the details in the Facebook privacy policy: https://www.facebook.com/about/privacy/

The legal basis for processing is Art. 6(1)(f) GDPR. Making our posts suitable for target groups is in our legitimate interest. We receive aggregated data from Facebook that cannot be associated with individuals.

YouTube channel

We use a YouTube channel provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. When you visit our YouTube channel, among other things the operator processes your personal data such as your IP address and information on your end device. If you have registered using your Google account, these data can be linked to your account.

To optimise our reach and improve our website, we use the statistical data provided by Google on the use of the channel. This enables us to see the following data in particular:

• number of times our video is viewed
• number of subscribers to our channel
• traffic source
• end device information
• demographic data
• categories of other videos watched by viewers of our videos

We have no influence on the generation of these statistics.

You can find out more about Google data processing and retention periods at: https://policies.google.com/privacy?hl=de

In certain circumstances, we also process your personal data to answer queries or for other communication via our channel. The legal basis for this processing is your consent, which you grant by visiting our channel and writing a comment or by communicating with us in any other way (Art. 6(1)(a) GDPR).

Pinterest

We use a Pinterest account provided by Pinterest Inc., 808 Brannan Street, San Francisco, CA, 91403, USA (“Pinterest”). You can find out about the purpose and scope of data collection and further data processing and use by Pinterest, as well as your rights and settings options to protect your privacy, in the Pinterest privacy policy at: https://policy.pinterest.com/de/privacy-policy.

Facebook privacy policy

We have an agreement with Facebook as joint controllers pursuant to Art. 26 GDPR. You can see this agreement at the following link. This agreement sets out that Facebook shall fully assume all data-protection obligations related to the “Page Insights” function.

1. Name and address of the controllers

The joint controllers of this Facebook page are:

Facebook Ireland Ltd.
4 Grand Canal Square
Grand Canal Harbour
Dublin 2 Ireland

and

Schüller Möbelwerk KG
Rother Straße 1
91567 Herrieden
Germany
CEOs: Markus Schüller, Max Heller, Manfred Niederauer
Tel. +49 (0) 98 25 83-0
Fax +49 (0) 98 25 83-121
info@schueller.de

You can contact Schüller Möbelwerk KG’s external data protection officer at: Email: david.gabel@your-insider.com

2. Data categories, purpose and legal basis of the processing

Regarding data processing by Facebook, we refer to their privacy policyhttps://www.facebook.com/privacy/explanation. Please see below for further information about the data processing that we carry out.

2.1. Statistical data

We are able to access various categories of statistical data using the Facebook “Page Insights” function. (https://www.facebook.com/business/a/page/page-insights). These statistics are produced and made available by Facebook. As a user of the site, we have no influence on the production and presentation of such statistics. We cannot turn off this function or prevent the production and processing of data. For a selected time period and for the categories fans, subscribers, people reached and people engaged, Facebook provides us with the following data related to our Facebook page: total number of pages accessed; “Like” information; page activities; engagement with posts; reach; video views; post reach; comments; shared contents; replies; proportion of men and women; location referring to country and city; language; views and clicks in the shop; clicks on route planners; clicks on telephone numbers. In the same way, data is provided on the Facebook groups linked to our Facebook page. Due to the ongoing development of Facebook, the availability and processing of data is constantly changing. For further details, you should therefore refer to the above-mentioned Facebook privacy policy.

The processing of personal data is based on Article 6(1)(f) GDPR. Our legitimate interest is to make the posts and activities on our Facebook page more attractive to users. We use, for example, a breakdown by age and gender to adapt the way that we address users, and the times that users visit the page to optimise the timing of our posts. Information on the type of end devices used by visitors helps us to adapt the visual design of our posts.

2.2 Engagement with our account

It is also possible for you to engage with our account. You can do this, for example, by clicking on “Like” on a post, by sharing it or commenting, or by sending us a direct message.

When you interact with us, we must, as a rule, process data as this enables us to see your account and therefore access your personal data, such as your username, profile picture or the date and time of interaction. According to the Facebook terms of service, which all users agree to when creating a Facebook profile, we are able to identify subscribers and page fans and see their profile and other information that they share.

In this case, the data gathered are in the form of information that is only made available to us when you interact with our profile. The processing of the personal data is based on Art. 6(1)(b) GDPR.

Data recipients

You should be aware that Facebook may pass on your data to third parties. We do not have any influence over this. You can see more detailed information on this in the Facebook privacy policy: www.facebook.com/privacy/explanation.

We do not disclose your data unless there is a legal obligation to transfer the data. Such a transfer shall take place on the basis of Article 6(1)(c) GDPR and in conjunction with the directive or legal obligation that we are subject to in the case in question. Categories of data recipients are public entities in the event of a legal obligation and processors who process the data gathered online on our behalf, such as website hosts and designers, analysis service providers, etc.

4. Retention period and deletion

You can obtain information on data retention by Facebook from their privacy policy: www.facebook.com/privacy/explanation.

We save all personal data that you transfer to us only for as long as is necessary to fulfil the purpose for which the data were transferred or for the period prescribed by law. When the purpose has been fulfilled and/or the legal retention periods have ended, we delete or block the data

5. Rights of the data subject

With regard to the processing of personal data, you have a number of rights which we would like to inform you about below. You can also find out more about your rights in Articles 15 to 21 of the GDPR and sections 32 to 37 of the German data protection act ("BDSG").

You are entitled to receive information about your personal data. You can also demand that incorrect data be rectified.

Furthermore, under certain conditions, you have the right to the deletion of data, to the restriction of data processing and to data portability. You can object to processing on the basis of Article 6(1)(f) GDPR and to the possible creation of a profile according to Article 21 GDPR. The consent you granted within the context of using the website can be withdrawn at any time with future effect, informally and without specifying the reason.

You can assert all of the above rights under Articles 15 to 21 GDPR informally with the data controller by email or post.

You are also entitled to a make a complaint to the supervisory body responsible for data protection if you believe that the processing of your data is unlawful. You can see a list of Data Protection Officers and their contact details at: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html

If the complaint concerns data processing by Facebook, you can also contact Facebook directly. This is particularly the case if the processing is carried out within the scope of the “Page Insights” function. You can contact Facebook using the form below: https://www.facebook.com/help/contact/2061665240770586.

You can also contact them by post at the following address:
Facebook Ireland Ltd.
4 Grand Canal Square
Grand Canal Harbour
Dublin 2 Ireland

Alternatively, you can of course contact us and we will pass on your request to Facebook in accordance with our agreement with them under Article 26 GDPR.