Privacy Policy

The following information explains the collection of personal data through the website of ZIEMANN VALOR GmbH, available at: https://www.ziemann-valor.de/en/

§ 1 – Definitions and Contact Details

1. Personal data refers to any information relating to an identified or identifiable natural person, e.g., name, address, email addresses, or user behavior.
2. The controller responsible for data processing is ZIEMANN VALOR GmbH. Represented by the managing directors: Markus Pieper, Markus Osiander, Heinz Spiegelmacher, Hans-Jörg Hisam.

You can reach the controller at:

Address: Siegelsdorfer Straße 31, 90431 Nürnberg

Phone: +49 911 98 207 200

Email: This email address is being protected from spambots. You need JavaScript enabled to view it.

Website: https://ziemann-valor.de

1. The Data Protection Officer of ZIEMANN VALOR GmbH is Mr. Marc E. Evers, Attorney at Law

You can reach our Data Protection Officer at:

Marc E. Evers, Attorney at Law

DataSEKure Rechtsanwaltsgesellschaft mbH

Weilerstraße 9

79252 Stegen

Phone: +49 761 38 769 55

Email: This email address is being protected from spambots. You need JavaScript enabled to view it.

 

§ 2 – Purpose and Legal Basis of Data Processing

1. Collection of Personal Data When Visiting the Website

When using our website purely for informational purposes—i.e., if you visit our site without registering or providing any personal information—we do not collect any personal data, except for data transmitted by your browser to enable the website to function. This includes:

• IP address
• Date and time of the request
• Time zone difference to Greenwich Mean Time (GMT)
• Content of the request (specific page)
• Access status / HTTP status code
• Amount of data transferred
• Website from which the request originated
• Browser type
• Operating system and its interface
• Language and version of the browser software

Purpose of processing:

• Ensuring smooth connection to the website
• Ensuring comfortable use of the website
• Evaluating system security and stability
• Other administrative purposes

Legal basis: Art. 6 (1) sentence 1 lit. f GDPR (legitimate interest).

Our legitimate interest arises from the purposes listed above. Under no circumstances do we use this data to draw conclusions about your identity. Further information on cookies and analytics tools used on the website can be found in Sections 6 and 7 of this privacy policy.

2. Collection of Personal Data via the “Contact Form”

In addition to informational use, our website offers a contact form to get in touch with us. To use it, you are generally required to provide additional personal data, which is used solely to process your inquiry. The required data includes:

• Email address
• Order number

Additional information can be provided voluntarily and will be marked as such.

Legal basis: Art. 6 (1) sentence 1 lit. a GDPR – based on your freely given consent.

Data deletion: Data collected through the contact form is automatically deleted once your inquiry has been fully processed.

3. Collection of Personal Data via Email, Phone, or Fax

If you contact us via email, telephone, or fax, we will process the personal data contained in your inquiry solely to handle your request. Legal basis: Art. 6 (1) sentence 1 lit. b GDPR – where the inquiry is related to contract performance or pre-contractual measures. Otherwise, Art. 6 (1) sentence 1 lit. f GDPR – based on our legitimate interest in processing your inquiry
Data retention: We delete personal data once storage is no longer necessary, unless legal retention obligations apply.

§ 3 – Recipients of Your Data

1. Your personal data will not be shared with third parties without your explicit consent. In some cases, we use external service providers to process your data. These providers are carefully selected, contractually bound to our instructions, and regularly monitored. Your personal data will therefore only be shared with third parties under the following circumstances:

• You have given your explicit consent in accordance with Art. 6 (1) sentence 1 lit. a GDPR,
• The transfer is necessary for the establishment, exercise, or defense of legal claims pursuant to Art. 6 (1) sentence 1 lit. f GDPR, and there is no reason to assume that you have an overriding legitimate interest in the non-disclosure of your data,
• There is a legal obligation to disclose the data pursuant to Art. 6 (1) sentence 1 lit. c GDPR, or
• The transfer is legally permissible and necessary for the performance of a contract with you pursuant to Art. 6 (1) sentence 1 lit. b GDPR.

1. Furthermore, we may share your personal data with third parties if we offer promotions, competitions, contract agreements, or similar services jointly with partners. You will receive further details at the time of data collection or in the specific description of the respective offer.
2. If our service providers or partners are located outside the European Economic Area (EEA), we will inform you of this and explain the implications in the respective description of the service or offer.
3. Note on Data Transfers to the USA
   Our website uses tools provided by companies based in the United States. When these tools are active, your personal data may be transferred to the servers of those companies in the U.S.
   
   U.S. companies may be legally required to disclose data to security authorities. As a data subject, you may have limited or no legal recourse to object or take action against such disclosures. We cannot exclude the possibility that U.S. authorities (e.g., intelligence agencies) may access, analyze, and permanently store your personal data on U.S. servers.
   
   Therefore, we explicitly point out that the USA is not considered a secure third country under EU data protection law.

§ 4 – Duration of Data Storage

1. If you contact us via email, the information you provide (e.g., your email address, name, and telephone number, if applicable) will be stored to process and respond to your inquiry. We delete this data once it is no longer needed, or restrict its processing if statutory retention obligations apply.
2. Data will also be stored for the duration of the ongoing business relationship or as long as necessary for the stated purposes. If this relationship ends, or you exercise your rights under Section 5, your data will be processed in accordance with those rights and may be deleted—unless legal provisions require longer retention.
   In certain cases, statutory retention periods (e.g., under commercial or tax law) may require us to retain data for up to 10 years, regardless of the purpose of processing.

§ 5 – Your Rights

1. Right of Access, Rectification, Erasure, Restriction, and Data Portability

You have the right to request information about the personal data we hold about you at any time. This includes the origin of the data, the recipients or categories of recipients, and the purpose of processing. You also have the right to receive the personal data you have provided to us in a structured, commonly used, and machine-readable format, or to request its transfer to another controller.

You may also request that your data be corrected, restricted, or deleted—unless legal obligations (e.g., retention periods) prevent this.

 

2. Right to Object and Right to Withdraw Consent

1. If you have given us consent to process your personal data, you may withdraw it at any time. The withdrawal only affects future processing.
   
   
2. If the processing of your personal data is based on a balancing of interests (Art. 6 (1) sentence 1 lit. f GDPR), you have the right to object. This applies in cases where processing is not strictly necessary for contract fulfillment, as explained in this privacy policy.
   
   If you object, please provide reasons why you believe we should no longer process your personal data.
   
   We will review your objection and, if justified, either stop or adjust processing, or explain our compelling legitimate grounds for continuing.
   
   
3. You may object at any time to the processing of your personal data for direct marketing or data analysis purposes—no justification is required in this case.
   
   

3. Right to Lodge a Complaint with a Supervisory Authority

If you are dissatisfied with how we handle your personal data, you have the right to lodge a complaint with the relevant data protection authority.

Please direct all data protection-related requests to our Data Protection Officer:

Marc E. Evers, Attorney at Law

DataSEKure Rechtsanwaltsgesellschaft mbH

Weilerstraße 9

79252 Stegen

Phone: +49 761 38 769 55

Email: This email address is being protected from spambots. You need JavaScript enabled to view it.

§ 6 – Cookies

1. We use cookies on our website. Cookies are small text files that are automatically created by your browser and stored on your device (e.g., laptop, tablet, smartphone) when you visit our site. Cookies do not damage your device and do not contain viruses, trojans, or other malware.
2. Cookies store information related to the specific device used. However, this does not mean that we immediately become aware of your identity.
3. Session cookies are deleted automatically after you leave our website. Temporary cookies remain on your device for a predefined period. Permanent cookies remain stored until you manually delete them or your browser does so automatically.
4. Cookies serve various purposes. Many are technically necessary to ensure the proper functioning of the website. The processing of data through these cookies is based on our legitimate interests under Art. 6 (1) sentence 1 lit. f GDPR.
   In addition, we use non-essential cookies, which help to enhance user experience, analyze website usage anonymously, and display personalized advertising. The legal basis for using these cookies is your consent in accordance with Art. 6 (1) sentence 1 lit. a GDPR.
5. Where we obtain your consent to store cookies, the processing of your data is based solely on that consent pursuant to Art. 6 (1) lit. a GDPR. You may withdraw your consent at any time with future effect.
6. You can configure your browser to block the storage of cookies, to notify you before new cookies are created, or to delete cookies automatically when the browser is closed. You can also set exceptions for certain cases. Please note, however, that disabling cookies entirely may limit the functionality of our website.

§ 7 – Data Security

We use the industry-standard SSL (Secure Socket Layer) protocol in combination with the highest level of encryption supported by your browser when transmitting data. This is usually 256-bit encryption. If your browser does not support 256-bit encryption, we fall back to 128-bit v3 technology. You can identify an encrypted connection by the closed padlock or key icon in your browser’s status bar.

In addition, we implement appropriate technical and organizational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction, or unauthorized access by third parties. Our security measures are continually improved in line with technological advancements.

§ 8 – Hosting

Our website is hosted by an external service provider (hosting provider). All personal data collected on the website (see §2 No. 1) is stored on the servers of this provider.Data processing in connection with hosting is based on Art. 6 (1) sentence 1 lit. f GDPR, as it serves our legitimate interest in operating our website reliably, securely, and efficiently through a professional host. The hosting provider processes your personal data exclusively in accordance with our instructions. We have concluded a Data Processing Agreement (DPA) with our provider in accordance with Art. 28 GDPR.

§ 9 – Links to Third-Party Websites

Our website contains links to the following third-party websites:

• Lightstreamer: https://lightstreamer.com/
  
• Trusted Shops: https://www.trustedshops.de/
  

Please note that we have no control over the content or the data processing practices of these websites. For details on how these providers collect and use personal data—as well as your rights and settings to protect your privacy—please refer to the respective privacy policies on their websites.

§ 10 – Our Own Services

1. Newsletter

1. With your consent, you can subscribe to our newsletter, through which we inform you about our latest and most relevant offers. The specific goods and services promoted are stated in the declaration of consent.
2. We use the double opt-in procedure for newsletter subscriptions. This means that after signing up, we send an email to the provided address asking for confirmation that you want to receive the newsletter. We also store the IP addresses used and the timestamps of your registration and confirmation. This process ensures your consent can be verified and helps prevent misuse of your personal data.
3. The only required information for receiving the newsletter is your email address. [Any additional information is optional and will be clearly marked. It may be used, for example, to address you personally.]
   Once you confirm your subscription, we store your email address solely for sending the newsletter. The legal basis is Art. 6 (1) sentence 1 lit. a GDPR.
4. You can withdraw your consent and unsubscribe from the newsletter at any time. You may do so by clicking the unsubscribe link included in every newsletter or by contacting us using the contact details provided in our legal notice.

2. Use of Our Webshop

To place an order via our webshop, you must provide personal data necessary for processing the transaction. Mandatory fields are clearly marked; any additional information is voluntary. We use your data to process your order and, if necessary, pass on your payment details to our bank. The legal basis for this is Art. 6 (1) sentence 1 lit. b GDPR. You may voluntarily create a customer account to simplify future purchases. If you create an account under “My Account,” the data you provide will be stored revocably. You can delete your account and any associated data at any time through the customer area. We may also use your data to inform you about similar products or to send you technical updates. Due to commercial and tax regulations, we are required to retain your address, payment, and order data for a period of ten years. However, after three years, we restrict processing so that your data is used only to fulfill legal obligations.

To protect your data—particularly financial data—from unauthorized access, we encrypt the ordering process using TLS technology.

3. Registration on This Website

To access certain features of our website, you may register for an account. The personal data requested during registration is processed exclusively to provide access to the specific service or offer you registered for. The legal basis is Art. 6 (1) lit. b GDPR, as the processing is necessary for the user relationship created through registration.

We store your personal data as long as your account is active. Statutory retention obligations remain unaffected.

§ 11 – Plug-ins and Tools

Embedding of YouTube Videos

Our website includes embedded YouTube videos, which are hosted on www.YouTube.com and can be played directly on our site. All embedded videos are integrated using YouTube’s “enhanced privacy mode”. This means no data is transmitted to YouTube unless you play the video. When you do, the data referenced in §2 No. 1 is transmitted to YouTube.

By visiting a page with an embedded video, YouTube is notified that you accessed the corresponding subpage. The data specified in §2 No. 1 of this privacy policy is also transmitted. This occurs regardless of whether you’re logged into a YouTube or Google account. If you are logged in, your data may be associated directly with your Google profile. If you prefer not to be associated, you must log out before playing the video. YouTube stores this data as usage profiles and uses it for advertising, market research, and/or demand-based website design. Such processing is done even for users who are not logged in. You have the right to object to the creation of these profiles, but this must be exercised directly with YouTube.

This data may be transferred to and stored on Google servers in the United States. We have no control over this. The integration of YouTube videos complies with guidelines issued by German data protection authorities. A data processing agreement has been concluded with Google.

Further information on the purpose and scope of data collection and processing by YouTube, as well as your rights and privacy settings, can be found in YouTube’s privacy policy: https://www.google.de/intl/de/policies/privacy

The legal basis for embedding YouTube videos is your consent pursuant to Art. 6 (1) lit. a GDPR, which is typically obtained when you accept cookies. You may withdraw this consent at any time.