1. Controller
The controller within the meaning of the General Data Protection Regulation (GDPR) is:
Rodenhausen Electronic GbR
Partners: Maik Rodenhausen and Dirk Rodenhausen
Berggartenstrasse 5
35457 Lollar-Odenhausen
Telephone: 06406/834774
E-Mail: info@dev-tools.de
Website: www.dev-tools.de
2. General Information on Data Processing
Purpose of this Privacy Policy
We inform you about the nature, scope and purpose of the personal data we collect and process, as well as your rights as a data subject.
Legal Bases
We process personal data only on the basis of one of the following legal grounds:
- Art. 6(1)(a) GDPR – Consent of the data subject
- Art. 6(1)(b) GDPR – Performance of a contract
- Art. 6(1)(c) GDPR – Compliance with a legal obligation
- Art. 6(1)(f) GDPR – Legitimate interests of the controller
3. Collection of General Data (Server Log Files)
Each time our website is accessed, the following data are automatically recorded and stored in server log files:
- IP address of the requesting device
- Date and time of access
- Name and URL of the file retrieved
- Referrer URL (previously visited page)
- Browser, operating system and internet service provider
Purpose: Establishing the connection, technical provision of the website, system security and administration.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in secure operation).
Retention period: Log files are automatically deleted after a maximum of 7 days.
This website uses SSL/TLS encryption for secure data transmission (indicated by “https://” and the padlock symbol in the browser address bar).
4. Registration and Orders
4.1 Customer Account and Orders
When registering or placing an order, we collect the following personal data:
- First and last name (required field)
- Address (delivery and billing address) (required field)
- E-mail address (required field)
- Telephone number (optional)
Fields marked as “required” are necessary for the performance of the contract. Without these details we are unable to conclude or process the contract.
Purpose: Contract processing, customer identification, invoicing, communication, assertion of claims.
Legal basis: Art. 6(1)(b) GDPR (performance of a contract).
Retention period: Order data are retained for at least 10 years in accordance with statutory retention obligations (German Commercial Code, Tax Code). Customer account data without a related order are deleted upon account closure on request, unless statutory retention obligations apply.
4.2 Business Customer Registration (B2B)
For registration as a business customer, we additionally collect:
- Company name
- VAT identification number (optional, for tax-exempt intra-Community supplies)
Business customer accounts are activated following a manual review by us. Until activation, standard terms and conditions apply.
Legal basis: Art. 6(1)(b) GDPR.
5. Contact Form, E-Mail Contact and Withdrawal Form
5.1 Contact Form and E-Mail Contact
If you contact us via the contact form or by e-mail, we store your details (name, e-mail address, message) in order to process your enquiry.
Purpose: Processing your enquiry.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in responding to enquiries); for contractual enquiries additionally Art. 6(1)(b) GDPR.
Retention period: Data are deleted upon final processing of the enquiry, unless statutory retention obligations apply.
5.2 Online Withdrawal Form
To exercise your right of withdrawal, we provide an online form on our website accessible via the “Withdraw from contract” button. When using this form, the following data are collected:
- Name
- E-mail address
- Order number
- Reason for withdrawal (optional)
Purpose: Receipt and processing of your withdrawal declaration and sending of the legally required acknowledgement of receipt.
Legal basis: Art. 6(1)(b) GDPR (performance of a contract).
Retention period: Data are deleted upon completion of the withdrawal process, unless statutory retention obligations apply.
6. Cookies
Our website uses cookies. These are small text files stored on your device.
Technically Necessary Cookies
We use only technically necessary cookies that are required for the operation of the shop (e.g. shopping cart, login session). These cookies are deleted when the browser is closed (session cookies) or have a limited lifetime.
Legal basis: § 25(2) No. 2 TDDDG (German Telecommunications and Digital Services Data Protection Act) in conjunction with Art. 6(1)(f) GDPR. Consent is not required for technically necessary cookies that serve solely to transmit a message or are strictly necessary to provide a service expressly requested by the user.
You may disable cookies in your browser settings; however, this may limit the functionality of the shop.
7. Payment Processing
7.1 PayPal
When paying by PayPal, the data required for processing (name, address, e-mail address, order data) are transmitted to PayPal.
Provider: PayPal (Europe) S.à.r.l. & Cie. S.C.A., 22-24 Boulevard Royal, 2449 Luxembourg.
PayPal is certified under the EU-U.S. Data Privacy Framework, which ensures an adequate level of data protection for transfers to the United States.
Legal basis: Art. 6(1)(b) GDPR (performance of a contract).
PayPal Privacy Policy: https://www.paypal.com/de/webapps/mpp/ua/privacy-full
Data are only transferred to PayPal if this payment option is selected.
7.2 Bank Transfer (Prepayment)
When paying by bank transfer, you will receive our bank account details. No data are transmitted to third parties in this process.
8. Shipping – DPD
To deliver your order, we transmit your name and delivery address to our shipping service provider:
DPD Deutschland GmbH, Wailandtstraße 1, 63741 Aschaffenburg
The data are used solely for the purpose of delivering the parcel.
Legal basis: Art. 6(1)(b) GDPR (performance of a contract).
DPD Privacy Policy: https://www.dpd.com/de/de/meta/datenschutz/
9. Web Hosting
Our website is hosted on servers of the following company:
Hetzner Online GmbH, Industriestraße 25, 91710 Gunzenhausen
In the course of hosting operations, technical connection data (in particular IP addresses, access times) are processed on Hetzner's servers. Hetzner acts as a data processor within the meaning of Art. 28 GDPR; a corresponding data processing agreement has been concluded.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in the reliable and secure operation of the website).
Hetzner Privacy Policy: https://www.hetzner.com/de/legal/privacy-policy/
10. Disclosure of Data to Third Parties
Your personal data are only disclosed to third parties where this is necessary for the performance of the contract (shipping, payment), where a legal obligation exists, or where you have expressly consented.
11. Rights of the Data Subject
You have the following rights with respect to us:
- Right of access (Art. 15 GDPR): What data we hold about you
- Right to rectification (Art. 16 GDPR): Correction of inaccurate data
- Right to erasure (Art. 17 GDPR): Deletion of your data, to the extent no retention obligation applies
- Right to restriction of processing (Art. 18 GDPR)
- Right to data portability (Art. 20 GDPR)
- Right to object (Art. 21 GDPR): Objection to processing on the basis of legitimate interests
- Right to withdraw consent (Art. 7(3) GDPR): At any time, with effect for the future
To exercise your rights, please contact: info@dev-tools.de
Right to Lodge a Complaint
You have the right to lodge a complaint with a data protection supervisory authority. The competent authority for Hesse is:
The Hessian Commissioner for Data Protection and Freedom of Information
Postfach 3163, 65021 Wiesbaden
https://datenschutz.hessen.de
12. Automated Decision-Making
We do not use automated decision-making or profiling.
13. Changes to this Privacy Policy
We reserve the right to update this Privacy Policy in the event of changes to the legal situation or our data processing practices. The current version is always available on our website.