1) Information on the collection of personal data and contact details of the responsible party

1.1 We are pleased that you visit our website and thank you for your interest. Below we inform you about the handling of your personal data when using our website. Personal data here means all data by which you can be personally identified.

1.2 The party responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is NEIDHARDT GmbH – Berliner Ring 89 – D64625 Bensheim – Darmstadt District Court, HRB 101315 – Phone: +49 6251 944 99 60 – Fax: +49 6251 944 99 69 – Email: info@neidhardt.eu. The person responsible for the processing of personal data is the natural or legal person who alone or jointly with others decides on the purposes and means of processing personal data.

1.3 For security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries to the controller), this website uses SSL or TLS encryption. You can recognize an encrypted connection by the string "https://" and the lock symbol in your browser's address bar.

2) Data collection when visiting our website

When using our website for purely informational purposes, i.e., if you do not register or otherwise provide us with information, we only collect such data that your browser transmits to our server (so-called "server log files"). When you access our website, we collect the following data, which is technically necessary for us to display the website to you:

• Our visited website
• Date and time at the time of access
• Amount of data sent in bytes
• Source/referral from which you accessed the site
• Used browser
• Used operating system
• Used IP address (if applicable: in anonymized form)

The processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR based on our legitimate interest in improving the stability and functionality of our website. There is no transfer or other use of the data. However, we reserve the right to retrospectively check the server log files if there are concrete indications of unlawful use.

3) Cookies

To make visiting our website attractive and to enable the use of certain functions, we use so-called cookies on various pages. These are small text files that are stored on your device. Some of the cookies we use are deleted after the end of the browser session, i.e., after closing your browser (so-called session cookies). Other cookies remain on your device and allow your browser to be recognized again on the next visit (so-called persistent cookies). When cookies are set, they collect and process certain user information such as browser and location data as well as IP address values to varying extents. Persistent cookies are automatically deleted after a specified period, which can vary depending on the cookie. You can find the duration of each cookie storage in the overview of the cookie settings of your web browser.

Partly, cookies serve to simplify the ordering process by storing settings (e.g., remembering the contents of a virtual shopping cart for a later visit to the website). If personal data is processed by individual cookies we use, the processing is carried out in accordance with Art. 6 para. 1 lit. b GDPR either for the performance of the contract, according to Art. 6 para. 1 lit. a GDPR in the case of given consent, or according to Art. 6 para. 1 lit. f GDPR to protect our legitimate interests in the best possible functionality of the website as well as a customer-friendly and effective design of the site visit.

Please note that you can set your browser to inform you about the setting of cookies and decide individually whether to accept them or to exclude the acceptance of cookies for certain cases or in general. Each browser differs in how it manages cookie settings. This is described in the help menu of each browser, which explains how you can change your cookie settings. You can find this for the respective browsers at the following links:

Internet Explorer: https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies
Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
Chrome: https://support.google.com/chrome/answer/95647?hl=de&hlrm=en
Safari: https://support.apple.com/de-de/guide/safari/sfri11471/mac
Opera: https://help.opera.com/de/latest/web-preferences/#cookies

Please note that if cookies are not accepted, the functionality of our website may be limited.

4)Contact

As part of contacting us (e.g., via contact form or email), personal data is collected. Which data is collected when using a contact form can be seen from the respective contact form. This data is stored and used exclusively for the purpose of answering your request or for contacting you and the associated technical administration. The legal basis for processing this data is our legitimate interest in answering your request according to Art. 6 para. 1 lit. f GDPR. If your contact aims at concluding a contract, the additional legal basis for processing is Art. 6 para. 1 lit. b GDPR. Your data will be deleted after your request has been finally processed. This is the case if the circumstances indicate that the matter has been conclusively clarified and provided that no legal retention obligations oppose this.

5)Data processing when opening a customer account and for contract processing

According to Art. 6 para. 1 lit. b GDPR, personal data will continue to be collected and processed if you provide it to us for the execution of a contract or when opening a customer account. Which data is collected can be seen from the respective input forms. Deletion of your customer account is possible at any time and can be done by sending a message to the above-mentioned address of the controller. We store and use the data you provide for contract processing. After complete processing of the contract or deletion of your customer account, your data will be blocked with regard to tax and commercial retention periods and deleted after these periods have expired, unless you have explicitly consented to further use of your data or a legally permitted further use of data by us has been reserved.

6)Comment function

As part of the comment function on this website, in addition to your comment, information about the time the comment was created and the commentator name you chose are also stored and published on this website. Furthermore, your IP address is logged and stored. This storage of the IP address is done for security reasons and in case the person concerned violates the rights of third parties or posts illegal content through a comment. We need your email address to contact you if a third party objects to your published content as illegal. Legal bases for storing your data are Art. 6 para. 1 lit. b and f GDPR. We reserve the right to delete comments if they are objected to as illegal by third parties.

7)Use of customer data for direct advertising

7.1 Registration for our email newsletter

When you register for our email newsletter, we regularly send you information about our offers. The only mandatory information for sending the newsletter is your email address. Providing additional data is voluntary and is used to address you personally. For sending the newsletter, we use the so-called double opt-in procedure. This means that we will only send you an email newsletter once you have explicitly confirmed that you consent to receiving the newsletter. We will then send you a confirmation email asking you to confirm by clicking a corresponding link that you want to receive the newsletter in the future.

By activating the confirmation link, you give us your consent to use your personal data in accordance with Art. 6 para. 1 lit. a GDPR. When registering for the newsletter, we store the IP address assigned to you by your Internet Service Provider (ISP) as well as the date and time of registration to be able to trace any possible misuse of your email address at a later time. The data we collect when registering for the newsletter is used exclusively for advertising purposes via the newsletter. You can unsubscribe from the newsletter at any time via the link provided in the newsletter or by sending a corresponding message to the responsible party named at the beginning. After successful deregistration, your email address will be deleted immediately from our newsletter distribution list, unless you have explicitly consented to further use of your data or we reserve the right to use data beyond this, which is legally permitted and about which we inform you in this declaration.

7.2 Product availability notification by email

If we offer the option in our online shop to notify you by email about the availability of selected items that are temporarily unavailable, you can register for our email notification service for product availability. When you register for our email notification service for product availability, we will send you a one-time email message about the availability of the item you selected. The only mandatory information for sending this notification is your email address. Providing additional data is voluntary and may be used to address you personally. For sending this notification, we use the so-called double opt-in procedure. This means that we will only send you a corresponding notification once you have explicitly confirmed that you consent to receiving such a message. We will then send you a confirmation email asking you to confirm by clicking a corresponding link that you want to receive such a notification.

By activating the confirmation link, you give us your consent to use your personal data in accordance with Art. 6 para. 1 lit. a GDPR. When registering for our email notification service for product availability, we store your IP address registered by the Internet Service Provider (ISP) as well as the date and time of registration in order to be able to trace any possible misuse of your email address at a later time. The data collected by us when registering for our email notification service for product availability is used exclusively for the purpose of informing you about the availability of a specific item in our online shop. You can unsubscribe from the email notification service for product availability at any time by sending a corresponding message to the responsible party named at the beginning. After deregistration, your email address will be deleted immediately from our distribution list set up for this purpose, unless you have explicitly consented to further use of your data or we reserve the right to use data beyond this, which is legally permitted and about which we inform you in this declaration.

8) Data processing for order processing

8.1 To the extent necessary for contract processing for delivery and payment purposes, the personal data collected by us will be passed on in accordance with Art. 6 para. 1 lit. b GDPR to the commissioned transport company and the commissioned credit institution.

If, based on a corresponding contract, we owe you updates for goods with digital elements or for digital products, we process the contact data you provided during the order (name, address, email address) in order to personally inform you about upcoming updates within the legally prescribed period via a suitable communication channel (e.g., by post or email) in accordance with our legal information obligations under Art. 6 para. 1 lit. c GDPR. Your contact data is used strictly for the purpose of notifications about updates owed by us and is processed by us only to the extent necessary for the respective information.

For the processing of your order, we also cooperate with the following service provider(s) who support us wholly or partly in the execution of concluded contracts. Certain personal data are transmitted to these service providers in accordance with the following information.

8.2 Transfer of personal data to shipping service providers

DHL or other shipping service providers
If the delivery of the goods is carried out by the transport service provider of our choice, we will forward your email address in accordance with Art. 6 para. 1 lit. a GDPR before the delivery of the goods for the purpose of coordinating a delivery date or for delivery notification, provided you have given your explicit consent for this during the ordering process. Otherwise, for the purpose of delivery in accordance with Art. 6 para. 1 lit. b GDPR, we only forward the recipient's name and delivery address to the shipping service provider. The transfer is only made to the extent necessary for the delivery of the goods. In this case, prior coordination of the delivery date with the shipping service provider or delivery notification is not possible.
Consent can be revoked at any time with effect for the future towards the above-mentioned controller or the transport service provider.

8.3 Use of payment service providers (payment services)

– Paypal
When paying via PayPal, credit card via PayPal, direct debit via PayPal or – if offered – “purchase on account” or “installment payment” via PayPal, we pass on your payment data to PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter “PayPal”) as part of the payment processing. The transfer is made in accordance with Art. 6 para. 1 lit. b GDPR and only to the extent necessary for payment processing.
PayPal reserves the right to conduct a credit check for the payment methods credit card via PayPal, direct debit via PayPal or – if offered – “purchase on account” or “installment payment” via PayPal. For this purpose, your payment data may be passed on to credit agencies in accordance with Art. 6 para. 1 lit. f GDPR based on PayPal's legitimate interest in determining your creditworthiness. The result of the credit check regarding the statistical probability of default is used by PayPal for the purpose of deciding whether to provide the respective payment method. The credit report may contain probability values (so-called score values). As far as score values are included in the credit report result, they are based on a scientifically recognized mathematical-statistical method. The calculation of the score values includes, among other things but not exclusively, address data. For further data protection information, including the credit agencies used, please refer to PayPal's privacy policy: https://www.paypal.com/de/webapps/mpp/ua/privacy-full
You can object to this processing of your data at any time by sending a message to PayPal. However, PayPal may still be entitled to process your personal data if this is necessary for the contractual payment processing.

8.4 Conducting credit checks

– Creditreform
If we have to make an advance payment (e.g. delivery on account), we reserve the right to carry out a credit check based on mathematical-statistical methods in order to protect our legitimate interest in determining the creditworthiness of our customers. The personal data necessary for a credit check will be transmitted in accordance with Art. 6 para. 1 lit. f GDPR to the following service provider: Creditreform Darmstadt Skoruppa KG – Am Kavalleriesand 47- D – 64295 Darmstadt – http://www.darmstadt.creditreform.de/

The credit report may contain probability values (so-called score values). As far as score values are included in the result of the credit report, they are based on a scientifically recognized mathematical-statistical procedure. The calculation of the score values includes, among other things but not exclusively, address data.

We use the result of the credit check regarding the statistical probability of default for the purpose of deciding on the establishment, execution, or termination of a contractual relationship.
You can object to this processing of your data at any time by sending a message to the person responsible for data processing or to the aforementioned credit agency. However, we may still be entitled to process your personal data if this is necessary for the contractual payment processing.

– Schufa Holding
If we advance payment (e.g., delivery on account), we reserve the right to carry out a credit check based on mathematical-statistical procedures in order to protect our legitimate interest in determining the creditworthiness of our customers. The personal data necessary for a credit check will be transmitted by us in accordance with Art. 6 para. 1 lit. f DSGVO to the following service provider:
SCHUFA Holding AG
Kormoranweg 5
65201 Wiesbaden
The credit report may contain probability values (so-called score values). As far as score values are included in the result of the credit report, they are based on a scientifically recognized mathematical-statistical procedure. The calculation of the score values includes, among other things but not exclusively, address data. We use the result of the credit check regarding the statistical probability of default for the purpose of deciding on the establishment, execution, or termination of a contractual relationship.
You can object to this processing of your data at any time by sending a message to the person responsible for data processing or to the aforementioned credit agency. However, we may still be entitled to process your personal data if this is necessary for the contractual payment processing.

9) Use of Social Media: Videos

Use of Youtube videos

This website uses the Youtube embedding function to display and play videos from the provider "Youtube", which belongs to Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google").

The extended data protection mode is used here, which according to the provider's information only activates the storage of user information when the video(s) is played. When the playback of embedded Youtube videos is started, the provider "Youtube" uses cookies to collect information about user behavior. According to "Youtube", these serve, among other things, to record video statistics, improve user-friendliness, and prevent abusive behavior. If you are logged into Google, your data will be directly assigned to your account when you click on a video. If you do not want the assignment to your profile on YouTube, you must log out before activating the button. Google stores your data (even for users not logged in) as usage profiles and evaluates them.

Such an evaluation is carried out in particular in accordance with Art. 6 para. 1 lit. f GDPR based on Google's legitimate interests in displaying personalized advertising, market research and/or the needs-based design of its website. You have the right to object to the creation of these user profiles, whereby you must contact YouTube to exercise this right. In the course of using Youtube, personal data may also be transmitted to the servers of Google LLC in the USA.
Regardless of the playback of the embedded videos, a connection to the Google network is established with each visit to this website, which can trigger further data processing operations beyond our control.

Further information on data protection at "Youtube" can be found in the Youtube Terms of Use at https://www.youtube.com/static?template=terms as well as in Google's Privacy Policy at https://www.google.de/intl/de/policies/privacy

Where legally required, we have obtained your consent for the above-described processing of your data in accordance with Art. 6 para. 1 lit. a GDPR. You can revoke your given consent at any time with effect for the future. To exercise your revocation, deactivate this service in the "CookieConsent Tool" provided on the website.

10) Online marketing

10.1 Use of affiliate programs

Our online marketing is conducted by Solid Affiliate

Affiliate marketing is an internet-based sales method that allows commercial operators of websites, the so-called merchants or advertisers, to display advertising, usually compensated via click or sale commissions, on third-party websites, such as distribution partners also called affiliates or publishers. The merchant provides an advertising medium, such as a banner or other suitable internet advertising means, via the affiliate network, which is then integrated by an affiliate on their own websites. In this context, we have placed advertisements as links on our website. We use cookies for this. These are small text files stored on your device to trace the origin of orders generated through such links. This allows us, among other things, to recognize that you clicked the partner link on our website. This information is required for payment processing. If you want to block the evaluation of user behavior via cookies, you can configure your browser to be informed about cookie settings and decide individually on their acceptance or to exclude the acceptance of cookies for certain cases or in general.

To the extent legally required, we have obtained your consent for the above-described processing of your data in accordance with Art. 6 para. 1 lit. a GDPR. You can revoke your given consent at any time with effect for the future. To exercise your revocation, please follow the option described above to file an objection.

11) Rights of the data subject

11.1 The applicable data protection law grants you the following data subject rights (rights to information and intervention) vis-à-vis the controller regarding the processing of your personal data, whereby the respective legal basis for exercising these rights is referred to:

• Right of access pursuant to Art. 15 GDPR;
• Right to rectification pursuant to Art. 16 DSGVO;
• Right to erasure pursuant to Art. 17 GDPR;
• Right to restriction of processing pursuant to Art. 18 DSGVO;
• Right to information pursuant to Art. 19 DSGVO;
• Right to data portability pursuant to Art. 20 DSGVO;
• Right to withdraw given consents pursuant to Art. 7 para. 3 GDPR;
• Right to lodge a complaint pursuant to Art. 77 GDPR.

11.2 RIGHT TO OBJECT

IF WE PROCESS YOUR PERSONAL DATA BASED ON OUR LEGITIMATE INTERESTS WITHIN THE SCOPE OF A BALANCE OF INTERESTS, YOU HAVE THE RIGHT AT ANY TIME TO OBJECT TO THIS PROCESSING FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION WITH EFFECT FOR THE FUTURE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE DATA CONCERNED. HOWEVER, FURTHER PROCESSING IS RESERVED IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING THAT OVERRIDE YOUR INTERESTS, FUNDAMENTAL RIGHTS, AND FREEDOMS, OR IF THE PROCESSING SERVES THE ASSERTION, EXERCISE, OR DEFENSE OF LEGAL CLAIMS.

IF YOUR PERSONAL DATA IS PROCESSED BY US TO CONDUCT DIRECT MARKETING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR SUCH ADVERTISING PURPOSES. YOU CAN EXERCISE THE OBJECTION AS DESCRIBED ABOVE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE DATA CONCERNED FOR DIRECT MARKETING PURPOSES.

12) Duration of storage of personal data

The duration of the storage of personal data is determined by the respective legal basis, the processing purpose, and – if applicable – additionally by the respective statutory retention period (e.g., commercial and tax law retention periods).

When processing personal data based on an explicit consent according to Art. 6 para. 1 lit. a GDPR, these data are stored as long as the data subject withdraws their consent.

If there are statutory retention periods for data processed in the context of contractual or contract-like obligations based on Art. 6 para. 1 lit. b GDPR, these data will be routinely deleted after the expiration of the retention periods, provided they are no longer required for contract fulfillment or initiation and/or we no longer have a legitimate interest in further storage.

When processing personal data based on Art. 6 para. 1 lit. f
Under the GDPR, this data is stored as long as the data subject exercises their right to object under Art. 21 para. 1 GDPR, unless we can demonstrate compelling legitimate grounds for the processing that override the interests, rights, and freedoms of the data subject, or the processing serves the assertion, exercise, or defense of legal claims.

When processing personal data for the purpose of direct advertising based on Art. 6 para. 1 lit. f GDPR, these data are stored as long as the data subject exercises their right to object under Art. 21 para. 2 GDPR.

Unless otherwise specified by the other information in this declaration regarding specific processing situations, stored personal data will otherwise be deleted when they are no longer necessary for the purposes for which they were collected or otherwise processed.