SEBO Data Protection Policy
SEBO Data Protection Policy
We take the protection of personal data very seriously. Therefore, SEBO Stein & Co. GmbH processes personal data in conformity with the legal provisions applicable to the protection of personal data and data security. With this Data Protection Policy, we would like to inform you about the personal data concerning you that we process on our website, the purpose for doing so, and the legal basis under which such processing is allowed.
I. Name and address of the controller
The controller responsible for the processing of your personal data within the meaning of the EU General Data Protection Regulation (GDPR) when you use our website is
SEBO Stein & Co. GmbH
Wülfrather Str. 47-49
Tel.: +49 (0) 2053 / 89 81
Fax: +49 (0) 2053 / 89 85
Represented by the general managers Klaus Stein, Thomas Stein, and Achim Liffers
For further information about SEBO Stein & Co. GmbH, please see our imprint.
II. Data protection officer:
You can reach our data protection officer at:
III. Collection of personal data, nature and purpose of their use
1. Visiting our website
When you visit our website, the provider of our sites automatically collects and stores information, known as “server logfiles”, that is transferred by the browser that you are using. Specifically, the information that is stored relates to the browser type and version being used, the operating system that you are using, your internet service provider, your IP address, the date and time of day of access, the website from which you came to reach our website, and the websites that you access from our website.
Your personal data are stored only temporarily for the duration of your visit to our website in order to ensure that a connection can be established to our website and that you can use our website, as well as to analyse the stability and security of the system.
The legal basis for this data processing is Article 6(1)(f) GDPR, since pursuant to the purposes listed above, we have a legitimate interest in processing the data. We do not use the data in order to draw inferences about your person, and we do not store your data together with your other personal data.
The legal basis for the processing of the personal data contained in the cookies is Article 6(1)(f) GDPR, since we have a legitimate interest in processing, namely, being able to provide our website in an optimised, bug-free manner.
Please be aware that most browsers automatically accept cookies. You can adjust your browser settings in such a way that cookies are not stored on your computer or that you are always prompted before new cookies are stored. Please note that if you deactivate cookies, this may limit the use of our website’s features.
3. Google Analytics
We use Google Analytics to improve our website for you on an ongoing basis and to design it to your needs. Google Analytics is a web analysis service from Google Inc. (https://www.google.de/intl/de/about/) (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; hereinafter referred to as “Google”). In association with the use of Google Analytics, pseudonym usage profiles are created and cookies are deployed. With the aid of the cookies, information is generated on how you use our website and such information as the browser type and version, operating system used, referrer URL, i.e. the site visited previously, host name of the accessing computer, i.e. the IP address, and time of the server enquiry is transferred to a Google server in the USA and stored there.
We use the information based on Art. 6 Para. 1 lit. f GDPR to analyse the use of our website, make reports on the activities on our website and provide other services that are associated with using our website or the internet for the purposes of market research and the needs-led design of our website, which represents a justified interest as defined by Art. 6 Para. 1 lit. f GDPR. The information - if permitted by law or regulated by order processing - may be passed on to third parties.
IP anonymisation is activated on our website such that your IP address is abbreviated within the member states within the European Union or other states subject to the treaty on the European Economic Area before transfer to the USA. Only in exceptional cases is the IP address shortened after transfer to the USA. However your IP addresses are not combined with other data by Google. The data stored by Google that is associated with cookies, user IDs or advertising IDs (e.g. DoubleClick cookies, Android advert IDs) is anonymised by Google and deleted after 14 months. You can view additional information using the link https://support.google.com/analytics/answer/7667196?hl=de.
Our website accesses the “demographic features” function of Google Analytics. With the aid of this function, it is possible to assemble information on the age, gender and interests of visitors to our website. It is not possible to assign the data to individual people; the data is taken from interest-related advertising by Google and visitor data from third party suppliers. You can completely deactivate this function of “demographic features” in the advert settings of your Google account or alternatively completely deactivate data capture by Google Analytics as described below under “Objection”.
You have the option to prevent cookies being installed using the browser settings. However, you may then not be able to use all the functions of our website to their full extent.
Furthermore, you can prevent the collection of data generated by the cookie and that draws on your use of the website (incl. your IP address) and the processing of this data by Google by downloading and installing a browser plug-in (http://tools.google.com/dlpage/gaoptout?hl=de).
In addition, in place of the browser add-on you can exclude the capture by Google Analytics with the aid of the following link, in particular for browsers on mobile devices: https://tools.google.com/dlpage/gaoptout. By clicking the link an opt-out cookie is set that in future will prevent the capture of your data when visiting our website. We point out that the opt-out cookie only applies to this browser and our website; it is stored on your device. If you delete the cookies in your browser you have to set this opt-out cookie again.
We point out that we have concluded an agreement with Google for order processing in order to implement the GDPR requirements.
You can find additional information about privacy relating to Google Analytics for example in the Google Analytics help (https://support.google.com/analytics/answer/6004245?hl=de).
4. Contact form and contact by email
On our website, you have the ability to send us enquiries by using a contact form. If you do so, the data entered in the input mask are transmitted to us and stored for the purpose of handling your enquiry. You need to provide us with your email address so that we can response to your enquiry. You can provide additional information voluntarily. We do not transfer your data to third parties.
Alternatively, you can contact us using the email address listed in the imprint. In that case, your personal data transmitted with the email are stored.
The legal basis for the processing of your data is your voluntarily provided consent pursuant to Article 6(1)(a) GDPR. You have the right to withdraw that consent at any time by sending us an email. Revocation has no bearing on the lawfulness of processing that occurred up until revocation. Your data remain stored with us until the response to your enquiry has been completed or until you request that we erase them or you withdraw your consent. Statutory provisions, such as retention periods, are not affected by this.
5. Contact using the WhatsApp for our service
In addition, we offer you the ability on our website to contact us using WhatsApp. WhatsApp is owned by Facebook and is operated by WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.
If you use WhatsApp to contact us, the personal data that you transmit to us through WhatsApp are stored by us in order to handle your enquiry. You provide your information voluntarily and transmit your personal data to us voluntarily. The legal basis for our processing of your data is your voluntarily provided consent pursuant to Article 6(1)(a) GDPR. You have the right to withdraw that consent at any time by sending us an email. Revocation has no bearing on the lawfulness of processing that occurred up until revocation. Your data remain stored with us until the response to your enquiry has been completed or until you request that we erase them or you withdraw your consent. Statutory provisions, such as retention periods, are not affected by this.
Furthermore, we also store the chat sessions with you, as well as the images and, potentially, videos sent to us, in order to be able to document and verify the services that we provided through WhatsApp. This takes place on the basis of Article 6(1)(f) GDPR, whereby our legitimate interest in documentation is verification of the provided services.
Please be aware that in order to be able to use the features of WhatsApp, the provided information is normally transmitted to a WhatsApp server and stored on it. We have no control over the transmission of your data or over whether the data are transmitted to a server in Europe or the U.S., meaning that we cannot rule out that data are transmitted to the U.S.
In addition, please be aware that where data are collected by WhatsApp, we have no knowledge about what data are transmitted or the purposes for doing so. For information about data processing by WhatsApp, please visit https://www.whatsapp.com/legal/#privacy-policy.
6. Registering on our website
We offer you the ability to register on our website by providing personal data, which enables you to use the relevant service or offer for which you are registering, In this regard, your data are entered in an input mask and transmitted to us and stored.
The legal basis for the processing of your data is your voluntarily provided consent pursuant to Article 6(1)(a) GDPR or, if registration is undertaken for the purpose of concluding a contract, Article 6(1)(b) GDPR. You have the right to withdraw your consent at any time by sending us an email. Revocation has no bearing on the lawfulness of processing that occurred up until revocation.
Your personal data that you enter at the time of registration for the purpose of making use of the relevant offer are stored by us for the duration of your registration or until the end of your use of the offer and are then erased or, as the case may be, erased following request for erasure or withdrawal of consent. Statutory provisions, such as retention periods, are not affected by this.
IV. Embedding of services and third-party content
1. Google Maps
Our website uses an interface to access Google Maps, which is offered by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, U.S.
In order to be able to use the features of Google Maps, your IP address has to be stored. Please be aware that this information is normally transferred to a Google server in the U.S. and stored on it. We have no control over such transfer of your data.
The legal basis for the use of Google Maps is our legitimate interest pursuant to Article 6(1)(f) GDPR in displaying our website in a customer- and user-friendly manner, as well as our interest in making it easier for you to find our dealers and other locations referenced on our website.
2. Link to YouTube
Our website contains a link to our YouTube channel “SEBO Deutschland”. YouTube is owned by Google and is operated by YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, U.S.
If you click on the link to YouTube on our website and are logged in to YouTube, YouTube can allocate the visit to our site to your YouTube account, and in addition to your IP address, other data of your browser are transmitted to YouTube. If you do not want the data to be allocated to your YouTube account, you must log out of YouTube prior to clicking on the link.
The legal basis for embedding the YouTube link is our legitimate interest pursuant to Article 6(1)(f) GDPR in displaying our website in an appealing manner.
Please be aware that where data are collected by YouTube, we have no knowledge about what data are transmitted or the purposes for doing so. For information about data processing by YouTube, please visit https://www.google.de/intl/de/policies/privacy.
3. Links to Facebook and Instagram
Our website contains links to Facebook (Facebook Inc., 1 Hacker Way, Menlo Park, California 94025, U.S.) and Instagram (Instagram LLC, 1601 Willow Road, Menlo Park, CA 94025, U.S.). By clicking on the Facebook or Instagram icon, you will be forwarded from our website to Facebook or Instagram.
The legal basis for embedding the Facebook and Instagram links is our legitimate interest pursuant to Article 6(1)(f) GDPR in displaying our website in an appealing manner.
If you click on the link to Facebook on our website and are logged in to Facebook, Facebook can allocate the visit to our site to your Facebook account, and in addition to your IP address, other data of your browser are transmitted to Facebook. If you do not want the data to be allocated to your Facebook account, you must log out of Facebook prior to clicking on the link.
Please be aware that where data are collected by Facebook, we have no knowledge about what data are transmitted or the purposes for doing so. For information about data processing by Facebook, please visit . https://www.facebook.com/about/privacy/
If you click on the link to Instagram on our website and are logged in to Instagram, Instagram can allocate the visit to our site to your Instagram account, and in addition to your IP address, other data of your browser are transmitted to Instagram. If you do not want the data to be allocated to your Instagram account, you must log out of Instagram prior to clicking on the link.
Please be aware that where data are collected by Instagram, we have no knowledge about what data are transmitted or the purposes for doing so. For information about data processing by Instagram, please visit . https://help.instagram.com/155833707900388
V. Your rights with respect to your data
If we process your personal data, then under the relevant legal provisions of the GDPR, you as data subject have the following rights:
1. Right of access
To begin with, you can obtain from us confirmation as to whether or not personal data concerning you are being processed. If we are processing your personal data, then pursuant to Article 15 GDPR, you can obtain information about the processing of your personal data. This includes, in particular, information about the purposes for which your personal data are processed, the categories of personal data concerned, the recipients or categories of recipient to whom the personal data concerning you have been or will be disclosed, the envisaged period for which the personal data concerning you will be stored, or, if specific information about this is not possible, the criteria used to determine that period, the existence of the right to request rectification or erasure of personal data concerning you or the restriction of processing of personal data concerning your or to object to such processing, the right to lodge a complaint with a supervisory authority, the source of your data, where they are not collected by us, and the existence of automated decision-making, including profiling, and, if applicable, meaningful information about the details involved.
2. Right to rectification
Pursuant to Article 16 GDPR, you have the right to rectification and/or completion of your personal data stored by us. If you assert the right to rectification, we will carry out the rectification without undue delay.
3. Right to erasure
Pursuant to Article 17 GDPR, you can obtain the erasure of your personal data stored by us. Among other things, you can obtain erasure if the personal data concerning you are no longer necessary in relation to the purposes for which they were collected or otherwise processed, if you withdraw your consent and processing took place on the basis of that consent and there is no other legal ground for the processing, if you object to the processing pursuant to Article 21 GDPR, or if your data have been unlawfully processed. You cannot obtain the erasure of your data if processing of your data is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise or defence of legal claims.
4. Right to restriction of processing
Pursuant to Article 18 GDPR, you can obtain restriction of the processing of the personal data concerning you if you contest the accuracy of the personal data concerning you, if the processing of your personal data is unlawful and you oppose the erasure of the personal data and request the restriction of their use instead, if we no longer need your personal data for the purposes of the processing, but you require them for the establishment, exercise or defence of legal claims, or if you have objected to processing pursuant to Article 21(1) GDPR.
5. Right to data portability
Pursuant to Article 20 GDPR, you have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format. In exercising this right, you have, inter alia, the right to have the personal data concerning you transmitted directly from us to another controller, where technically feasible.
6. Right to withdraw the declaration of consent required by data protection law
Pursuant to Article 7(3) GDPR, you have the right to withdraw at any time the declaration of consent required by data protection law. Following revocation, we may henceforth no longer continue the data processing that is based on the consent. The withdrawal of consent does not affect the lawfulness of the processing undertaken on the basis of the consent until withdrawal.
7. Right to lodge a complaint with a supervisory authority
Pursuant to Article 77 GDPR, without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of personal data concerning you infringes the GDPR.
VI. Right to object
If your personal data are processed on the basis of legitimate interests pursuant to Article 6(1)(f) GDPR, then pursuant to Article 21 GDPR, you have the right to object to the processing of the personal data concerning you on grounds relating to your particular situation or where the objection relates to direct marketing. If the objection concerns direct marketing, you have a general right to object, which we must implement irrespective of whether a particular situation was indicated.
If you wish to assert your right to withdraw or to object, you merely need to send an email to email@example.com.
VII. Data security
For reasons of data security and in order to protection data transfer, our website uses SSL and TLS encryption. You can detect that the connection is encrypted, for instance, when you see the lock symbol or the prefix “https://” in your browser’s address bar. Encryption prevents data that are being transmitted to us from being able to be read by third parties.
VIII. Amendments to our Data Protection Policy
We reserve the ability to modify this Data Protection Policy from time to time so that it is always in conformity with current legal requirements or in order to implement changes to our services in the Data Protection Policy, e.g. in the event that new services are introduced. When you visit our website the next time, the new Data Protection Policy then applies.
Data Protection Policy version: February 2019