Children’s desks

Privacy Policy of PAIDI Möbel GmbH

Welcome to our website and thank you for your interest in our company. We take the protection of your personal data very seriously. We process your data in accordance with applicable personal data protection legislation, in particular the GDPR and our country-specific implementation laws, which provide comprehensive information about the processing of your personal data by PAIDI Möbel GmbH and your rights.

Personal data is any information that makes it possible to identify a natural person. This includes, in particular, your name, date of birth, address, telephone number, email address and IP address.

Anonymous data means, that no personal reference to the individual/user can be made.

Responsible body and data protection officer

PAIDI Möbel GmbH
Hauptstraße 87
97840 Hafenlohr

www.paidi.de
info@paidi.de

09391 / 501 0

Contact of the data protection officer

datenschutz@paidi.de

Your rights as a data subject

We would first like to notify you of your rights as a data subject. These rights are set out in Articles 15 – 22 GDPR, and include:

–The right of access (Art. 15 GDPR),

–The right to rectification (Art. 16 GDPR),

–The right to data portability (Art. 20 GDPR),

–The right to object to data processing (Art. 21 GDPR),

–The right to erasure / right to be forgotten (Art. 17 GDPR),

–The right to restriction of data processing (Art. 18 GDPR).

 

To exercise these rights, please contact:

PAIDI Möbel GmbH
Hauptstraße 87
97840 Hafenlohr
09391 / 5010
datenschutz@paidi.de

The same applies if you have any questions regarding data processing in our company. You also have a right of appeal to a data protection supervisory authority.

Right to object

Please note the following with respect to your right to object:

When we process your personal data for the purpose of direct marketing, you have the right to object to this data processing at any time without providing the reasons for such objection. This also applies to profiling insofar as it is associated with direct marketing.

If you object to the processing for direct marketing, we will no longer process your personal data for such purposes. The objection is free of charge and can be made informally, where appropriate to:

datenschutz@paidi.de

or

Paidi Möbel GmbH
Hauptstraße 87
97840 Hafenlohr

or

09391 / 5010

Should we process your data to protect legitimate interests, you may object to such processing at any time for reasons that arise from your specific situation; this also applies to profiling based on these provisions.

We will then cease to process your personal information unless we can demonstrate compelling legitimate grounds for processing such information that outweigh your interests, rights and freedoms, or the processing is intended to assert, exercise or defend legal claims.

Purposes and legal bases of data processing

The processing of your personal data complies with the provisions of the GDPR and all other applicable data protection regulations. Legal bases for data processing arise in particular from Art. 6 GDPR.

We use your data to initiate business, to fulfil contractual and legal obligations, to conduct the contractual relationship, to offer products and services and to consolidate customer relationships, which may include marketing and direct marketing.

Your consent also constitutes a legal basis for data processing. In this respect, we will inform you of the purposes of data processing and the right to withdraw your consent. If the consent also relates to the processing of special categories of personal data, we will explicitly notify you in the consent process.

Processing of special categories of personal data within the meaning of Art. 9 (1) GDPR may only take place where necessary on the grounds of legal regulations and there is no reason to assume that your legitimate interests should prevail to the exclusion of processing such data.

Disclosure to third parties

We will only transmit your data to third parties within the scope of given statutory provisions or based on consent. In all other cases, information will not be transferred to third parties unless we are obliged to do so owing to mandatory legal regulations (disclosure to external bodies, including the supervisory authorities or law enforcement authorities).

Data recipients / categories of recipients

In our organization, we ensure that only individuals who are required to process the relevant data to fulfil their contractual and legal obligations are authorized to handle personal data.

In many cases, service providers assist our specialist departments to fulfil their tasks. The necessary data protection contract has been concluded with all service providers. In order to dispatch our goods or ordered materials, we might transfer your address to logistics service providers. (additionally: IT-service-providers)

Transfers of personal data to third countries

A transfer of data to third countries (outside the European Union or the European Economic Area) shall only take place if required by law, if necessary for the conclusion or performance of a contract concluded or if you have provided your consent for such a transfer. We do not transfer your personal data to any service provider outside the EEA.

Period of data storage

We store your data for as long as such is required for the relevant processing purposes. Please note that numerous retention statutory periods require that data must be stored for a specific period of time. This relates in particular to retention obligations for commercial or fiscal purposes (e.g. commercial code, tax code, etc.). The data will be routinely deleted after use unless a further period of retention is required.

We may also retain data if you have given us your permission to do so, or in the event of any legal disputes and we use the evidence within the statutory limitation period, which may be up to 30 years; the standard limitation period is 3 years.

Secure transfer of data

We implement the appropriate technical and organizational security measures to ensure the optimal protection of the data stored by us against accidental or intentional manipulation, loss, destruction or access by unauthorized persons. The security levels are continuously reviewed in collaboration with security experts and adapted to new security standards.

The data exchange to and from our website is encrypted. We provide https as a transfer protocol for our website, and always use the current encryption protocols. Email transmission via our contact form is subject to SMTP authentication. It is also possible to use alternative communication channels (e.g. surface mail).

Obligation to provide data

A range of personal data is required to establish, implement and terminate the obligation and the fulfilment of the relevant contractual and legal obligations. The same applies to the use of our website and the various functions we provide.

We have summarized the relevant details in the above point. In some cases, legal regulations require data to be collected or made available. Please note that it will not be possible to process your request or execute the underlying contractual obligation without this information.

Data categories, sources and origin of data

The data we process is defined by the relevant context: it depends on whether, for example, you place an order online, enter a request on our contact form or if you want to send us an application or submit a complaint.

Please note that we may also provide information at specific points for specific processing situations separately where appropriate, e.g. when uploading application documents or when making a contact request.

When accessing our website, the access-logs of the webserver are logging information on which accesses to which sites have been taken place at which time.

They contain the following data:

  • IP-address
  • Directory protection users
  • Date, time
  • Websites accessed
  • protocols
  • Status code
  • Traffic
  • Referrer
  • User Agent
  • Called hostname

IP-addresses logged are stored anonymously. In order to do so, the last three digits are being erased, meaning 127.0.0.1 will become 127.0.0.*. IPv6-addresses are also being stored anonymously. Anonymized data is being stored for a period of 60 days. Information on directory protection users are being anonymized after one day.

For reasons of technical security, error-logs, containing defective websites accesses, are being deleted after seven days. They contain the error reports, as well as the accessing IP-address and, according to the error, the accessed website.

We collect and process the following data as part of a contact request:

  • Name
  • Email
  • Test of the request

We collect and process the following data as part of a contact request regarding spare parts:

  • Name, last name
  • address (in order for shipping of the spare parts)
  • Telephone number
  • Email
  • If applicable: Pictures of the furniture

We collect and process the following data as part of the ordering of spare parts:

  • Name, last name
  • address
  • Email
  • Purchase date
  • Model name / item number
  • Text regarding the issue
  • Possibility to upload data

As a part of the vendor login, we collect and process the following data:

PAIDI-reseller are provided with the login-information, no personal data will be stored.

Automated decisions in individual cases

We do not use purely automated processing to make decisions.

Contact form / Contact via email / Spare part-request (Article 6 para. 1 lit a, b GDPR)

A contact form is available on our website which can be used to contact us electronically. If you write to us using the contact form, we will process the data you submitted in the contact form to respond to your queries and requests.

In so doing, we respect the principle of data minimization and data avoidance, such that you only have to provide the information we require to contact you.

Depending on the contact form you use, that information may differ. Your IP address will also be processed for technical reasons and for legal protection. All other data is voluntary, and additional fields are optional (e.g. to provide a more detailed response to your questions).

In order to protect the security and confidentiality of your data, we use appropriate security measures (SMTP authentication).

If you contact us by email, we will process the personal information provided in the email solely for the purpose of processing your request. If you do not contact us using the forms provided, no additional data will be collected.

Marketing purposes (Article 6 para. 1 lit f GDPR)

PAIDI Möbel GmbH is keen to nurture the customer relationship with you and to send you information and offers about our products / services. We therefore process your data to send you the relevant information and offers via email.

You may object to the use of your personal data for the purpose of direct marketing at any time; this also applies to profiling insofar as it is associated with direct marketing. If you object, we will cease processing your personal information for this purpose.

You can withdraw your consent at any time free of charge and informally without stating the reasons for such and should be addressed to an 09391 / 5010 sent via email to datenschutz@paidi.de or via surface mail to Paidi Möbel GmbH, Data Protection Officer, Hauptstraße 87, 97840 Hafenlohr – Germany.

Vendor login (Art. 6 para. 1 lit. b GDPR)

On our website, we offer vendors the possibility to log into the vendor area. PAIDI-reseller are provided with calculation support-tools, image and moving image material as well as documents for sales promotion. PAIDI-reseller, who have signed the PAIDI-reseller-agreement are provided with the login data for the PAIDI vendor login area.

 

Ordering of spare parts (Art. 6 para. 1 lit. b GDPR)

We process the data provided by you within the scope of the order form solely to dispatch the spare parts, unless you agree to further use.

The principle of data minimization and data avoidance is observed here, as we only request data that is required to dispatch the spare parts (meaning your name, address, email address for the dispatch of the automatic e-mail that confirms the receipt of your order and for check back) or to collect data that is mandatory under the law. This form is only intended to send you the necessary spare parts. If you have any other inquiries, we are happy to help you via other communication channels. Please address inquiries in writing to us using the general contact form at (www.paidi.de/en/service/contact-form/), please direct telephone inquiries to the telephone number 09391 501-0.

Your IP address will also be processed for technical reasons and legal protection. If this data is not provided, we will have to decline the conclusion of the contract, as we cannot then perform the contract or will be obliged to terminate an existing contract, where appropriate. You can of course provide additional data on a voluntary basis.

 

Online offers for children

Persons under the age of 16 may not submit personal data to us or give a declaration of consent without the authorization of their legal guardian. We encourage parents and guardians to actively participate in the online activities and interests of their children.

Links to other providers

Our website also contains clearly identifiable links to the Internet sites of other companies. Although we provide links to websites of other providers, we have no influence on their content, and no guarantee or liability can therefore be assumed for such. The content of these pages is always the responsibility of the respective provider or operator of the pages.

The linked pages were checked at the time of linking for potential legal violations and identifiable infringements. No illegal content was identified at the time of linking. However, a permanent content control of the linked pages is not reasonable without concrete evidence of an infringement and, upon notification of a violation of rights, such links will be promptly removed.

 

Cookies (Art. 6 para. 1 S. 1 lit. f GDPR, Art. 6 para. 1 S. 1 lit. c GDPR, Art. 6 para. 1 S. 1 lit a GDPR)

Our website uses so called cookies at various locations, which serve to make our offer more user-friendly, effective and secure. Cookies are small text files that are placed on your computer and stored by your browser (locally on your hard disk). Due to our legitimate interest (Art. 6 para. 1 S. 1 lit. f GDPR) we use technically necessary cookies, which are required for the operation of the website and to ensure its functionality. Depending on the purpose, these are stored permanently – even after the session has ended – (so-called persistent cookies, e.g. opt-out) or are deleted when the browser is closed (so-called session cookies – these are only valid for one browser session).

Provided your consent given, we also use further cookies. These cookies help us to see how users use our website, enabling us to design the website content according to the visitor’s needs. In addition, cookies enable us to measure the effectiveness of a particular advert and to place it according, for example, to the user’s thematic interests. The legal basis for this is your consent (Art. 6 Para. 1 S. 1 lit. a GDPR).

Once given, you consent can be revoked at any time without providing a reason at: https://www.paidi.de/en/cookie-policy/

We use the CookieFirst platform to gather and manage consent. The operator of this service is Digital Data Soluti-ons B.V., Plantage Middenln 42a, 1018 DH Amsterdam, website: https://cookiefirst.com/ (hereinafter referred to „CookieFirst“).

When accessing our website, following personal data are being transferred to CookieFirst:

  • Your consent(s) respectively the revocation of your consent(s)
  • Your IP-address
  • Browser information
  • Information on the device used
  • Time of your visit of the website

Furthermore, CookieFirst saves a cookie in your browser in order to be able to assign you the granted consent or its revocation. The data collected in this way is stored until you ask us to delete it, delete the CookieFirst cookie yourself or the purpose for data storage no longer applies. Mandatory statutory retention periods remain unaffected. We use CookieFirst in order to obtain the legally required consent for using cookies. Legal basis is Art. 6 para. 1 S. 1 lit c GDPR.

Most web browsers automatically accept cookies. Of course, you can also deactivate, restrict or delete cookies on your device manually using the settings of your browser or using software.

Please note: If you deactivate the placing of cookies on your device, you may not be able to access all our website functions in certain circumstances.

 

Google Tag Manager (Art. 6 para. 1 lit. f GDPR)

This website uses Google Tag Manager provided by Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland. This service enables website tags to be managed via an interface. The tag manager tool itself (which implements tags) is a cookie-free domain which means generally speaking, no cookies are used and no personal data are collected. Google Tag Manager triggers other tags that, in turn, may collect data. Google Tag Manager does not access this data. If you have disabled domains and cookies, this shall also apply to all tracking tags that are implemented with Google Tag Manager.

For more information please visit https://www.google.com/tagmanager/use-policy.html.

Creation of user profiles or use of cookies which are not purely functional (Art. 6 para. 1 lit. a GDPR)

Google Analytics 4 Tracking Property / Google Universal Analytics Tracking Property (Art. 6 para. 1 lit. a GDPR)

We use the Google Analytics tool provided by Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland on our website. Using this tool enables us to track and systematically assess your interaction with our website as a user.

  • To do so, the following information is stored:
  • IP address
  • Usage data
  • Click path
  • App updates
  • Browser information
  • Device information
  • Operating system
  • JavaScript support
  • Visited sites
  • Referrer URL
  • Downloads
  • Flash version
  • Location information
  • Widget interactions
  • Date and time of visit

 

Google Analytics 4 Tracking Property

The Google Analytics 4 Tacking Unit may, inter alia, record your mouse- and scrolling-movements, as well as your klicks. Furthermore, Googly Analytics uses several modeling approaches to supplement the recorded data sets and uses machine learning technologies for data analysis.

Google Universal Analytics Tracking Property

The Google Universal Analytics Tracking Property enables the website-operator to analyze the behavior of the website-visitors. In order to do so, the website-operator is provided with several user data; see the information given in the list above. This data may be summarized by Google in a profile that is assigned to the respective user or their device. Google Analytics uses technologies enabling the user to be recognized for the purpose of analyzing user behavior (e.g. cookies or device fingerprinting). The information collected by Google about the use of this website is usually transmitted to a Google server in the USA and stored there.

Legal basis for the processing of your personal data is your consent (Art. 6 para. 1 lit. a GDPR), which can be revoked at any time. https://www.paidi.de/en/cookie-policy/
The purpose of processing your personal data by the Google Analytics service is to analyze the interaction of our website visitors with our website. By evaluating the data obtained here, we can optimize our offer and increase user-friendliness.

We delete or anonymize the data collected by Google Analytics as soon as it is no longer required for our purposes. This is the case after 14 months for Google Universal Analytics Tracking or after 2 months for the Google Analytics 4 Tracking Property.

This service can forward the data to another country. Please note that this service can transfer data outside of the European Union / European Economic Area to a third country, which does not offer a suitable level of data protection. If transferred to the USA, there is a risk that your data will be processed by US authorities for purposes of control and surveillance. In this case, you may not be entitled to legal recourse. However, we take all possible and necessary measures in accordance with Art. 44 et seqq. GDPR to establish a level of data protection in the third country.

 

Google Maps (Art. 6 Para. 1 lit. a GDPR)

On our website, we use Google Maps (API) provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter “Google”). To guarantee data protection, Google Maps is disabled when you first enter our website. A direct connection between the Google servers is only established when you enable Google Maps (consent according to Art. 6 para. 1 lit. a GDPR). Your consent can be revoked at any time. (https://www.paidi.de/en/cookie-policy/) In this way, your data are not immediately transferred to Google as soon as you enter the site. Google Maps will store your IP address once it has been enabled. This IP address will then generally be transferred to and stored in a Google server located in the USA.

As data are being transferred to a third country, there is a risk that your data will be processed by US authorities for purposes of control and surveillance. In this case, you may not be entitled to legal recourse. However, we take all possible and necessary measures in accordance with Art. 44 et seqq. EU GDPR to establish a level of data protection in the third country.

Further information on the handling of user data can be found in Google’s Privacy Policy: https://www.google.de/intl/de/policies/privacy/.

 

YouTube (Art. 6 para. 1 lit. a GDPR)

We use the platform YouTube.com in order to upload and publish our own video content. YouTube is the service of a third party not affiliated with us, namely the YouTube LLC of Google Ireland Limited Gordon House, Barrow Street Dublin 4, Ireland.

Our website contains links to YouTube services in order to display our products and range to you.

With this integration, content of the YouTube website is displayed in parts of a browser window. Data will only be transferred if you have given us your consent. Otherwise we unfortunately cannot play the video for you (Art. 6 para. 1 lit. a GDPR).

Once given, your consent can of course be revoked at any time without providing reasons here (https://www.paidi.de/en/cookie-policy/).

We use the framing codes generated by YouTube in “enhanced privacy-mode”. This is provided by YouTube and it is ensured, that YouTube, at first, does not store any cookies on your device. However, when accessing the relevant pages, your IP address and other data and, in particular, which of our websites you have visited, are transmitted. However, this information cannot be assigned to you as a person, unless you have logged in to YouTube or another Google service (e.g. Google+) or are permanently logged in before accessing the page.

Address and link to the privacy policy of the third party provider:

Google/YouTube: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland – Privacy policy: https://policies.google.com/privacy

This service can forward the data to another country. Please note that this service can transfer data outside of the European Union / European Economic Area to a third country, which does not offer a suitable level of data protection. If transferred to the USA, there is a risk that your data will be processed by US authorities for purposes of control and surveillance. In this case, you may not be entitled to legal recourse. However, we take all possible and necessary measures in accordance with Art. 44 et seqq. GDPR to establish a level of data protection in the third country.

 

Links social media

You’ll find links to social media services from Facebook, YouTube, Pinterest and Instagram on our website. Links to the webpages of these social media providers are recognizable by the respective company logo. When you click on the links, you will be forwarded to the respective page of PAIDI Möbel GmbH on the various social media platforms. Clicking on these links creates a connection to the social media providers’ servers, which then receive the information that you have visited our website. Additional data are also transferred to the social media service, for example:

  • Address of the website where the activated link is located
  • Date and time of your visit to the website or link activation
  • Information about the browser and operating system used
  • IP address

If you are already logged in to the social media site at the time the link is activated, the provider may be able to determine your user name and possibly even your real name from the data transferred and assign this information to your personal user account. To prevent this from happening, please make sure you are logged out of your account.

The social media providers’ servers are located in the USA and other countries outside of the European Union. For this reason, data can also be processed by the social media provider in countries outside of the European Union. Please be aware that business in these countries are not subject to the same strict levels of data protection as those who are member states of the European Union.

Please also be aware that we have no influence on the scope, type and purpose of data processing carried out by these social media providers. Further information about the use of your data by the social media platforms embedded on our website can be found in the Privacy Policies of the respective social media provider.

 

 

Privacy policy / Information on data protection in social media

PAIDI Möbel GmbH maintains appearances in social media, primarily on Facebook, Instagram, YouTube and Pinterest. To the extent we have control over the processing of your data, we ensure that we comply with the applicable data protection regulations.

Below you will find the relevant information on data protection regarding our appearances.

Name and address of the responsible body for the operation

Responsible for the social media appearances according to GDPR, as well as other applicable data protection laws, is, besides PAIDI Möbel GmbH

  • Facebook (Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland)
  • Instagram (Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland)
  • YouTube (Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland)
  • Pinterest (Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland)

Please be aware that using these platforms and their functions is at your own risk. This is especially the case when using interactive functions such as commenting, sharing and leaving reviews.

This service can forward the data to another country. Please note that this service can transfer data outside of the European Union / European Economic Area to a third country, which does not offer a suitable level of data protection. If transferred to the USA, there is a risk that your data will be processed by US authorities for purposes of control and surveillance. In this case, you may not be entitled to legal recourse. However, we take all possible and necessary measures in accordance with Art. 44 et seqq. GDPR to establish a level of data protection in the third country.

Purpose and legal basis

We maintain the fan pages in order to communicate with the visitors of these pages and to inform them about our offers.

Furthermore, we collect data for statistical purposes in order to be able to further develop and optimize the content and to make our offer more attractive. The data required therefore (e.g. total number of page views, page activities and data provided by visitors, interactions) are being processed by the social networks and provided to us. We have no influence on the generation and display.

In addition, your personal data will be processed by the social media providers for market research and advertising purposes, enabling, for example, the creation of user profiles based on your usage behavior and the resulting interests. This allows, inter alia, advertisements to be placed inside and outside the platforms that match your interests. Generally, in order to do so, cookies are being stored on your computer. Irrespective of this, data which is not collected directly on your end devices can also be saved in your usage profiles. The storage and analysis also takes place across devices, this applies in particular, but not exclusively, if you are registered as a member and logged in to the respective platforms.

Processing of your personal data by PAIDI Möbel GmbH is based on our legitimate interest in an efficient information and communication according to Art. 6 para. 1 lit. f GDPR.

If you are being asked for your consent for data processing, e.g. by clicking on “confirm” or some similar mechanism, then legal basis for processing is Art. 6 para. 1 S. 1 lit. a and Art. 7 EU GDPR.

Your rights / Opting out

If you are a member of a social network and do not want your personal data to be collected through our website and linked to your membership data on the respective network, you must:

sign-out of the network before visiting our website,

delete cookies stored on your device and

re-start your browser.

After logging in again, you will once again be recognized by the network as a specific user.

For more detailed information on how data is processed and how you can opt out, please visit the pages of the respective providers listed below.

You have the following data subject rights regarding the processing of your personal data:

Right to access; right to rectification; right to erasure; right to restriction of processing; right to object; right to data portability; right to lodge a complaint with the data protection authorities regarding unlawful processing of your personal data.

Due to the fact that PAIDI Möbel GmbH does not have unlimited access to your personal data, we recommend you to assert any data subject rights directly to the social media providers, for they have access to personal data of their users and can provide you with the relevant information and can execute respective measures.

Nevertheless, if you need further assistance we will, of course, try to assist you.

Please contact us at datenschutz@paidi.de

Copyright information

If you would like to publish images, texts, plans, videos, music etc. on our pages, please be aware that you may be transferring all usage rights to the network, which could ultimately have legal consequences for you if you are not the copyright holder yourself