Privacy policy for website visitors, customers, suppliers, interested parties, applicants and other data subjects

With the following information, we would like to provide you as a visitor to our online presence, as a customer or interested party of our services, as a supplier, as an applicant or other data subject, with an overview of the processing of your personal data by us and your rights under data protection law. Which data is processed in detail and how it is used depends primarily on the services agreed upon. Therefore, not all parts of this information will apply to you.

1. Controller and contact details of the Data Protection Officer

Responsible for processing is: 
peicom GmbH
Am Schürholz 6
DE-49078 Osnabrück
(hereinafter referred to as the "Company")

You can reach our Data Protection Officer at:
Company GENA
- Data Protection Officer -
Böttgerstraße 6
DE-65439 Flörsheim
datenschutz@peicom.com

2. Processing of personal data in connection with your use of our websites, applications and online platforms

Data categories, purpose of processing and legal basis 

Within the framework of using our websites, applications or online tools (hereinafter collectively referred to as the "Online Offering"), we process the following personal data:

• Personal data that you voluntarily enter yourself within the framework of an Online Offering (such as during registration, contact requests or within the framework of participation in surveys, etc.), such as first and last name, email address, telephone number, information provided within the framework of a support request, comments or forum posts, and
• Information that is automatically sent to us by your web browser or terminal device, such as your IP address, device type, browser type, operating system used, previously visited websites, visited subpages or the date and times of the respective visitor request (HTTP data).

We generally process your personal data for the following purposes:

• Online shop and customer login/registration (use of our online shop) The legal basis for the processing of personal data for the above-mentioned purpose is the performance of a contract pursuant to Art. 6 Para. 1 lit. b GDPR. The use of our online shop is only possible after prior registration to ensure that only companies use it. The processing of data collected during registration and use of our online shop serves the initiation, performance, and execution of contracts. Without the processing of the collected mandatory information, the contracts cannot be performed.
• Technical administration of the website (prevention and detection of fraudulent or similar acts including attacks on our IT infrastructure, enabling user authentication). The legal basis for the processing of personal data for these purposes is our legitimate interest in ensuring the security of the website pursuant to Art. 6 Para. 1 lit. f GDPR. The transmission of personal data (e.g., the IP address) is necessary to establish the connection and to display the contents of the website.
• Service provision (enabling the use of the services and functions of our Online Offerings, processing inquiries, sending marketing information upon corresponding request). The legal basis for the processing of personal data for this purpose is Art. 6 Para. 1 lit. b and our legitimate interest in marketing pursuant to Art. 6 Para. 1 lit. f GDPR. Visiting our online offering establishes a contract-like legal relationship within the meaning of Art. 6 Para. 1 lit. b GDPR. Without the processing of personal data, we cannot offer our online offering as intended. In particular, the transmission of personal data such as the IP address is required for the connection setup.
• Online shop and customer login/registration (use of our online shop) The legal basis for the processing of personal data for the above-mentioned purpose is the performance of a contract pursuant to Art. 6 Para. 1 lit. b GDPR. The use of our online shop is only possible after prior registration to ensure that only companies use it. The processing of data collected during registration and use of our online shop serves the initiation, performance, and execution of contracts. Without the processing of the collected mandatory information, the contracts cannot be performed.

In some cases, we explicitly ask for your consent to the processing of your personal data. In this case, the legal basis for the processing of your personal data is the consent you have given pursuant to Art. 6 Para. 1 lit. a GDPR in conjunction with Art. 7 GDPR.

Cookies 

Within the framework of our Online Offering, we also use so-called cookies. Cookies are small text files that are stored by your browser on your terminal device when you visit our website. Cookies contain information that arises in connection with the respective usage context and your terminal device.

Technically necessary cookies 

The use of technically necessary cookies concerns, in particular, those cookies that are required to make our Online Offering available. The legal basis for the storage and retrieval of such cookies is regulated in Section 25 Para. 2 No. 2 TTDSG. The legal basis for further data processing in these cases is Art. 6 Para. 1 lit. f GDPR (legitimate interests in providing the Online Offering or IT security).

Consent Management with Usercentrics 

We use the Consent Management Platform (CMP) of Usercentrics GmbH, Sendlinger Str. 7, 80331 Munich, Germany. Through this tool, you have the opportunity to conveniently manage your consents for the setting of technically non-essential cookies and to make related changes—such as revocations of granted consents. For this purpose, Usercentrics also receives access to the collected data as a processor. The tool allows us to inform you about your consent and to obtain, manage and document it. For this purpose, we process http data and the consent, provided it has been granted. The purpose of the processing is the obtaining of consents, the opening of the possibility to revoke or adjust the consents, the provision of proof (accountability) regarding granted consents, and the ensuring of the security of the application. The legal basis for this is Art. 6 Para. 1 lit. f GDPR (legitimate interests in the stated purposes). Information regarding granted consents and the revocation of a consent is stored for one year for accountability purposes.

Marketing Cookies 

With the help of so-called marketing cookies, we process information regarding websites visited by users to improve our marketing and to individually adapt the use of our offer to your preferences. Furthermore, we use marketing cookies to statistically record, optimize and evaluate the use of our Online Offerings. These cookies are only activated if you have given your consent pursuant to Section 25 Para. 1 TTDSG as well as Art. 6 Para. 1 lit. a GDPR in conjunction with Art. 7 GDPR. You grant your consent in this regard when accessing our Online Offering when our "cookie banner" is displayed. Here, you can declare your consent for the use of cookies on this website by clicking a button.

You can revoke or change your decision regarding the use of cookies requiring consent at any time with effect for the future on our website. To do this, please use the "Cookie Settings" link, which you will find at the end of our website. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation.

Google Analytics 

This website uses functions of the web analysis service "Google Analytics". Recipients of the data within the framework of commissioned processing are Google Ireland Limited (Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland) and analysis and support service providers based in the EU. Google Ireland Limited uses Google LLC in the USA (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) as a service provider. Please note that in the event of a transfer to the USA, there is a lower level of data protection and US authorities may gain access to your data without you having effective legal remedies against this. Corresponding information on the risks of such data transfers and revocation options can be found under Section 8. Details on the transfer by Google can be found in Google's privacy policy at www.google.com/policies/privacy/.

Google Analytics allows us to analyze the usage behavior of our online presence. The data obtained from this (hereinafter "Usage Data") is used to optimize our website and advertising measures and to increase the efficiency of our deployed resources. During your website visit, the following usage data, among others, is recorded:

• Pages accessed
• Your behavior on the web pages
• Your approximate location (country and city)
• Your IP address (in anonymized form, see under (i))
• Technical information such as browser, internet provider, terminal device and screen resolution
• Source of origin of your visit (i.e., via which website or which advertising medium you came to us)

Google Analytics stores cookies in your web browser for its services. These cookies contain a randomly generated User ID, with which you can be recognized during future website visits. The mentioned data is stored together with the randomly generated User ID, which enables the creation and evaluation of pseudonymous user profiles.

The storage of Google Analytics cookies and the processing of data in connection with Google Analytics is based on your consent within the meaning of Art. 6 Para. 1 lit. a GDPR in conjunction with Art. 7 GDPR as well as Section 25 Para. 1 TTDSG. We obtain the required consent immediately after you access our website through our cookie banner. The consent obtained from you in this respect also refers to the transfer of your data to the USA (Art. 49 Para. 1 lit. a GDPR).

You can revoke your decision regarding the use of Google Analytics at any time with effect for the future on our website. To do this, please use the "Cookie Settings" link, which you will find at the end of our website. The revocation of consent does not affect the lawfulness of the processing carried out until the revocation.

Alternatively, you can prevent data collection by Google by downloading and installing the browser plug-in available at the following link or by prohibiting the storage of cookies in your browser settings.

We have activated so-called IP anonymization for the use of Google Analytics. This means that the IP address transmitted by the browser for technical reasons is anonymized by shortening (deletion of the last octet of the IPv4 address or the last 80 bits of the IPv6 address) before storage. The remaining user and event data are stored for 14 months. User and event data are data linked to cookies, user identifiers (e.g., User ID) and advertising IDs (e.g., DoubleClick cookies, Android Advertising ID, IDFA [Apple identifier for advertisers]). The cookie itself is deleted 2 years after the last visit to our website or upon revocation of consent.

Facebook Pixel If you have given your consent for this, we use the so-called "Facebook Pixel". Cookies from Meta Platforms Ireland Limited ("Facebook") are used here. The recipient of the data collected via our website is Meta Platforms Ireland Limited as the controller for the collection and processing of personal data. It cannot be excluded that Meta Platforms Ireland Limited transfers personal data to the USA. As an independent controller, Meta Platforms Ireland Limited bears the responsibility for ensuring appropriate data protection guarantees for the data transfer. Corresponding information on the risks of such data transfers and revocation options can be found under Section 8.

The "Facebook Pixel" enables Facebook, among other things, to collect information about the activities of users of our website. By integrating the "Facebook Pixel", we enable Facebook to collect personal data. The collection and processing of this data takes place after your consent exclusively within the area of responsibility of Facebook, so that the controller for data processing is Meta Platforms Ireland Limited (4 Grand Canal Square, Dublin 2 Ireland).

We have no knowledge of the details of the processing of personal data within Facebook's area of responsibility. Information about the processing of personal data by Facebook can be found in Facebook's data policy: https://de-de.facebook.com/about/privacy/.

Facebook only provides us with evaluations or further information created on the basis of the collected data in aggregated, anonymized form. We cannot assign the information provided to us to any natural person. We use Facebook Pixel for target-group-oriented advertising. Facebook independently decides which users correspond to the target group. According to Facebook, the processed data are:

• Facebook Pixel HTTP Data Log Data Technically required data generated when using the Facebook Pixel used on the website via the Hypertext Transfer Protocol (Secure) (HTTP(S)): This includes the IP address, type and version of your internet browser, operating system used, the page accessed, the previously visited page (referrer URL), date and time of the retrieval.
• Match Data If you complete an ordering process with us and have consented to data processing by the Facebook Pixel, we transmit to Facebook the email address you provided in the ordering process in the form of a hash value. This makes it easier for Facebook to recognize you and display suitable advertising for you.
• Facebook Pixel Terminal Device Data Data assigned to your terminal device by the Facebook Pixel: This includes a unique ID for (re-)recognizing recurring visitors.
• Facebook Pixel Event Data Data that Facebook records through the Facebook Pixel under assignment to the unique visitor ID of the respective visitor contained in the Facebook Pixel terminal device data: This includes actions that take place on the website (so-called "events"). These include, for example, the completion of a purchase, a registration, the addition of payment information (payment method), the initiation of the order completion process, adding to the shopping cart, adding to wish lists, performing searches, viewing content. This also includes information associated with the respective recorded actions (so-called "parameters"). This includes, for example, the value of purchases made, product ID, name, brand, category, value, currency, filter settings (price-related) when searching for products, the website category of the search results, the status of the orderer as a new, existing customer or as a guest.
• Facebook Pixel Analysis Data Data that Facebook generates on the basis of the information recorded by the Facebook Pixel under assignment to the unique visitor ID of the respective visitor contained in the Facebook Pixel terminal device data: This includes information about the effectiveness of Facebook advertisements and assignments of users to target groups for Facebook advertisements. Facebook may possibly generate further data based on the recorded information for its own purposes or for the purposes of third parties. We have no knowledge of the details of the data generated by Facebook.

The legal basis for enabling the collection of personal data via our website by Facebook is your consent pursuant to Art. 6 Para. 1 lit. a GDPR in conjunction with Art. 7 GDPR. With regard to access to the terminal device, the legal basis is Section 25 Para. 1 S. 1 TTDSG. We obtain the required consent immediately after you access our website through our cookie banner. You can revoke your decision regarding the use of Facebook Pixel at any time with effect for the future on our website. To do this, please use the "Cookie Settings" link, which you will find at the end of our website. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation. Alternatively, you can prevent data collection by Facebook by prohibiting the storage of cookies in your browser settings. Since we do not collect or store the data ourselves, we have no knowledge of the storage period at Facebook.

Google AdWords 

If you have given your consent, we use the "Google AdWords" service on our website and, within this framework, also so-called conversion tracking. Google Conversion Tracking is an analysis service of Google Inc. based in the USA (hereinafter "Google"). Recipients of the data within the framework of commissioned processing are Google Ireland Limited (Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland) and analysis and support service providers based in the EU. Google Ireland Limited uses Google LLC in the USA (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) as a service provider. The data will only be transmitted if you have given us your consent in accordance with Art. 6 Para. 1 lit. a, 49 Para. 1 S. 1 lit. a GDPR. Corresponding information on the risks of such data transfers and revocation options can be found under Section 8. Details on the transfer by Google can be found in Google's privacy policy at www.google.com/policies/privacy/. If you visit certain pages of our website and the said cookie has not yet expired, Google and we can recognize that you have clicked on the ad and have been redirected to our website. The information obtained with the help of the conversion cookie serves the purpose of creating so-called conversion statistics and performing a range analysis. In this process, we learn the total number of users who clicked on one of our ads and were redirected to a page provided with a conversion tracking tag. The processed data are:

• Google Ads HTTP Data These are log data generated for technical reasons when using the Google AdWords tool used on the website via the Hypertext Transfer Protocol (Secure) (HTTP(S)): This includes the IP address, type and version of your internet browser, operating system used, the page accessed, the previously visited page (referrer URL), date and time of the retrieval.
• Usage Data Usage data refers to clicks on ads, the duration of stay on the website and information about visited websites.
• Conversion Event The results of the conversion are summarized in the conversion event.

The legal basis for enabling the collection of personal data via our website by Google is your consent pursuant to Art. 6 Para. 1 lit. a GDPR in conjunction with Art. 7 GDPR. With regard to access to the terminal device, the legal basis is Section 25 Para. 1 S. 1 TTDSG. We obtain the required consent immediately after you access our website through our cookie banner. You can revoke your decision regarding the use of Google AdWords at any time with effect for the future on our website. To do this, please use the "Cookie Settings" link, which you will find at the end of our website. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation. Alternatively, you can also download and install the browser plug-in available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de or deactivate the storage of cookies in your browser settings.

Google Marketing Platform (formerly DoubleClick Ad) 

If you have given your consent, this website uses the online marketing tool DoubleClick by Google Ireland Limited, Gordon House Barrow Street Dublin 4, Ireland (hereinafter: Google). Recipients of the data within the framework of commissioned processing are Google Ireland Limited (Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland) and analysis and support service providers based in the EU. Google Ireland Limited uses Google LLC in the USA (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) as a service provider. The data will only be transmitted if you have given us your consent in accordance with Art. 6 Para. 1 lit. a, GDPR. Corresponding information on the risks of such data transfers and revocation options can be found under Section 8. Details on the transfer by Google can be found in Google's privacy policy at www.google.com/policies/privacy/. DoubleClick uses cookies to show ads relevant to users, to improve campaign performance reports or to prevent a user from seeing the same ads multiple times. Google uses a cookie ID to record which ads are shown in which browser and can thus prevent them from being shown multiple times. Furthermore, DoubleClick can use cookie IDs to record so-called conversions that are related to ad requests. This is the case, for example, when a user sees a DoubleClick ad and later calls up the advertiser's website with the same browser and buys something there. According to Google, DoubleClick cookies do not contain any personal information. Due to the marketing tools used, your browser automatically establishes a direct connection with the Google server. We have no influence on the scope and further use of the data collected by Google through the use of this tool and therefore inform you according to our state of knowledge: By integrating DoubleClick, Google receives the information that you have called up the corresponding part of our website or clicked on an ad from us. If you are registered with a Google service, Google can assign the visit to your account. Even if you are not registered with Google or have not logged in, there is a possibility that the provider will find out and store your IP address. The legal basis for enabling the collection of personal data via our website by Google is your consent pursuant to Art. 6 Para. 1 lit. a GDPR in conjunction with Art. 7 GDPR. With regard to access to the terminal device, the legal basis is Section 25 Para. 1 S. 1 TTDSG. We obtain the required consent immediately after you access our website through our cookie banner. You can revoke your decision regarding the use of Google Marketing Platform at any time with effect for the future on our website. To do this, please use the "Cookie Settings" link, which you will find at the end of our website. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation. Alternatively, you can also download and install the browser plug-in available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de or deactivate the storage of cookies in your browser settings.

Functional Cookies 

Furthermore, we use so-called functional cookies to make the use of our Online Offerings more attractive and user-friendly. The legal basis for the use of such functional cookies, the associated data processing or the processing of the data obtained from them is our legitimate interest in the design of the website pursuant to Art. 6 Para. 1 lit. f GDPR or your consent pursuant to Section 25 Para. 1 TTDSG as well as Art. 6 Para. 1 lit. a GDPR in conjunction with Art. 7 GDPR. You grant your consent in this regard when accessing our Online Offering when our "cookie banner" is displayed. Here, you can declare your consent for the use of cookies on this website by clicking a button. You can revoke or change your decision regarding the use of cookies requiring consent at any time with effect for the future on our website. To do this, please use the "Cookie Settings" link, which you will find at the end of our website. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation.

Adobe Typekit Web Fonts 

Our online offering uses so-called web fonts from Adobe Typekit for the uniform display of certain fonts. The provider is Adobe Systems Incorporated, 345 Park Avenue, San Jose, CA 95110-2704, USA (Adobe). When you call up our pages, your browser loads the required fonts directly from Adobe to be able to display them correctly on your terminal device. In doing so, your browser establishes a connection to Adobe's servers in the USA. This gives Adobe knowledge that our website was accessed via your IP address. According to Adobe, no cookies are stored when the fonts are provided. Adobe has a certification under the EU-U.S. Data Privacy Framework. The EU-U.S. Data Privacy Framework is an agreement between the United States of America and the European Union intended to ensure compliance with European data protection standards. The use of Adobe Typekit Web Fonts is necessary to ensure a uniform typeface on our website. This constitutes a legitimate interest within the meaning of Art. 6 Para. 1 lit. f GDPR. Adobe's privacy policy can be found here.

Google Tag Manager 

If you have given your consent, we use the "Google Tag Manager" service on our website. of Google Inc. based in the USA (hereinafter "Google"). Recipients of the data within the framework of commissioned processing are Google Ireland Limited (Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland) and analysis and support service providers based in the EU. Google Ireland Limited uses Google LLC in the USA (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) as a service provider. The data will only be transmitted if you have given us your consent in accordance with Art. 6 Para. 1 lit. a, 49 Para. 1 S. 1 lit. a GDPR. Corresponding information on the risks of such data transfers and revocation options can be found under Section 8. Details on the transfer by Google can be found in Google's privacy policy at www.google.com/policies/privacy/. The Tag Manager is an organizational tool with which we can integrate and manage website tags. Tags can take on different tasks, e.g., collect browser data, control marketing tools, set cookies or track users across multiple websites. The Tag Manager thus supports us in controlling our cookies and optimizing our website as a whole. The legal basis for the integration of the Tag Manager is your consent pursuant to Art. 6 Para. 1 lit. a GDPR in conjunction with Art. 7 GDPR. With regard to access to the terminal device, the legal basis is Section 25 Para. 1 S. 1 TTDSG. We obtain the required consent immediately after you access our website through our cookie banner. You can revoke your decision regarding the use of the Tag Manager at any time with effect for the future on our website. To do this, please use the "Cookie Settings" link, which you will find at the end of our website. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation.

Google Maps 

This website uses Google Maps to display interactive maps and to create route descriptions. Google Maps is a map service of Google Inc., 1600 Amphitheatre Parkway, Mountain View, California 94043, USA. By using the Google Maps services, information about the use of this website, including your IP address and the (start) address entered as part of the route planner function, can be transmitted to Google in the USA. When you call up our website, your browser establishes a direct connection with Google's servers. The map content is then transmitted directly to your browser and integrated into our website by it. We have no influence on the further processing and use of the data by Google. If you do not want Google Inc. to process data about you via our website, you can deactivate JavaScript in your browser settings. In this case, however, it is not possible to use the map display. Further information on the scope of data processing by Google Inc. can be found in Google's privacy policy.

Payment processing in the online shop 

In our online shop, we offer various payment methods to enable you to pay comfortably and securely. Depending on the selected payment method, personal data is transmitted to the respective payment service provider commissioned with the payment processing. The transmission takes place exclusively to the extent necessary for payment processing. The processed data may include in particular:

• First and last name,
• Billing and delivery address,
• Email address, payment data,
• Transaction data

The legal basis for processing is Art. 6 Para. 1 lit. b GDPR (performance of contract), as data processing is required for payment processing. Otherwise, processing is based on Art. 6 Para. 1 lit. f GDPR due to our legitimate interest in efficient and secure payment processing as well as fraud prevention. We process and store payment data only as long as this is necessary for contract execution and to fulfill statutory retention periods (e.g., according to commercial and tax law).

Payment by advance payment

If the "advance payment" payment method is selected, we provide you with our bank details. You transfer the invoice amount independently to our account. We process your master data (e.g., name, address), order data and payment data exclusively for the purpose of payment processing and accounting.

Payment by credit card

We offer payment by credit card. Processing is carried out via an external payment service provider (e.g., Visa or Mastercard). Your credit card data is transmitted directly to the service provider. We generally do not store your full credit card data ourselves, but merely receive a confirmation or rejection of the payment.

Payment with Google Pay

We offer payment via the "Google Pay" service. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Pay uses the card or account information stored in your Google Account. The specific payment is processed via the respective payment service provider or the card-issuing bank. We do not receive full card or account data from Google Pay, but merely a payment confirmation as well as the information required for order processing. Further information on data processing by Google Pay can be found in Google's privacy policy: Privacy Policy – Privacy & Terms – Google.

Payment with Apple Pay

We offer payment via the "Apple Pay" service. The provider is Apple Distribution International Ltd., Hollyhill Industrial Estate, Hollyhill, Cork, Ireland. Apple Pay uses the cards (e.g., credit or debit cards) stored in the Apple Wallet on your terminal device. The actual payment processing is carried out via the respective card-issuing bank or the stored payment service provider. We do not receive full card or account data from Apple, but merely a payment confirmation as well as the information required for order processing. Further information on data processing by Apple Pay can be found in Apple's privacy notices: Legal - Privacy Policy - Apple.

Paypal

We offer the possibility to process the payment transaction via the payment service provider PayPal (PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg). This corresponds to our legitimate interest in offering an efficient and secure payment method (Art. 6 Para. 1 lit. f GDPR). In this context, we pass the following data on to PayPal insofar as it is necessary for the performance of the contract (Art. 6 Para. 1 lit. b GDPR): • First name • Last name • Address • Email address • Telephone number. The processing of the data specified under this section is neither legally nor contractually prescribed. Without the transmission of your personal data, we cannot carry out a payment via PayPal. It is possible for you to choose a different payment method. PayPal performs a credit check for various services, such as payment by direct debit, to ensure your willingness and ability to pay. This corresponds to the legitimate interest of PayPal (acc. to Art. 6 Para. 1 lit. f GDPR) and serves the performance of the contract (acc. to Art. 6 Para. 1 lit. b GDPR). For this purpose, your data (name, address and date of birth, bank account details) are passed on to credit agencies. We have no influence on this process and merely receive the result of whether the payment was carried out or rejected or whether a check is pending. Further information on the possibilities of objection and removal vis-à-vis PayPal as well as on the use of data by PayPal can be found at: https://www.paypal.com/de/webapps/mpp/ua/privacy-full. Your data will be stored until the completion of the payment processing. This also includes the period required for the processing of refunds, claims management and fraud prevention. [For us, a statutory retention period of [X] years applies pursuant to [§ 147 AO / § 257 HGB] for the following documents: [ ]]

Newsletter

If you wish to receive the newsletter offered on the website, we require an email address from you as well as information which allows us to verify that you are the owner of the specified email address and agree to receive the newsletter (double opt-in procedure). We use this data exclusively for sending the requested information and for documenting your consent. For the documentation of the consent, we also store the IP address of the internet connection from which you access our website as well as the date and time of your registration. You can revoke the consent granted for the storage of the data, the email address and its use for sending the newsletter at any time and with effect for the future, for example via the "unsubscribe" link in the newsletter. The legal basis for the processing of the data is your consent pursuant to Art. 6 Para. 1 S. 1 lit. a GDPR. For the management and dispatch of our newsletter, we use the external service provider Klaviyo (225 Franklin St, Boston, MA 02110, USA) as a processor. We pass on the data you provided during the newsletter registration to them. Klaviyo is certified under the EU-US Data Privacy Framework.

Contacting us

Contact forms are available on our website which can be used for electronic contact. If a user takes advantage of these options, the data entered in the input mask is transmitted to us and a part of the data is stored. In this context, the data is not passed on to third parties outside of the company. The data is used exclusively for processing the correspondence. The legal basis for the processing of data transmitted in the course of sending an email is our legitimate interest in communicating with you pursuant to Art. 6 Para. 1 lit. f GDPR. If the email contact aims at the conclusion of a contract, then Art. 6 Para. 1 lit. b GDPR is an additional legal basis for the processing. The processing of the personal data from the input mask serves us to process the contact and to prevent misuse of the contact form. The data is deleted as soon as it is no longer required to achieve the purpose of its collection. For the personal data from the input mask of the contact form and those sent by email, this is the case when the respective correspondence has ended. The user has the possibility to object to the processing of his personal data at any time. In such a case, the correspondence cannot be continued. Please send your deletion request via email to datenschutz@peicom.com. All personal data stored in the course of contacting us will be deleted in this case.

3. Processing of personal data for customer satisfaction surveys and direct marketing

Insofar as you have given us your consent or we are entitled to do so within the framework of existing customer relationships, your contact data will also be used for purposes of direct marketing (such as trade fair invitations, newsletters) or for conducting customer satisfaction surveys. You have the right to object to the use of your contact data for these purposes at any time. If you wish to exercise your right of objection in this regard, please write us an email at datenschutz@peicom.com or follow the corresponding instructions that you have received from us in any advertising email. The legal basis for processing your data for advertising purposes is our legitimate interest in marketing pursuant to Art. 6 Para. 1 lit. f GDPR in the case of existing customer relationships or Art. 6 Para. 1 lit. a GDPR if you have given us your consent.

4. Processing of personal data of business partners

Data categories

Within the framework of cooperation with business partners, the company processes personal data of contact persons at customers, suppliers, interested parties, sales partners and cooperation partners (hereinafter "Business Partners"):

• Contact information, such as first and last names, business address, business telephone number, business mobile phone number, business fax number and business email address,
• Payment data, such as information required for the processing of payment transactions or fraud prevention, including credit card information and card verification numbers,
• further information whose processing is required within the framework of a contractual relationship and which is voluntarily provided by Business Partners, such as orders, inquiries or details on projects,
• personal data collected from publicly available sources, information databases or from credit agencies and
• insofar as legally required within the framework of compliance screenings: date of birth, identity card and identity card numbers, information on relevant court proceedings or other legal disputes in which Business Partners are involved.

Purpose of processing and legal basis

The aforementioned personal data are processed for the following purposes:

• Communication with Business Partners regarding products, services and projects, for example to process inquiries from the Business Partner or to provide technical information about products,
• Contract execution,
• Planning, performance and management of the contractual business relationship, for example to process the ordering of products and services, to collect payments, for purposes of accounting and billing and to carry out deliveries, maintenance activities or repairs,
• Processing the registration for a customer account,
• Management of a customer account for pre-contractual services, for contract performance or for the purpose of customer care (e.g., to provide you with an overview of your previous orders with us or to be able to offer you the so-called "wishlist" function),
• Conducting customer surveys, marketing campaigns, market analyses, competitions, etc.,
• Maintaining and protecting the security of our products and services as well as our websites, preventing and detecting security risks, fraudulent behavior or other criminal acts or acts performed with intent to harm,
• Matching personal data with US sanctions lists based on European Regulations 2580/2001 and 881/2002,
• Compliance with (i) legal requirements (e.g., tax and commercial law retention obligations), (ii) existing obligations to carry out compliance screenings (to prevent economic crime or money laundering) and (iii) guidelines and industry standards and
• Settling legal disputes, enforcing existing contracts and for the assertion, exercise and defense of legal claims.

The processing of personal data is necessary to achieve the aforementioned purposes. Unless expressly stated otherwise during the collection of personal data, the legal basis for data processing is:

• the performance and fulfillment of a contract with you pursuant to Art. 6 Para. 1 lit. b GDPR,
• the fulfillment of legal obligations to which the company is subject pursuant to Art. 6 Para. 1 lit. c GDPR, or
• the safeguarding of legitimate interests pursuant to Art. 6 Para. 1 lit. f GDPR. The legitimate interest lies in the initiation, performance and processing of the business relationship in business transactions.

If you have expressly given your consent to the processing of your personal data in an individual case, this consent is the legal basis for processing pursuant to Art. 6 Para. 1 lit. a GDPR.

5. Processing of personal data of applicants

Data categories and purpose of data processing

Within the framework of the application process, we generally process the following categories of personal data:

• Personal data (first and last name, date of birth, address, school-leaving qualification)
• Communication data (telephone number, mobile phone number, fax number, email address)
• Data regarding the assessment and evaluation in the application process
• Data on education (school, vocational training, civil/military service, studies, doctorate)
• Data on previous professional career, training and work certificates
• Information on other qualifications (e.g., language skills, PC skills, voluntary activities)
• Application photo
• Information on salary expectations
• Application history
• Social Media links (link to Xing or LinkedIn profile, if data transfer from these profiles was selected)

Personal data that you communicate to us within the framework of your application will be stored and used exclusively for the purpose of processing the application and, if applicable, for the performance of the subsequent employment relationship.

Legal basis for data processing

The processing of your personal data within the framework of the application process is carried out on the basis of Art. 6 Para. 1 lit. b GDPR (initiation and performance of a contract) as well as Art. 6 Para. 1 lit. f GDPR (legitimate interest in communication and processing of the application). Any further processing of applicant data is only carried out on the basis of an explicit declaration of consent. This is particularly the case if we cannot offer you a current vacancy in the company, but we consider your application suitable for future positions. The storage and processing of your data in this regard is then based on your consent pursuant to Art. 6 Para. 1 lit. a GDPR. The storage and processing of your data for forwarding to other companies of the group is also based on your consent pursuant to Art. 6 Para. 1 lit. a GDPR.

Forwarding of data

Your data will be made accessible to the responsible employees of the human resources department and the responsible employees or superiors of the specialist department(s) for the position for which you have applied. In the case of an unsolicited application, your documents will be made available to the responsible employees of the human resources department and the responsible employees or superiors of the relevant specialist departments for which your application might be of interest. We do not forward your applicant data to affiliated subsidiaries or parent companies unless your application also refers to these companies or is kept open for them. Furthermore, we use processors (e.g., IT service providers). The transfer of your data to these takes place under strict compliance with the obligation of confidentiality and the requirements of the GDPR. The processors commissioned by us may only process the data for us and not for their own purposes. Responsibility for data processing remains with us in these cases. Data forwarding also takes place if we are obliged to do so due to legal provisions and/or official or judicial orders.

Transmission of personal data to third countries

Our company is part of a group of companies in which personnel responsibilities can exist across national borders. For this reason, responsible superiors in other states may also be able to access your applicant data. These data processings are necessary for the decision on the establishment of an employment relationship. Furthermore, a data transfer to third countries also takes place when your data is included in the talent pool. Thus, our foreign units affiliated with the group also have access to your applicant data. In the event of a data transfer to a body in a third country, appropriate guarantees for the protection of your personal data ensure that the data protection level of the European Union is maintained.

Deletion periods for applicant data

If no employment relationship is established, the application documents will be deleted six months after the rejection. The legal basis for the storage in this regard is our legitimate interest pursuant to Art. 6 Para. 1 lit. f GDPR for the defense against any claims from the General Act on Equal Treatment ("AGG"). Otherwise, the general deletion periods and information under Section 9 apply.

6. Social Media

On our website, we use references ("links") to the social network Instagram to draw attention to our services and products and to get in contact with you as a visitor and user of these social media pages as well as our website. You can recognize the references by the logo of the respective social network. By clicking the logo, a direct connection is established between your browser and the server of the respective service and you are redirected to the website of the service provider. In the following, you will learn how your data is processed on the respective social media presences. We operate the following presences:

For Instagram and Facebook, there are additional and supplementary notices below in 6.4.

Data processing by us

We operate the social media presences to draw attention to our products, services and career opportunities and to communicate with users for this purpose and to achieve improvements. The processing of personal data is generally carried out on the basis of Art. 6 Para. 1 lit. f GDPR based on our legitimate interests in public relations, communication and product improvement unless stated otherwise. It is possible for us to see your posts and similar interactions on our social media presences as well as – depending on privacy settings – your public profile. We may use this data to improve our information and products, especially on our social media presences. In the event that you contact us via our social media presences, we process your personal data communicated in this context to process your concern, in particular to answer inquiries. We may then answer your inquiry via the respective social media presence. The legal basis for processing personal data is in many cases Art. 6 Para. 1 lit. b GDPR (contract performance or pre-contractual measures) or, if this legal basis is not applicable, Art. 6 Para. 1 lit. f GDPR based on the legitimate interests resulting from the mentioned purposes. Furthermore, we may also process personal data in connection with the social media presences according to the information in the other sections of the privacy notices. As a precaution, we point out that communication via social media platforms may be insecure. You can contact us at any time via other communication channels and will then also receive an answer via these other channels. Furthermore, we receive aggregated usage statistics from the platforms, which we use to evaluate usage behavior and to improve our information offering. The usage statistics can possibly also be created by the platforms on the basis of personal usage data. Further information on this can be found in the privacy notices of the respective providers linked above.

Processing by the platform operators

We have no influence on the processing of your personal data by the respective providers. Rather, the platform operators have control over data processing within the framework of the use of the respective service. This includes, for example, the storage and use of cookies on user terminal devices as well as the analysis of your behavior on the social network.

Notices on the deletion of posts

If you publish personal data in the form of posts on our social media presences, such as images, texts, videos, or interact in another way, e.g., "like" posts, your data will be processed and in many cases published. If these are inappropriate contents, we may delete them in accordance with the usual procedures and policies of the respective platforms.

Insights

When visiting our Instagram or Facebook presence, Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland (“Meta”) records in particular your IP address and further information transmitted by your browser, as well as, if applicable, further information present in the form of cookies on your PC. This information is used to provide us as the owner of the Instagram presence with statistical information about the use of the respective presences (Insights). Meta and we process the personal data in this respect as joint controllers within the meaning of Art. 26 GDPR and have concluded a corresponding joint controller agreement. The essential information on the corresponding agreement pursuant to Art. 26 GDPR between us and Meta can be found at: https://de-de.facebook.com/legal/terms/page_controller_addendum. Irrespective of the information in the linked agreement, you can assert your data subject rights against us and Meta. The data collected about you in this context will be processed by Meta and, in doing so, possibly transferred to countries outside the European Union, in particular to companies of the Meta group of companies based in the USA. We point out that Meta is responsible under data protection law for corresponding transfer and subsequent processing operations. Which specific data Meta receives and how these are used is described in Meta's privacy notices: https://de-de.facebook.com/policy.php. The legal basis for the processing of personal data in this context is Art. 6 Para. 1 lit. f GDPR (legitimate interests in achieving the above-mentioned purposes) or, insofar as consent has been obtained, Art. 6 Para. 1 lit. a, Art. 7 GDPR (consent). Under the Facebook/Instagram settings links, you can make additional settings for the processing of your personal data.

Use of HubSpot

We use the HubSpot service as an all-in-one platform for social media management and marketing. The provider is HubSpot, Inc., 25 First Street, 2nd Floor Cambridge, MA, USA. However, HubSpot stores and processes your data within the European Union (EU). The data is hosted in a data center in Germany. There is also a backup location in Ireland. HubSpot allows us to save time, plan posts efficiently and make the ROI of social media measures measurable. Processing is carried out in our legitimate interest in efficient marketing on social media platforms. The legal basis of processing is thus Art. 6 Para. 1 lit. f GDPR. HubSpot is based in the USA. A transfer of personal data to the USA cannot be excluded. The data transfer takes place on the basis of the EU standard contractual clauses and a certification of HubSpot under the EU-US Data Privacy Framework. Personal data processed via HubSpot are only stored by us for as long as is necessary for the respective purposes or as long as legal retention obligations exist. Regarding data subject rights, reference is made to Section 11. Further information can be found in the HubSpot Privacy Policy.

7. Recipients and categories of recipients

Within our company, those departments gain access to your data that need them to fulfill contractual and legal obligations. Service providers and vicarious agents employed by us may also receive data for these purposes if they maintain, in particular, confidentiality and integrity. These are companies in the categories of IT services, telecommunications as well as sales and marketing. With regard to data forwarding to recipients outside our company, it must first be noted that we only pass on necessary personal data in compliance with the applicable regulations on data protection. We may generally only pass on information about you if legal provisions command this, you have consented or we are authorized to provide information. Under these conditions, recipients of personal data can be:

• public bodies and institutions (e.g., law enforcement authorities) in the presence of a legal or official obligation,
• other group-affiliated companies for risk management based on legal or official obligations,
• service providers whom we use within the framework of commissioned processing relationships,
• service providers who are explicitly named as recipients in these privacy notices.

Within the framework of contract execution, we pass on your data on the basis of Art. 6 Para. 1 lit. b) GDPR to the transport company commissioned with the delivery of goods or to the financial service provider, insofar as the forwarding is necessary for the delivery of goods or for payment purposes.

8. Transmission to third countries

A data transfer to bodies in states outside the European Union (so-called third countries) takes place insofar as

• it is necessary for the execution of your orders (e.g., delivery orders),
• it is legally required (e.g., tax law reporting obligations) or
• you have given us your consent.

Furthermore, a transmission to bodies in third countries to maintain and ensure the IT operation and IT security of the company cannot be excluded. By using our social media offering, data transfers and subsequent processing of usage data of the respective services in the USA may also occur. When transferring data to so-called third countries, we ensure that this is done in a legally compliant manner. Generally, data transfers are permissible based on an adequacy decision, especially for transfers to the USA. Should this not apply in an individual case, we will conclude the standard data protection clauses or obtain your explicit consent. You can completely reject the use of cookies and other technologies or make individual settings. Furthermore, you can revoke consent at any time with effect for the future. Previously carried out processings remain unaffected by a revocation. Furthermore, according to the explanations in the other sections, personal data can be transmitted to third countries by the companies to which we pass on personal data.

9. Storage period

We process and store your personal data as long as it is necessary for the fulfillment of our contractual obligations and the exercise of our rights. The revocation of a previously granted consent is kept for three years (accountability). The management cookie is deleted 6 months after the last visit. Server log data are deleted or anonymized after seven days at the latest, unless further storage is required for evidence purposes. Data regarding newsletters and invitations are deleted immediately after unsubscribing. In individual cases, a longer storage of data for evidence may be justified in justified individual cases. According to §§ 195 ff. of the German Civil Code (BGB), these limitation periods can be up to 30 years, whereby the regular limitation period is 3 years.

10. Data security

On our online offering, SSL or TLS encryption is implemented for security reasons and to protect the transmission of confidential content, such as orders or inquiries that you send to us as the site operator. You can recognize an encrypted connection by the address line of the browser changing from “http://” to “https://” and by the lock symbol in your browser line. Our employees and the service companies commissioned by us are, moreover, obliged to confidentiality and compliance with the provisions of the applicable data protection laws. The company takes appropriate technical as well as organizational security measures to protect your personal data from loss, alteration, destruction and from access by unauthorized persons or unauthorized disclosure. Our security measures are constantly improved according to technological development.

11. Data subject rights 

Every data subject has the right of access pursuant to Art. 15 GDPR, the right to rectification pursuant to Art. 16 GDPR, the right to erasure pursuant to Art. 17 GDPR, the right to restriction of processing pursuant to Art. 18 GDPR as well as the right to data portability from Art. 20 GDPR. For the right of access and the right to erasure, the restrictions according to §§ 34 and 35 BDSG apply. Furthermore, there is a right of appeal to a competent data protection supervisory authority (Art. 77 GDPR in conjunction with § 19 BDSG). You can revoke a granted consent to the processing of personal data at any time vis-à-vis us. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation. You also have the right to object at any time, for reasons arising from your particular situation, to the processing of personal data concerning you, which is carried out in particular on the basis of Art. 6 Para. 1 lit. f GDPR. If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms. In particular, this includes cases where the processing is necessary for the assertion, exercise, or defense of legal claims. Furthermore, pursuant to Art. 22 GDPR, you have the right not to be subject to a decision based solely on automated processing. For the establishment, performance, and termination of the business relationship, we generally do not use fully automated decision-making. Should we use these procedures in individual cases (e.g., to improve our products and services), we will inform you about this and your rights in this regard separately, provided this is required by law. Further information and explanations regarding the above-mentioned rights can be found on the "Rights for citizens" website of the European Commission.

12. Obligation to provide data 

Within the framework of our online offering, we rely on the processing of such usage data that is necessary for the performance and termination of the service and for the fulfillment of the associated obligations. Without the collection of usage data, we and our service providers are not in a position to make our online offering available to you. Insofar as the processing is based on consent, the provision of data is also voluntary.

13. Profiling 

We do not process your personal data automatically in a manner that produces legal effects concerning you or similarly significantly affects you.

14. Validity and changes to this privacy policy 

This privacy policy is currently valid and was last updated in March 2026.

15. This English text has been generated by a translation program and is for a better user experience. This Privacy policy is only legally binding in the German version.