Privacy policy

The controller responsible for processing personal data on this website is:

REHA-Industriekomponenten e.K.
Proprietor: René Hartung
Im Katzentach 5
76275 Ettlingen
Germany

Telephone: +49 7243 9398745
Email: shop@reha-components.com

(1) We host our website with an external service provider. Personal data collected through this website is stored on the hosting provider's servers. This may include IP addresses, metadata, communications data, website-access data and other data generated through use of a website.

(2) Server log files: The website provider automatically collects and stores information in server log files, including browser type, operating system, referrer URL, IP address and access time. This data is not combined with other data sources.

(1) Cookies and browser storage: Our website uses technically necessary cookies and browser storage, particularly for the shopping cart, security, sessions and privacy choices. Optional cookies and external content are activated only with your consent. The self-hosted Umami audience measurement described below sets no analytics cookies and no persistent browser ID.

(2) Enquiries: If you contact us by email or through a contact form, we store the information you provide in order to process the enquiry and any follow-up questions. We do not disclose this data without your consent.

(1) We process personal data, including master data such as names and addresses and contractual data, in order to perform our contractual obligations and services under Article 6(1)(b) GDPR.

(2) Because our offering is intended for business customers, we also store company-related data, such as VAT identification numbers, equivalent tax or business identifiers, company-registration numbers, company name and contact person, in our CRM system for the purpose of maintaining the business relationship.

We do not use external payment-service providers such as PayPal, Stripe or Klarna that transfer data to third countries.

Payment is made exclusively by invoice or advance payment through a direct bank transfer to our business account. Only transaction data required for accounting is transmitted to our bank and tax adviser.

If we provide goods or services before receiving payment, for example when selling on account, we reserve the right to obtain identity and credit information from specialised service providers, such as business credit agencies including Creditreform, in order to protect our legitimate interests.

Umami web analytics: We use the self-hosted Umami analytics software at analytics.reha-industriekomponenten.de for cookieless audience measurement. We process page views, referrers, device and browser information, approximate country information, technical performance values and selected shop events such as product searches, shopping-cart actions, enquiries and order steps. Search terms are limited before transmission and checked for email addresses or telephone numbers. Form content, names, email addresses, postal addresses and telephone numbers are not transmitted to Umami. For confirmed order receipts, we record only the net order value, currency and number of items; names, contact details and order numbers are not transmitted as analytics data. Umami sets no analytics cookies, and we do not store a random analytics session identifier in the browser. The IP address and user agent technically received with a request are used server-side only to create a regularly changing pseudonymous session; the IP address is not stored in the analytics database. The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is the data-minimised measurement and technical improvement of our shop without advertising profiles or disclosure to a third-party analytics provider. You may object to future measurement at any time through Cookie settings in the footer. The browser's “Do Not Track” setting is also respected.

Google Fonts: Fonts are installed locally on our server. No connection to Google servers is established.

Rank Math: We use Rank Math for search-engine optimisation. Technical parameters are processed for this purpose.

AI and CRM: We use internal systems, some of which are supported by artificial intelligence, to make business processes more efficient. We ensure that the systems used operate in compliance with the GDPR.

SSL/TLS encryption: This website uses SSL or TLS encryption. Data that you transmit to us cannot be read by third parties while in transit.

Limit Login Attempts Reloaded: We use this plugin to protect against brute-force attacks. IP addresses are stored temporarily after failed login attempts in order to defend against attacks.

Subject to the statutory requirements, you have rights of access, rectification, erasure, restriction of processing, objection and data portability. You may also lodge a complaint with a data-protection supervisory authority. You may contact us at any time using the address stated in the legal notice.

This is an English translation of the German legal text. In the event of discrepancies, the German version applies.