Privacy policy

The controller responsible for processing personal data on this website is:

REHA-Industriekomponenten e.K.
Proprietor: René Hartung
Im Katzentach 5
76275 Ettlingen
Germany

Telephone: +49 7243 9398745
Email: shop@reha-components.com

(1) We host our website with an external service provider. Personal data collected through this website is stored on the hosting provider's servers. This may include IP addresses, metadata, communications data, website-access data and other data generated through use of a website.

(2) Server log files: The website provider automatically collects and stores information in server log files, including browser type, operating system, referrer URL, IP address and access time. This data is not combined with other data sources.

(1) Cookies and browser storage: Our website uses technically necessary cookies and browser storage, particularly for the shopping cart, security, sessions and privacy choices. Optional cookies and external content are activated only with your consent. The self-hosted Umami audience measurement described below sets no analytics cookies and no persistent browser ID.

(2) Enquiries: If you contact us by email or through a contact form, we store the information you provide in order to process the enquiry and any follow-up questions. We do not disclose this data without your consent.

(1) We process personal data, including master data such as names and addresses and contractual data, in order to perform our contractual obligations and services under Article 6(1)(b) GDPR.

(2) Because our offering is intended for business customers, we also store company-related data, such as VAT identification numbers, equivalent tax or business identifiers, company-registration numbers, company name and contact person, in our CRM system for the purpose of maintaining the business relationship.

(3) Customer account: If you create a customer account in the shop, we process your email address, first and last name, company name and, optionally, your telephone number, together with the order number, items, amounts and the most recently used billing and delivery address of your shop orders. We use these data for signing in, pre-filling the checkout and your order overview, and we assign the account to your company in our customer system: via your email address or the domain of your company email address, provided the company name matches; otherwise we create a new customer record. You sign in with a one-time code sent by email that is valid for 15 minutes; a technically necessary cookie keeps you signed in for up to 30 days. For security, we log sign-ins with time and IP address. The legal basis is Art. 6(1)(b) GDPR.

(4) We store overviews of shop orders placed without signing in in our customer system so that they appear in your customer account once you sign in with the same email address. Overviews that are not assigned are deleted after twelve months. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is providing complete order overviews to our business customers.

(5) You can change your details in the customer account and delete the account there at any time. This deletes your sign-in, profile and order overview; we retain order and invoice records in accordance with statutory retention obligations.

(6) Watched items: If you watch an item or a part number in your customer account, we store your selection with a pseudonymous identifier of your email address and the price and availability status at the start of the watch in order to show you changes in your customer account. For part numbers not offered in the shop, we additionally store your email address, name and company in encrypted form so that we can contact you. You can end any watch in your customer account at any time; when you delete the account, we also delete your watches. The legal basis is Art. 6(1)(b) GDPR.

We do not use external payment-service providers such as PayPal, Stripe or Klarna that transfer data to third countries.

Payment is made exclusively by invoice or advance payment through a direct bank transfer to our business account. Only transaction data required for accounting is transmitted to our bank and tax adviser.

If we provide goods or services before receiving payment, for example when selling on account, we reserve the right to obtain identity and credit information from specialised service providers, such as business credit agencies including Creditreform, in order to protect our legitimate interests.

Umami web analytics: We use the self-hosted Umami analytics software at analytics.reha-industriekomponenten.de for cookieless audience measurement. We process page views, referrers, device and browser information, approximate country information, technical performance values and selected shop events such as product searches, shopping-cart actions, enquiries and order steps. Search terms are limited before transmission and checked for email addresses or telephone numbers. Form content, names, email addresses, postal addresses and telephone numbers are not transmitted to Umami. For confirmed order receipts, we record only the net order value, currency and number of items; names, contact details and order numbers are not transmitted as analytics data. Umami sets no analytics cookies, and we do not store a random analytics session identifier in the browser. The IP address and user agent technically received with a request are used server-side only to create a regularly changing pseudonymous session; the IP address is not stored in the analytics database. The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is the data-minimised measurement and technical improvement of our shop without advertising profiles or disclosure to a third-party analytics provider. You may object to future measurement at any time through Cookie settings in the footer. The browser's “Do Not Track” setting is also respected.

Ahrefs Web Analytics: Only if you separately consent to Ahrefs Web Analytics do we additionally use Ahrefs Web Analytics, provided by Ahrefs Pte. Ltd., 16 Raffles Quay, #33-03 Hong Leong Building, Singapore 048581, to evaluate how our shop is used and how our search engine optimisation performs. Without your consent, the script is not loaded. We also do not load Ahrefs on cart, checkout, order status and login pages, when the Do Not Track browser setting is enabled or after you have objected to analytics. Once loaded, your browser retrieves the script from analytics.ahrefs.com and transmits the page visited without search or query parameters (except campaign parameters such as utm_source), the page title, the referring page, the language setting, screen size and pixel density, as well as clicks on links and submitted forms, each with the target address. Form contents are not transmitted. For technical reasons, Ahrefs receives your IP address and your browser's user agent. According to Ahrefs, the service does not set cookies; we do not store an identifier in your browser for this purpose. Ahrefs processes usage data; processing in Singapore and the USA is possible. According to the provider, IP addresses are not stored but are used to determine approximate location and a daily changing identifier. This provider statement is not a guarantee of a particular level of data protection. The legal basis is your consent under Art. 6(1)(a) GDPR and Section 25(1) of the German TDDDG. You can withdraw your consent at any time with effect for the future through Cookie settings in the footer. Further information is available in the Ahrefs privacy policy.

Google Fonts: Fonts are installed locally on our server. No connection to Google servers is established.

Rank Math: We use Rank Math for search-engine optimisation. Technical parameters are processed for this purpose.

AI and CRM: We use internal systems, some of which are supported by artificial intelligence, to make business processes more efficient. We ensure that the systems used operate in compliance with the GDPR.

SSL/TLS encryption: This website uses SSL or TLS encryption. Data that you transmit to us cannot be read by third parties while in transit.

Limit Login Attempts Reloaded: We use this plugin to protect against brute-force attacks. IP addresses are stored temporarily after failed login attempts in order to defend against attacks.

Subject to the statutory requirements, you have rights of access, rectification, erasure, restriction of processing, objection and data portability. You may also lodge a complaint with a data-protection supervisory authority. You may contact us at any time using the address stated in the legal notice.

This is an English translation of the German legal text. In the event of discrepancies, the German version applies.