Privacy Policy
Unless otherwise stated below, providing your personal data is neither legally nor contractually required, nor necessary for concluding a contract. You are not obliged to provide the data. Failure to provide data has no consequences. This applies only insofar as no other indication is made in the processing activities described below. “Personal data” means any information relating to an identified or identifiable natural person.
Server log files
You can visit our website without disclosing personal information. Each time our website is accessed, usage data is transmitted by your internet browser to us or our web host/IT service provider and stored in log files (“server log files”). The stored data includes, for example, the name of the page accessed, date and time of access, IP address, amount of data transferred and the requesting provider. Processing is based on Art. 6(1)(f) GDPR, from our overriding legitimate interest in ensuring the trouble-free operation of our website and improving our offer.
Contact
Controller
Contact us if you wish. Controller for data processing is: H+H Kältetechnik GmbH, Borghorster Str. 68, 48366 Laer, Germany, Tel: +49 2554 9129839, Email: [email protected]
Customer-initiated contact by email
If you contact us by email on your own initiative, we process your personal data (name, email address, message text) only to the extent provided by you. The data is processed for the purpose of handling and responding to your inquiry. If the contact serves to carry out pre-contractual measures (e.g. consultation on purchase interest, preparing an offer) or relates to an existing contract between you and us, processing is carried out on the basis of Art. 6(1)(b) GDPR. If the contact occurs for other reasons, processing is based on Art. 6(1)(f) GDPR from our overriding legitimate interest in handling and responding to your inquiry. In this case, you have the right to object at any time, on grounds relating to your particular situation, to processing of personal data concerning you which is based on Art. 6(1)(f) GDPR. We use your email address only to process your request. Your data will then be deleted in compliance with statutory retention periods, unless you have consented to further processing and use.
Collection and processing when using the contact form
When using the contact form, we collect your personal data (name, email address, message text) only to the extent provided by you. The data is processed for the purpose of contacting you. If the contact serves pre-contractual measures or an existing contract, processing is based on Art. 6(1)(b) GDPR; otherwise on Art. 6(1)(f) GDPR (legitimate interest). You may object as above. We use your email address only to process your request and then delete the data subject to statutory retention periods.
Use of address validation by Endereco
We use the address validation service of Endereco UG (haftungsbeschränkt), Balthasar-Neumann-Str. 4b, 97236 Randersacker, Germany (“Endereco”). Processing serves to check your entries in our address forms in real time for input/spelling errors and to complete missing data where applicable. The following information may be transmitted to and processed by Endereco, among others: postal addresses (country, city, postal code, street, house number), email address, telephone number. Processing is based on Art. 6(1)(f) GDPR from our overriding legitimate interest in correct data to fulfil our contractual obligations. You may object at any time on grounds relating to your situation. Data is processed separately by the provider, not merged with other data, and deleted once the status of the entered data has been determined, at the latest after 30 days. Further information: https://www.endereco.de/datenschutzerklaerung/.
Customer account & orders
Customer account
When opening a customer account, we collect your personal data as indicated in the form. Processing serves to improve your shopping experience and simplify order processing and is based on your consent (Art. 6(1)(a) GDPR). You can withdraw consent at any time; we will then delete your account.
Collection, processing and disclosure of personal data in orders
When placing an order, we process your personal data only insofar as necessary to fulfil and process your order and handle your inquiries. Providing data is required to conclude the contract; failure to provide means no contract can be concluded. Processing is based on Art. 6(1)(b) GDPR. Data may be passed to shipping companies, dropshipping/fulfilment providers, payment service providers, order-processing service providers and IT service providers. We strictly observe legal requirements; the scope of transferred data is limited to the minimum necessary.
Reviews & marketing
Data collection when submitting a comment or review
When commenting/reviewing an item or post, we collect your personal data (name, email address, comment text) only as provided. Processing enables commenting/reviewing and displaying comments/reviews. For verification we also collect: order number, customer number. By submitting the comment/review you consent (Art. 6(1)(a) GDPR). You may withdraw consent at any time; we then delete your personal data. Upon publication, only the name you provide is displayed.
Website badge for Google Customer Reviews
We integrate the website badge for Google Customer Reviews (Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA). Cookies may be used and your IP address processed. Data may be transferred to the USA. For the USA there is an adequacy decision (Trans-Atlantic Data Privacy Framework, TADPF); Google is certified. Use of cookies/technologies and personal data processing occur on the basis of your consent (Art. 6(1)(a) GDPR; §25(1) TDDDG where applicable). You can withdraw consent at any time. Details are available in Google’s terms and privacy policy.
Google Customer Reviews survey tool
We use the Google Customer Reviews survey tool. After your order we may email you to request a review (using Google’s opt-in module). Processed information may include order details (e.g., order ID, destination country, expected delivery date, GTINs) and your email address. Transfers to the USA may occur; Google is TADPF-certified. Processing is based on your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time.
Trusted Shops review system (Trustbadge)
We use the review system of Trusted Shops SE, Subbelrather Str. 15C, 50823 Cologne (“Trusted Shops”). Trusted Shops and we are joint controllers under a joint controllership agreement (incl. information duties under Arts. 13/14 GDPR and data subject rights under Arts. 15–21 GDPR). After an order you may receive an invitation to submit a review; we/Trusted Shops process e.g. email address, order information. When loading the Trustbadge, IP address, date/time, transferred data volume and requesting provider may be processed. Processing is based on your consent (Art. 6(1)(a) GDPR). Further information is available in Trusted Shops’ privacy notice.
Review reminder
After your order, and with your explicit consent, we may email you a review reminder. Processing is based on Art. 6(1)(a) GDPR; you may withdraw at any time via link in the email or by contacting us.
Use of your email address for newsletters
We use your email address to send newsletters if you have explicitly consented. Processing serves marketing communication and is based on Art. 6(1)(a) GDPR. You may unsubscribe at any time; we may store your email in a suppression list (Art. 6(1)(f) GDPR) to prevent future sends.
Use of your email address for direct marketing
We may use your email address obtained in connection with the sale of a good/service to send electronic advertising for our own similar products/services, unless you objected. Processing is based on Art. 6(1)(f) GDPR (legitimate interest in direct marketing). You can object at any time (see imprint/contact or the link in the email).
Use of Klaviyo
We use Klaviyo Inc., 125 Summer St Floor 7, Boston, MA 02111, USA, as a processor for newsletter delivery and statistics (tracking pixel/links). Data may be transferred to servers in the USA; Klaviyo is TADPF-certified. Processing is based on Art. 6(1)(f) GDPR (legitimate interest in an effective, targeted newsletter system). You have the right to object at any time on grounds relating to your situation. Further info: Klaviyo Privacy Notice and DPA.
Shipping providers & ERP
Disclosure of email address to shipping companies for status information
We disclose your email address to the carrier for shipping status updates if you explicitly consented during checkout (Art. 6(1)(a) GDPR). You may withdraw consent at any time.
Use of external ERP system
For contract processing we use an ERP system under a processing agreement. Your order data is transferred to Pickware GmbH, Goebelstr. 21, 64293 Darmstadt, and JTL-Software-GmbH, Rheinstr. 7, 41836 Hückelhoven. Processing serves contract performance (Art. 6(1)(b) GDPR).
Payment services & credit checks
Use of Amazon Payments
We use Amazon Payments (Amazon Payments Europe s.c.a., Luxembourg). For integration Amazon may process data and use cookies. Processing for offering convenient payment methods is based on Art. 6(1)(f) GDPR; the payment itself is processed under Art. 6(1)(b) GDPR. Further information is available in Amazon Payments’ privacy notice.
Credit check processing
Where we provide goods/services in advance (e.g., invoice/direct debit), we reserve the right to obtain a credit report from infoscore Consumer Data GmbH, Rheinstraße 99, 76532 Baden-Baden. Processing serves credit assessment for contract initiation and is based on Art. 6(1)(f) GDPR (interest in protection against non-payment). You may object at any time on grounds relating to your situation. If you do not provide the necessary data, the desired payment method may not be available.
Use of Klarna payment options
We use Klarna Bank AB (publ), Sveavägen 46, 111 34 Stockholm, Sweden. When selecting/using Klarna, data necessary for payment processing is transmitted to Klarna to perform the contract (Art. 6(1)(b) GDPR). Cookies may be stored (Art. 6(1)(f) GDPR). For certain methods (“Pay Later”, “Pay Now”, “Financing”), Klarna may perform a credit check using credit agencies. Details are provided by Klarna.
Cookies
Our website uses cookies (small text files stored by the browser on the user’s device). Cookies are stored on your device; you have full control. You can be notified before cookies are set, accept them individually, and delete them at any time via your browser settings. If you block cookies, some functions may be unavailable. The use of technically necessary cookies is based on § 25(2) TDDDG and Art. 6(1)(f) GDPR (ensuring optimal functionality and a user-friendly/effective design). You have the right to object at any time on grounds relating to your situation.
Use of the Shopware cookie consent manager
We use the consent manager by shopware AG, Ebbinghoff 10, 48624 Schöppingen (“Shopware”), to obtain and document cookie/data processing consents (Art. 6(1)(c) GDPR). Further information: Shopware privacy notice.
Advertising tracking
Google Ads Conversion Tracking
We use Google Ads Conversion Tracking (Google Ireland Limited, Dublin). On clicking a Google ad, a conversion cookie is set. We use Advanced Consent Mode; even without consent, certain “pings” (e.g., timestamp, URL, user agent) may be transmitted, on which Google models reports. Data may be transferred to Google LLC in the USA (TADPF certification). Use of cookies/technologies and personal data processing occur on the basis of your consent (Art. 6(1)(a) GDPR; §25(1) TDDDG where applicable). Withdrawal is possible at any time.
Google AdSense
We use Google AdSense (Google Ireland Limited) to display interest-based ads. Google may use cookies and transfer data to the USA (TADPF). Processing for cookies/technologies and personal data occurs based on your consent (Art. 6(1)(a) GDPR; §25(1) TDDDG). You may withdraw at any time.
Google Remarketing / “Similar audiences”
We use Google Remarketing (Google Ireland Limited) to display interest-based ads based on your usage. Transfers to the USA (Google LLC) may occur (TADPF). Use is based on your consent (Art. 6(1)(a) GDPR; §25(1) TDDDG). You may withdraw at any time.
Plugins and miscellaneous
Google Tag Manager
We use Google Tag Manager (Google Ireland Limited) to manage tags. The Tag Manager itself stores no cookies and processes no personal data; it enables triggering other tags that may collect/process data.
Google reCAPTCHA
We use reCAPTCHA (Google Ireland Limited) to distinguish human from automated input. Data may be processed within the EU and transferred to Google LLC in the USA (TADPF). Use of cookies/technologies and personal data processing occur on the basis of your consent (Art. 6(1)(a) GDPR; §25(1) TDDDG). You may withdraw at any time.
YouTube
We embed YouTube videos (Google Ireland Limited) using “enhanced privacy mode”. Data is transmitted to YouTube/Google only when you play a video; transfers to the USA (TADPF) may occur. Processing is based on your consent (Art. 6(1)(a) GDPR; §25(1) TDDDG). See YouTube privacy information.
Customer service & CRM (Greyhound)
We use the CRM system from GREYHOUND Software GmbH & Co. KG, Hannoversche Str. 6–8, 49084 Osnabrück (“Greyhound”), to handle customer inquiries, orders and support cases. Customer, communication and case data are processed.
Legal basis: Art. 6(1)(b) GDPR (contract/performance) and Art. 6(1)(f) GDPR (legitimate interest in efficient customer service). Processing agreement: Art. 28 GDPR in place. Processing occurs within the EU/EEA.
Internal communication & remote work (Slack, Hubstaff)
Slack
We use Slack (Slack Technologies, LLC; Salesforce group) for internal collaboration. In the course of ticket/order processing, customer-related information (e.g., ticket or order numbers, technical details) may be visible internally in isolated cases. We apply data minimization and role-based access controls.
Legal basis: Art. 6(1)(b) GDPR (contract/performance) and Art. 6(1)(f) GDPR (legitimate interest in efficient internal communication). Processor agreement: Art. 28 GDPR in place. Third-country transfers: Transfers to the USA may occur; appropriate safeguards (EU Standard Contractual Clauses) are used and, where applicable, EU–US DPF certifications.
Hubstaff
We use Hubstaff (Netsoft Holdings, LLC, USA) for time tracking and internal process documentation. Activity information is processed; in rare cases, parts of ongoing work processes may be visible in screen captures. We technically and organizationally limit such visibility (e.g., blurring/low resolution, access only for authorized personnel, data minimization).
Legal basis: Art. 6(1)(b) GDPR (contract/performance) and Art. 6(1)(f) GDPR (legitimate interest in process and service quality). Processor agreement: Art. 28 GDPR in place. Third-country transfers: Transfers to the USA are safeguarded by EU Standard Contractual Clauses (Art. 46 GDPR) and additional measures.
Data subject rights and storage periods
Storage duration
After complete contract fulfilment, data is first stored for the duration of the warranty period and subsequently retained in accordance with statutory, particularly tax and commercial law retention periods; thereafter it is deleted unless you have consented to further processing/use.
Your rights
You have the rights under Arts. 15–20 GDPR: access, rectification, erasure, restriction, data portability, and the right to object under Art. 21(1) GDPR to processing based on Art. 6(1)(f) GDPR and to processing for direct marketing purposes at any time.
Right to lodge a complaint
You have the right to lodge a complaint with a supervisory authority pursuant to Art. 77 GDPR. Our competent authority: State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia (LDI NRW).
Right to object
Where processing is based on our legitimate interests (Art. 6(1)(f) GDPR), you have the right to object at any time on grounds relating to your particular situation. We will cease processing unless we demonstrate compelling legitimate grounds overriding your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.
If personal data is processed for direct marketing, you may object at any time; upon objection, processing for such purposes will cease.
last updated: 04/11/2025
