1. Overview
Protecting your personal data is important to us. This Privacy Policy explains what personal data we collect on shop.cnc-elektronik.de, how we use it, and what rights you have under the General Data Protection Regulation (GDPR).
This website is an online shop for CNC spare parts and electronic components.
2. Data Controller
The controller responsible for data processing on this website is:
Schirmer GmbH
Kölner Str. 5
57635 Weyerbusch
Germany
E-mail: [email protected]
Phone: +49 1556 525 8347
Represented by: Eduard Schirmer
3. When you visit our website (server log files)
When you visit our website, our system automatically collects certain technical information. This information is stored temporarily in so-called server log files.
This may include:
- IP address
- date and time of access
- requested page/file
- referrer URL
- browser type and version
- operating system
- device information
We process this data to ensure website stability, security, and error analysis.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest)
4. Online shop functions (WooCommerce)
Our online shop is operated using WooCommerce (WordPress).
When you place an order, create an account, or use the shopping cart, we process personal data required to provide these functions.
4.1 Data processed during an order
Depending on the order, we may process:
- name and surname
- company name (if provided)
- billing address
- shipping address
- email address
- phone number (if provided)
- VAT ID (if provided)
- ordered items and order details
- order history and invoices
- shipping method and delivery status
Legal basis: Art. 6(1)(b) GDPR (contract performance)
4.2 Customer account (“My Account”)
If you create a customer account, we store your account data so you can:
- view order history
- manage addresses
- reorder items
- download invoices (if available)
Passwords are stored only in encrypted form and cannot be read by us.
Legal basis: Art. 6(1)(b) GDPR
5. Payments
We offer payment options through external payment service providers. Depending on the payment method, necessary personal data is transmitted to the selected provider.
We do not store full payment card details on our servers.
Payment providers may include (depending on your configuration):
- PayPal
- Stripe (credit card payments)
- Klarna
- bank transfer
The payment provider processes data under its own responsibility.
Legal basis: Art. 6(1)(b) GDPR (contract performance)
6. Shipping and delivery
To deliver your order, we transmit the required shipping data (name, shipping address and, if required, email/phone number) to logistics providers.
Depending on destination and selected shipping method, carriers may include:
- DHL
- UPS
- DPD
- GLS
(or other providers)
Legal basis: Art. 6(1)(b) GDPR
7. Contact forms and email communication (WPForms)
If you contact us via a form or by email, we process the information you provide (for example name, email address, phone number and message content) to handle your request.
We use WPForms for our contact forms.
Legal basis: Art. 6(1)(b) GDPR (pre-contract communication)
and/or Art. 6(1)(f) GDPR (legitimate interest)
8. Cookies and consent management
Our website uses cookies and similar technologies.
8.1 Essential cookies
Some cookies are technically necessary for the shop to function, for example:
- shopping cart and checkout
- session handling
- login functionality
- security-related cookies
These cookies cannot be disabled, as the website would not function correctly.
Legal basis: Art. 6(1)(f) GDPR and/or Art. 6(1)(b) GDPR
8.2 Optional cookies (analytics / marketing)
Optional cookies (e.g. analytics, marketing, embedded media) are only activated if you consent via our cookie banner.
You can withdraw your consent at any time via the cookie settings.
Legal basis: Art. 6(1)(a) GDPR (consent)
9. Analytics and marketing tools (only with consent)
If we use analytics or marketing services, they will only be loaded after you have provided consent.
This may include:
- newsletter and email marketing tools (e.g. Constant Contact)
- YouTube embeds
- Google Maps
- advertising and tracking tools (if enabled)
10. Social media links
Our website may contain links to social media platforms such as Instagram or Facebook.
These are normal links. No personal data is transferred to the social networks simply by visiting our website. Data is transferred only if you click on the link.
11. Third-party services and technical integrations
To operate this website securely and reliably, we use technical services and plugins. Depending on configuration, this may include:
- Cloudflare (performance, DNS, DDoS protection, security)
- Solid Security (formerly iThemes Security) (website security and login protection)
- Rank Math SEO (search engine optimisation)
- Popup Maker (popups and forms)
- embedded videos (YouTube)
- maps (Google Maps)
Fonts are served locally from our own server.
Some services may process technical data such as IP address.
12. Cloudflare (CDN, DNS, security)
We use Cloudflare to improve website security and loading speed.
Cloudflare may process technical connection data (including IP address) in order to:
- protect against attacks
- detect abusive traffic
- improve delivery speed
Legal basis: Art. 6(1)(f) GDPR
13. Security measures and fraud prevention
We use technical and organisational measures to protect our shop against:
- unauthorised access
- attacks
- spam submissions
- fraud attempts
This may include logging of suspicious activity and IP-based security rules.
Legal basis: Art. 6(1)(f) GDPR
14. Data retention
We store personal data only as long as necessary for the purposes described in this Privacy Policy.
Order-related data and invoices are stored longer where required by German commercial and tax retention laws.
15. International orders and data transfers
As we sell worldwide, data may be processed outside the EU/EEA if service providers or carriers are located in third countries.
Where applicable, data transfers are based on:
- adequacy decisions by the EU Commission, or
- Standard Contractual Clauses (SCCs), or
- other safeguards under GDPR
16. Your rights under GDPR
You have the following rights:
- access to your data (Art. 15 GDPR)
- rectification (Art. 16 GDPR)
- deletion (Art. 17 GDPR)
- restriction of processing (Art. 18 GDPR)
- data portability (Art. 20 GDPR)
- objection (Art. 21 GDPR)
- withdrawal of consent (Art. 7(3) GDPR)
To exercise your rights, please contact us using the details in section 2.
17. Right to lodge a complaint
You have the right to lodge a complaint with a data protection supervisory authority if you believe your personal data is processed unlawfully.
18. Updates to this Privacy Policy
We may update this Privacy Policy to reflect changes in legal requirements or changes to our website and services.