Privacy Policy

The protection of your privacy when using our website is of great importance to us. We strictly adhere to the applicable data protection regulations when handling your personal data. Below, we inform you about the collection and use of personal data when using our website, our cookie consent tool, and our online shop.

1. Name and Contact Details of the Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) and other national data protection laws of the member states, as well as other data protection provisions, is:

SL-Gleitlagertechnik GmbH Controller: Dr. Björn Metzger Email: info@sl-gleitlagertechnik.de Phone: +49 (0)6421 94860 0

2. Hosting and Website Provision (Log Files)

Description and Scope of Data Processing Our website is hosted by an external service provider (host). The personal data collected on this website is stored on the host’s servers. This may include IP addresses, contact enquiries, meta and communication data, contract data, contact details, names, website access data, and other data generated through a website.

The host is used for the purpose of fulfilling our contractual obligations to our prospective and existing customers (Art. 6(1)(b) GDPR) and in the interest of the secure, fast, and efficient provision of our online offering by a professional provider (Art. 6(1)(f) GDPR). A data processing agreement (DPA) pursuant to Art. 28 GDPR has been concluded with the host.

domainfactory GmbH Oskar-Messter-Straße 33 85737 Ismaning Germany

Each time our website is accessed, our system automatically collects data and information from the requesting device’s computer system (including IP address, browser type and version, operating system, date and time of access, referrer URL). This data is stored in log files and is not merged with other data sources.

The legal basis is Art. 6(1)(f) GDPR. The storage is necessary for the delivery of the website and to ensure system security; this constitutes our legitimate interest.

Retention Period Log file data is deleted as soon as it is no longer required for the purpose for which it was collected, typically at the end of the respective session or no later than [TO BE ADDED: e.g. 7 to 14 days].

3. Cookies and Consent Management (Consent Tool)

We use cookies and similar technologies on our website. Cookies are small files that your browser automatically creates and stores on your device when you visit our website. Cookies do not cause any damage to your device and do not contain viruses, trojans, or other malware.

We use technically necessary cookies, which are strictly required for the operation of the website and the provision of its basic functions (e.g. shopping cart, login session, language settings), on the basis of Art. 6(1)(f) GDPR and Section 25(2) TTDSG.

For all cookies and services that are not technically necessary (in particular analytics and marketing cookies such as Google Analytics and Google Ads), we obtain your explicit consent pursuant to Section 25(1) TTDSG in conjunction with Art. 6(1)(a) GDPR before their use.

To manage these consents, we use the cookie consent tool “Borlabs Cookie”. Upon your first visit to our website, you will be informed about the cookies used and can select which categories of cookies you wish to allow. Your selection is saved so that you do not need to make this choice on every visit. You may revoke or adjust your consent at any time with effect for the future via the cookie settings link in the footer of our website.

Most browsers accept cookies automatically. However, you can configure your browser to prevent cookies from being stored. Completely disabling cookies may result in you being unable to use all features of our website (e.g. the shopping cart).

4. Email Contact and Contact Form

Our website includes a contact form that you can use to get in touch with us. When you use this option, the data entered in the input form (e.g. company, name, email address, phone number, message) is transmitted to us and stored.

Alternatively, you may contact us via the email address provided; in this case, the personal data transmitted with your email will be stored. Your data will not be shared with third parties.

The legal basis is Art. 6(1)(a) GDPR where consent has been given, and otherwise Art. 6(1)(f) GDPR or, for enquiries aimed at entering into a contract, Art. 6(1)(b) GDPR.

The data is deleted once the respective conversation is considered conclusively resolved, unless statutory retention obligations require otherwise.

5. Order Processing in Our Online Shop (WooCommerce)

Description and Scope of Data Processing Our online shop is operated on the basis of WordPress with the WooCommerce shop system. When you place an order or create a customer account in our shop, we collect and process the data required for contract fulfilment, in particular:

• Name, billing and delivery address
• Email address and phone number
• Ordered items, order value, and order date
• Payment method and payment-related data (see Section 6)
• Where applicable, login details for a customer account (username, encrypted password)

To process your order, we share your data to the extent necessary with the payment service providers we use (Section 6) and with shipping service providers ([TO BE ADDED: e.g. DHL, DPD, GLS]), insofar as this is necessary for contract fulfilment. These service providers may only use the data exclusively for the fulfilment of their respective tasks.

Legal Basis The legal basis for the processing is Art. 6(1)(b) GDPR (performance of a contract or pre-contractual measures). Where statutory retention obligations apply, the additional legal basis is Art. 6(1)(c) GDPR.

Retention Period Order and invoice data are subject to commercial and tax law retention obligations and are stored for a period of 6 years (Section 257 HGB) or 10 years (Section 147 AO), even if a deletion request is made in the meantime. You may request the deletion of an existing customer account at any time via [TO BE ADDED: contact method]; statutory retention obligations for order and invoice data remain unaffected.

6. Payment Service Providers

For payment processing in our online shop, we use the following payment methods and service providers:

PayPal When paying via PayPal, your payment data is transmitted to PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (“PayPal”). The transmission takes place on the basis of Art. 6(1)(b) GDPR (contract fulfilment) and, where applicable, Art. 6(1)(f) GDPR in the interest of the smoothest, most convenient, and most secure payment processing possible. For more information, please refer to PayPal’s privacy policy: https://www.paypal.com/de/webapps/mpp/ua/privacy-full

Credit Card Payment via Stripe For credit card payments, we use the payment service provider Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland (“Stripe”). Your payment data (e.g. card number, expiry date, security code) is transmitted directly to Stripe and processed there; we do not receive knowledge of the complete card data. The legal basis is Art. 6(1)(b) GDPR. For more information: https://stripe.com/de/privacy

Advance Payment / Payment on Invoice / Cash on Delivery With these payment methods, your data is not shared with an external payment service provider; the processing is handled exclusively through our bank on the basis of Art. 6(1)(b) GDPR.

7. Analytics Tools

Google Analytics This website uses Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Google Analytics uses cookies or similar technologies that enable an analysis of the use of the website. The information generated is usually transferred to a Google server, including in the USA, and stored there.

The use occurs exclusively if you have given your consent via our cookie consent tool (Section 3). The legal basis is therefore Art. 6(1)(a) GDPR in conjunction with Section 25(1) TTDSG. You may revoke your consent at any time via the cookie settings.

Where personal data is transferred to the USA, the transfer is based on the Standard Contractual Clauses recognised by the EU Commission or on an adequacy decision (EU-US Data Privacy Framework), provided Google has acceded to it.

We have concluded a data processing agreement with Google and have activated IP anonymisation, insofar as this is supported by the version of Analytics in use. For more information on how Google Analytics handles user data, please visit: https://support.google.com/analytics/answer/6004245?hl=en

8. Google Ads and Conversion Tracking

This website uses Google Ads by Google Ireland Limited. As part of Google Ads, we use conversion tracking, provided you have given your consent via our cookie consent tool. When you click on an ad placed by Google, a cookie is set for conversion tracking. These cookies are not used for personal identification.

The legal basis is Art. 6(1)(a) GDPR in conjunction with Section 25(1) TTDSG. You may revoke your consent at any time via the cookie settings. For more information: https://www.google.de/policies/privacy/

9. Google reCAPTCHA

We use “Google reCAPTCHA” on our websites, in particular to protect forms against abusive automated use. The provider is Google Ireland Limited. reCAPTCHA analyses the behaviour of website visitors based on various characteristics (e.g. IP address, time spent on the page, mouse movements); the data collected is transmitted to Google.

The legal basis is Art. 6(1)(f) GDPR. We have a legitimate interest in protecting our web offering against abusive automated surveillance and spam. For more information: https://policies.google.com/privacy

10. Embedded Fonts (Google Fonts)

[TO BE ADDED, if applicable: If Google Fonts or other external fonts are loaded from a Google/third-party server, a separate section with the legal basis and, where applicable, consent requirements is necessary here. If all fonts are hosted locally on your own or the hosting server, no data is transferred to third parties and this section may be omitted — please verify in the theme/Elementor settings.]

11. Rights of the Data Subject

Where your personal data is processed, you are entitled, as a data subject, to the following rights vis-à-vis the controller under the GDPR:

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object (Art. 21 GDPR)
• Right to withdraw consent (Art. 7(3) GDPR)
• Right to lodge a complaint with a supervisory authority (Art. 77 GDPR)

Where the processing of your personal data is based on Art. 6(1)(e) or (f) GDPR, you have the right to object to the processing at any time on grounds relating to your particular situation; this also applies to profiling based on these provisions. Where your data is processed for direct marketing purposes, you have the right to object to the processing for this purpose at any time.

The competent supervisory authority is (if the registered office is in Hesse, please verify): The Hessian Data Protection and Freedom of Information Commissioner Postfach 3163, 65021 Wiesbaden www.datenschutz.hessen.de

12. Data Security

We employ appropriate technical and organisational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction, or unauthorised access by third parties. Our security measures are continuously improved in line with technological developments.

SSL/TLS Encryption For security reasons and to protect the transmission of confidential content, this website uses SSL/TLS encryption. You can recognise an encrypted connection by the “https://” prefix in your browser’s address bar and the lock icon.

13. Amendments to This Privacy Policy

We reserve the right to amend this privacy policy to ensure it always complies with current legal requirements or to reflect changes to our services in the privacy policy.

Last updated: July 20