Skip to main content
Kurpfalz WaffenKurpfalz Waffen

Privacy Policy

 1) Introduction and Contact Details of the Data Controller

1.1

We are pleased that you are visiting our website and thank you for your interest. Below, we provide information about how we handle your personal data when you use our website. Personal data means any data that can be used to identify you personally.

1.2

The data controller responsible for processing personal data on this website within the meaning of the General Data Protection Regulation (GDPR) is:

Andreas Gundacker
Kurpfalz-Waffen
Gräfensteiner Str. 14
66989 Petersberg
Germany

Telephone: +4917678179548
Email: kurpfalz-waffen@gmx.de

The data controller responsible for processing personal data is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data.

2) Data Collection When Visiting Our Website

2.1

When you use our website for informational purposes only, i.e. if you do not register or otherwise provide us with information, we collect only the data that your browser transmits to the page server (so-called “server log files”). When you access our website, we collect the following data, which is technically necessary for us to display the website to you:

  • The website visited
  • Date and time of access
  • Amount of data sent in bytes
  • Source/referrer from which you accessed the page
  • Browser used
  • Operating system used
  • IP address used (where applicable, in anonymised form)

The processing is carried out in accordance with Article 6(1)(f) GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data will not be disclosed to third parties or used for any other purpose. However, we reserve the right to subsequently review the server log files if there are concrete indications of unlawful use.

2.2

For security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or enquiries submitted to the data controller), this website uses SSL or TLS encryption. You can recognise an encrypted connection by the “https://” prefix and the padlock symbol in your browser’s address bar.

3) Cookies

To make visiting our website more attractive and to enable the use of certain functions, we use cookies, i.e. small text files stored on your device. Some of these cookies are automatically deleted when you close your browser (so-called “session cookies”), while others remain on your device for a longer period and allow website settings to be saved (so-called “persistent cookies”). In the latter case, you can find the storage duration in the overview of your web browser’s cookie settings.

Where individual cookies used by us also process personal data, such processing is carried out in accordance with Article 6(1)(b) GDPR for the performance of a contract, in accordance with Article 6(1)(a) GDPR where consent has been given, or in accordance with Article 6(1)(f) GDPR to safeguard our legitimate interests in ensuring the best possible functionality of the website and making the website visit as customer-friendly and effective as possible.

You can configure your browser to notify you when cookies are set, to allow you to decide individually whether to accept them, or to generally exclude the acceptance of cookies or exclude them in specific cases.

Please note that refusing cookies may restrict the functionality of our website.

4) Contacting Us

When you contact us (e.g. via a contact form or by email), personal data is collected. The data collected when using a contact form can be seen from the respective form. This data is stored and used exclusively for the purpose of responding to your enquiry or contacting you, as well as for the associated technical administration.

The legal basis for processing this data is our legitimate interest in responding to your enquiry pursuant to Article 6(1)(f) GDPR. If your contact is aimed at concluding a contract, the additional legal basis for processing is Article 6(1)(b) GDPR. Your data will be deleted once your enquiry has been fully processed. This is the case when the circumstances indicate that the matter in question has been conclusively resolved and provided that no statutory retention obligations apply.

5) Website Functions

Google Maps

This website uses an online mapping service provided by the following provider: Google Maps (API), operated by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”).

Google Maps is a web service used to display interactive maps in order to present geographical information visually. By using this service, you can view our location and plan your route to us more easily.

As soon as you access pages on which a Google Maps map is embedded, information about your use of our website (such as your IP address) is transmitted to Google’s servers and stored there. This may also involve the transfer of data to the servers of Google LLC in the USA. This takes place regardless of whether Google provides a user account through which you are logged in or whether a user account exists at all. If you are logged in to Google, your data will be directly associated with your account. If you do not want your data to be associated with your Google profile, you must log out before activating the button. Google stores your data (even for users who are not logged in) as usage profiles and analyses it.

The collection, storage and analysis of this data are carried out in accordance with Article 6(1)(f) GDPR on the basis of Google’s legitimate interest in displaying personalised advertising, conducting market research and/or designing Google websites to meet users’ needs. You have the right to object to the creation of these user profiles, although you must contact Google to exercise this right. If you do not consent to the future transmission of your data to Google when using Google Maps, you can also completely deactivate the Google Maps web service by disabling JavaScript in your browser. Google Maps, and therefore the map display on this website, will then no longer be available.

Where legally required, we have obtained your consent to the processing of your data described above in accordance with Article 6(1)(a) GDPR. You may withdraw your consent at any time with effect for the future. To exercise your right of withdrawal, please follow the procedure for objecting described above.

For data transfers to the USA, the provider has joined the EU–US Data Privacy Framework, which, on the basis of an adequacy decision by the European Commission, ensures compliance with European data protection standards.

6) Tools and Other Services

Cookie Consent Tool

This website uses a so-called “cookie consent tool” to obtain valid user consent for cookies and cookie-based applications that require consent.

When users access the website, the cookie consent tool displays an interactive user interface through which consent can be given for specific cookies and/or cookie-based applications by ticking the relevant boxes. By using this tool, all cookies and services requiring consent are loaded only if the respective user has given consent by ticking the relevant boxes. This ensures that such cookies are stored on the user’s device only where consent has been granted.

The tool sets technically necessary cookies to store your cookie preferences. As a general rule, no personal user data is processed in this context.

If, in individual cases, personal data (such as the IP address) is nevertheless processed for the purpose of storing, assigning or recording cookie settings, such processing is carried out in accordance with Article 6(1)(f) GDPR on the basis of our legitimate interest in ensuring legally compliant, user-specific and user-friendly cookie consent management and, consequently, in ensuring that our website complies with applicable legal requirements.

A further legal basis for processing is Article 6(1)(c) GDPR. As the data controller, we are legally obliged to make the use of technically unnecessary cookies dependent on the respective user’s consent.

Where necessary, we have concluded a data processing agreement with the provider to ensure the protection of our website visitors’ data and to prohibit unauthorised disclosure to third parties.

Further information about the operator of the cookie consent tool and the available settings can be found directly in the corresponding user interface on our website.

7) Rights of Data Subjects

7.1

Under applicable data protection law, you have the following rights with regard to the processing of your personal data by the data controller (rights of access and intervention). The relevant legal provisions governing the conditions for exercising these rights are indicated below:

  • Right of access pursuant to Article 15 GDPR
  • Right to rectification pursuant to Article 16 GDPR
  • Right to erasure pursuant to Article 17 GDPR
  • Right to restriction of processing pursuant to Article 18 GDPR
  • Right to notification pursuant to Article 19 GDPR
  • Right to data portability pursuant to Article 20 GDPR
  • Right to withdraw consent pursuant to Article 7(3) GDPR
  • Right to lodge a complaint pursuant to Article 77 GDPR

7.2 Right to object

If, in the context of a balancing of interests, we process your personal data on the basis of our overriding legitimate interest, you have the right to object to such processing at any time, with effect for the future, on grounds relating to your particular situation.

If you exercise your right to object, we will cease processing the personal data concerned. However, we reserve the right to continue processing if we can demonstrate compelling legitimate grounds for the processing that override your interests, fundamental rights and freedoms, or if the processing serves the establishment, exercise or defence of legal claims.

If we process your personal data for direct marketing purposes, you have the right to object at any time to the processing of your personal data for such marketing. You may exercise your right to object as described above.

If you exercise your right to object, we will cease processing the personal data concerned for direct marketing purposes.

8) Duration of Storage of Personal Data

The period for which personal data is stored depends on the applicable legal basis, the purpose of processing and, where relevant, the respective statutory retention period (e.g. retention periods under commercial and tax law).

Where personal data is processed on the basis of explicit consent pursuant to Article 6(1)(a) GDPR, the data concerned will be stored until you withdraw your consent.

Where statutory retention periods apply to data processed in connection with contractual or similar obligations on the basis of Article 6(1)(b) GDPR, such data will routinely be deleted once the retention periods have expired, provided that it is no longer required for the performance or initiation of a contract and/or we no longer have a legitimate interest in retaining it.

Where personal data is processed on the basis of Article 6(1)(f) GDPR, such data will be stored until you exercise your right to object pursuant to Article 21(1) GDPR, unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.

Where personal data is processed for direct marketing purposes on the basis of Article 6(1)(f) GDPR, such data will be stored until you exercise your right to object pursuant to Article 21(2) GDPR.

Unless otherwise stated in the other information contained in this privacy policy regarding specific processing situations, stored personal data will otherwise be deleted when it is no longer necessary for the purposes for which it was collected or otherwise processed.