Data protection declaration

General

The following gives a simple overview of what happens to your personal information when you visit our website. Personal information is any data with which you could be personally identified. Detailed information on the subject of data protection can be found in our privacy policy found below.

Data collection on our website

Who is responsible for the data collection on this website?

The data collected on this website are processed by the website operator. The operator's contact details can be found in the website's required legal notice.

How do we collect your data?

Some data are collected when you provide it to us. This could, for example, be data you enter in our spare parts form or when placing an order.

Other data are collected automatically by our IT systems when you visit the website. These data are primarily technical data such as the browser and operating system you are using or when you accessed the page. These data are collected automatically as soon as you enter our website.

What do we use your data for?

Part of the data is collected to ensure the proper functioning of the website. Other data can be used to analyze how visitors use the site.

What rights do you have regarding your data?

You have the right at any time to obtain information free of charge about the origin, recipients and purpose of your stored personal data. You also have the right to request the rectification or erasure of these data or the restriction of their processing, and to object to the processing. You can withdraw any consent you have given at any time. You can contact us at any time using the address given in the legal notice if you have further questions about privacy and data protection. You also have the right to lodge a complaint with the competent supervisory authority.

Analytics and third-party tools

When you visit our website, your browsing behaviour may be analysed statistically. This is done with Google Analytics and only if you have given your consent in the cookie settings. You can withdraw your consent at any time using the "Cookie settings" link at the bottom of every page. Detailed information can be found in the following privacy policy.

Data protection

We treat your personal data as confidential and in accordance with the statutory data protection regulations and this privacy policy.

If you use this website, various pieces of personal data will be collected. Personal data is any data with which you could be personally identified. This privacy policy explains what data we collect, how we process it and what we use it for.

Please note that data transmitted via the internet (e.g. via email communication) may be subject to security breaches. Complete protection of your data from third-party access is not possible.

Notice concerning the party responsible for this website

The party responsible for processing data on this website is:

Schempp-Hirth Flugzeug-Vertriebs GmbH
Krebenstraße 25
73230 Kirchheim unter Teck
Germany

Phone: +49 7021 7298-0
Email: datenschutz@schempp-hirth.com

The responsible party is the natural or legal person who alone or jointly with others decides on the purposes and means of processing personal data (names, email addresses, etc.).

Revocation of your consent to the processing of your data

Many data processing operations are only possible with your express consent. You may withdraw any consent you have given at any time with effect for the future. An informal email to us is sufficient. You can withdraw consent to cookies and external content directly using the "Cookie settings" link at the bottom of every page. The lawfulness of the processing carried out before the withdrawal remains unaffected.

Right to file complaints with regulatory authorities

You have the right to lodge a complaint with a data protection supervisory authority if you consider that the processing of your personal data infringes the GDPR (Art. 77 GDPR). You can contact the supervisory authority of your place of residence or the supervisory authority responsible for us. The authority responsible for us is:

Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg (State Commissioner for Data Protection and Freedom of Information Baden-Württemberg)
Heilbronner Straße 35
70191 Stuttgart, Germany
https://www.baden-wuerttemberg.datenschutz.de

Right to data portability

You have the right to have data which we process based on your consent or in fulfillment of a contract automatically delivered to yourself or to a third party in a standard, machine-readable format. If you require the direct transfer of data to another responsible party, this will only be done to the extent technically feasible.

Opposition to promotional emails

We hereby expressly prohibit the use of contact data published in the context of website legal notice requirements with regard to sending promotional and informational materials not expressly requested. The website operator reserves the right to take specific legal action if unsolicited advertising material, such as email spam, is received.

Statutory data protection officer

We have appointed a data protection officer for our company.

Schempp-Hirth Flugzeug-Vertriebs GmbH
Datenschutzbeauftragte
Krebenstraße 25
73230 Kirchheim unter Teck

Email: datenschutz(at)schempp-hirth.com

Cookies

Our website uses cookies. Cookies are small text files that your browser stores on your device. Other storage technologies in the browser, such as local storage, work in a similar way. The same applies to them as to cookies.

Necessary cookies are set without your consent because the website does not work without them. These are:

• CookieConsent: stores your choice in the cookie settings, 1 year.
• fe_typo_user: keeps your session, for example for the shopping cart and the login to your customer account. When you log in, you stay logged in for up to 7 days. The cookie is deleted after 7 days at the latest.

The legal basis for storing these cookies is Section 25 (2) No. 2 TDDDG, and for the further processing our legitimate interest in a functioning website (Art. 6 (1) (f) GDPR).

All other cookies are only set with your consent (Section 25 (1) TDDDG, Art. 6 (1) (a) GDPR). You give this consent in our cookie banner on your first visit, separately for the categories "Marketing" (Google Analytics) and "External content" (videos from YouTube and Vimeo). You can open the cookie settings at any time using the "Cookie settings" link at the bottom of every page. There you can see all cookies with their storage period and change or withdraw your consent with effect for the future. Details on these services can be found in the respective sections of this privacy policy.

You can also delete or block cookies in your browser. If you block necessary cookies, the shopping cart and the login will not work.

Server log files

Our web server automatically collects and stores information that your browser automatically transmits to us in "server log files". We operate this server ourselves at our premises in Kirchheim unter Teck. Apart from us, only our IT service provider for the maintenance of the website has access to the data. We have concluded a data processing agreement with this provider in accordance with Art. 28 GDPR. The following data are collected:

• IP address
• Date and time of the request
• Requested page or file
• HTTP status code and amount of data transferred
• Referrer URL (the previously visited page)
• Browser type and version, and operating system used

These data will not be combined with data from other sources. The server log files are deleted automatically after 14 days.

In addition, the website and the online shop log errors. In individual cases, these error logs may contain personal data, for example the email address in a failed order or spare parts request. We delete them automatically after 60 days.

We need these data to provide the website and the shop securely and without errors, for example to detect attacks and fix errors. The legal basis is our legitimate interest (Art. 6 (1) (f) GDPR).

Contact/spare parts form

You can request spare parts using our spare parts form. We collect the information you enter in the form: name, company and VAT identification number if applicable, billing and delivery address, email address, telephone number, customer number, details of your aircraft, the parts you need, your comments, and uploaded images.

We use these data to process your request, make you an offer, and answer follow-up questions. The legal basis is Art. 6 (1) (b) GDPR, as your request serves to prepare a contract.

Your request is created as a ticket in our ticket system, which we operate ourselves at our premises in Kirchheim unter Teck. In addition, the website stores your information and images for 31 days so that no request is lost in case of technical problems. After that, they are deleted automatically. Apart from us, only our IT service provider has access to the data. We have concluded a data processing agreement with this provider in accordance with Art. 28 GDPR.

In the ticket system, we keep your request for as long as we need it to process it and answer follow-up questions. If your request leads to an order, the statutory retention periods apply, in particular under commercial and tax law.

Customer account "My Schempp-Hirth"

You can create a customer account on our website. For this purpose, we collect your first and last name, email address, company if applicable, address (street, postcode, city, country) and a password, which we only store in encrypted form. To protect against automated registrations, we use an image captcha that runs on our own server. We send you an email with a confirmation link. Your account is only active after confirmation.

In your customer account, you can register your aircraft (type, serial number, year of manufacture, year of purchase, first owner). We use this to provide you with the technical notes for your aircraft. You also use the account for orders in our online shop. We inform you of important changes, for example to our services or for technical reasons, at the email address you provided. The legal basis is Art. 6 (1) (b) GDPR (user agreement for the customer account).

You can voluntarily agree that we inform you about news concerning Schempp-Hirth or your aircraft. The legal basis is then your consent (Art. 6 (1) (a) GDPR). You can withdraw it at any time in your profile or by email to us.

We store the data of your customer account for as long as the account exists. If you would like your account to be deleted, an email to datenschutz@schempp-hirth.com is sufficient. For orders, the retention periods from the section "Processing of data (customer and contract data)" apply.

Processing of data (customer and contract data)

When you order in our online shop, we process the data required for the contract: name, company and VAT identification number if applicable, billing and delivery address, email address, telephone number, the ordered items, the payment and shipping method, and for prepayment the details of your bank transfer (name, IBAN, amount, payment reference). The legal basis is Art. 6 (1) (b) GDPR (performance of a contract).

We store the orders in the online shop on our own server in Kirchheim unter Teck and transfer the data for invoicing and bookkeeping to our accounting software, which we also operate ourselves at our premises. Apart from us, only our IT service provider has access to the data in the online shop. We have concluded a data processing agreement with this provider in accordance with Art. 28 GDPR.

We keep order and invoice data for as long as the statutory retention periods under commercial and tax law require (Section 257 HGB, Section 147 AO). After that, we delete them.

Data transmitted when entering into a contract with online shops, retailers, and mail order

We transmit personally identifiable data to third parties only to the extent required to fulfill the terms of your contract, for example, to companies entrusted to deliver goods to your location or to the payment service provider. For details, see the sections "Shipping with Sendcloud" and "PayPal". Your data will not be transmitted for any other purpose unless you have given your express permission to do so. Your data will not be disclosed to third parties for advertising purposes without your express consent.

The basis for data processing is Art. 6 (1) (b) GDPR, which allows the processing of data to fulfill a contract or for measures preliminary to a contract.

Google Analytics

This website uses Google Analytics 4, a web analytics service. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google").

Google Analytics is only loaded if you have given your consent in the cookie settings in the category "Marketing". Google then collects which pages you visit, how long you stay, which page you came from, and technical information such as browser, operating system, screen size and approximate location (country, region). For this purpose, Google Analytics sets the cookies "_ga" and "_ga_<ID>" with a storage period of up to 2 years. We use the data to analyse and improve the use of our website.

Google Analytics 4 does not store IP addresses. We have switched off "Google Signals" and the personalisation of advertising. Google therefore does not link the data to your Google account and does not use it for personalised advertising. Google stores the data in Google Analytics for 2 months and then deletes it.

We have concluded a data processing agreement with Google. Data may be transferred to Google servers in the USA in the process. Google is certified under the EU-U.S. Data Privacy Framework.

The legal basis is your consent (Art. 6 (1) (a) GDPR and Section 25 (1) TDDDG). You can withdraw your consent at any time with effect for the future using the "Cookie settings" link at the bottom of every page.

For more information on how Google Analytics handles user data, see https://support.google.com/analytics/answer/6004245?hl=en.

YouTube

Our website embeds videos from YouTube. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

We use YouTube in privacy-enhanced mode (youtube-nocookie.com). A video only loads when you start it yourself. Until then, the page only shows a preview image from our own server, and there is no connection to YouTube. By clicking the play button, you consent to videos from YouTube and Vimeo being loaded. We store this consent in the cookie settings (category "External content"). It then applies to all videos on this website.

As soon as a video loads, your browser connects to the YouTube servers. YouTube receives, among other things, your IP address and the information which of our pages you have visited. After playback starts, YouTube may store cookies and similar technologies (e.g. local storage) on your device. If you are logged in to your YouTube or Google account, YouTube can link your browsing behaviour to your personal profile. You can prevent this by logging out first.

Data may be transferred to the USA in the process. Google is certified under the EU-U.S. Data Privacy Framework.

The legal basis is your consent (Art. 6 (1) (a) GDPR and Section 25 (1) TDDDG). You can withdraw your consent at any time with effect for the future using the "Cookie settings" link at the bottom of every page.

For more information on how Google handles user data, see Google's privacy policy: https://policies.google.com/privacy?hl=en.

Vimeo

Our website may embed videos from the video portal Vimeo. The provider is Vimeo.com, Inc., 330 West 34th Street, 10th Floor, New York, NY 10001, USA.

A video only loads when you start it yourself. Until then, the page only shows a preview image from our own server, and there is no connection to Vimeo. By clicking the play button, you consent to videos from Vimeo and YouTube being loaded. We store this consent in the cookie settings (category "External content"). It then applies to all videos on this website.

As soon as a video loads, your browser connects to the Vimeo servers. Vimeo receives, among other things, your IP address and the information which of our pages you have visited. This also applies if you do not have a Vimeo account. We load the Vimeo player with the "Do Not Track" setting. According to Vimeo, it then does not track your session. If you are logged in to your Vimeo account, Vimeo can link your browsing behaviour to your personal profile. You can prevent this by logging out first.

Data is transferred to the USA in the process. Vimeo is certified under the EU-U.S. Data Privacy Framework.

The legal basis is your consent (Art. 6 (1) (a) GDPR and Section 25 (1) TDDDG). You can withdraw your consent at any time with effect for the future using the "Cookie settings" link at the bottom of every page.

For more information on how Vimeo handles user data, see Vimeo's privacy policy: https://vimeo.com/privacy.

PayPal

You can pay with PayPal in our online shop. The provider of this payment service is PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg ("PayPal").

If you choose to pay with PayPal, we redirect you to PayPal. In doing so, we transfer the order number, the ordered items with quantity and price, the shipping costs, the total amount, and your delivery address. You enter your payment details directly at PayPal. We do not receive them.

The legal basis is Art. 6 (1) (b) GDPR, as the transfer is necessary for the payment of your order. PayPal processes the data under its own responsibility. For more information, see PayPal's privacy policy: https://www.paypal.com/ie/legalhub/paypal/privacy-full.

8. Shipping with Sendcloud

 We use the Sendcloud service to ship orders from our shop. The provider is Sendcloud B.V., the Netherlands. Sendcloud calculates the shipping costs and creates the shipping labels for the carrier you select (DHL or GLS).

For this purpose, we transfer the following data to Sendcloud: name, company, delivery address, country, email address and phone number. Sendcloud passes on the data required for delivery to the carrier.

The transfer is based on Art. 6(1)(b) GDPR, as it is necessary to perform the purchase contract. We have concluded a data processing agreement with Sendcloud.

For more information, see Sendcloud's privacy policy: https://www.sendcloud.com/privacy-policy/