Privacy policy
Privacy Policy
Unless otherwise stated below, the provision of your personal data is neither legally nor contractually required, nor necessary for the conclusion of a contract. You are not obliged to provide the data. Failure to provide it will have no consequences. This only applies insofar as no other information is provided for the following processing operations.
“Personal data” means any information relating to an identified or identifiable natural person.
Server log files
You can visit our websites without providing any personal data.
Each time our website is accessed, usage data is transmitted to us or our web host / IT service provider by your internet browser and stored in log files (so-called server log files). These stored data include, for example, the name of the page accessed, date and time of access, IP address, amount of data transferred, and the requesting provider.
The processing is based on Art. 6 (1) lit. f GDPR due to our overriding legitimate interest in ensuring the smooth operation of our website and improving our offering.
Contact
Controller:
Halbe Rahmen GmbH
Data protection officer:
Hees GmbH, Friedrich-Wilhelm-Straße 148, 57074 Siegen Germany, +49 (0) 271 - 31 46 30, datenschutz@halbe.de
You can reach our data protection officer directly at: Email: datenschutz@halbe.de
Proactive customer contact by email
If you contact us by email on your own initiative, we collect your personal data (name, email address, message text) only to the extent provided by you. The data processing serves the purpose of handling and responding to your inquiry.
If the contact serves the implementation of pre-contractual measures (e.g., consultation in case of purchase interest, preparation of an offer) or relates to an already concluded contract between you and us, this processing is based on Art. 6 (1) lit. b GDPR.
If the contact is made for other reasons, processing is based on Art. 6 (1) lit. f GDPR due to our overriding legitimate interest in handling and responding to your request. In this case, you have the right to object at any time to the processing of your personal data based on Art. 6 (1) lit. f GDPR for reasons arising from your particular situation.
We use your email address only to process your request. Your data will then be deleted in compliance with statutory retention periods, unless you have consented to further processing and use.
Collection and processing when using the contact form
When using the contact form, we collect your personal data (name, email address, message text) only to the extent provided by you. The data processing serves the purpose of establishing contact.
If the contact serves the implementation of pre-contractual measures (e.g., consultation in case of purchase interest, preparation of an offer) or relates to an already concluded contract between you and us, this processing is based on Art. 6 (1) lit. b GDPR. If the contact is made for other reasons, processing is based on Art. 6 (1) lit. f GDPR due to our overriding legitimate interest in handling and responding to your request. In this case, you have the right to object at any time to the processing of your personal data based on Art. 6 (1) lit. f GDPR for reasons arising from your particular situation. We use your email address only to process your request. Your data will then be deleted in compliance with statutory retention periods, unless you have consented to further processing and use.
Collection and processing when sending images via upload
Your data may be passed on to service providers we use as part of order processing. No further transfer to other third parties takes place.
We use the image you send only for the purpose of providing the service. Your data will then be deleted in compliance with statutory retention periods, unless you have consented to further processing and use.
WhatsApp Business
If you contact us via WhatsApp for business purposes, we use WhatsApp Business from WhatsApp Ireland Limited (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland; “WhatsApp”). If you are located outside the European Economic Area, this service is provided by WhatsApp Inc. (1601 Willow Road, Menlo Park, CA 94025, USA).
The data processing serves the purpose of handling and responding to your inquiry. For this purpose, we collect and process your mobile number stored with WhatsApp, your name if provided, and other data to the extent provided by you. We use a mobile device for the service in whose address book only data of users who have contacted us via WhatsApp are stored. No personal data is shared with WhatsApp without your prior consent given to WhatsApp.
Your data is transmitted by WhatsApp to servers of Meta Platforms Inc. in the USA. For the USA, there is an adequacy decision by the EU Commission, the Trans-Atlantic Data Privacy Framework (TADPF). Meta Platforms Inc. is certified under the TADPF and is therefore committed to complying with European data protection principles. If contact serves pre-contractual measures (e.g., consultation in case of purchase interest, preparation of an offer) or relates to an existing contract, processing is based on Art. 6 (1) lit. b GDPR.
If contact is made for other reasons, processing is based on Art. 6 (1) lit. f GDPR due to our overriding legitimate interest in providing fast and simple communication and responding to your request. In this case, you have the right to object at any time to the processing of your personal data based on Art. 6 (1) lit. f GDPR for reasons arising from your particular situation.
We use your personal data only to process your request. Your data will then be deleted in compliance with statutory retention periods unless you have consented to further processing and use.
Further information on WhatsApp terms of use and data protection can be found at www.whatsapp.com/legal/#terms-of-service and www.whatsapp.com/legal/#privacy-policy.
Customer account & orders
Customer account
When opening a customer account, we collect your personal data to the extent specified there. The data processing serves the purpose of improving your shopping experience and simplifying order processing. Processing is based on Art. 6 (1) lit. a GDPR with your consent. You can withdraw your consent at any time by notifying us, without affecting the lawfulness of processing carried out before the withdrawal. Your customer account will then be deleted.
Collection, processing, and transfer of personal data for orders
When placing an order, we collect and process your personal data only insofar as necessary for the fulfilment and processing of your order and handling your inquiries. Providing the data is required for the conclusion of the contract. Failure to provide it will result in no contract being concluded. Processing is based on Art. 6 (1) lit. b GDPR and is necessary for the performance of a contract with you.
Your data may be passed on, for example, to shipping companies and dropshipping providers selected by you, payment service providers, service providers for order processing, and IT service providers. In all cases, we strictly comply with legal requirements. The scope of data transmission is limited to the minimum necessary.
Reviews & advertising
Data collection when writing a comment or review
When commenting/reviewing an article or post, we collect your personal data (name, email address, comment text) only to the extent provided by you. The processing serves the purpose of enabling and displaying comments/reviews.
For the purpose of verifying your review, we also collect the following data: order number.
By submitting the comment/review, you consent to the processing of the transmitted data. Processing is based on Art. 6 (1) lit. a GDPR with your consent. You may withdraw your consent at any time by notifying us, without affecting the lawfulness of processing carried out before the withdrawal. Your personal data will then be deleted.
When publishing your comment, only the name you provided will be published.
Use of your personal data for postal advertising
We use your personal data (name, address) obtained in connection with the sale of goods or services to send you postal advertising, unless you have objected to this use. Providing this data is required for the conclusion of the contract. Failure to provide it will result in no contract being concluded.
Processing is based on Art. 6 (1) lit. f GDPR due to our overriding legitimate interest in direct advertising. You may object to this use of your address data at any time by notifying us. Contact details for exercising your right to object can be found in the legal notice.
Use of email address for newsletter delivery
We use your email address independently of contract processing exclusively for our own advertising purposes for newsletter distribution, provided you have expressly consented. Processing is based on Art. 6 (1) lit. a GDPR with your consent. You may withdraw your consent at any time without affecting the lawfulness of processing carried out before withdrawal. You can unsubscribe at any time using the link provided in the newsletter or by notifying us. Your email address will then be removed from the mailing list.
Your data is passed on to an email marketing service provider as part of order processing. No further transfer to third parties takes place.
Use of email address for direct advertising
We use your email address obtained in connection with the sale of goods or services for electronic advertising of our own goods or services similar to those you have already purchased, unless you have objected. Providing the email address is required for contract conclusion. Failure to provide it will result in no contract being concluded. Processing is based on Art. 6 (1) lit. f GDPR due to our overriding legitimate interest in direct advertising. You may object at any time by notifying us. Contact details can be found in the legal notice. You may also use the link provided in the advertising email. No costs other than transmission costs at basic rates will be incurred.
Use of CleverReach
We use the service of CleverReach GmbH & Co. KG (Schafjückenweg 2, 26180 Rastede; “CleverReach”) for newsletter distribution as part of order processing.
We pass on the information provided during newsletter registration (email address, possibly first and last name) to CleverReach. The data processing serves the purpose of sending newsletters and statistical evaluation.
To evaluate newsletter campaigns, sent newsletters contain a 1x1 pixel tracking image or tracking link. This allows us to determine whether you have opened the newsletter and clicked on integrated links. Conversion tracking allows us to analyse whether, for example, a purchase was made after clicking a link in the newsletter or whether you registered on our website. In this context, we collect personal data such as IP address, browser type and device, and time of access. This data may be used to create pseudonymised user profiles. The data collected is not used to personally identify you and is only used for statistical analysis to improve newsletter campaigns.
Processing is based on Art. 6 (1) lit. f GDPR due to our legitimate interest in a targeted, effective, and user-friendly newsletter system. You have the right to object at any time for reasons arising from your particular situation.
Further information on CleverReach can be found at: www.cleverreach.com/de-de/datenschutz/ and www.cleverreach.com/de-de/newsletter-tool/newsletter-reporting/.
Provider and product reviews
For the purpose of provider and product reviews by our customers and for our own quality management, we have integrated the review software of the independent provider eKomi Ltd., Markgrafenstraße 11, 10969 Berlin (“eKomi”) on our website. Through this software, you can submit an anonymous review of your experience with us and our products after we have provided our service.
After completion of a contract, we will send you an email (possibly via eKomi) asking you to submit a review and providing a link to the relevant review form. For this purpose, personal data is provided to eKomi. You may object to this use of your data at any time. Each email contains a corresponding link for this purpose. Revocation can also be done by email to info@halbe.de.
A data processing agreement has been concluded with eKomi. eKomi takes all organisational and technical measures to protect this data. In accordance with legal retention periods, this data is stored and then deleted. Further information on eKomi’s data protection can be found at www.ekomi.de/de/datenschutz. The legal basis is Art. 6 (1) sentence 1 lit. f GDPR.
During your review via eKomi, you may optionally provide your email address, which allows us to contact you regarding your review. This enables us, for example, to respond to your feedback, answer questions, or provide support. Providing your email address is voluntary and subject to eKomi’s privacy policy. eKomi is solely responsible for the handling of personal data you provide directly to them.
Shipping service providers
Transfer of email address to shipping companies for shipment status information
We pass your email address to the transport company as part of contract processing. This is done to inform you about the shipment status by email. Processing is based on Art. 6 (1) lit. a GDPR with your consent. You may withdraw your consent at any time by notifying us or the transport company, without affecting the lawfulness of processing carried out before withdrawal.
Payment service providers
Use of PayPal Express
We use the PayPal Express payment service provided by PayPal (Europe) S.à.r.l. et Cie, S.C.A. (22-24 Boulevard Royal L-2449, Luxembourg; “PayPal”). The data processing serves the purpose of enabling payment via PayPal Express. To integrate this service, PayPal collects, stores, and analyses data (e.g., IP address, device type, operating system, browser type, location) when you access the website. Cookies may also be used.
Processing is based on Art. 6 (1) lit. f GDPR due to our legitimate interest in offering customer-oriented payment methods. You have the right to object at any time for reasons arising from your particular situation.
By selecting PayPal Express, data required for payment processing is transmitted to PayPal to fulfil the contract. This processing is based on Art. 6 (1) lit. b GDPR. Further information can be found at www.paypal.com/de/webapps/mpp/ua/privacy-full?locale.x=de_DE#Updated_PS.
Use of PayPal Check-Out
We use PayPal Check-Out by PayPal (Europe) S.à.r.l. et Cie, S.C.A. (Luxembourg; “PayPal”). Data processing serves the purpose of enabling payment. When selecting PayPal, credit card via PayPal, direct debit via PayPal, or “Pay Later”, necessary data is transmitted to PayPal to process payment. Processing is based on Art. 6 (1) lit. b GDPR.
Credit card via PayPal, direct debit via PayPal & “Pay Later”
For certain payment methods, PayPal may carry out a credit check based on mathematical-statistical procedures using credit agencies. For this purpose, PayPal transmits necessary personal data to a credit agency and uses the information received to assess payment risk. This may include probability values (score values) calculated using recognised statistical methods, including address data. Processing is based on Art. 6 (1) lit. f GDPR due to our legitimate interest in preventing payment default.
You have the right to object at any time. Providing data is required for contract conclusion with the selected payment method. Without it, the contract cannot be concluded.
Third-party providers
When paying via third-party payment methods, necessary data is transmitted to PayPal. Processing is based on Art. 6 (1) lit. b GDPR. PayPal may then pass data on to the respective provider. Local third-party providers include:
- Sofort (SOFORT GmbH, Theresienhöhe 12, 80339 Munich, Germany)
- giropay (Paydirekt GmbH, Stephanstr. 14-16, 60313 Frankfurt am Main)
Further information can be found at www.paypal.com/de/webapps/mpp/ua/privacy-full.
Cookies
Our website uses cookies. Cookies are small text files stored on your device by your browser. When you visit a website, a cookie may be stored containing a unique identifier that allows recognition of your browser on subsequent visits.
Cookies are stored on your device, so you have full control over their use. You can configure your browser to notify you before cookies are set, decide on acceptance individually, or block cookies entirely. Already stored cookies can be deleted at any time. However, disabling cookies may limit website functionality.
You can find information on managing cookies in major browsers here:
Chrome: https://support.google.com/accounts/answer/61416?hl=de
Microsoft Edge: https://support.microsoft.com/de-de/microsoft-edge/cookies-in-microsoft-edge-lB6schen-63947406-40ac-c3b8-57b9-2a946a29ae09
Internet Explorer: https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies
Mozilla Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
Safari: https://support.apple.com/de-de/guide/safari/manage-cookies-and-website-data-sfri11471/mac
Technically necessary cookies
Unless otherwise stated in this privacy policy, we only use technically necessary cookies to make our website more user-friendly, effective, and secure. Cookies also enable our systems to recognise your browser after a page change and offer services. Some functions cannot be offered without cookies, as the browser must be recognised again after a page change.
The use of cookies or similar technologies is based on Section 25 (2) TTDSG. Processing is based on Art. 6 (1) lit. f GDPR due to our legitimate interest in ensuring optimal functionality and user-friendly design.
You have the right to object at any time for reasons arising from your particular situation.
Use of Consentmanager
We use the consent management tool Consentmanager by Consentmanager AB (Håltegelvägen 1b, 72348 Västerås, Sweden; “Consentmanager”).
The tool enables you to give consent to data processing and cookies and to revoke consent previously given.
The purpose is to obtain and document legally required consents. Cookies may be used. The following data may be collected: date and time of access, browser information, device information, anonymised IP address, opt-in/opt-out data. No transfer to third parties takes place.
Processing is based on Art. 6 (1) lit. c GDPR (legal obligation).
More information: www.consentmanager.net/privacy.php
Advertising tracking
Use of Google Analytics 4
We use Google Analytics by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; “Google”).
Data processing serves the analysis of website usage and marketing purposes. Google evaluates website use on our behalf and provides reports and services.
Collected data may include IP address, timestamps, click path, browser and device information, visited pages, referrer URL, location data, and purchase activity. IP addresses are anonymised within the EU/EEA before transmission.
Cookies and similar technologies are used. Data is generally transferred to the USA. Google is certified under the Trans-Atlantic Data Privacy Framework (TADPF).
Processing is based on consent (Art. 6 (1) lit. a GDPR and § 25 TTDSG). Consent can be withdrawn at any time.
Use of Facebook Pixel
We use Meta Platforms Ireland Limited (“Facebook”) remarketing tools.
We and Meta are joint controllers. The agreement is available at www.facebook.com/legal/controller_addendum.
The tool allows targeted advertising to visitors. Data may be transmitted to the USA (TADPF certified). Processing is based on consent.
Use of Google Ads Conversion Tracking
We use Google Ads conversion tracking. Cookies are set when clicking ads. These allow conversion statistics but no personal identification.
Data may be transferred to the USA (TADPF certified). Processing is based on consent.
Enhanced Conversions (Google Ads)
We use Enhanced Conversions to improve measurement of ad performance. Customer data (e.g. email) is hashed (SHA-256) before transmission. Google matches hashed data for conversion attribution. Processing is based on consent.
Google Remarketing
We use remarketing to show interest-based ads. Cookies analyse usage without identifying users. Data may be transferred to the USA (TADPF certified). Processing is based on consent.
Microsoft Advertising
We use Microsoft Advertising for marketing and conversion tracking. Cookies may be used. Data may be transferred to the USA (TADPF certified). Processing is based on consent.
Plugins and other services
Google Tag Manager
We use Google Tag Manager. It manages tags but does not store cookies or process personal data itself.
Google Maps
We use Google Maps for map display. Data may be transferred to the USA (TADPF certified). Processing is based on consent.
YouTube
We embed YouTube videos in enhanced privacy mode. Data is only transmitted when a video is played. Data may be transferred to the USA (TADPF certified). Processing is based on consent.
Data subject rights and storage duration
Storage duration
After full contract completion, data is stored for warranty periods and legal retention obligations (tax and commercial law) and then deleted unless further use has been consented to.
Rights of data subjects
You have rights under Articles 15–20 GDPR: access, rectification, erasure, restriction of processing, data portability.
You also have the right to object under Art. 21 GDPR.
Right to lodge a complaint
You have the right to lodge a complaint with a supervisory authority under Art. 77 GDPR.
State Commissioner for Data Protection and Freedom of Information Rhineland-Palatinate
Postfach 30 40
55020 Mainz
Tel.: +49 6131 89200
Fax: +49 6131 8920299
Email: poststelle@datenschutz.rlp.de
Right to object
If processing is based on legitimate interest (Art. 6 (1) lit. f GDPR), you may object at any time for reasons arising from your situation.
If you object, processing will be stopped unless compelling legitimate grounds override your interests or processing serves legal claims.
For direct marketing, you may object at any time, after which processing for marketing purposes will stop.
last updated: 06.05.2026