Privacy policy

Controller

R.O.N.A.X GmbH, Universitätsstraße 60, 44789 Bochum, Deutschland, e-mail: info@original-carparts.com.

What data we process

For the customer account: name, firm, address, e-mail, phone, the staff sign-ins, orders, returns and invoices. The legal basis is the performance of the contract (Art. 6(1)(b) GDPR).

When the website is opened: IP address, time and the address opened in the server logs, which are deleted after 30 days; sign-in attempts with the IP address, to protect accounts against guessed passwords, are deleted after 90 days (Art. 6(1)(f) GDPR). Counters of price queries per IP address or account are deleted after 2 days, reports of the browser about blocked content (only the addresses, without the IP address) after 7 days.

Cookies and browser storage

Necessary (always on; Art. 6(1)(b) and (f) GDPR, § 25(2) TDDDG): the session cookie after sign-in, on request a cookie to stay signed in, the session cookie of the administration for our staff and the protection of forms. The browser storage keeps the cart, the chosen look and language, table settings in the customer account, a note that you are signed in, for the visit the id of the chat, and your choice in the cookie settings with its date and version.

Statistics and marketing (only with your consent; Art. 6(1)(a) GDPR, § 25(1) TDDDG): both are off until you agree. At present we use no such service. Before we use one, we name it here with its operator, purpose, storage period and recipients; it is loaded only after your consent.

At the end of every page, «Cookie settings» lets you change or withdraw the choice at any time. The withdrawal applies from that moment.

Country and language

Which contact details the website shows depends on the chosen language or country page. We do not work out a location from the IP address.

Recipients

We process the customer account, orders and documents in our merchandise management system (MEM) on our own server. The website is hosted by IONOS; IONOS processes the data on our behalf (Art. 28 GDPR). The chat of the website is run by Genum on a server of Hetzner Online GmbH in Nuremberg (Germany); it receives your message and, when you are signed in, instead of your customer number only a check value computed from it. The e-mails of the site come from the address noreply@original-carparts.com; they are sent through IONOS SE. For shipping we pass the necessary details to the shipping company we engage.

Address suggestions during registration (Google Places)

In the registration form we suggest matching addresses while you enter your business address. For this we use the Google Places service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The service is only loaded when you click into the street field. The text of the address you enter, your IP address and technical information about your browser are then transmitted to Google. If you choose a suggestion, we store for the registration the address, its parts as Google provides them and the identifier of the place (Place ID). Without a choice you enter the address by hand.

The legal basis is Art. 6(1)(b) GDPR (pre-contractual measures and performance of a contract: a verified, deliverable business address is a prerequisite for the customer account). A transfer to Google LLC in the USA is possible; it takes place on the basis of the EU-US Data Privacy Framework or the standard contractual clauses of the European Commission. Further information: https://policies.google.com/privacy

How long we keep data

We keep data as long as the customer account exists, and after that as long as statutory retention periods require.

Your rights

You have the right of access, rectification, erasure, restriction of processing, data portability and objection. Write to info@original-carparts.com. You can complain to a data protection supervisory authority.