Privacy Statement

We manage our web sites in accordance with the principles set out below:

We undertake to comply with statutory data protection regulations and endeavour always to take into account the principles of data avoidance and data minimisation.

  1. Name and address of the controller and the data protection officer
    1. Controller

      The controller, within the meaning of the General Data Protection Regulation (GDPR) and other national data protection laws of the Member States, as well as other statutory data protection regulations, is:

      AEC Europe GmbH
      Landsberger Str. 98
      80339 München
      Germany
      tel.: +49 89215462511
      e-Mail: info@aeceurope.com
      website: www.aeceurope.com
    2. Data Protection Officer

      The controllers Data Protection Officer:

      SiDIT GmbH, Langgasse 20, 97261 Güntersleben, Germany, info@sidit.deWebsite: https://sidit.de/

  2. Explanation of terms

    We have designed our Privacy Statement in accordance with the principles of clarity and transparency. However, should there be any ambiguity regarding the use of various terms, the corresponding definitions can be found here

  3. Legal basis for processing personal data

    We process your personal data - such as your first and last names, your e-mail address, IP address, etc. - only if there is a legal basis for doing so. The following rules, in particular, come into consideration here, in accordance with the General Data Protection Regulation (GDPR):

    1. Art. 6(1)(a) GDPR: The data subject has given consent to the processing of his or her personal data for one or more specific purposes.
    2. Art. 6(1) (b) GDPR: Processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract.
    3. Art. 6(1) (c) GDPR: Processing is necessary for compliance with a legal obligation to which the controller is subject
    4. Art. 6 (1)(d) GDPR: Processing is necessary in order to protect the vital interests of the data subject or of another natural person
    5. Art. 6(1)(e) GDPR: Processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller
    6. Art. 6(1)(f) GDPR: Processing is necessary for the purpose of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child.

    However, we will always inform you at the appropriate points in this Privacy Statement of the legal basis on which your personal data are being processed.

  4. Disclosure of personal data

    Where personal data are disclosed, processing is also carried out within the meaning of section 3, above. At this point, however, we would like to inform you separately about disclosure of data to third parties. The protection of your personal data is particularly important to us. For this reason, we are especially careful when disclosing your data to third parties.

    Data is only disclosed to third parties if there is a legal basis for the processing. For example, we disclose personal data to persons or companies acting as processors on our behalf, pursuant to Art. 28 GDPR. A processor is anyone who processes personal data on our behalf, in particular under our instruction and control.

    In accordance with the requirements of the GDPR, we conclude a contract with each of our processors in order to ensure that they comply with data protection regulations, thus providing comprehensive protection for your data.

  5. Storage period and erasure

    We will erase your personal data once those data are no longer necessary for the purposes for which they were collected or otherwise processed, and where the processing is not necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise or defence of legal claims.

  6. SSL encryption

    This site uses SSL encryption for security reasons and to safeguard the transfer of confidential content, such as any requests you send to us as the operators of the site. An encrypted connection can be identified by the change in the address from “http://” to “https://” and by the padlock symbol in your browser’s address bar.

    With SSL encryption activated, the data which you transfer to us cannot be read by third parties.

  7. Cookies

    We use cookies on our website. Cookies are small data packets created automatically by your browser and stored on your client device when you visit our website. These cookies are used to store information about the client device being used.

    When cookies are used, a distinction is made between technically necessary cookies and “other” cookies. Cookies are said to be technically necessary if they are essential for providing an information society service which you have expressly requested.

    1. Session Cookies

      In order to make the use of our services more convenient for you, we use what are known as session cookies (e.g. language and font selection, shopping basket, etc.). These session cookies come under the category of technically necessary cookies and are automatically deleted after you have left our site. The legal basis for the cookies derives from Art. 6(1)(c) GDPR, a legal permission.

    2. Other cookies

      Other cookies include cookies for statistical, analysis, marketing and retargeting purposes.

      We use these cookies either based on a justified interest in accordance with Art. 6 (1) (f) DSGVO to improve and optimize our offers or with your consent in accordance with Art. 6 (1) (a) DSGVO.

      If we use cookies based on legitimate interest, you can object to their further use in the future at any time.

      You can withdraw your consent to the use of cookies at any time. We would like to inform you that the revocation of your consent does not affect the legality of the processing that has taken place on the basis of your consent until the revocation.

      For this purpose, you can either edit your cookie settings on our website, deactivate the use of cookies in your browser settings (whereby the functionality of the online offer can also be limited) or, in individual cases, set an opt-out for the corresponding service.

      You can also declare your objection to the use of cookies for marketing purposes via the EU website http://www.youronlinechoices.com/ or generally at http://optout.aboutads.info.

      We will point out the legal basis on which this data is processed for the respective services within the data protection declaration.

      Change cookie settings

  8. Collection and storage of personal data, their type and intended purpose
    1. When visiting the website

      When you access our website, information is automatically sent to our web server by the browser being used on your client device. This information is stored temporarily in what is known as a log file. The following information is recorded without any action on your part and stored until it is automatically erased:

      1. the IP address of the computer making the request,
      2. the date and time of access,
      3. the name and URL of the requested file,
      4. the website from which the site is accessed (referrer URL),
      5. the browser used, and if applicable, your computer’s operating system and the name of your access provider.

      We process the above-mentioned data for the following purposes:

      1. to ensure the connection to the website is established smoothly,
      2. to ensure that our website is convenient to use,
      3. for evaluation of system security and stability, and
      4. for other administrative purposes.

      Data which permit you to be identified as an individual, such as the IP address, will be erased after 7 days at the latest. Any data we store beyond this period will be pseudonymised, so that they can no longer be associated with you.

      The legal basis for the data processing is Art. 6(1)(f) GDPR. Our legitimate interest derives from the data collection purposes listed above. Under no circumstances do we use the data collected for the purpose of identifying you as an individual.

    2. Contractual relationship
      1. Conclusion of contract

        In establishing the contractual relationship, and pursuant to Art. 6 (1)(b) GDPR, the only mandatory data (indicated by an asterisk) are those personal data which are essential for the performance of the contract.

        Any additional data you may choose to provide will only be processed on the basis of the consent you have given in accordance with Art. 6(1)(a) GDPR1. We use these optional data for the purpose of providing a customer-friendly service and continuously improving that service.

        For the purpose of dispatching our goods, we pass on the necessary data (name, address, e-mail address, telephone number, where these are required for shipping) to the appropriate shipping provider for notification/coordination of shipping and delivery of the goods.

      2. Customer account

        You have the option of creating a customer account with us. For this purpose, in addition to your personal data for performance of the contract, we will also store and process any additional data you may choose to provide, as well as data on any previous purchases you have made from us. You may access these at any time and thus obtain an overview of the purchases you have made from us. These data enable you to log in simply by using your login details when making your next purchase. They are also intended to help you manage your purchasing activities.

        The legal basis derives from the consent you have given, in accordance with Art. 6 (1)(a) GDPR.

        You have the option to amend or delete the data in your customer account at any time, or to delete your account altogether. If you make use of this functionality, your customer account and all the data contained within it will be deleted immediately.

      3. Forwarding of data for dispatch purposes

        For the purpose of dispatching our goods, we pass on the necessary data (name, address, e-mail address, telephone number, where these are required for shipping) to the appropriate shipping provider for notification/coordination of shipping and delivery of the goods.

        The legal basis for the transfer derives from Art. 6 (1)(b) GDPR.

        Your data is given to the following shipping service provider:

        TNT

        TNT Express GmbH, Haberstraße 2, 53842 Troisdorf, Germany, tel.: +49 (0) 2241 497 0, fax: +49 (0) 2241 497 6665, e-Mail: info@tnt.de; www.tnt.com/express/de_de/site/privacy-policy.html#

        Yusen Logistics Benelux

        Keetberglaan 1, 9102 Melsele, Belgium, tel.: +32 (0) 3 570 69 11, e-Mail: info@bnl.yusen-logistics.com; https://www.yusen-logistics.com/en/privacy-policy

      4. Transfer of data when using online payment service providers

        If, in the course of the order process, you opt for payment via one of the online service providers we offer, your contact details will be transferred to that service provider in the context of the order in question.

        Personal data transferred to the online payment service provider usually include first name, last name, address, telephone number, IP address, e-mail address, or other data required for order processing, as well as data relating to the order, such as the number of articles, part numbers, invoice amount, taxes as percentages, invoice information etc.

        This transfer is required to process your order using the payment method you selected, and in particular to confirm your identity and administer your payment, and for purposes of customer relations.

        Please note, however: Personal data may also be passed on by the online payment service provider to other service providers, subcontractors or affiliated companies, where this is necessary to fulfil the contractual obligations arising from your order, or where the personal data are to be processed on its behalf.

        Depending on the payment method selected via PayPal - for example, invoice or direct debit - the personal data transferred to PayPal are passed on by PayPal to credit agencies. The purpose of this transfer is to verify your identity and check your credit with regard to the order you have placed. You can find out which credit agencies are involved, and which data are generally collected, processed, stored and transferred by the provider in question, in the respective providers’ privacy statements:

        PayPal

        PayPal (Europe) S.à.r.l. & Cie. S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg, at www.paypal.com/de/webapps/mpp/ua/privacy-full

        Sofort Überweisung

        SOFORT GmbH, Theresienhöhe 12, 80339 Munich, GermanyIf you have further questions regarding the use of your personal data, you can contact Sofort Überweisung by e-Mail (datenschutz@sofort.com) or in writing (SOFORT GmbH, Datenschutz, Theresienhöhe 12, 80339 Munich).

        Adyen

        Adyen N.V. German Branch, Friedrichstraße 63, 10117 Berlin, Germany, at

    3. Newsletter

      Content of the newsletter and registration data

      We will only send you a newsletter if you have ordered this from us and provided your consent in accordance with Art. 6 (1) (a) GDPR. The contents of the newsletter are specifically described during registration. To register for a newsletter, we require your e-mail address. If you choose to provide additional data, these will be used solely to personalise the newsletter we send you.

      Double-Opt-In and logging

      For security reasons, we use the double opt-in procedure to register for our newsletter so that no one can register with other people's e-mail addresses. Therefore, after you have registered for our newsletter, you will first receive an e-mail asking you to confirm your registration. Only with the confirmation of the registration it becomes effective.

      Furthermore, your registration for the newsletter will be logged. The logging includes the storage of the registration and confirmation time, your specified data and your IP address. If you make changes to your data, these changes will also be logged.

      Withdrawal of consent

      If you no longer wish to receive the newsletter, you may withdraw your consent at any time with future effect. To do this, you can click on the unsubscribe link at the end of each newsletter or send us an e-mail at the following e-mail address: parts@aeceurope.com

      The withdrawal of consent does not affect the lawfulness of processing carried out based on consent before its withdrawal.

      Application of Campaign Monitor

      We send our newsletter using the newsletter service "Campaign Monitor", which is operated by Campaign Monitor Pty Ltd (404/3-5 Stapleton Ave, Sutherland NSW 2232, Sydney, Australia).

      Campaign Monitor provides extensive analytics on how newsletters are opened and used. These analyses are group-related and are not used by us to evaluate individual newsletter recipients.

      Furthermore, Campaign Monitor may, according to its own information, use this data in pseudonymous form, i.e. without attribution to a user, to optimise or improve its own services, e.g. to technically optimise the dispatch and presentation of the newsletters or for statistical purposes to determine which countries the recipients come from. However, the dispatch service provider does not use the data of our newsletter recipients to write to them itself or to pass it on to third parties.

      You can find Campaign Monitor's privacy policy here: [http://www.campaignmonitor.com/privacy].

      Statistical surveys and analyses

      The newsletters sent via Campaign Monitor contain a so-called "web beacon", i.e. a pixel-sized file which is retrieved from the server of the dispatch service provider when the newsletter is opened. Within the scope of this retrieval, technical information, such as information on the browser and your system, as well as your IP address and the time of the retrieval are initially collected.

      This information is used for the technical improvement of the services on the basis of the technical data or the target groups and their reading behaviour on the basis of their retrieval locations (which can be determined with the help of the IP address) or the access times.

      Statistical surveys also include determining whether newsletters are opened, when they are opened and which links are clicked. For technical reasons, this information can be assigned to the individual newsletter recipients. However, it is neither our intention nor that of Campaign Monitor to monitor individual users. The analyses serve us much more to recognise the reading habits of our users and to adapt our content to them or to send different content according to the interests of our users.

      The use of the newsletter service Campaign Monitor, as well as the performance of statistical surveys and analyses and logging of the registration process, are based on our legitimate interests pursuant to Art. 6 (1)(f) GDPR. We are interested in the use of a user-friendly and secure newsletter system that serves our business interests and meets the expectations of users.

  9. Rights of the Data Subject

    You shall have the following rights:

    1. Right of access

      Pursuant to Art. 15 GDPR, you shall have the right to request information about your personal data being processed by us. This right of access includes the following information:

      1. the purposes of the processing
      2. the categories of the personal data
      3. the recipients or categories of recipient to whom your data have been or will be disclosed
      4. the envisaged data storage period, or at least the criteria used to determine that period
      5. the existence of the right to rectification, erasure, restriction of processing or objection
      6. the existence of the right to lodge a complaint with a supervisory authority
      7. the source of your personal data, where they were not collected by us
      8. the existence of automated decision-making, including profiling, and where appropriate, meaningful information about the logic involved.
    2. Right to rectification

      In accordance with Art. 16 GDPR, you shall have the right to obtain from us without undue delay the rectification of inaccurate or incomplete personal data stored by us.

    3. Erasure

      In accordance with Art. 17 GDPR, you shall have the right to obtain from us without undue delay the erasure of your personal data stored by us, unless further processing is required for one of the following reasons:

      1. the personal data are still necessary for the purposes for which they were collected or otherwise processed;
      2. to exercise the right of freedom of expression and information;
      3. for compliance with a legal obligation which requires processing under Union or Member State law to which the controller is subject, or for the performance of a task carried out in the public interest, or in the exercise of official authority vested in the controller;
      4. for reasons of public interest in the area of public health pursuant to Art. 9(2)(h) and (i) and Art. 9(3) GDPR;
      5. for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes pursuant to Art. 89(1) GDPR, to the extent that the right referenced in a) is likely to render impossible or seriously impair the achievement of the objectives of that data processing, or
      6. for the establishment, exercise or defence of legal claims.
    4. Right to restriction of processing

      Pursuant to Art. 18 GDPR, you may request the restriction of processing of your personal data, for one of the following reasons:

      1. You contest the accuracy of your personal data.
      2. The processing is unlawful, and you oppose the erasure of your personal data.
      3. We no longer require the personal data for the purposes of the processing, but you require them for the establishment, exercise or defence of legal claims.
      4. You object to processing pursuant to Art. 21(1) GDPR.
    5. Notification obligation

      If you have requested rectification or erasure of your personal data or restriction of processing in accordance with Art.16, Art.17(1) and Art.18, we shall notify all recipients to whom your personal data have been disclosed, unless this proves impossible or involves disproportionate effort. You may request that we inform you about those recipients.

    6. Right to data portability

      You shall have the right to obtain the personal data which you have provided to us in a structured, commonly used and machine-readable format.

      You shall also have the right to request the transfer of these data to a third party, provided that processing was carried out by automated means and based on your consent pursuant toArt. 6(1)(1)(a) or Art. 9(2)(a) or for the performance of a contract pursuant to Art. 6(1)(1)(b) GDPR.

    7. Withdrawal of consent

      Pursuant to Art. 7(3) GDPR, you shall have the right at any time to withdraw consent you have previously granted to us. The withdrawal of consent shall not affect the lawfulness of processing carried out based on consent before its withdrawal. We may not carry out any further processing based on your consent, once you have withdrawn it.

    8. Right to lodge a complaint

      Pursuant to Art. 77 GDPR, you shall have the right to lodge a complaint with a supervisory authority if you believe that the processing of your personal data is contrary to the GDPR.

    9. Right to object

      Where your personal data are processed based on legitimate interests pursuant to Art. 6(1)(1)(f) GDPR, you shall have the right pursuant to Art. 21 GDPR to object to the processing of your personal data on grounds relating to your particular situation, or if you object to processing for direct marketing purposes. In the latter case, you shall have a general right to object which we shall implement without the need for your particular situation to be specified. You may exercise your right to object or to withdraw consent simply by sending an e-mail to parts@aeceurope.com

    10. Automated individual decision-making, including profiling

      You shall have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you. This right shall not apply if the decision:

      1. is necessary for entering into, or for the performance of, a contract between you and us,
      2. is authorised by Union or Member State law to which we are subject, and which also lays down suitable measures to safeguard your rights and freedoms and legitimate interests, or
      3. is based on your explicit consent.

      However, such decisions shall not be based on special categories of personal data referred to in Art. 9(1) GDPR, unless Art. 9(2)(a) or (g) GDPR applies and suitable measures to safeguard your rights and freedoms and legitimate interests are in place.

      In the cases referred to in a) and c), we shall implement suitable measures to safeguard your rights and freedoms and legitimate interests, including at least the right to obtain human intervention on our part, to express your point of view, and to contest the decision.

  10. Amendment of the Privacy Statement

    If we amend the Privacy Statement, this will be indicated on the homepage and registered customers will be informed by e-mail.

    Version of April 2021