{"id":293,"date":"2023-03-19T19:42:09","date_gmt":"2023-03-19T18:42:09","guid":{"rendered":"https:\/\/www.ab-smarthouse.com\/?page_id=293"},"modified":"2026-08-08T20:21:03","modified_gmt":"2026-08-08T18:21:03","slug":"datenschutzerklaerung","status":"publish","type":"page","link":"https:\/\/www.ab-smarthouse.com\/en\/datenschutzerklaerung\/","title":{"rendered":"Privacy Policy"},"content":{"rendered":"<h2>1. Responsible person<\/h2>\n<p>The controller within the meaning of the General Data Protection Regulation (GDPR) is:<\/p>\n<p>AB-Tools GmbH<br \/>\nMarsstra\u00dfe 78<br \/>\n80335 Munich<br \/>\nGermany<\/p>\n<p>Telephone: +49 89 38898588<br \/>\nFax: +49 89 38898589<br \/>\nEmail: info@ab-smarthouse.com<\/p>\n<p>Represented by the Managing Director: Andreas Breitschopp<br \/>\nCommercial Register: HRB 202859, Munich Local Court<br \/>\nVAT ID No.: DE268720895<\/p>\n<h2>2. General information on data processing<\/h2>\n<h3>2.1 Scope of processing<\/h3>\n<p>We generally only process personal data of our users to the extent necessary for the provision of a functional website and our content and services, where consent has been given or where a legal basis permits the processing.<\/p>\n<h3>2.2 Legal basis<\/h3>\n<p>Depending on the processing, we rely on:<\/p>\n<ul>\n<li><strong>Article 6 paragraph 1 letter a GDPR<\/strong> \u2014 Consent (e.g., optional cookies, analytics)<\/li>\n<li><strong>Article 6 paragraph 1 letter b GDPR<\/strong> \u2014 Contract fulfillment and pre-contractual measures (order processing, customer account)<\/li>\n<li><strong>Article 6 paragraph 1 letter c GDPR<\/strong> \u2014 legal obligation (commercial and tax law retention)<\/li>\n<li><strong>Article 6 paragraph 1 letter f GDPR<\/strong> \u2014 legitimate interests (IT security, technical operation, prevention of misuse)<\/li>\n<\/ul>\n<p>The following also applies to consents: <strong>Section 25 Paragraph 1 TDDDG<\/strong> for storing information on or accessing information in the user&#039;s terminal equipment; we base technically necessary processes on Section 25 Paragraph 2 No. 2 TDDDG.<\/p>\n<h3>2.3 Deletion and storage period<\/h3>\n<p>Personal data will be deleted or blocked as soon as the purpose for which it was stored no longer applies. Data will be stored beyond this point if there are legal retention obligations \u2013 in particular\u2026 <strong>10 years<\/strong> for booking documents and invoices (\u00a7 147 AO, \u00a7 257 HGB) and <strong>6 years<\/strong> For received and sent commercial or business letters. Data processing will be restricted for this period.<\/p>\n<h2>3. Provision of the website and server log files<\/h2>\n<p>When you access our website, the server automatically collects information that your browser transmits (server log files):<\/p>\n<ul>\n<li>IP address<\/li>\n<li>Date and time of access<\/li>\n<li>Name and URL of the retrieved file<\/li>\n<li>Referrer URL<\/li>\n<li>browser and operating system used<\/li>\n<li>Amount of data transferred and access status<\/li>\n<\/ul>\n<p><strong>Purpose:<\/strong> Ensuring a trouble-free connection setup, comfortable use, evaluation of system security and stability.<br \/>\n<strong>Legal basis:<\/strong> Article 6 paragraph 1 letter f GDPR (legitimate interest in technically flawless and secure operation).<br \/>\n<strong>Storage duration:<\/strong> 14 days.<\/p>\n<h3>Hosting<\/h3>\n<p>Our website is hosted by an external service provider:<\/p>\n<p>AB-Soft GmbH, Marsstra\u00dfe 78, 80335 Munich, Germany<\/p>\n<p>The provider processes the aforementioned data on our behalf. We have an agreement with them. <strong>Data processing agreement pursuant to Article 28 GDPR<\/strong>.<\/p>\n<h3>Encryption<\/h3>\n<p>This website uses SSL\/TLS encryption for security reasons. You can recognize an encrypted connection by the following:\u201e<a href=\"https:\/\/\"\" target=\"_blank\" rel=\"noopener\">https:\/\/\u201c<\/a> in the address bar of your browser.<\/p>\n<h2>4. Cookies and consent management<\/h2>\n<h3>4.1 Cookies<\/h3>\n<p>We use cookies and similar technologies. Technically necessary cookies (e.g., shopping cart, session management, saving your cookie preferences) are set on the basis of Section 25 Paragraph 2 No. 2 of the German Telemedia Act (TMG) or Article 6 Paragraph 1 Letter f of the GDPR. All other cookies are only set with your consent.<\/p>\n<p>The necessary cookies used by our shop system (WooCommerce) include in particular <code>woocommerce_cart_hash<\/code>, <code>woocommerce_items_in_cart<\/code> and <code>wp_woocommerce_session_*<\/code> for shopping cart and session management.<\/p>\n<h3>4.2 Consent management with CookieYes<\/h3>\n<p>We use the consent management tool to obtain and manage your consents. <strong>CookieYes<\/strong> of the provider CookieYes Limited, 3 Warple Mews, Ealing, London, W3 0RF, United Kingdom.<\/p>\n<p>When you access the website, a script is loaded from a server of the provider; in doing so, your <strong>IP address<\/strong> transferred. CookieYes stores your consent decision in a cookie (<code>cookieyes-consent<\/code>), in order to take these preferences into account on future visits. In particular, a pseudonymous consent identifier, the selected cookie categories, and the time of consent are recorded.<\/p>\n<p><strong>Purpose:<\/strong> Fulfillment of the legal obligation to obtain and document consents.<br \/>\n<strong>Legal basis:<\/strong> Article 6 paragraph 1 letter c GDPR in conjunction with Article 7 paragraph 1 GDPR (obligation to provide evidence) and Article 6 paragraph 1 letter f GDPR.<br \/>\n<strong>Third country transfer:<\/strong> The United Kingdom has an adequacy decision from the EU Commission.<\/p>\n<p>You can change or withdraw your consent at any time with effect for the future via the cookie settings on our website.<\/p>\n<h2>5. Order processing in the online shop<\/h2>\n<h3>5.1 Orders<\/h3>\n<p>When you place an order, we collect the data required for processing the contract:<\/p>\n<ul>\n<li>First and Last Name<\/li>\n<li>Billing and delivery address<\/li>\n<li>E-mail address<\/li>\n<li>Phone number (if applicable)<\/li>\n<li>Order and payment details<\/li>\n<li>Company name and VAT ID number (if applicable).<\/li>\n<\/ul>\n<p><strong>Purpose:<\/strong> Processing of the purchase contract, delivery, invoicing, customer communication, handling of warranty and cancellation cases.<br \/>\n<strong>Legal basis:<\/strong> Article 6 paragraph 1 letter b GDPR; for storage additionally Article 6 paragraph 1 letter c GDPR.<br \/>\n<strong>Recipient:<\/strong> Payment service providers, shipping service providers, tax advisors and IT service providers as data processors (see below).<\/p>\n<p>The shop system <strong>WooCommerce<\/strong> It is operated on our own web space; the order data is stored in the database of our website.<\/p>\n<h3>5.2 Customer account<\/h3>\n<p>You can create a customer account. The data you provide will be stored until you delete your account. Registration is voluntary; orders can also be placed as a guest.<br \/>\n<strong>Legal basis:<\/strong> Article 6 paragraph 1 letter b GDPR.<br \/>\nAfter the account is deleted, data will be retained to the extent that legal retention obligations exist (see section 2.3).<\/p>\n<h3>5.3 Payment processing via PayPal<\/h3>\n<p>For payment processing \u2014 both for payments via a PayPal account and for card payments \u2014 we use the service <strong>PayPal<\/strong> PayPal (Europe) S.\u00e0 rl et Cie, SCA, 22-24 Boulevard Royal, L-2449 Luxembourg.<\/p>\n<p>When selecting this payment method, the data required for payment processing (including name, address, email address, invoice amount, order details, IP address) will be transmitted to PayPal. <strong>You enter your card details directly at PayPal; we do not receive or process complete card data.<\/strong><\/p>\n<p><strong>Purpose:<\/strong> Payment processing, fraud prevention.<br \/>\n<strong>Legal basis:<\/strong> Article 6 paragraph 1 letter b GDPR (contractual performance); insofar as PayPal processes data for its own purposes (e.g. credit check, fraud prevention), this is done under PayPal&#039;s own responsibility.<br \/>\n<strong>Third country transfer:<\/strong> PayPal may transfer data to affiliated companies, including those in the USA.<\/p>\n<p>Further information: <a href=\"https:\/\/www.paypal.com\/de\/webapps\/mpp\/ua\/privacy-full\" target=\"_blank\" rel=\"noopener\">https:\/\/www.paypal.com\/de\/webapps\/mpp\/ua\/privacy-full<\/a><\/p>\n<h3>5.4 Shipping<\/h3>\n<p>For the purpose of delivering the goods, we will forward your address details and, if applicable, your email address\/telephone number (for shipment notifications) to the commissioned shipping service provider:<\/p>\n<p>Deutsche Post AG, Charles-de-Gaulle-Stra\u00dfe 20, 53113 Bonn, Germany<br \/>\nDHL Paket GmbH, Charles-de-Gaulle-Stra\u00dfe 20, 53113 Bonn, Germany<br \/>\nHermes Europe GmbH, Essener Bogen 1, 22419 Hamburg, Germany<br \/>\nFedEx Express Deutschland GmbH, Haberstra\u00dfe 2, 53842 Troisdorf, Germany<\/p>\n<p><strong>Legal basis:<\/strong> Article 6 paragraph 1 letter b GDPR. The transfer of your email address\/telephone number for the purpose of shipment notification will only take place if you have consented to this or if it is necessary for the performance of the contract.<\/p>\n<h3>5.5 Tax reporting obligations (One-stop shop)<\/h3>\n<p>For cross-border deliveries within the EU, we process order and sales data to fulfill VAT reporting and record-keeping obligations (OSS procedure).<br \/>\n<strong>Legal basis:<\/strong> Article 6 paragraph 1 letter c GDPR.<\/p>\n<h2>6. Making contact<\/h2>\n<h3>6.1 Contact form<\/h3>\n<p>Our website includes a contact form (using the &quot;WPForms&quot; plugin). The data you enter there (including your name, email address, and message text) will be processed to handle your request and sent to us via email.<\/p>\n<p><strong>Purpose:<\/strong> Processing the request.<br \/>\n<strong>Legal basis:<\/strong> Article 6 paragraph 1 letter b GDPR, insofar as the request relates to a contract, otherwise Article 6 paragraph 1 letter f GDPR (legitimate interest in answering requests).<br \/>\n<strong>Storage duration:<\/strong> Until your request has been fully processed, provided there are no legal retention obligations to the contrary.<\/p>\n<h3>6.2 Contact via email, telephone or fax<\/h3>\n<p>When you contact us by email, telephone, or fax, we process the data you provide to handle your request. The legal basis and storage period are set out in section 6.1.<\/p>\n<h3>6.3 Email sending and logging<\/h3>\n<p>We use an SMTP service for sending system and order emails:<\/p>\n<p>AB-Soft GmbH, Marsstra\u00dfe 78, 80335 Munich, Germany<\/p>\n<h2>7. Web analytics: Google Analytics 4<\/h2>\n<p>This website uses <strong>Google Analytics 4<\/strong>, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (\u201eGoogle\u201c).<\/p>\n<h3>Use with Google Consent Mode v2<\/h3>\n<p>We use Google Analytics with the so-called <strong>Consent Mode v2<\/strong> a:<\/p>\n<ul>\n<li><strong>Without your consent<\/strong> become <strong>No cookies set<\/strong> and no persistent identifiers are processed. Only cookieless, aggregated signals (&quot;cookieless pings&quot;) are transmitted to Google; your <strong>IP address processed<\/strong> and used by Google for statistical modeling. Your device will not be recognized.<\/li>\n<li><strong>With your consent<\/strong> Additional cookies (among others) will be used. <code>_ga<\/code>, <code>_ga_<\/code>) set and usage data (including pages visited, time spent, referrer, shortened IP address, device information) is transmitted to Google in pseudonymized form.<\/li>\n<\/ul>\n<p><strong>Purpose:<\/strong> Statistical analysis of website usage for the purpose of tailoring our services to meet user needs and continuously optimizing them.<br \/>\n<strong>Legal basis:<\/strong> Article 6 paragraph 1 letter a GDPR and Section 25 paragraph 1 TDDDG (consent) for the use of cookies and the analysis based thereon.<br \/>\n<strong>Storage duration:<\/strong> The retention period for usage data at the user and event level is set out on <strong>14 months<\/strong> set.<br \/>\n<strong>Third country transfer:<\/strong> Data may be transferred to Google LLC in the USA. Google LLC is subject to the <strong>EU-US Data Privacy Framework<\/strong> Certified; the framework has an adequacy decision from the EU Commission. In addition, Google has concluded standard contractual clauses.<\/p>\n<p>You can withdraw your consent at any time via the cookie settings. Additionally, you can prevent tracking by Google&#039;s browser add-on: <a href=\"https:\/\/tools.google.com\/dlpage\/gaoptout\" target=\"_blank\" rel=\"noopener\">https:\/\/tools.google.com\/dlpage\/gaoptout<\/a><\/p>\n<p>Further information: <a href=\"https:\/\/policies.google.com\/privacy\" target=\"_blank\" rel=\"noopener\">https:\/\/policies.google.com\/privacy<\/a><\/p>\n<h2>8. Safety measures<\/h2>\n<h3>8.1 Protection against login attempts<\/h3>\n<p>To protect against automated attacks on the login area, we use a protection function that logs failed login attempts and temporarily blocks IP addresses in case of repeated failed attempts (plugin \u201eLimit Login Attempts Reloaded\u201c).<br \/>\n<strong>Legal basis:<\/strong> Article 6 paragraph 1 letter f GDPR (legitimate interest in IT security).<br \/>\n<strong>Storage duration:<\/strong> 3 months.<\/p>\n<h3>8.2 Spam protection<\/h3>\n<p>To protect against spam, we use &quot;Antispam Bee&quot;. The check is performed locally on our server; no data is transmitted to third parties.<br \/>\n<strong>Legal basis:<\/strong> Article 6 paragraph 1 letter f GDPR.<\/p>\n<h3>8.3 Data backups<\/h3>\n<p>To protect against data loss, we create regular backups of the website, including the database (plugin &quot;UpdraftPlus&quot;).<br \/>\n<strong>Backup storage location:<\/strong> Own server.<br \/>\n<strong>Legal basis:<\/strong> Article 6 paragraph 1 letter f GDPR, Article 32 GDPR.<\/p>\n<h3>8.4 Other local functions without data transmission<\/h3>\n<p>The following functions are performed entirely on our own server; no data is transferred to third parties. <strong>not<\/strong> instead of:<\/p>\n<ul>\n<li><strong>Fonts:<\/strong> The fonts used (Poppins) are delivered locally from our server. No connection to Google Fonts servers is established. <strong>not<\/strong> instead of.<\/li>\n<li><strong>Multilingualism:<\/strong> The translation is done using the locally installed plugin &quot;TranslatePress&quot;.<\/li>\n<li><strong>Page cache:<\/strong> To speed up delivery, static copies of pages are cached on our server (plugin &quot;Cache Enabler&quot;).<\/li>\n<\/ul>\n<h2>9. Recipients and processors<\/h2>\n<p>We only disclose personal data to the extent necessary for the performance of the contract, if you have given your consent, or if there is a legal obligation to do so. Categories of recipients are:<\/p>\n<ul>\n<li>Hosting and IT service providers<\/li>\n<li>Payment service provider<\/li>\n<li>Shipping service provider<\/li>\n<li>Tax consulting and auditing<\/li>\n<li>Authorities within the framework of legal obligations<\/li>\n<\/ul>\n<p>We have concluded data processing agreements with service providers who process data on our behalf in accordance with Article 28 GDPR.<\/p>\n<h2>10. Your rights as a data subject<\/h2>\n<p>You have the following rights with regard to your personal data:<\/p>\n<ul>\n<li><strong>Information<\/strong> (Article 15 GDPR)<\/li>\n<li><strong>Correction<\/strong> (Article 16 GDPR)<\/li>\n<li><strong>deletion<\/strong> (Article 17 GDPR)<\/li>\n<li><strong>Restriction of processing<\/strong> (Article 18 GDPR)<\/li>\n<li><strong>Data portability<\/strong> (Article 20 GDPR)<\/li>\n<li><strong>Revocation of granted consent<\/strong> with effect for the future (Art. 7 para. 3 GDPR)<\/li>\n<\/ul>\n<h3>Right to object (Art. 21 GDPR)<\/h3>\n<p><strong>If we process your personal data based on legitimate interests (Art. 6 para. 1 lit. f GDPR), you have the right to object to this processing at any time on grounds relating to your particular situation. If your data is processed for direct marketing purposes, you have the right to object at any time without giving reasons.<\/strong><\/p>\n<p>To exercise your rights, simply send an informal notification to the contact details listed under point 1.<\/p>\n<h3>Right to lodge a complaint with the supervisory authority<\/h3>\n<p>You have the right to lodge a complaint with a data protection supervisory authority regarding the processing of your personal data. The supervisory authority responsible for us is:<\/p>\n<p>Bavarian State Office for Data Protection Supervision (BayLDA)<br \/>\nPromenade 18<br \/>\n91522 Ansbach<br \/>\nGermany<\/p>\n<h2>11. No automated decision-making<\/h2>\n<p>Automated decision-making, including profiling as defined in Article 22 of the GDPR, does not take place.<\/p>\n<h2>12. Changes to this Privacy Policy<\/h2>\n<p>We reserve the right to amend this privacy policy to ensure it always complies with current legal requirements or to reflect changes to our services. The current version will apply to your next visit.<\/p>\n<hr>\n<p><em>As of August 8, 2026<\/em><\/p>\n<div style=\"height:100px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>","protected":false},"excerpt":{"rendered":"<p>1. Verantwortlicher Verantwortlicher im Sinne der Datenschutz-Grundverordnung (DSGVO) ist: AB-Tools GmbH Marsstra\u00dfe 78 80335 M\u00fcnchen Deutschland Telefon: +49 89 38898588 Telefax: +49 89 38898589 E-Mail: info@ab-smarthouse.com Vertreten durch den Gesch\u00e4ftsf\u00fchrer: Andreas Breitschopp Handelsregister: HRB 202859, Amtsgericht M\u00fcnchen USt-IdNr.: DE268720895 2. Allgemeines zur Datenverarbeitung 2.1 Umfang der Verarbeitung Wir verarbeiten personenbezogene Daten unserer Nutzer grunds\u00e4tzlich nur,&hellip;&nbsp;<a href=\"https:\/\/www.ab-smarthouse.com\/en\/datenschutzerklaerung\/\" rel=\"bookmark\">Read More \u00bb<span class=\"screen-reader-text\">Privacy Policy<\/span><\/a><\/p>","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"inline_featured_image":false,"neve_meta_sidebar":"","neve_meta_container":"","neve_meta_enable_content_width":"","neve_meta_content_width":0,"neve_meta_title_alignment":"","neve_meta_author_avatar":"","neve_post_elements_order":"","neve_meta_disable_header":"","neve_meta_disable_footer":"","neve_meta_disable_title":"","footnotes":""},"class_list":["post-293","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/www.ab-smarthouse.com\/en\/wp-json\/wp\/v2\/pages\/293","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.ab-smarthouse.com\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/www.ab-smarthouse.com\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/www.ab-smarthouse.com\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.ab-smarthouse.com\/en\/wp-json\/wp\/v2\/comments?post=293"}],"version-history":[{"count":7,"href":"https:\/\/www.ab-smarthouse.com\/en\/wp-json\/wp\/v2\/pages\/293\/revisions"}],"predecessor-version":[{"id":1945,"href":"https:\/\/www.ab-smarthouse.com\/en\/wp-json\/wp\/v2\/pages\/293\/revisions\/1945"}],"wp:attachment":[{"href":"https:\/\/www.ab-smarthouse.com\/en\/wp-json\/wp\/v2\/media?parent=293"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}