Privacy Policy
1) Who is the Controller
Controller: PartsDE.
Address: Steinheimerstr. 51, 89518 Heidenheim an der Brenz, Deutschland
E-mail: [email protected]
2) What data we process
We process data that you provide directly, as well as technical data generated when using the site.
2.1. Data you provide
- Contact details: name, position, company, e-mail, phone.
- Data for processing requests/orders: part numbers, machine model/serial number, delivery address, Incoterms, comments.
- B2B data for invoices and documents: legal details, VAT ID, PO/Reference, billing address, export/import details if necessary.
- Correspondence and attachments: messages, photos of nameplates/parts, catalog/manual pages.
2.2. Technical data
- IP address, date/time, requested pages, referrer, browser/OS type, interface language.
- Session identifiers and settings necessary for site operation.
- Cookies and similar technologies — see "Cookies and settings".
3) Purposes and legal bases
We process personal data only to the extent necessary for the specified purposes. Legal basis — Article 6 GDPR.
- Processing requests and preparing offers: confirming availability, lead times, parts identification, shipping calculation. Basis: pre-contractual measures/contract (Art. 6(1)(b)) and/or legitimate interest (Art. 6(1)(f)).
- Fulfilling orders and deliveries: order confirmation, picking, packing, document preparation, dispatch, and delivery tracking. Basis: contract (Art. 6(1)(b)).
- Accounting and compliance: invoicing, tax accounting, document archiving, export procedures. Basis: legal obligation (Art. 6(1)(c)).
- Support and communication: responding to inquiries, claims, warranty issues, data clarification. Basis: contract (Art. 6(1)(b)) and/or legitimate interest (Art. 6(1)(f)).
- Security: prevention of abuse, protection against bots, error and incident analysis. Basis: legitimate interest (Art. 6(1)(f)).
- Analytics/Marketing (if enabled, e.g. Google Analytics, Microsoft Clarity): applied only with consent via cookie settings. Basis: consent (Art. 6(1)(a)).
4) Who we share data with
We do not sell personal data. Transfer is only possible to the extent necessary for the purposes described above.
- Carriers and forwarders: delivery organization, tracking, transport document preparation.
- Banks and payment providers: processing payments and refunds (if applicable).
- Suppliers/Manufacturers: checking availability, lead times, cross-references (usually in B2B format and minimum necessary volume).
- IT providers: hosting, e-mail, security, development, and maintenance (as data processors where applicable).
- Public authorities: in cases required by law.
When working with data processors, we apply Data Processing Agreements (DPA) where required.
5) Data transfers outside EEA
If you enable third-party services (e.g., external media, analytics, or marketing tools), data processing may occur at the providers of such services and, in some cases, outside the EEA.
We strive to use appropriate safeguards (e.g., standard contractual clauses) where applicable. Details by category — on the "Cookie settings" page.
6) Retention periods
We store personal data no longer than necessary for processing purposes and legal requirements.
- Transaction and accounting documents: for periods prescribed by tax and commercial law.
- Requests not resulting in an order: limited period for communication and follow-up (duration depends on context and your interactions with us).
- Technical logs: limited period for security and diagnostics.
7) Your rights
Regarding your personal data, you have the following rights (within applicable law):
- right of access;
- right to rectification;
- right to erasure (if no retention obligations exist);
- right to restriction of processing;
- right to data portability (where applicable);
- right to object to processing based on legitimate interest;
- right to withdraw consent (if processing is based on consent; withdrawal does not affect lawfulness before withdrawal).
To exercise a right, write to us at [email protected].
8) Right to complain
You have the right to lodge a complaint with a data protection supervisory authority at your place of residence/work or our company's location.
9) Forms and communication
If you send a request via forms or e-mail, we use the provided data to process the inquiry and contact you. Mandatory fields are requested only where impossible to prepare a reply or offer without them.
Attachments (photos/documents) are used to identify machinery/parts and prepare an offer.
11) Security
We apply technical and organizational measures to protect data against unauthorized access, loss, and alteration.
However, absolute security of data transmission via the internet cannot be guaranteed. If you believe your data has been compromised, please inform us.
12) Policy changes
We may update this policy as the site evolves and legal requirements change. The current version is always available on this page.