Privacy Policy

Demmeler Maschinenbau GmbH & Co. KG, shop.demmeler.com
Version: 27 October 2026

This English version is a translation. In case of discrepancies, the German version applies.

This privacy policy explains which personal data we process when you use our online shop at shop.demmeler.com, why we do so and what rights you have. The online shop is aimed exclusively at businesses. Personal data are therefore mainly the data of our customers' contact persons and of sole traders.

1. Controller

Demmeler Maschinenbau GmbH & Co. KG
Alpenstraße 10
87751 Heimertingen
Germany
Phone: +49 (0)8335 9859-0
E-mail: info@demmeler.com

The company is represented by its general partner, Demmeler Maschinenbau Verwaltungs GmbH, which is represented by its managing director Johannes Demmeler. Further information can be found in our Legal Notice.

2. Data Protection Officer

You can contact our external data protection officer at:

Andreas Gutsell
Complimate GmbH
Edisonstraße 2
87437 Kempten
Germany
E-mail: support@complimate.de
Website: www.complimate.de

3. Visiting the Online Shop

Server Log Files

When you visit the online shop, our server automatically processes data transmitted by your browser:

• IP address and host name of the accessing computer
• date and time of access
• page accessed
• previously visited page (referrer)
• browser type and version
• operating system

We do not combine these data with other data sources. We need these data to deliver the shop, to ensure its operation and security and to fend off attacks. The legal basis is Art. 6 (1) (f) GDPR. Our legitimate interest lies in a secure and functioning shop. The log files are deleted after 7 days unless we need them for longer to investigate a security incident.

Hosting and Operation

The online shop is developed and operated for us by Synoa GmbH, Pater-Delp-Straße 44, 64839 Münster (Hessen), Germany. It is hosted on servers of Hetzner Online GmbH, Industriestraße 25, 91710 Gunzenhausen, in Germany. Both process personal data only on our behalf and in accordance with our instructions. We have concluded a data processing agreement with Synoa for this purpose (Art. 28 GDPR).

Encryption

The online shop uses TLS encryption. Third parties therefore cannot read the data you transmit to us.

4. Cookies and Consent

We use cookies and similar technologies, such as your browser's local storage. We use technically necessary cookies without consent (Section 25 (2) No. 2 of the German Telecommunications Digital Services Data Protection Act, TDDDG). We process the data from these cookies to provide the shopping cart, customer account and ordering process (Art. 6 (1) (b) GDPR) and to operate the shop securely (Art. 6 (1) (f) GDPR). We only use all other cookies and services if you have given your consent (Section 25 (1) TDDDG, Art. 6 (1) (a) GDPR).

Consent Management with CookieFirst

We obtain your consent using CookieFirst, a service of Digital Data Solutions B.V., Plantage Middenlaan 42A, 1018 DH Amsterdam, the Netherlands. CookieFirst stores your choice in the cookie "cookiefirst-consent" and logs it with a random identifier, the time, your shortened IP address and information about your browser. This allows us to prove that you have given your consent (Art. 6 (1) (c) in conjunction with Art. 7 (1) GDPR). CookieFirst processes the data on our behalf.

You can change or withdraw your consent at any time with effect for the future. To do so, click on the fingerprint icon at the bottom left of every page.

Overview of Cookies

For the same purposes, the shop also uses your browser's local storage, for example for the shopping cart and customer area, for your cookie choice (CookieFirst) and as a cache for the product search.

5. Customer Account

Registration

You need a customer account to place orders. When you register, we ask for the first and last name of the contact person, company, VAT identification number, phone number, address, e-mail address and a password. You also confirm that you are registering on behalf of a business. We cannot create an account without this information. You may optionally allow the sales representative module (Section 7).

After you register, we send you an e-mail with a confirmation link. You can only log in once you have confirmed your e-mail address. We transfer your details to our customer records (ERP system). In doing so, we use the VAT identification number to check whether you are a business and assign your account to the sales representative responsible for you. The online shop is currently only open to businesses based in Germany. We refer customers from other countries to our sales partners in their country. The legal basis is Art. 6 (1) (b) GDPR.

Customer Accounts for Existing Customers

For customers we already work with, we have created customer accounts using data from our customer records: company, customer number, address, phone number, VAT identification number, name and e-mail address of the contact person, agreed payment and delivery terms and the sales representative responsible for you. The data come from the existing business relationship. We use them so that you can order in the shop on your agreed terms. The legal basis is Art. 6 (1) (b) and (f) GDPR. Our legitimate interest lies in offering our customers a simple way to order. You can object to this use at any time and request that the account be deleted.

Storage Period

We store your customer account until you ask us to delete it. In addition, we keep data from orders for as long as statutory retention periods apply (Section 13).

6. Orders and Contract Processing

Orders

When you place an order, we process your company, contact person, delivery and billing address, e-mail address, phone number, the goods ordered, prices and the payment method. We need these data to review, accept, deliver and invoice your order. The legal basis is Art. 6 (1) (b) GDPR and, for retention under commercial and tax law, Art. 6 (1) (c) GDPR.

Credit Check and Trade Credit Insurance

We secure our receivables with trade credit insurance from Allianz Trade (Euler Hermes Deutschland, Niederlassung der Euler Hermes SA, Gasstraße 29, 22761 Hamburg, Germany). For every new customer, we ask Allianz Trade whether, and up to what amount, receivables from the customer can be insured. For this purpose, we transmit the company name, address, VAT identification number, our customer number and the requested amount of cover. Allianz Trade tells us whether the amount can be insured or which lower amount is possible. To do so, Allianz Trade uses its own information about companies, such as legal form, industry and number of employees. On this basis, we decide whether you pay in advance or on account. The decision is made by an employee. There is no decision based solely on automated processing within the meaning of Art. 22 GDPR. The legal basis is Art. 6 (1) (f) GDPR. Our legitimate interest lies in avoiding payment defaults. The check mainly concerns personal data in the case of sole traders and partnerships. Allianz Trade processes the data as a separate controller. For more information, see its privacy notice for third parties at allianz-trade.de/datenschutz.html (in German).

Shipping

We ship with UPS (United Parcel Service Deutschland S.à r.l. & Co. OHG, Neuss, Germany), with the freight forwarder Dachser SE, Kempten, Germany, or with a shipping company you name. For collection and delivery, we transmit to the shipping company your company name, the name of the contact person, delivery and billing address, order and purchase order number, and details of the shipment such as packages, dimensions, weight, collection date and collection reference. The shipment is accompanied by a delivery note and, where applicable, a consignment note (CMR). The legal basis is Art. 6 (1) (b) GDPR. The shipping companies process the data as separate controllers.

Payment

Guest orders are not possible. You pay in advance or on account by bank transfer. We do not use a payment service provider.

Order E-mails

We send you the acknowledgement of receipt and other messages from the online shop, for example about your registration, by e-mail via Mailjet, an e-mail delivery service of Mailjet SAS, Paris, France. For this purpose, Mailjet processes your name, your e-mail address and the content of the message on our behalf in the EU. We send you quotations and order confirmations by e-mail from our ERP system.

7. Sales Representatives

In sales, we work with independent commercial agents who look after customers in their territory. Each customer account is assigned to the sales representative responsible for the territory. The representative has access to your data in our customer records, i.e. your master data, quotations, orders and purchase orders, including orders from the online shop.

If you allow the sales representative module, your sales representative can create a shopping cart for you in the online shop and use it to generate a quotation or an order. You can tick the sales representative module when you register and switch it on or off at any time later in your customer account under "Edit Account Information". Without this permission, the sales representative does not create quotations or orders in your customer account.

The legal basis is Art. 6 (1) (b) GDPR insofar as your enquiries and orders are concerned, and otherwise Art. 6 (1) (f) GDPR. Our legitimate interest lies in the personal, local support of our customers.

8. Contact Form, Price Enquiry and E-mail

If you contact us via the contact form, the price enquiry for a product, by e-mail or by phone, we process your information in order to answer your enquiry. In the contact form, this is your company, name, address, phone number, e-mail address and your message; in the price enquiry, your name, e-mail address, phone number, your comment and the product. Where appropriate, we forward enquiries to the responsible sales representative. The legal basis is Art. 6 (1) (b) GDPR if your enquiry relates to a contract, and otherwise Art. 6 (1) (f) GDPR. Our legitimate interest lies in answering enquiries. We delete the data once your enquiry has been dealt with, unless retention periods apply.

Spam Protection with Friendly Captcha

We protect forms, login and registration with Friendly Captcha, a service of Friendly Captcha GmbH, Am Anger 3–5, 82237 Wörthsee, Germany. Friendly Captcha checks without cookies whether a human is submitting the form. To do this, your browser solves a computing task. Your IP address in encrypted (hashed) form and information about your browser are transmitted to Friendly Captcha servers in the EU. The legal basis is Art. 6 (1) (f) GDPR. Our legitimate interest lies in protection against spam and misuse. Friendly Captcha processes the data on our behalf.

9. Product Search with Algolia

For the search function and the category pages, we use Algolia, a service of Algolia SAS, 55 rue d'Amsterdam, 75008 Paris, France. Your search terms and your IP address are transmitted to Algolia servers in Germany. The legal basis is Art. 6 (1) (f) GDPR. Our legitimate interest lies in a fast and accurate product search. Algolia processes the data on our behalf. Algolia belongs to Algolia, Inc. in the USA, so a transfer to the USA cannot be ruled out (Section 13).

If you have consented to statistics cookies, Algolia also sets the cookie "_ALGOLIA" with a random identifier. We use it to analyse which search results are clicked in order to improve the search. The legal basis for this is your consent (Section 25 (1) TDDDG, Art. 6 (1) (a) GDPR).

10. Dealer Search with Google Maps

The map in the dealer search is provided by Google Maps, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The map only loads when you [click "Load map" or have given your consent in the cookie settings]. Your browser then transmits your IP address and information about your use of the map to Google. This may involve a transfer to Google LLC in the USA (Section 13). The legal basis is your consent (Section 25 (1) TDDDG, Art. 6 (1) (a) GDPR). For more information, see Google's privacy policy.

11. Audience Measurement with Google Analytics

If you have given your consent, we use Google Analytics 4, a service of Google Ireland Limited, to understand how the shop is used, for example pages visited, time spent, device, browser and approximate region. For this purpose, Google Analytics sets the cookies "_ga" and "_ga_ZD2CVP4E6W". Google Analytics does not store IP addresses. Google only uses them briefly to determine the approximate region. We do not use Google Analytics for advertising. Google signals and advertising features are disabled. The data are deleted after 14 months. Google may transfer data to Google LLC in the USA (Section 13). The legal basis is your consent (Section 25 (1) TDDDG, Art. 6 (1) (a) GDPR). You can withdraw it at any time via the fingerprint icon at the bottom left.

12. Links to Social Networks

In the footer, we link to our profiles on Instagram, LinkedIn, YouTube and Facebook. These are simple links. Data are only transmitted when you click on a link and visit the network. The privacy policy of the respective provider applies there.

13. Recipients, Third Countries and Storage Period

Recipients

Transfers to Third Countries

Google and Algolia belong to groups of companies based in the USA. For the USA, the EU Commission has adopted an adequacy decision (EU-US Data Privacy Framework, Art. 45 GDPR). It applies to companies certified under this framework, including Google LLC. Where there is no certification, we base any transfer on the EU Commission's standard contractual clauses (Art. 46 (2) (c) GDPR).

Storage Period

We store personal data for as long as we need them for the respective purpose. Statutory retention periods take precedence: we keep commercial and business letters for 6 years, accounting vouchers for 8 years and commercial books and annual financial statements for 10 years (Section 257 of the German Commercial Code, Section 147 of the German Fiscal Code). For cookies, the storage period in the table in Section 4 applies.

14. Your Rights

You have the right to

• access your stored data (Art. 15 GDPR),
• rectification of inaccurate data (Art. 16 GDPR),
• erasure (Art. 17 GDPR),
• restriction of processing (Art. 18 GDPR),
• data portability (Art. 20 GDPR),
• withdraw your consent with effect for the future (Art. 7 (3) GDPR).

Right to object (Art. 21 GDPR): If we process your data on the basis of Art. 6 (1) (f) GDPR, you may object to this processing at any time on grounds relating to your particular situation. We will then no longer process the data unless we can demonstrate compelling legitimate grounds or the processing serves the establishment, exercise or defence of legal claims. You may object to processing for direct marketing at any time without giving reasons.

To exercise your rights, please contact info@demmeler.com or our data protection officer.

You also have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is the Bavarian State Office for Data Protection Supervision (Bayerisches Landesamt für Datenschutzaufsicht), Promenade 18, 91522 Ansbach, Germany, www.lda.bayern.de.

15. Changes

We update this privacy policy when the online shop or the legal situation changes. The version published here applies.