Data protection

Privacy Statement

1. Information on the collection of personal data

(1) Below, we provide information on the collection of personal data. Personal data are any data personally relating to you, e.g. name, address, email addresses, user behaviour.
 
(2) The controller in accordance with Art. 4 (7) of the EU General Data Protection Regulation (GDPR) is


TILLIG Modellbahnen GmbH
Promenade 1

D-01855 Sebnitz
Telephone: 0 35971 / 9030
Telefax: 0 35971 / 90319
Email: info@tillig.com 
(see our Site Notice)
 
You can contact our data protection officer at datenschutz@tillig.com or at our postal address, adding the words "The Data Protection Officer".
 
(3) If you contact us by email or via a contact form, we shall store the data provided by you (your email address, possibly your name and telephone number) for the purpose of answering your questions. We shall delete the data collected in this context once their storage is no longer necessary or restrict the processing if statutory retention obligations apply.
 
(4) In case we fall back on commissioned service providers for individual features of our offering or would like to use your data for advertising purposes, please see details of the respective processes below. We also specify in this respect the defined criteria for the storage period.
 

2. Your rights

(1) You have the following rights in relation to us with regard to the personal data concerning you:
 

• right of access,
• right to rectification or erasure,
• right to restriction of the processing,
• right to object to the processing, to the statutory extent,
• right to withdraw consent, insofar as you have given us your consent,
• right to data portability.

 
(2) You also have the right to complain to a data protection supervisory authority about the processing of your personal data by us.
 
The competent data protection supervisory authority is the Saxon Data Protection and Transparency Commissioner
 

Devrientstraße 5

01067 Dresden

Telephone: +49 351 85471-101

Telefax: +49 351 85471-109

Email: post@sdtb.sachsen.de

 

3. Collection of personal data during visits to our website

(1) If you use the website merely for information purposes, i.e. you do not register or otherwise send us information, we shall collect the personal data transmitted to our server by your browser. If you wish to view our website, we shall collect the following data that are technically necessary for us for displaying our website to you and ensuring its stability and security
(the legal basis is Art. 6 (1) sentence 1 (f) GDPR):
 

• IP address
• date and time of the request
• time zone difference in relation to Greenwich Mean Time (GMT)
• content of the request (specific page)
• access status/HTTP status code
• the respective volume of data transmitted
• website from which the request came
• browser
• operating system and its interface
• the language and version of the browser software.

 
(2) In addition to the aforementioned data, cookies will be stored on your computer when you use our website. Cookies are small text files. Cookies do not identify persons but rather the browser. Advertisers use cookies in order to, for example, obtain information on how long a user was on the website and what pages they looked at. Cookies serve to make the Internet offering more user-friendly and effective overall.
 
(3) Use of cookies:

a) This website uses the following types of cookies, whose scope and functionality are explained below:
 

• transient cookies (see b) in this regard)
• persistent cookies (see c) in this regard).

b) Transient cookies are automatically deleted when you close the browser. These include session cookies in particular. They store a so-called session ID, by means of which various requests from your browser can be associated with a common session. This enables your computer to be recognised when you return to our website. Session cookies are deleted when you log out or close the browser.

c) Persistent cookies are automatically deleted after a pre-specified period, which may vary depending on the cookie. You can delete cookies at any time in your browser's security settings.

d) You can configure your browser setting according to your wishes and, for example, decline the acceptance of third-party cookies or all cookies. Please note that, if you do so, you may not be able to use all features of this website.
 

4. Further features and offerings of our website

(1) In addition to use of our website merely for information purposes, we offer various services that you can use if interested. To do so, you ordinarily have to provide further personal data that we use to perform the respective service and to which the above data processing principles apply.

(2) In some cases, we use external service providers to process your data. These have been carefully selected and commissioned by us, are bound by our instructions and are regularly monitored.
 
(3) Furthermore, we may pass on your personal data to third parties if we offer participation in promotions, competitions, conclusion of contracts or similar services together with partners. More information on this will be provided to you when you provide your personal data or below in the description of the offering.
 
(4) If our service providers or partners are based in a country outside of the European Economic Area (EEA), we shall inform you of the consequences of this fact in the description of the offering.
 

5. Objection to or withdrawal of consent to the processing of your data

(1) If you have consented to the processing of your data, you may withdraw this consent at any time. The withdrawal of your consent will not affect the lawfulness of the processing conducted on the basis of your consent up to the time of withdrawal. Moreover, no further processing will take place after withdrawal, except where retention periods have to be observed.
 
(2) Where we base the processing of your personal data on the balancing of interests, you may object to this processing. This is the case if, in particular, the processing is not necessary for the performance of a contract with you, which is set out by us in the following description of the features in each case. When exercising such an objection, please explain the reasons why we should not process your personal data as we have done. If your objection is justified, we shall examine the situation and either discontinue or adapt the data processing or demonstrate to you our compelling legitimate grounds for continuing the processing.
 
(3) You may, of course, object at any time to your personal data being processed for the purposes of advertising or data analysis. You can use the following contact details to inform us of your objection to advertising: 

TILLIG Modellbahnen GmbH
Promenade 1

D-01855 Sebnitz
Telephone: 0 35971 / 9030
Telefax: 0 35971 / 90319
Email: info@tillig.com 
 

You can also use this contact address for withdrawing your consent or lodging an objection in accordance with Section 2. 

6. Use of our web shop

(1) If you wish to place an order in our web shop, it is essential for the conclusion of a contract that you provide the personal data we need for processing your order. Mandatory details necessary for processing the contracts are marked separately; other details are optional.
We process the data provided by you in order to process your order. To this end, we may pass on your payment details to our main bank.
The legal basis for this is Art. 6 (1) sentence 1 (b) GDPR.

(2) Commercial and tax law requirements obligate us to store your address, payment and order details for a period of ten years. Your data will be used only for compliance with the statutory obligations.

(3) To prevent unauthorised third-party access to your personal data, in particular financial data, the order process is encrypted using TLS technology.
 

7. Newsletter

(1) With your consent, you can subscribe to our newsletter, which we shall use to inform you about our latest offerings that may interest you. The goods and services advertised are specified in the declaration of consent.
 
(2) We use the so-called double opt-in procedure for registration for our newsletter. This means that, after you register, we shall send you an email to the email address you provided, asking you to confirm that you wish to receive the newsletter. If you do not confirm your registration, your information will be blocked and then automatically deleted after one month. Moreover, we shall store the respective IP addresses you used for registration and confirmation, as well as the times thereof. The purpose of the procedure is to enable your registration to be verified and any potential misuse of your personal data to be investigated.
 
(3) The only mandatory information required for sending the newsletter is your email address. The provision of additional, separately marked data is optional, and these data will be used for contacting you personally. After receiving your confirmation, we shall store your email address for the purpose of sending the newsletter. The legal basis is Art. 6 (1) sentence 1 (a) GDPR.
 
(4) You may withdraw your consent to receiving the newsletter and unsubscribe from the newsletter at any time. You can declare your withdrawal by clicking on the link provided in each newsletter or by email to info@tillig.com or by sending a message using the contact details provided in the Site Notice.
 

8. Use of social media plug-ins Facebook (by Meta) and Instagram (by Meta)

(1) We currently use the following social media plug-ins: Facebook and Instagram. We use the so-called two-click solution in this respect. This means that, invariably, no personal data will be initially passed on to the providers of the plug-ins when you visit our site. You can recognise the plug-in provider by the mark on the box above its initial letter or the logo. Via the button, we enable you to communicate directly with the provider of the plug-in. Only if you click on the marked field and thereby activate it will the plug-in provider be informed that you have accessed the respective website of our online offering. In addition, the data mentioned under Section 3 of this statement will be transmitted. In the case of Facebook, the IP address is, according to the respective providers in Germany, anonymised immediately after collection. As a result of the activation of the plug-in, your personal data are therefore transferred to the respective plug-in provider and stored there (in the case of US-American providers, in the USA). As the plug-in provider collects data via cookies in particular, we recommend that you delete all cookies via your browser's security settings before clicking on the greyed-out box.
 
(2) We have no influence over the data collected or the data processing operations, nor are we aware of the full extent of the data collection, the purposes of the processing or the storage periods. Furthermore, no information is available to us regarding the deletion of the collected data by the plug-in provider.
 
(3) The plug-in provider will store the data collected about you as user profiles and use them for purposes of advertising, market research and/or designing its website to meet its customers' needs. Such an evaluation is conducted in particular (and even for users who are not logged in) to present customised advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, but you must contact the respective plug-in provider in order to exercise this right. Via the plug-ins, we offer you the opportunity to interact with the social networks and other users so that we can improve our offering and make it more interesting for you as a user. The legal basis for the use of the plug-ins is Art. 6 (1) sentence 1 (f) GDPR.
 
(4) The data will be transferred regardless of whether you have an account with the plug-in provider and are logged in there. If you are logged into the plug-in provider, your data collected by us will be directly associated with your account with the plug-in provider. If you click on the activated button and, for example, link to the site, the plug-in provider will also store this information in your user account and share it with your contacts publicly. If you wish to avoid having your visit to our website associated with your profile with the plug-in provider, we recommend that you always log out after using a social network, but especially before activating the button.
 
(5) Further information on the purpose and scope of the data collection and the processing of the data by the plug-in provider can be found in the privacy statements of these providers, which are provided below. There you will also find further information on your rights in this regard and setting options for protecting your privacy.
 
(6) Addresses of the respective plug-in provider and URLs with their privacy notices:

Facebook (by Meta)

Meta Platforms Ireland Ltd.

Block J, Serpentine Avenue

Dublin 4

Ireland

http://www.facebook.com/policy.php

 

Instagram (by Meta)

Meta Platforms Ireland Ltd.

Block J, Serpentine Avenue

Dublin 4

Ireland

http://www.facebook.com/policy.php

Further information on data collection:
http://www.facebook.com/help/186325668085084
http://www.facebook.com/about/privacy/your-info-on-other#applications
http://www.facebook.com/about/privacy/your-info#everyoneinfo

Facebook has signed up to the EU-US Privacy Shield:
https://www.privacyshield.gov/EU-US-Framework

 
9. Use of Google Maps

(1) We use the Google Maps service on this website. This enables us to show you interactive maps directly on our website, allowing you to conveniently use the maps feature. 

(2) As a result of your visit to the website, Google will be informed that you have accessed the corresponding subpage of our website. In addition, the data mentioned under Section 3 of this statement will be transmitted. This will take place regardless of whether Google provides a user account via which you are logged in, or whether no such user account exists. If you are logged into Google, your data will be directly associated with your account. If you do not wish to be associated with your Google profile, you must log out before you activate the button. Google will store your data as usage profiles and use them for the purposes of marketing, market research and/or designing its website to meet its customers' needs. Such an evaluation is conducted in particular (and even for users who are not logged in) to present customised advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of such user profiles, but you must contact Google to exercise this right.
 
(3) Further information on the purpose and scope of data collection and the processing of the data by the plug-in provider is provided in the provider's privacy statements. There you will also find further information on your rights in this regard and setting options for protecting your privacy: http://www.google.de/intl/de/policies/privacy

Google also processes your personal data in the USA and has signed up to the EU-US Privacy Shield:
https://www.privacyshield.gov/EU-US-Framework

 

Extended privacy statement of TILLIG Modellbahnen GmbH

The protection of your personal data is an important concern for us. For this reason, we have established important principles under data protection law for our company and recorded them in this document.

This document contains detailed information on the protection of your personal data collected and processed by TILLIG, insofar as the General Data Protection Regulation is applicable. It informs you of what personal data about you we process, why we use and possibly pass on such data, and for how long we keep these data. You will also find out how you can exercise your rights. As the data controller, we bear in connection with our business activity the responsibility for the processing of your personal data.

1. What personal data do we use?

We shall collect personal data and use them insofar as you have given us your consent to do so. We shall use the data for processing for preparing, implementing or following up on advertising activities, in particular in order to make newsletters or printed articles available to you. Likewise, we collect personal data insofar as necessary within the scope of the website functionalities. For visiting our website, you will find there a special privacy statement.

We shall also collect your personal data for customer relations in business transactions.

The different types of personal data that can be collected include but are not limited to:

- identity details (e.g. name, gender, IP address),
- contact details (e.g. home address, email address, telephone number),
- data relating to your habits and preferences: data relating to the interaction between you and us
(visit to our websites, use of our apps and our social media sites,
records from personal encounters, telephone calls, chat contact, email traffic,
surveys, telephone conversations).

We shall not collect from you any personal data in connection with your ethnic or racial origin, your political opinions, your religious or ideological convictions, your trade union membership, genetic data, data regarding your sexual orientation or data relating to criminal convictions and offences.

The data we use may either be provided directly by you or originate from our partners (e.g. specialist traders), insofar as these are for their part entitled to collect these data.

2. Why and on what basis will we use your personal data?

We shall use your personal data to market our products and services. This includes, but is not limited to, analysing your habits and preferences using the different information options (emails or messages, visit to our website, etc.).

We may possibly need your consent to the processing of your data, e.g. in order to share your personal data with third parties, for example for advertising purposes for the provision of services/service offerings, or in order to use your data ourselves for certain advertising purposes. If we ask you for your consent to a specific data processing operation, and you decide against this, we shall respect your decision.

If we need or wish to process additional data for purposes other than those mentioned above, we shall inform you accordingly and request your consent if necessary.

3. To whom will we pass on your personal data?

Your personal data will be passed on for the aforementioned purposes only to the following entities and subject to the applicable law regarding the exchange of data:

- service providers operating on our behalf, e.g. specialised traders. We obligate these to use the personal data handed over by us only for the agreed purpose and to then delete these data without delay unless continued processing of these data for a limited period is necessary for the preservation of evidence within the scope of the provisions on limitation.

4. Does profiling take place?

No, no profiling takes place with your personal data!

5. Transfer of personal data to countries outside of the EEA

In certain cases, your data may possibly be transferred to another country. Where your personal data are transferred internationally from the European Economic Area (EEA) to a country outside the European Economic Area that guarantees an adequate level of data protection in the estimation of the European Commission, this will take place on this basis.

No data are transferred to non-EEA countries whose level of data protection has not been recognised as adequate by the European Commission.

6. For how long will we keep your personal data?

We shall retain your personal data only as long as and insofar as you have subscribed to our aforementioned services, or as long as a customer relationship exists. As soon as you unsubscribe from receiving the service or discontinue the customer relationship, or you have withdrawn your consent, we shall delete your personal data without delay unless continued processing of these data for a limited period is necessary for the preservation of evidence within the scope of the provisions on limitation.

7. What rights do you have and how can you exercise them?

In accordance with the applicable laws on data protection, you have certain rights regarding your personal data if the European General Data Protection Regulation applies:

Right of access: You may request information on the processing of your personal data and a copy of these data.
Right to rectification: If your personal data are incorrect, false or incomplete in your opinion, you may request that these be altered accordingly.

Right to erasure: You may request that your personal data be deleted, insofar as this is permissible under applicable law.
Right to restriction of the processing:
You may request that the processing of your personal data be restricted.

Right to object to the data processing: You may object to any processing of your personal data.

Right to withdraw your consent to data processing: If you have consented to processing of your personal data, you may withdraw this consent at any time.

Right to data portability: To the extent legally and technically possible, you may request that the personal data provided to us be returned or have these data transferred to a third party.

If you wish to make use of your rights, please contact us by letter or email at TILLIG

Modellbahnen GmbH, Promenade 1, D-01855 Sebnitz, info@tillig.com.

Please let us know your email address and attach a copy of your ID card as proof of your identity if possible. In accordance with the applicable statutory provisions, you also have the option of submitting a complaint to the competent supervisory authority in order to exercise the above rights.

8. How can you inform yourself of amendments to this important notice?

The data protection documentation must be updated if and when necessary.

The respective up-to-date version is available to you online at www.tillig.com. The changes will be pointed out to you on our website or in another way.

9. How can you contact us?

If you have further questions relating to the use of your personal data, please contact our data protection officer at datenschutz@tillig.com.

 

TILLIG Modellbahnen GmbH
Promenade 1
01855 Sebnitz
info@tillig.com
www.tillig.com

As of: 7 March 2024