Privacy Notice

1. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

Oehmigen GmbH Berufs- und Schutzbekleidung Zeintlmühler Straße 12 94099 Ruhstorf a. d. Rott Germany

Phone: +49 8503 92423-10 Email: info@oe-berufsbekleidung.de www.oe-berufsbekleidung.de

2. Contact Options

If you have any questions regarding the processing of your personal data or your data protection rights, please contact us using the details provided in Section 1.

3. General Information on Data Processing

We process personal data of customers, prospective clients, suppliers and other business partners only to the extent necessary to provide our website, to initiate and perform contractual relationships, or to comply with legal obligations.

The legal bases for processing include:

  • Art. 6(1)(b) GDPR (contract initiation and performance),
  • Art. 6(1)(c) GDPR (legal obligations),
  • Art. 6(1)(f) GDPR (legitimate interests, e.g., IT security, assertion of legal claims),
  • Art. 6(1)(a) GDPR (consent, where obtained).

4. Data Processing in the Context of Business Relationships

4.1 Categories of Personal Data

We process the following categories of data in particular:

  • Master data (e.g., name, company, address, contact details of contact persons),
  • Contract and order data (e.g., ordered products, delivery addresses, payment terms),
  • Billing and payment data,
  • Communication data (correspondence via email, telephone, post).

4.2 Purposes and Legal Bases

Data is processed for the following purposes:

  • Initiation, execution and handling of purchase and delivery contracts,
  • Processing of complaints and warranty claims in connection with our Terms and Conditions,
  • Management of customer and supplier relationships,
  • Preparation of quotations, order confirmations, delivery notes and invoices,
  • Compliance with statutory retention and documentation obligations.

Within our business relationship, you must provide the personal data necessary for entering into and performing the business relationship and fulfilling the associated contractual obligations, or which we are legally required to collect. Without this data, the conclusion or performance of a contract is generally not possible.

The legal bases are typically Art. 6(1)(b), (c) and (f) GDPR.

4.3 Automated Decision-Making / Profiling

We do not use automated decision-making, including profiling, within the meaning of Art. 22 GDPR. Should this occur in individual cases in the future, we will inform you separately.

5. Data Processing on Our Website

5.1 Server Log Files

When you access our website, your browser automatically transmits certain information that is stored in server log files, including:

  • IP address of the requesting device,
  • Date and time of access,
  • Name and URL of the accessed file,
  • Website from which access occurs (referrer URL),
  • Browser used and, where applicable, operating system.

Processing is conducted to ensure a smooth connection, system security and stability, and for administrative purposes. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in secure website provision).

5.2 Contact via Email / Contact Form

If you contact us by email or via a contact form, the information you provide, including your contact details, will be stored for the purpose of processing your inquiry and any follow-up questions.

Legal bases:

  • Art. 6(1)(b) GDPR, if your inquiry relates to contract initiation or performance,
  • Otherwise, Art. 6(1)(f) GDPR (legitimate interest in processing inquiries).

5.3 Cookies and Similar Technologies

If we use cookies or similar technologies, the following applies:

  • Technically necessary cookies are processed based on Art. 6(1)(f) GDPR.
  • All other cookies are used only with your consent under Art. 6(1)(a) GDPR, obtained via a cookie banner.

Details on the cookies used (name, purpose, storage duration, provider) can be found in our cookie notice on the website.

6. Recipients of Personal Data

We only disclose personal data where necessary for the respective purposes or where legally permitted. Possible recipients include:

  • Shipping and logistics service providers,
  • Payment service providers and banks,
  • IT service providers, hosting and maintenance companies,
  • Tax advisors, auditors, lawyers,
  • Collection agencies and credit bureaus for receivables management.

Where we use service providers as processors, processing is conducted under Art. 28 GDPR based on appropriate data processing agreements.

7. Data Transfers to Third Countries

Transfers of personal data to countries outside the EU/EEA occur only if:

  • an adequacy decision by the European Commission exists, or
  • appropriate safeguards (e.g., Standard Contractual Clauses) are in place, or
  • consent under Art. 49(1)(a) GDPR or another legal permission applies.

If we use services from providers located in third countries (e.g., cloud or analytics services), we will inform you separately in this Privacy Notice or in the cookie notice and implement the required safeguards.

8. Storage Period and Data Security

We store personal data only as long as necessary for the stated purposes or as required by law. In particular:

  • Contract and billing data are stored for 6 or 10 years (commercial and tax retention periods),
  • Business correspondence and emails with tax relevance are archived according to legal requirements,
  • Data from inquiries without contract conclusion is generally deleted after final processing unless legal obligations or legitimate interests (e.g., evidence preservation) require longer storage.

After the purpose ceases and statutory periods expire, data is deleted or anonymized.

We implement appropriate technical and organizational measures to protect your personal data against loss, destruction, unauthorized access, alteration or disclosure. These measures are regularly reviewed and updated according to the state of the art.

9. Rights of Data Subjects

You have the following rights regarding your personal data:

  • Right of access (Art. 15 GDPR),
  • Right to rectification (Art. 16 GDPR),
  • Right to erasure (Art. 17 GDPR),
  • Right to restriction of processing (Art. 18 GDPR),
  • Right to data portability (Art. 20 GDPR),
  • Right to object to processing (Art. 21 GDPR),
  • Right to withdraw consent (Art. 7(3) GDPR).

To exercise your rights, please contact us using the details in Section 1.

You also have the right to lodge a complaint with a supervisory authority if you believe that the processing of your personal data violates data protection law (Art. 77 GDPR).

10. Updates to This Privacy Notice

This Privacy Notice is currently valid as of May 2026. Due to the further development of our website or changes in legal or regulatory requirements, it may become necessary to update this Privacy Notice. The current version is always available on our website under the “Privacy” section.