Skip to Content

Privacy Policy

1. Introduction

The protection of your personal data is an important concern for us. In this Privacy Policy, we inform you about which data we collect when you visit our website, how we use it, and what rights you have. Personal data is any data that can be used to identify you personally. The processing of your data is carried out exclusively on the basis of legal regulations, particularly the General Data Protection Regulation (GDPR) and the Telecommunications-Telemedia Data Protection Act (TTDSG).


2. Controller for Data Processing

The controller in the sense of the GDPR is:

Benjamin Höller
Voelckerstr. 11
60322 Frankfurt am Main
Germany

E-Mail: ​benjamin.hoeller@acarbi.com
Telephone: ​+49 179 1059615


3. Hosting and Operation of the Website (Odoo)

Our website is operated via the Odoo platform. Provider:

Odoo S.A.
Chaussée de Namur 40
1367 Grand Rosière
Belgium

Odoo provides the technical infrastructure for operating the website. This includes in particular:

  • Web hosting and server operation
  • Database management
  • Content Management System (CMS)
  • Form processing
  • Shop and payment functions
  • Security and backup systems
  • Technical analysis and log functions

When visiting our website, Odoo automatically processes technical data, including:

  • IP address
  • Browser type and browser version
  • Operating system
  • Date and time of access
  • accessed pages
  • Referrer URL
  • technical log data

This processing is carried out to ensure a secure and stable operation of the website. The legal basis is Art. 6 para. 1 lit. f GDPR (legitimate interest).

Further information: https://www.odoo.com/privacy


4. Server log files

When accessing our website, information is automatically collected by the server and stored in so-called server log files.

The following data is collected:

  • Browser type and browser version
  • Operating system
  • Referrer URL
  • Hostname of the accessing computer
  • Time of the server request
  • IP address

This data is processed to:

  • ensure the stability and security of the website
  • analyse technical errors
  • prevent abuse

The legal basis is Art. 6 para. 1 lit. f GDPR. There is no merging of this data with other data sources.


5. Cookies and similar technologies

Our website uses cookies. Cookies are small text files that are stored on your device and contain certain information. One distinguishes between:

Technically necessary cookies

These cookies are necessary to provide basic functions of the website, such as:

  • Page navigation
  • Login functions
  • Shopping cart function in the online shop
  • Security of the website

Legal basis is § 25 para. 2 TTDSG as well as Art. 6 para. 1 lit. f GDPR.

Optional cookies

If we use analysis or comfort functions, the storage of corresponding cookies only occurs after your consent. The legal basis is Art. 6 para. 1 lit. a GDPR. You can change your cookie settings at any time via the cookie banner or the settings of your browser.


6. Contact form and communication

If you contact us via a contact form on the website or by email, the data you provide will be stored. This may include:

  • Name
  • Email address
  • Message
  • if applicable. additional voluntary information

This data will be used exclusively to process your request.

Legal bases:

  • Art. 6 para. 1 lit. a GDPR (consent)
  • Art. 6 para. 1 lit. b GDPR (pre-contractual measures)

The data will be deleted as soon as your request has been fully processed and no legal retention obligations exist.


7. Customer account and orders

If you create a customer account on our website or order products or services, we process personal data to fulfil the contract. This includes in particular:

  • Name
  • Billing address
  • Delivery address
  • Email address
  • Payment information
  • Order history

This data is processed to:

  • To process orders
  • To organise deliveries
  • To manage customer accounts
  • To fulfil legal obligations

The legal basis is Art. 6 para. 1 lit. b GDPR.


8. Payment processing

To process payments, your payment data may be transmitted to payment service providers. Depending on the chosen payment method, these may include:

  • Credit card providers
  • Payment platforms (e.g. PayPal or Stripe)
  • Banks

The respective payment service providers process the data independently.

The legal basis is Art. 6 para. 1 lit. b GDPR.


9. SSL or TLS encryption

Our website uses SSL or TLS encryption. You can recognise an encrypted connection by the fact that the browser's address bar starts with https:// and a padlock symbol is displayed. This encryption protects data that you transmit to us from access by unauthorised third parties.


10. Storage duration

We store personal data only as long as is necessary for the respective purpose. Legal retention periods – particularly from commercial and tax law – may require storage for up to 10 years. After the periods expire, the data will be deleted.


11. Your rights

Under the GDPR, you have extensive rights to maintain control over your data. You can assert the following rights against us at any time:

  • Information: You will find out what data we have stored about you (Art. 15).
  • Correction: We will adjust incorrect data at your request (Art. 16).
  • Deletion: We will remove your data unless there are legal retention obligations to the contrary (Art. 17).
  • Restriction: You can limit the use of your data temporarily (Art. 18).
  • Data transfer: We will provide your data in a commonly used format (Art. 20).
  • Objection: You can object to the processing of your data (Art. 21).
  • Withdrawal: You can withdraw any consents given at any time for the future (Art. 7 para. 3).


12. Right to lodge a complaint with a supervisory authority

You have the right to complain to a data protection supervisory authority. The responsible authority is:

The Hessian Commissioner for Data Protection and Freedom of Information
P.O. Box 31 63
65021 Wiesbaden
Gustav-Stresemann-Ring 1
65189 Wiesbaden

Telephone: ​0611 / 14080
E-mail: ​poststelle@datenschutz.hessen.de

Website: https://www.datenschutz.hessen.de


13. Automated decision-making

An automated decision-making or profiling within the meaning of Art. 22 GDPR does not take place.


14. Changes to this privacy policy

We reserve the right to adjust this privacy policy to comply with changed legal requirements or new features of our website. The current version published on our website always applies.