Privacy Policy
Your data. Our responsibility.
Trust is the foundation of good cooperation. This applies to our products as well as to the way we handle your personal data. Here you can find out which data we process when you visit our website, contact us, register or place an order, why we need this data and what rights you have.
1. Data Protection at a Glance
Personal data is information that can identify an individual. Our online shop is intended exclusively for business customers. Information relating to sole traders and individual business contacts may also constitute personal data.
We process information you provide when registering, submitting an order, using contact forms or communicating by email. When you visit our website, technically necessary data is also processed to provide the website and operate it securely.
The relevant purposes, legal bases and further information are set out below.
2. General Information and Mandatory Disclosures
Data Controller
The controller responsible for processing personal data on this website is:
Knopf Budke GmbH & Co. KG
Sägmühlweg 6
74889 Sinsheim-Reihen
Germany
Phone:
+49 (0) 7262 9135-0
Email:
info@knopf-budke.de
Legal Bases
Where processing is necessary to perform a contract with you or take steps at your request before entering into a contract, it is based on Article 6(1)(b) GDPR.
Processing business contact data and maintaining a secure and functional website may be based on Article 6(1)(f) GDPR. Our legitimate interests include business communication, customer support and the secure operation of our systems.
Processing necessary to comply with legal obligations is based on Article 6(1)(c) GDPR. Where processing relies on your consent, Article 6(1)(a) GDPR is the legal basis.
Retention
Retention depends on the relevant processing purpose. Relevant factors include handling your enquiry, the existence of a customer account, conducting our business relationship and statutory commercial and tax retention obligations.
Continued storage may be necessary to establish, exercise or defend legal claims. Once the relevant purposes no longer apply and no other legal bases or retention obligations exist, the data must be deleted.
Your Rights
Subject to the applicable legal requirements, you have rights of access under Article 15 GDPR, rectification under Article 16, erasure under Article 17, restriction of processing under Article 18, data portability under Article 20 and objection under Article 21.
You may withdraw consent at any time with effect for the future. Withdrawal does not affect the lawfulness of processing carried out before your consent was withdrawn.
To exercise your rights, please contact info@knopf-budke.de or write to the postal address above.
Right to Object
Where we process your data on the basis of Article 6(1)(f) GDPR, you may object at any time on grounds relating to your particular situation.
We will then stop processing the relevant data unless we demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or processing is necessary to establish, exercise or defend legal claims.
You may object at any time to the processing of your personal data for direct marketing. The relevant data will then no longer be used for direct marketing.
Right to Lodge a Complaint
You may lodge a complaint with a data protection supervisory authority, particularly in the Member State of your habitual residence, place of work or the alleged infringement.
The authority generally responsible for our company is the State Commissioner for Data Protection and Freedom of Information Baden-Württemberg, Germany. Information and contact options are available at:
Data protection supervisory authority for Baden-Württemberg
Data Security
We implement appropriate technical and organisational measures to protect personal data. Transmission between your browser and our website uses HTTPS with TLS encryption.
Complete protection against every risk associated with data processing and transmission cannot be guaranteed.
3. Data Collection and Processing
Hosting and Server Logs
Our website is hosted by Mittwald CM Service GmbH & Co. KG, Königsberger Straße 4–6, 32339 Espelkamp, Germany.
Technically necessary data is processed when you visit the website. This may include your IP address, access date and time, requested pages and files, browser and system information, the previously visited page, and technical status and error messages.
Processing serves to provide the website, maintain its stability and security, and identify and investigate technical errors and misuse. The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is to operate our website securely and reliably.
Retention of technical logs depends particularly on operational needs, troubleshooting, security monitoring and the investigation of specific security incidents.
Cookies and Privacy Choices
Our website uses cookies and, where applicable, similar technologies to provide shop functions. These include logging in, shopping carts and storing your privacy choices.
Storing or accessing information on your device is governed by Section 25 of the German Telecommunications and Digital Services Data Protection Act (TDDDG). Where this is strictly necessary to provide a digital service expressly requested by you, it is based on Section 25(2), point 2, TDDDG.
Where personal data is processed, the legal basis depends on the purpose. This may include Article 6(1)(b) GDPR for requested contractual functions or Article 6(1)(f) GDPR for the secure operation of the website.
Technologies that are not strictly necessary are used only with your consent under Section 25(1) TDDDG and, where personal data is processed, Article 6(1)(a) GDPR.
We use the corresponding functions of our shop to manage privacy choices. You may withdraw consent with effect for the future. If you have questions, please contact info@knopf-budke.de.
You can also delete cookies or restrict their storage through your browser settings. This may affect website functions.
Google Analytics 4
We use Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The service helps us understand how our website is used, which sources bring visitors to our website and how we can improve our content and online shop.
Data processed includes, in particular, page views, interactions with the website, the time and duration of use, referral sources and technical information about the browser, operating system and device. Approximate location information may also be processed. Google Analytics uses cookies and pseudonymous identifiers to recognise browsers and associate visits.
Your IP address is processed as part of technical communication. According to Google, IP addresses of users in the European Union are not logged or stored. They are used to derive approximate location information and are then deleted.
Google Analytics is used on the basis of your consent under Article 6(1)(a) GDPR. Where information is stored on or accessed from your device, Section 25(1) TDDDG also applies. You may withdraw your consent at any time through the cookie settings on our website with effect for the future. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.
Processing may also involve transferring data to Google LLC in the United States and other service providers engaged by Google. Google LLC is certified under the EU-US Data Privacy Framework. Transfers to certified US companies covered by this framework are subject to an adequacy decision adopted by the European Commission under Article 45 GDPR. Google states that it also uses Standard Contractual Clauses as supplementary safeguards or for other necessary transfers to third countries.
In our Google Analytics configuration, event data is retained for two months and user data for 14 months. The retention period for the user identifier is reset when new user activity occurs and therefore starts again. Once the relevant period expires, the affected data is deleted as part of Google's automated deletion process. These settings do not apply to already aggregated standard reports. Cookie lifetimes are separate from these retention periods and may be up to two years, depending on the cookie and configuration.
Further information about Google's data processing and the legal frameworks for international data transfers is available at:
Google Privacy Policy
Google Analytics Data Protection Information
Information on International Data Transfers
Form Protection
We use technical verification procedures to protect our forms against spam, automated requests and misuse. This involves processing the form information and technical connection data required for verification.
The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is to protect our website and communication channels against automated misuse.
Contacting Us and Uploading Files
When you contact us by email, telephone or a contact form, we process your information to handle the enquiry and any follow-up questions.
This includes names, company information, contact and address details, message content and, where applicable, product and order information. Files and attachments are processed to handle and associate them with your enquiry.
Contact enquiries are sent to us by email and also stored in the shop system. Uploaded files are forwarded as email attachments. Please provide only the data and files necessary for your enquiry.
We use email service providers to send and receive business emails. They process the email addresses, message content, attachments and technical connection data necessary to transmit and handle messages.
Where processing concerns entering into or performing a contract with you, Article 6(1)(b) GDPR applies. Business contacts and other enquiries are processed on the basis of Article 6(1)(f) GDPR. Our legitimate interest is to handle your enquiry appropriately.
Retention depends on handling the enquiry, potential follow-up questions, any resulting business relationship and statutory retention obligations.
Customer Accounts and Registration
When you create and use a customer account, we process the necessary company information, contact details, addresses and login information.
This serves account management, the provision of customer functions, order management and business communication. Information may also be used to verify and manage access to our business customer shop.
Mandatory information is marked in the form. Without it, we may be unable to provide the customer account or requested function.
Depending on the contractual relationship, Article 6(1)(b) or (f) GDPR applies. Our legitimate interest is to manage our business relationships and our B2B offering.
Retention depends on the existence of the customer account and any retention obligations or other legal bases that continue to apply afterwards.
Orders, Payments and Merchandise Management
When you submit an order through our shop, we process the necessary contact, billing, delivery and order data. This begins when you submit your enquiry, regardless of whether a binding order is subsequently concluded.
After you submit your order, we will email you our order confirmation with the final prices and shipping costs. Your order only becomes binding once you approve this confirmation.
Processing serves to review and agree your enquiry and handle the order, production, delivery, invoicing and allocation of payments. Necessary customer and order data is also processed in our connected merchandise management system.
Payments are made by bank transfer under the agreed payment terms. We process the information necessary to issue invoices and allocate incoming payments.
Depending on the circumstances, the legal bases are Article 6(1)(b) GDPR for contractual relationships with individuals, Article 6(1)(f) GDPR for business communication and transactions with company contacts, and Article 6(1)(c) GDPR for legal obligations.
Recipients and Technical Support
Where necessary for the relevant purposes, data may be disclosed to hosting, email and IT providers, technical support providers, shipping and logistics companies, banks, advisers subject to professional confidentiality obligations and legally authorised public bodies.
Maintenance, troubleshooting and support of our shop and merchandise management systems may require technical service providers to access personal data. This may include access through remote support.
Necessary recipient and address information is disclosed to the relevant shipping provider, particularly DHL or UPS, according to the agreed shipping arrangements.
International deliveries requested by you may require necessary delivery data to be transmitted to recipients in the destination country. Transfers to third countries must additionally take account of Articles 44 et seq. GDPR.
4. Interactive Maps and External Links
Interactive Maps
We use OpenFreeMap, a service provided by Hyperknot Software Kft., Hungary, to display event locations.
The interactive map loads only when you activate the corresponding button. This establishes a connection to the map provider. Your IP address and technical connection data are transmitted to deliver map content.
Activation is based on your consent under Article 6(1)(a) GDPR. Other event information remains available without activation.
OpenFreeMap states that Cloudflare may be used for delivery. Information on recipients, possible international processing and retention is available at:
You can prevent further map requests by closing or reloading the page without activating the map again. This does not reverse transmissions that have already occurred.
External Links
If you follow a link to another website, its provider is responsible for processing data on that website. Please refer to the provider’s privacy information.
5. Newsletter
When you subscribe to our newsletter, we process your email address and the data required to manage your subscription and demonstrate consent. Any additional information is voluntary.
We use the corresponding functions of our shop to register and manage newsletter recipients.
Where registration uses the double opt-in procedure, you will receive an email containing a confirmation link. In this case, your subscription is activated only after your confirmation.
Processing is based on your consent under Article 6(1)(a) GDPR. You may withdraw consent at any time with effect for the future, for example by emailing info@knopf-budke.de. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.
Once you unsubscribe, we will no longer use your data to send newsletters. Continued storage may be justified by statutory retention obligations or other legal bases, particularly to retain necessary consent records or defend legal claims.
Necessary retention may be based particularly on Article 6(1)(f) GDPR. Our legitimate interest is to demonstrate the lawfulness of processing and defend legal claims.
Updates
We update this Privacy Policy when our website, the services used or legal requirements change.
Last updated: October 2026