Privacy Policy
1. Introduction
We are very pleased about your interest in our company. Data protection is a particularly high priority for the management of Einkaufsbüro Deutscher Eisenhändler GmbH. With the help of this data protection notice, Einkaufsbüro Deutscher Eisenhändler GmbH (hereinafter referred to as “E/D/E GmbH”, “we”, “us” or “controller”) would like to inform you about the processing of your personal data that is transmitted by your visit to our website or that you transmit to us when you visit our website.
As the controller, E/D/E GmbH has implemented numerous technical and organizational measures to ensure the most complete protection of personal data processed via this website. Nevertheless, Internet-based data transmissions can generally have security gaps, so that absolute protection cannot be guaranteed.
2. Name and address of the controller
The controller within the meaning of the General Data Protection Regulation (GDPR), other data protection laws applicable in the member states of the European Union and other provisions of a data protection nature is:
Einkaufsbüro Deutscher Eisenhändler GmbH
EDE Platz 1 42389 Wuppertal Germany
Phone: +49 202 6096-0 E-mail: webkontakt@ede.de Website: www.ede.de
3. Contact details of the data protection officer
Purchasing Office of German Iron Merchants GmbH for the attention of the Data Protection Officer
EDE Platz 1 42389 Wuppertal Germany
E-Mail: datenschutz@ede.de Website: www.ede.de
You can contact our data protection officer directly at any time with any questions or suggestions regarding data protection.
4. Provision of the website and creation of log files
Every time our website is accessed, our system automatically collects data and information from the end device. The following data is collected:
- Scope of data processing
- Information about the browser type and version used
- The operating system of the retrieval device
- The IP address of the retrieval device
- Date and time of access
- Websites and resources (images, files, other page content) accessed on our website.
- Websites from which the user’s system reached our website (referrer tracking)
This so-called logging is carried out to maintain the compatibility of our website for as many visitors as possible and to combat abuse and eliminate faults. For this purpose, it is necessary to log the technical data of the accessing device in order to be able to react as early as possible to display errors, attacks on our IT systems and/or errors in the functionality of our website. In addition, the data is used to optimise the website and to generally ensure the security and proper operation of our information technology systems.
This data is stored in the log files of our system. This data is not stored together with personal data of a specific user, so that individual site visitors are not identified. The data processing is carried out on the basis of Art. 6 para. 1 lit. f GDPR, our legitimate interest in the secure and trouble-free operation of our website.
5. Cookies
The website of E/D/E GmbH uses cookies. Cookies are text files that are stored and stored on an end device via an internet browser.
Many websites and servers use cookies. Many cookies contain a so-called cookie ID. A cookie ID is a unique identifier of the cookie. It consists of a string of characters through which websites and servers can be assigned to the specific Internet browser in which the cookie was stored. This allows the websites and servers visited to distinguish the individual browser of the data subject from other Internet browsers that contain other cookies. A particular internet browser can be recognized and identified via the unique cookie ID.
By using cookies, E/D/E GmbH can provide users of this website with more user-friendly services that would not be possible without the setting of cookies.
A cookie can be used to optimise the information and offers on our website in the interests of the user. As mentioned above, cookies allow us to recognise the users of our website. The purpose of this recognition is to make it easier for users to use our website. For example, the user of a website that uses cookies does not have to re-enter their login details each time they visit the website, because this is done by the website and the cookie stored on the user’s terminal. Another example is the cookie of a shopping cart in the online shop. The online shop remembers the items that a customer has placed in the virtual shopping cart via a cookie.
You can prevent the setting of cookies by our website at any time by setting the Internet browser used accordingly and thus permanently object to the setting of cookies. Furthermore, cookies that have already been set can be deleted at any time via an Internet browser or other software programs. This is possible in all common Internet browsers. If you deactivate the setting of cookies in the Internet browser used, not all functions of our website may be fully usable.
6. Possibility of contact via the website
Due to legal regulations, our website contains information that enables quick electronic contact with our company as well as direct communication with us, which also includes a general address of the so-called electronic mail (e-mail address). If you contact us by e-mail or via a contact form, the personal data you transmit will be stored automatically. Such personal data provided by you to us on a voluntary basis will be stored for the purposes of processing or contacting you. This personal data will not be passed on to third parties. The processing of this personal data by you is therefore based on your consent in accordance with Art. 6 (1) (a) GDPR, which you can also revoke at any time.
If you write to us via our contact form and provide us with your contact details (incl. Your preferences; for example, which of our products you are interested in), we process them in accordance with the legal requirements and use them only to answer your enquiry.
In principle, the use of the contact form is voluntary. By using the contact form, you consent to the processing of your personal data in the form described in accordance with Art. 6 (1) (a) GDPR. You can revoke this consent at any time.
7. Processing of contact data in MS Dynamics CRM
We process the names and business contact details of persons with whom we are in regular business contact as well as the content of communication with these persons using the MS Dynamics CRM application of Microsoft Corporation, One Microsoft Way, Redmond, Washington 98052-6399, USA, represented in the European Union (EU) by Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18 D18 P521, Ireland. This information is available to the employees of E/D/E GmbH who maintain business contact with these persons or who process the concerns of these persons.
MS Dynamics CRM is a cloud application that is hosted in Microsoft data centers within the EU. However, it cannot be ruled out that data transfer to the USA is necessary, e.g. for the processing of support requests. Microsoft Deutschland GmbH and Microsoft Ireland Operations Limited, as Microsoft’s main representative within the EU, have concluded so-called Binding Corporate Rules with the parent company in the USA approved by the Irish data protection supervisory authority in accordance with Art. 47 GDPR. These contain additional technical and organizational measures for the protection of personal data, so that an adequate level of protection within the meaning of the GDPR can be assumed. In addition, Microsoft Corporation is certified under the EU-US Data Privacy Framework.
The processing of this personal data in the form described is based on our legitimate interest in accordance with Art. 6 (1) (f) GDPR in structured and efficient communication, both within E/D/E GmbH with our business partners and with our business partners, in order to be able to process their concerns to the satisfaction of all parties involved.
8. Linked Graphics
We have embedded graphics on our website that represent various social media platforms. These graphics are provided with a link that redirects you to the respective platform. The graphics are therefore not social media buttons in the true sense of the word. Personal data, e.g. Your IP address will only be transmitted to the respective platform when the links are clicked.
9. Required Techniques and Services
The following technologies and services are necessary due to our legitimate interest in the secure, error-free and legally compliant operation of our website in accordance with Art. 6 (1) (f) GDPR:
9.1 Elementor
As part of the WordPress content management system with which this website was created, the Elementor software of Elementor Ltd., Thobal 40, Ramat Gan 5252247, Israel, is used to create the layout of the website.
A cookie records the number of page views and the number of your active sessions. This is necessary to ensure that items you hide do not reappear when there are multiple active sessions. This does not analyse your behaviour on our site.
Further information on data protection regarding this software can be found on the provider’s website under Privacy Policy | Elementor.com.
9.2 Polylang
On our website we use the WordPress plug-in Polylang, the WP SYNTEX S.A.R.L, 8 rue Joseph Cugnot, 38307, Bourgoin Jallieu, France. This plug-in allows us to present our website in different languages. When you visit our website, Polylang stores a cookie on your device for a period of 12 months with the language settings you have selected.
You can prevent the setting of cookies by our website, as already described above, at any time by means of a corresponding setting of the Internet browser used and thus permanently object to the setting of cookies.
Further information on data protection regarding this plug-in can be found here: Privacy Policy – Polylang.
9.3 hCaptcha
We use the security service hCaptcha from Intuition Machines, Inc., 1065 SW 8th St #704 Miami, FL 33130, USA, on our website. hCaptcha is used to check whether our website is being accessed by human visitors or whether it is being accessed or queried automatically, and whether the actions of visitors comply with our security requirements. This allows us to prevent visitors’ actions on our website from being associated with abuse or fraud. To this end, hCaptcha analyzes the visitor’s behavior on the website based on various characteristics. This analysis begins automatically as soon as the visitor accesses the website. hCaptcha evaluates various information for the analysis (e.g., the IP address, the length of time the visitor stays on the website, or the visitor’s mouse movements). The data collected during the analysis is forwarded to the provider. The hCaptcha analysis in “invisible mode” can take place entirely in the background. Visitors to the website are not specifically notified that such an analysis is taking place if no task is displayed to the visitor.
Further information on data protection and the terms of use of hCaptcha can be found at the following links: https://www.hcaptcha.com/privacy and https://www.hcaptcha.com/terms.
10. Technologies and services requiring consent
We require your consent in accordance with Art. 6 (1) (a) GDPR for the following technologies and services:
10.1 Matomo
We have integrated the Matomo component on this website. Matomo is an open-source software tool for web analysis. Web analysis is the collection, collection and evaluation of data about the behaviour of visitors to websites. A web analysis tool collects, among other things, data on the website from which you came to a website (so-called referrer), which subpages of the website were accessed or how often and for how long a subpage was viewed. A web analysis is mainly used to optimize a website and for the cost-benefit analysis of Internet advertising.
The software is operated on our server, the data protection sensitive log files are stored exclusively on this server.
The purpose of the Matomo component is to analyze the flow of visitors to our website. We use the data and information obtained, among other things, to evaluate the use of this website in order to compile online reports that show the activities on our website.
Matomo places a cookie on your device. What cookies are has already been explained above. By setting the cookie, we are enabled to analyse the use of our website. Each time you call up one of the individual pages of this website, the Internet browser on your device is automatically prompted by the Matomo component to transmit data to our server for the purpose of online analysis. As part of this technical process, we receive knowledge of personal data, such as your IP address, which serves us, among other things, to trace the origin of visitors and clicks.
The cookie is used to store personal information, such as the access time, the location from which an access originated and the frequency of visits to our website. Every time you visit our website, this personal data, including the IP address of your Internet connection, is transmitted to our server. This personal data is stored by us. We do not share this personal data with third parties.
You can prevent the setting of cookies by our website, as already described above, at any time by means of a corresponding setting of the Internet browser used and thus permanently object to the setting of cookies. Such a setting of the Internet browser used would also prevent Matomo from setting a cookie on your device. In addition, a cookie already set by Matomo can be deleted at any time via an Internet browser or other software programs.
Furthermore, you have the option of objecting to and preventing the collection of data generated by Matomo relating to the use of this website. To do this, you must set an opt-out cookie. If the device is deleted, formatted or reinstalled at a later date, you must set an opt-out cookie again.
However, with the setting of the opt-out cookie, there is the possibility that our websites can no longer be used to their full extent.
Further information and the applicable data protection regulations of Matomo can be found at https://matomo.org/privacy .
11. Routine deletion and blocking of personal data
We process and store your personal data only for the period necessary to achieve the purpose of storage or if this has been provided for by the European legislator or another legislator in laws or regulations to which the controller is subject.
If the purpose of storage ceases to apply or if a storage period prescribed by the European legislator or another competent legislator expires, the personal data will be routinely blocked or deleted in accordance with the statutory provisions.
12. Your rights
You have the right to request confirmation at any time as to whether we are processing your personal data and, if this is the case, to obtain information about this data as well as the information referred to in Art. 15 GDPR. Furthermore, you have the right to rectification in accordance with Art. 16 GDPR, the right to erasure in accordance with Art. 17 GDPR, the right to restriction of processing in accordance with Art. 18 GDPR and the right to data portability in accordance with Art. 20 GDPR, provided that the applicable legal requirements are met.
In accordance with Art. 21 GDPR, you have the right to object at any time to the processing of personal data concerning you on grounds relating to your particular situation.
If the processing of your personal data was based on your consent in accordance with Art. 6 (1) (a) GDPR, you have the right to revoke your consent at any time with effect for the future in accordance with Art. 7 (3) GDPR.
To exercise your rights, you can contact us at any time using the contact details above.
13. Legal basis for processing
Art. 6 (1) (a) GDPR serves as the legal basis for our company for processing operations in which we obtain consent for a specific processing purpose. If the processing of personal data is necessary for the performance of a contract to which the data subject is a party, as is the case, for example, in the case of processing operations necessary for the supply of goods or the provision of any other service or consideration, the processing is based on Art. 6 (1) (b) GDPR. The same applies to such processing operations that are necessary to carry out pre-contractual measures, such as in cases of enquiries about our products or services. If our company is subject to a legal obligation that requires the processing of personal data, such as for the fulfilment of tax obligations, the processing is based on Art. 6 (1) (c) GDPR. Ultimately, processing operations could be based on Art. 6 (1) (f) GDPR. Processing operations that are not covered by any of the aforementioned legal bases are based on this legal basis if the processing is necessary to safeguard a legitimate interest of our company or of a third party, provided that the interests, fundamental rights and freedoms of the data subject do not prevail. We are permitted to carry out such processing operations in particular because they have been specifically mentioned by the European legislator. In this respect, it took the view that a legitimate interest could be assumed if the data subject is a customer of the controller (recital 47 sentence 2 GDPR).
14. Legitimate interests in the processing pursued by the Controller or a third party
If the processing of personal data is based on Article 6 (1) (f) GDPR, our legitimate interest is the secure, error-free, legally compliant and appealing operation of the website to support and conduct our business activities for the benefit of all our employees and our shareholders.
15. Duration for which the personal data will be stored
The criterion for the duration of the storage of personal data is the respective statutory retention period. After the expiry of the period, the corresponding data will be routinely deleted, provided that they are no longer required for the performance of the contract or the initiation of a contract.
16. Legal or contractual requirements for the provision of personal data; Necessity for the conclusion of the contract; Obligation of the data subject to provide the personal data; possible consequences of not providing
We would like to inform you that the provision of personal data is partly required by law (e.g. tax regulations) or can also result from contractual provisions (e.g. information on the contractual partner). In some cases, it may be necessary for a data subject to provide us with personal data that must subsequently be processed by us. For example, the data subject is obliged to provide us with personal data if our company enters into a contract with him/her. Failure to provide the personal data would mean that the contract with the person concerned could not be concluded. Before providing personal data by the data subject, the data subject must contact one of our employees. Our employee will inform the data subject on a case-by-case basis whether the provision of personal data is required by law or contract or is necessary for the conclusion of the contract, whether there is an obligation to provide the personal data and what the consequences of not providing the personal data would be.
17. Existence of automated decision-making
As a responsible company, we do not use automatic decision-making or profiling.
18. Right to lodge a complaint with a supervisory authority pursuant to Art. 77 (1) GDPR
If you suspect that your data is being processed unlawfully on our site, you can contact a supervisory authority. You have the right to lodge a complaint in the EU Member State of your place of residence, your place of work and/or the place of the alleged infringement, i.e. You can choose the supervisory authority you contact in the above locations. The supervisory authority to which the complaint was lodged will then inform you of the status and results of your submission, including the possibility of a judicial remedy under Art. 78 GDPR.
19. Document Information
This data protection notice was prepared by Einkaufsbüro Deutscher Eisenhändler GmbH.
As of: 11.2025
