Privacy notice

Handelsgesellschaft Sparrenberg mbH (hereinafter: “We”) respects your privacy. Therefore, We take the protection of your personal data, such as name, company address, company e-mail address etc. very seriously.

This privacy notice informs about the processing of your personal data if and to the extent it is incurred when using Our website (hereinafter “Website”). In addition, all data subjects affected by such processing are informed of their rights.

1. Controller

The following company is the controller for processing your personal data as described in this data protection information:

Handelsgesellschaft Sparrenberg mbH
Brokstraße 77, 33605 Bielefeld, Germany
Phone: +49 521 / 155-2668
E-mail:

2. Definitions

The privacy notice contains the following terms set forth in the EU General Data Protection Regulation 2016/679 (“GDPR”).

  1. Personal data

    Personal data means any information relating to an identified or identifiable natural person (hereinafter: “You”). A natural person is considered to be identifiable who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

  2. Processing

    Processing means any operation or set of operations which is performed on personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

  3. Controller

    The controller is the natural or legal person, public authority, agency or other body which, alone or jointly with others, decides on the purposes and means of processing personal data. Where the purposes and means of processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law.

  4. Processor

    The processor is a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.

  5. Consent

    Consent of the data subject means any freely given, specific, informed and unambiguous indication of the data subject’s wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her.

  6. Supervisory authority

    Supervisory authority means an independent public authority which is established by a Member State pursuant to Article 51 GDPR.

3. Legal basis of processing

  1. We process Your personal data if and to the extent that this is necessary for the establishment, implementation or termination of a contractual or quasi-contractual relationship.
    The legal basis for the processing of personal data relating to a contractual or quasi-contractual relationship is Art. 6 (1) sentence 1 b GDPR. This also applies to processing operations that are necessary to carry out pre-contractual measures.
  2. In addition, We process Your personal data if and to the extent that You have given us Your consent. The data is only used for the purpose and scope stated in the written consent.
    The legal basis for the processing of data on the basis of Your consent is Art. 6 (1) sentence 1 a GDPR.
  3. If the processing is necessary for the protection of a legitimate interest of Us or a third party and the interests, fundamental rights and freedoms of the data subject do not outweigh the former interest, Art. 6 (1) sentence 1 f GDPR serves as the legal basis.

4. Duration of processing

We process Your personal data only for the period required to achieve the purpose of the storage or if this is provided for by the relevant statutory regulations. If the purpose of storage does not apply or if a storage period prescribed by the relevant statutory regulations expires, the personal data will be erased routinely in accordance with statutory provisions or processing will be restricted. In the case of contractual relationships, this applies accordingly until the expiry of the statutory limitation periods.

  1. The personal data will be erased after the termination of the contractual or quasi-contractual relationships in compliance with the legal preservation requirements.
  2. The personal data will be erased in compliance with the legal preservation requirements after completion of the purpose pursued with the consent. This Website can no longer be used after erasure of Your personal data.
  3. The personal data will be erased in compliance with the legal preservation requirements after reaching the legitimate interests or after an objection has been raised.

5. Categories of recipients of personal data

The data is processed by Ourselves and, as far as We have not expressly excluded, by data processors and, based on Your corresponding consent or in accordance with the contracts concluded by Our companies, also by third parties. Otherwise, data will only be disclosed to third parties if there are legitimate interests in accordance with Art. 6 (1) sentence 1 f GDPR. Accordingly, Our web hosts also have access to the data generated when using Our Website.

In other respects, Your personal data will not be disclosed. In particular, We will not sell or otherwise use it. We will process the data only on official or legal requests as well as in the event of legal disclosure requirements, in particular transmit it to government agencies.

Within the framework of the contractual relationships, Your personal data may be transmitted to third parties, which process this data solely for the purpose of performance of the contractual purpose.

Within the framework of giving consent, Your personal data may be transmitted to third parties, which process this data solely for the purpose of giving consent.

Within the framework of the legitimate interests, Your personal data may be transmitted to third parties, which process this data solely for the purpose of meeting such legitimate interests.

6. Transmission to third countries

In the event that Your personal data is transmitted to third-country non-EU/EEA sites, this will only be done if the EU Commission has decided that the third country, territory or multiple specific sectors in that third country provide an adequate level of protection or adequate or appropriate data protection guarantees have been provided within the meaning of Art. 46 or Art. 47 or Art. 49 GDPR.

7. Rights of data subjects

  1. Right of access

    You have the right to request information from Us as to whether We process personal data of You (Art. 15 GDPR). If Your personal data is processed, You have the right to obtain information about the personal data processed concerning You (Art. 15 GDPR).

  2. Right to rectification

    You have the right to demand the immediate rectification of inaccurate personal data concerning You (Art. 16 GDPR).

  3. Right to erasure (right to be forgotten)

    You have the right to demand the immediate erasure of personal data concerning You (Art. 17 GDPR).

  4. Right to restriction of processing

    You have the right to demand that We restrict processing (Art. 18 GDPR).

  5. Right to data portability

    You have the right to assert Your right to data portability with regard to personal data concerning You (Art. 20 GDPR).

  6. Right to object

    You have the right to object to processing of personal data concerning You which is based on Art. 6 (1) sentence 1 e or f GDPR at any time. The legality of data processing carried out until the revocation remains unaffected by the revocation.

    If Your personal data is used to operate direct advertising, You have the right to object hereto at any time (Article 21 (2) GDPR).

    If You raise an objection, We will no longer process the personal data. The legality of data processing carried out until the revocation remains unaffected by the revocation.

8. Right to withdraw consent

You have the right to withdraw Your consent to the processing of personal data at any time. The legality of data processing carried out until the withdrawal remains unaffected by the withdrawal whereby, in this case, You have the right to withdraw Your consent for the future. You may address the withdrawal by letter or e-mail to the contact details of the controller mentioned under section 1. above. The legality of data processing carried out until the assertion of Your rights remains unaffected hereof.

9. Right to complain to a supervisory authority

In addition to these rights, You have a right to file complaints with the supervisory authority in charge of data protection (North Rhine-Westphalia: North Rhine-Westphalia Commissioner for Data Protection and Freedom of Information, Düsseldorf).

10. Duty to provide personal data

In some cases, the provision of Your personal data is required by law (such as tax regulations) or is also the result of contractual arrangements (such as details of the contracting party).

Also for a contract conclusion it may be necessary that You provide Us with personal data, which must be subsequently processed by Us. Failure to provide Your personal data would mean that the contract could not be concluded with You. If You do not wish to provide personal data in these cases, You may contact the controller mentioned in section 1. above by mail or e-mail. We clarify on a case-by-case basis whether the provision of the personal data is required by law or contract or is required for the conclusion of the contract, whether there is an obligation to provide the personal data and what would be the consequence of non-provision of the personal data.

11. Data protection officer

If You have any questions regarding the processing of Your personal data, please contact Our data protection officer:

Handelsgesellschaft Sparrenberg mbH
Data protection officer
Brokstraße 77
D-33605 Bielefeld
E-mail:

12. Legal basis, purposes and duration of processing

  1. Registration

    When registering, which is the basis for setting up Your access to Our Website, personal data is required from You.

    Access to Our Website without prior registration and without entering Your use name and personal password is not possible.

    If consent has been given, the legal basis for this processing is Art. 6 (1) sentence 1 a GDPR.

    As long as there is a contractual relationship that identifies You as an authorised user of Our Website, We will save the personal data You need to use the Website. Your personal data will be erased within the legally prescribed period after the termination of the user agreement for Our Website has come into effect. Access to Our Website requires Your consent to the specific collection and storage of Your personal data. If You withdraw Your consent to the processing of Your personal data, You will no longer be able to use Our Website.

  2. Newsletter

    Other functions of Our Website (e.g. registration for the newsletter) provide for the use of personal data (in this example: company e-mail address). Registration for a newsletter is not possible without using the company e-mail address associated with Your user ID in Our Active Directory.

    If consent has been given, the legal basis for this processing is Art. 6 (1) sentence 1 a GDPR.

    As long as there is a contractual relationship that identifies You as an authorised user of Our Website, We will save the personal data You need to use the Website. Your personal data will be erased within the legally prescribed period after the termination of the user agreement for Our Website has come into effect.

  3. Establishment of contact

    If You contact Us by e-mail, through a contact form or via the suggestion system for new search words, the personal data provided by You will also be processed. However, this data processing is limited to the purpose of processing the inquiries or contacting You.

    If You contact Us by e-mail, through a contact form or in a similar form (for example, inquiries about the future inclusion of search words requested by You), the personal data provided by You will also be processed. However, this data processing is limited to the purpose of processing the inquiries or contacting You.

    If consent has been given, the legal basis for this processing is Art. 6 (1) sentence 1 a GDPR.

    As long as there is a contractual relationship that identifies You as an authorised user of Our Website, We will save the personal data You need to use the Website. Your personal data will be erased within the legally prescribed period after the termination of the user agreement for Our Website has come into effect.

  4. Visit of the Website

    Each time You visit Our Website, personal data is processed in log files in the form of information about the functions You have configured on Our Website.

    We process this data together with other personal data about You, i.e. We do not assign the aforementioned data to Your person via Your username and the user ID created by Us.

    The legal basis for the processing of the automatically generated data is Art. 6 (1) sentence 1 f GDPR. The processing is required to ensure the functionality of the Website, to optimise the contents of Our Website and to display them correctly and to provide prosecuting authorities with the information necessary for prosecution in the event of a cyberattack. This is also the legitimate interest in data processing.

    The automatically generated data is kept on Our Website until Your next visit to Our Website and will be overwritten with the current data on Your next visit.

    Processing the aforementioned data for the provision of the Website and any storage in log files is mandatory for the operation of the Website. As a result, there is no possibility of making an objection.

13. Cookies

The different types of cookies used on Our Website are described below.

  1. Description of cookies used

    Our Website uses cookies. Cookies are text files that are generated and stored in Your Internet browser the first time You visit Our Website. The next time the Website is accessed using the same terminal, the usage data of Our application stored therein is returned to the Website that created it (first-party cookie). Thus, the Website recognises during later visits of the user whether or that it has been called up with this browser before. As a result, the Website can be adapted in particular to the needs of the user in a new call, the use of the Website can be statistically evaluated and the display of the content displayed can be varied.

  2. Purposes of processing

    The cookies are subject to different storage periods. Both “session cookies” and “permanent cookies” are used on Our Website:

  1. Session cookies serve to enable You to use Our services without restriction and to make the most comfortable use of Our Website for the current visit to Our site.

    Session cookies are mandatory for Our Website and its functions to work properly. They make it possible to improve the convenience and performance of websites and to make various functions available. This allows e.g. information that has already been entered (e.g. user name, language selection) to be saved/stored to save You the necessity of re-entering it.

    The session cookies used in Our application are only necessary cookies. Performance cookies, marketing cookies and third-party cookies are not used in Our application.

    Session cookies used by Us:

    • Storage of the user ID of a logged in user
    • Storage of the settings selected under the user ID in the session.
  2. Permanent cookies serve to allow You to use Our Website as comfortably as possible beyond the current visit and are used by Us only for this purpose.

    Permanent cookie used by Us:

    • “Stay logged in” function (optionally selected/de-selected by the user). This function ensures that the user remains logged in even across sessions (i.e. after closing the browser) and makes it easier to call up Our Website again if the user so wishes. The use/non-use of this cookie does not affect the functionality of Our application.

  1. Legal basis

    The legal basis for processing is the consent given by You when calling up Our Website (Art. 6 (1) sentence 1 a GDPR).

  2. Duration of processing

    Session cookies are only stored during Your current visit to Our Website.

    Permanent cookies are temporarily stored locally in Your Internet browser even after You have visited Our Website (temporary cookies). Deactivating these cookies usually does not affect the usability of Our Website.

14. Changes to this data protection information

We reserve the right to change this information at any time in compliance with the applicable data protection regulations.