Data Privacy

The protection of your privacy during the processing of personal data, as well as the security of all business data, is an important concern of ours that we take into account in our business processes and our IT security concept. We process personal data confidentially and only in accordance with German and European data protection laws. We use technical terms such as “personal data” or “processing” in accordance with Art. 4 GDPR.

1. Who is the responsible body and whom can I contact?

Responsible for your data is:

Andros Deutschland GmbH
Bahnhofstraße 31
64747 Breuberg
Phone: +49 6165 301-0
Fax: +49 6165 301-300
Email: info@andros.de
Web: www.andros.de
mailto:info@andros.de

Managing Director: Till Alvermann

To assert your rights, report data protection incidents, or for suggestions and complaints regarding the processing of your personal data, as well as for the revocation of your consent, please contact our Data Protection Officer:

Andros Deutschland GmbH
Data Protection Officer
Bahnhofstraße 31
64747 Breuberg
Phone: +49 6165 301-0
Fax: +49 6165 301-13288
Email: datenschutz-andros@andros.de
mailto:datenschutz-andros@andros.de

2. Which personal data are processed?

Depending on the business relationship, we process the following types of data:

Communication data (e.g., name, address, phone number, email address)
Contract data (e.g., subject matter of the contract, duration)
Payment details (e.g. bank details, payment history)
Access data (e.g. IP address, date and time as well as duration of the visit, name and version of the browser software)

We collect data, for example, through personal contact, business cards, contact forms and order forms.

3. Purposes of processing and legal basis

We process your personal data in accordance with the provisions of the GDPR and the Federal Data Protection Act (BDSG).

Applicant Management
Execution of Employment Relationship
Business Initiation with Prospects
Service Provision to Our Customers
Shipment of Ordered Goods
Contract and Payment Processing
Administration and Improvement of Our Website
Response to User Inquiries via Contact Form
Marketing including Market Research and Reach Measurement within the Legally Permitted Scope or Based on Your Consent
Protection and Defense of Our Rights
Defense Against Liability Claims
Ensuring the Security of Our IT Systems and for Damage Prevention

We naturally oblige our service providers to comply with applicable data protection regulations.

4. On What Legal Basis Is the Data Processed?

The legal basis for processing your personal data depends on the nature of our business relationship, i.e., only to the extent and for as long as

You have given corresponding consent to the processing (Art. 6 Para. 1 lit. a GDPR),
the processing is necessary to protect our legitimate interests (Art. 6 Para. 1 f GDPR),
legal requirements mandate this (Art. 6 Para. 1 lit. c GDPR) or
it is necessary for the fulfillment of a contract with you or pre-contractual measures (Art. 6 Para. 1 b GDPR).

5. To Whom Do We Disclose the Data?

Depending on the processing purpose, personal data is also transmitted to third parties (e.g., freight forwarders, parcel service providers) as described below. This may result in data transfer both to European and non-European countries and thus to the storage of your personal data outside the EU. In this case, we ensure before disclosure that the recipient has an adequate level of data protection (e.g., based on an adequacy decision by the EU Commission for the respective country or the agreement of so-called EU standard contractual clauses of the European Union with the recipient country) or that your consent to the disclosure is available. Within our sales organization, only those departments receive your data that require it to fulfill our contractual and legal obligations or to fulfill their respective tasks (e.g., sales, customer service,
goods shipment, financial accounting, etc.).

Additionally, the following entities may receive your data

data processors engaged by us (according to Art. 28 GDPR) such as in the area of IT services, logistics, etc., who process your data on our behalf under instruction,
public authorities and institutions (tax authorities, etc.) in the presence of a legal or official obligation (retention obligations) or
other entities for which you have given us your consent to data transmission.

6. How Long Is the Data Stored?

Where necessary, we process your personal data for the duration of our business relationship, which also includes the initiation and execution of a contract. Additionally, we are subject to various retention and documentation obligations arising from, among others, the German Civil Code (BGB), the German Commercial Code (HGB), and the German Tax Code (AO). The retention or documentation periods specified therein range from two to a maximum of ten years. Finally, the storage period is also determined by statutory limitation periods, which, for example, according to §§ 195 et seq. of the German Civil Code (BGB), are generally three years.

The storage of your personal data based on your consent continues until revocation.

7. What About Data Security?

We have implemented technical and organizational security measures to protect your personal data from loss, destruction, manipulation, and unauthorized access. We continuously improve these measures in line with technological progress.
Furthermore, all our employees involved in data processing in the broader sense and all third parties involved in data processing (e.g., agencies) are bound to data confidentiality.

8. What Rights Do You Have?

Each data subject has the right to:

Information about your personal data processed by us according to Art. 15 GDPR,
Rectification of your personal data according to Art. 16 GDPR if it is incomplete or inaccurate,
Erasure of your personal data according to Art. 17 GDPR,
Restriction of processing of your personal data according to Art. 18 GDPR,
Data portability according to Art. 20 GDPR,
Complaint to a data protection supervisory authority (Art. 77 GDPR in conjunction with § 19 BDSG new).

The right to information and the right to erasure are subject to the processing restrictions according to §§ 34 and 35 BDSG new, if erasure or information is possible with disproportionately high effort and the data subject’s interest in erasure is to be considered minimal.

9. Right of Revocation for Granted Consent

If you have expressly given us consent to process your data, you are entitled to revoke this consent at any time with effect for the future.

This also applies to the revocation of consent declarations that you gave us before the GDPR came into effect on May 25, 2018. The revocation of consent takes effect for the future and does not affect the lawfulness of data processed until revocation. If necessary, please write to Andros Deutschland GmbH or send an email to: datenschutz-andros@andros.de

10. Right to Object

If we process data to protect our legitimate interests, you have the right to object to this processing at any time for reasons arising from your particular situation. This includes the right to object to processing for advertising purposes.

The objection can be made informally and should be sent by post to:

Data Protection Officer
Bahnhofstraße 31
64747 Breuberg

or by email to: datenschutz-andros@andros.de

11. Changes to Our General Privacy Notice

We reserve the right to modify our data protection measures as necessary. In connection with this, these privacy notices will also be updated accordingly. Please therefore note the current version of our General Privacy Notice.

Status: 01/05/26