This online shop uses cookies to provide you with an optimal shopping experience. For example, session information or language settings are stored on your computer. Without cookies, the functionality of the online shop is limited. If you do not agree, please click here. OK, got it

Cart

tooltrolley

Privacy Policy

Privacy statement

Responsible for data processing:
TOPREGAL GmbH
Industriestrasse 3
70794 Filderstadt
Germany

philipp.schmitt@topregal.com

Data Controller
TOPREGAL UK Limited
Pembroke House
Llantarnam Park Way
Cwmbran
NP44 3AU

jonathan.ellis@topregal.com

Thank you for your interest in our online shop. The protection of your privacy is very important to us. Below we inform you in detail about the handling of your data.

1. Access data and hosting

You can visit our websites without providing any personal information. With every website visit, the web server automatically stores a so-called server log file, which contains the name of the requested file, your IP address, date and time of access, transferred data volume as well as the requesting provider (access data), and records the visit.

This access data is evaluated exclusively for the purpose of ensuring trouble-free operation of the site and improving our services. According to art. 6 para. 1 sentence 1 lit. f of the GDPR within the scope of the weighing of interests, this serves to safeguard our overriding legitimate interests in a correct presentation of our offer. All access data will be deleted at the latest seven days after the end of your page visit.

Third-party hosting services
In the context of processing on our behalf, a third party provides us with the services of hosting and displaying our website. All data collected within the context of using this website or the forms provided in our online shop is processed on the third party’s servers as described below. Data is only processed on other servers within the context described here.

This service provider is located within a country of the European Union or the European Economic Area.

2. Data collected and used for contract execution, making contact and opening a customer account

We collect personal data when you voluntarily provide us with it in connection with your order or when contacting us (e.g. by contact form or email). Mandatory fields are marked as such, because in these cases we need the data to execute the contract and/or to contact you; you cannot place an order or contact us without providing us with this information. Which data is collected can be seen from the respective forms. We use the data provided by you according to art. 6 para. 1 s. 1 lit. b of the GDPR to execute the contract and process your enquiries.
If you have given your consent to this in accordance with art. 6 para. 1 s. 1 lit. a of the GDPR by deciding to open a customer account, we will use your data for the purpose of opening a customer account.
After complete execution of the contract or deletion of your customer account, your data will be restricted for further processing and deleted at the end of the tax and commercial retention periods, unless you have expressly consented for your data to be used further or we reserve the right to use the data for any other purpose that is permitted by law and about which we inform you in this notice. Your customer account can be deleted at any time, either by sending a message to the contact option specified below or by using the relevant function in the customer account.

3. Sharing of your data

In order to fulfil the contract according to art. 6 para. 1 s. 1 lit. b of the GDPR, we pass on your data to the shipping company commissioned with the delivery, insofar as this is necessary for the delivery of the goods ordered. Depending on which payment service provider you select in the order process, we will pass on the payment data collected for this purpose to the credit institution and payment service provider commissioned by us or to the selected payment service in order to process payments. In some cases, the selected payment service providers also collect this data themselves if you create an account there. In this case, you must register with the payment service provider using your access data during the order process. In this respect, the privacy policy of the respective payment service provider shall apply.

Sharing your data with shipping service providers
If you have given us your express consent to do so during or after placing your order, we will forward your telephone number to the selected shipping service provider based on art. 6 para. 1 s. 1 lit. a of the GDPR so that the shipping service provider can contact you before delivery for the purpose of arranging the delivery.

The consent can be revoked at any time by sending a message to the contact option specified below or directly to the contact address of the shipping service provider listed below. After revocation we will delete your data unless you have expressly consented to your data being used further or unless we reserve the right to use the data for any other purpose that is permitted by law and about which we inform you in this notice.

TWT Logistics Ltd
Riverbank House
Dyffryn Industrial Estate
Hengoed
CF82 7RJ

Sharing your data with debt collection companies
In order to fulfil the contract according to art. 6 para. 1 s. 1 lit. b of the GDPR, we pass on your data to a debt collection company, should our payment claim not have been settled despite a previous reminder. In this case, the debt will be collected directly by the debt collector. Furthermore, the passing on of your data serves to safeguard our overriding legitimate interests in an effective assertion or enforcement of our payment claim as per art. 6 para. 1 s. 1 lit. f of the GDPR within the scope of the weighing of interests.

4. Electronic newsletters and postal marketing

Email marketing through newsletter subscription
If you subscribe to our newsletter, we will use the data required for this purpose or provided separately by you in order to regularly send you our electronic newsletter based on your consent according to art. 6 para. 1 s. 1 lit. a of the GDPR.

You can unsubscribe from the newsletter at any time, either by sending a message to the contact option specified below or by using the relevant link provided in the newsletter. Once you have unsubscribed, we will delete your email address from the list of recipients unless you have expressly consented to your data being used further or unless we reserve the right to use the data for any other purpose that is permitted by law and about which we inform you in this notice.

Email marketing without subscribing to the newsletter and your right of objection
On the basis of § 7 para. 3 of the Unfair Competition Act, if we receive your email address in connection with the sale of a product or service and you have not objected to this, we reserve the right to regularly email you offers for similar products to those already purchased from our range. Within the scope of the weighing of interests, this serves to safeguard our overriding legitimate interests in marketing to our customers.
You can object to your email address being used for this purpose at any time by sending a message to the contact option specified below or by using the relevant link the marketing email without incurring any costs other than the basic transmission costs.

The newsletter is sent on our behalf by a service provider to whom we forward your email address for this purpose.

This service provider is based in the USA and is certified under the EU-US Privacy Shield. A current certificate can be viewed here . As a result of this agreement between the USA and the European Commission, the latter has established an adequate level of data protection for companies certified under this privacy shield.

Postal marketing and your right of objection
Furthermore, we reserve the right to use your first and last name as well as your postal address for the purposes of our own marketing, e.g. to send you interesting offers and information about our products by postal mail. As per art. 6 para. 1 s. 1 lit. f of the GDPR within the scope of the weighing of interests, this serves to safeguard our overriding legitimate interests in marketing to our customers.

Postal marketing is handled on our behalf by a service provider to whom we forward your data for this purpose.
You can object to your data being stored and used for these purposes at any time by sending a message to the contact person specified below.

5. Use of data for processing payments

Credit checks
In line with art. 22 para. 2 lit. a of the GDPR, if we make any advance payments, e.g. for purchases on account, it is necessary to obtain identity and credit information from specialised service providers (credit agencies) so that the contract can be concluded. For this purpose, we share your personal data required for a credit check to the following company(s):

Creditsafe Ltd
Bryn House, Caerphilly Business Park
Van Road
Caerphilly
CF83 3GR

Appropriate measures to protect your rights, freedoms and legitimate interests are taken into account. You have the possibility of expressing your point of view and challenging the decision by contacting the contact option specified below.

After complete execution of the contract, we will delete your data used for this purpose unless you have expressly consented to your data being used further or unless we reserve the right to use the data for any other purpose that is permitted by law and about which we inform you in this notice.

6. Integration of the Trusted Shops Trustbadge

Our Trusted Shops Trustbadge is integrated on this website to display our Trusted Shops seal of approval, feedback that may have been collected, and the range of Trusted Shops products to buyers after they have placed an order.

In line with art. 6 para. 1 s. 1 lit. f of the GDPR within the scope of the weighing of interests, this serves to safeguard our overriding legitimate interests in optimising our marketing by enabling secure shopping. The Trustbadge and the services promoted with it are an offer of the Trusted Shops GmbH, Subbelrather Str. 15C, 50823 Cologne. The Trustbadge is provided by a CDN provider (Content Delivery Network) as part of order processing. Trusted Shops GmbH also uses service providers from the USA. An adequate level of data protection is ensured. Further information on Trusted Shops GmbH’s data privacy can be found here.

When accessing the Trustbadge, the web server automatically stores a so-called server log file, also recording your IP address, date and time of access, transferred data volume as well as the requesting provider (access data), and the access. Individual access data is stored in a security database for the analysis of security vulnerabilities. The log files are automatically deleted at the latest 90 days after their creation.

Once you have placed an order, further personal data is shared with the Trusted Shops GmbH if you opted to use Trusted Shops products or had already registered to use them. The contractual agreement between you and Trusted Shops applies. For this, personal data from the order is collected automatically. Whether you are already registered for the use of a product as a buyer is automatically checked using a neutral parameter, the email address hashed by cryptological one-way function. The email address is converted to this hash value, which cannot be decrypted for Trusted Shops, before transmission. After checking for a match, the parameter is automatically deleted.

In line with art. 6 para. 1 s. 1 lit. f of the GDPR, this is necessary for the fulfilment of our and Trusted Shops’ overriding legitimate interests in providing buyer protection linked to the specific order and transactional evaluation services. Further details, including objections, can be found in the data privacy policy of Trusted Shops linked above and in the Trustbadge.

7. Cookies and web analytics

In order to make visiting our website attractive and to enable the use of certain functions, to display suitable products or for market research, we use cookies on various pages. As per art. 6 para. 1 s. 1 lit. f of the GDPR within the scope of the weighing of interests, this serves to safeguard our overriding legitimate interests in optimising the presentation of our offer. Cookies are small text files that are automatically stored on your terminal device. Some of the cookies we use are deleted after the end of the browser session, i.e. after closing your browser (so-called session cookies). Other cookies remain on your terminal device and enable us to recognise your browser when you next visit (persistent cookies). How long the cookies are stored for can be found in your web browser’s cookie settings overview. You can set your browser so that you are informed about the setting of cookies and decide whether to accept and/or reject them individually in certain cases or whether to reject them in general. Each browser differs in the way it manages cookie settings. This is described in the help menu of each browser, which explains how you can change your cookie settings. These can be found for the respective browsers under the following links:

Internet Explorer™
Safari™
Chrome™
Firefox™
Opera™
If cookies are not accepted, the functionality of our website may be restricted.

Use of Google (Universal) Analytics for web analytics
This website uses Google (Universal) Analytics for website analysis. The web analysis service is provided by Google Ireland Limited, a company incorporated and operated under Irish law with its registered office at Gordon House, Barrow Street, Dublin 4, Ireland (www.google.com). As per art. 6 para. 1 s. 1 lit. f of the GDPR within the scope of the weighing of interests, this serves to safeguard our overriding legitimate interests in optimising the presentation of our offer. Google (Universal) Analytics uses methods that allow an analysis of the use of the website by you, such as cookies. The information automatically collected about your use of this website is usually transferred to a Google server in the USA and stored there. By activating IP anonymisation on this website, the IP address is shortened before transmission within the member states of the European Union or in other states entered into a contractual agreement with the European Economic Area. Only in exceptional circumstances is the full IP address transmitted to a Google server in the USA to be shortened there. The anonymous IP address transmitted by your browser as part of Google Analytics is not generally merged with other Google data. The data collected in this context will be deleted after the purpose and end of our use of Google Analytics.


Where information has been transmitted to and stored on Google servers located in the United States, the US company Google LLC is certified under the EU-US Privacy Shield. A current certificate can be viewed here . As a result of this agreement between the USA and the European Commission, the latter has established an adequate level of data protection for companies certified under this privacy shield.

You can prevent Google from collecting the data generated by the cookie and related to your use of the website (including your IP address) and Google from processing this data by downloading and installing the browser plug-in available under the following link: https://tools.google.com/dlpage/gaoptout

As an alternative to the browser plug-in, you can click this link to prevent Google Analytics from collecting data from this website in the future. When doing so, an opt-out cookie will be stored on your terminal device. If you delete your cookies, you must click the link again.

Use of Mouseflow
This website uses Mouseflow, a web analysis tool of Mouseflow ApS, Flaesketorvet 68, 1711 Copenhagen, Denmark, to capture randomly selected individual visits (only with anonymous IP addresses). This results in a protocol of mouse movements, mouse clicks and keyboard interaction, with the intention of reproducing individual visits to this website at random as so-called session replays and evaluating them in the form of so-called heat maps and deriving potential improvements for this website. The cookie generated by Mouseflow is deleted after a period of 90 days. The data collected by Mouseflow is not personal, will not be disclosed to third parties and is stored for a period of 3 months. The data collected is stored and processed within the EU. If you do not wish Mouseflow to collect your data, you can object to this on all websites that use Mouseflow by clicking on the following link:
https://mouseflow.de/opt-out
 

8. Online marketing

Google Ads remarketing
We use Google Ads to advertise this website in Google search results and on third-party websites. When you visit our website, the so-called remarketing cookie is set by Google, which automatically enables interest-based advertising by means of a pseudonymous cookie ID and on the basis of the pages you visit. As per art. 6 para. 1 s. 1 lit. f of the GDPR within the scope of the weighing of interests, this serves to safeguard our overriding legitimate interests in optimising the promotion of our website. The data collected in this context will be deleted after the purpose and end of our use of Google Ads remarketing.

Additional data will only be processed if you have consented to Google linking your web and app browsing history to your Google account and using information from your Google account to personalise ads you see on the web. In this case, if you are logged in to Google during your visit to our website, Google will use your information in conjunction with Google Analytics data to create and define target audience lists for cross-device remarketing. Google will temporarily link your personal data with Google Analytics data in order to form target groups.

Google Ads is a service offered by Google Ireland Limited, a company incorporated and operated under Irish law with its registered office at Gordon House, Barrow Street, Dublin 4, Ireland(www.google.com).
Where information has been transmitted to and stored on Google servers located in the United States, the US company Google LLC is certified under the EU-US Privacy Shield. A current certificate can be viewed here . As a result of this agreement between the USA and the European Commission, the latter has established an adequate level of data protection for companies certified under this privacy shield.

You can deactivate the remarketing cookie via this link . You can also contact the Digital Advertising Alliance to find out about the use of cookies and to configure your settings.

Userlike live chat tool
If you use the live chat tool to contact us, the data you voluntarily enter (name, email address, message) will be processed by us in accordance with art. 6 para. 1 s. 1 lit. b of the GDPR for the purpose of answering your enquiry within the scope of contract processing. Furthermore, the use of this tool serves to safeguard our overriding legitimate interests in communicating with our customers in an effective and improved manner as per art. 6 para. 1 s. 1 lit. f of the GDPR within the scope of the weighing of interests. The data are deleted subsequently.
The third-party service provider Userlike handles the live chat tool on our behalf. All data collected during the use of the chat tool is processed on Userlike’s servers.

Google reCAPTCHA
For the purpose of preventing misuse of our web forms and protecting us from spam, we use the Google reCAPTCHA service for some forms on this website. Google reCAPTCHA is a service offered by Google Ireland Limited, a company incorporated and operated under Irish law with its registered office at Gordon House, Barrow Street, Dublin 4, Ireland. (www.google.com). By asking for a manual entry, this service prevents automated software (so-called bots) from carrying out abusive activities on the website. In line with art. 6 para. 1 s. 1 lit. f of the GDPR within the scope of the weighing of interests, this serves to safeguard our overriding legitimate interests in protecting our website from being misused and in ensuring trouble-free operation of our online presence.

Google reCAPTCHA uses a code embedded in the website, a so-called JavaScript, to check methods that allow analysis of your use of the website, such as cookies. The information automatically collected about your use of this website, including your IP address, is usually transferred to a Google server in the USA and stored there. In addition, other cookies stored in your browser by Google services are evaluated by Google reCAPTCHA.
Personal data entered into the fields of the respective form are not read or stored.

Where information has been transmitted to and stored on Google servers located in the United States, the US company Google LLC is certified under the EU-US Privacy Shield. A current certificate can be viewed here . As a result of this agreement between the USA and the European Commission, the latter has established an adequate level of data protection for companies certified under this privacy shield.

You can prevent Google from collecting the data generated by JavaScript and/or the cookie and related to your use of the website (including your IP address) and Google from processing this data by disabling JavaScript or the use of cookies in your browser settings. Please note that this may limit the functionality of our website for your use.

Further information on Google’s data privacy policy can be found here.

Google Fonts
This website incorporates the script code “Google Fonts”. Google Fonts is a service offered by Google Ireland Limited, a company incorporated and operated under Irish law with its registered office at Gordon House, Barrow Street, Dublin 4, Ireland. (www.google.com). In line with art. 6 para s. 1 lit. f) of the GDPR within the scope of the weighing of interests, this serves to safeguard our overriding legitimate interests in presenting the contents of our website in a standardised manner. In this context, a connection is established between the browser you use and the Google servers. This provides Google with the insight that our website has been visited via your IP address.
Where information has been transmitted to and stored on Google servers located in the United States, the US company Google LLC is certified under the EU-US Privacy Shield. A current certificate can be viewed here . As a result of this agreement between the USA and the European Commission, the latter has established an adequate level of data protection for companies certified under this privacy shield. Further information about the Google’s data processing can be found in Google’s privacy policy .

9. Emailing of reminders to submit product reviews

Product review reminders by Trusted Shops
If you have given us your express consent to do so during or after placing your order, we will share your email address with Trusted Shops GmbH, Subbelrather Str. 15c, 50823 Cologne (www.trustedshops.de) based on art. 6 para. 1 s. 1 lit. a of the GDPR, so that they can email you a product review reminder.

The consent can be revoked at any time by sending a message to the contact option specified below or directly to Trusted Shops.

10. Contact options and your rights

As a data subject, you have the following rights:
• in line with art. 15 of the GDPR, you have the right to request information about your personal data processed by us to the extent specified therein;
• in line with art. 16 of the GDPR, you have the right to request inaccurate or incomplete personal data stored by us to be rectified immediately;
• in line with art. 17 of the GDPR, you have the right to demand the deletion of your personal data stored by us, unless further processing is required
- for exercising the right of freedom of speech and information;
- for fulfilling a legal obligation;
- for reasons of public interest, or
- for asserting, exercising or defending any legal claims
;
• in line with art. 18 of the GDPR, you have the right to request the restriction of the processing of your personal data, insofar as
- you dispute the correctness of the data;
- the processing is unlawful, but you reject the data from being deleted;
- we no longer need the data, but you need it to assert, exercise or defend any legal claims, or
- you have lodged an objection against the processing of the data as per art. 21 of the GDPR;
• in line with art. 20 of the GDPR, you have the right to obtain the personal data you have provided to us in a structured, common and machine-readable format or to request it being transferred to another responsible party;
• in line with art. 77 of the GDPR, you have the right to lodge a complaint with a supervisory authority. As a general rule, you can contact the supervisory authority at your usual place of residence or workplace, or at our company headquarters.

If you have any questions regarding the collection, processing or use of your personal data, for access, rectification, restriction or deletion of data as well as revocation of consents given or objection to a specific use of data, please contact us directly via the contact details provided on our company details page.

Data Protection Officer:
Jonathan Ellis
TOPREGAL UK Ltd
Pembroke House
Llantarnam Park Road
Cwmbran
NP44 3AU
jonathan.ellis@topregal.co.uk

Right of objection
As far as we process personal data as described above within the scope of the weighing of interests to safeguard our overriding legitimate interests, you can object to this processing with effect for the future. If the processing is carried out for direct marketing purposes, you may exercise this right at any time as described above. As far as processing is carried out for other purposes, you are entitled to object only if there are reasons arising from your particular situation.

After exercising your right of objection, we will not process your personal data further for these purposes unless we can prove compelling reasons for processing worthy of protection.