Privacy policy

Data privacy statement

With the following information, we would like to give you an overview about the processing of your personal data (subsequent "data" named) by the SENG CONSULTING GROUP and your rights under data protection law. Which data are processed in detail and the manner in which they are used is predominantly determined by the services and the article deliveries requested or agreed.

Responsibility for data processing:

  SENG CONSULTING GROUP
  Owner Achim Seng
  Lumdastrasse 34b
  DE-35325 Mücke
  Phone: 0049 6401 22 22 880
  Email: datenschutz[at]seng-consulting.de

Use of sources and data

We process your personal data which we receive from our customer and other concerned parties¹ in connection with our business relationship. Moreover, we process personal data legitimately obtained from publicly accessible sources (such as debtors‘ lists, registers of commercial establishments and associations, press, Internet) or which have been legitimately transmitted to us from our cooperation partners or third parties (e.g. a credit bureau) to the extent necessary for rendering our services an article deliveries.

Relevant personal data are your personal details (name, address and other contact data, date and place of birth and nationality) and also legitimisation data (such as data from ID cards). In addition, these may also be contract data (such as a payment order or delivery order), data resulting from the performance of our contractual obligations (such as turnover data in payment transactions), information about your financial status (such as data on credit standing, data on scoring or rating, origin of assets), data relevant for loans (such as revenues and expenditures), advertising and sales data (including advertising scores) and other data comparable with the above-mentioned categories.

Purpose of personal data processing

We process personal data in accordance with the provisions of the EU General Data Protection Regulation (subsequent "GDPR" named) and the German Federal Law on Data Protection (Bundesdatenschutzgesetz - subsequent "BDSG" named)

  1.) in order to comply with contractual obligations (Art. 6 (1b) GDPR)

Data are processed for the purpose of supply of goods, the providing and arranging services and financial services in connection with the performance of our agreements with our clients or for performing precontractual measures as a result of queries. The purposes of data processing are primarily determined by the specific product (such as a supply of good, service, agency services) and may, among other things, include needs assessments, consultation and the execution of delivery and payment transactions. For further details on the purposes of data processing, please refer to the pertinent contractual documents and our General Terms and Conditions.

  2.) within the scope of the balancing of interests (Art. 6 (1f) GDPR)

To the extent necessary, we will process your data beyond the scope of the actual performance of the contract so as to protect justified interests of our own and of third parties. E.g.:

• If we advance in the case of payment methods with suspensory effect, e.g. purchase on account, we reserve the right to protect our justified interests by obtaining an identity information and a creditworthiness rating from specialized service companies (subsequent "credit reporting agencies" named). We provide for this purpose the personal data of the customer required for a creditworthiness rating to the follow credit reporting agencies:

The creditworthiness rating may include probability values (score values) witch are calculated on the basis of scientifically recognized mathematical-statistical methods and whose calculation includes address data. We use the information obtained on the statistical probability of a payment default for a balanced decision on the reasoning, execution or termination of the contractual relationship. Thereby unharmed your protectet interests in according to the legal requirements.

• The analysis and optimisation of processes for needs analysis for the purpose of the direct approach of our customer.
• The advertising or market and opinion research unless you have objected to the use of your data.
• The lodging legal claims and defence in case of legal disputes.
• The ensuring IT security and the IT operation of our company.
• The prevention and investigation of criminal acts.

• Video surveillance to exercise domiciliary rights, to collect evidence in case of attacks or frauds (also see Sec. 4 BDSG).
• Measures for business management and advanced development of our services and products.
• A general risk management within the SENG CONSULTING GROUP.
• Measures for securing buildings and systems (e.g. legitimation and admission control).
• Measures to protect our domiciliary right.

  3.) as a result of your consent (Art. 6 (1a) GDPR)

To the extent you have consented to the processing of personal data by us for certain purposes (such as passing on data within the SENG CONSULTING GROUP, analysis of visible trade transaction data for marketing purposes, mailing newsletters), such processing is legitimate on the basis of your consent. Consent once given may be revoked and with an effect for the future at any time. This also applies to the revocation of declarations of consent given to us before the effective date of the GDPR, i.e. before 25 May 2018. Revocation of consent has an effect only for the future and does not affect the legitimacy of the data processed until revocation.

  4.) on the basis of statutory regulations (Art. 6 (1c) GDPR) or in the public interest (Art. 6 (1e) GDPR)

Moreover, we, the SENG CONSULTING GROUP, are subject to various statutory requirements (such as the Securities Trading Act, tax laws). The purposes of processing include, among others, the assessment of creditworthiness, checking of identity and age, compliance with obligations of control and reporting under tax law and the assessment and management of risks within the SENG CONSULTING GROUP.

The receive of your data

Within the SENG CONSULTING GROUP, those units will be granted access to your data that need them in order to comply with our contractual and statutory obligations. Service providers and agents appointed by us may also receive the data for these purposes on the condition that they, specifically, confidentiality obligations. These are companies and cooperation partners in the categories payment services, trade and logistics, printing services, IT services, telecommunication, collection of receivables, consultation as well as sales and marketing.

As far as passing on data to recipients outside our company is concerned, it must first be kept in mind that we, the SENG CONSULTING GROUP, are obliged to keep all client-related facts and assessments we become aware of in strict confidence. As a matter of principle, we may pass on information about our customers only if this is required by law, the customer has given his consent or we have been granted authority to provide a reference.
Under these circumstances, recipients of personal data may, for example, be:

• Public authorities and institutions (such as tax authorities, authorities prosecuting criminal acts, courts), provided a statutory obligation or an official decree is in place,
• other financial services institutes or comparable institutes to whom we transmit your personal data for the purpose of performing transactions under our business relationship (depending on the payment agreement, e.g. correspondent banks, information bureaus),
• creditors or liquidators submitting queries in connection with a foreclosure,
• partners in the credit card business,
• payment service providers in connection with credit cards or bank cards or businessmen submitting queries if payment by card is denied,
• third parties involved in deferment of payment granting processes (such as trustees, service providers carrying out value assessments),
• service providers whom we involve in connection with contract data processing relationships.

Other recipients of data may be those bodies for which you have given us your consent to data transfer or, respectively, for which you have granted an exemption from our confidentiality obligation on the basis of an agreement or consent or to which we may transfer personal data on the basis of a balancing of interests.

Data transfer to a third country or an international organisation

Data transfer to bodies in states outside the European Union (named third countries) will take place to the extent

• this is required to carry out your orders (such as payment or delivery orders),
• it is required by law (such as obligatory reporting under tax law) or
• you have given us your consent.

Moreover, transfer to bodies in third countries is intended in the following cases

• If necessary in individual cases, your personal data may be transmitted to an IT service provider in a third country to ensure that the IT department of us remains operative, observing the European data protection rules.
• With the consent of the data subject the personal data of parties interested on our products can be processed in the course of a IT system also in a third country.
• With the consent of the data subject or as a result of statutory provisions on criminal acts and within the scope of the balancing of interests, personal data (e.g. legitimisation data) will be transmitted, observing the data protection level of the European Union.

Maximum storage time of your data

We process and store your personal data as long as this is required to meet our contractual and statutory obligations.

If the data are no longer required for the performance of contractual or statutory obligations, these will be erased on a regular basis unless temporary further processing is necessary for the following purposes:

• Compliance with obligations of retention under commercial or tax law which, for example, may result from the German Commercial Code (HGB), the German Fiscal Code (AO). As a rule, the time limit specified there for retention or documentation is 2 up to 10 years.
• Preservation of evidence under the statutory regulations regarding the statute of limitations. In according to Secs. 195 et seqq. of the German Civil Code (BGB), these statutes of limitations may be up to 30 years, the regular statute of limitation being 3 years.

Your rights with regard of data protection

Every data subject has the right of access pursuant to Article 15 GDPR, the right to rectification pursuant to Article 16 GDPR, the right to erasure pursuant to Article 17 GDPR, the right to restriction of processing pursuant to Article 18 GDPR, the right to object pursuant to Article 21 GDPR and the right to data portability pursuant to Article 20 GDPR. As far as the right to obtain information and the right to erasure are concerned, the restrictions pursuant to Secs. 34 and 35 BDSG are applicable. Moreover, there is a right to appeal to a competent data protection supervisory authority (Article 77 GDPR in conjunction with Sec. 19 BDSG).

Your consent to the processing of personal data granted to us may be revoked at any time by informing us accordingly. This also applies for the revocation of declarations of consent given to us before the effective date of the GDPR, i.e. before 25 May 2018. Please keep in mind that such revocation will be effective only for the future with no impact on processing carried out before the date of revocation.

Obligation to provide data

Within the scope of our business relationship, you are obliged to provide those personal data which are required for commencing, executing and terminating a business relationship and for compliance with the associated contractual obligations or the collection of which is imposed upon us by law. Without these data, we will generally not be able to enter into agreements with you, to perform under such an agreement or to terminate it.

In special cases, we are especially obliged by law to identify you by an ID document before entering into business relations with you and, especially, to ask for and record your name, place of birth, date of birth, nationality, address and identity card details. So as to enable us to comply with these statutory obligations, you are obliged to provide the necessary information and documents in connection with the anti-money laundering law and to report any changes that may occur in the course of our business relationship. If you should fail to provide the necessary information and documents, we are not permitted to enter into the desired business relationship or to continue with such a relationship.

Automated decision-making processes

As a matter of principle, we do not use fully automated decision-making processes pursuant to Article 22 GDPR for establishing and performing a business relationship. In the event that we should use such processes in individual cases (e.g. by payment method selection) we will inform you of this and of your rights in this respect separately if prescribed by law.

Automatically data processing and profiling

Your data will be processed automatically in part with the objective of evaluating certain personal aspects (profiling).
For example, we will use profiling in the following cases:

• As a result of statutory and regulatory regulations, we are obliged to fight criminal acts jeopardising property. In that respect, data (e.g. data in payment transactions) will be analysed. These measures also serve to protect our customers.
• So as to be able to inform you selectively about our products and to provide advice to you, we use analysis tools. These permit communication according to your needs and advertising including market and opinion research.
• In connection with the assessment of your credit-worthiness we use scoring. By scoring the probability of a customer meeting his/her contractual payment obligations is calculated. This calculation, for example, may take into account a customer‘s income and expenditures, existing financial obligations, the profession, employer, time of employment, previous experience from the business relationship, due redemption of earlier loans as well as information from credit bureaus. Scoring is based on a proven and recognised mathematical-statistical method. The resulting score values assist us in decision-making in connection with product transactions and will become part of the ongoing risk management.

Logfiles and hosting

You can visit our websites without giving any personal information. We only store access data in so-called server log files, such as the name of the requested file, the date and time of the retrieval, the amount of transferred data and the requesting provider (access data).

These access data are evaluated exclusively for the purpose of ensuring trouble-free operation of the site and the improvement of our offer. This serves to safeguard our legitimate interests, which are predominantly justified in the interests of weighing up interests, in a correct presentation of our offer in accordance with point (f) of Article 6 para. 1 sentence 1 GDPR. All access data will be deleted no later than one week after the end of your visit on our pages.

Data collection and data use for contract processing and opening a customer account on our websites

We collect personal data when you voluntarily provide it to us as a part of an order, when contacting us (for example, by contact form or e-mail) or when opening a customer account in accordance with to point (b) of Article 6 para. 1 sentence 1 GDPR. The deletion of your customer account is possible at any time and can be done either by a message to the previously described contact option or via a designated function in the customer account.

Links on our websites

Our website contains links to external websites of third parties, whose contents we have no influence. Therefore, we can not assume any liability for these external contents. The respective provider or operator of the pages is always responsible for the contents of the linked pages. The linked pages were checked for possible legal violations at the time of linking. Illegal content was not recognizable at the time of linking. However, a permanent content control of the linked pages is not reasonable without concrete evidence of an infringement. Upon notification of violations, we will remove such links immediately.

E-mail advertising with subscribe to newsletter

If you subscribe to one of our newsletters or provide your information to download our document free of charge on our website, we will use the information required or separately provided by you to regularly send you our email newsletter based on your consent in accordance with point (a) of Article 6 para. 1 sentence 1 GDPR.

Should you require no further informations, let us know please. For this you can click on the button unsubscribe to newsletter. Then we will immediately of course from our e-mail distribution list.

E-mail advertising without subscribe to newsletter and your right to object

If we receive your e-mail address in connection with the sale of a good or service and you have not objected, we reserve the right in according to section 7 para. 3 UWG (Act Against Unfair Competition) regularly offers for similar products, such as the already purchased, from to send our assortment by E-Mail. This serves to safeguard our legitimate interests, which are predominantly justified in the context of a weighing up of interests, in a promotional approach by our customers in accordance with point (f) of Article 6 (1) sentence 1 GDPR.

Should you require no further informations, let us know please. For this you can click on the button unsubscribe to newsletter. Then we will immediately of course from our e-mail distribution list. If you want, we also dispense a personal contact to you. It is enough if you communicate this us by sending an e-mail to the upper objection address.

Postal advertising and your right to object

In addition, we reserve the right to use your first and last name as well as your postal address for our own advertising purposes, e.g. to send interesting offers and information about our products by post letter. This serves to safeguard our legitimate interests, which are predominantly justified in the context of a weighing up of interests, in a promotional approach by our customers in accordance with point (f) of Article 6 (1) sentence 1 GDPR. The postal advertising mailings are provided as a part of processing on our behalf by a service provider, which we pass your data.

For these purposes you can object the storage and use of your data by a message to the previously described contact option at any time.

Use of cookies

In order to make attractive visiting of our websites and to enable the use of certain functions, to display suitable products or to market research, we use “so-called cookies“ on various pages. This serves to safeguard our legitimate interests, which predominate in the context of a weighing up of interests, in an optimized presentation of our offer pursuant to Article 6 (1) sentence 1 f GDPR. Cookies are small text files that are automatically stored on your device. Some of the cookies we use are deleted after the end of the browser session, ie after closing your browser (so-called session cookies). Other cookies remain on your device and allow us to recognize your browser on your next visit (so-called persistent cookies). The duration of the storage can be found in the overview in the cookie settings of your web browser. You can set your browser so that you are informed about the setting of cookies and individually decide on their acceptance or exclude the acceptance of cookies for specific cases or in general. Each browser differs in the way to manage the cookie settings. This is described in the help menu of each browser, which explains how to change your cookie settings.
Please click the below links for more details on how to manage your cookie settings:

Youtube video plugins

On this website are integrated contents via the video platform Youtube. This serves to safeguard our legitimate interests, which predominate in the context of a weighing up of interests in an optimal presentation of our offer in accordance with point (f) of Article 6 (1) sentence 1 GDPR. The Youtube video platform operating by Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA ("Google"). YouTube is certified at: "https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status= Active".

Videos from Youtube, whoes are included on our website, the advanced privacy setting is enabled. This means that no information is collected and stored from Youtube by website visitors, unless they are playing the video. The purpose and scope of the data collection and the further processing and use of the data by the providers as well as their rights in this regard and setting options for the protection of your privacy, please refer to the privacy policy of Google at the link "http://www.google.com/intl/de/+/policy/+1button.html“.

Submission of an article rating / BLOG contribution

If you submit a rating via our rating system or write a BLOG contribution, we need your e-mail address in accordance with our terms of use pursuant to point (b) of Article 6 para. 1 p. 1 GDPR to ensure the validity and trustworthiness of the rating. The e-mail address will be saved for this purpose along with the order number and rating. When you submit a product rating, the URL of the product, the product image, the product name, any product EAN, GTIN, and MPN as well as the manufacturer are also saved.

In order to make the rating system secure, to prevent incorrect or fake ratings, and to ensure proper operation of the rating system, we also collect your IP address when you submit a rating. This serves to safeguard our overriding legitimate interests in the prevention of abuse and the protection of our systems in accordance with point (f) of Article 6 (1) sentence 1 GDPR. The IP address will saved for a maximum of one week to the rating and then will deleted.

Data security on our websites

To ensure the security of your transmitted data to us, we use a TLS 128-bit or a TLS 256-bit encryption (also SSL encryption), depending on the website. You will recognize such encrypted connections at the prefix beginning with "https: // ..." in the page link and a lock icon in the address bar of your browser. Unencrypted pages from us are identified by the prefix beginning with "http: // ..." and an open lock icon or no lock icon in the address bar of your browser.

Any particularly sensitive data which you submit to our website, such as inquiries, login or payment processing, through this TLS encryption is not visible from third parties.

More information

If you would like information that can not be provided by this data privacy statement or if you would like more information on a particular matter, please contact the Data Protection Officer of the SENG CONSULTING GROUP, Owner Achim Seng, Lumdastrasse 34b, DE-35325 Mücke, Phone: 0049 6401 22 22 880, E-mail: datenschutz[at]seng-consulting.de.

Declaration of consent

You have given us if so the following explicit consent in accordance with Article 4 number 11 and Article 7 GDPR and we have electronically recorded your consent. In accordance with the German Broadcast Media Act (Telemediengesetz), we are obliged to keep the content of the consents ready at all times. You may cancel your consent with effect for the future at any time.

Subscribe to a newsletter

“Yes, I would like to subscribe to the free Z3-PREMIUM-PARTS newsletter. I will be able to unsubscribe with effect for the future at any time by using this website or the included link in the newsletter.“

Transfer my e-mail address and phone number to the shipping provider

“I agree that my e-mail address and my telephone number is pass on to the shipping carrier, so that this contact me for the purpose of timing the delivery by e-mail or phone before the delivery of goods. In this regard I can cancel my consent at any time, please contact us under the provided details in the imprint.“

This data protection declaration only applies to content on our own web servers and does not cover the websites linked from our pages.
You give us your consent to our data protection information by ticking a checkbox at the end of our forms and the use of cookies by pressing the "accept all cookies" button at the bottom of the screen.

¹: e.g. customers, authorised representatives, potential customers of products, non-customers such as providers of third-party collateral.


Valid from May 25, 2018