Data protection is a matter of trust, and your trust is important to us, as is your privacy, which we fully respect. We comply with legal requirements when processing your personal data. If our online shop contains links to other providers’ websites, our privacy policy does not apply to those sites.
Data Controller
The data controller within the meaning of Art. 4 No. 7 GDPR is:
Phone availability: Monday to Friday, 8:00 am to 4:00 pm
Communication via Email / Phone / Mail
Purpose / Legal Basis: Personal information you provide via email, phone, or mail is treated confidentially. We use your data solely to process your request. Legal basis: Art. 6(1)(f) GDPR. Hagemann’s legitimate interest is to respond to inquiries from customers, business partners, and prospects to maintain and improve customer satisfaction.
Recipients: Your data is not shared with third parties outside Hagemann, except for carefully selected subcontractors bound by contract under Art. 28 GDPR.
Retention Period: All personal data provided in connection with an inquiry is deleted or anonymized no later than 90 days after our final response, allowing time for follow-up questions.
Orders at Hagemann
Purpose / Legal Basis: We use your personal data to process your order at Hagemann. Legal basis: Art. 6(1)(b) GDPR. To facilitate orders, you may create a customer account to pre-fill your information for future purchases.
Your data may be used for marketing purposes if legally permitted without your explicit consent. You can object at any time.
Recipients: Data required for delivery is shared only with the shipping service. For certain orders, data may be shared with providers for creditworthiness checks.
Retention Period: Complete deletion of order-related data occurs after statutory retention periods, up to 10 years.
Creditworthiness Check
Purpose / Legal Basis: To provide reliable payment options and protect against abuse, we may obtain a credit score based on statistical methods. Legal basis: Art. 6(1)(f) GDPR.
Recipients: Necessary data (name, address) is transmitted to Creditreform Boniversum GmbH, Hellersbergstr. 11, 41460 Neuss, www.boniversum.de. You can object at any time.
Retention Period: Data is retained for the duration of your customer account.
Payment via PayPal
If you choose PayPal, data required for the transaction (name, address, email, cart contents, amount, order number) is transmitted to PayPal (Europe) S.à.r.l. & Cie S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg. Legal basis: Art. 6(1)(b) GDPR.
Purpose / Legal Basis: For newsletter subscription, we collect at minimum your email address and optionally your name, title, and school type. Legal basis: Art. 6(1)(a) GDPR.
We use this information to inform you about offers, promotions, and products from Hagemann and partners. No data is shared with partners.
After registration, you receive a confirmation email. Data is used for tracking newsletter clicks and link interactions. You can revoke consent at any time.
Recipients: Data is shared with mailingwork GmbH for newsletter distribution, in accordance with Art. 28 GDPR.
Retention Period: Data is deleted upon consent revocation unless used for other purposes.
Processing Data for Marketing Purposes
Purpose / Legal Basis: Hagemann processes personal data for marketing (email, phone, mail). Legal basis for postal marketing: Art. 6(1)(f) GDPR. For email/phone marketing, consent is required. For existing customers, §7 UWG may apply.
You can object to future marketing at any time by emailing aktuell[at]hagemann.de.
Recipients: External providers are bound by Art. 28 GDPR and audited for data security.
Retention Period: Data is blocked and deleted upon objection to marketing.
Processing Contact Data
Purpose / Legal Basis: Hagemann processes contacts’ data for communication via email, phone, fax, or mail. Legal basis: Art. 6(1)(f) GDPR.
Recipients: No transmission to third parties except selected subcontractors under Art. 28 GDPR.
Retention Period: Data is retained as long as legitimate interest in the business relationship exists.
Use of Social Plugins
Facebook: Facebook social plugins transmit data if you are logged into Facebook. More info: Facebook Privacy Policy.
Facebook Marketing (Pixel, Conversion Tracking, Ads) is used based on your consent (Art. 6(1)(a) GDPR). Data may be transferred to the USA.
YouTube: Videos are embedded in “enhanced privacy mode,” minimizing cookie storage. More info: YouTube / Google Privacy.
Use of Cookies
Cookies are used for the cart, personalization, and analytics. Session cookies expire at session end; persistent cookies remain per their duration. You can manage or block cookies in your browser. To block Google Analytics, use this plugin.
Integration of Trusted Shops Trustbadge
The Trusted Shops Trustbadge is integrated to display the quality seal and manage reviews. Legal basis: Art. 6(1)(f) GDPR. More info: Trusted Shops Privacy.
Web Analysis
The site can be visited without personal information. Collected data is anonymous and used to optimize the site. Google Analytics is used with IP anonymization. You can block collection via this plugin or via an opt-out cookie.
Your Rights as a Data Subject
Rights include access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), objection (Art. 21), and data portability (Art. 20). Consent revocation under Art. 7 GDPR is possible anytime.
Contact the data protection officer or imprint contact to exercise your rights. Complaints can also be submitted to the relevant supervisory authority.
No Obligation to Provide Data
Unless otherwise indicated, providing personal data is not mandatory. Refusal may prevent processing your request or completing a contract.
Your personal data is transmitted via SSL (128–256 bits). Technical and organizational measures protect your data. Direct debit information is also secured via SSL.
