Data protection declaration

We take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this data protection regulation. On this website, personal data is collected and processed only to the extent necessary. The following regulation gives you an overview of how we guarantee this protection and what kind of data is collected for what purpose.

Name and address of the controller
Controller in the sense of the General Data Protection Regulation (“GDPR”):

Kermi GmbH
Pankofen-Bahnhof 1
D-94447 Plattling

Phone: +41 (0)9931 501-0
Fax: +41 (0)9931 507 696

Data protection officer

Statutory data protection officer:

Kermi GmbH
Data Protection Officer
Pankofen-Bahnhof 1
94447 Plattling

Telephone: + 49 (0) 9931 501-300

Every data subject can contact our data protection officer directly any time with any questions or suggestions regarding data protection.

1. Your rights

When you are using this website, different personal data is collected. Personal data is data with which you can be personally identified.

Within the scope of the applicable legal regulations, you have the right to access your stored personal data, its origin and recipients as well as the purpose of its storage at any time. If the legal requirements are met, you also have the right to rectification or erasure of your personal data, to restriction of processing, to object to processing and to data portability.

If you have given your consent to your personal data being processed by us, you have the right to withdraw such consent at any time. The withdrawal of consent does not affect the lawfulness of any processing based on consent before its withdrawal. Further processing of such data on the grounds of another legal basis, for example to fulfil legal obligations, remains equally unaffected.

For this and other questions regarding personal data, you can contact our data protection officer at any time.

If you believe that our processing your personal data violates applicable data protection laws, you have the right to file a complaint with a relevant supervisory authority.

2. Collection and processing of personal data

a) When you are visiting our website
When you visit our website, we process the data which your browser automatically transfers to us. This data includes your IP address, the time of the server request, the browser type and browser version, the operating system used, the referrer URL, and the host name of the accessing computer. We only process personal data about the use of our website to the extent necessary to allow the user to use the service.

Such data is only collected and processed for internal purposes. The basis for data processing is Art. 6 (1) b) GDPR, which permits the processing of data for the performance of a contract or measures prior to entering into a contract. Another basis for data processing is Art. 6 (1) f) GDPR, as we have a legitimate interest in processing the data in order to ensure the stability and security of the website.

In some cases we also use cookies for this purpose. Cookies are small text files that are stored on your computer and saved by your browser. Our Internet pages use cookies in several places. They serve to make our website more user-friendly, effective, and secure. Most of the cookies we use are so-called “session cookies”. They will automatically be deleted after your visit. Cookies do not cause any harm to your computer or contain viruses. You have the option of deactivating this function within your browser or setting it so that you can decide in individual cases whether or not to accept a cookie. In this case, however, the usability of our website may be restricted. Cookies, which are necessary for the execution of the electronic communication process or for the provision of certain functions (e.g. shopping basket function), are stored according to Art. 6 (1) f) GDPR. The website operator has a legitimate interest in the storage of cookies for the technically error-free and optimized provision of their services.

Other cookies that are stored (e.g. cookies for analyzing your surfing behavior) are treated separately in this data protection regulation.

b) When you use a contact form
If you send us enquiries via a contact form, your information from the enquiry form and the contact data you provide there will be stored by us for the purpose of processing your enquiry and any possible follow-up questions. We will not pass this information on to third parties without your consent.

The data entered in the contact form will be processed on the basis of your consent (Art. 6 (1) a) GDPR). You can withdraw this consent at any time. You only have to send us an informal e-mail to do so. The lawfulness of any data processing transactions carried out up to the withdrawal remains unaffected by the withdrawal.

The data entered by you in the contact form will be retained by us until you request us to delete the data, withdraw your consent for storage, or if the purpose for the storage of the data no longer applies (e.g. after processing your request has been completed). Legal retention periods remain unaffected.

c) Processing of customer and contract data
We collect, process and use personal data to the extent that it is necessary for the establishment, content design or change of a legal relationship, for the management of customers and customer relationships, and for sales and marketing activities of the company.

We process such personal data to enable the processing of transactions, the execution of sales activities, for deliveries, the provision of customer service, invoicing, and the establishment of contact with customers in the context of contract fulfilment, marketing, and in other ways to maintain customer relations. We may also use personal data to handle incidents and claims and to provide support requested by customers.

The personal data comes directly from the customer or was collected by us in connection with their use of the products and services. Personal data may also be obtained from public registers and other reliable external sources. It is necessary to process personal data for the provision of services under the purchase contracts of which the client company is a party. Furthermore, the processing of personal data is necessary for the legitimate interests pursued by us within the scope of the business objectives of the company. The basis for the processing of the data is Art. 6 (1) b) GDPR (performance of a contract or measures prior to entering into a contract).  

After completion of the order or termination of the business relationship, the customer data collected will be deleted. Legal retention periods remain unaffected.

In general, we use the personal data exclusively for internal business purposes and do not transfer the data to external parties. Companies of the Arbonia Group may gain access to and process personal data to the extent necessary to fulfil the above-mentioned purposes. We only transfer personal data to third parties outside of the Arbonia Group of companies if this is necessary in the context of the performance of the contract, for example to the company entrusted with the delivery of the goods or the credit institution entrusted with the payment processing. The data will not be transmitted further or only after you explicitly consented to the transmission. Any transmission of personal data will be carried out in accordance with the applicable data protection laws and appropriate contractual, technical and organizational measures are in place.

d) Data processing for the delivery of newsletters and mailings
If you subscribe to one of the newsletters offered on the website, the data provided during the newsletter or mailing registration will only be used for sending the newsletter, unless you agree to further use. You agree that we may also transfer this personal data to other Arbonia group companies, and other Arbonia group companies may also process this data for the same purpose and send you newsletters about the entire range of services of the Arbonia group companies. We will not transfer your personal data to any third party outside of the Arbonia group companies.

If you subscribe to an email newsletter that requires personal information, you will receive a confirmation e-mail to the e-mail address you provided. The registration is only completed after the link included in this e-mail is clicked. The processing takes place exclusively based on consent. You can withdraw your consent to the storage of the data, the email address, as well as their use for sending the newsletter at any time via the unsubscribe option provided in the newsletter. The lawfulness of any data processing transactions already carried out remains unaffected by the withdrawal.

Data provided by you when subscribing to a newsletter will be stored by us until you unsubscribe from the newsletter and will be deleted after you have unsubscribed from the newsletter. Data stored by us for another purpose or based on another consent (e.g. e-mail addresses for another newsletter, or for additional functions on the webpage) remain unaffected by this.

We can cooperate with other companies in the Arbonia Group and other third party data processing agents (e.g. IT service providers). Any transmission of personal data will be carried out in accordance with the applicable data protection laws and appropriate contractual, technical and organizational measures are in place.

Newsletter – Performance measurement
The newsletter contains a so-called “web-beacon”, i.e. a pixel-sized file which is retrieved from our server when the newsletter is opened or from the server of our distribution service provider if we use one. When this retrieval takes place, initially technical information is collected, such as information on the browser and your system, as well as your IP address and the time of retrieval.

This information is used for technical improvement of the service based on technical data, or target groups and their reading behavior based on their retrieval locations (which can be determined using the IP address) or access times. The statistical surveys also include determining whether the newsletters are opened, when they are opened, and what links are clicked. Although for technical reasons, this information can be matched to the individual newsletter recipient, it is, however, neither our intention, nor that of the distribution service provider, to observe individual users. In fact, we actually use the analyses to detect the reading habits of our users and to adapt our content to them or to send different content according to the interests of our users.

Unfortunately, it is not possible to separately revoke authorization for the performance measurement; in this case you have to unsubscribe from the whole newsletter subscription.

Newsletter distributor Cleverreach GmbH

The newsletter is distributed by the distribution service provider CleverReach GmbH & Co. KG, Mühlenstr. 43, 26180 Rastede, Germany. You can view the privacy policy of the distribution service provider here: The distribution service provider is deployed on the basis of our legitimate interests in accordance with Section 6 (1) lit. f. GDPR and an order processing agreement in accordance with Section 28 (3) p. 1 GDPR.

The distribution service provider can use the data of recipients pseudonymized, i.e. without assigning them to a user, to optimize or improve own service, e.g. to technically optimize the distribution and presentation of the newsletter, or for statistical purposes. However, the distribution service provider does not use our newsletter recipients' data to write to them or to pass the data on to third parties.

3. Analysis of usage data and use of analysis tools

Our aim is to tailor the contents of our website as precisely as possible to your interests and in this way improve our offer for you. We use various web analysis services for the purpose of demand-oriented design and continuous optimization of our website.

Information on Google Analytics (with anonymization function)
This website uses functions of the web analysis service Google Analytics. Google Analytics uses cookies, which are text files stored locally on your computer and that enable an analysis of your use of the website. The information created by cookies, about the use of our website (including your IP address) is generally transmitted to a Google server in the USA, where it is stored.

We have enabled the IP anonymization function on this website. This will cause your IP address to be shortened by Google within member states of the European Union or in other countries which are party to the Agreement on the European Economic Area before being transmitted to the USA. The full IP address will be transmitted only in exceptional cases to a Google server in the USA and shortened there.

On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to generate reports on website activity, and to provide the website operator with other services relating to website and Internet use.

The storage of Google Analytics cookies is based on Art. 6 (1) f) GDPR. The website operator has a legitimate interest in the analysis of user behavior in order to optimize both their website and their advertising.

You can prevent the storage of the cookies by selecting the appropriate settings in your browser software, however, please note that if you do so, you may not be able to use all the functions of this website. You can also prevent Google from collecting data generated by the cookie and relating to your use of the website (including your IP address) and from the processing of this data by Google by clicking on the following link: < > download and install available browser plugin.  

You can prevent the collection of your data by Google Analytics by clicking on the following Link link. An opt-out cookie will be placed, which prevents the collection of data during future visits to this website: Deactivate Google Analytics.

You will find further information on how Google Analytics handles user data is available in the Google Privacy Policy:

This website uses the function “demographic characteristics” of Google Analytics. This allows the creation of reports that contain information about the age, gender, and interests of site visitors. This data comes from interest-related advertising by Google as well as from visitor data from third parties. This data cannot be assigned to a specific person. You can disable this feature at any time in the preferences of your Google Account or generally reject the collection of your data by Google Analytics as described in the ׅ“objection to data collection” section.

The provider of these functions is: Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. You will find further information on how Google Analytics handles user data is available in the Google Privacy Policy:

Information on Google Analytics Remarketing
Our website uses functions of Google Analytics Remarketing in connection with the cross-device functions of Google AdWords and Google DoubleClick. This function enables the target groups created with Google Analytics Remarketing to be linked with the cross-device functions of Google AdWords and Google DoubleClick. This means that interest-related, personalized advertising messages that have been adapted to you depending on your previous usage and surfing behavior on one device (e.g. mobile phone) can also be displayed on another of your devices (e.g. tablet or PC).

If you have given your consent, Google will link your web and app browsing history to your Google account for this purpose. This way, you can see the same personalized ads on every device you log into with your Google Account.

To support this feature, Google Analytics collects Google-authenticated user IDs that are temporarily linked to our Google Analytics data to define and create target groups for the cross-device ad targeting.

You can opt-out of cross-device remarketing / targeting by disabling personalized advertising in your Google account.

The aggregation of information collected in your Google account is based solely on your consent, which you can give or withdraw to Google. For data collection operations that are not merged in your Google account (for example, because you do not have a Google account or have objected the merge), the collection of data is based on Article 6 (1) f) of the GDPR. Our legitimate interest arises from the fact that we have an interest in the anonymous analysis of website visitors for advertising purposes.

The provider of these functions is: Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Further information on these functions and more information on the handling of user data by Google Analytics Remarketing is available in the corresponding Google Privacy Policy.

Information on Google AdWords and Google Conversion Tracking
Our website sometimes uses the function Google AdWords. We use so-called conversion tracking in the context of Google AdWords. If you click on an advert placed by Google a cookie for the conversion tracking is placed. These cookies (small text files that the Internet browser places on the computer of the user) expire after 30 days and do not provide identification of the user. If a user visits certain pages of this website when the cookie has not yet expired, Google and we can see that the user has clicked on the ad and has been redirected to this page.

Every Google AdWords customer is assigned a different cookie. The information collected via conversion cookies serves the generation of conversion statistics for us as AdWords customers. We are informed of the total number of users who clicked on our ad and were redirected to a page with a conversion tracking tag. However, we do not receive any information with which we could personally identify users.

The storage of “conversion cookies” is based on Art. 6 (1) f) GDPR. We have a legitimate interest in the anonymous analysis of the user behavior in order to optimize both our website and our advertising.

The provider of these functions is: Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. More information about Google AdWords and Google Conversion Tracking and their handling of user data are available in the Google Privacy Policy.

If you don't want to be part of the tracking, you can object to this use by deactivating the Google Conversion Tracking cookie in the user settings of your Internet browser. When you do so, you will not be included in the conversion tracking statistics. You can set your browser so that you are informed about the placing of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or generally, and activate the automatic deletion of cookies when closing the browser. When cookies are deactivated, the functionality of the website may be limited.

4. Transfer of personal data and data processing by third parties

In general, we use personal data exclusively for internal business purposes and don't transfer any data to external parties, unless this is necessary for the performance of the contract, permitted by law, or you have given your consent.

We can, however, enter into contracts with companies or persons (“processors”) to transfer the performance of certain tasks in our name. For this purpose it may be necessary that we grant the processors access to personal data. Our processors are obliged to maintain the confidentiality of the transmitted personal data and may not use the information for purposes other than those specified by us. Such tasks carried out by processors may include, for example, services in the areas of technology, payment and delivery service, marketing, credit risk minimization or fraud protection, analysis provider, search information provider, or the group-internal processing.

Such transmission of personal data will be carried out in accordance with the applicable data protection laws and we make sure that appropriate contractual, technical, and organizational measures are in place.

5. Services or contents of third parties on our website

We offer third party services and/or content on our website. If you use such third party services or if the content of third parties is displayed, then communication data is exchanged between you and the respective provider for technical reasons. We do not monitor the websites nor the data protection practices of the third parties who manage these websites. Accordingly, this data protection regulation does not apply to the linked pages or services of third parties.

The respective service or content provider can also collect additional data and use it for their own other purposes. To the best of our knowledge, we have configured the services and content of providers who process data for their own purposes so that either the communication for other purposes than for presenting the services or content on our website is blocked or that personal data can only be collected if you have decided to use the respective service. However, as we have no control over the data which is collected and processed by third parties, we are not able to provide binding information on the scope and purpose of such processing of your data by the respective third party.

a) Website links
We provide links referring to pages of third parties for your optimal information on our website. As they are websites of other providers, we do not have any influence on the contents for which the provider is exclusively responsible. Accordingly, this data protection regulation does not apply to the linked pages of third parties.

b) Tools
Our website uses the functions of different tools to increase the functionality of our website.

Information on Google Web Fonts
Our website uses the “Web Fonts” function provided by Google for the uniform display of fonts. When you access a page, your browser loads the required web fonts to your browser cache to display texts and fonts correctly. For this purpose, your browser connects to Google's servers. This will inform Google that your IP address has been used to access our website.

The use of Google Web Fonts is in the interest of a uniform and appealing presentation of our online offers. This represents a legitimate interest according to Art. 6 (1) f) GDPR. If your browser does not support web fonts, your computer uses a default font.

The provider of these functions is: Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. You will find further information on how Google is handling user data in the Google Privacy Policy.

6. Deletion of personal data

Providing we do not specify any particular retention periods in this data protection regulation, these general rules apply:

As a general rule, your data will be deleted as soon as it is no longer necessary for the intended purposes or if you withdraw your consent or object to its use for legitimate reasons. Beyond this point in time data will only be stored if this is necessary according to a legal regulation to which we are subject (e.g. tax and commercial law regulations) or if data is needed for the establishment, exercise or defense of legal claims.

7. Security

All information you provide to us is stored on servers within the European Union, the EEA, and Switzerland. We place great emphasis on ensuring an adequate level of data protection in the respective country.

We use appropriate technical and organizational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction, or unauthorized access by third parties. Our security measures are continuously improved and adapted in line with technological developments.

However, we would like to point out that data transmission over the Internet (e.g. communication by e-mail) may be subject to security gaps. Complete protection of data against access by third parties is not possible.

8. Changes to the data protection regulation

This data protection regulation may be subject to amendments, for example due to amendments in the law or changes in processing. We therefore ask you to read this page regularly.