This Privacy Policy outlines how Silhouettemirror, operated by AGS Alu-Glas-Spiegel-Bau Handels GmbH, collects, uses, and protects your personal data when you visit our website or make a purchase. We are committed to maintaining the highest standards of data integrity and transparency in compliance with the General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG), and relevant United States privacy frameworks.
- Data Controller
The entity responsible for the processing of personal data under this policy is:
- AGS Alu-Glas-Spiegel-Bau Handels GmbH Elsässer Str. 29, 81667 München, Germany
- Commercial Register: Amtsgericht München, HRB 117191
- Email: mirror@silhouettemirror.com
- Telephone: +49 89 4482585
- Collection of Personal Data
We collect personal information necessary to facilitate your commercial transactions and provide a professional service. This includes:
- Identity Data: Name, title, and contact details.
- Transaction Data: Address for delivery, billing information, and order history.
- Technical Data: IP address, browser type, and usage data collected via cookies to improve site functionality.
- Payment Processing
To ensure a professional and reliable checkout experience, we utilise Stripe as our primary payment processing partner.
When you complete a purchase, your payment details are collected and processed directly by Stripe. AGS Alu-Glas-Spiegel-Bau Handels GmbH does not store full credit card numbers or sensitive authentication data on our local servers. Stripe’s use of your personal information is governed by their own privacy policy, which adheres to international financial and data security standards.
- Legal Basis for Processing
We process your data based on the following legal grounds:
- Contractual Necessity: To fulfil your orders and provide customer support.
- Legal Obligation: To comply with German tax and commercial laws.
- Legitimate Interests: To maintain website integrity and prevent fraudulent activities.
- Data Retention
We retain personal data only for as long as is necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements.
- Commercial and Tax Records: In accordance with the German Commercial Code (Handelsgesetzbuch) and Tax Code (Abgeordneteordnung), certain transaction data is retained for a period of ten (10) years.
- Contractual Documentation: Correspondence and contract-related data are generally retained for the duration of the statutory limitation period for claims, typically three (3) to six (6) years depending on the jurisdiction (Germany/UK/US).
- Technical Logs: Server logs and transient data are deleted or anonymised within short cycles, typically not exceeding thirty (30) days, unless required for security investigations.
- International Data Transfers
As we serve clients in both Europe and the United States, your data may be processed in jurisdictions outside of the European Economic Area (EEA). We ensure that such transfers are conducted using appropriate safeguards, such as Standard Contractual Clauses (SCCs), to maintain a level of protection equivalent to that required under the GDPR. - Your Statutory Rights
Under applicable laws, you possess the following rights regarding your data:
- Access and Portability: The right to request a copy of the data we hold.
- Rectification and Erasure: The right to request correction or deletion of your data, subject to legal retention obligations.
- Object to Processing: The right to restrict certain types of data processing.
To exercise these rights, please contact our data controller at the email address provided above.
- Data Security
We implement robust organisational and technical measures to protect your personal information against unauthorised access, alteration, or loss. While we maintain rigorous protocols to safeguard our digital environment, we acknowledge that no electronic transmission or storage method can be described as entirely infallible; however, we strive to use commercially acceptable means to protect your data.