Privacy Policy

DATA PROTECTION POLICY

IGEPA group attaches great importance to the protection and the lawful collection, processing and use of your data and the safeguarding of your privacy. In order to ensure the confidentiality of your data under the applicable statutory provisions of data protection law, we have taken technical and organisational measures to protect your data from manipulation, loss, destruction or access from unauthorised persons.

In the following, we shall inform you of the collection and processing of your personal data at IGEPA group GmbH & Co. KG and the rights to which you are entitled in accordance with data protection law.

 

I. Name and contact details of the data controller and data protection officers

I. The companies of the IGEPA group (‘We’ or individually ‘the respective company’) are jointly responsible for the processing of your data described below in accordance with Art. 4 No. 7, 26 GDPR,

  1. Freytag & Petersen GmbH & Co. KG, Longericher Straße 215-221, 50739 Köln, Tel.: +49 (0)221 1776 0, Fax: +49 (0)221 1776 500,
    E-Mail: freypeter_info@igepagroup.com,
  2. 2H GmbH & Co. KG, Dieselstraße 24, 85748 Garching bei München, Tel.: +49 (0)89 32950 0, Fax: +49 (0)89 32950 100,
    E-Mail: 2h-garching@igepagroup.com,
  3. vph GmbH & Co. KG, Gutenbergstraße 4, 30966 Hemmingen, Tel.: +49 (0)511 9428 0, Fax:+49 (0)511 9428 290,
    E-Mail: vp_info@igepagroup.com,
  4. E. Michaelis & Co. (GmbH & Co.) KG, Senefelder-Ring 14, 21465 Reinbek, Tel. +49 (0)40 72777 0, Fax: +49(0)40 727 77 466,
    E-Mail: michaelis_info@igepagroup.com,
  5. Geiger GmbH & Co. KG, Schulze-Delitzsch-Straße 7, 73434 Aalen, Tel.: +49 (0)7361 599 0, Fax: +49 (0)7361 599 170,
    E-Mail: geiger_info@igepagroup.com,
  6. IGEPA Großhandel GmbH, Igepa-Ring 1, 06188 Landsberg / OT Queis, Tel.: +49 (0)34602 61 600, Fax: +49 (0)34602 61 899,
    E-Mail: igepaqueis_info@igepagroup.com,
  7. HANSA GmbH & Co. KG Großhandel, Heinz-Kerneck-Straße 8, 28307 Bremen, Tel.: +49 (0)421 4862 0, Fax: +49 (0)421 4862 200,
    E-Mail: hansa_info@igepagroup.com,
  8. IGEPA group GmbH & Co. KG, Heidenkampsweg 74-76, 20097 Hamburg, Telefon: +49 (0)40 727788 0, Fax: +49 (0)40 72 77 88 50,
    E-Mail: info@igepagroup.com

You can contact our data protection officers of the respective companiesas follows:

  1. Freytag & Petersen GmbH & Co. KG:
    Post:  Freytag & Petersen GmbH & Co. KG, „Datenschutzbeauftragter“, Longericher Straße 215-221, 50739 Köln, Tel.: +49 (0)221 1776 0,
    E-Mail: datenschutz@freypeter.de,
  2. 2H GmbH & Co. KG:
    Post: 2H GmbH & Co. KG, „Datenschutzbeauftragter“, Dieselstraße 24, 85748 Garching bei München, Tel: +49 (0)89 32950 0,
    E-Mail: 2h_datenschutz@igepagroup.com,
  3. vph GmbH & Co. KG:
    Post: vph GmbH & Co. KG, „Datenschutzbeauftragter“, Gutenbergstraße 4, 30966 Hemmingen, Tel: +49 (0)511 9428 0,
    E-Mail: datenschutz@vph-service.de,
  4. E. Michaelis & Co. (GmbH & Co.) KG:
    Post: E. Michaelis & Co. (GmbH & Co.) KG, „Datenschutzbeauftragter“, Senefelder-Ring 14, 21465 Reinbek, Tel.: +49 (0)40 72777 0,
    E-Mail: michaelis_info@igepagroup.com,
  5. Geiger GmbH & Co. KG:
    Post: Geiger GmbH & Co. KG, „Datenschutzbeauftragter“, Schulze-Delitzsch-Straße 7, 73434 Aalen, Tel.: +49 (0)7361 599 0,
    E-Mail: geiger_datenschutz@igepagroup.com,
  6. IGEPA Großhandel GmbH:
    Post: IGEPA Großhandel GmbH, „Datenschutzbeauftragte“, Igepa-Ring 1, 06188 Landsberg / OT Queis, Tel.: +49 (0)34602 61 600,
    E-Mail: igepa_queis_datenschutz@igepagroup.com,
  7. HANSA GmbH & Co. KG Großhandel,
    Post: HANSA GmbH & Co. KG Großhandel, „Datenschutzbeauftragter“, Heinz-Kerneck-Straße 8, 28307 Bremen, Tel.: +49 (0)421 4862 141,
    E-Mail: datenschutz@hansa-grosshandel.de,
  8. IGEPA group GmbH & Co. KG:
    Post: IGEPA group GmbH & Co. KG, “Datenschutzbeauftragter”, Heidenkampsweg 74-76, 20097 Hamburg, Tel.: +49 (0)40 727788 0,
    E-Mail: datenschutz@igepagroup.com.

 

II. General information on data collection and purposes and legal bases of data processing

  1. We process your personal data in line with the provisions of the GDPR, the German Federal Data Protection Act (BDSG) and all other applicable legislation.
  2. We only process personal data as a rule if this is required to provide our services and a functioning web page. The individual data processed and how this is used are based on the commissioned or agreed services or the object of the intended, ongoing or concluded contractual relationship.
  3. The primary purpose of data processing is to establish and fulfil a contractual relationship with you. If you make contact with us via a contact form, by phone, email or post, or by other means, we store the data you disclose in order to fulfil, for instance, goods deliveries or other services and associated activities, and to be able to communicate with you. The overriding legal basis for this is Article 6, para. 1 b) GDPR. Your separate consent, in accordance with Article 6, para. 1 a), 7 GDPR, may also be called upon as a permission provision under data protection law. We also process your data in order to be able to fulfil our legal obligations, particularly in the realm of commercial and tax law. The basis for this is Article 6, para. 1 c) GDPR. If necessary, we also process your data on the basis of Article 6, para. 1 f) GDPR, in order to safeguard our legitimate interests or those of third parties.

 

III. Categories of personal data and duration of storage

  1. Relevant personal data categories may include, in particular:
    • Personal details (title, first name, surname, profession/industry and similar)
    • Address/contact details (address, email address, telephone number and similar)
    • Contract details (date and occasion for contact being made, contact partners’ contact details, content of contracts, bank details, customer history and similar)
    • Information on your financial situation (payment behaviour, credit information, i.e. data for assessing financial risk)
    • Data regarding your use of the media we provide (e.g. time of accessing our web pages, apps or newsletter, clicked pages/links of ours or entries and similar).
  2. We delete your personal data as soon as the purpose of storage lapses. Once the contractual relationship has come to an end, your personal data shall be stored for as long as we are legally obliged to do so. This occurs regularly due to legal obligations to provide evidence and retain information which are set out in the German Commercial Code and Fiscal Code, among others. The storage periods are accordingly up to ten years. As part of this process, personal data may also be retained for the period in which claims may be asserted against us (statutory limitation period of three or up to thirty years).

 

IV. Transmission of data to third parties

  1. Within our company, your personal data shall only be obtained by those persons and entities requiring said data to fulfil our contractual and legal obligations or as part of handling and implementing our legitimate interest. Your data is also transmitted to certain companies within our group which take care of central data processing tasks (e.g. marketing, IT support). Corresponding contract processing agreements have been concluded with these companies and compliance with statutory data protection provisions has been ensured.
  2. Your personal data is only transmitted to third parties
    • if you have given us your explicit consent to said transmission in accordance with Article 6, para. 1 a) GDPR,
    • according to Article 6, para. 1 b) GDPR, insofar as this is required to perform the contractual relationship with you (e.g. logistics service providers),
    • for the purposes of fulfilling legal stipulations, according to which we are obliged to disclose, report or pass on data (e.g. financial authorities) or the passing on of data is in the public interest (Article 6, para. 1 c) GDPR),
    • insofar as external service providers process data on our behalf as processors or contractors (e.g. external IT centres, maintenance of telecommunications and IT facilities and/or applications, archiving, document processing, data destruction, purchasing/acquisition, advertising and marketing),
    • on the basis of our legitimate interest or the legitimate interest of a third party in accordance with Article 6, para. 1 f) GDPR and insofar as there is no reason to assume that you have an overwhelming interest worthy of protection in your data not being passed on (e.g. credit agencies, commercial credit insurance, collection service providers, lawyers, courts, experts).

 

V. Collection of personal data on our website

    1. Visiting our website
      1. Each time our web page is accessed, our system automatically records data and information which your browser transmits to our server (known as ‘server log files’). When you wish to view our web page, we collect data which is technically required for us to display our web page to you and ensure stability and security. The data is also stored in our system’s log files. This data includes the IP address, date and time of the request, the content of the request (specific page), access status/HTTP status code, the amount of data transferred, the web page the request comes from, browser, operating system and its interface and language and version of the browser software. This data is not stored together with the user’s other personal data. However, we reserve the right to retrospectively examine the server log files if there are specific indications of unlawful use.
      2. The legal basis for the temporary storage of data and log files is Article 6, para. 1 f) GDPR. The temporary storage of the IP address by the system is required to enable the web page to be delivered to your browser. Your IP address must be stored for the duration of the session for this purpose. Storage in log files occurs in order to ensure the functionality of the web page. The data also helps us optimise the web page and ensure the security of our IT systems. These objectives are also the source of our legitimate interest in data processing in accordance with Article 6, para. 1 f) GDPR. The data is not evaluated for marketing purposes in this context.
        The web host of this website is IONOS SE, Elgendorfer Str. 57, 56410 Montabaur. www.ionos.de
      3. The data is deleted as soon as it is no longer required to fulfil the purpose for which it was collected. In the case of the collection of data for the provision of the website, this is the case when the respective session has ended. Otherwise, the data will be deleted within a maximum of 8 weeks after accessing the website.
      4. The collection of the data when visiting the web page and the storage of the data in log files is crucial for the operation of the web page. Accordingly, you do not have the option to object.
      5. As well as the use of our website for purely informational purposes, we offer various services which you may use if interested. In order to do so, you usually need to provide additional personal data which we use to provide the relevant service and for which the above principles of data processing apply.
      6. We sometimes use external service providers to process your data. They have been carefully selected and commissioned by us, are bound by our instructions and are regularly monitored. If our service providers or partners have their headquarters in a state outside of the European Economic Area (EEA), we shall inform you of the consequences of this circumstance in the description of the relevant service.
      7. We may also pass on your personal data to third parties if participation in promotions, competitions, conclusion of contracts or similar services are offered by us together with partners. You will receive more detailed information in this regard when providing your personal data or below in the description of the relevant service.

 

    1. Use of cookies
      1. When you use our web page, cookies are stored on your computer system. Cookies are text files which are stored in the Internet browser or by the Internet browser on your computer system. If you access a web page, a cookie can be stored on your operating system. This cookie contains a characteristic string enabling clear identification of the browser when you access the web page again.
      2. This web page uses the following types of cookies, whose scope and function are explained below:
        • Transient cookies (temporary use)
        • Persistent cookies (time-limited use)
        • Third-party cookies (from third-party providers according to separate information)
      3. Transient cookies are automatically erased when you close the browser. These include session cookies, in particular. These store what is known as a session ID, with which various requests from your browser can be allocated to the overall session. This allows your computer to be recognised again when you return to a web page. The session cookies are erased when you log out or close the browser. The legal basis for processing personal data using transient cookies is Article 6, para. 1 f) GDPR. The purpose of using these cookies is to make it easier for you to use web pages. Some functions of our web page may not be provided without the use of cookies. For these functions, it needs to be possible to recognise the browser again even after switching pages. These objectives are also the source of our legitimate interest in processing personal data in accordance with Article 6, para. 1 f) GDPR.
      4. Persistent cookies are only used in conjunction with the web analytics services we use and are only used for as long as is required for this purpose; they have a maximum lifespan of two years. You may delete the cookies in the security settings of your browser at any time. In that event, the functions and user-friendliness of the service may be limited. The legal basis for processing personal data using persistent cookies is Article 6, para. 1 f) GDPR. Analytics cookies are used for the purposes of improving the quality of our web page and its content. These analytics cookies help us learn how the web page is used and allow us to constantly improve our service. These objectives are also the source of our legitimate interest in processing personal data in accordance with Article 6, para. 1 f) GDPR.
      5. Cookies which are not technically required to provide our service are only used with your consent, which you may revoke at any time. You agree with your continued use of the web page with the relevant browser setting to the use of cookies within the framework of this data protection policy. You can thus inform us of your consent through your browser settings, such as by specifying that you shall be informed of the use of cookies and that they shall only be accepted once you have explicitly confirmed this. In this way you can also specify that you authorise the acceptance of cookies for specific cases or on a general basis. You can configure your browser setting according to your wishes and manage, for instance, the acceptance or rejection of third-party cookies or all cookies. However, please note that it may not then be possible to use all functions of this web page. The legal basis for the processing of personal data using cookies for analytics purposes is, subject to the existence of consent in this regard from the user, Article 6, para. 1 a) GDPR.

 

    1. Use of Google Tag Manager and Google Analytics 4Our website uses Google Tag Manager to manage and provide tracking tags on our website. Via Google Tag Manager, we use Google Analytics 4 (GA4) to analyse user behaviour on our website. GA4 collects information such as your IP address, device type, browser actions and session duration. This data helps us to understand how visitors interact with our website so that we can improve the user experience and functionality of the website.Google may use the data collected on our website to improve its own services. For more information on how Google processes your data, please refer to Google’s privacy policy.Cookies and data collectionWe use cookies and similar technologies to collect and store information when you visit our website. These cookies help us to understand user behaviour and preferences. You can manage your cookie settings or disable tracking by visiting our Cookie Policy or using the Google Analytics Opt-out

      Your options

      You have the right to request access to the personal data we hold about you, to request the rectification of inaccurate data or to request the erasure of your data. For all data protection enquiries, you can contact us at IGEPA group GmbH & Co. KG, Heidenkampsweg 74 – 76, D-20097 Hamburg, +49 (0)40 72 77 880

 

    1. Google AnalyticsWe use Google Analytics on our website. This is a web analysis service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, hereinafter referred to as ‘Google’.The Google Analytics service is used to analyse the usage behaviour of our website. The legal basis is Art. 6 para. 1 lit. f) GDPR. Our legitimate interest lies in the analysis, optimisation and economic operation of our website.Usage and user-related information, such as IP address, location, time or frequency of visits to our website, is transmitted to a Google server in the USA and stored there. However, we use Google Analytics with the so-called anonymisation function. This function allows Google to truncate the IP address within the EU or EEA.The data collected in this way is in turn used by Google to provide us with an analysis of the visit to our website and the usage activities there. This data can also be used to provide other services related to the use of our website and the use of the Internet.

      Google states that it will not associate your IP address with any other data. In addition, Google keeps under

      https://www.google.com/intl/de/policies/privacy/partners

      for further information on data protection law, for example on the options for preventing the use of data.

      Google also offers the following at

      https://tools.google.com/dlpage/gaoptout?hl=de

      offers a so-called deactivation add-on along with further information on this. This add-on can be installed with the most common Internet browsers and offers you further control over the data that Google collects when you visit our website. The add-on informs the JavaScript (ga.js) of Google Analytics that information about your visit to our website should not be transmitted to Google Analytics. However, this does not prevent information from being transmitted to us or to other web analysis services. You can of course also find out whether and which other web analysis services we use in this privacy policy.

 

    1. Use of contact forms / registrationWe collect your personal data if you provide this to us of your own accord via our contact forms. We then record the relevant information which materialises in conjunction with contact being made. This includes, in particular, names and contact details provided and the date and occasion of contact being made. The personal data recorded concerning you is only used for the purpose of providing you with the desired products or services and to correspond with you. Data processing occurs on the basis of Article 6, para. 1 b) GDPR.The personal data collected from you will be used for the purpose of providing you with the requested products or services and corresponding with you (legal basis Art. 6 para. 1 b) GDPR), for the fulfilment of legal obligations (legal basis Art. 6 para. 1 c) GDPR) or on the basis of legitimate interests of us or third parties (legal basis Art. 6 para. 1 f) GDPR), which are described in this privacy policy.You are not obliged to provide the aforementioned personal data. The data provided may be necessary for the conclusion of a contract. Without the provision of the data, it may not be possible to communicate, conclude or fulfil a contract.The data relevant in each individual case is transferred to public authorities on the basis of statutory provisions or a contractual agreement if overriding legal provisions apply, to external service providers or other contractors and to other external bodies, provided you have given your consent or a transfer is permitted for reasons of overriding interest.

      We transfer the collected data to external service providers (IT service providers, e.g. Heyflow GmbH, Jungfernstieg 49, 20354 Hamburg), who support us in data processing for the above-mentioned purposes.

      The data is erased as soon as it is no longer required to achieve the purpose of its collection. For the personal data from the entry form in the contact form, this is the case when the relevant conversation with you has come to an end.

      The conversation has come to an end if it can be gathered from the circumstances that the relevant matter has been dealt with conclusively. If the data disclosed is subject to retention obligations set out in tax and commercial law, it is stored for the duration of the retention obligations of ten years and then erased, unless you have consented to storage beyond this or further processing of the data is required for the assertion, exercise or defence of legal claims (statutory limitation period of three or up to thirty years).

 

  1. Data security
    1. Within the web page visit, we use the common SSL (secure socket layer) procedure in conjunction with the highest level of encryption supported by your browser. This is usually 256-bit encryption. If your browser does not support 256-bit encryption, we use 128-bit v3 technology instead. You can tell whether an individual page on our web presence is communicated in an encrypted form from the closed display of the key or castle symbol in the lower status bar of your browser.
    2. We also use suitable technical and organisational security measures to protect your data from accidental or malicious manipulations, partial or total loss, destruction, or unauthorised access from third parties. Our security measures are subject to ongoing improvement in line with technological advances.

 

V. Your rights

  1. The applicable data protection law guarantees you comprehensive subjects’ rights with regard to the processing of your personal data (rights to disclosure and intervention), as follows:
  2. In accordance with Article 15 GDPR, you have the right to request access to the personal data processed by us concerning you. In particular, you may request access to the purposes of the processing, the category of personal data, the categories of recipient to whom your personal data has been or will be disclosed, the envisaged storage period, the existence of the right to rectification, erasure, restriction of processing or to object, the right to lodge a complaint, the data source, if it has not been collected by us, and the existence of automated decision-making, including profiling, as well a any meaningful information about the particularities.
  3. In accordance with Article 16 GDPR, you may request the rectification without undue delay of inaccurate personal data stored by us concerning you or the completion of said data. In accordance with Article 17 GDPR, you have the right to request the erasure of the personal data stored by us concerning you, unless process is required for the exercise of the right to freedom of speech and information, the fulfilment of a legal obligation, on grounds of public interest or for the assertion, exercise or defence of legal claims.
  4. In accordance with Article 18 GDPR, you have the right to request the restriction of processing of your personal data, insofar as the accuracy of the data is disputed by you, the processing is unlawful, you nevertheless refuse its erasure and we no longer require the data, you nevertheless require this for the assertion, exercise or defence of legal claims, or you have lodged an objection to the processing in accordance with Article 21.
  5. In accordance with Article 20 GDPR, you have the right to receive your personal data, which you provided to us, in a structured, commonly used and machine-readable format or request its transmission to another controller.
  6. In accordance with Article 7, para. 3 GDPR, you have the right to withdraw consent you have previously given to the processing of your data from us at any time. Any such withdrawal influences the permissibility of processing your personal data once you have declared it to us.If our processing of your personal data is based on the weighing up of interests, you can lodge an objection to processing. This occurs, in particular, if processing is not required for the fulfilment of a contract with you, which is outlined by us in each case for the previously described functions. If any such objection is exercised, we ask for an explanation of the reasons why we should not process your personal data as we have done. In the event of your justified objection, we assess the situation and shall either cease or modify data processing or indicate to you our mandatory grounds worth protecting for continued processing.You may naturally object to the processing of your personal data for the purposes of marketing and data analysis at any time. In order to do this, you may use the link available in every newsletter or inform us of your objection to marketing using the following contact details:IGEPA group GmbH & Co. KG
    Heidenkampsweg 74-76
    20097 Hamburg
    Tel.: +49 (0)40 72 77 88 – 0
    Email: info@igepagroup.com
  7. In accordance with Article 77 GDPR, you also have the right to lodge a complaint with a supervisory authority regarding our processing of your personal data, namely to the state officer for data protection and freedom of information responsible for us in Hamburg, Klosterwall 6, 20095 Hamburg, telephone: +49 (0)40 / 42 85 440 40, email: mailbox@datenschutz.hamburg.de.

 

VI. Further information on data processing within and outside our website

We have concluded an agreement in accordance with Art. 26 GDPR to regulate the processing of personal data under joint responsibility. This agreement regulates the rights and obligations of the contracting parties under data protection law in the implementation of the cooperation and, in particular, specifies the distribution and fulfilment of the tasks and obligations under data protection law.

The object of the data processing is the joint operation of software systems for the central administration of address data as well as product, supplier and customer information for inventory and dispatch control including route planning, the operation of joint websites and web shops, joint marketing and advertising measures as well as the provision of goods deliveries and other services. For this purpose, the controllers jointly process personal data of customers, interested parties and suppliers. The contracting parties are equally responsible for this processing.

The fulfilment of data subject rights in accordance with Art. 12 ff. GDPR and the processing of your corresponding enquiries have been divided between the companies of the IGEPA group as follows:

If you are a customer of the IGEPA group, your enquiries and data subject rights as well as the personal data will be processed by the responsible contracting party to which you are assigned. If a customer is assigned to several responsible parties, the responsible party is the contracting party in whose postcode area the respective data subject is based.

If you are a supplier of the IGEPA group, your enquiries and data subject rights as well as the personal data will be processed centrally via IGEPA group GmbH & Co. KG, Heidenkampsweg 74-76, 20097 Hamburg, Germany.

Enquiries and data subject rights as well as the personal data of other data subjects are processed by the contracting party in whose postcode area the data subject is located.

 

VII. Applicability of and changes to this data protection policy

  1. This data protection policy is currently valid as of August, 2024.
  2. As a result of the further development of our website and services thereupon or due to changed legal or official provisions, it may be necessary to amend this data protection policy. You may access and print the current data protection policy at any time at As a result of the further development of our website and services thereupon or due to changed legal or official provisions, it may be necessary to amend this data protection policy. You may access and print the current data protection policy at any time at https://www.igepa.de/datenschutzerklaerung/