1.1 We are pleased that you are visiting our website and thank you for your interest. In the following, we inform you about the handling of your personal data when using our website. Personal data is all data with which you can be personally identified.
1.2 The controller in charge for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is H. H. Rotert GmbH & Co. KG, Niedersachsenstr. 5, 49186 Bad Iburg, Germany, Tel.: +49 (0)5403-79690-0, Fax: +49 (0)5403-79690-19, email: info@rotert.com. The controller responsible for the processing of personal data is the natural or legal person who alone or jointly with others decides on the purposes and means of the processing of personal data.
2.1 In the case of merely informational use of our website, i.e. if you do not register or otherwise transmit information to us, we only collect data that your browser transmits to the site server (so-called "server log files"). When you access our website, we collect the following data that is technically necessary for us to display the website to you:
The processing is carried out in accordance with Art. 6 Para. 1 lit. f GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data will not be passed on or used in any other way. However, we reserve the right to check the server log files subsequently if there are concrete indications of illegal use.
2.2 This website uses SSL or TLS encryption for security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or inquiries to the controller). You can recognize an encrypted connection by the character string "https://" and the lock symbol in your browser line.
3.1 In order to make visiting our website attractive and to enable the use of certain functions, we use cookies, i.e. small text files that are stored on your terminal device, as well as similar technologies such as the local storage of your browser (local storage and session storage). Some of this information is automatically deleted when you close the browser or browser tab (so-called "session cookies"), some remains on your device for longer and allows page settings to be saved (so-called "persistent cookies"). You can find the storage period of the individual cookies in the overview in section 3.4 and in the cookie settings of your web browser.
3.2 Insofar as we store information in your terminal device or access information already stored in your terminal device, this is done in accordance with Section 25 Para. 2 No. 2 of the German Telecommunications Digital Services Data Protection Act (TDDDG) if this is strictly necessary for us to provide the digital service expressly requested by you (e.g. shopping cart, customer account, product search). In all other cases, the storage or access only takes place with your consent in accordance with Section 25 Para. 1 TDDDG. If personal data is also processed by individual cookies used by us, the processing is carried out in accordance with Art. 6 Para. 1 lit. b GDPR either for the performance of the contract, in accordance with Art. 6 Para. 1 lit. a GDPR in the case of consent given, or in accordance with Art. 6 Para. 1 lit. f GDPR to safeguard our legitimate interests in the best possible functionality of the website and a customer-friendly and effective design of the page visit.
3.3 Consent management with CCM19: To obtain and manage your consents, we use the Cookie Consent Manager CCM19 of Papoo Software & Media GmbH, Auguststr. 4, 53229 Bonn, Germany. When you access our website, the CCM19 script is loaded from the provider's servers in Germany; in the process, your IP address and technical information about the page request are transmitted to the provider. Your selection (consents given or refused, time of selection) is stored in the local storage of your browser under the entry "ccm_consent" for a period of one year so that we can respect your decision on further page views. The storage is carried out in accordance with Section 25 Para. 2 No. 2 TDDDG. The processing is carried out in accordance with Art. 6 Para. 1 lit. c GDPR in conjunction with Art. 7 Para. 1 GDPR to fulfil our legal obligation to be able to demonstrate consents, and in accordance with Art. 6 Para. 1 lit. f GDPR on the basis of our legitimate interest in a legally compliant and user-friendly management of consents. You can change your selection at any time via the CCM19 cookie settings (link "Settings") and withdraw consents given with effect for the future. Further information can be found in the provider's privacy policy: https://www.ccm19.de/datenschutzerklaerung.html
3.4 Overview of the services and cookies used (as configured in CCM19):
Technically necessary (without consent, Section 25 Para. 2 No. 2 TDDDG)
Analysis / statistics (only with consent, Section 25 Para. 1 TDDDG, Art. 6 Para. 1 lit. a GDPR)
You can view the complete and current list of cookies and storage entries, including their storage period, at any time in the CCM19 cookie settings.
3.5 You can also set your browser so that you are informed about the setting of cookies and can decide individually whether to accept them or exclude the acceptance of cookies for certain cases or in general. How you can change the cookie settings is described in the help menu of the respective browser:
Microsoft Edge: https://support.microsoft.com/en-us/edge/manage-cookies-in-microsoft-edge-view-allow-block-delete-and-use
Firefox: https://support.mozilla.org/en-US/kb/enable-and-disable-cookies-website-preferences
Chrome: https://support.google.com/chrome/answer/95647?hl=en
Safari: https://support.apple.com/en-gb/guide/safari/sfri11471/mac
Opera: https://help.opera.com/en/latest/web-preferences/#cookies
Please note that the functionality of our website may be limited if cookies are not accepted.
When you contact us (e.g. via contact form, email or telephone), personal data is processed exclusively for the purpose of handling and answering your request and only to the extent necessary for this.
The legal basis for processing this data is our legitimate interest in answering your request in accordance with Art. 6 Para. 1 lit. f GDPR. If your contact is aimed at a contract, the additional legal basis for the processing is Art. 6 Para. 1 lit. b GDPR. Your data will be deleted if it can be inferred from the circumstances that the matter concerned has been finally clarified and provided that there are no statutory retention obligations to the contrary.
Pursuant to Art. 6 Para. 1 lit. b GDPR, personal data is collected and processed to the extent required if you provide it to us when opening a customer account or for the execution of a contract. The data required can be found in the input mask of the respective form on our website. We store and use the data provided by you for contract processing.
Deletion of your customer account is possible at any time and can be done by sending a message to the above-mentioned address of the controller. After deletion of your customer account, your data will be deleted, provided that all contracts concluded via it have been completely processed, there are no statutory retention periods to the contrary and we have no continuing legitimate interest in further storage. If data is subject to statutory retention periods (e.g. under commercial and tax law), it will be blocked until these periods have expired and deleted thereafter.
6.1 Subscription to our email newsletter
If you subscribe to our email newsletter, we will regularly send you information about our offers. The only mandatory information for sending the newsletter is your email address. The provision of further data is voluntary and is used to be able to address you personally. For sending the newsletter, we use the so-called double opt-in procedure, which ensures that you only receive newsletters once you have expressly confirmed your consent to receive the newsletter by clicking on a verification link sent to the email address provided.
By activating the confirmation link, you give us your consent to the use of your personal data in accordance with Art. 6 Para. 1 lit. a GDPR. In doing so, we store your IP address entered by the Internet Service Provider (ISP) as well as the date and time of registration in order to be able to trace a possible misuse of your email address at a later date. The data collected by us when registering for the newsletter is used strictly for its intended purpose.
You can unsubscribe from the newsletter at any time via the link provided for this purpose in the newsletter or by sending a corresponding message to the controller named at the beginning. After successful unsubscription, your email address will be deleted immediately from our newsletter distribution list, unless you have expressly consented to further use of your data or we reserve the right to further data use, which is permitted by law and about which we inform you in this declaration.
6.2 Sending the email newsletter to existing customers
If you have provided us with your email address when purchasing goods or services, we reserve the right to regularly send you offers for similar goods or services, such as those already purchased, from our range by email. In this respect, we do not have to obtain separate consent from you in accordance with Section 7 Para. 3 UWG. The data processing is carried out solely on the basis of our legitimate interest in personalized direct advertising in accordance with Art. 6 Para. 1 lit. f GDPR. If you have initially objected to the use of your email address for this purpose, we will not send you an email. You are entitled to object to the use of your email address for the aforementioned advertising purpose at any time with effect for the future by notifying the controller named at the beginning. For this, you will only incur transmission costs according to the basic tariffs. After receipt of your objection, the use of your email address for advertising purposes will be stopped immediately.
7.1 To the extent necessary for contract processing for delivery and payment purposes, the personal data collected by us will be passed on to the commissioned transport company and the commissioned credit institution in accordance with Art. 6 Para. 1 lit. b GDPR.
If we owe you updates for goods with digital elements or for digital products on the basis of a corresponding contract, we process the contact data transmitted by you when ordering (name, address, email address) in order to inform you personally about pending updates within the statutory period via a suitable communication channel (e.g. by post or email) within the framework of our statutory information obligations pursuant to Art. 6 Para. 1 lit. c GDPR. Your contact details will be used strictly for the purpose of notifications about updates owed by us and will only be processed by us for this purpose to the extent necessary for the respective information.
To process your order, we also work together with the following service provider(s), who support us wholly or partially in the execution of concluded contracts. Certain personal data is transmitted to these service providers in accordance with the following information.
7.2 Transfer of personal data to shipping service providers
To fulfil our contractual obligations to our customers, we work with the following shipping service providers, depending on the consignment: DHL (Deutsche Post AG or DHL Paket GmbH, Bonn), UPS (United Parcel Service Deutschland S.à r.l. & Co. OHG, Neuss) and, for larger consignments, the freight forwarder Dachser SE, Kempten. We pass on your name, your delivery address and, if necessary for delivery, your telephone number exclusively for the purpose of delivering the goods in accordance with Art. 6 Para. 1 lit. b GDPR to the shipping service provider commissioned in each case.
We only pass on your email address to the shipping service provider for the purpose of announcing the delivery or arranging a delivery date if you have given your express consent to this in the ordering process in accordance with Art. 6 Para. 1 lit. a GDPR. Consent can be withdrawn at any time with effect for the future vis-à-vis the controller named above or vis-à-vis the shipping service provider.
7.3 Use of payment service providers: PayPal
The payment methods "PayPal", "direct debit via PayPal" and "credit card via PayPal" of the following provider are available on this website: PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter "PayPal").
If you select one of these payment methods, the payment data you provided during the ordering process (including name, address, bank and payment card information, currency and transaction number) as well as information about the content of your order will be passed on to PayPal in accordance with Art. 6 Para. 1 lit. b GDPR. Your data will be passed on exclusively for the purpose of payment processing and only to the extent necessary for this.
PayPal reserves the right to carry out a credit check for the payment methods "direct debit via PayPal" and "credit card via PayPal". For this purpose, your payment data may be passed on to credit agencies in accordance with Art. 6 Para. 1 lit. f GDPR on the basis of PayPal's legitimate interest in determining your solvency. PayPal uses the result of the credit check regarding the statistical probability of default for the purpose of deciding on the provision of the respective payment method. The credit report can contain probability values (so-called score values). As far as score values are included in the result of the credit report, they have their basis in a scientifically recognized mathematical-statistical procedure. Address data, among other things but not exclusively, is included in the calculation of the score values. You can object to this processing of your data at any time by sending a message to PayPal. However, PayPal may still be entitled to process your personal data if this is necessary for contractual payment processing.
Insofar as PayPal transfers personal data to companies of the PayPal group outside the European Economic Area (in particular PayPal, Inc. in the USA), PayPal relies on its binding corporate rules approved by the European data protection supervisory authorities in accordance with Art. 47 GDPR, available at https://www.paypal.com/de/legalhub/paypal/bcr. Further data protection information, including on the credit agencies used, can be found in PayPal's privacy policy: https://www.paypal.com/de/legalhub/paypal/privacy-full
For the payment methods "prepayment" and "invoice", we pass on the data required for payment processing to the credit institution commissioned by us in accordance with Art. 6 Para. 1 lit. b GDPR.
7.4 Conducting credit checks: Creditreform Boniversum
Should we provide services in advance (e.g. delivery on account), we reserve the right to carry out a credit check based on mathematical-statistical procedures in order to safeguard our legitimate interest in determining the solvency of our customers. We transmit the personal data required for a credit check in accordance with Art. 6 Para. 1 lit. f GDPR to the following service provider:
Creditreform Boniversum GmbH
Hammfelddamm 13
41460 Neuss
The credit report can contain probability values (so-called score values). As far as score values are included in the result of the credit report, they have their basis in a scientifically recognized mathematical-statistical procedure. Address data, among other things but not exclusively, is included in the calculation of the score values. We use the result of the credit check regarding the statistical probability of default for the purpose of deciding on the establishment, execution or termination of a contractual relationship.
You can object to this processing of your data at any time by sending a message to the controller responsible for data processing or to the aforementioned credit agency. However, we may still be entitled to process your personal data if this is necessary for contractual payment processing.
Own review reminder (no sending by a customer review system)
We use your email address for a one-time reminder to submit a review of your order for the review system we use, provided that you have given us your express consent to do so during or after your order in accordance with Art. 6 Para. 1 lit. a GDPR.
You can revoke your consent at any time by sending a message to the controller responsible for data processing.
For the search function and the display of our product overviews, we use the Doofinder service of Doofinder S.L., C/ Cronos 63, 28037 Madrid, Spain. When you use the search and access the catalogue views, your IP address, your search queries, the products viewed and technical information about your browser and terminal device are transmitted to Doofinder servers in the European Union and processed there in order to show you suitable search results and product overviews. For this purpose, Doofinder stores the entries listed in section 3.4 (including a random user ID, a session ID and recently viewed products) in the local storage of your browser.
The storage of this information in your terminal device is carried out in accordance with Section 25 Para. 2 No. 2 TDDDG, as it is strictly necessary for the product search and catalogue display requested by you. Personal data is processed in accordance with Art. 6 Para. 1 lit. f GDPR on the basis of our legitimate interest in a functional and user-friendly product search and, insofar as you use our shop to initiate or perform a contract, in accordance with Art. 6 Para. 1 lit. b GDPR. Doofinder processes the data on our behalf (Art. 28 GDPR).
Further information can be found in Doofinder's privacy policy: https://www.doofinder.com/en/privacy-policy
The Trusted Shops Trustbadge is integrated on this website to display our Trusted Shops seal of approval and to offer the Trusted Shops membership for buyers after an order. The Trustbadge and the services advertised with it are an offer of Trusted Shops SE, Subbelrather Straße 15c, 50823 Cologne, Germany.
This serves to safeguard our legitimate interests in optimal marketing of our offer, which prevail in the context of a balancing of interests, in accordance with Art. 6 Para. 1 lit. f GDPR. For the technical function of the Trustbadge, the entry "trstd-csp-probe" is stored in the session storage of your browser for the duration of the session; this is done in accordance with Section 25 Para. 2 No. 2 TDDDG.
When the Trustbadge is called up, the web server automatically saves a so-called server log file, which contains, for example, your IP address, date and time of the call, the amount of data transferred and the requesting provider (access data) and documents the call. This access data is not evaluated and is automatically overwritten no later than seven days after the end of your visit to the site.
Further personal data will only be transferred to Trusted Shops if you decide to use Trusted Shops products after completing an order or have already registered for use. In this case, the contractual agreement concluded between you and Trusted Shops applies. Further information can be found in the Trusted Shops privacy notice: https://www.trustedshops.de/impressum-datenschutz/
This website uses Google Tag Manager of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Google Tag Manager is a tool for managing website tags; other services (e.g. web analytics services) can be integrated into our website via it. When Google Tag Manager is loaded, your IP address is transmitted to Google servers. Data may also be transferred to Google LLC in the USA. The services integrated via Google Tag Manager may set the cookies listed in section 3.4.
Google Tag Manager and the services integrated via it are only used if you have given your consent in accordance with Section 25 Para. 1 TDDDG and Art. 6 Para. 1 lit. a GDPR via our cookie consent tool. You can withdraw your consent at any time with effect for the future by deactivating this service in the CCM19 cookie settings.
For data transfers to the USA, Google LLC has joined the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision of the European Commission (Art. 45 GDPR). The certification can be viewed at https://www.dataprivacyframework.gov/list. Further information can be found in Google's privacy policy: https://policies.google.com/privacy?hl=en
12.1 Google Analytics 4
This website may use Google Analytics 4, a web analysis service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"), to statistically evaluate the use of our website and to improve our offer. Google Analytics uses cookies (see section 3.4) that enable an analysis of your use of the website. The information generated in this way (e.g. pages accessed, length of stay, origin, information about browser and terminal device as well as approximate location) is transferred to Google servers and stored there; this may also involve a transfer to servers of Google LLC in the USA. According to Google, IP addresses are not logged or stored by Google Analytics 4. Google processes the data on our behalf (Art. 28 GDPR).
Google Analytics is only used if you have given your consent in accordance with Section 25 Para. 1 TDDDG and Art. 6 Para. 1 lit. a GDPR via our cookie consent tool. Without this consent, Google Analytics will not be used during your visit to the site. You can withdraw your consent at any time with effect for the future by deactivating this service in the CCM19 cookie settings.
For data transfers to the USA, Google LLC has joined the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision of the European Commission (Art. 45 GDPR). Details on the processing initiated by Google Analytics can be found here: https://policies.google.com/technologies/partner-sites
12.2 Microsoft Clarity and Microsoft Advertising (UET)
This website may use the services Microsoft Clarity and Microsoft Advertising Universal Event Tracking (UET) of Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, D18 P521, Ireland ("Microsoft"). Microsoft Clarity is used for the statistical evaluation of user behaviour (e.g. clicks, mouse movements, scroll depth) to improve our website; UET is used to measure the success of advertisements in Microsoft Advertising. For this purpose, cookies are set (see section 3.4) and usage data including your IP address is transferred to Microsoft servers; this may also involve a transfer to Microsoft Corporation in the USA.
The services are only used if you have given your consent in accordance with Section 25 Para. 1 TDDDG and Art. 6 Para. 1 lit. a GDPR via our cookie consent tool. You can withdraw your consent at any time with effect for the future by deactivating these services in the CCM19 cookie settings.
For data transfers to the USA, Microsoft Corporation has joined the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision of the European Commission (Art. 45 GDPR). Further information can be found in Microsoft's privacy statement: https://www.microsoft.com/en-us/privacy/privacystatement
13.1 The applicable data protection law grants you the following rights of data subjects (rights of information and intervention) vis-à-vis the controller with regard to the processing of your personal data, whereby reference is made to the stated legal basis for the respective exercise requirements:
13.2 RIGHT TO OBJECT
IF, WITHIN THE FRAMEWORK OF A BALANCING OF INTERESTS, WE PROCESS YOUR PERSONAL DATA ON THE BASIS OF OUR PREDOMINANT LEGITIMATE INTEREST, YOU HAVE THE RIGHT AT ANY TIME TO OBJECT TO THIS PROCESSING WITH EFFECT FOR THE FUTURE ON GROUNDS ARISING FROM YOUR PARTICULAR SITUATION.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED. HOWEVER, FURTHER PROCESSING IS RESERVED IF WE CAN PROVE COMPELLING REASONS WORTHY OF PROTECTION FOR THE PROCESSING WHICH OUTWEIGH YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FREEDOMS, OR IF THE PROCESSING SERVES THE ASSERTION, EXERCISE OR DEFENSE OF LEGAL CLAIMS.
IF YOUR PERSONAL DATA IS PROCESSED BY US FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR THE PURPOSE OF SUCH ADVERTISING. YOU CAN EXERCISE THE OBJECTION AS DESCRIBED ABOVE.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED FOR DIRECT MARKETING PURPOSES.
The duration of the storage of personal data is measured based on the respective legal basis, the purpose of processing and, if relevant, additionally based on the respective statutory retention period (e.g. commercial and tax retention periods).
When processing personal data on the basis of express consent pursuant to Art. 6 Para. 1 lit. a GDPR, the data concerned is stored until you withdraw your consent.
If there are statutory retention periods for data that is processed within the framework of legal or quasi-legal obligations on the basis of Art. 6 Para. 1 lit. b GDPR, this data will be routinely deleted after the retention periods have expired, provided that it is no longer required for contract fulfilment or contract initiation and/or we have no continuing legitimate interest in further storage.
When processing personal data on the basis of Art. 6 Para. 1 lit. f GDPR, this data is stored until you exercise your right of objection under Art. 21 Para. 1 GDPR, unless we can prove compelling reasons worthy of protection for the processing which outweigh your interests, rights and freedoms, or the processing serves the assertion, exercise or defence of legal claims.
When processing personal data for the purpose of direct advertising on the basis of Art. 6 Para. 1 lit. f GDPR, this data is stored until you exercise your right of objection under Art. 21 Para. 2 GDPR.
Unless otherwise stated in the other information in this declaration about specific processing situations, stored personal data will otherwise be deleted if it is no longer necessary for the purposes for which it was collected or otherwise processed.
As of: October 2026 (draft)
