Privacy policy

We take the protection of your personal data very seriously and strictly adhere to the rules of data protection laws. Personal data is collected on this website only to the extent technically necessary. In no case will the data collected be sold or otherwise disclosed to third parties. The following explanation gives you an overview of how we guarantee the protection of your data and what data is collected for which purpose.

2 Scope

This privacy policy is intended to inform the users of this website in accordance with the Federal Data Protection Act and the Telemedia Act on the type, scope and purpose of the collection and use of personal data by the website operator Carts & Parts.

The website operator Carts & Parts takes your privacy very seriously and handles your personal information confidentially and in accordance with the law.

Keep in mind that data transmission on the Internet can generally be subject to security vulnerabilities. Full protection against access by strangers is not possible.

3 Information regarding the collection of personal data

In the following we inform about the collection of personal data when using our website. Personal data is all data that is referring to you personally, e.g. name, address, e-mail addresses, user behavior, etc.

Responsible according to Article 4 (7) of the EU General Data Protection Regulation (GDPR) is:

You can reach our data protection officer under DPO@carts-parts.com or via our postal address with the addition "Data protection officer".

When contacting us via e-mail or using a contact form, we will store the information you provide (your e-mail address, your name if applicable) to answer your questions. The disclosure of further information is voluntary and makes it easier for us to contact you to answer your request. We delete the data that arises in this context after the storage is no longer required or limit the processing if there are statutory retention requirements.

If we rely on contracted service providers for individual functions of our offer or wish to use your data for advertising purposes, we will inform you in detail about the respective processes below. In doing so, we also name the specified criteria for the storage duration.

4 Your rights

You have the following rights regarding the personal data concerning you:

  • Right to information,
  • Right to rectification or deletion,
  • Right to restriction of processing,
  • Right to object to the processing,
  • Right to data portability.

You also have the right to complain to a data protection supervisory authority about the processing of your personal data by us.

5 Collection of personal data when visiting our website

In the case of merely informative use of the website, i.e. if you do not register or otherwise provide us with information, we only collect the personal data that your browser transmits to our server. If you wish to view our website, we collect the following data, which is technically necessary for us to display our website and to ensure the stability and security (legal basis is Art. 6 (1) sentence 1 GDPR):

  • IP address
  • Date and time of the request
  • Time zone difference to Greenwich Mean Time (GMT)
  • Content of the request (concrete page)
  • Access Status / HTTP status code
  • Each transferred amount of data
  • Website from which the request comes
  • Browser
  • Operating system and its interface
  • Language and version of the browser software.

In addition to the aforementioned data, cookies are stored on your computer when you use our website. Cookies are small text files that are stored on your hard drive assigned to the browser you are using and by which the body that sets the cookie (in this case us) receives certain information. Cookies cannot run programs or transmit viruses to your computer. They serve to make the Internet more user-friendly and effective overall.

6 Use of cookies

This website uses the following types of cookies, the scope and operation of which are explained below:

  • Transient cookies
  • Persistent cookies
6.1 Transient cookies

Transient cookies are automatically deleted when you close the browser. These include in particular the session cookies. These store a so-called session ID, with which various requests from your browser can be assigned to the session. This will allow your computer to be recognized when you return to our website. The session cookies are deleted when you log out or close the browser.

6.2 Persistent cookies

Persistent cookies are automatically deleted after a specified period, which may differ depending on the cookie. You can delete these cookies in the security settings of your browser at any time.

Popular browsers offer the preference option of not allowing cookies. You can configure your browser setting according to your wishes and, for example, refuse to accept third-party cookies or all cookies. Please be aware that you may not be able to use all features of this site.

We use cookies to identify you for follow-up visits if you have an account with us. Otherwise you would have to log in again for each visit.

6.3 For what purpose are cookies used?

Functional cookies help make a website more useful by enabling basic functions such as page navigation and access to secure areas of the website. Without these cookies the website can not work properly.

Statistical cookies help website owners understand how visitors use their website, by collecting and reporting data anonymously.

Marketing cookies are used to track visitors when they visit different websites. Their goal is to display ads that are tailored to and relevant to the individual user. These ads become more valuable to publishers and external advertisers.

6.4 Overview of cookies
Category Cookie name Provider Expiry Description and purpose
Functional ASP.NET_SessionId demo.carts-parts.com Session Preserves the visitor's session state across page requests.
Functional CookieConsent demo.carst-parts.com 1 year Stores the user's cookie consent state for the current domain
Functional SESS# demo.carts-parts.com Session Preserves users states across page requests.
Functional SMARTSTORE.VISITOR demo.carst-parts.com 1 year ID of the visitor
Functional _AVESTA_ENVIRONMENT carts-parts.us12.list-manage.com Session The cookie is set when the user subscribes to an email service from MailChimp.
Functional __lc_mcid livechatinc.com 3 years Cookies that LiveChat uses internally, they do not contain any visitor's data
Functional __lc_mcst livechatinc.com 3 years Cookies that LiveChat uses internally, they do not contain any visitor's data
Functional __livechat livechatinc.com 3 years Responsible for many things required for LiveChat to work properly, for example - last operator
Functional __livechat_lastvisit livechatinc.com 3 years Stores when the user last used LiveChat.
Functional 3rdparty livechatinc.com Session It's used to check if the website allows for installing scripts from a 3rd party comanies, i.e. LiveChat.
Functional main_window_timestamp, main_window_timestamp_0 livechatinc.com Session Used to track app state between different tabs
Functional recent_window livechatinc.com Session Used to track app state between different tabs
Functional __lc.visitor_id.<id_of_the_visitor> livechatinc.com 32 months ID of the visitor
Functional autoinvite_callback livechatinc.com Session This cookie is used for proper handling JS Api and callback on_message
Functional lc_invitation_opened livechatinc.com Session Keeps state of the LiveChat greeting
Functional lc.<license_id>.secret_id livechatinc.com Session It is used by communication protocol
Functional lc_window_state livechatinc.com Session It tells if window is minimised or not
Functional __lc_vv livechatinc.com Session LiveChat version
Functional message_text livechatinc.com Session Contains text typed by visitor before message is sent
Functional notification[personal_invitation] livechatinc.com Session Cookies used for synchronization tabs in the old window
Functional notification[status_ping] livechatinc.com Session Timestamp of the last ping, information about agent availability and state of the visitor
Functional __livechat_chat livechatinc.com 32 months ID of the ongoing chat
Functional chat_running livechatinc.com 24 hours Used to check if chat is pending
Functional hide_eye_catcher livechatinc.com Sesion It is connected to LiveChat eye catcher
Functional secret_token_<license_id> livechatinc.com 24 hours It is used by communication protocol
Functional lc_sso<license_id> livechatinc.com 3 years It is used by communication protocol
Functional @@History/@@scroll|# lucidchart.com Session Stores the scroll history
Functional forceWebGL lucidchart.com Session User control: Whether to force WebGL
Functional random_token lucidchart.com Session Security cookie used to prevent CSRF with POSTs
Statistical _ga demo.carts-parts.com 2 years Registers a unique ID that is used to generate statistical data on how the visitor uses the website.
Statistical _gat demo.carts-parts.com Session Used by Google Analytics to throttle request rate
Statistical _gid demo.carts-parts.com Session Registers a unique ID that is used to generate statistical data on how the visitor uses the website.
Statistical _ga carts-parts.us12.list-manage.com 2 years Registers a unique ID that is used to generate statistical data on how the visitor uses the website.
Statistical _gat carts-parts.us12.list-manage.com Session Used by Google Analytics to throttle request rate
Statistical _gid carts-parts.us12.list-manage.com Session Registers a unique ID that is used to generate statistical data on how the visitor uses the website.
Statistical collect google-analytics.com Session Used to send data to Google Analytics about the visitor's device and behaviour. Tracks the visitor across devices and marketing channels.
Statistical NID google.com 6 months Registers a unique ID that identifies a returning user's device.
Statistical _ga lucidchart.com 2 years Registers a unique ID that is used to generate statistical data on how the visitor uses the website.
Statistical _gat lucidchart.com Session Used by Google Analytics to throttle request rate
Statistical _gid lucidchart.com Session Registers a unique ID that is used to generate statistical data on how the visitor uses the website.
Statistical ab_id lucidchart.com 5 years A/B Testing ID
Statistical G_ENABLED_IDPS lucidchart.com 2915188 days Non-personal page-based analytics
Statistical km_ai lucidchart.com 5 years Kissmetrics - Product use, performance, and user analytics
Statistical km_lv lucidchart.com 5 years Kissmetrics - Product use, performance, and user analytics
Statistical km_vs lucidchart.com Session Kissmetrics - Product use, performance, and user analytics
Statistical kvcd lucidchart.com Session Kissmetrics - Product use, performance, and user analytics
Statistical lt-pageview-id lucidchart.com Session Internal Analytics
Statistical lt-session-data lucidchart.com Session Internal Analytics
Statistical uu_idc lucidchart.com 2 years Google Tag Manager
Statistical visit_source lucidchart.com Session Records how the visitor originally navigated to the site
7 More features and offers of our website

In addition to the purely informative use of our website, we offer various services that you can use if you are interested. To do this, you will generally need to provide other personal information that we use to provide the service and for which the aforementioned data processing principles apply.

In part, we use external service providers to process your data. These have been carefully selected and commissioned by us, are bound by our instructions and are regularly inspected.

Furthermore, we can pass on your personal data to third parties, if action participations, competitions, contracts or similar services are offered by us together with partners. More information on this can be found when entering your personal information or at the bottom of the description of the offer.

Insofar as our service providers or partners are based in a country outside the European Economic Area (EEA), we will inform you about the consequences of this circumstance in the offer description.

8 Opposition or revocation against the processing of their data

If you have given your consent to the processing of your data, you can revoke it at any time. Such revocation will affect the admissibility of the processing of your personal data after you have given it to us.

Insofar as we base the processing of your personal data on the balance of interests, you may object to the processing. This is the case if, in particular, the processing is not required to fulfill a contract with you, which we describe in each case in the following description of the functions. In the event of such a disagreement, we ask you to explain the reasons why we should not process your personal data as we have done. In the case of your justified objection, we will examine the situation and will either discontinue or adapt the data processing or point out to you our compelling legitimate reasons on the basis of which we continue the processing.

Of course, you may object to the processing of your personal data for advertising and data analysis purposes at any time. About your advertising objection you can inform us using the following contact details:

Our data protection officers can be reached at DPO@carts-parts.com or via our postal address with the addition "Data protection officer".

9 Use of our online shop

If you want to order from our online shop, it is necessary for the conclusion of the contract, that you provide your personal data, which we need for the processing of your order. Mandatory information necessary for the execution of the contracts is marked separately, further details are voluntary. We process the data provided by you to process your order. For this we can pass on your payment data to our house bank. The legal basis for this is Art. 6 para. 1 sentence 1 lit. b GDPR.

You must create a customer account that allows us to save your information for later purchases. If you create an account under "My Account", the data you provide will be revocable. All other data, including your user account, you can always delete in the customer area. We may also process the information you provide to inform you of other interesting products from our portfolio or to send you e-mails containing technical information.

Due to commercial and tax regulations, we are obliged to save your address, payment and order data for a period of ten years. However, after [two years], we are restricting processing, i.e. your data will only be used to comply with legal obligations.

To prevent unauthorized access by third parties to your personal data, in particular financial data, the order process is encrypted using TLS technology.

9.1 Credit check

To guarantee the security of you and the operator, the operator carries out a credit check before concluding the contract. In addition to reviewing past transactions with the operator and any changes to your personal information, the operator also relies on external service providers. Your company data (company name, address, register, registration number, etc.) will be sent to Atradius Netherlands as part of the credit check. https://atradius.co.uk/

10 Newsletter

With your consent, you can subscribe to our newsletter, which informs you about current interesting offers. The advertised goods and services are named in the declaration of consent.

To register for our newsletter, we use the so-called double-opt-in-procedure. This means that after you have registered, we will send you an e-mail to the e-mail address you entered in which we ask you to confirm that you wish to receive the newsletter. If you do not confirm your registration within 24 hours, your information will be blocked and automatically deleted after one month. In addition, we store your IP addresses, and times of registration and confirmation. The purpose of the procedure is to prove your registration and, if necessary, to inform you about possible misuse of your personal data.

The only requirement for sending the newsletter is your e-mail address. The specification of additional, separately marked data is voluntary and will be used to address you personally. After your confirmation, we will save your e-mail address for the purpose of sending you the newsletter. The legal basis is Art. 6 para. 1 sentence 1 lit. a GDPR.

You can revoke your consent to the sending of the newsletter at any time and unsubscribe from the newsletter. The revocation can be declared by clicking on the link provided in each newsletter e-mail or by e-mail to marketing@carrus.com or by sending a message to the contact details provided in the imprint.

11 Social-Media-Plugins
11.1 Facebook

This website uses social plugins ("plugins") from the social network facebook.com, which is operated by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA ("Facebook"). These plugins are marked with a Facebook logo or the addition "Facebook Social Plugin". An overview of the Facebook plugins can be found here: http://developers.facebook.com/docs/plugins/

If you visit a website of our web-presence that contains such a plugin, your browser establishes a direct connection to the Facebook servers. The content of the plugin is transmitted by Facebook directly to your browser which incorporates it into the website. By integrating the plugins Facebook receives the information that you have accessed the corresponding page of our website. If you are logged in to Facebook, Facebook can assign the visit to your Facebook account.

If you interact with the plugins, for example, click the "Like" button or leave a comment, the information is transmitted from your browser directly to Facebook and stored there. For the purpose and scope of data collection and the further processing and use of the data by Facebook, as well as your rights in this regard and setting options for the protection of your privacy, please refer to the privacy policy of Facebook. Further information can be found in the privacy policy of Facebook at https://de-de.facebook.com/policy.php

If you do not want Facebook to collect data about you via our website, you must log out of Facebook before visiting our website.

11.2 Twitter

Furthermore, this website uses Twitter buttons. These are operated by Twitter Inc. (795 Folsom St., Suite 600, San Francisco, CA 94107, USA). If you visit a page containing such a button, a direct link will be created between your browser and the Twitter servers. The website operator therefore has no influence whatsoever on the nature and extent of the data transmitted by the plugin to the server Twitter Inc.

According to the Twitter Inc. only your IP address is collected and stored. For information about how personal information is handled by Twitter Inc., please visit https://twitter.com/privacy?lang=en

11.3 LinkedIn

Our website uses features of the LinkedIn network. Provider is the LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, United States. Each time you visit one of our pages that contains LinkedIn features, it will connect to the LinkedIn servers. LinkedIn is informed that you have visited our website with your IP address. If you click LinkedIn's "Recommend Button" and are logged in to your LinkedIn account, LinkedIn will be able to associate your visit to our sites with you and your user account. We point out that we as the provider of the website have no knowledge of the content of the transmitted data and their use by LinkedIn.

For more information, see the LinkedIn privacy statement at: https://www.linkedin.com/legal/privacy-policy

12 Live-Chat

This website uses technologies from the LiveChat Software S.A., al. Dębowa 3, 53-134 Wrocław, Poland (www.livechatinc.com) to collect and store anonymous data for purposes of web analytics and operating the live chat system to answer live support requests. From this anonymized data usage profiles can be created under a pseudonym. Cookies can be used for this. Cookies are small text files stored locally in the cache of the site visitor's Internet browser. Cookies enable recognition of the Internet browser. If the information collected in this way has a personal reference, the processing will be carried out in accordance with Art. 6 para. 1 lit. f GDPR based on our legitimate interest in effective customer care and the statistical analysis of user behavior for optimization purposes.

The data collected using the LiveChat technologies will not be used to personally identify the visitor to this website and will not be merged with personal data about the bearer of the pseudonym without the specific consent of the person concerned. To avoid the storage of LiveChat cookies, you can set your Internet browser so that in the future no more cookies can be stored on your computer or already stored cookies can be deleted. However, switching off all cookies may mean that some functions on our website can no longer be executed. You can object to the collection and storage of data for the purpose of creating a pseudonymized user profile at any time with effect for the future, by informing us of your opposition by e-mail to DPO@carts-parts.com or vis our postal address with the addition "the data protection officer".

For the purpose and scope of the data collection and the further processing and use of the data by LiveChat as well as your rights in this regard and setting options for the protection of your privacy refer to the privacy notices of LiveChat: https://www.livechatinc.com/privacy-policy/

13 Google reCAPTCHA

On this website, we also use the reCAPTCHA feature of Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA ("Google"). This function is primarily used to distinguish whether an input is made by a natural person or automated processing. The service includes the sending of the IP address and possibly other data required by Google for the reCAPTCHA service to Google and is carried out in accordance with Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in determining the individual motive of actions on the Internet and the prevention of abuse and spam.

US-based Google LLC is certified under the US Privacy Shield, which ensures compliance with the level of data protection in the EU.

For more information about Google reCAPTCHA and Google's privacy policy, please visit: https://www.google.com/intl/en/policies/privacy/

14 Google Web Fonts

This site uses so-called web fonts provided by Google LLC., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA ("Google") for consistent presentation of fonts. When you visit a page, your browser loads the required web fonts into its browser cache to display texts and fonts correctly.

To do this, the browser you use must connect to Google's servers. As a result, Google learns that our website has been accessed via your IP address. The use of Google Web Fonts is in the interest of a consistent and attractive presentation of our online services. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR. If your browser does not support web fonts, a default font will be used by your computer.

US-based Google LLC is certified under the US Privacy Shield, which ensures compliance with the level of data protection in the EU.

More information about Google Web Fonts can be found at https://developers.google.com/fonts/faq and in Google's Privacy Policy: https://www.google.com/policies/privacy/

15 Google Maps

This website uses Google Maps to display maps and create directions. Google Maps is operated by Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA. By using this website, you consent to the collection, processing and use by Google, one of its agents, or third parties of the data entered by you. The terms of service for Google Maps can be found in Google Maps Terms of Service. http://www.google.com/intl/en/help/terms_maps.html

For details, see the Privacy Center at google.com: Transparency and Choice, and Privacy Policy. https://policies.google.com/privacy?hl=en&gl=en 

16 Use of YouTube plugins

We use the provider YouTube for the integration of videos. YouTube is operated by YouTube LLC, headquartered at 901 Cherry Avenue, San Bruno, CA 94066, USA. YouTube is represented by Google Inc., located at 1600 Amphitheater Parkway, Mountain View, CA 94043, USA.

On some of our websites we use plugins from the provider YouTube. If you access the sites of our Internet presence provided with such a plug-in - for example our media library - a connection to the YouTube servers will be established and the plugin will be displayed. This will communicate to the YouTube server which of our websites you have visited. If you are logged in as a member of YouTube, YouTube assigns this information to your personal user account. When using the plugin, such as clicking on the start button of a video, this information is also assigned to your user account. You can prevent this association by logging out of your YouTube user account and other user accounts of the companies YouTube LLC and Google Inc. before using our website and deleting the corresponding cookies of the companies.

The purpose and scope of the data collection and the further processing and use of the data by YouTube, as well as your rights in this respect and setting options for the protection of your privacy can be found in the privacy policy of YouTube: https://policies.google.com/privacy?hl=en&gl=en

17 Analytics
17.1 Google Analytics

We use the web analytics software Google analytics, available from Google Inc. (1600 Amphitheater Parkway Mountain View, CA 94043, USA), to analyze users' website usage. The service uses "cookies" - text files stored on your device. The information collected by the cookies is usually sent to a Google server in the US and stored there.

On this website the IP anonymization is in effect. The IP address of users is shortened within the member states of the EU and the European Economic Area. This reduction eliminates the personal reference of your IP address. Under the terms of the agreement, which website operators have entered with Google Inc., they use the information collected to compile an evaluation of website and site activity and provide Internet-related services.

You have the option to prevent the storage of cookies on your device by setting the appropriate settings in your browser. There is no guarantee that you will be able to access all features of this website without restriction if your browser does not allow cookies.

Furthermore, you can use a browser plug-in to prevent the information collected by cookies (including your IP address) from being sent to Google Inc. and used by Google Inc. The following link leads you to the corresponding plugin: https://tools.google.com/dlpage/gaoptout?hl=en

Alternatively, by clicking on this link you prevent Google Analytics from collecting data about you within this website. By clicking on the link above you download an "opt-out-cookie". For this your browser must allow cookies to be stored. If you delete your cookies regularly, you will need to click on the link each time you visit this website.

Here's more information on Google Inc's data usage: https://support.google.com/analytics/answer/6004245?hl=en

18 Google Tag Manager

This website uses Google Tag Manager. This service allows website tags to be managed through a single interface. Google Tag Manager only implements tags. This means: no cookies are used, and no personal data is collected. Google Tag Manager triggers other tags, which may collect data. However, Google Tag Manager does not access this data. If deactivated at the domain or cookie level, it will remain in effect for all tracking tags as far as they are implemented with the Google Tag Manager. https://www.google.com/intl/en-uk/tagmanager/use-policy.html

19 Links to websites of other providers

Our websites may contain links to websites of other providers, to which this privacy policy does not extend. If the collection, processing or use of personal data relates to the use of the websites of other providers, please note the privacy policy of the respective provider.

20 Privacy Policy for Applicants

We are pleased that you are interested in us and have applied or want to apply for a position in our company. We would like to provide you below with information on the processing of your personal data in connection with the application.

20.1 Who is responsible for data processing?

Responsible in terms of data protection law is the

  • Carts & Parts
  • Overijsselhaven 20
  • 3433 PH Nieuwegein
  • Netherlands
20.2 What data from you is processed by us? and for what purposes?

We process the information you have provided to us in connection with your application in order to assess your suitability for the position (or, if applicable, other open positions in our companies) and to carry out the application process.

20.3 On what legal basis is this based?

The legal basis for the processing of your personal data in this application process is primarily Art. 88 GDPR. valid from 25.05.2018. Thereafter, the processing of the data required in connection with the decision to establish an employment relationship is permitted.

If the data may be required for legal prosecution after completing the application process, data processing may take place on the basis of the requirements of Art. 6 GDPR, in particular for the exercise of legitimate interests pursuant to Art. 6 para. 1 lit. f) GDPR. Our interest then lies in the assertion or defense against claims.

20.4 How long is the data stored?

Data of applicants will be deleted in case of rejection after 6 months.

If you have consented to the further storage of your personal data, we will transfer your data to our applicant pool. There, the data will be deleted after two years.

If you have been awarded a contract as part of the application process, the data from the applicant data system will be transferred to our personnel information system.

20.5 To which recipients will the data be passed on?

We use a specialized software provider for the application process. They act as a service provider for us and may also be aware of your personal data in connection with the maintenance and care of the systems. We have concluded a so-called order processing contract with this provider, which ensures that the data processing takes place in a permissible manner.

Your application data will be viewed by the Human Resources department upon receipt of your application. Suitable applications are then forwarded internally to the department heads for the respective open position. Then the further procedure is tuned. In principle, only those persons in the company have access to your data, who need to for the proper execution of our application process.

20.6 Where is the data processed?

The data is processed exclusively in data centers of the Netherlands.

20.7 Your rights as an "affected person"

You have the right to information about the personal data we process about you.

In the case of a request for information that is not made in writing, we ask for your understanding that we may then request proof from you that you are the person who you are claiming to be.

Furthermore, you have the right to rectification or deletion or restriction of processing, as far as you are legally entitled.

Furthermore, you have the right to object to the processing within the scope of the legal requirements. The same applies to a right to data portability.

20.8 Our data protection officer

We have appointed a data protection officer in our company. You can reach them using the following contact options:

  • Carts & parts
  • F.a.o. Data Protection Officer
  • Overijsselhaven 20
  • 3433 PH Nieuwegein
  • Netherlands
  • E-Mail: DPO@carts-parts.com
20.9 right of appeal

You have the right to complain to us about the processing of personal data by us at a data protection supervisory authority.

21 Further Information

Your trust is important to us, so we would like to answer your questions at all times regarding the processing of your personal data. If you have any questions that this Privacy Policy could not answer or if you would like more in-depth information, please contact the Privacy Officer at any time at DPO@carts-parts.com

22 Changes to the privacy policy

We reserve the right to change this Privacy Policy at any time in accordance with applicable privacy laws. The current status is May 2018.