Privacy policy
Version dated 26 September 2026
This is a translation of the German text. The contract is concluded in German; you can read the German text here.
Unless stated otherwise below, the provision of your personal data is neither required by law or by contract, nor necessary for the conclusion of a contract. You are not obliged to provide the data. Not providing it has no consequences. This applies only insofar as no other statement is made for the processing operations below.
“Personal data” means any information relating to an identified or identifiable natural person.
Server log files
You can visit our websites without giving any details about yourself.
Each time our website is accessed, usage data is transmitted by your internet browser to us or to our web host / IT service provider and stored in log data (so-called server log files). This stored data includes, for example, the name of the page accessed, the date and time of access, the IP address, the amount of data transferred and the requesting provider.
The processing takes place on the basis of Art. 6(1)(f) GDPR, from our overriding legitimate interest in ensuring the trouble-free operation of our website and in improving our offering.
Contact
Controller
Contact us on request. The controller for data processing is: ITAA-System GmbH, represented by its managing director Annette Arntzen, Hoher Weg 28, 46446 Emmerich am Rhein, Germany, telephone +49 2822 68204, info@itaa-system.de
Customer-initiated contact by e-mail
If you contact us on your own initiative by e-mail in a business context, we collect your personal data (name, e-mail address, message text) only to the extent you provide it. The data processing serves the handling and answering of your enquiry.
If the contact serves to carry out pre-contractual measures (e.g. advice where you are interested in buying, preparation of an offer) or concerns a contract already concluded between you and us, this data processing takes place on the basis of Art. 6(1)(b) GDPR.
If contact is made for other reasons, this data processing takes place on the basis of Art. 6(1)(f) GDPR, from our overriding legitimate interest in handling and answering your enquiry. In this case you have the right, on grounds relating to your particular situation, to object at any time to this processing of personal data concerning you that is based on Art. 6(1)(f) GDPR.
We use your e-mail address only to handle your enquiry. Your data will then be deleted, subject to statutory retention periods, unless you have consented to further processing and use.
Collection and processing when using the contact form
When you use the contact form, we collect your personal data (name, e-mail address, message text) only to the extent you provide it. The data processing serves the purpose of making contact.
If the contact serves to carry out pre-contractual measures (e.g. advice where you are interested in buying, preparation of an offer) or concerns a contract already concluded between you and us, this data processing takes place on the basis of Art. 6(1)(b) GDPR. If contact is made for other reasons, this data processing takes place on the basis of Art. 6(1)(f) GDPR, from our overriding legitimate interest in handling and answering your enquiry. In this case you have the right, on grounds relating to your particular situation, to object at any time to this processing of personal data concerning you that is based on Art. 6(1)(f) GDPR. We use your e-mail address only to handle your enquiry. Your data will then be deleted, subject to statutory retention periods, unless you have consented to further processing and use.
Collection and processing when using the withdrawal button
If you have concluded a contract via our online presence, we provide you with a withdrawal function (withdrawal button) through which you can submit your declaration of withdrawal directly.
When you use the withdrawal function, we collect your personal data (name, e-mail address, information identifying the contract or part of the contract that you wish to withdraw from, and the time (date and time) at which the declaration of withdrawal was sent) only to the extent you provide it. The data processing serves the purpose of giving you the legally required option to withdraw from your contract and of properly handling your withdrawal.
If the contact concerns a contract already concluded between you and us, this data processing takes place on the basis of Art. 6(1)(b) GDPR. Otherwise the data processing takes place on the basis of Art. 6(1)(c) GDPR, for compliance with a legal obligation to provide you with a withdrawal function on our online presence.
We use your e-mail address only to handle your declaration of withdrawal. Your data will then be deleted, subject to statutory retention periods, unless you have consented to further processing and use.
The processing of your personal data serves the purpose of meeting the legal requirements for the design of the withdrawal function in a legally secure manner and takes place on the basis of Art. 6(1)(c) GDPR. This data processing also takes place on the basis of Art. 6(1)(f) GDPR, from our overriding legitimate interest in being able to offer you a user-friendly way of withdrawing. In this case you have the right, on grounds relating to your particular situation, to object at any time to this processing of personal data concerning you that is based on Art. 6(1)(f) GDPR.
Collection and processing for service and hire purchase enquiries
Through our service form we collect, in addition to name, e-mail address and message text, details of your unit and your request (e.g. model, order number, description of the fault), on request your telephone number and company, and photos or files that you upload voluntarily. We remove embedded metadata from photos (e.g. location data) on upload. For a hire purchase enquiry we additionally collect company, legal form, address, telephone number and the units requested. The processing serves the handling of your request or the preparation of an offer. Where it concerns a contract concluded between you and us or pre-contractual measures, it takes place on the basis of Art. 6(1)(b) GDPR, and otherwise on the basis of Art. 6(1)(f) GDPR, from our overriding legitimate interest in handling your request. In this case you have the right, on grounds relating to your particular situation, to object to this processing at any time. When you submit a hire purchase enquiry, we pass it on to our leasing partner, Rodieck Consulting GmbH, Regnitstraße 54, 46485 Wesel (r-leasing.de). The data passed on comprises company, legal form, name, address, e-mail address, telephone number, the units requested together with configuration and price, and your message. Rodieck Consulting GmbH will contact you by telephone and arrange the hire purchase offer; for this purpose it may pass your details on to financing banks or leasing companies. It is itself responsible for this further processing, and its privacy policy applies. The transfer takes place on the basis of Art. 6(1)(b) GDPR, as it serves, at your request, the initiation of a contract. Otherwise we do not pass your details on to third parties without consulting you. We delete enquiries made through our contact form and our hire purchase form 90 days after the handling is completed. If you have a confirmed customer account with us using the same e-mail address, we instead keep the enquiry in your account, where you can view it until you request deletion. Details from the service form are deleted after the handling is completed, subject to statutory retention periods.
Customer account · Orders
Customer account
When you open a customer account, we collect your personal data to the extent stated there. The data processing serves the purpose of improving your shopping experience and simplifying order processing. The processing takes place on the basis of Art. 6(1)(a) GDPR with your consent. You can withdraw your consent at any time by notifying us, without affecting the lawfulness of the processing carried out on the basis of the consent up to the withdrawal. Your customer account will then be deleted.
Collection, processing and disclosure of personal data in orders
When you place an order, we collect and process your personal data only insofar as this is necessary for the fulfilment and processing of your order and for handling your enquiries. The provision of the data is necessary for the conclusion of the contract. Not providing it means that no contract can be concluded. The processing takes place on the basis of Art. 6(1)(b) GDPR and is necessary for the performance of a contract with you.
Your data is passed on, for example, to shipping companies, dropshipping or fulfilment providers, payment service providers, service providers for order processing and IT service providers. In all cases we strictly observe the statutory requirements. The scope of the data transfer is limited to a minimum.
Verification of your VAT identification number
If you order as a business with delivery to another member state of the European Union and give a VAT identification number, we check its validity in the VAT Information Exchange System (VIES) of the European Commission. To do so, we transmit your VAT identification number and our own to the European Commission, which forwards the query to the competent tax authority of your member state. The processing serves to prove the conditions for a tax-exempt intra-Community supply and takes place on the basis of Art. 6(1)(c) GDPR in conjunction with § 6a of the German VAT Act (UStG) and, insofar as it serves your order, Art. 6(1)(b) GDPR. We store the result of the check (valid or invalid, time, query reference and, where applicable, the name and address transmitted by the authority) with your order for the duration of the retention periods under tax law.
Customer map
On our website we show on a map the places where customers already use one of our units. For this we use, from our customer data – from orders for a horse solarium in our shop as soon as it has been delivered or collected, and from earlier orders – only the postcode and the country of the delivery address. The map shows one dot per postcode with the number of customers there. We do not show names, addresses or details of the order. If only one customer is recorded under a postcode, we place the dot slightly offset so that it does not point to a single address. The processing takes place on the basis of Art. 6(1)(f) GDPR, from our legitimate interest in showing prospective customers how widely our units are used. You can object to this processing at any time, informally by e-mail to info@itaa-system.de. Your location will then no longer be taken into account on the map.
Reviews · Advertising
Data collection when writing a comment or review
When you comment on or review an item or a post, we collect your personal data (name, e-mail address, comment text) only to the extent you provide it. The processing serves the purpose of enabling comments/reviews and displaying comments/reviews.
To verify your review/comment, we also collect the following data: order number.
By submitting the comment/review, you consent to the processing of the data transmitted. The processing takes place on the basis of Art. 6(1)(a) GDPR with your consent. You can withdraw your consent at any time by notifying us, without affecting the lawfulness of the processing carried out on the basis of the consent up to the withdrawal. Your personal data will then be deleted.
When your comment/review is published, only the name you have given is published.
Review reminder
After your order, we would like to ask you to review your purchase from us.
For this purpose we use your personal data (name, e-mail address, information about the order), independently of the performance of the contract, to send you a review reminder by e-mail after an order has been placed, provided that you have expressly consented to this.
The processing takes place on the basis of Art. 6(1)(a) GDPR with your consent. You can withdraw your consent at any time using the corresponding link in the e-mail or by notifying us, without affecting the lawfulness of the processing carried out on the basis of the consent up to the withdrawal.
Use of the e-mail address for sending newsletters
We use your e-mail address to send information and offers by newsletter, provided that you have expressly consented to this. The data processing serves exclusively the purpose of advertising contact. For this we process your e-mail address and, where applicable, further data that you have voluntarily provided when subscribing to our newsletter.
The processing takes place on the basis of Art. 6(1)(a) GDPR with your consent. You can withdraw your consent at any time, without affecting the lawfulness of the processing carried out on the basis of the consent up to the withdrawal.
You can unsubscribe from the newsletter at any time using the corresponding link in the newsletter or by notifying us. Your e-mail address will then be removed from the distribution list. Despite removal from the distribution list, we may continue to store your e-mail address in a so-called blacklist in order to prevent you from receiving newsletter e-mails from us in future. This storage takes place on the basis of Art. 6(1)(f) GDPR, from our and your legitimate interest in preventing your e-mail address from being used again to send our newsletter. You have the right, on grounds relating to your particular situation, to object at any time to this processing of personal data concerning you.
Payment service providers · Credit information
Use of PayPal
On our website we use the payment service PayPal of PayPal (Europe) S.à.r.l. et Cie, S.C.A. (22-24 Boulevard Royal L-2449, Luxembourg; “PayPal”). The data processing serves the purpose of being able to offer you payment via the payment service. When you select and use payment via PayPal, the data required for payment processing is transmitted to PayPal so that the contract with you can be fulfilled using the chosen payment method. This processing takes place on the basis of Art. 6(1)(b) GDPR.
All PayPal transactions are subject to the PayPal privacy policy. You can find it at https://www.paypal.com/de/webapps/mpp/ua/privacy-full
Use of PayPal Plus
On our website we use the payment service PayPal Plus of PayPal (Europe) S.à.r.l. et Cie, S.C.A. (22-24 Boulevard Royal L-2449, Luxembourg; “PayPal”). The data processing serves the purpose of being able to offer you payment via the payment service. When you select and use payment via PayPal, credit card via PayPal or direct debit via PayPal, the data required for payment processing is transmitted to PayPal so that the contract with you can be fulfilled using the chosen payment method. This processing takes place on the basis of Art. 6(1)(b) GDPR.
For individual payment methods such as credit card via PayPal and direct debit via PayPal, PayPal reserves the right, where applicable, to obtain credit information on the basis of mathematical-statistical methods using credit reference agencies. For this purpose PayPal transmits the personal data required for a credit check to a credit reference agency and uses the information received on the statistical probability of a payment default for a balanced decision on the establishment, performance or termination of the contractual relationship. The credit information may include probability values (score values) calculated on the basis of scientifically recognised mathematical-statistical methods, into whose calculation address data, among other things, is incorporated. Your legitimate interests worthy of protection are taken into account in accordance with the statutory provisions. The data processing serves the purpose of a credit check for the initiation of a contract. The processing takes place on the basis of Art. 6(1)(f) GDPR, from our overriding legitimate interest in protection against payment default where PayPal makes an advance payment.
You have the right, on grounds relating to your particular situation, to object at any time to this processing of personal data concerning you that is based on Art. 6(1)(f) GDPR, by notifying PayPal. The provision of the data is necessary for the conclusion of the contract with the payment method you want. Not providing it means that the contract cannot be concluded with the payment method you have chosen.
Use of Klarna payment options
On our website we use the payment service of Klarna Bank AB (publ) (Sveavägen 46, 111 34 Stockholm, Sweden; “Klarna”). When you select and use payment via Klarna, the data required for payment processing is transmitted to Klarna so that the contract with you can be fulfilled using the chosen payment method. This processing takes place on the basis of Art. 6(1)(b) GDPR.
Cookies that make it possible to recognise your browser may be stored in the process. The data processing that takes place as a result is based on Art. 6(1)(f) GDPR, from our overriding legitimate interest in a customer-oriented offering of various payment methods. You have the right, on grounds relating to your particular situation, to object at any time to this processing of personal data concerning you.
“Pay Later” (invoice), “Pay Now” (payment by direct debit, credit card, instant bank transfer), “Financing” (instalment purchase)
For individual payment methods such as “Pay Later” (invoice), “Pay Now” (payment by direct debit, credit card, instant bank transfer), “Financing” (instalment purchase), Klarna reserves the right, where applicable, to obtain credit information on the basis of mathematical-statistical methods using credit reference agencies.
For this purpose Klarna transmits the personal data required for a credit check, such as first name and surname, address, gender, e-mail address, IP address and data connected with the order, to a credit reference agency for the purpose of an identity and credit check, and uses the information received on the statistical probability of a payment default for a balanced decision on the establishment, performance or termination of the contractual relationship. The credit information may include probability values (score values) calculated on the basis of scientifically recognised mathematical-statistical methods, into whose calculation address data, among other things, is incorporated. Your legitimate interests worthy of protection are taken into account in accordance with the statutory provisions. The data processing serves the purpose of a credit check for the initiation of a contract. The processing takes place on the basis of Art. 6(1)(f) GDPR, from our overriding legitimate interest in protection against payment default where Klarna makes an advance payment. You have the right, on grounds relating to your particular situation, to object at any time to this processing of personal data concerning you that is based on Art. 6(1)(f) GDPR, by notifying Klarna. The provision of the data is necessary for the conclusion of the contract with the payment method you want. Not providing it means that the contract cannot be concluded with the payment method you have chosen.
Further information, in particular on which credit reference agencies Klarna passes your personal data to, can be found for Germany at https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/credit_rating_agencies and for Austria at https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_at/credit_rating_agencies.
General information on Klarna is available for Germany at: https://www.klarna.com/de/ and for Austria at https://www.klarna.com/at/. Your personal details are handled by Klarna in accordance with the applicable data protection provisions and as set out in Klarna’s privacy provisions, for Germany at https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/privacy and for Austria at https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_at/privacy.
Cookies
Our website uses cookies. Cookies are small text files that are stored in the internet browser or by the internet browser on a user’s computer system. When a user accesses a website, a cookie may be stored on the user’s operating system. This cookie contains a characteristic string of characters that allows the browser to be uniquely identified when the website is accessed again.
Cookies are stored on your computer. You therefore have full control over the use of cookies. By selecting the appropriate technical settings in your internet browser, you can be notified before cookies are set and decide individually whether to accept them, and you can prevent the storage of cookies and the transmission of the data they contain. Cookies that have already been stored can be deleted at any time. We point out, however, that you may then not be able to use all functions of this website to their full extent.
Using the links below, you can find out how to manage (including deactivate) cookies in the most important browsers:
Chrome: https://support.google.com/accounts/answer/61416?hl=de
Microsoft Edge: https://support.microsoft.com/de-de/microsoft-edge/cookies-in-microsoft-edge-lB6schen-63947406-40ac-c3b8-57b9-2a946a29ae09
Mozilla Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
Safari: https://support.apple.com/de-de/guide/safari/manage-cookies-and-website-data-sfri11471/mac
Technically necessary cookies
Unless stated otherwise below in the privacy policy, we use only these technically necessary cookies, for the purpose of making our offering more user-friendly, effective and secure. Cookies also enable our systems to recognise your browser after a page change and to offer you services. Some functions of our website cannot be offered without the use of cookies. For these it is necessary that the browser is recognised even after a page change.
The use of cookies or comparable technologies takes place on the basis of § 25(2) TDDDG (German Telecommunications Digital Services Data Protection Act). The processing of your personal data takes place on the basis of Art. 6(1)(f) GDPR, from our overriding legitimate interest in ensuring the optimal functionality of the website and a user-friendly and effective design of our offering.
You have the right, on grounds relating to your particular situation, to object at any time to this processing of personal data concerning you.
Plug-ins and other matters
Use of Google reCAPTCHA
On our website we use the reCAPTCHA service of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; “Google”) within the framework of commissioned data processing. The query serves the purpose of distinguishing input by a human from input by automated, machine processing. For this your input is transmitted to Google and further used there. In addition, the IP address and, where applicable, further data required by Google for the reCAPTCHA service are transmitted to Google. This data is processed by Google within the European Union and, where applicable, also transmitted to servers of Google LLC in the USA. An adequacy decision of the EU Commission exists for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Google has certified itself under the TADPF and has thereby committed to complying with European data protection principles.
The use of cookies or comparable technologies takes place with your consent on the basis of § 25(1) sentence 1 TDDDG in conjunction with Art. 6(1)(a) GDPR. The processing of your personal data takes place with your consent on the basis of Art. 6(1)(a) GDPR. You can withdraw your consent at any time, without affecting the lawfulness of the processing carried out on the basis of the consent up to the withdrawal.
Data subject rights and storage period
Storage period
After the contract has been fully performed, the data is first stored for the duration of the warranty period, then, taking into account statutory retention periods, in particular under tax and commercial law, and is then deleted once the period has expired, unless you have consented to further processing and use.
Rights of the data subject
Where the statutory conditions are met, you have the following rights under Art. 15 to 20 GDPR: right of access, rectification, erasure, restriction of processing and data portability.
In addition, under Art. 21(1) GDPR you have a right to object to the processing that is based on Art. 6(1)(f) GDPR, and to processing for the purpose of direct marketing.
Right to lodge a complaint with the supervisory authority
Under Art. 77 GDPR you have the right to lodge a complaint with the supervisory authority if you believe that the processing of your personal data is unlawful.
Among others, you can lodge a complaint with the supervisory authority responsible for us, which you can reach at the following contact details:
Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia)
PO Box 20 04 44
40102 Düsseldorf
Tel.: +49 211 384240
Fax: +49 211 38424999
E-mail: poststelle@ldi.nrw.de
Right to object
Where the personal data processing operations listed here are based on our legitimate interest under Art. 6(1)(f) GDPR, you have the right, on grounds relating to your particular situation, to object to these processing operations at any time with effect for the future.
After an objection has been made, the processing of the data concerned will be ended, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or unless the processing serves the establishment, exercise or defence of legal claims.