Privacy Policy www.henrys.de



Why does this privacy policy exist?

Welcome to our website! When you look at our offers, register or subscribe to the newsletter, your personal data are processed. The General Data Protection Regulation (GDPR) contains some obligations for companies regarding the processing of such data. According to Art. 13 GDPR, you as the data subject have the right to be informed about certain aspects of the processing already at the time of collection.

What are personal data?

The subject of privacy are personal data. This means any information relating to a natural person, for example, name, address, profession, e-mail address, state of health, income, marital status, genetic characteristics, telephone number, bids submitted or IP address.

What does processing of personal data mean?

Processing means any operation which is performed on personal data, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

Who is responsible?

HENRY´s Auktionshaus AG is responsible for the processing of your personal data. You can contact us at the following address An der Fohlenweide 10-14, 67112 Mutterstadt, the telephone number +49 (0) 6234 - 80110 or the e-mail address henrys@henrys.de. HENRY´s Auktionshaus AG is legally represented by the Board of Management Ralf Häge (Chairman), Nico Häge und Sascha Wendt.

How to contact the data protection officer?

We have appointed a data protection officer who can be contacted at MORGENSTERN consecom GmbH, Große Himmelsgasse 1, 67346 Speyer and under the telephone number +49 (0) 6232 - 10011944.

What happens while browsing the website?

When browsing our website, certain data are automatically collected and stored in server log files. In particular, the date and time of access, IP address, amount of data transferred, requested URL, access status/HTTP status code, referrer URL, browser type and browser language setting are processed.

The admissibility of this processing is based on Art. 6 para. 1 b), f) GDPR (contract, legitimate interest). As a company, we depend on being able to present ourselves on a website and to present our offers. The Internet is an important medium and also serves, above all, to enable you to contact us. In order to be able to access the website, the described data processing is necessary.

The server log files are regularly pseudonymised, anonymised and deleted.

.What happens when using the function email on click?

You have the possibility to open an email addressed to us with just one click. If you do so, the email address linked to your email account will automatically be the sender. If you do not wish for your email address to be retrieved in this manner, you may change the settings in the respective email client.

The admissibility of this processing is based on Art. 6 para. 1 b), GDPR, according to which processing is lawful if it is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract. It is necessary for you to provide the data, without which you are unable to send us a message.

The processed personal data will be erased after expiry of the statutory retention obligations unless we have a legitimate interest in further storage. In any case, only those data absolutely necessary for fulfilling the relevant purpose will continue to be stored.

What happens when I get in touch via WhatsApp Business?

You may also contact us via WhatsApp, for which you need your mobile phone number. We use WhatsApp business to allow up-to-date communication with our (potential) customers. In particular, we want to offer you the opportunity to contact us (or the according department) via WhatsApp with questions concerning an auction product. Herein also lie our legitimate interests according to Art. 6 para. 1 f) GDPR. Data processing via WhatsApp is necessary to use this communication channel. You are not obligated to contact us via WhatsApp. If you do not wish to use WhatsApp, you may contact us by other means (e.g. telephone, email). When using WhatsApp business, your phone number and your name are transferred to WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. It is possible that WhatsApp Ireland Limited will transfer these data to WhatsApp LLC with headquarters in the USA. This represents a third country data transfer, which is legitimate and includes appropriate safeguards according to Art. 44 ff. GDPR (here in particular the existence of an adequacy decision). You can find further information here: https://www.whatsapp.com/legal/business-data-transfer-addendum.

What data do I have to provide for registration?

In order to use some services, you have to register and create a customer account. In this context, you have to provide the information requested via the corresponding online form.

We use the data you provide to create your customer account, to give you access to it and to process the contracts concluded. Moreover, we use your data to get in contact with you.

The admissibility of this processing is based on Art. 6 para. 1 b) GDPR (contract). If you do not enter the information marked as mandatory, you will not be able to register. The fields marked as optional are voluntary.

Personal data processed for the purpose of registration and the processing of contracts will be deleted after expiry of the statutory retention obligations, usually up to 10 years.

What happens when ordering a catalogue?

You have the option to request a catalogue on the website. For this purpose, there is a separate online form where you can enter your data. We will then send you our catalogue by post.

The admissibility of this processing is based on Art. 6 para. 1 b) GDPR (pre-contractual measure). If you do not provide us with your contact information, we will not be able to send you a catalogue.

Personal data processed for the purpose of registration and the processing of contracts will be deleted after expiry of the statutory retention obligations, usually up to 10 years.

How’s that for non-binding estimates of consignments?

You can request a non-binding estimate of your consignments from us. For this purpose, you can send us the necessary information via the online form provided. We will check them and give you feedback.

The admissibility of this processing is based on Art. 6 para. 1 b) GDPR (pre-contractual measure). The information requested is necessary for the estimation.

Personal data processed for the purpose of registration and the processing of contracts will be deleted after expiry of the statutory retention obligations, usually up to 10 years.

Will my data be used for advertising purposes?

If permitted by a statutory provision, we use your data for advertising purposes (e.g. catalogue by post).

The admissibility of this processing is based on Art. 6 para. 1 f) GDPR (legitimate interest). We depend on actively offering our services to new and existing customers. The provision of your data for advertising purposes is voluntary.

The data processed for advertising purposes will be stored as long as they may be used for this purpose.

Can I subscribe to a newsletter?

As a customer (existence of a customer number provided) you can subscribe to an e-mail newsletter. You will then receive regular e-mails with current offers from us.

The admissibility of this processing is based on Art. 6 para. 1 a) GDPR (consent). The provision of your e-mail address for the newsletter dispatch is voluntary.

Your e-mail address will be stored for the duration of your subscription to the newsletter. If you withdraw your consent, it will be deleted unless we have a legitimate interest in further storage (as, for example, we have a contractual relationship with you and communicate via the e-mail address).

What are necessary cookies?

We use cookies on our website to optimise the display, prevent fraud, document consent, and improve the website security.

The admissibility of this processing is based on Art 6 para. 1 f) GDPR (legitimate interest) as well as on Section 25 para. 2 TDDDG (provision of a digital service). The optimal display on mobile devices, the prevention of access by unauthorised persons and the logging of technical settings are important for the smooth functioning of our website. These cookies are necessary for the functioning of the website and cannot be disabled.

The necessary cookies are set automatically and stored for the duration of the website visit.

Who receives my data?

Our website is hosted and managed by a service provider. Therefore, it is not excluded that their employees have access to the data stored by us in the course of their work (e.g. maintenance of the server). The data collected via the website will be forwarded to the relevant employees and cooperation partners so that your request can be answered (e.g. catalogue request, estimate of consignment). Contractual declarations are partly exchanged via our website. Therefore, your personal data can be taken note of by authorities, lawyers or tax consultants in the context of an audit.

The transfer or inspection always takes place on the basis of a legal ground or in the context of a data processing.

A transfer of data to a third country outside the EU or the EEA does not take place.

What rights can you assert?

You have the following rights: You have the right of access (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR) and data portability (Art. 20 GDPR).

If your personal data are processed on the basis of Art. 6 para. 1 f) GDPR, you have the right to object on grounds relating to your particular situation or if the objection is directed against direct marketing (Art. 21 GDPR). If you object to direct marketing, we will no longer send you advertising messages.

Please note that you can exercise the aforementioned rights at any time. However, this does not mean that they have to be fulfilled. For example, you cannot request the deletion of your personal data and at the same time buy at auction or consign something. In such cases, however, we will inform you why we cannot fulfil your right.

If you have given your consent to the processing of your personal data and withdraw this consent, the processing carried out until the time of this withdrawal remains unaffected.

You have the right to lodge a complaint with the competent supervisory authority at any time. You can obtain an overview of the competent supervisory authorities by following this link.