Privacy Policy

The controller in the sense of data protection legislation, in particular the EU General Data Protection Regulation (GDPR), is

Marco Niebur

Your Rights as a Data Subject

You can exercise the following rights at any time by contacting our data protection officer using the contact information provided below:

• Right of access to information about your data stored with us and their processing (Art. 15 GDPR),
• Right to rectification of inaccurate personal data (Art. 16 GDPR),
• Right to erasure of your data stored with us (Art. 17 GDPR),
• Right to restriction of data processing, to the extent that we are not yet allowed to erase your data due to legal obligations (Art. 18 GDPR),
• Right to object to the processing of your data by us (Art. 21 GDPR) and
• Right to data portability, if you have consented to data processing or have concluded a contract with us (Art. 20 GDPR).

If you have given us your consent, you may revoke it at any time with effect for the future.

You may at any time lodge a complaint with a supervisory authority, e.g. the competent supervisory authority of the federal state where you have your habitual residence or the authority responsible for us as the controller.

A list of the supervisory authorities (for the non-public sector) with their addresses can be found at https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.

Cookies

The Nature and Purpose of the Processing:

Like many other websites, we also use so-called “cookies”. Cookies are small text files that are stored on your device (laptop, tablet, smartphone or similar) when you visit our website.

This provides us with certain data such as the IP address, browser used and operating system.

Cookies cannot be used to start programs or transfer viruses to a computer. We can use the information contained in cookies to make navigation easier for you and to enable our web pages to be displayed correctly.

Under no circumstances will the data we collect be passed on to third parties or linked to personal data without your consent.

Of course you can also view our website without cookies. Internet browsers are usually set to accept cookies. In general, you can disable the use of cookies at any time via the settings of your browser. Please use the help function of your Internet browser to find out how to change these settings. Please note that some functions of our website may not work if you have disabled the use of cookies.

Storage Duration and Cookies Used:

If you allow us to use cookies through your browser settings or by granting us your consent, the following cookies may be used on our websites:

hide-service-overlay (duration: 1 day)

Insofar as these cookies can (also) affect personal data, we inform you about this in the following sections.

You can delete individual cookies or all stored cookies via your browser settings. You will also receive information and instructions on how to delete these cookies or pre-emptively block their storage. Depending on the provider of your browser, you will find the necessary information under the following links:

• Mozilla Firefox https://https://support.mozilla.org/en-US/kb/clear-cookies-and-site-data-firefox
• Internet Explorer https://support.microsoft.com/en-gb/help/17442/windows-internet-explorer-delete-manage-cookies
• Google Chrome https://support.google.com/accounts/answer/61416?hl=en
• Opera https://www.opera.com/help
• Safari https://support.apple.com/en-gb/guide/safari/sfri11471/mac

Newsletter

The Nature and Purpose of the Processing:

Your data will only be used to send you the newsletter you subscribed to by e-mail. We ask for your name in order to be able to address you personally in the newsletter and, if necessary, to identify you if you wish to exercise your rights as a data subject.

To receive the newsletter, it is sufficient to enter your e-mail address. If you register to receive our newsletter, the data you provide will be used exclusively for this purpose. Subscribers can also be informed by e-mail about circumstances relevant to the service or registration (e.g. changes to the newsletter offer or technical conditions).

For an effective registration we need a valid e-mail address. To verify that a registration is actually made by the owner of the entered e-mail address, we use the “double opt-in” procedure. For this purpose, we log the ordering of the newsletter, the sending of a confirmation e-mail and the receipt of the reply requested herewith. No further data is collected. The data will be used exclusively for sending the newsletter and will not be passed on to third parties.

Legal Basis:

On the basis of your expressly granted consent (Art. 6(1), point (a) GDPR), we will send you our newsletter and/or comparable information regularly by e-mail to the e-mail address you have provided.

You can revoke your consent to the storage of your personal data and their use for sending the newsletter at any time with effect for the future. You will find a link for this purpose in every newsletter. You can also unsubscribe at any time directly on this website or inform us of your revocation via the contact option given at the end of this Privacy Policy.

Recipients:

Recipients of the data may be contract processors.

Retention Periods:

The data will only be processed in this context as long as the corresponding consent remains valid and in force. They are erased afterwards.

Necessity of Providing or Obligation to Provide the Data:

The provision of your personal data is voluntary, solely based on your consent. Unfortunately, we cannot send you our newsletter without your consent.

Contact Form

The Nature and Purpose of the Processing:

The data you enter will be stored for the purpose of individual communication with you. For this purpose, a valid e-mail address and your name are required. This is used to assign the request to you and to answer it afterwards. The provision of further data is optional.

Legal Basis:

The data entered in the contact form is processed on the basis of a legitimate interest (Art. 6(1), point (f) GDPR).

By providing the contact form, we hope to make it easy for you to contact us. The information you provide will be stored for the purpose of processing your inquiry and for possible follow-up questions.

If you contact us to request an offer, the data entered in the contact form will be processed for the purpose of carrying out pre-contractual measures (Art. 6(1), point (b) GDPR).

Recipients:

Recipients of the data may be contract processors.

Retention Periods:

Data will be deleted at the latest 6 months after processing the request.

If a contractual relationship is established as a result, we are subject to the legal retention periods according to the German Commercial Code and will erase your data after these periods have expired.

Necessity of Providing or Obligation to Provide the Data:

The provision of your personal data is voluntary. However, we can only process your request if you provide us with your name, e-mail address and the reason for contacting us.

Use of Google Analytics

The Nature and Purpose of the Processing:

This website uses Google Analytics, a web analytics service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA (hereinafter referred to as “Google”). Google Analytics uses “cookies”, which are text files saved on your computer and enable the analysis of how you use the website. The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there. However, due to the activation of IP anonymisation on this websites, your IP address will be shortened by Google within the member states of the European Union or in other states which are party to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide further services to the website operator in connection with the website and internet use. The IP address transmitted by your browser within the framework of Google Analytics is not merged with other data in Google’s possession.

The purposes of the data processing are to evaluate the use of the website and to compile reports on activities on the website. Based on the use of the website and the Internet, further related services will then be provided.

Legal Basis:

The processing of data is based on the consent of the user (Art. 6(1), point (a) GDPR).

Recipients:

The recipient of the data is Google as the commissioned processor. We have concluded the corresponding contract processing agreement with Google for this purpose.

Retention Periods:

The data will be erased as soon as they are no longer required for our recording purposes.

Transfer to Third Countries:

Google processes your data in the USA and has committed itself to comply with the EU_US Privacy Shield https://www.privacyshield.gov/EU-US-Framework.

Necessity of Providing or Obligation to Provide the Data:

The provision of your personal data is voluntary, solely based on your consent. If you prevent access, this may result in functional restrictions on the website.

Revocation of Consent:

You may refuse the use of cookies by changing your browser settings appropriately, however, please note that if you do this you may not be able to enjoy the full functionality of this website. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) and their transfer to Google and the processing of this data by Google by downloading and installing the browser plugin available at the following link: Browser Add On to deactivate Google Analytics.

In addition or as an alternative to the browser add-on, you can prevent tracking by Google Analytics on our pages by clicking on this link. This link downloads an opt-out cookie to your device. This will prevent Google Analytics from collecting data for this website and for this browser in the future as long as the cookie remains installed in your browser.

Profiling:

With the help of the tracking tool Google Analytics, the behaviour of visitors to the website can be evaluated and their interests analysed. For this purpose we create a pseudonymous user profile.

Use of Google Maps

The Nature and Purpose of the Processing:

This website uses the offer of Google Maps. Google Maps is operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter “Google”). This allows us to display interactive maps directly on the website and enables you to use the map function conveniently.

You can find more information about data processing by Google at the Google Privacy Policy. There you can also change your personal data protection settings in the data protection center.

Detailed instructions for managing your data in connection with Google products can be found here.

Legal Basis:

The legal basis for the integration of Google Maps and the associated data transfer to Google is your consent (Art. 6(1), point (a) GDPR).

Recipients:

By visiting the website, Google receives the information that you have accessed the corresponding subpage of our website. This happens regardless of whether you have a Google account to which you are logged in or whether no user account exists. If you are logged in to Google, your information is directly associated with your account.

If you do not want this information to be associated with your profile on Google, you must log out of Google before activating the button. Google stores your data as user profiles and uses them for the purposes of advertising, market research and/or demand-oriented design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website. You have a right to object to the creation of these user profiles, whereby you must contact Google to exercise this right.

Retention Periods:

We do not collect any personal data through the integration of Google Maps.

Transfer to Third Countries:

Google processes your data in the USA and has committed itself to comply with the EU_US Privacy Shield https://www.privacyshield.gov/EU-US-Framework.

Revocation of Consent:

If you do not want Google to collect, process or use data about you via our website, you can deactivate JavaScript in your browser settings. In this case, however, you will not be able to use our website, or only to a limited extent.

Necessity of Providing or Obligation to Provide the Data:

The provision of your personal data is voluntary, solely based on your consent. If you prevent access, this may result in functional restrictions on the website.

Embedded YouTube Videos

The Nature and Purpose of the Processing:

Some of our webpages contain embedded YouTube videos. The operator of the corresponding plugins is YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, USA (hereinafter “YouTube”). When you visit a page with the YouTube plugin, a connection to YouTube servers is established. This tells YouTube which pages you visit. If you are logged in to your YouTube account, YouTube can assign your surfing behaviour to you personally. You can prevent this by first logging out of your YouTube account.

When a YouTube video is started, the provider uses cookies that collect information about user behaviour.

Further information on the purpose and scope of data collection and processing by YouTube can be found in the provider’s privacy policy, where you will also find further information on your rights and settings to protect your privacy (https://policies.google.com/privacy). Google processes your data in the USA and has committed itself to comply with the EU-US Privacy Shield https://www.privacyshield.gov/EU-US-Framework

Legal Basis:

The legal basis for the integration of YouTube and the associated data transfer to Google is your consent (Art. 6(1), point (a) GDPR).

Recipients:

Accessing the YouTube video automatically establishes a connection to Google.

Retention period and Revocation of Consent:

If you have disabled cookies for the Google Ad program, you will not receive such cookies when you watch YouTube videos either. YouTube also stores non-personal usage information in other cookies. If you wish to prevent this, you must block the storage of cookies in the browser.

For more information on data protection at “YouTube”, please refer to the provider’s privacy policy at https://policies.google.com/privacy?hl=en-GB

Transfer to Third Countries:

Google processes your data in the USA and has committed itself to comply with the EU_US Privacy Shield https://www.privacyshield.gov/EU-US-Framework.

Necessity of Providing or Obligation to Provide the Data:

The provision of your personal data is voluntary, solely based on your consent. If you prevent access, this may result in functional restrictions on the website.

SSL Encryption

To protect the security of your data during transmission, we use state-of-the-art encryption procedures (e.g. SSL) via HTTPS.

Changes to our Privacy Policy

We reserve the right to change this Privacy Policy to ensure that it always meets the current legal requirements or to implement changes to our services in the Privacy Policy, e.g. when introducing new services. The new privacy policy will then apply to your next visit.

Questions to the Data Protection Officer

If you have any questions regarding data protection, please send us an e-mail or contact the person responsible for data protection in our organisation directly:

Datenschutzbeauftragter@buhlmann-group.com

The Privacy Policy was created with the help of activeMind AG, the experts for external data protection officers (Version #2019-04-10).