The protection of your privacy is very important to us. We therefore proceed with all data processing procedures (e.g. collection, processing and transmission) in accordance with the legal regulations of European and German data protection law.
The following declaration gives you an overview of which of your data is requested on our websites, how this data is used and passed on, how you can obtain information about the information given to us and what security measures we take to protect your data.
1. Who is your contact person (responsible person) for your data protection concern?
The person responsible within the meaning of the data protection regulations for all data processing carried out via our websites is:
In accordance with legal requirements, we have
Lawyer Ilka Barth
data protection (at) bwhh.de
as data protection officer(s) in our company.
Please direct any enquiries regarding data protection and the assertion of data subject rights (see point 6) to the attention of our data protection officer.
What data do we need from you to use our websites? What data is collected and stored during use?
Personal data is any information relating to an identified or identifiable natural person (“data subject”), such as your name, address, telephone number, date of birth, bank details and IP address.
As a matter of principle, we collect and use personal data of our users only insofar as this is necessary for the provision of a functional website as well as our contents and services. The collection and use of our users’ personal data regularly only takes place with the user’s consent. An exception applies in cases where it is not possible to obtain prior consent for actual reasons and the processing of the data is permitted by legal regulations.
When using our websites, the following data is logged, whereby the storage serves exclusively internal system-related and statistical purposes, so-called usage data:
Information about the browser type and version used
The operating system of the user
The user’s internet service provider
The IP address of the user
Date and time of access
Websites from which the user’s system accesses our website
Websites that are accessed by the user’s system via our website
The log files contain IP addresses or other data that enable an assignment to a user. This could be the case, for example, if the link to the website from which the user arrives at the website or the link to the website to which the user goes contains personal data.
The data is also stored in the log files of our system. This data is not stored together with other personal data of the user.
The storage in log files is done to ensure the functionality of the website. In addition, we use the data to optimise the website and to ensure the security of our information technology systems. An evaluation of the data for marketing purposes does not take place in this context.
These purposes are also our legitimate interest in data processing according to Art. 6 para. 1 lit. f DS-GVO. In no case do we use the collected data for the purpose of drawing conclusions about your person.
The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. In the case of the collection of data for the provision of the website, this is the case when the respective session has ended.
In the case of storage of data in log files, this is the case after seven days at the latest. Storage beyond this period is possible. In this case, the IP addresses of the users are deleted or alienated so that an assignment of the calling client is no longer possible.
The collection of data for the provision of the website and the storage of the data in log files is absolutely necessary for the operation of the website. Consequently, there is no possibility for the user to object.
You can contact us via the e‑mail address provided. In this case, the user’s personal data transmitted with the e‑mail will be stored.
We will only use your data to process your request and may contact you for this purpose using the contact details provided. This data will not be used for advertising purposes or passed on to third parties.
Data processing for registration is based on your voluntary consent in accordance with Art. 6 para. 1 p. 1 lit. a DS-GVO.
The legal basis for the processing of data transmitted in the course of sending an e‑mail is Art. 6 (1) lit. f DS-GVO. If the e‑mail contact aims at the conclusion of a contract, the additional legal basis for the processing is Art. 6 para. 1 lit. b DS-GVO.
The processing of the personal data of your e‑mail sent to us is solely for the purpose of processing the contact. This also constitutes the necessary legitimate interest in processing the data.
The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. For personal data sent by e‑mail, this is the case when the respective conversation with the user has ended. The conversation is ended when the circumstances indicate that the matter in question has been conclusively clarified.
The user has the option to revoke his consent to the processing of personal data at any time. If the user contacts us by e‑mail, he or she can object to the storage of his or her personal data at any time. In such a case, the conversation cannot be continued.
All personal data stored in the course of contacting us will be deleted in this case.
How will my data be used and, if applicable, passed on to third parties and for what purpose?
We use the personal data you provide to answer your enquiries, to process your order in our online shop and for the purpose of advice from our sales representatives and to contact you electronically. We only use your data to check your creditworthiness if we make advance payments when you place an order, e.g. when you place an order on account. (A general credit check without the consent of the person concerned would not be permissible! Your interest in information about the creditworthiness of a buyer would only take precedence if you make advance payments).
Your personal data will only be passed on, sold or otherwise transferred to third parties if the transfer is necessary for the purpose of processing the contract or for billing purposes or for collecting the payment in accordance with Art. 6 Para. 1 S. 1 lit b DS-GVO or if you have expressly consented in accordance with Art. 6 Para. 1 S. 1 lit a DS-GVO. In addition, we are entitled under Art. 6 para. 1 sentence 1 lit b DS-GVO to pass on personal data for debt collection purposes and reserve the right to exchange data with industry protection organisations (e.g. Schufa); this, of course, only if the legal requirements for this are met.
Disclosure in cases ordered by law
We would like to point out that, by order of the competent authority, we are entitled in individual cases pursuant to Art. 6 (1) p. lit.c DS-GVO to provide information on data insofar as this is necessary for the purposes of criminal prosecution, for the prevention of danger by the police authorities of the Länder, for the fulfilment of the statutory tasks of the federal and Länder authorities for the protection of the constitution, the Federal Intelligence Service or the Military Counter-Intelligence Service or for the enforcement of intellectual property rights.
4. what security measures have we taken to protect your data?
We have taken a variety of security measures to protect personal information to the appropriate extent and adequately.
In the case of communication by e‑mail, we cannot guarantee complete data security.
When you use our website, a cookie is placed on your computer. What does this mean?
We use so-called cookies on our websites. Cookies are small amounts of data in the form of text information that the web server sends to your browser. These are only stored on your hard disk. Cookies can only be read by the server that previously stored them and contain information about what you have viewed on a website and when. Cookies themselves only identify the IP address of your computer and do not store any personal information, such as your name. The data stored in the cookies is not linked to your personal data (name, address, etc.).
Cookies do not cause any damage to your end device because they do not contain viruses, Trojans or malware.
The following data is stored and transmitted in the cookies:
The user data collected in this way is pseudonymised by technical precautions. Therefore, it is no longer possible to assign the data to the calling user. The data is not stored together with other personal data of the users.
You can decide for yourself whether to accept cookies. By changing your browser settings (mostly found under “Option” or “Settings” in the browser menus), you have the choice of accepting all cookies, being informed when a cookie is set or rejecting all cookies.
“a2d780e777c8e9d5c53cc3879ffc6da2” is used to identify the session; storage time: session.
“743c76ffd5b24a503b4370e5c236bb36” is used to identify the session; storage time: Session
6. data subject rights
If your personal data is processed, you are a data subject within the meaning of the GDPR and you have the following rights vis-à-vis the controller:
You have the right to request information about your personal data processed by us in accordance with Art. 15 DS-GVO. In particular, you can request information about the processing purposes, the category of personal data, the category of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right of complaint, the origin of your data if it has not been collected by us, as well as the existence of automated decision-making, including profiling, and, if applicable, meaningful information about its details.
In accordance with Art. 16 DS-GVO, you have the right to demand the immediate correction of incorrect or completion of your personal data stored by us.
In accordance with Art. 17 DS-GVO, you have the right to request the deletion of your personal data stored by us, unless the processing is necessary for the exercise of the right to freedom of expression and information, for the fulfilment of a legal obligation, for reasons of public interest or for the assertion, exercise or defence of legal claims.
You have the right to request the restriction of the processing of your personal data in accordance with Art. 18 DS-GVO, insofar as the accuracy of the data is disputed by you, the processing is unlawful, but you object to its deletion and we no longer require the data, but you need it for the assertion, exercise or defence of legal claims or you have objected to the processing in accordance with Art. 21 DS-GVO.
Right to data portability
In accordance with Art. 20 DS-GVO, you have the right to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request that it be transferred to another controller.
Pursuant to Art. 7 (3) DS-GVO, you have the right to revoke your consent at any time. This has the consequence that we may no longer continue the data processing based on this consent for the future.
You have the right to complain to a supervisory authority in accordance with Art. 77 DS-GVO. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or our company headquarters.
Automated decision in individual cases including profiling
You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you. This does not apply if the decision
is necessary for the conclusion or performance of a contract between you and the responsible person,
is authorised by legislation of the Union or the Member States to which the controller is subject and that legislation contains adequate measures to safeguard your rights and freedoms and your legitimate interests, or
is done with your express consent.
However, these decisions must not be based on special categories of personal data pursuant to Art. 9(1) of the GDPR, unless Art. 9(2)(a) or (g) applies and appropriate measures have been taken to protect the rights and freedoms and your legitimate interests.
With regard to the cases referred to in (1) and (3), the controller shall take reasonable steps to safeguard the rights and freedoms of, and your legitimate interests, including at least the right to obtain the intervention of a person on the part of the controller, to express his or her point of view and to contest the decision.
7. right of objection
Insofar as your personal data is processed on the basis of legitimate interests pursuant to Art. 6 (1) lit. f DS-GVO, you have the right to object to the processing of your personal data pursuant to Art. 21 DS-GVO, insofar as there are grounds for doing so that arise from your particular situation or the objection is directed against direct advertising. In the latter case, you have a general right of objection, which is implemented by us without specifying a particular situation.
If you would like to exercise your right of revocation or objection, it is sufficient to send an e‑mail to bruecknerwerke (at) bwhh.de.
8. data security
We also use appropriate technical and organisational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or against unauthorised access by third parties. Our security measures are continuously improved in line with technological developments.