Privacy policy
1. DATA PROTECTION AT A GLANCE
1.1 GENERAL INFORMATION
This Privacy Policy provides a basic overview of what happens to your personal data when you visit our website. Personal data means any information relating to an identified or identifiable person. For detailed information on data protection, please see our Privacy Policy below.
1.2 WHO IS RESPONSIBLE FOR THE COLLECTION OF DATA ON THIS WEBSITE?
Bauerfeind AG, which is headquartered in Zeulenroda-Triebes,
is responsible for the processing of data on this website:
Bauerfeind AG
Triebeser Str. 16
07937 Zeulenroda-Triebes
Germany
T: +49 (0) 36628 66 – 10 00
E: info@bauerfeind.com
1.3 HOW AND WHY DO WE COLLECT YOUR DATA?
1.3.1 MANUAL COLLECTION OF DATA
We collect your data if you share it with us. For example, you may provide us with your data when you use our contact form or if you register your details with us. If you provide us with your data in this way, we predominantly use it to contact you directly in order to process your requests or in order to provide you with (contractually agreed) services.
1.3.2 AUTOMATIC COLLECTION OF DATA
Other data is collected automatically by our IT systems as soon as you visit this website. In particular, this data includes technical data (e.g. your internet browser and operating system or the time at which you access our website). It also includes data on how you use our website. This data helps us to ensure that our website is fully functional, to optimize our website and to improve your user experience on our website.
1.4 WHAT RIGHTS DO YOU HAVE CONCERNING YOUR DATA?
You are entitled at any time to receive information free of charge about the source and recipients of the personal data we have stored about you and the purposes for which we are processing it. You also have the right to request that we rectify, block, or delete your data. If you wish to exercise these rights or if you have any questions about data protection, you can contact us at any time using the address provided in Section 1.2 above. You are also entitled to lodge a complaint with the competent supervisory authority.
1.5 ANALYSIS TOOLS AND THIRD-PARTY TOOLS
When you visit our website, your browsing behavior may be statistically analyzed. This predominantly takes place using cookies and analysis programs. Your browsing behavior is generally analyzed anonymously and cannot be traced back to you as a person. You can object to this analysis or prevent it from taking place by not using certain tools. More information on this can be found under “HOW WE COLLECT DATA”.
2. GENERAL INFORMATION AND MANDATORY INFORMATION
2.1 DATA PROTECTION
As the operator of this website, Bauerfeind takes the protection of your personal data very seriously. We treat your personal data confidentially and in observance of the applicable statutory data protection regulations and this Privacy Policy.
Various pieces of personal data are collected when you use this website. Personal data is data that can be used to identify you as a person. The website operator only collects, uses, or discloses your personal data to third parties if this is legally permissible or if you have given your consent for your data to be processed. This Privacy Policy explains which data we collect and what we use it for. It also outlines how and for what purposes we process it.
We would like to point out that the transmission of data online (e.g. communication by e-mail) may be vulnerable to security breaches. It is not possible to fully protect data from access by third parties.
2.2 DATA CONTROLLER AND DATA PROTECTION OFFICER
The data controller for the processing of data on this website is:
Bauerfeind AG
Triebeser Straße 16
07937 Zeulenroda-Triebes, Germany
T: +49 (0) 36628 66 – 10 00
E: info@bauerfeind.com
We have appointed an internal company data protection officer (pursuant to Article 37 et seq. GDPR):
Bauerfeind AG
Jürgen Baden
Triebeser Str. 16
07937 Zeulenroda-Triebes
Germany
T: +49 (0) 36628 66 – 11 03
E: datenschutzbeauftragter@bauerfeind.com
2.3 ENCRYPTED COMMUNICATION
This website uses SSL encryption for security reasons and in order to protect the transmission of confidential information, such as orders or requests that you send to us as the website operator. Your connection is being encrypted if a padlock symbol appears in your browser address bar and the start of the URL in your address bar changes from “http://” to “https://”. When SSL encryption is activated, the data that you transfer to us cannot be read by third parties.
3. YOUR RIGHTS CONCERNING DATA PROTECTION
3.1 ACCESS, BLOCKING, ERASURE, RESTRICTION OF PROCESSING, OBJECTION
As part of the applicable statutory provisions, you have various rights relating to the processing of your personal data. You can contact our data protection officer at any time using the details provided if you would like to exercise your rights or if you have any questions concerning your personal data.
Each data subject has the following rights under the GDPR:
The right of access to the personal data stored about you (pursuant to Article 15 GDPR),
The right to have your personal data rectified (pursuant to Article 16 GDPR),
The right to erasure (pursuant to Article 17 GDPR),
The right to the restriction of processing (pursuant to Article 18 GDPR),
The right to object to your data being processed (pursuant to Article 21 GDPR).
The right to access and the right to erasure are subject to the restrictions laid down in Sections 34 and 35 of the German Federal Data Protection Act (BDSG).
3.2 THE RIGHT TO DATA PORTABILITY
You have the right (pursuant to Article 20 GDPR) to have data that we have processed by automated means on the basis of your consent or in order to perform a contract to be given to you or to a third party in a commonly used and machine-readable format. If you request that this data be transmitted directly to another controller, this will only take place if technically feasible.
3.3 WITHDRAWAL OF YOUR CONSENT TO THE PROCESSING OF YOUR DATA
If we are processing your data on the basis of your consent (e.g. in accordance with Article 6 (1) a GDPR), you have the right to withdraw this consent at any time. To exercise this right, you simply need to notify us of your request by e-mail. This withdrawal of consent will not affect the legality of the data processing that has already taken place.
3.4 THE RIGHT TO LODGE A COMPLAINT WITH THE COMPETENT SUPERVISORY AUTHORITY
As a data subject, you have the right to lodge a complaint with a supervisory authority in the event of infringements of data protection legislation.
4. COLLECTION OF DATA ON OUR WEBSITE
4.1 COOKIES
Cookies are used on some parts of this website to make it more user-friendly, efficient, and secure. Cookies are small text files that your browser stores on your device. The majority of the cookies we use are session cookies. These are automatically deleted from your device when you leave our website. Other cookies remain on your device until you delete them. These cookies enable us to recognize your browser the next time you visit our website.
You can configure your browser to alert you when cookies are created so that you can choose whether to accept them on a case-by-case basis. You can also configure it to always decline cookies or to decline them in certain cases as well as to automatically delete cookies when you close your browser. Please note that deactivating cookies may limit the functionality of this website.
Cookies that are necessary for electronic communication purposes or in order to provide certain features that you wish to use (e.g. the basket feature) are stored on the basis of Article 6 (1) f GDPR. The website operator has a legitimate interest in storing cookies to help it to optimize its services and keep them free from technical faults. If other cookies (e.g. cookies that analyze your browsing behavior) are stored, this will be addressed separately in this Privacy Policy.
4.2 SERVER LOG FILES
The provider of this website automatically collects and stores information in server log files automatically transferred to us by your browser when you visit this website. This information includes:
Your browser type and browser version
Your operating system (if applicable)
The referrer URL
The URL visited, including the protocol and method
Your computer’s hostname
The date and time of the server request
Your IP address
GeoIP country code
It is processed within the server log files so that we can fulfil our legitimate interest (pursuant to Article 6 (1) f GDPR). Our legitimate interest is to provide you, as one of our users, with a functional website tailored to your needs (e.g. in the right language for your country) so that our website is presented in an attractive manner and can be optimized continuously. In addition, collecting this data allows us to prevent or protect ourselves against cyber-attacks, to perform error analysis, and to detect potential cases of fraud.
The data is processed by T-Systems MMS on the basis of a data processing agreement pursuant to Article 28 GDPR, in which we require the service provider to protect our customers’ data and not to disclose it to unauthorized third parties. The data is only processed in the EU and is not disclosed to third parties. The server log files are stored by the provider for 30 days before being deleted.
4.3 HOW TO CONTACT US
Our website provides various means for you to contact us. For example, if you would like to ask us any questions or give us any feedback, you can do this using the contact form provided on our website or the contact details listed (in particular our e-mail address).
When using the contact form you are required to enter some personal details about yourself before you can send your inquiry to us. For example, you need to provide us with your name and e-mail address. We need this information to communicate with you and to provide you with a fast, high-quality service. This is in our legitimate interest (pursuant to Article 6 (1) f GDPR). In addition, details concerning your request help us to forward it to the right department quickly. You can also choose to give us your telephone number if you would like us to contact you in this way.
We will only use and store your data for the purpose of processing your request. We will pass on the information you enter to the relevant members of staff, who will process your request according to your requirements. We will only share your data with third parties if doing so is necessary in order to process your request.
We will store your request and the data provided in your request for the purpose of processing your request and so that we can respond to any follow-up questions. We will keep this data until you ask us to delete it or until we have fulfilled the purpose for which we were storing it. Any mandatory legal provisions – in particular retention periods – will remain unaffected by this.
5. COLLECTION OF DATA BY INTEGRATED SYSTEMS
5.1 VIMEO
Our website uses plugins from the video portal Vimeo. The provider is Vimeo Inc., 555 West 18th Street, New York, New York 10011, USA. When you visit one of our pages featuring a Vimeo plugin, a connection is made to Vimeo’s server. This informs Vimeo’s server about which of our pages you have visited. Vimeo also acquires your IP address and other information. This even occurs if you are not logged in to Vimeo or do not have a Vimeo account. Further information about how Vimeo processes your data can be found in Vimeo’s Privacy Policy, which is available at https://vimeo.com/privacy. We use Vimeo due to our interest in providing an attractive website. This represents a legitimate interest within the meaning of Article 6 (1) f GDPR.
5.2 GOOGLE ANALYTICS
GENERAL INFORMATION
This website uses various services provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The use of these individual services is described in more detail below. Our use of the following services and the associated collection of personal data (in particular IP addresses) is generally based on our legitimate interest in analyzing, improving and making our website content appear attractive as well as on our legitimate interest in tailoring any advertising to your needs (Article 6 (1) f GDPR). Google Analytics uses cookies (see also 3.1 “Cookies”). Cookies are stored on your computer and enable Google to analyze how you use this website. The information generated by the cookie about your use of this website is generally transmitted to and stored on a Google server in the USA.
IP ANONYMIZATION
We have activated IP anonymization on our website. This means that Google will shorten your IP address before transmitting it to the USA, provided the IP address originates from a member state of the European Union or a state that is party to the Agreement on the European Economic Area. The operator of this website contracts Google to use this information to evaluate how you use the website, to create reports about the website activity, and to provide other services relating to the use of the website and the internet. The IP address transmitted from your browser during the Google Analytics process is not linked to other data held by Google.
You can block the storage of cookies by adjusting your browser settings accordingly; please note, however, that in such cases you may not be able to make full use of all the features available on this website. You can also prevent Google from collecting and processing the data generated by the cookie about your use of the website (including your IP address) by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=en.
You can also prevent Google Analytics from capturing your data by clicking on the following link: https://tools.google.com/dlpage/gaoptout?hl=en. This results in an opt-out cookie being created in your browser, preventing your data from being captured when you visit this website in the future on your current browser: Deactivate Google Analytics.
Further information about how Google Analytics handles your data can be found in Google’s Privacy Policy: https://support.google.com/analytics/answer/6004245?hl=en.
THE PROCESSING OF DATA ON OUR BEHALF
We have a data processing agreement for our use of Google Analytics and fully comply with the strict provisions of German data protection authorities when using this service.
COLLECTION OF DEMOGRAPHIC DATA BY GOOGLE ANALYTICS
This website uses the Demographics feature provided by Google Analytics. This feature enables reports to be created that contain statements about the age, gender, and interests of visitors to this site. This data is gathered from Google’s personalized advertising as well as visitor data from third-party providers. This data cannot be attributed to any specific individuals. You can disable this feature at any time by adjusting the ads settings in your Google account, or you can prohibit the general collection of your data by Google Analytics by following the steps outlined above.
5.3 PAYMENT PROCESSING
GENERAL INFORMATION
If you have a contract with us that obliges you to make a payment to us in order to receive a particular product or service, we may collect your payment data (e.g. your bank account number for a direct debit instruction) so that we can process your payment. The basis for this is the performance of a contract pursuant to Article 6 (1) b GDPR. Generally speaking, you will be able to choose your preferred payment method from a number of options we make available to you.
LEGAL BASES
The transmission of your data for the purpose of processing payments takes place on the basis of the performance of a contract (pursuant to Article 6 (1) b GDPR) between you as the customer and us. We integrate Ingenico’s services on the basis of our legitimate interest (pursuant to Article 6 (1) f GDPR). These services allow us to provide you, as a customer, with a secure way of making a payment via a certified payment service provider that protects your sensitive data by offering a high level of security. We have also chosen the PayPal and credit card payment methods on the basis of our legitimate interest (pursuant to Article 6 (1) f GDPR) in offering users of our online shop payment methods that are widespread, modern, convenient, and accepted among our customers.
Please note that in order to pay by PayPal you will need to have set up a PayPal account. PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (“PayPal”) is responsible for this. Further information can be found at https://www.paypal.com/de/webapps/mpp/ua/privacy-full.
5.4 NEWSLETTER
The information below provides details about the content of our newsletter. It also explains our subscription and mailing procedures, the methods we use for performing statistical analysis, and your rights to object. When you subscribe to our newsletter, you are consenting to receive the newsletter and to the procedures described.
CONTENT OF THE NEWSLETTER
We only send the newsletter to recipients who have provided their consent in accordance with Article 6 (1) a GDPR or when it is legally permissible to do so. If, in relation to a subscription to the newsletter, the content of the newsletter is described in specific terms, this will serve as an essential basis for the user providing consent. Our newsletter contains information about our offers and promotions as well as about our company. It may also include information that specifically refers to blog posts, our services, or our online presence.
USE OF THE MAILING SERVICE PROVIDER “CAMPAIGN MONITOR”
We have commissioned Campaign Monitor Pty Ltd, 404/3-5 Stapleton Ave, Sutherland NSW 2232, Sydney, Australia as a third-party service provider to distribute and analyze our newsletter. We have concluded a data processing agreement with Campaign Monitor. In this agreement, we require Campaign Monitor to protect our customers’ data and not to disclose it to third parties. A copy of this agreement is available via the following link: https://www.campaignmonitor.com/assets/files/terms/campaign-monitor-eu-data-transfer-clauses.pdf.
When you subscribe to our newsletter, the data (e.g. e-mail address) you provide during the registration process will be forwarded to Campaign Monitor and stored there. The service provider is based in Australia and the data is processed on servers in the USA.
DOUBLE OPT-IN AND LOGGING
After you have subscribed to the newsletter, Campaign Monitor will send you an e-mail asking you to confirm your registration (this is the “double opt-in” procedure). This confirmation is required so as to ensure that no one can register using someone else’s e-mail address.
Newsletter registrations are logged as evidence that the registration process complies with legal requirements. This means that the registration and confirmation times as well as the IP address are stored. Changes to your data stored by Campaign Monitor will also be logged.
REGISTRATION DETAILS
If you wish to subscribe to the newsletter offered on the website, you will need to provide us with an e-mail address and information that will enable us to verify that you own the e-mail address you have given (double opt-in procedure) and that you consent to receiving the newsletter.
COLLECTION AND ANALYSIS OF STATISTICS
Campaign Monitor also helps us to analyze our newsletter campaigns. This enables us to determine whether a newsletter message has been opened, when and from which location it was opened, and, if applicable, which links were used. In this way, we can determine which links are particularly popular, among other things. It is true that it is technically possible for us to attribute this information to the individual recipients of the newsletter. However, neither we nor Campaign Monitor aim to monitor individual users. The analyses are used to identify our users’ reading habits on a group basis and to tailor our content to them, or to send out varying content that relates to our users’ interests.
Campaign Monitor also enables us to further divide the recipients of our newsletter into different categories (e.g. favorite sports). This means that the newsletter can be more tailored to the target groups in each case.
ONLINE ACCESS AND DATA MANAGEMENT
Newsletter recipients will be directed to Campaign Monitor’s web pages in certain circumstances. For example, our newsletters contain a link that can be used to access the newsletter online (if there are problems viewing the newsletter in an e-mail program, for example). Those who subscribe to the newsletter can also use Campaign Monitor’s web pages to update their data (e.g. e-mail address) at a later stage. Furthermore, Campaign Monitor’s Privacy Notice is only available on its website. In this regard, we would like to make you aware of the fact that Campaign Monitor’s web pages use cookies. This means that Campaign Monitor, its partners, and its appointed service providers (for example, Google Analytics) process personal data. We have no influence over the collection of this data. You will find further information in the Campaign Monitor Privacy Notice. We would also like to draw your attention to the opt-out options available at http://www.aboutads.info/choices/ und http://www.youronlinechoices.com/ (for the European area), which enable you to prevent the collection of data for advertising purposes.
LEGAL BASES
Consent to sending the newsletter is obtained by us on the basis of Art. 6 (1) a and 7 GDPR as well as Section 7 (2) no. 3 and (3) of the German Act on Unfair Competition (UWG). You can use the “unsubscribe” link in the newsletter to withdraw your consent to the storage of data and the e-mail address at any time, and its use for sending the newsletter. This withdrawal of consent will not affect the legality of the data processing that has already taken place.
The use of the service provider Campaign Monitor, the performance of statistical surveys and analyses, and the logging of the registration process are carried out on the basis of our legitimate interests in accordance with Art. 6 (1) f GDPR. We are interested in using a newsletter system that is user-friendly and secure. It should also serve our own commercial interests and meet users’ expectations.
Please also note that, according to the legal provisions of Art 21 GDPR, you can withdraw your consent to the future processing of your personal data at any time. In particular, consent to data processing for direct marketing purposes can be withdrawn.
UNSUBSCRIBING/WITHDRAWAL OF CONSENT
You can unsubscribe from our newsletter at any time. This means that you have withdrawn your consent. You will find the link to unsubscribe from the newsletter at the bottom of each newsletter. After unsubscribing, your e-mail address will be stored on a blocking list and will only be used to ensure that we no longer send e-mails to your e-mail address.
You will find additional information in the Campaign Monitor Privacy Notice, which is available at: https://www.campaignmonitor.com/policies/#two.
5.5 SURVEY MONKEY
The opinion of our website users and customers is important to us. This is why we occasionally conduct online surveys on various topics, such as the user experience of our website, services, and products. The knowledge gained from the surveys helps us to improve our offers and adapt them according to your wishes. This falls within the scope of legitimate interest (in accordance with Art. 6 (1) f GDPR) in the collection of data. Participation in surveys is always voluntary and does not affect the use of our website or any other interactions with us. We design our surveys so that you, as a participant, can remain anonymous. Please also ensure that you do not enter any personal data in free text fields, for example, if you do not wish to do so.
For technical design, implementation, and follow-up work for our online surveys, we use the services provided by SurveyMonkey (SurveyMonkey Inc., 3050 S. Delaware Street, San Mateo, CA 94403, USA). The provider supports us by allowing us to use the tools it offers to professionally design online surveys, store the responses generated securely, and evaluate them comprehensively. In order to accomplish these tasks, SurveyMonkey periodically sets cookies in your browser to help improve the technical design of the survey and enhance your user experience. In this regard, SurveyMonkey gathers the required technical information about your browser, as well as times and your IP address. You can find more information about data processing using SurveyMonkey at https://www.surveymonkey.de/mp/policy/privacy-policy/ and at https://www.surveymonkey.de/mp/legal/survey-page-cookies/.
We have an order processing contract with SurveyMonkey to ensure that the company only processes your personal data collected by us for our purposes. In addition, SurveyMonkey is subject to the EU-US Privacy Shield and is thus committed to international data protection standards.