Data Privacy Policy for the B&S webshop

The protection of your privacy when using our website is very important to us. We therefore use your personal information only in accordance with the legal provisions on data protection. Please find information below about how we handle your personal data.

Controller and data protection officer

1.1       The Controller within the meaning of the European General Data Protection Regulation (Art. 4 (7) EU GDPR) is Breitfeld und Schliekert GmbH, Max-Planck-Straße 30, 61184 Karben, Telephone +49 (0) 6039 993-0, Fax +49 (0) 6039 993-80, e-mail info@b-s.de or shop@b-s.de (hereinafter referred to as “B&S”, “we”, “our”, “us” etc.).

1.2       For questions regarding the collection, processing and use of your personal data or for the assertion of your data protection rights, please contact our data protection Breitfeld & Schliekert GmbH – A Hilco Vision Company, Max-Planck-Str. 30, 61184 Karben, Deutschland / Germany, E-Mail datenschutz@b-s.de.

What does “personal data” mean?

Personal data is any information that can be assigned to you individually. This is, for example, your name, address, telephone number, fax number and e-mail address. Non-personal data, on the other hand, is general information that cannot be used to establish your identity. This data, for example, may be the number of users of our website.

What personal data we collect from you, process and use and for what purposes

3.1       Web server logs including IP address

When you visit our website, our web server out of technical necessity automatically records your IP address, the date and time you are on our website, the pages you visited on our website, the website you were on previously, the browser you are using (e.g. Internet Explorer), the operating system you are using (e.g. Windows XP) as well as the domain name and the address of your Internet provider (e.g. AOL). If our website uses cookies, the web server also stores this information. This also applies if you use our website with a mobile device, e.g. with the browser of a mobile phone.

If you have given us your consent, we evaluate these web server logs for statistical purposes (so-called click-stream analyses), so that we can determine how our website is used in order to optimize our website based on these findings. The legal basis for this is Art. 6 (1) (a) EU GDPR.

In addition, in the event of a system abuse, we can process and use the information collected by the web server in collaboration with your Internet service provider and/or local authorities to identify the originator of the abuse. The legal basis for this is Art. 6 (1) (f) EU GDPR. Our legitimate interest in doing so is to protect the integrity of our system and our users.

3.2       Services on our website

We will, moreover, only collect personal data from you if you have provided it to us voluntarily in order to use one of our services (e.g. placing orders in our online shop, making other inquiries through our website and subscribing to our newsletter). We process and use this personal data for the respective purposes stated.

Ordering in our online shop

For orders in our online shop and the processing of these, the registration as a customer of B&S is required. To register, you need to provide your company name, your address, e-mail address and telephone number.

The legal basis for the collection, processing and use of this personal data is Art. 6 (1) (b) EU GDPR.

Newsletter

If you have given us your consent, we will process and use your e-mail address to send you our newsletter.

For the mailing of our newsletter we use the newsletter mailing platform MailChimp. For more information about this, please see section 4.2.

You can revoke your consent to the receipt of our newsletter at any time with effect for the future by clicking on the corresponding link in the footer of the newsletter or by sending us an e-mail to one of the e-mail addresses listed under section 1.1.

The legal basis for the processing and use of this personal data is Art. 6 (1) (a) EU GDPR and Section 7 (2) (3) UWG (German Unfair Competition Act).

Other requests

For other requests via our contact form on the website, your company name and/or customer number, the contact person, your address and your e-mail address are required to process your inquiry.

The legal basis for the collection, processing and use of this personal data is Art. 6 (1) (b) EU GDPR.

Disclosure of personal data

4.1       General

We do not disclose your personal data to third parties unless this is necessary to fulfill your request, is otherwise permitted on the basis of applicable law, or you have given us your consent. For example, in the course of processing your order, the transfer of your name, company and address to a shipping service provider is required to send you your order. The legal basis for the transfer of this personal data to the shipping service provider is Art. 6 (1) (b) EU GDPR.

We are furthermore entitled to outsource all or part of the processing and use of personal data within the framework of the data protection regulations to external service providers who work for us as processors (Art. 28 EU GDPR). Examples of this are the hosting of our online shop and the use of the newsletter mailing service provider MailChimp described in section 4.2. Beyond that, no transfer of your personal data to third parties takes place.

Our external service providers process and use your personal data on our behalf exclusively within the European Union (EU) or the contracting states of the Agreement on the European Economic Area (EEA). The only exceptions to this are the newsletter mailing service provider MailChimp and the web analytics provider Google, which are both based in the US. Both companies have an EU-US Privacy Shield certification (for MailChimp available at https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active), in order to guarantee an adequate level of data protection. Google's web analytics service also anonymizes your IP address. Additional information on MailChimp can be found under section 4.2 and on Google under section 7.

4.2       Use of the newsletter mailing service provider MailChimp

For the mailing of our newsletter, we use the newsletter mailing platform MailChimp offered by the US provider Rocket Science Group LLC, 675 Ponce De Leon Ave. NE # 5000, Atlanta, GA 30308, USA, which works on behalf of B&S as a processor (Art. 28 EU GDPR). MailChimp is a certified participant of the US-EU Privacy Shield data protection framework (available at https://www.privacyshield.gov/participant?id=a2zt0000000TO6hAAG), meaning that legal requirements for a privacy-compliant handling of personal data are prescribed.

If you have registered for our newsletter, your e-mail address will be stored on the MailChimp servers in the USA for the purpose of using the newsletter mailing platform. MailChimp processes and uses this personal data on our behalf for the mailing and evaluation of our newsletter. MailChimp also processes and uses this personal data to optimize and improve its newsletter mailing platform.

The newsletters contain a what is known as tracking pixel placed by MailChimp. This is a pixel-sized file that is retrieved from the MailChimp server when you open our newsletter and that collects technical browser and system information (including your IP address) for the technical improvement of the newsletter mailing platform. In addition, information is collected on whether and when you opened the newsletter and which links in the newsletter you clicked on. This is for the purpose of evaluating the reading habits of our newsletter recipients in general in order to adapt and optimize our content accordingly.

Please note: If you retrieve our newsletter online, for example, via the link specified in the newsletter in order to display it correctly, you will be accessing the MailChimp website. In this context, we would like to point out that the MailChimp website may use cookies or tracking pixels, which we have no influence over. Additional information can be found in the MailChimp privacy policy at https://mailchimp.com/legal/privacy.

In addition to your consent (see also section 3.2 letter b), the use of MailChimp is legally based on Art. 6 (1) (f) EU GDPR. Our legitimate interest in this regard is the use of a user-friendly and secure newsletter system that meets your expectations and needs and serves our business interests.

If you do not agree with the mailing by MailChimp or the statistical evaluation of the newsletter by MailChimp, you can only cancel the receipt of our newsletter in its entirety (see section 3.2 letter b). The cancellation of individual components only is unfortunately not possible.

Storage period

We store your personal data only for as long as it is necessary to achieve the purposes for which it was collected or, insofar as there are any statutory retention periods which go beyond this, for the duration of these. Afterwards your personal data will be deleted.

Cookies

We use so-called cookies on our website to better understand how our visitors use our services and to provide our visitors with the best possible use. Cookies help us to make the visit to our website more attractive and meaningful for you.

Cookies are text information files that are sent from our web server to your computer and stored there when you visit the website.

Most browsers automatically accept cookies, but can be configured through the browser's setting preferences so that they do not accept them or indicate when a cookie is sent. Our cookies can be rejected or deleted at a later date. It is not necessary to accept our cookies in order to use the website in a general way. However, there are certain areas and features on the website that you cannot use without cookies.

Update Cookie Settings

Google Analytics

Our website uses Google Analytics, a web analytics service provided by Google Inc. (“Google”). Google Analytics uses so-called “cookies (see section 6 above), which are stored on your computer and enable an analysis of the use of the website. The information generated by the cookie about your use of the website is forwarded to Google and stored on servers in the United States. If IP anonymization is activated on the website, your IP address will however be truncated by Google beforehand within the area the Member States of the European Union (EU) or other signatories to the Agreement on the European Economic Area (EEA). Only in exceptional cases will the full IP address be sent first to a Google server in the USA and truncated there. IP anonymization is activated on this website. Google will use this information on our behalf for the purpose of evaluating how you use the website, compiling reports for us on website activities and providing further services for us related to the activities on the website and Internet usage. The IP address communicated by your browser in the context of Google Analytics is not associated with any other data held by Google.

You can prevent the use of cookies by adjusting the corresponding setting in your Internet browser (see section 6 above). You can also disable the service by downloading and installing the browser add-on available at http://tools.google.com/dlpage/gaoptout?hl=en to disable Google Analytics for your current Internet browser. For additional information, please visit http://www.google.com/analytics/terms/de.html or http://www.google.com/intl/de/analytics/privacyoverview.html.

The legal basis for the processing and use of this personal data is Art. 6 (1) (f) EU GDPR. Our legitimate interest lies in the provision of a user-friendly website that meets your expectations and needs in your design and serves our business interests.

Your data protection rights

According to the applicable data protection legislation, you have the following rights in particular:

(a)        Right to information: You have the right to request information on your data stored by us at any time.

(b)       Right to rectification: When we process or use your personal data, we use reasonable efforts to ensure that your personal data is accurate and up-to-date for the purposes for which it was collected. In the event that your personal data is incorrect or incomplete, you can request the correction of this data.

(c)        Right to erasure and restriction: You have the right, where applicable, to request the erasure or restriction of the processing of your personal data if, for example, according to this Data Privacy Statement or applicable law there is no longer a legitimate business purpose for such processing, and statutory retention requirements do not preclude further storage.

(d)       Right to data portability: You have the right, where applicable, to receive the personal data that you have provided to us in a structured, common and machine-readable format or to transmit this data to another controller.

(e)        Right of objection: You have the right, where applicable, to object to the processing of your personal data for special reasons that arise from your particular situation.

(f)        Right to revoke your granted consent: If you have consented to the collection, processing and use of your personal data, you can revoke your consent at any time with future effect, but without affecting the lawfulness of the processing carried out on the basis of the consent up until the revocation. In addition, you may object to the use of your personal data for the purposes of market research, opinion polling and advertising and unsubscribe from receiving our newsletter (see section 3.2 letter b).

(g)       Supervisory authority responsible for possible complaints: In the event of a complaint, you can also contact the Data Protection Officer for the state of Hesse, Gustav-Stresemann-Ring 1, 65021 Wiesbaden, Telephone +49 (0) 611 1408-0, Fax +49 (0) 611 1408-900, e-mail poststelle@datenschutz-hessen.de as the supervisory authority responsible for B&S.

Security

Please note that the transfer of data on the Internet is unsecured and there is a risk that third parties may intercept and use the data. You can alternatively contact us at any time by mail or telephone.

Minors

Persons under the age of 14 are not permitted to transfer any personal data to us without the consent of their parents or legal guardians. Please note that our website is not intended for or directed at young people under the age of 18. We do not knowingly collect personal data from anyone under the age of 18.

Links to other websites

This website also contains links to other websites. This Data Privacy Statement does not apply to these other websites. We ask that you visit these other websites directly for information about privacy and how they handle your personal data. We cannot be held liable for any measures taken by these other websites or for their content.

Our website also includes links to the social networks Facebook, Twitter and Google+. These links are each marked with the logo of the corresponding network.

These are not so-called social plugins. As we are committed to protecting your privacy, we have made a conscious decision not to use social plugins and instead use links. When you visit our website, no direct connection is therefore established with the servers of the respective network operator and no information as described under section 3.1 (web server protocols) is transmitted to the web server of the respective network operator. The social network operators will therefore not know that you are visiting our website.

Other conditions apply only if you activate one of the links to the social networks. Based on the information that your web server automatically sends to the servers of the respective network operator, the latter is able to recognize that you have previously visited our website. If you have a user account with the respective social network and are logged in, the respective network operator can also link this information with the information stored in your user account. Information on the further processing and use of the data by the respective social network operators as well as your rights and configuration options in this regard to protect your privacy can be found in the privacy notices of the respective social networks. 

Right of modification

We reserve the right to modify this Data Privacy Statement at any time in compliance with the legal regulations. This may be necessary, for example, to comply with new legislation or in the case of new services.

Version: June 2018

To Data Privacy Statement (GDPR)