§ 1 Information on the collection of personal data
- In the following, we inform you about the collection of personal data when using our website. Personal data is all data that can be related to you personally, e.g. name, address, e-mail addresses, user behavior.
The responsible party pursuant to Art. 4 (7) EU General Data Protection Regulation (GDPR) is the
Telefon: +49 4193 9950
Telefax: +49 4193 995220
The contact details of our company data protection officer are:
c/o BBS Rechtsanwälte
When you contact us by e-mail or via a contact form or our live chat service, the data you provide (your e-mail address, name and telephone number, if applicable) will be stored by us in order to answer your questions. We delete the data accruing in this context after the storage is no longer necessary or restrict the processing if there are legal retention obligations. In the aforementioned processing purposes, there is also our overriding legitimate interest within the meaning of the legal basis of Art. 6 (1) lit. f GDPR. If the e-mail contact is aimed at the conclusion or fulfillment of a contract, the data processing is carried out for the fulfillment of the contract (Art. 6 para. 1 lit. b GDPR).
We do not pass on your personal data to third parties unless this is done for the purpose of fulfilling our contractual obligations to you or for other technical or legally necessary reasons. In some cases, we use external service providers to process your data. These have been carefully selected and commissioned by us, are bound by our instructions and are regularly monitored. If our service providers or partners are based in a country outside the European Economic Area (EEA), we will inform you about the consequences of this circumstance in the description of the offer.
§ 2 Your rights
You have the following rights against us regarding the personal data concerning you:
– Right to information,
– Right to rectification or deletion,
– Right to restriction of processing,
– Right to object to processing,
– Right to data portability.
In addition, you have the right to revoke any consent given to us with effect for the future.
- You also have the right to complain to a data protection supervisory authority about the processing of your personal data by us.
§ 3 Collection of personal data when visiting our website
In the case of mere informational use of the website, i.e. if you do not register or otherwise transmit information to us, we only collect the personal data that your browser transmits to our server. If you wish to view our website, we collect the following data, which is technically necessary for us to display our website to you and to ensure stability and security (legal basis is Art. 6 para. 1 p. 1 lit. f GDPR):
– IP address
– Date and time of the request
– Time zone difference from Greenwich Mean Time (GMT)
– Content of the request (concrete page)
– Access status/HTTP status code
– Data volume transferred in each case
– Website from which the request comes
– Operating system and its interface
– Language and version of the browser software.
The legal basis for the processing of personal data using technically necessary cookies is Art. 6 (1) lit. f GDPR, whereby the legitimate interest of the controller is the secure, stable, efficient provision of the functions of the website and the information that can be accessed via it. If the controller fulfills a contractual obligation to you with the respective function, for example participation in a digital event booked by you, the legal basis is Art. 6 (1) lit. b GDPR. The legal basis for the processing of personal data using technically unnecessary cookies is always your consent in conjunction with Art. 6 (1) lit. a GDPR.
§ 4 Further functions and offers of our website
In addition to the purely informational use of our offers, you can transmit or provide us with questions and orders. For this purpose, you will usually have to provide further personal data, which we process to process your request, to answer your inquiries, to fulfill contracts concluded with you, to assert and realize our claims and, if necessary, to respond to your evaluation, and to which the aforementioned data processing principles apply. In addition, we use personal data insofar as we have to in order to fulfill our legal obligations, for example, to comply with our documentation and retention obligations under tax or commercial law.
A transfer of data to third parties will only take place if and to the extent that this is necessary for the fulfillment of our contractual obligations to you (Art. 6 para. 1 p. 1 lit. b GDPR), for example, the transmission of your address as a delivery address to a logistics partner or a shipping company, so that they can send or deliver the goods ordered by you. In addition, we pass on personal data if this is necessary for the processing of payments. If necessary, personal data may also be exchanged with the operator of this Internet platform to the extent necessary in each case, insofar as this is necessary for the fulfillment of our contractual obligations to the data subject or insofar as this becomes necessary, for example, in order to clarify technical or legal questions or questions within the scope of customer support.
If consent has been given, the legal basis for processing your data is Art. 6 (1) lit. a GDPR. If the processing serves the fulfillment of a contract to which the data subject is a party or the implementation of pre-contractual measures, the legal basis for the processing of the data is Art. 6 (1) lit. b GDPR. If we process personal data in order to handle non-contract-related requests or inquiries or to respond appropriately to evaluations, we do so for the purpose of optimal and efficient communication with you as well as for the appropriate evaluation and commenting on evaluations and for the improvement of our customer service, for the optimization and needs-based design of our offers, for the maintenance of the customer relationship, and furthermore for the clarification and elimination of technical problems. In the aforementioned purposes, there are our legitimate interests within the meaning of the legal basis of Art. 6 para. 1 lit. f GDPR. If we fulfill a legal obligation incumbent upon us by processing your personal data, the legal basis is Art. 6 para. 1 lit. c GDPR.
In addition, we reserve the right in individual cases to process personal data if this is necessary, for example, for the purpose of prosecuting abusive or fraudulent acts, for tracking and remedying functional or security problems. The above purposes then represent our legitimate interest within the meaning of the legal basis of Art. 6 (1) lit. f GDPR.
On our website, we offer users the opportunity to register by providing personal data. The data is entered in an input mask and transmitted to us and stored. The data is only passed on to third parties if and to the extent that this is necessary for the fulfillment of our contractual obligations to you (Art. 6 para. 1 p. 1 lit. b GDPR), for example the transmission of your address as a delivery address to suppliers so that they can send the goods you ordered or your e-mail address to provide you with the service you purchased. During the registration process, the information resulting from the registration form is requested and stored by us. The legal basis for the processing of the data is Art. 6 para. 1 lit. a GDPR if the user has given his consent. If the registration serves the performance of a contract to which the data subject is a party or the performance of pre-contractual measures. If the registration serves the fulfillment of a contract to which the user is a party or the implementation of pre-contractual measures, the additional legal basis for the processing of the data is Art. 6 (1) lit. b GDPR.
When concluding a contractual relationship on our website, we ask you for the following personal data:
- Data that personally identifies you such as name and email address
- other personal data that we are required or authorized by law to collect and process and that we need for your authentication, identification or to verify the data we collect.
The aforementioned data is processed for the purpose of handling the contractual relationship. The processing of the data is based on Art. 6 para. 1 lit. b GDPR. The storage period is limited to the purpose of the contract and, if applicable, legal and contractual retention obligations.
§ 5 Objection or revocation against the processing of your data
If you have given your consent to the processing of your data, you may revoke this consent at any time. Such revocation affects the permissibility of processing your personal data after you have expressed it to us.
Insofar as we base the processing of your personal data on the balance of interests, you may object to the processing. This is the case if the processing is not necessary, in particular, for the fulfillment of a contract with you, which is presented by us in each case in the following description of the functions. When exercising such an objection, we ask you to explain the reasons why we should not process your personal data as we have done. In the event of your justified objection, we will review the situation and either discontinue or adjust the data processing or show you our compelling legitimate grounds on the basis of which we will continue the processing.
Of course, you can object to the processing of your personal data for purposes of advertising and data analysis at any time. You can inform us of your objection to advertising using the contact details provided above.
§ 6 Newsletter
With your consent, you can subscribe to our newsletter, with which we inform you about our current interesting offers. The advertised goods and services are named in the declaration of consent.
For the registration to our newsletter we use the so-called double-opt-in procedure. This means that after your registration, we will send you an email to the email address you provided, in which we ask you to confirm that you wish to receive the newsletter. If you do not confirm your registration within 24 hours, your information will be blocked and automatically deleted after one month. In addition, we store your respective IP addresses used and times of registration and confirmation. The purpose of this procedure is to be able to prove your registration and, if necessary, to clarify a possible misuse of your personal data.
The only mandatory information for sending the newsletter is your e-mail address. The provision of further, separately marked data is voluntary and will be used to address you personally. After your confirmation, we store your e-mail address for the purpose of sending the newsletter. The legal basis is Art. 6 para. 1 p. 1 lit. a GDPR.
You can revoke your consent to the sending of the newsletter at any time and unsubscribe from the newsletter. You can declare the revocation by clicking on the link provided in each newsletter email or by sending a message to the contact details provided in the imprint.
§ 7 Application procedure
We process the personal data of applicants for the purpose of handling the application process. The processing may also take place electronically. This is particularly the case if an applicant submits corresponding application documents to us electronically, for example by e-mail or via a web form located on the website. If we conclude an employment contract with an applicant, the transmitted data will be stored for the purpose of processing the employment relationship in compliance with the statutory provisions. If we do not conclude an employment contract with the applicant, the application documents will be automatically deleted four months after notification of the rejection decision, provided that no other legitimate interests of the controller oppose deletion or the applicant has consented to longer storage of his/her data. Other legitimate interest in this sense is, for example, a duty to provide evidence in proceedings under the General Equal Treatment Act (AGG). The legal basis for the processing of personal data of applicants is Section 26 of the Federal Data Protection Act (BDSG) in conjunction with Art. 6 para. 1 lit. b, 88 GDPR, furthermore, insofar as the processing is carried out to meet legal requirements, Art. 6. para. 1 lit. c GDPR and, insofar as consent of the data subject is the basis of the processing, Art. 6 para. 1 lit. a GDPR in conjunction with Section 26 BDSG.
§ 8 Storage period
Unless otherwise stated in the respective individual information of this data protection declaration, we process personal data in accordance with the statutory provisions only for the purposes presented here in each case and only for as long as personal identification of the data subject is required for the respective purpose. Subsequently, the data will be deleted or neutralized/anonymized in accordance with data protection law.