Privacy policy & cookies Disclaimer

In the following, we would like to inform you about the processing of personal data on our website (https://www.boeckmann.com/en) and our online shop (https://www.boeckmann.com/en/shop).

I. Details of the controller

The controller responsible for data processing is

Böckmann Fahrzeugwerke GmbH
Seefeld 5
49688 Lastrup
Telephone: +49 (0) 4472 895 0
E-mail: info@boeckmann.com

 

II Information on the data protection officer

We have appointed a data protection officer. The contact details are as follows:

Böckmann Fahrzeugwerke GmbH
Stephan Baumeister
Seefeld 5
49688 Lastrup
Telephone: +49 (0) 4472 895 0
E-mail: info@boeckmann.com

 

III General information on the processing of personal data

1. Scope of data processing

In principle, we only process personal data to the extent necessary for the provision of the website or for the use of the functions offered on the website. In addition, we only process personal data if you have consented to this processing (e.g. analysis or marketing measures).

2. Legal bases for the processing of personal data

Insofar as we obtain the consent of the data subject for the processing of personal data, Art. 6 para. 1 lit. a GDPR serves as the legal basis.

When processing personal data that is necessary for the fulfilment of a contract to which the data subject is a party, Art. 6 para. 1 lit. b GDPR serves as the legal basis. This also applies to processing operations that are necessary for the implementation of pre-contractual measures.

Insofar as the processing of personal data is necessary to fulfil a legal obligation to which our company is subject, Art. 6 para. 1 lit. c GDPR serves as the legal basis.

In the event that vital interests of the data subject or another natural person require the processing of personal data, Art. 6 para. 1 lit. d GDPR serves as the legal basis.

If the processing is necessary to safeguard a legitimate interest of our company or a third party and if the interests, fundamental rights and freedoms of the data subject do not outweigh the first-mentioned interest, Art. 6 para. 1 lit. f GDPR serves as the legal basis for the processing.

3 Data erasure and storage duration

The data will be deleted or blocked if it is no longer required for the original purpose. In individual cases, the data may be stored for longer, for example if we are legally obliged to store the data for a longer period (e.g. in the case of retention obligations under tax law) or if the data is required for the assertion, exercise or defence of legal claims.

IV. Provision of the website and creation of log files

1. Description and scope of data processing

Each time our website is accessed, our system automatically collects data and information from the computer system of the accessing computer.

The following data is collected:

• Information about the browser type and version used
• The user's operating system
• The user's internet service provider
• The IP address of the user
• Date and time of access
• Websites from which the user's system accesses our website
• Websites that are accessed by the user's system via our website

The data is also stored in the log files of our system. This does not affect the user's IP addresses or other data that allows the data to be assigned to a user. This data is not stored together with other personal data of the user.

2. Legal basis for data processing

The legal basis for the temporary storage of data is Art. 6 para. 1 lit. f GDPR.

3. Purpose of the data processing

The temporary storage of the IP address by the system is necessary to enable the website to be delivered to the user's computer. For this purpose, the user's IP address must remain stored for the duration of the session.

These purposes also constitute our legitimate interest in data processing in accordance with Art. 6 para. 1 lit. f GDPR.

4. Duration of storage

The data will be deleted as soon as it is no longer required to fulfil the purpose for which it was collected. In the case of the collection of data for the provision of the website, this is the case when the respective session has ended.

5. Possibility of objection and removal

The collection of data for the provision of the website and the storage of data in log files is absolutely necessary for the operation of the website. Consequently, there is no possibility for the user to object.

6. SSL or TSL encryption

This site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as orders or enquiries that you send to us as the site operator. You can recognise an encrypted connection by the fact that the address line of the browser changes from ‘http://’ to ‘https://’ and by the lock symbol in your browser line. If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

7. Use of data for fraud prevention purposes

We require certain information in order to provide our online shop securely and reliably. To this end, we monitor and prevent unusual and potentially fraudulent activities (e.g. in relation to advertising, ad clicks by bots) and ensure that systems and processes function properly and securely. The information may also be used to resolve any issues you or we have with the delivery of content and adverts or your interaction with them. In addition, we require certain information in order to provide you with our online shop in the desired form, e.g. we remember which products you have placed in your shopping basket or added to your wish list.

The information you provide when placing an order may be used to check whether a so-called atypical order process has taken place (e.g. simultaneous ordering of a large number of goods to the same address using different customer accounts). In principle, we have an overriding legitimate interest in carrying out such a check to ensure the functionality of our website and to prevent fraudulent activities. The legal basis for this data processing is Art. 6 para. 1 f) GDPR.

V. Use of cookies

1. Description and scope of data processing

Our website uses cookies. Cookies are text files that are stored in the Internet browser or by the Internet browser on the user's computer system. When a user accesses a website, a cookie may be stored on the user's operating system. This cookie contains a characteristic string of characters that enables the browser to be uniquely identified when the website is called up again.

Most of the cookies we use are so-called ‘session cookies’. They are automatically deleted at the end of your visit. Other cookies remain stored on your end device until you delete them. These cookies enable us to recognise your browser on your next visit.

We use cookies to ensure that our website functions properly. Some elements of our website require that the accessing browser can be identified even after a page change.

The following data is stored and transmitted in the cookies:

(1) Language settings
(2) Items in a shopping basket
(3) Log-in information

We also use cookies on our website that enable an analysis of the user's surfing behaviour.

The following data can be transmitted in this way

(1) Search terms entered
(2) Frequency of page views
(3) Utilisation of website functions

When accessing our website, the user is informed about the use of cookies for analysis purposes and their consent to the processing of the personal data used in this context is obtained. Further information on the scope of data processing can be found in the consent tool (cookie banner) under settings. In this context, reference is also made to this privacy policy.

2. Legal basis for data processing

The legal basis for the processing of personal data using technically necessary cookies is Section 25 (2) TDDDG.

The legal basis for the processing of personal data using cookies for analysis purposes is Art. 6 para. 1 lit. a GDPR if the user has given consent to this.

3. Purpose of data processing

The purpose of using technically necessary cookies is to enable the use of websites for users. Some functions of our website cannot be offered without the use of cookies. For these, it is necessary for the browser to be recognised even after a page change.

We require cookies for the following applications:

(1) Shopping basket
(2) Adoption of language settings
(3) Log-in information

The user data collected by technically necessary cookies is not used to create user profiles.

Analysis cookies are used for the purpose of improving the quality of our website and its content. Through the analysis cookies, we learn how the website is used and can thus constantly optimise our offer.

These purposes also constitute our legitimate interest in the subsequent processing of personal data in accordance with Art. 6 para. 1 lit. f GDPR.

4. Duration of storage, objection and removal options

Cookies are stored on the user's computer and transmitted by it to our website. As a user, you therefore have full control over the use of cookies. You can deactivate or restrict the storage of cookies by changing the settings in your Internet browser. Cookies that have already been saved can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to use all functions of the website to their full extent.

You can delete cookies via your browser's security settings. The exact procedure can be found in the help section of the respective browser (usually in the menu under ‘Help’). You also have the option to revoke your consent to the storage of tracking cookies at any time. If you block functionally relevant cookies via your browser, the website may no longer function optimally.

VI. Newsletter

1. Description and scope of data processing

The newsletter is sent on the basis of the user's registration on the website:

It is possible to subscribe to a free newsletter on our website. When registering for the newsletter, the data from the input mask is transmitted to us.

The following data is also collected during registration:

(1) IP address of the accessing computer
(2) Date and time of registration

Your consent is obtained for the processing of the data as part of the registration process and reference is made to this privacy policy.

The newsletter is sent on the basis of the sale of goods or services:

If you purchase goods or services on our website and enter your email address, we may subsequently use it to send you a newsletter. In such a case, only direct advertising for our own similar goods or services will be sent via the newsletter.

No data will be passed on to third parties in connection with the data processing for sending newsletters. The data is used exclusively for sending the newsletter.

2. Legal basis for data processing

The legal basis for the processing of data after registration for the newsletter by the user is Art. 6 para. 1 lit. a GDPR if the user has given his consent.

The legal basis for sending the newsletter as a result of the sale of goods or services is Art. 6 para. 1 lit. f GDPR.

3 Purpose of the data processing

The purpose of collecting the user's email address is to send the newsletter.

The newsletter is sent on the basis of the user's registration on the website:

The collection of other personal data as part of the registration process serves to prevent misuse of the services or the e-mail address used.

4. Duration of storage

The data is deleted as soon as it is no longer required to fulfil the purpose for which it was collected. The user's email address is therefore stored for as long as the subscription to the newsletter is active.

The other personal data collected as part of the registration process will be deleted as soon as we no longer need this data and the purpose has been achieved. If the data processing is carried out for fraud prevention purposes, this is the case within a few weeks.

5. Right of objection and cancellation

The subscription to the newsletter can be cancelled by the user concerned at any time. For this purpose, there is a corresponding link in every newsletter. This also makes it possible to revoke consent to the storage of personal data collected during the registration process. If we also send direct advertising for similar goods or services based on orders, you can object to the data processing.

VIII. Conclusion of contract and registration

1. Description and scope of data processing

If you register with one of our services and/or conclude a further contract with us (e.g. a product purchase), we process the data required for the establishment, performance and/or termination of the contract. This includes:

• Salutation
• First name, surname
• Billing and delivery address
• e-mail address
• Billing and payment details
• Telephone number
• Information about orders placed
• Shop settings

On our website, we offer the option of registering by providing personal data. We then process the data entered in the input mask. The data will not be passed on to third parties.

The following data is also stored at the time of registration:

(1) The IP address of the user
(2) Date and time of registration

In addition to the data requested when placing an order, you must enter a password of your choice to set up a customer account. This is used together with your e-mail address to access your customer account. Please treat your personal access data confidentially and in particular do not make it accessible to unauthorised third parties. Please note that you will automatically remain logged in even after leaving our website, unless you actively log out.

We also process payment information. We pass on the information required to process the payment to the payment service provider.

2 Legal basis for data processing

The legal basis for the processing of the data is Art. 6 para. 1 lit. a GDPR if the user has given consent.

If the registration serves the fulfilment of a contract to which the user is a party or the implementation of pre-contractual measures, the additional legal basis for the processing of the data is Art. 6 para. 1 lit. b GDPR.

The legal basis for the processing for the fulfilment of retention obligations is Art. 6 para. 1 lit. c GDPR in conjunction with § 147 AO, § 257 HGB.

3 Purpose of the data processing

Registration of the user is not required for ordering in the online shop. Registration only serves to make it easier for you to place future orders and to have an overview of the orders in your customer account. Ordering is also possible with a guest account.

4 Duration of storage

The data will be deleted as soon as it is no longer required to fulfil the purpose for which it was collected.

This is the case for the data collected during the registration process if the registration on our website is cancelled or amended.

For the fulfilment of a contract or the implementation of pre-contractual measures, this is the case if the data is no longer required for the implementation of the contract. Even after conclusion of the contract, it may be necessary to store personal data of the contractual partner in order to fulfil contractual or legal obligations (e.g. guarantee and warranty work or statutory retention obligations).

Continuing obligations require the storage of personal data for the duration of the contract. Warranty periods and the storage of data for tax purposes must also be observed. The storage periods to be observed here cannot be determined across the board, but must be determined on a case-by-case basis for the respective contracts and contracting parties.

5. Possibility of objection and removal

As a user, you have the option of cancelling your registration at any time. You can have the data stored about you amended at any time.

If the data is required for the fulfilment of a contract or for the implementation of pre-contractual measures, premature deletion of the data is only possible insofar as contractual or legal obligations do not prevent deletion.

You have the option of deleting your customer account at any time. Please note, however, that once you have placed an order with us, this does not mean that all the data visible in the customer account will be deleted at the same time. The deletion of your data takes place automatically after the expiry of the commercial and tax retention obligations applicable to us or the applicable limitation periods.

6. Transfer to third parties

The following data processing is also required to process a purchase contract via our services:

Transmission of information to payment service providers

We pass on details of the delivery address to logistics companies and shipping partners commissioned by us so that the order can be delivered. In order to ensure that the goods are delivered in accordance with your wishes, we may transmit your e-mail address and, if applicable, your telephone number to the logistics company and/or shipping partner commissioned by us to carry out the delivery. They may contact you in advance of the delivery in order to coordinate the details of the delivery with you. The respective data will only be transmitted for the respective purpose and will not be used for other purposes after delivery and will be deleted after the expiry of existing commercial and tax retention obligations.

We work together with the following shipping service providers. They act on their own responsibility and are not commissioned data processors. Information on the data protection of our transport service providers can be found on the respective provider's website:

• DHL
• UPS
• Hellmann Worldwide Logistics
• Fedex

The legal basis for this data processing is Art. 6 (1b) GDPR, as the transmission of the data is necessary for the fulfilment of the contract.

Transmission of information to transport service providers/shipping partners

We work together with logistics service providers/transport companies and/or shipping partners for the purpose of delivering ordered goods: The following data may be transmitted to these for the purpose of delivering the ordered goods or for the purpose of shipment notification: First name, surname, postal address and, if applicable, the e-mail address and, if applicable, the telephone number.

We work together with the following shipping service providers. They act on their own responsibility and are not commissioned data processors. Information on the data protection of our shipping service providers can be found on the respective provider's website:

• Klarna
• Credit card
• PayPal
• Apple Pay (still being implemented)
• Bank transfer
• Bancontact
• Giropay
• EPS
• iDEAL

The legal basis for this data processing is Art. 6 (1b) GDPR.

Some payment service providers (e.g. Klarna) reserve the right to carry out a prior credit check. In this case, the data will be forwarded to the respective payment service provider for a credit check. The legal basis for the credit check is Art. 6 para. 1 lit. f) GDPR. We have a legitimate interest in finding out whether the goods ordered from us can also be paid for.

IX. Contact form and email contact

1. Description and scope of data processing

There is a contact form on our website that can be used to contact us electronically. If a user makes use of this option, the data entered in the input mask will be transmitted to us and stored.

The following data is also stored when the message is sent:

(1) The user's IP address
(2) Date and time of registration

Alternatively, it is possible to contact us via the e-mail address provided. In this case, the user's personal data transmitted with the e-mail will be stored.

The data will not be passed on to third parties in this context. The data is used exclusively for processing the conversation.

2. Legal basis for data processing

The legal basis for the processing of data transmitted in the course of using the contact form or sending an email is Art. 6 para. 1 lit. f GDPR. If the e-mail contact is aimed at the conclusion of a contract, the additional legal basis for the processing is Art. 6 para. 1 lit. b GDPR.

3. Purpose of the data processing

The processing of the personal data from the input mask serves us solely to process the contact. This also constitutes the necessary legitimate interest in processing the data.

The other personal data processed during the sending process serves to prevent misuse of the contact form and to ensure the security of our information technology systems.

4. Duration of storage

The data will be deleted as soon as it is no longer required to fulfil the purpose for which it was collected. For the personal data from the input mask of the contact form and those sent by e-mail, this is the case when the respective conversation with the user has ended. The conversation is ended when it can be inferred from the circumstances that the matter in question has been conclusively clarified.

The additional personal data collected during the sending process is deleted as soon as it is no longer required for the prevention of misuse.

rden gelöscht, sobald diese für die Missbrauchsprävention nicht mehr benötigt werden.

5. Possibility of objection and cancellation

The user has the option to revoke their consent to the processing of personal data at any time. If the user contacts us by e-mail, they can object to the storage of their personal data at any time. In such a case, the conversation cannot be continued.

The following is a description of how to revoke consent and object to storage.

In this case, all personal data stored in the course of making contact will be deleted.

X. Competitions and market research

1. Competitions

If you register/participate in competitions organised by Böckmann (hereinafter referred to as ‘participation’), we will use the data you provide when you participate for the purpose of implementing the participation contract, in particular for notifying you of prizes and, if applicable, for advertising our offers and/or offers from our competition partners. Detailed information can be found in the respective conditions of participation for each competition. The legal basis for this data processing is Art. 6 para. 1 b) GDPR.

Insofar as we also process the data collected as part of the competition for other purposes, this will not take place without your express consent. You will receive more detailed information on data processing before you take part in a competition.

2. Market research

With your consent, we and our partners use certain information (data from the user profile, products purchased, product categories requested) about the interaction with content and adverts in our online shop and on third-party sites in order to better understand how these are received by our users. To do this, we combine data sets (such as user profiles, statistics, market research and analysis data) that provide information about how you and other users interact with content and adverts. We can use this information to identify common characteristics, e.g. to determine which content is relevant for which target groups.

The legal basis for data processing is Art. 6 para. 1 lit. a) GDPR. We only process this data if you have consented to this. 

X. Data processing in connection with social media presences

1. Social media platforms

We maintain online presences within social networks (hereinafter jointly referred to as ‘social media platforms’) in order to present our company, provide information about our services and communicate with the users active there.

We operate profiles on the following social media platforms:

• Facebook
• Instagram
• Youtube
• Xing

You will find information on the processing of your data below.

2. Joint responsibility

As soon as one of our profiles is accessed on the respective social media platform, the terms and conditions and data processing guidelines of the respective providers apply. The providers regularly process personal data in connection with analysis services. In addition to the IP address, user behaviour and the information provided by the user is usually evaluated. As a result of the processing operations triggered by the call, we are jointly responsible with the provider of the social media platform in accordance with Art. 26 GDPR, insofar as personal data is processed by us and the respective platform operator. This applies in particular to so-called ‘insight data’. In this case, we have concluded a joint responsibility agreement with the respective platform operator, to which we provide a link below. We are not the original provider and only use the options offered by the social media platforms.

3. Data processing by the providers of the social media platforms

User data is often processed within and outside of social media platforms for market research and advertising purposes without us being able to influence the type and scope of the specific data processing. In order to create user profiles and statistics that record the behaviour and resulting interests of users, cookies are generally used that remain on your end device until they are deleted by the user. We cannot influence or prevent the implementation and provision of such statistics. Data collection may therefore also affect users who are not logged in. The information provided by the respective provider on data processing, configuration options to protect your privacy, information on contact options and other opt-out options and, if available and concluded, the agreement pursuant to Art. 26 GDPR can be found in the provider's privacy policy. Insofar as we can influence the specific scope of data processing and parameterise data processing, we work towards data protection-compliant handling by the provider of the social media platform within the scope of the options available to us, which are linked below.

4. Meta

a. Facebook

Service provider: Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland

Website: https://www.facebook.com

Privacy policy: https://de-de.facebook.com/privacy/policy

Agreement on joint responsibility (Page Insights):  https://www.facebook.com/legal/terms/page_controller_addendum 

Standard contractual clauses: (ensuring the level of data protection for processing in third countries): https://www.facebook.com/legal/EU_data_transfer_addendum

b. Instagram

Service provider: Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland

Website: https://www.instagram.com

Privacy policy: https://instagram.com/about/legal/privacy

The joint responsibility is limited to the collection by and transfer of data to Meta Platforms Ireland Limited, a company based in the EU. The further processing of the data is the sole responsibility of Meta Platforms Ireland Limited, which in particular concerns the transfer of data to the parent company Meta Platforms, Inc. in the USA. This is based on the standard contractual clauses concluded between Meta Platforms Ireland Limited and Meta Platforms, Inc. Under the above-mentioned agreement pursuant to Art. 26 GDPR, Meta has undertaken to us to assume primary responsibility under the GDPR for the processing of this data, to fulfil all obligations under the GDPR with regard to this data and to provide the data subjects with the essentials of this obligation.

c. Meta-Plugins (Like & Share-Button)

Plugins from the social networks Facebook and Instagram, Meta Platforms Ireland Ltd. 4 Grand Canal Square, Grand Canal Harbour, Dublin, D02, Ireland, (‘Meta’) are integrated on our website. You can recognise the Meta plugins by the Facebook/Instagram logo or the ‘Like’ button on our website. You can find an overview of the Facebook plugins here: https://developers.facebook.com/docs/plugins/.

When you visit our website, a direct connection is established between your browser and the Meta server via the plugin. Meta thereby receives the information that you have visited our site with your IP address. If you click on the Facebook ‘Like’ button while you are logged into your Facebook account, you can link the content of our pages to your Facebook profile. This allows Facebook to associate your visit to our pages with your user account. We would like to point out that, as the provider of the pages, we have no knowledge of the content of the transmitted data or its use by Facebook. Further information on this can be found in Facebook's privacy policy at: https://de-de.facebook.com/policy.php .

If you do not want Facebook to be able to associate your visit to our pages with your Facebook user account, please log out of your Facebook user account before visiting our website.

b) Use of meta advertising

We use Custom Audiences and Website Custom Audiences on the boeckmann.com website: We use communication tools from the social networks Facebook and Instagram, in particular the Custom Audiences product and Website Custom Audiences. In principle, a non-reversible and non-personalised checksum (hash value) is generated from your usage data. This checksum is transmitted to Facebook for analysis and marketing purposes. The Facebook cookie is used for the Website Custom Audiences product. For more information about the purpose and scope of data collection and the further processing and use of the data by Facebook, as well as your setting options for protecting your privacy, please refer to Facebook's privacy policy, which can be found at https://www.facebook.com/ads/website_custom_audiences/ and https://www.facebook.com/ads/website_custom_audiences/ und https://www.facebook.com/privacy/explanation. If you wish to object to the use of Facebook Website Custom Audiences, you can do so at https://www.facebook.com/ads/website_custom_audiences/. If you wish to object to the use of Facebook Custom Audiences, please log out of our web services. 

5. YouTube

Service provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, a group company of Google LLC 1600 Amphitheatre Parkway Mountain View CA 94043

Website: https://www.youtube.com

Privacy policy: https://policies.google.com/privacy

Standard contractual clauses (guaranteeing the level of data protection for processing in third countries):  https://support.google.com/adspolicy/answer/10042247?hl=de

Agreement on joint responsibility (Page Insights): https://business.safety.google/controllerterms/

6. Xing

Service provider: New Work SE, Am Strandkai 1, 20457 Hamburg, Germany

Website: https://www.xing.de

Privacy policy: https://privacy.xing.com/de/datenschutzerklaerung

7. Data processing by us

When you visit our online presence, we collect and process personal data, depending on how it is used by the user.

We are responsible for this data processing.

The data entered on our profiles, such as user names, comments, videos, images, likes, public messages, shared posts, etc. are published by the respective social media platform and may be visible to other users. We only reserve the right to delete content if necessary. We may share your content on our site if this is a function of the social media platform and communicate with you via this.

Every user can contact us via the options available on the social media platform. Contact is made, for example, by email, direct message or via the community functions offered. We process the data provided directly in the message and in the user profile. We can only view the information stored in your public profile, and only if you have such a profile. The data transmitted to us in this context will only be processed for the purpose of communicating with the respective user and at no time for any other purpose. The legal basis for this data processing is Art. 6 para. 1 lit. f GDPR. Our legitimate interest lies in responding to communication and improving the user experience when visiting our website in line with the target group.

In addition, we have a legitimate interest in the comprehensive external presentation and provision of up-to-date information about our company. The legal basis for data processing in connection with the external presentation of our company is therefore also Art. 6 para. 1 lit. f GDPR.

The legal basis for data processing in connection with our online presence and in order to be able to provide the functions offered by the social media platforms. The legal basis for data processing is Art. 6 para. 1 lit. b GDPR when it comes to the initiation or execution of a contractual relationship.

We only store the data transmitted to us until the purpose of the data processing has been achieved, we no longer need the data to pursue or defend against legal claims or to fulfil statutory retention periods. If you also interact with the platform, this data may remain visible until you delete it.

The data collected when using the community function will be processed by us for as long as we operate the company profile or your interaction on our company profile is not deleted by you.

8. Handling of sensitive data

The type and scope of personal data processed depends heavily on the behaviour of the user. Please do not share any personal data of third parties or sensitive data, e.g. special categories of personal data (Art. 9 GDPR), via the social media platforms.

If the transmission of such personal data is absolutely necessary, please contact us via other, secure communication channels that guarantee confidential transmission.

9. Data transfer to third countries

We do not intend to transfer personal data to a third country.

The social media platforms collect diagnostic and service data, use it on their own responsibility for their own purposes and may also process personal data in third countries without us being able to influence this. However, the platform operators have generally concluded the standard data protection clauses adopted by the EU Commission, which we have linked to above and which can be used as a basis for data transfer to the USA. Data is also transferred to the USA on the basis of an adequacy decision of the EU Commission pursuant to Art. 45 GDPR (see EU-US Data Privacy Framework).

XI Other third-party service providers [e.g. social media, video platforms, maps]

1. Analysis and marketing

a). Google Analytics

This website uses functions of the web analysis service Google Analytics. The provider is Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Google Analytics uses so-called ‘cookies’. These are text files that are stored on your computer and enable your use of the website to be analysed. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there.

Google Analytics cookies are stored on the basis of Art. 6 para. 1 lit. a) GDPR. The website operator has a legitimate interest in analysing user behaviour in order to optimise both its website and its advertising. 

aa) IP anonymisation

We have activated the IP anonymisation function on this website.This means that your IP address will be truncated by Google within member states of the European Union or in other signatory states to the Agreement on the European Economic Area before being transmitted to the USA. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. Google will use this information on behalf of the operator of this website to analyse your use of the website, to compile reports on website activity and to provide the website operator with other services relating to website activity and internet usage. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

bb) Browser plugin 

You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de .

cc) Objection to data collection

You can prevent the collection of your data by Google Analytics by clicking on the following link. An opt-out cookie will be set to prevent your data from being collected on future visits to this website: Deactivate Google Analytics.

You can find more information on how Google Analytics handles user data in Google's privacy policy: https://support.google.com/analytics/answer/6004245?hl=de .

b) Google Analytics Remarketing

Our websites use the functions of Google Analytics Remarketing in conjunction with the cross-device functions of Google AdWords and Google DoubleClick. The provider is Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

This function makes it possible to link the advertising target groups created with Google Analytics Remarketing with the cross-device functions of Google AdWords and Google DoubleClick. In this way, interest-based, personalised advertising messages that have been adapted to you depending on your previous usage and surfing behaviour on one end device (e.g. mobile phone) can also be displayed on another of your end devices (e.g. tablet or PC). 

If you have given your consent, Google will link your web and app browsing history to your Google account for this purpose. In this way, the same personalised advertising messages can be displayed on every device on which you sign in with your Google account.

To support this function, Google Analytics collects Google-authenticated user IDs that are temporarily linked to our Google Analytics data in order to define and create target groups for cross-device advertising.

You can permanently object to cross-device remarketing/targeting by deactivating personalised advertising in your Google account by following this link: https://www.google.com/settings/ads/onweb/.

The aggregation of the data collected in your Google Account is based solely on your consent, which you can give or withdraw from Google (Art. 6 para. 1 lit. a GDPR). For data collection processes that are not merged in your Google account (e.g. because you do not have a Google account or have objected to the merging), the collection of data is based on Art. 6 para. 1 lit. a GDPR. We only process the data if you have given us your consent to do so.

Further information and the data protection provisions can be found in Google's privacy policy at: https://www.google.com/policies/technologies/ads/.

c) Google Ads and Google conversion tracking

This website uses Google Ads. Ads is an online advertising programme of Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States (‘Google’).

As part of Google Ads, we use what is known as conversion tracking. When you click on an advert placed by Google, a cookie is set for conversion tracking. Cookies are small text files that the Internet browser stores on the user's computer. These cookies lose their validity after 30 days and are not used to personally identify the user. If the user visits certain pages of this website and the cookie has not yet expired, Google and we can recognise that the user has clicked on the ad and has been redirected to this page.

Each Google Ads customer receives a different cookie. The cookies cannot be tracked via the websites of Ads customers. The information collected using the conversion cookie is used to generate conversion statistics for Ads customers who have opted for conversion tracking. Customers are told the total number of users who clicked on their advert and were redirected to a page with a conversion tracking tag. However, they do not receive any information that can be used to personally identify users. If you do not wish to participate in tracking, you can object to this use by easily deactivating the Google Conversion Tracking cookie via your Internet browser under user settings. You will then not be included in the conversion tracking statistics.

The storage of ‘conversion cookies’ takes place on the basis of Art. 6 para. 1 lit. a GDPR. Corresponding cookies are only set on the basis of consent given.

You can find more information about Google Ads and Google Conversion Tracking in Google's privacy policy: https://www.google.de/policies/privacy/.

You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general and activate the automatic deletion of cookies when closing the browser. If cookies are deactivated, the functionality of this website may be restricted.

d) Order data processing

We have concluded a contract with Google for commissioned data processing and fully implement the strict requirements of the German data protection authorities when using Google Analytics.

II Plugin and tools

1. YouTube

Our website uses plugins from the Google-operated YouTube site. The operator of the pages is YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, USA.

When you visit one of our pages equipped with a YouTube plugin, a connection to the YouTube servers is established. The YouTube server is informed which of our pages you have visited.

If you are logged into your YouTube account, you enable YouTube to assign your surfing behaviour directly to your personal profile. You can prevent this by logging out of your YouTube account.

Your data will only be processed in connection with embedded YouTube videos if you have consented to this. We obtain your consent using our consent tool (‘cookie banner’). The legal basis for the processing is therefore Art. 6 para. 1 lit. a) GDPR.

Further information on the handling of user data by YouTube can be found in YouTube's privacy policy at: https://www.youtube.com/intl/ALL_de/howyoutubeworks/our-commitments/protecting-user-data/

2. Google Maps

This website uses the Google Maps map service via an API. The provider is Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

To use the functions of Google Maps, it is necessary to save your IP address. This information is usually transmitted to a Google server in the USA and stored there. The provider of this site has no influence on this data transfer.

The use of Google Maps is in the interest of an appealing presentation of our online offers and to make it easy to find the places we have indicated on the website. However, data processing only takes place if you have consented to this. We obtain your consent using our consent tool (‘cookie banner’). The legal basis for processing is therefore Art. 6 para. 1 lit. a) GDPR.

You can find more information on the handling of user data in Google's privacy policy: https://policies.google.com/privacy?hl=de&gl=de.

XII. Your rights

Users of our profiles have the option of asserting the following rights against the provider of the social media platform and us: We would like to point out that we cannot fully fulfil all data subject rights without the respective platform operator.

• Right to withdraw consent in accordance with Art. 7 para. 3 GDPR
  You have the right to withdraw your consent to the processing of personal data at any time. As a result, we will no longer continue the data processing that was based on your consent in the future. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
   
• Right to information in accordance with Art. 15 GDPR
  You have the right to request confirmation as to whether personal data concerning you is being processed; if this is the case, you have a right to information about this personal data and to the information listed in detail in Art. 15 GDPR.
   
• Right to rectification in accordance with Art. 16 GDPR
  You have the right to request the rectification of inaccurate personal data concerning you and, if necessary, the completion of incomplete personal data.
   
• Right to erasure in accordance with Art. 17 GDPR
  You have the right to demand that personal data concerning you be deleted immediately if one of the reasons listed in Art. 17 GDPR applies.
   
• Right to restriction of processing in accordance with Art. 18 GDPR
  You have the right to request the restriction of processing if one of the conditions listed in Art. 18 GDPR is met.
   
• Right to data portability pursuant to Art. 20 GDPR
  In certain cases, which are listed in detail in Art. 20 GDPR, you have the right to receive the personal data concerning you in a structured, commonly used and machine-readable format or to request the transmission of this data to a third party.
   
• Right to object pursuant to Art. 21 GDPR
  If data is collected on the basis of Art. 6 para. 1 sentence 1 lit. f GDPR, you have the right to object to the processing at any time for reasons arising from your particular situation. We will then no longer process your personal data unless there are demonstrably compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.
   
• Right to lodge a complaint with a supervisory authority pursuant to Art. 77 GDPR
  You have the right to lodge a complaint with a supervisory authority if you are of the opinion that the processing of data concerning you violates data protection regulations. The right to lodge a complaint can be exercised in particular with a supervisory authority in the Member State of your habitual residence, place of work or place of the alleged infringement. A list of data protection officers and their contact details can be found at the following link:
  •  https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.

If you wish to assert your rights in relation to a specific data processing operation over which we have an influence, please contact us or our company data protection officer using the contact details given above.