Data protection declaration

BVM BRUNNER GMBH & Co. KG

Thank you for visiting our website. In the following, we provide you information about which personal data we collect and what happens to this data when you visit our website. Personal data includes all data that enables you to be identified personally. You are also provided with information on your rights as a data subject according to the EU General Data Protection Regulation (GDPR).

I. The data controller within the context of the EU General Data Protection Regulation (EU-GDPR) is
BVM BRUNNER GMBH & Co. KG represented by managing director Franz Brunner
Ferdinand-Lassalle-Straße 62
72770 Reutlingen, Germany
info@bvm-brunner.de 

II. Data protection officer
If you have questions about data protection, please write an e-mail to  datenschutz@bvm-brunner.de
or contact our data protection officer directly:
Columbus Consulting
Dr. Inge Rötlich
Mahdentalstr. 82
71065 Sindelfingen, Germany
Tel.: +49 7031 418090
Fax: +49 7031 4180970
E-mail: datenschutz@columbus-consulting.eu

III. General information on data processing
1. Scope of personal data processing
We generally only process the personal data of our users if this is required to provide a functional website and our content and services.

2. Encryption
This website uses SSL encryption to protect confidential content such as enquiries that you send to us as the site operator. You can recognise an encrypted connection by the address bar of your browser changing from http:// to https:// and the lock symbol being displayed in the browser line. If this encryption is active, the data that you transfer to us cannot be ready by third parties.

3. Provision of the website and creation of log files
Each time our website is accessed, our system automatically collects data and information from the accessing computer.
The following data shall be collected:
• IP address of the user
• Information on the browser type
• Information on the version of the browser type used
• Operating system of the user, Internet provider of the user
• Date and time of access
• Website that the user accessed to reach our site
• Websites that were accessed by the user’s system via our website

This data is saved in the log file of our system. Saving this data together with other personal data of the user shall not take place. The legal basis for this data processing represent our legitimate interest according to Art. 6 Para. 1 lit. f EU GDPR regarding analysis of the website and its use and, if applicable, also legal permission to save data in the context of the initiation of a contractual relationship according to Art. 6 lit. b EU-GDPR.

V. E-mail contact
If you send us inquiries by e-mail, your information will only be used to process your inquiry. These data shall not be provided to third parties. In this case, the personal data of the user provided by e-mail shall be saved.
The data are processed on the basis of your consent (Art. 6 Para. 1 lit. a EU GDPR), which you provide to us by sending the e-mail. You may withdraw your consent at any time. An informal message via e-mail is sufficient for this. The legality of the data processing procedures completed up until the withdrawal shall remain unaffected.
The data you send in the e-mail  will remain with us until you request us to delete it, withdraw your consent to storage, or the purpose for storing the data no longer applies (e.g. after completed the processing of your inquiry). Mandatory statutory provisions – in particular retention periods – remain unaffected.

VI.  Analysis tools and advertising
1. Google Analytics
This website uses functions of the Google Analytics web analysis service.
If you are a resident of the European Economic Area or Switzerland, this service is provided to you by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. If you do not have your habitual residence in the European Economic Area or Switzerland, this service is provided to you by Google LLC., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
Google’s data protection declaration can be found at http://www.google.de/intl/de/policies/privacy
In the event that personal data is transferred to the USA, Google has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.
You can view a current certificate using this link: https://www.privacyshield.gov/list.
Google Analytics uses so-called ‘Cookies’. These are text files that are saved on your computer to enable an analysis of the use of our website by you. The information created by the cookie about your use of this website is normally transferred to a Google server in the USA and stored there.

Google Analytics cookies are normally stored on the basis of Art. 6 Para. 1 lit. f EU GDPR. The website operator has a legitimate interest in the analysis of usage behaviour to optimise both the web service and its advertising.

We have activated the IP anonymisation function on this website. This shortens your IP address with Google inside the member states of the European Union and in other contract states of the agreement on the European Economic Area before it is transmitted to the USA. The full IP address will only be transmitted by Google to the USA and then shortened there in rare cases. On behalf of the operator of this website, Google shall use this information to evaluate your use of the website, to compile reports about website activities, and to provide additional services connected with website use and Internet use vis-a-vis the website operator. The IP address transmitted by your browser within the scope of Google Analytics Browser will not be combined with other data from Google.

You may prevent storage of cookies by using the corresponding setting in your browser software; we nevertheless inform you that in this case, you may not be able to use all of the functions of the website in their full scope. Furthermore, you may prevent collection of data recorded by the cookie and collection of data related to your use of the website (including your IP address) by Google any processing of this data by die Google by downloading and installing the browser plug-in available from Google:
https://tools.google.com/dlpage/gaoptout?hl=de.
You can also prevent collection of your data by Google Analytics by setting an opt-out cookie, which will prevent the collection of your data in case of future visits.
More information on how user data is handled by Google Analytics can be found in the Google data protection declaration: https://support.google.com/analytics/answer/6004245?hl=de.
We have concluded an order processing contract with Google and fully implement the strict requirements of the German data protection authorities when using Google Analytics.
This website uses the “demographic characteristics” function of Google Analytics. This enables reports to be created that include statements about the age, gender, and interests of the site visitor. These data originate from interest-related advertisements of Google and from visitor data of third-party providers. These data cannot be assigned to any specific person. You may deactivate this function at any time via the display settings in your Google account or prohibit collection of your data by Google Analytics in general as described in “objecting to data collection”.

2. Google Tag Manager:
Google Tag Manager is a solution that allows marketers to manage website tags via one interface. The Tool Tag Manager itself (which implements the tags) is a cookie-free domain and does not collect personal data. The tool triggers other tags that collect data for their part under certain circumstances. Google Tag Manager does not access this data. If deactivation is completed at the domain or cookie level, this remains in place for all tracking tags that are implemented with Google Tag Manager. https://www.google.com/analytics/terms/tag-manager/

3. DoubleClick
We also use DoubleClick, a service provided by Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, ‘Google’). DoubleClick uses cookies to display user-based advertising. These cookies detect which advertisement has already been activated in your browser and if you have accessed a website via a displayed advertisement. In this case, cookies do not collect information, and they also cannot be connected with personal information. If you don’t wish to have them, you can prohibit storage of cookies required for this technology via the settings in your browser. In this case, your visit will not influence the user statistics. You also have the option via the display settings to select the types of Google advertisements or deactivate interest-based advertisements on Google. Alternatively, you may deactivate the use of cookies by third parties by accessing the deactivation tool of the network advertising initiative.
We and Google will nevertheless continue to receive statistical information on how many users have visited this site and when. If you would also prefer not to be included in these statistics, you can prevent this with the help of additional programmes for your browser (e.g. with the Ghostery add-on).
More information on how user data is handled by Google Analytics can be found in the Google data protection declaration: https://www.google.de/intl/de/policies/privacy/.
Extensive details can be found in the data protection centre of google.de: Transparency and choice as well as data protection provisions.
https://www.google.com/intl/de_de/help/terms_maps.html
policies.google.com/privacy;

VII. Additional plug-ins and tools
1. Google Maps
We use the Google Maps map service via an API.
If you are a resident of the European Economic Area or Switzerland, this service is provided to you by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. If you do not have your habitual residence in the European Economic Area or Switzerland, this service is provided to you by Google LLC., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
Google’s data protection declaration can be found at http://www.google.de/intl/de/policies/privacy.
In the event that personal data is transferred to the USA, Google has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.
You can view a current certificate using this link: https://www.privacyshield.gov/list.

VIII.  Your data protection rights
If we process your personal data, you a the data subject within the context of the EU-GDPR. This entitles you to the following rights against us:

1.    Right to information (Art. 15 EU-GDPR)
You can request information on the personal data we have stored about you free of charge at any time.
In this case, identification of your person is required to prevent misuse.

2.   Right to correction (Art. 16 EU-GDPR)
You have the right to correct and/or complete your personal data that we have processed at any time
if it is incorrect or incomplete.

3.   Right to deletion – right to be forgotten (Art. 17 EU-GDPR)
You have the right to deletion of your personal data that we have processed. This applies in particular if the reason for processing has expired, the required consent has been withdrawn, and no other legal basis exists or our data processing is no longer legal. We will then delete your personal data immediately within the legal context.

4.  Right to limit processing (Art. 18 EU-GDPR)
You can request the restriction of the processing of your data.
If processing the personal data affecting you has been limited, then this data, storage notwithstanding, may only be processed with your consent or to enforce, exercise, or defend legal claims or to protect the rights of another natural or legal person or for reasons within the public interest of the Union or a member state thereof.
If processing is restricted according to the conditions indicated above, you will be informed by the data processor before the restriction is lifted.

5.   Right to be informed (Art. 19 EU-GDPR)
If you have asserted the right to rectification, deletion, or restriction of processing against the data processor, the data processor is obliged to inform all recipients to whom your personal data has been disclosed of this rectification or deletion of your data or restriction of processing, unless this proves to be impossible or involves a disproportionate cost.
You have the right vis-a-vis the data processor to be informed concerning these recipients.

6.     Right to data transfer (Art. 20 EU-GDPR)
You may request us to transfer the data stored about you in machine-readable form.

7.   Right to object (Art. 21 EU-GDPR)
You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you, which is carried out on the basis of Art. 6 Para. 1 lit. e or f GDPR; this also applies to profiling based on these provisions. The data processor shall no longer process the data concerning you, unless he is able to demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or if the processing serves the purpose of asserting, exercising, or defending legal claims. If personal data affecting you are processed for the purposes of direct advertising, then you have the right to object to processing personal data for the purposes of direct advertising at any time; this shall also apply to profiling, provided this is connected with direct advertising of this kind. If you object to processing for the purposes of direct advertising, then your personal data shall no longer be processed for these purposes.

8.  Right to complain to a supervisory authority (Art. 77 EU-GDPR)
Without prejudice to any other administrative or judicial remedy, you have the right to complain to a supervisory authority if you consider that the processing of personal data concerning you infringes the EU GDPR. You can assert this right before a supervisory authority in the member state of your place of residence, your place of work or the place of the alleged infringement. In Baden-Württemberg, the responsible supervisory authority is:

The State Commissioner for Data Protection
and Freedom of Information Baden-Württemberg
Königstraße 10a
70173 Stuttgart, Germany
Tel.: +49 711 615541 – 0
E-mail: poststelle@lfdi.bwl.de

The supervisory authority to which the objection has been submitted shall inform the complainant regarding the status and outcome of the objection, including the option of a judicial remedy pursuant to Art. 78 EU-GDPR

IX.  Changes to the data protection declaration
If a change to the data protection declaration is required for legal or substantial reasons, we will update this page accordingly. No changes shall be made to the consent provided by the user in this case.