Data protection declaration

BVM BRUNNER GMBH & Co. KG

Thank you for visiting our website. In the following, we provide you information about which personal data we collect and what happens to this data when you visit our website. Personal data includes all data that enables you to be identified personally. You are also provided with information on your rights as a data subject according to the EU General Data Protection Regulation (GDPR).

I. The data controller within the context of the EU General Data Protection Regulation (GDPR) is

BVM BRUNNER GMBH & Co. KG
Represented by managing director Frank Brunner
Ferdinand-Lassalle-Straße 62
72770 Reutlingen, Germany
info@bvm-brunner.de

II. Data protection officer

Our data protection officer is:

Columbus Consulting
Dr. Inge Rötlich
Mahdentalstr. 82
71065 Sindelfingen, Germany
Tel.: +49 7031 7150900
Fax: +49 7031 4180970
E-mail: datenschutz@columbus-consulting.eu

III. General information on data processing

1. Scope of personal data processing

We generally only process the personal data of our users if this is required to provide a functional website and our content and services.

2. Encryption

This website uses SSL encryption to protect confidential content, e.g. inquiries that you sent to us, the site operator. You can recognise an encrypted connection by the address bar of your browser changing from http:// to https:// and the lock symbol being displayed in the browser line. If this encryption is active, the data that you transfer to us cannot be ready by third parties.

3. Provision of the website and creation of log files

Each time our website is accessed, our system automatically collects data and information from the accessing computer that is required for the error-free provision of the website, such as the operating system and Internet browser. Other data will only be collected with your consent.

4. Processing of special data in accordance with Art. 9 GDPR

No special personal data is processed in connection with this website.

IV. Cookies

Within the scope of our legitimate interest in a technically problem-free online service and its optimisation according to Art. 6 Para. 1 lit. f GDPR, our website uses cookies that are intended to make our service better, more effective and reliable.

We use cookies to simplify the use of our website for the user and to save your settings from the cookie banner.

If you have given your consent, cookies will also be set by Google Analytics and YouTube. You can find more information on this below under “Google Analytics” and “YouTube”.

V. Contact forms

If you send us inquiries via our contact form, your information will only be used to process your inquiry. These data shall not be provided to third parties.

Depending on which of our contact forms you use (e.g. spare parts enquiry, technician request, etc.), various data from the input screen will be saved. Personal data here are in particular your contact information, i.e:

Company/representative
Surname
Forename
E-mail address
Telephone number

At the time of sending, our system also stores the following data:
Date and time of contact

Alternatively, you can contact us via the e-mail address provided. In this case, your personal data provided by e-mail will be saved.

The processing of the data entered in the contact form is based on your consent (Art. 6 para. 1 lit. a GDPR), which you give by filling in the input screen or by sending the e-mail. You may withdraw your consent at any time. An informal message via e-mail is sufficient for this. The legality of the data processing procedures completed up until the withdrawal shall remain unaffected.

We will retain the data you provide on the contact form until you request their deletion, withdraw your consent to storage, or the purpose for storing the data becomes superfluous (e.g. after completed processing of your request). Mandatory statutory provisions – in particular retention periods – remain unaffected.

VI. Analysis tools and advertising

1. Google Analytics

If you have given your consent, this website will use functions of the web analysis service Google Analytics. You can change your data protection settings at any time by clicking on the red symbol at the bottom left of the page and making changes there, for example rejecting statistics cookies.

If you are a resident of the European Economic Area or Switzerland, this service is provided to you by Google Ireland Limited, Gordon House, 4 Barrow Street, D04 E5W5 Dublin 4, Ireland. If you do not have your habitual residence in the European Economic Area or Switzerland, this service is provided to you by Google LLC., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Google’s data protection declaration can be found at https://policies.google.com/privacy?hl=en-US

Nature and purpose of processing

Google Analytics uses so-called “Cookies”. These are text files that are saved on your computer to enable an analysis of the use of our website by you. The information created by the cookie about your use of this website is normally transferred to a Google server in the USA and stored there.

Google Analytics cookies are normally stored on the basis of Art. 6 Para. 1 lit. f GDPR. The website operator has a legitimate interest in the analysis of usage behaviour to optimise both the web service and its advertising.

In Google Analytics 4, the anonymisation of IP addresses is activated by default. This shortens your IP address with Google inside the member states of the European Union and in other contract states of the agreement on the European Economic Area before it is transmitted to the USA. The full IP address will only be transmitted by Google to the USA and then shortened there in rare cases.

According to Google, the IP address transmitted by your browser within the scope of Google Analytics will not be combined with other data from Google.

During your visit to the website, your user behaviour is recorded in the form of “events”. Events can be:

Page views
First visit to the website
Start of the session
Websites visited
Your “click path”, interaction with the website
Scrolls (whenever a user scrolls to the end of the page (90%))
Clicks on external links
Internal search requests
Interaction with videos
File downloads
Viewed / clicked adverts
Language setting

Also recorded are:

Your approximate location (region)
Date and time of your visit
Your IP address (in abbreviated form)
Technical information about your browser and the end devices you use (e.g. language setting, screen resolution)
Your internet provider
The referrer URL (via which website/advertising medium you came to this website)

On behalf of the operator of this website, Google shall use this information to evaluate your use of the website, to compile reports about website activities, and to provide additional services connected with website use and Internet use vis-a-vis the website operator. The reports provided by Google Analytics are used to analyse the performance of our website.

Recipients of the data are/may be

Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (as processor pursuant to Art. 28 GDPR)
Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA
Alphabet Inc., 1600 Amphitheatre Parkway Mountain View, CA 94043, USA

Third country transfer

For the USA, the European Commission issued an adequacy decision on 10 July 2023. Google LLC is certified under the EU-US Privacy Framework. Since Google servers are distributed worldwide and a transfer to third countries (for example to Singapore) cannot be completely ruled out, we have also concluded the EU standard contractual clauses with the provider.

Storage duration

The data sent by us and linked to cookies is automatically deleted after 14 months. The maximum lifespan of Google Analytics cookies is 2 years. Data that has reached the end of its retention period is automatically deleted once a month.

Legal basis

The legal basis for this data processing is your consent in accordance with Art. 6 Para. 1 Sentence 1 lit. a GDPR and § 25 Para. 1 Sentence 1 Telecommunications Telemedia Data Protection Act (TTDSG).

Revocation

You can withdraw your consent at any time with effect for the future by calling up the cookie settings (click on the red symbol at the bottom left of the page) and changing your selection there. The legality of processing carried out on the basis of the consent up to the point of withdrawal shall remain unaffected.

You may also prevent storage of cookies by using the corresponding setting in your browser software; we nevertheless inform you that in this case, you may not be able to use all of the functions of the website. Furthermore, you may prevent the collection of data recorded by the cookie and collection of data related to your use of the website (including your IP address) by Google as well as any processing of this data by Google by downloading and installing the browser plug-in available from Google: https://tools.google.com/dlpage/gaoptout.

You can find more information on the terms of use of Google Analytics and data protection at Google at https://marketingplatform.google.com/about/analytics/terms/us/ and at https://policies.google.com/?hl=en-US.

This website uses the “demographic characteristics” function of Google Analytics. This enables reports to be created that include statements about the age, gender, and interests of the site visitor. These data originate from interest-related advertisements of Google and from visitor data of third-party providers. These data cannot be assigned to any specific person. You can deactivate this function at any time via the ad settings in your Google account or refuse the collection of your data by Google Analytics in the privacy settings on this page.

You can also stop the use of the activities and information of your Google account under “Settings for advertising” at https://adssettings.google.com/authenticated by ticking the checkbox.

2. Google Tag Manager

We use Google Tag Manager. Google Tag Manager is a solution that allows marketers to manage website tags via one interface. The Tool Tag Manager itself (which implements the tags) is a cookie-free domain and does not collect personal data. The tool triggers other tags that collect data for their part under certain circumstances. Google Tag Manager does not access this data. If deactivation is completed at the domain or cookie level, this remains in place for all tracking tags that are implemented with Google Tag Manager. https://marketingplatform.google.com/about/analytics/tag-manager/use-policy/

3. Google AdWords

This website uses the online advertising program Google AdWords, but without using the “Conversion Tracking” function. We use the program to draw attention to our offers with the help of advertising material (so-called Google Adwords) on external websites.

If you are a resident of the European Economic Area or Switzerland, this service is provided to you by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. If you do not have your habitual residence in the European Economic Area or Switzerland, this service is provided to you by Google LLC., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Google’s data protection declaration can be found at https://policies.google.com/privacy?hl=en-US

Third country transfer: For the USA, the European Commission issued an adequacy decision on 10 July 2023. Google LLC is certified under the EU-US Privacy Framework. Since Google servers are distributed worldwide and a transfer to third countries (for example to Singapore) cannot be completely ruled out, we have also concluded the EU standard contractual clauses with the provider.

4. Google Fonts

Google Fonts are used on this website to display fonts. We have stored Google Fonts locally so that no data is transferred to Google.

VII. Additional plug-ins and tools

YouTube

If you have given your consent, we will use plugins from the Google-operated YouTube page of YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, USA. You can change your data protection settings at any time by clicking on the red symbol at the bottom left of the page and making changes there, for example rejecting external media.

Google’s data protection declaration can be found at https://policies.google.com/privacy?hl=en-US

If you have rejected external media in the data protection settings, we use the YouTube no-cookies function, i.e. we activate extended data protection, videos are then not accessed via youtube.com, but via youtube-nocookie.com. In this case, no cookies from YouTube will initially be stored on your device. However, when the relevant pages are accessed, the IP address and other data are transmitted and thereby – in particular – our internet pages that you have visited, although this information cannot be assigned to you as long as you are not permanently logged in to YouTube or another Google service when you access the page.

When you visit one of our pages equipped with a YouTube plugin, a connection to the YouTube servers is established. This informs the YouTube server which of our pages you have visited.

If you are logged into your YouTube account, you enable YouTube to assign your browsing behaviour directly to your personal profile. You can prevent this by logging out of your YouTube account.

As soon as you start playing an embedded video by clicking on it, YouTube only stores cookies on your device through the extended data protection mode, which do not contain any personally identifiable data, unless you are currently logged in to a Google service. These cookies can be prevented by implementing appropriate browser settings and extensions.

The use of YouTube takes place in the interest of realising an appealing presentation of our online presence. This represents a legitimate interest within the context of Art. 6 Para. 1 lit. f GDPR.

XIII. Application procedure

The protection of personal data is important to us. The handling of your data provided to us as part of an application process takes place in accordance with the legal regulations, in particular those of the EU General Data Protection Regulation and the German Federal Data Protection Act (BDSG).

For written applications (postal applications) your documents will be scanned and the data contained therein entered into our system, subject to your consent. You will then receive your original documents back. For e-mail applications, your data is automatically transferred to our system. If you do not agree to this, please actively object to this.

1. Application information

We collect different types of information as part of your application. This includes in particular your personal data with contact information as well as a description of your education, work experience and skills. You also have the option of providing us with electronically stored documents such as certificates or cover letters.

By submitting your application, you confirm that the information you have provided is true. Please note that any false statement or deliberate omission may constitute grounds for cancellation or subsequent termination.

We do not require any information from you that is not usable under the General Equal Treatment Act (race, ethnic origin, gender, religion or belief, disability, age or sexual identity). We also ask you not to provide any information regarding illness, pregnancy, political views, philosophical or religious beliefs, trade union membership, physical or mental health or sex life. The same applies to content that is likely to infringe the rights of third parties (e.g. copyrights, press law or general rights of third parties.

2. Collection, processing, use and disclosure of your data

Personal data will only be collected, stored, processed and used as part of your application for purposes related to your interest in current or future employment with us and the processing of your application. It will not be passed on to third parties. Data such as name, address, telephone number, e-mail address, etc. are collected in order to use the online application process. This data is generally used to contact you about your application.

If your application is successful, the data provided may be used for administrative matters relating to your employment.

Your application will only be processed and acknowledged by the relevant points of contact within our company. All employees entrusted with data processing are obliged to maintain the confidentiality of your data. Under no circumstances will third parties gain knowledge of your details. The data is processed exclusively in Germany.

3. Storage

If we are unable to offer you employment, we will retain the data you provide for up to six months for the purpose of answering questions in connection with your application and rejection.

However, if your application documents are generally of interest and there is simply no suitable position currently available, we will ask for your consent to retain and store your data accordingly. This will enable us to contact you about future vacancies.

4. Data security

We attach great importance to the greatest possible security of our system and use modern data storage and security technologies to optimally protect your data. This includes measures such as anti-virus software or a firewall. It goes without saying that our security measures are constantly being improved in line with technological developments. Your data is transmitted in encrypted form and then stored in a database. All systems in which your personal data is stored are protected against access and are only accessible to a specific group of persons responsible for personnel.

5. Change to the data protection declaration for applications

If we change the content of this data protection declaration, we will announce these changes on our website.

6. Deletion of application data, withdrawal of consent

You have the right at any time to request more detailed information about the data stored about you, to view this data and to request that inaccurate data about you be corrected or that the stored data be completely or partially deleted.

You can withdraw your consent at any time with effect for the future. The relevant data will then be deleted. In this case, please send your notification of withdrawal, stating your full name and e-mail address, to personal@bvm-brunner.de.

In the cases provided for by law, the data may be blocked instead of deleted. In this case, the data will be deleted as soon as it has been established that no claims have been or can be asserted against us from the application process.

IX. Your affected rights

If we process your personal data, you are the data subject within the context of the GDPR. This entitles you to the following rights in relation to us:

1. Right to information (Art. 15 GDPR)

You may receive free information from us at any time regarding the stored personal data we possess. In this case, identification of your person is required to prevent misuse.

2. Right to correction (Art. 16 GDPR)

You have the right at all times to correct and/or complete your personal data that we have processed, provided this is incorrect or incomplete.

3. Right to deletion – right to be forgotten (Art. 17 GDPR)

You have the right to deletion of your personal data that we have processed. This applies in particular once the reason for processing is superfluous, the required consent has been withdrawn, and no other legal basis is present or our data processing is no longer legal. We shall immediately delete your personal data within the legal context.

4. Right to limit processing (Art. 18 GDPR)

You can request the restriction of the processing of your data.

If processing the personal data affecting you has been limited, then this data, storage notwithstanding, may only be processed with your consent or to enforce, exercise, or defend legal claims or to protect the rights of another natural or legal person or for reasons within the public interest of the Union or a member state thereof.

If processing is limited according to the requirements indicated above, then you shall be informed by the data processor before limiting is removed.

5. Right to be informed (Art. 19 GDPR)

If you have asserted the right to rectification, deletion, or restriction of processing against the data processor, the data processor is obliged to inform all recipients to whom your personal data has been disclosed of this rectification or deletion of your data or restriction of processing, unless this proves to be impossible or involves a disproportionate cost.

You have the right vis-a-vis the data processor to be informed concerning these recipients.

6. Right to data portability (Art. 20 GDPR)

You may request us to transfer the data stored about you in machine-readable form.

7. Right to object (Art. 21 GDPR)

You have the right due to reasons related to your own special situation to object at any time processing personal data on the basis of Art. 6 Para. 1 lit. e or f GDPR; this shall also apply to profiling based on these conditions.

The data processor shall no longer process the data concerning you, unless they are able to demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or if the processing serves the purpose of asserting, exercising, or defending legal claims.

If personal data affecting you are processed for the purposes of direct advertising, then you have the right to object to processing personal data for the purposes of direct advertising at any time; this shall also apply to profiling, provided this is connected with direct advertising of this kind.

If you object to processing for the purposes of direct advertising, then your personal data shall no longer be processed for these purposes.

8. Right to object to a supervisory authority (Art. 77 GDPR)

Without prejudice to any other administrative or judicial remedy, you have the right to object to a supervisory authority if you consider that the processing of personal data concerning you infringes the GDPR. You can assert this right before a supervisory authority in the member state of your place of residence, your place of work or the place of the alleged infringement.

In Baden-Württemberg, the responsible supervisory authority is:

State Representative for Data Protection and Information Freedom
Baden-Württemberg
Lautenschlagerstraße 20
70173 Stuttgart, Germany
Tel.: +49 711 615541 – 0
E-mail: poststelle@lfdi.bwl.de

The supervisory authority to which the objection has been submitted shall inform the complainant regarding the status and outcome of the objection, including the option of a judicial remedy pursuant to Art. 78 GDPR

X. Changes to the data protection declaration

If a change to the data protection declaration is required for legal or substantial reasons, we will update this page accordingly. No changes shall be made to the consent provided by the user in this case.

Data protection declaration

BVM BRUNNER GMBH & Co. KG

Title