We are pleased about your visit to our website b-w-parts-for-perfection.com and your interest in our company.
The protection of your personal data, such as date of birth, name, telephone number, address, etc., is very important to us.
The purpose of this privacy policy is to inform you about the processing of your personal data that we collect from you when you visit our website. Our data protection practices comply with the legal provisions of the EU General Data Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG). The following privacy policy serves to fulfill the information obligations arising from the GDPR. These can be found, for example, in Art. 13 and Art. 14 ff. GDPR.
Controller
The controller within the meaning of Art. 4 No. 7 GDPR is the person who, alone or jointly with others, determines the purposes and means of the processing of personal data.
With regard to our website, the controller is:
Gregor Hofbauer GmbH
Unterfeldstr. 1a
86842 Türkheim
Germany
Email: tuerkheim@b-w-international.com
Tel.: 08245 78996 – 0
Contact Details of the Data Protection Officer
We have appointed a data protection officer in accordance with Art. 37 GDPR. You can reach our data protection officer at the following contact details:
Claus Wissing
Grüner Weg 80
48268 Greven
Germany
Email: datenschutz@svb-muelot.de
Tel.: 02571-5402-0
Website: https://svb-muelot.de/
Provision of the Website and Creation of Log Files
Each time our website is accessed, our system automatically collects data and information from the accessing device (e.g., computer, mobile phone, tablet, etc.).
What personal data is collected and to what extent is it processed?
(1) Information about the browser type and version used;
(2) The operating system of the accessing device;
(3) Hostname of the accessing computer;
(4) The IP address of the accessing device;
(5) Date and time of access;
(6) Websites and resources (images, files, other page content) accessed on our website;
(7) Websites from which the user’s system reached our website (referrer tracking);
(8) Notification of whether the access was successful;
(9) Amount of data transferred
This data is stored in the log files of our system. This data is not stored together with personal data of a specific user, so that individual website visitors cannot be identified.
Legal Basis for the Processing of Personal Data
Art. 6 (1) lit. f GDPR (legitimate interest). Our legitimate interest is to ensure the achievement of the purpose described below.
Purpose of Data Processing
The temporary (automated) storage of the data is necessary for the operation of a website visit in order to enable delivery of the website. The storage and processing of personal data also serves to maintain the compatibility of our website for as many visitors as possible and to combat misuse and eliminate disruptions. For this purpose, it is necessary to log the technical data of the accessing computer in order to respond as quickly as possible to display errors, attacks on our IT systems, and/or errors in the functionality of our website. In addition, the data is used to optimize the website and to ensure the general security of our information technology systems.
Duration of Storage
The aforementioned technical data is deleted as soon as it is no longer needed to ensure the compatibility of the website for all visitors, but no later than 3 months after accessing our website.
Right to Object and Delete
You can object to the processing at any time in accordance with Art. 21 GDPR and request deletion of data in accordance with Art. 17 GDPR. You can find information about your rights and how to exercise them in the lower section of this privacy policy.
Special Features of the Website
Our website offers you various features for which we collect, process, and store personal data. Below we explain what happens with this data:
Contact Form(s)
What personal data is collected and to what extent is it processed?
The data you enter into our contact forms, which you have entered into the input fields of the contact form, will be processed by us to fulfill the purpose stated below.
Legal Basis for the Processing of Personal Data
Art. 6 (1) lit. a GDPR or Art. 9 (2) lit. a GDPR (consent through clear affirmative action or conduct, or express consent)
Purpose of Data Processing
The data collected via our contact form(s) will only be used to process the specific contact inquiry received through the contact form.
Duration of Storage
After processing your inquiry, the collected data will be deleted immediately, unless statutory retention periods apply.
Right to Withdraw and Delete
The right to withdraw and delete is governed by the general provisions on the right to withdraw and the right to deletion described below in this privacy policy.
Requirement to Provide Personal Data
The use of the contact forms is voluntary and is neither contractually nor legally required. You are not obligated to contact us via the contact form, but can also use the other contact options provided on our website. If you wish to use our contact form, you must complete the fields marked as mandatory. If you do not complete the required fields of the contact form, you will either not be able to submit the inquiry, or we will unfortunately not be able to process your inquiry.
Statistical Analysis of Visits to This Website – Web Trackers
When accessing this website or individual files on the website, we collect, process, and store the following data: IP address, website from which the file was accessed, name of the file, date and time of access, amount of data transferred, and notification of successful access (so-called web log). We use this access data exclusively in non-personalized form for the continuous improvement of our website and for statistical purposes. To analyze visits to this website, we also use the following web trackers:
Google Analytics
We use the Google Analytics service on our website, provided by Google Ireland Ltd., Gordon House, Barrow Street, 4 Dublin, Ireland, Email: support-deutschland@google.com, Website: https://www.google.com/. Personal data is also transmitted to the USA. With regard to the transmission of personal data to the USA, there is an adequacy decision on the EU-US Data Privacy Framework by the EU Commission within the meaning of Art. 45 GDPR (hereinafter: DPF – https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en). The service provider is certified under the DPF, so that the usual level of protection of the GDPR applies to the transmission.
The legal basis for the processing of personal data is your consent in accordance with Art. 6 (1) lit. a GDPR or Art. 9 (2) lit. a GDPR, which you have given on our website.
Google Analytics is a web tracker that analyzes the behavior of website visitors and their interactions with our website and provides us with evaluations and forecasts about the content and products of our website and their popularity (so-called tracking). We have integrated Google Analytics so that the service can compile an analysis of the browsing behavior of website users. For this purpose, Google collects the page interactions of website visitors with our website and, if applicable, existing information obtained from reading cookies or other storage technologies, and prepares it statistically for us. Google Analytics uses data processing technologies that enable tracking of individual website visitors and their interaction with other Google services, such as the Google Ads advertising network. Data from other Google services is also used to close data gaps and create comprehensive statistics on the content of our website using machine learning technologies, modeled statistics, and forecasting functions. If Google Analytics is actively enabled on our website, the data determined by Google Analytics is transmitted to servers of Google Ireland Limited. As part of order processing, personal data may also be transmitted to the servers of the parent company Google LLC, 1600 Amphitheatre Parkway, 94043 Mountain View, United States. We conduct the analysis through Google Analytics to continuously optimize our website and make it more accessible. This is a so-called reach measurement.
For processing purposes, the service or we collect the following data: data on the interactions of website visitors with the content of the website, data on the handling of the services displayed on our website, data from external Google services if they interact with our website, such as advertising data or data on behavior in relation to advertising, data on the approximate geographical origin, the browser used, operating system, and other information about the device used.
Google Analytics will store the data relevant for providing web tracking for as long as necessary to fulfill the booked web service. Data collection and storage is anonymized. If individual interactions by website visitors make it possible to subsequently establish a personal reference to specific actions, we will delete the collected data when the purpose is achieved. The data will be deleted at the latest if it is not subject to statutory retention obligations. As a rule, we will delete this data no later than 12 months. You can access the provider’s certification under the EU-US Data Privacy Framework at https://www.dataprivacyframework.gov/list.
You can withdraw your consent at any time. For more information on withdrawing your consent, please refer to the consent itself or to the end of this privacy policy.
Further information on the handling of transmitted data can be found in the provider’s privacy policy at https://policies.google.com/privacy.
The provider also offers an opt-out option at https://tools.google.com/dlpage/gaoptout?hl=de.
Google Tag Manager
We use the Google Tag Manager service on our website, provided by Google Ireland Ltd., Gordon House, Barrow Street, 4 Dublin, Ireland, Email: support-deutschland@google.com, Website: https://www.google.com/. Personal data is also transmitted to the USA. With regard to the transmission of personal data to the USA, there is an adequacy decision on the EU-US Data Privacy Framework by the EU Commission within the meaning of Art. 45 GDPR (hereinafter: DPF – https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en). The service provider is certified under the DPF, so that the usual level of protection of the GDPR applies to the transmission.
The legal basis for the processing of personal data is your consent in accordance with Art. 6 (1) lit. a GDPR or Art. 9 (2) lit. a GDPR, which you have given on our website.
Google Tag Manager provides a technical platform to execute and centrally manage other web tools and web tracking programs using so-called “tags.” In this context, Google Tag Manager stores cookies on your computer and analyzes your browsing behavior (so-called “tracking”) to the extent that web tracking tools are executed via Google Tag Manager. The data generated by the “tags” is consolidated, stored, and processed by Google Tag Manager under a unified user interface. All integrated “tags” are listed separately in this privacy policy. When using our website with the integration of “tags” from Google Tag Manager enabled, data, in particular your IP address and your user activities, is transmitted to servers of Google. The tracking tools used in Google Tag Manager ensure through IP anonymization of the source code that the IP address is anonymized by Google Tag Manager before transmission. Tag Manager allows measurement values from various service providers (Google and third-party providers) to be linked and evaluated based on so-called tag management. Google Tag Manager helps us compile reports on website activities and manage the web tools of our website.
For processing purposes, the service or we collect the following data: cookies, web tracking data, outgoing or incoming links, information generated during the integration and activation of JavaScript code on the website from Google Tag Manager and the web tools triggered by Google Tag Manager.
You can access the provider’s certification under the EU-US Data Privacy Framework at https://www.dataprivacyframework.gov/list.
You can withdraw your consent at any time. For more information on withdrawing your consent, please refer to the consent itself or to the end of this privacy policy.
Further information on the handling of transmitted data can be found in the provider’s privacy policy at https://policies.google.com/privacy.
The provider also offers an opt-out option at https://policies.google.com/privacy.
Integration of External Web Services and Processing of Data Outside the EU
On our website, we use active content from external providers, so-called web services. By accessing our website, these external providers may receive personal information about your visit to our website. Processing of data outside the EU may be possible. You can prevent this by installing an appropriate browser plugin or by deactivating the execution of scripts in your browser. This may result in functional limitations on websites you visit.
We use the following external web services:
BITE Service
We use the BITE Service on our website, provided by BITE GmbH, Filchnerstraße 16, 89231 Neu-Ulm, Germany, Email: info@b-ite.de, Website: https://www.b-ite.de/. Personal data is transmitted exclusively to servers in the European Union.
The legal basis for the processing of personal data is your consent in accordance with Art. 6 (1) lit. a GDPR or Art. 9 (2) lit. a GDPR, which you have given on our website.
The BITE applicant management plugin provides companies with a web-based solution for the effective management and evaluation of applicants, to minimize administrative effort and enable optimal recruitment.
You can withdraw your consent at any time. For more information on withdrawing your consent, please refer to the consent itself or to the end of this privacy policy.
Further information on the handling of transmitted data can be found in the provider’s privacy policy at https://www.b-ite.de/legal-notice.html.
Legal Text Snippet and Modules
We use the Legal Text Snippet and Modules service on our website, provided by Website-Check GmbH, Beethovenstraße 24, 66111 Saarbrücken, Germany, Email: support@website-check.de, Website: https://www.website-check.de/. Personal data is transmitted exclusively to servers in the European Union.
The legal basis for processing is Art. 6 (1) lit. c GDPR. The use of the service supports us in fulfilling our legal obligations.
With the help of the service, content from our legal texts is loaded onto our website. Through the integration on our website, the current legal texts are loaded. Through this integration, additional technical modules may also be loaded with regard to the legal texts or legally required elements.
You can find information about your rights regarding processing at the end of this privacy policy.
Further information on the handling of transmitted data can be found in the provider’s privacy policy at https://www.website-check.de/datenschutzerklaerung/.
Website-Check Seal
We use the Website-Check Seal service on our website, provided by Website-Check GmbH, Beethovenstraße 24, 66111 Saarbrücken, Germany, Email: support@website-check.de, Website: https://www.website-check.de/. Personal data is transmitted exclusively to servers in the European Union.
The legal basis for the processing of personal data is our legitimate interest in accordance with Art. 6 (1) lit. f GDPR. Our legitimate interest lies in achieving the purpose described below.
The script from Website-Check GmbH is the technical integration of the Website-Check seal. With this seal, we want to show that we take data protection very seriously. The transmission of data to Website-Check GmbH is for the delivery and display of the seal on our website.
With regard to processing, you have the right to object as set out in Art. 21. For more information, please refer to the end of this privacy policy.
Further information on the handling of transmitted data can be found in the provider’s privacy policy at https://www.website-check.de/datenschutzerklaerung/.
Data Security and Data Protection, Communication via Email
Your personal data is protected by technical and organizational measures during collection, storage, and processing so that it is not accessible to third parties. In the case of unencrypted communication via email, complete data security on the transmission path to our IT systems cannot be guaranteed by us, so we recommend encrypted communication or postal mail for information with a high need for confidentiality.
Automatic Email Archiving
Scope of Processing of Personal Data
We expressly inform you that our mail system has an automated archiving procedure. All incoming and outgoing emails are digitally archived in a tamper-proof manner.
Legal Basis for the Processing of Personal Data
Art. 6 (1) lit. c GDPR (legal obligation). The legal obligation consists in compliance with tax and commercial law requirements (e.g., Sections 146, 147 AO, Sections 238, 257 HGB).
Purpose of Data Processing
The purpose of archiving is to comply with tax law (e.g., Sections 146, 147 AO – obligation to retain emails of tax relevance) and commercial law requirements (e.g., Sections 238, 257 HGB – obligation to archive business correspondence).
Duration of Storage
Our email communication is stored until the expiry of tax and commercial law retention obligations. The retention period can be up to 10 years.
Right to Object and Delete
You can object to the processing at any time in accordance with Art. 21 GDPR and request deletion of data in accordance with Art. 17 GDPR. You can find information about your rights and how to exercise them in the lower section of this privacy policy.
Handling of Application Documents
If you have questions regarding our email archiving system, please contact our data protection officer. We also point out that we only consider application documents in PDF file format. Zipped files (WinZip, WinRAR, 7Zip, etc.) are filtered out by our security systems and not delivered. We do not consider applications in Word file format and other file formats and delete them unread. Please note that application documents sent unencrypted via email may be opened by third parties before they reach our IT systems. We assume that we may also respond to unencrypted application emails in an unencrypted manner. If you do not wish this, please provide a note in your application email.
Right to Information and Correction Requests – Deletion & Restriction of Data – Withdrawal of Consent – Right to Object
Right to Information
You have the right to request confirmation as to whether we process personal data concerning you. If this is the case, you have a right to information about the information specified in Art. 15 (1) GDPR, unless the rights and freedoms of other persons are affected (see Art. 15 (4) GDPR). We will also be happy to provide you with a copy of the data.
Right to Rectification
In accordance with Art. 16 GDPR, you have the right to have any incorrectly stored personal data (such as address, name, etc.) corrected by us at any time. You can also request completion of the data stored with us at any time. A corresponding adjustment will be made immediately.
Right to Erasure
In accordance with Art. 17 (1) GDPR, you have the right to have us delete the personal data collected about you if
- the data is no longer needed;
- the legal basis for processing has lapsed without replacement due to the withdrawal of your consent;
- you have objected to the processing and there are no legitimate grounds for the processing;
- your data is being processed unlawfully;
- a legal obligation requires this or collection has taken place in accordance with Art. 8 (1) GDPR.
The right does not exist in accordance with Art. 17 (3) GDPR if
- processing is necessary for exercising the right to freedom of expression and information;
- your data has been collected on the basis of a legal obligation;
- processing is necessary for reasons of public interest;
- the data is necessary for the establishment, exercise, or defense of legal claims.
Right to Restriction of Processing
In accordance with Art. 18 (1) GDPR, you have the right in individual cases to request the restriction of the processing of your personal data.
This is the case if
- the accuracy of the personal data is contested by you;
- the processing is unlawful and you do not consent to deletion;
- the data is no longer needed for the processing purpose, but the collected data serves the establishment, exercise, or defense of legal claims;
- an objection to processing has been lodged in accordance with Art. 21 (1) GDPR and it is not yet clear which interests prevail.
Right to Withdraw
If you have given us express consent to process your personal data (Art. 6 (1) lit. a GDPR or Art. 9 (2) lit. a GDPR), you can withdraw this at any time. Please note that the lawfulness of the processing carried out on the basis of consent until the withdrawal is not affected by this.
Right to Object
In accordance with Art. 21 GDPR, you have the right to object at any time to the processing of personal data concerning you that has been collected on the basis of Art. 6 (1) lit. f (within the framework of a legitimate interest). The right is only available to you if there are special circumstances that speak against the storage and processing.
How Do You Exercise Your Rights?
You can exercise your rights at any time by contacting the contact details below:
Gregor Hofbauer GmbH
Kirchdorferstr. 2
86842 Türkheim
Germany
Email: info@hofbauer.de
Tel.: 08245 78996 – 0
Right to Data Portability
In accordance with Art. 20 GDPR, you have a right to transmission of the personal data concerning you. The data will be made available by us in a structured, commonly used, and machine-readable format. The data can be sent either to you yourself or to a controller designated by you.
Upon request, we will provide you with the following data in accordance with Art. 20 (1) GDPR:
- Data collected on the basis of express consent in accordance with Art. 6 (1) lit. a GDPR or Art. 9 (2) lit. a GDPR;
- Data that we have received from you in accordance with Art. 6 (1) lit. b GDPR within the framework of existing contracts;
- Data that has been processed as part of an automated procedure.
We will transfer the personal data directly to a controller you designate, insofar as this is technically feasible. Please note that we may not transfer data that interferes with the freedoms and rights of other persons in accordance with Art. 20 (4) GDPR.
Right to Lodge a Complaint with a Supervisory Authority in accordance with Art. 77 (1) GDPR
If you suspect that your data is being processed unlawfully on our site, you may of course seek judicial clarification of the matter at any time. In addition, any other legal remedy is available to you. Independently of this, you have the option pursuant to Art. 77(1) GDPR to lodge a complaint with a supervisory authority. The right to lodge a complaint pursuant to Art. 77 GDPR is available to you in the EU member state of your habitual residence, your place of work, and/or the place of the alleged infringement, i.e., you may choose the supervisory authority to which you submit your complaint from the aforementioned locations. The supervisory authority with which the complaint has been lodged will then inform you of the status and results of your submission, including the possibility of a judicial remedy pursuant to Art. 78 GDPR.