Privacy policy
1. Details of the data controller (the company)
Bedrunka+Hirth Gerätebau GmbH
Gießnaustraße 8
78199 Bräunlingen
Represented by the Managing Director: Dipl.-Kfm. Ludwig Kellner
Phone: +49 (771) 9201 - 0
E-mail: info@bedrunka-hirth.de
2. Data Protection Officer
If you have any questions regarding data protection, please contact our data protection officer at office@die-digitallotsen.com or at the following postal address:
DIE-DIGITALLOTSEN
Hinter Gärten 8
72459 Albstadt
Germany
Phone: +49 7435 929 09 74
3. Processing your personal data - purposes and legal basis
Data processing on the company's website
Log files
When our website is accessed, log files are set and remain stored for 7 days. Such log files are automatically transmitted by your browser to us or the service provider of the website.
These are the following data:
- Browser type and version
- Referrer URL (from which website you came to us)
- Host name of the accessing computer
- Operating system used
- Time of the server request
- IP address
This data serves to ensure a technically flawless website and is therefore collected on the basis of Art. 6 Para. 1 lit. f GDPR. Our legitimate interest lies in the error-free presentation of our online presence and the resulting optimisation of the website, if necessary.
Web hosting
We have stored the content of our website with a web hoster, from where the page is loaded and displayed in your browser.
Our web host is: MITTWALD-AS Mittwald CM Service GmbH und Co. KG
Cookies
We use cookies on our website to make our services more user-friendly, effective and secure. These small data records are stored on your computer and serve to recognise your browser when you visit us again. Most of the cookies we use are so-called "session cookies" and are automatically deleted when you leave our site. Other cookies remain stored on your terminal device until you delete them. You have the option to change your privacy settings at any time by using our Cookie Consent Banner.
We store cookies that are necessary for the implementation of the electronic communication process or for the provision of certain functions requested by you (e.g. shopping cart function) on the basis of Art. 6 para. 1 lit. f GDPR as well as §25 para. 2 point 2 TTDSG. We have a legitimate interest in storing cookies in order to be able to provide our services in a technically flawless and optimised manner. If we store other cookies (e.g. cookies to analyse your surfing behaviour), this is done on the basis of your consent (Art. 6 para. 1 lit. a GDPR).
Contact form
If you send us enquiries via our contact form, your details and contact data will be stored by us for the purpose of processing the enquiry and, if necessary, for further follow-up enquiries. We will not pass on this data to third parties without your consent, which we will request separately from you.
The processing of your data entered in the contact form is based on your consent (Art. 6 para. 1 lit. a GDPR). If your request is related to the performance of a contract or pre-contractual measures, the legal basis is Art. 6 para. 1 lit. b GDPR. You can revoke your consent at any time by sending us an informal e-mail. The lawfulness of the data processing carried out until the revocation remains unaffected.
We store the data you enter in the contact form until you request erasure, revoke your consent or the purpose for storing the data no longer applies (e.g. after processing your enquiry has been completed). Mandatory legal provisions, in particular retention periods, remain unaffected by this.
Registration on this website
In order to use additional functions on our website, you can register. The data you provide during registration will be used exclusively for the use of the respective offer or service for which you have registered. Please note that the mandatory information requested during registration must be provided in full, otherwise we will have to reject your registration.
For important changes, such as changes to the scope of the offer or technical adjustments, we will use the e-mail address you have provided to inform you of these.
The processing of the data provided during registration is based on your consent (Art. 6 para. 1 lit. a GDPR) or pre-contractual measures (Art. 6 para. 1 lit. b GDPR). You can revoke your consent at any time by sending us an informal message by e-mail. The legality of the data processing carried out until the revocation remains unaffected by the revocation.
Your data collected during registration will be stored by us for as long as you are registered on our website and then deleted. Please note that legal retention periods remain unaffected by this.
Analysis tools and advertising
In order to better understand user behaviour on our website and to continuously improve our web presence, we use a number of services. These services, such as analytic tool providers, allow us to analyse user behaviour on the website and conduct tests to determine which offers are better received.
„Leadinfo:
We use the lead generation service provided by Leadinfo B.V., Rotterdam, The Netherlands, which recognizes visits of companies to our website based on IP-addresses and shows us related publicly available information, such as company names or addresses. In addition, Leadinfo places two first-party cookies for providing transparency on how our visitors use our website and the tool processes domains from provided form inputs (e.g. “leadinfo.com”) to correlate IP addresses with companies and to enhance its services. For additional information, please visit www.leadinfo.com. On this page: www.leadinfo.com/en/opt-out you have an opt-out option. In the event of an opt-out, your data will no longer be used by Leadinfo”.“
Matomo
We use Matomo, an open source software, to analyse the use of our website. This involves processing various data such as your IP address, the pages you visit, the length of stay and the frequency of visits.
Cookies are stored on your terminal device to collect this data. However, we use the anonymisation function "Automatically Anonymize Visitor IPs", which shortens your IP address to prevent direct identification.
The legal basis for the use of Matomo is Art. 6 para. 1 lit. a) GDPR. If you do not wish to consent to this processing, you have the option to refuse this in the Consent Banner or to change it later in the privacy settings.
However, if you have consented, you can withdraw your consent at any time in the "Cookies" section of this privacy notice. Please note that the revocation only applies to future data processing. You can also use the settings of your browser to delete existing cookies.
Newsletter
If you have subscribed to the newsletter on our website, we will use your e-mail address to send you the newsletter regularly and to provide you with interesting information about our company. The legal basis for sending the newsletter is your consent (Article 6 (1) sentence 1 a) GDPR). To subscribe to our newsletter, we use the double opt-in procedure. You will receive an e-mail in which you have to confirm your registration for the newsletter dispatch. We do not collect any further data or only on a voluntary basis. The information you provide will only be used for sending the newsletter and will not be passed on to third parties.
You can revoke your consent at any time to stop receiving the newsletter. To do this, you can click on "unsubscribe" at the bottom of the newsletter email or
click on "unsubscribe". The legality of the data processing operations already carried out remains unaffected by the revocation.
We store your data, which you have provided for the purpose of the newsletter subscription, until you unsubscribe from the newsletter. After unsubscribing, your data will be deleted. Other data stored by us remains unaffected.
We use the Rapidmail service to send our newsletter. The provider is Rapidmail GmbH, Augustinerplatz 2, 79098 Freiburg i.Br., Germany. The data you enter for the purpose of receiving the newsletter is stored on Rapidmail's servers in Germany.
Data analysis by Rapidmail
The e-mails we send via Rapidmail contain a "tracking pixel" that establishes a connection to Rapidmail's servers when the e-mail is opened in order to determine whether the e-mail has been opened. In addition, Rapidmail allows us to identify whether links in the email have been clicked and if so, which links. These links are tracking links that allow us to count your clicks. For more information about Rapidmail's analytics features, please see the following link: de.rapidmail.wiki/kategorien/statistiken/.
If you do not want any analysis, you can unsubscribe from the newsletter at any time via the link contained in each message or by sending us an informal message.
Legal basis
The data processing is based on your consent (Art. 6 para. 1 lit. a GDPR). You can revoke this consent at any time. The legality of the data processing operations already carried out remains unaffected by the revocation.
Storage period
We only store the data you provide for newsletter registration until you unsubscribe from the newsletter. After unsubscribing, this data is deleted from our servers as well as from the servers of Rapidmail. Data stored by us for other purposes is not affected by this.
You can find more information about data security at Rapidmail at the following link: www.rapidmail.de/datensicherheit.
Links to social media and other third parties via graphics or text links
We refer to our company presences in various social networks and platforms on our website. To prevent an automatic connection to the server of the respective social network, we use linked graphics. You will only be redirected to the service of the respective third-party provider after clicking on the graphic. After the forwarding, information about the user such as IP address, time and the page accessed can be collected by the target platform.
Please note that for some platforms, processing of the collected data in the USA cannot be ruled out.
If you have an account with the respective provider and are logged in to the respective network at the time of the visit, the network operator may be able to assign the collected information to this personal account. Any further interaction with the network, e.g. clicking on a "Share" or "Like" button, may result in this information being stored in your user account and possibly also published. To avoid that the collected information is directly assigned to your user account, you can log out of your account before clicking on the graphic. You may also be able to make advanced configurations in the network settings to limit this.
The following platforms and services are integrated into our site through links:
We are represented with a company presence on the social media platform Facebook. This enables us to get in touch with customers and interested parties and to present our company and our products.
Facebook is a service of Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland, a subsidiary of Meta Platforms Inc, 1601 Willow Road, Menlo Park, California 94025 (USA).
We are jointly accountable with Meta Platforms Ireland Ltd. for the data processing that takes place on our corporate presence there and have therefore entered into a joint accountability agreement with Meta Platforms, which can be accessed here:
www.facebook.com/legal/terms/page_controller_addendum
We base the data processing on Art. 6 para. 1 lit f. Our legitimate interest lies in the promotion of our company on the widespread platform, the direct communication with interested parties. If you yourself have an account with the provider, you have agreed to Facebook's privacy policy. In this case, your consent (Art. 6 para. 1 lit. a) is the legal basis for the data processing that takes place.
We have no influence on the data processing carried out by Facebook and refer to the provider's data protection guidelines:
www.facebook.com/privacy/explanation
YouTube
We use YouTube to promote our company and our services and products.
audiovisually. On our website you will therefore find links to our YouTube presence or videos hosted there by our company.
The legal basis is Art. 6 para. 1 lit. f GDPR. Our legitimate interest lies in an appealing presentation of our company on the globally used video platform. YouTube is operated by Google Ireland Limited, a subsidiary of the US-based Google LLC. We are joint data controllers with Google on our YouTube company presence.
Due to Google's worldwide server locations and the company headquarters in the USA, user data may be processed outside the European Union, in particular in the USA. This may result in higher risks for users, especially with regard to the user rights set out in the GDPR, which cannot be fully exercised.
Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
(Subsidiary of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA)
As we have not directly integrated YouTube videos into our website, we refer to Google's data protection information with regard to the data processing that takes place when the videos are called up. We
Data protection information: https://policies.google.com/privacy
We use Twitter as a platform to present our company and our services and to communicate with customers and interested parties.
Our online presence on Twitter is operated by Twitter Inc., 795 Folsom St., Suite 600, San Francisco, CA 94107, USA.
It is possible that user data may be processed outside the European Union, in particular in the USA. This may result in increased risks for users, for example that later access to user data is made more difficult. We have no access to this user data, which is managed exclusively by Twitter.
The privacy policy of Twitter can be found at twitter.com/de/privacy. The transfer of data takes place on the basis of the EU standard contractual clauses (Art. 46 para. 2 + 3 GDPR).
The data processing terms and conditions including the standard contractual clauses can be viewed here: gdpr.twitter.com/en/controller-to-controller-transfers.html.
We have placed a link to our presence on the social media platform Xing on our website. Xing is a service of New Work SE, Am Strandkai 1, 20457 Hamburg. The network offers the possibility to manage professional contacts and can be used by companies to find potential employees, for example.
When you visit our company page on Xing, the company acts jointly with us as a data controller and also processes personal data in its own interest. We have no influence on this.
Further information on data processing by Xing can be found in their privacy policy: privacy.xing.com/de/datenschutzerklaerung
Google-Maps
We use Google Maps on our website to display our location and to make it easier for you to search for dealers. This is a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, hereinafter referred to as "Google".
If you call up a page on which we have integrated Google Maps, network connections are established to Google servers in order to load the maps and fonts. This means, among other things, that your IP address is transmitted to Google, which is technically necessary. If you have a Google account and are logged in via it, Google can assign a person. The resulting processing of your data is the responsibility of Google.
By loading the maps, Google can also determine from which website your request was sent. We base the integration of the maps on Art. 6 para. 1 lit. f: We have a legitimate interest in providing you with an easy way to find our geographical location, to find retailers who sell our products and, if necessary, to provide directions.
The use of Google Maps and the information obtained via Google Maps is subject to the Google Terms of Use policies.google.com/terms
and the Terms and Conditions for Google Maps www.google.com/intl/de_de/help/terms_maps.html.
In addition, Google offers at adssettings.google.com/authenticated as well as
https://policies.google.com/privacy for further information on your own handling of personal data collected.
Integration of additional third-party services
We have embedded additional content on our website that is loaded from third-party resources. This may include fonts, graphics or videos. When you call up our pages, this content is reloaded from external servers. This means that at least your IP address is transmitted, as the providers cannot send their content to your browser without having this information.
These embeddings make it easier for us to build and present our online presence. Many of these providers make the resources available free of charge. The economic operation of the site that this enables is our legitimate interest under Article 6(1)(f) of the GDPR and forms our legal basis for these embeddings.
Below is a list of these embedded external resources:
Visable
Bedrunka+Hirth uses products and services from Visable GmbH (www.visable.com) to fulfil analysis and marketing purposes. In order to create pseudonymised or anonymised usage profiles, data is collected, processed and stored using counting pixel technology and cookies. Visable uses this data to create usage profiles without identifying visitors personally. No personal data is merged with the user profiles. If IP addresses are identifiable, they are deleted immediately. You can object to this processing at any time with effect for the future: Exclude from tracking (note: link sets a 1st party cookie for an opt-out).
Polyfill
We use the Polyfill service, which accepts requests for a range of browser functions and returns only those functions that the requesting browser requires. With the help of this service, we can support older browsers by replicating missing functions.
Polyfill is provided by Financial Times Ltd, Bracken House, 1 Friday Street, London, EC4M 9BT and is located in the USA. This involves a transfer of personal data to a third country. Our legal basis for using the service is our legitimate interest pursuant to Art. 6 (1) lit. f GDPR to present our website in a form that also supports older browsers.
Further information on Polyfill's privacy policy can be found here: polyfill.io/v3/privacy-policy/.
Data processing in the company
We process personal data on the basis of data protection regulations of the General Data Protection Regulation (GDPR) as well as the Federal Data Protection Act (BDSG) and, if applicable, the data protection laws of the individual federal states. The data of the following groups of persons are processed by the respective responsible persons in the company for the fulfilment of tasks. Detailed information on the processing of personal data of these groups of persons can be obtained by clicking on the respective link at the bottom of this page.
In detail, this means:
- Customer and prospective customer data is processed for the purpose of implementing and servicing the contractual relationship or the pre-contractual relationship as well as contact enquiries and communication on the basis of Art. 6 para. 1 sentence 1 letter b) GDPR and Art. 6 para. 1 sentence 1 letter c) GDPR.
- Personal data of our suppliers and service providers as well as their employees are processed for the initiation and implementation of our contractual relationships on the basis of Art. 6 para. 1 sentence 1 letter b) GDPR and Art. 6 para. 1 sentence 1 letter c) GDPR.
- Employee data is stored for the purpose of establishing, implementing and terminating employment relationships (Art. 88 GDPR, § 26 BDSG).
- Applicant data is stored for the purpose of carrying out the application procedure and deciding on the establishment of an employment relationship (Art. 88 GDPR, § 26 BDSG). Records of unsuccessful applicants are deleted a maximum of six months after the end of the application process.
Online meetings, telephone conferences and online seminars via "Zoom
We would like to inform you below about the processing of personal data in connection with the use of "Zoom".
Purpose of the processing
We use the tool "Zoom" to conduct telephone conferences, online meetings, video conferences and/or online seminars (hereinafter: "online meetings"). "Zoom" is a service provided by Zoom Video Communications, Inc. which is based in the USA.
Data controller
The data controller for data processing directly related to the conduct of "Online Meetings" is Bedrunka+Hirth Gerätebau GmbH | Giessnaustr. 8 | D-78199 Bräunlingen | 0771/9201-70
Hint:
The provider itself is accountable for the processing of data on the "Zoom" website. However, a visit to the site is only necessary to download the software required to use "Zoom". Alternatively, you can use "Zoom" directly via the app by entering the meeting ID and other required access data. If you do not want to or cannot use the app, the basic functions can also be used via a browser version available on the website of "Zoom".
What data is processed?
Different types of data are processed when using "Zoom". The scope of the data depends on the data you provide before or during participation in an online meeting. User details include first name, last name, optional phone number, email address, password (if not using single sign-on), optional profile picture and optional department. Meeting metadata includes the topic, optional description, IP addresses of participants and device/hardware information. If the meeting is recorded (optional), an MP4 file of all video, audio and presentation recordings, an M4A file of all audio recordings and a text file of the online meeting chat are created. When you dial in by telephone, the incoming and outgoing call number, the country name and the start and end time are recorded. Other connection data such as the IP address of the device may also be recorded. Text, audio and video data: During the online meeting you may use the chat, question or survey functions. In this case, the text data you enter is processed in order to display it during the meeting and to log it if necessary. In order to enable audio and video transmissions, data from the microphone and, if applicable, the camera of your terminal device will be processed during the meeting. You can turn off or mute the camera or the microphone itself at any time via the Zoom app. To join an online meeting or to enter the meeting room, you must at least provide information about your name.
Scope of the processing
For our online meetings we use the platform "Zoom". If we want to record a meeting, we will inform you transparently and ask for your consent if necessary. The fact that a meeting is being recorded is also indicated in the "Zoom" app will be displayed. We will only log chat content if it is necessary for the logging the results of a meeting is required, but this will not usually be the case. When we run online seminars, we may also process questions asked by participants for recording and follow-up purposes. If you are registered with Zoom, reports of meetings (meeting metadata, telephone dial-in data, questions and answers in online seminars and surveys) can be stored by Zoom for up to one month. The function for software-based
"Attention monitoring" ("attention tracking") is deactivated with us. We do not use automated decision-making within the meaning of Art. 22 GDPR.
Legal basis of data processing
When processing personal data of employees of Bedrunka+Hirth Gerätebau GmbH, the legal basis is pursuant to Section 26 BDSG. If, in connection with the use of "Zoom", personal data is not required to establish, perform or terminate the employment relationship, but is nevertheless an essential part of the use of "Zoom", the data processing is carried out in accordance with Art. 6 para. 1 lit. f) GDPR. In these cases, our interest is in the effective conduct of online meetings. If the meetings are conducted in the context of contractual relationships, the legal basis is pursuant to Art. 6 (1) (b) GDPR. If there is no contractual relationship, the legal basis is pursuant to Art. 6 para. 1 lit. f) GDPR. Again, our interest is in the effective conduct of online meetings.
Personal data processed in connection with participation in online meetings will in principle not be disclosed to third parties unless it is intended for disclosure. Please note, however, that content from online meetings is often used to communicate information with customers, interested parties or third parties and is therefore intended for disclosure. The provider of "Zoom" necessarily receives knowledge of the aforementioned data insofar as this is provided for under our Data Processing Agreements with "Zoom".
Data processing outside the European Union
The "Zoom" service is provided by a provider from the USA, which means that the processing of personal data also takes place in a third country. We have concluded a Data Processing Agreements with the provider of "Zoom" which complies with the requirements of Article 28 of the General Data Protection Regulation. To ensure an adequate level of data protection, Zoom Video Communications, Inc. relies on the conclusion of the so-called EU standard contractual clauses.
4. Storage period
The personal data stored by us will be deleted in accordance with legal requirements. We delete the data as soon as they are no longer required for the purpose of processing, a given consent is revoked or other permissions cease to apply.
Data that still has to be stored, e.g. for reasons of commercial or tax law, or whose storage is still required for the assertion, exercise or defence of legal claims, will be deleted as soon as this is no longer the case.
5. Data subject rights
When we process personal data about you, you have the following data subject rights:
- a right of access to the data processed and a right to obtain a copy,
- a right of rectification if we process incorrect data about you,
- a right to erasure, unless exceptions apply as to why we are still storing the data, e.g. retention obligations or limitation periods
- a right to restriction of processing,
- a right to withdraw consent to data processing at any time,
- a right to object to processing in the public or legitimate interest,
- a right to data portability,
- a right of appeal to a data protection supervisor authority if you find that we are not processing your data properly. The State Commissioner for Data Protection and Freedom of Information in Baden- Württemberg is responsible for our company. However, if you are in another federal state or not in Germany, you can also contact the data protection authority there.