DATA PROTECTION

Privacy Policy
Thank you for your interest in our company and our website. The protection of your privacy is a matter of significant importance to us. In the following paragraphs we provide you with detailed information on how we manage your data.

I. Data Controller

bmk Baumann GmbH & Co. KG
Klingenhofstraße 57
90411 Nuremberg
Phone +49 (0)911/999 87 67 – 0
Fax + 49(0)911/999 87 67 -77
E-mail: info@bmk Baumann.de

II. General Information

Data security and encryption

We would like to point out that security gaps may occur during data transmission via the Internet (e.g. communication by e-mail). Full protection of data against unauthorised third-party access is not possible.

This website uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content which you send to us (e.g. a contact form). You can recognise an encrypted connection by the fact that the character string ‘http://’ changes to ‘https://’, preceded by the lock icon in your browser’s address line. If this icon is enabled, you can transmit data to us and be sure that this data is protected against third-party access.

Objection to advertising e-mails

We hereby object to the use of contact data published within the scope of the legal notice (imprint) obligation for sending advertising and information materials not expressly requested. The operator of this website expressly reserves the right to take legal action in the event of the unsolicited transmission of advertising material, for example in the form of spam e-mails.

1. Scope of processing of personal data

Website

We only process the personal data of our website users to the extent that this is necessary to make a fully functional website, as well as our contents and services available to them. The processing of personal data takes place routinely and only with our users’ consent. An exception applies in those cases where prior consent cannot be obtained for factual reasons and the processing of the data is otherwise permitted by law. As far as hosting services are concerned, we make use of servers for providing platform services, computing and storage capacity, and security services, as well as of technical maintenance services for the purpose of website operation. Our company, or our hosting provider, processes data on the basis of our legitimate interests in accordance with. Art. 6 Paragraph 1 lit. f GDPR and Art. 28 GDPR (conclusion of a data processing contract).

Customer, supplier, and contract data

We process your personal data in order to execute and manage the existing or future contractual relationship with you. In this context, your personal data is processed for various purposes within the scope of different processing activities. We usually collect data directly from you. If you do not make this data available to us, we cannot comply with our legal obligations and thus cannot enter into a present or future contractual relationship with you. We process data for the following purposes: identification of new customers/suppliers, communication, submitting and requesting quotations, order processing, compliance with our legal obligations, management tasks, as well as operational organisation. We only transmit personal data to third parties to the extent that this is necessary for executing the contract, e.g. to data processors. Your data will not be transferred for any other purposes unless you have given us your prior consent. We refrain from any transfer of your data to third parties without your express consent, for example for advertising purposes.

2. Legal basis for the processing of personal data

Insofar as we obtain the consent of the data subject for the processing of personal data, Art. 6 para. 1 lit. a of the EU General Data Protection Regulation (GDPR) shall serve as the legal basis for the processing of personal data.

If the processing of personal data is required for the performance of a contract to which the data subject is a party, Art. 6 para. 1 lit. b GDPR shall serve as the legal basis. This also applies to processing operations which are necessary to conduct pre-contractual measures.

Insofar as the processing of personal data is required to fulfil a legal obligation to which our company is subject, Art. 6 para. 1 lit. c GDPR shall serve as the legal basis.

If the processing of your data is necessary to protect a legitimate interest of our company or a third party, and provided that the interests, fundamental rights, and fundamental freedoms of the data subject do not take precedence over the aforementioned legitimate interest, Article 6 Paragraph f GDPR shall serve as the legal basis.

3. Data Storage and Retention

The personal data of the data subject will be deleted or blocked as soon as the purpose of storage ceases to apply. Furthermore, data may be stored if this has been provided for by European or national directives, laws, or other regulations to which the data controller is subject. The data will also be blocked or deleted if a storage period prescribed by the aforementioned standards expires, unless there is a need for the storage of the data for the conclusion or fulfilment of a contract.

III. Provision of the website and creation of log files

Every time you visit our website, our system or our hosting provider automatically collects data and information from the computer system of the calling computer. The following data may be collected: information about the browser type and version used; the user’s operating system; the user’s Internet service provider; the user’s IP address; the date and time of access; websites from which the user’s system reaches our website; websites accessed by the user’s system through our website.

The data is also stored in the log files of our system. This does not apply to our users’ IP addresses or other data which enable the assignment of data to an individual user. This data is not stored together with other personal data of the user.
The legal basis for the temporary storage of data is Article 6 Paragraph1 lit. f GDPR.

The temporary storage of the IP address by the system is necessary in order to make the website available on the user’s computer. To do this, the user’s IP address must remain stored for the duration of the session. The website operator has a legitimate interest in the technically error-free representation and fault-free operation of the website; to achieve this, server log files must be recorded.
Your data will be erased as soon as it is no longer required for the original purpose of its processing. Therefore, the data collected for making this website available to you will be erased soon as the corresponding session is over.

Furthermore, the IP addresses used for any attempts at unauthorized access to, or intrusion into this website will be stored. The storage serves to protect the security of the website. This data will be deleted after 14 days. The legal basis for the temporary storage of data is Article 6 Paragraph1 lit. f GDPR.

IV. Cookies

We use so-called cookies in order to enhance the attractiveness of our website and enable the use of certain functions. Cookies are small text files which are stored on your end device. Some of the cookies we use are deleted after the end of your browser session, i.e. when you close your browser (so-called session cookies). Other cookies remain stored on your end device in order to enable us to recognise your browser the next time you visit our website (so-called persistent cookies). We also use cookies on our website which enable an analysis of the user’s surfing behaviour. User data which is collected in this way is rendered pseudonymous by technical means. Therefore, it is no longer possible to assign the data to the visiting user. The data will not be stored together with other personal data of our users.

The legal basis for the processing of personal data using cookies is Article 6 Paragraph1 lit. f GDPR.

The purpose of implementing technically necessary cookies is to make it easier for users to use the websites. Some of the features on our website cannot be offered without the use of cookies, such as the acceptance of language preferences or keeping a record of search terms used. To make this possible, it is essential that your browser is also recognised after changing to another page. Any user data collected by means of technically necessary cookies will not be used for the creation of user profiles. We use analysis cookies in order to improve the quality of our website and its content. These cookies help us to find out how our website is used and how we can continuously optimise our offering. Furthermore, these cookies tell us which pages are visited most often and which of our pages were left after just a short time. These analyses allow us to enhance the user friendliness of our website. These purposes also represent a legitimate interest in the processing of personal data in accordance with Article 6 Paragraph1 lit. f GDPR.

Cookies are stored on the user’s computer and transmitted from this computer to our page. Users therefore also have full control over the use of cookies. You can disable or restrict the transmission of cookies by changing your web browser settings. Cookies which have already been stored can be erased at any time. This can also be performed automatically. However, if you disable cookies, your browser may no longer be able to use all of the interactive functions of our website.

V. Contact Form and E-Mail Contact

A contact form is available on our website which can be used for electronic contact. If a user accepts this possibility, the data entered in the input screen will be transmitted to us and stored. In addition, the user’s IP address, as well as the date and time of registration are recorded at the time of sending.

Your consent is obtained for the processing of the data during the contact form transmission process and reference is made to this Privacy Policy.

Alternatively, you can contact us via the e-mail address provided. In this case, the user’s personal data transmitted by e-mail will be stored. In this context, the data will not be passed on to third parties. The data is used exclusively for processing the conversation.

Provided that you have given your consent, the legal basis for the processing of your data is Article 6 Paragraph1 lit. a GDPR. Article 6 Paragraph1 lit. f GDPR is the legal basis for the processing of personal data transmitted when sending us an e-mail.

If the e-mail contact is intended to lead to the conclusion of a contract, the additional legal basis for the processing is Article 6 Paragraph1 lit. b GDPR.

We only process personal data provided via the input screen for entering into contact with you. E-mail contact also represents the necessary legitimacy in the processing of personal data.

Any other personal data processed during the e-mail transmission process serves to prevent the misuse of the contact form and ensure the security of our IT systems.

The data you provide via the contact form or by e-mail will remain stored on our system until you request us to erase it, withdraw your consent to the storage of your personal data, or the purpose of data storage no longer exists (e.g. after your enquiry has been completely processed). Further applicable legal regulations, and retention periods in particular, remain unaffected.

You are entitled to revoke your consent to the processing of your personal data at any time. If you contact us by e-mail, you can object to the storage of your personal data at any time. In this case, the conversation can no longer be continued. To revoke your consent or object to the storage of your data, just send us an e-mail or postal mail. Consequently, all your personal data stored within the scope of contacting will be erased.

VI. Third-Party Modules and Analytic Tools

For the purpose of website analytics, this website uses Google (Universal) Analytics, a web analytics service provided by Google LLC (www.google.com). Google (Universal) Analytics uses specific methods for analysing how you use our website; these include so-called cookies, i.e. small text files which are stored on your computer. As a rule, the information on how you use our website is transmitted to Google in the United States and stored on one of their serves. Your IP address is truncated by activating the corresponding function for rendering IP addresses on this website anonymous prior to their transmission within the European Union or to other countries which have signed the Agreement on the European Economic Area. Only in exceptional cases is the full IP address sent to a Google server in the USA and truncated. The anonymous IP address transferred by your browser will not be merged with any other data held by Google. Processing the personal data of our users allows us to analyse their surfing behaviour. This data analysis enables us to obtain information about the use of individual components of our website. This helps us to continuously improve our website and the user experience it provides. These purposes also represent a legitimate interest in the processing of personal data in accordance with Article 6 Paragraph 1 lit. f GDPR. By rendering IP addresses anonymous, we exercise due diligence in order to safeguard our users’ interest in the protection their personal data.

You would like to prevent the transfer of your personal data generated by cookies and referring to your use of our website (including your IP address) to Google, as well as the processing of this data by Google? Then just download and install the browser plug-in available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de
Alternatively to the browser plug-in, you can click this link in order to prevent any future collection of your personal data by Google Analytics on this website. To ensure this, an opt-out cookie is stored on your end device. If you delete your cookies, you must click the link again.

VII. Co-operation with Data Processors and Third Parties

Insofar as we disclose data to other persons and companies (so-called order processors or third parties) in the course of our processing, transmit it to them or otherwise grant them access to the data, this shall only be done on the basis of a legal permission (e.g. if transmission of the data to third parties, such as to payment service providers, is necessary for the fulfilment of the contract or pre-contractual measures in accordance with Article 6 Paragraph 1 lit. b GDPR), to which you have consented, a legal obligation provides for this, or on the basis of our legitimate interests (e.g. when using agents, web hosts, consultants, etc.). In all other cases, we do not transmit personal data to third parties.

VIII. Your Rights

1. Access, blocking, erasure, and data portability

You have the right to obtain free-of-charge information about your stored data, its origin and recipient, as well as about the purpose of data processing. In addition, you have a right to rectification, blocking or erasure of this data. Furthermore, you have the right to data portability. If you have any questions about this topic or other questions concerning personal data, please do not hesitate to contact us at the address indicated in the Legal Notice.

2. Withdrawal of consent

Numerous data processing activities are not possible without your express consent. You can revoke your consent at any time without giving reasons. Just send us an informal message by e-mail or postal mail. However, the withdrawal of consent does not affect the lawfulness of processing based on your consent before its withdrawal.

3. Right to lodge a complaint with a supervisory authority

If you think that the processing of your personal data is unlawful, you have the right to lodge a complaint with the supervisory authority in charge of data protection at your place of residence or place of work, or at the place of the presumed infringement.

IX. Legal Reservation

We reserve the right to update this Privacy Policy from time to time in order to improve data protection and/or to adapt this Privacy Policy to modified laws or regulations, and thus keep pace with the continuous development of the Internet. Version: May 2018.