Data protection information

Data Protection Declaration and Duty to Provide Information pursuant to Art. 13 GDPR

Many thanks for your interest in our online presence. We care about protecting your personal data, therefore we would like to inform you about data protection at Buzil-Werk Wagner GmbH & Co. KG. 

1. Duty to provide information pursuant to GDPR

Information obligation according to Art 13 GDPR

2. Rights of the data subject

Rights of the data subject according to Art. 13 Abs (2) b)
You can exercise your rights at any time using the contact details provided above. If personal data of yours are processed, you are the data subject in terms of the GDPR and you are entitled to the following rights with respect to the controller:

Advice on rights of the data subject
The data subject has the right to demand from the controller confirmation as to whether personal data relating to them are processed; if this is the case, then they have a right to information concerning these personal data and to the information listed in detail in Art. 15 GDPR.

The data subject has the right to demand from the controller the immediate rectification of inaccurate personal data relating to them and if necessary the completion of incomplete personal data (Art. 16 GDPR).

The data subject has the right to demand from the controller the immediate erasure of personal data relating to them, where one of the grounds listed individually in Art. 17 GDPR applies, for example if the data are no longer required for the intended purposes (right to erasure).

The data subject has the right to demand from the controller the restriction of processing if one of the prerequisites listed in Art. 18 GDPR is fulfilled, for example if the data subject has objected to the processing, for the duration of examination by the controller.

The data subject has the right to object at any time to processing of personal data concerning them on grounds relating to their particular situation. In this case, the controller will no longer process the personal data unless they can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or the processing is necessary for the establishment, exercise or defence of legal claims (Art. 21 GDPR).

Rights of the data subject according to Art. 13 (2) c) GDPR
If you have given us your consent to the processing of personal data for particular purposes (for example, processing images of the data subject), the lawfulness of this processing is based on your consent.

Consent which has been given can be withdrawn at any time. This also applies to the withdrawal of declarations of consent made to us before entry into force of the GDPR, i.e. before 25 May 2018.

Please note that such withdrawal of consent is only effective for the future. Processing which took place prior to the withdrawal of consent is not affected.

The right to lodge a complaint with a supervisory authority according to Art. 13 (2) d) GDPR
Without prejudice to any other form of administrative or judicial remedy, every data subject has the right to lodge a complaint with a supervisory authority if the data subject considers that the processing of personal data relating to them violates the GDPR (Art. 77 GDPR). The data subject can exercise this right in the member state of their habitual residence, place of work or place of the alleged infringement.

Bayerisches Landesamt für Datenschutzaufsicht (Bavarian State Office for Data Protection Oversight)

Office address:
Promenade 27 (Schloss)
91522 Ansbach

Postal address:
Postfach 606
91511 Ansbach

Tel.: +49 (0) 981/531300
Fax: +49 (0) 981/53981300
Email: poststelle@lda.bayern.de

 

3. Data protection overview

General information
The following information provides an overview of how your personal data is handled when you visit our website. Personal data means all data with which you can be personally identified. For detailed information on the topic of data protection, please see our Data Protection Declaration presented below this text.

Data collection on our website

Who is responsible for data collection on this website?
Data processing on this website is performed by the website operator. The relevant contact details are set out in the legal notice of this website.

How do we collect your data?
On the one hand, your data is collected when you report this to us. This may constitute, for example, data that you enter in a contact form.

Other data is automatically collected by our IT systems when the website is visited. This primarily concerns technical data (such as Internet browser, operating system or time of the website visit). This data is collected automatically as soon as you enter our website.

Contact form

If you submit inquiries to us via our contact form, the information provided in the contact form as well as any contact information provided therein will be stored by us in order to handle your inquiry and in the event that we have further questions. We will not share this information without your consent.

Hence, the processing of the data entered into the contact form occurs exclusively based on your consent (Art. 6 Sect. 1 lit. a GDPR). You have the right to revoke at any time any consent you have already given us. To do so, all you are required to do is sent us an informal notification via e-mail. This shall be without prejudice to the lawfulness of any data collection that occurred prior to your revocation.

The information you have entered into the contact form shall remain with us until you ask us to eradicate the data, revoke your consent to the archiving of data or if the purpose for which the information is being archived no longer exists (e.g. after we have concluded our response to your inquiry). This shall be without prejudice to any mandatory legal provisions – in particular retention periods.

What do we use your data for?
Part of the data is collected in order to ensure that the website is provided without error. Other data may be used to analyse your user behaviour.

What rights to your data do you have?
Your rights are set out in the aforementioned duty to provide information.

Analysis tools and tools of third-party providers
Your surf behaviour may be evaluated when you visit our website. This is primarily done using cookies and analysis programs. As a rule, your surf behaviour is performed anonymously; the surf behaviour cannot be traced back to you. You can object to this analysis or prevent this by not using specific tools. Detailed information is set out in the following Data Protection Declaration.

You can object to this analysis. This Data Protection Declaration informs you about the options that are available to you to object.

4. General notices and obligatory information

Data protection
The operator of this website takes the protection of your personal data very seriously. We handle your personal data confidentiality and in accordance with the statutory data protection regulations as well as this Data Protection Declaration.

A variety of personal data is collected when you use this website. Personal data means data with which you can be personally identified. The present Data Protection Declaration explains what data we collect and what we use this for. It also explains how and for what purpose this is done.

We draw your attention to the fact that the transfer of data over the Internet (such as when communicating by email) may be subject to security vulnerabilities. The seamless protection of data from third-party access is not possible.

Withdrawal of consent to the processing of your data
Many data processing activities are only permitted with your express consent. You can withdraw consent you have given at any time. To do so, you just need to send us an email in any format. This withdrawal of consent does not affect the legality of any data processing which is carried out up until the withdrawal.

Right to object to the collection of data in specific cases and to direct marketing (Article 21 GDPR)

When data are processed on the basis of Article 6 (1) (e) or (f) GDPR, you have the right to object to the processing of your personal data for reasons relating to your particular situation at any time; the same applies to profiling conducted on the basis of these provisions. You can find the respective legal basis for a processing activity in this data protection policy. If you submit an objection, we will stop processing your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or the processing is necessary for the establishment, exercise or defence of legal claims (objection under Article 21 (1) GDPR).

If your personal data are being processed for the purposes of direct marketing, you have the right to object to the processing of personal data relating to you for this type of advertising at any time; the same applies to profiling when it is connected with this type of direct marketing. If you submit an objection, your personal data will no longer be used for direct marketing (objection under Article 21 (2) GDPR).

SSL and TLS encryption
This website uses SSL or TLS encryption for reasons of security and to prevent the transfer of confidential content, such as orders or enquiries you submit to us as the operators of the website. An encrypted link can be identified by the fact that the browser address line switches from “http://” to “https://” and the padlock symbol appears in your browser address line.

When SSL or TLS encryption is activated, the data you transfer to us cannot be read by third parties.

Information, blocking, erasure
Within the context of the applicable statutory provisions, you have the right at any time to receive information free of charge about your saved personal data, its origin and recipients and the purpose of the data processing, and if necessary the right to correct, block or erase this data. If you have any questions about this, or questions on other personal data aspects, you may contact us at any time using the address provided in the legal notice.

Objection to advertising mails
Use of the contact details published within the context of the obligatory legal notice to send advertising and written information that has not been expressly requested is herewith contradicted. The website operators expressly reserve the right to take legal measures in the event of the unrequested forwarding of advertising information, for example in the form of spam emails.

 

5. Data collection on our website

Cookies
The websites sometimes use cookies. Cookies do not cause any damage to your computer and do not contain any viruses. Cookies serve to make our services more user-friendly, effective and secure. Cookies are small text files that are deposited on your computer and saved by your browser.

Most of the cookies used by us are session cookies. These are automatically deleted at the end of your visit. Other cookies remain saved on your device until you delete them. These cookies enable us to recognise your browser next time you visit.

You can set your browser in order to be notified about the placement of cookies; you can permit the acceptance of cookies only on a case-by-case basis or can generally disable this activity and can also activate the automatic deletion of cookies when the browser closes. If cookies are deactivated, the functions of this website may be restricted.

Cookies that are required to perform electronic communications or to provide certain functions desired by you (such as the shopping basket function) are saved on the basis of Art. 6 (1) f) GDPR. The website operator has a legitimate interest in saving cookies for the technically faultless and optimised provision of their services. Insofar as other cookies (such as cookies to analyse your surf behaviour) are saved, these are detailed separately in this Data Protection Declaration.

Server log files
The website provider automatically collects and saves information in server log files that your browser automatically transfers to us. These include:

  • Browser type and browser version
  •  Operating system utilised
  • Referrer URL
  • Host name of the accessing computer
  • Time of the server enquiry
  • IP address

This data is not merged with other data sources..
The basis for the data processing is Art. 6 (1) f) GDPR, which permits the processing of data to fulfil a contract or precontractual measures.

Contact form
If you use the contact form to submit an enquiry to us, we shall save your details from the enquiry form, including the contact details you have provided therein, for the purpose of processing the enquiry and in the event of follow-up enquiries. We do not forward this data without your consent.

This consequently means that the data in the contact form is processed exclusively on the basis of your consent (Art. 6 (1) a) GDPR). You may revoke this consent at any time. An informal email sent to us will suffice. The lawfulness of the data processing procedures performed before consent is revoked will not be affected by the revocation.

The data entered by you in the contact form shall be retained by us until they are deleted, your consent for saving is withdrawn or the purpose of the data storage has lapsed (for example, once the processing of your enquiry has been completed). Mandatory statutory provisions – in particular retention periods – remain unaffected.

Registration on this website
You may register on our website in order to use additional website functions. We use the data you enter in this conjunction only for the purpose of using the respective offerings or service for which you have registered. The obligatory details requested at the time of registration must be provided comprehensively. In other respects we shall reject the registration.

In the event of important changes to the scope of the services or in the event of technically necessary changes, we use the email address provided at the time of registration to inform you accordingly.

This means that the data in the contact form is processed on the basis of your consent (Art. 6 (1) a) GDPR). You may revoke consent that has previously been given at any time. An informal email sent to us will suffice. The lawfulness of the previous data processing will not be affected by the revocation.

The data collected by us at the time of registration will be saved by us for as long as you are registered on our website, and will thereafter be erased. Statutory retention periods remain reserved.

Data processing (customer and contractual data)

We collect, process and use personal data only to the extent that this is necessary to establish, to configure the content or to amend the legal relationship (inventory data). This is performed on the basis of Art. 6 (1) b) GDPR, which permits the processing of data to fulfil a contract or precontractual measures. We collect, process and use personal data about the use of our websites (user data) only insofar as this is necessary in order to enable the user to use the service or for settlement purposes.

The collected customer data is erased after the order has been completed or the business relationship has ended. Statutory retention periods remain reserved

Data transmission in the case of contracts concluded for online shops, traders and goods consignment
We transmit personal data to third parties only if this is necessary within the context of contract settlement, such as to the enterprises to which the delivery of the goods has been entrusted or to the financial institution commissioned to settle the payment. The data is not otherwise transmitted, unless you have expressly consented to this. Your data is not transmitted to any third party, for example for advertising purposes, without your express consent.

The basis for the data processing is Art. 6 (1) b) GDPR, which permits the processing of data to fulfil a contract or precontractual measures.

Request by email, telephone or fax
If you contact us by email, telephone or fax, we will store and process your request and all associated personal data (name, query) in order to deal with your query. We do not pass these data to third parties without your consent.

These data are processed on the basis of Article 6 (1) (b) GDPR if your request is connected to the fulfilment of a contract or is necessary to enable the execution of pre-contractual measures. In all other cases, processing is based on your consent (Article 6 (1) (a) GDPR) and/or on our legitimate interests (Article 6 (1) (f) GDPR) as we have a legitimate interest in the effective processing of requests that we receive.

Data that you send us in correspondence remain with us until you request their deletion, revoke your consent to their being retained or the purpose for which the data were stored ceases to apply (e.g. once we have finished processing your request). This shall not affect compelling legal provisions, particularly statutory retention periods.

6. Social media

Sharing content via plug-ins (Facebook, Google+, Twitter, etc.)

The content on our pages can be shared on social networks such as Facebook, Twitter or Google+ in compliance with data protection legislation. We do not use website plug-ins for this purpose.

 

7. Analysis tools and advertising

Google Analytics
This website uses functions of the web analysis service Google Analytics. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Irland.

Google Analytics uses “cookies”. These are text files that are saved on your computer and facilitate analyses of your use of the website. As a rule, information about your use of this website generated by the cookie will be forwarded to a Google server in the USA, where it will be saved.

Google Analytics cookies are saved on the basis of Art. 6 (1) f) GDPR. The website operator has a legitimate interest in analysing user behaviour, in order to optimise both their web services as well as advertising.

IP anonymisation
We have activated the IP anonymisation function on this website. This means your IP address will be abbreviated by Google within the member states of the European Union or in other European Economic Area treaty states before being transmitted to the USA. The full IP address will be forwarded to a Google server in the USA only in exceptional cases, where it will be abbreviated. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide other services related to website usage and internet usage. The IP address forwarded by your browser within the context of Google Analytics will not be merged by Google with other.

Browser Plugin
You can prevent the saving of cookies by setting your browser software accordingly; however, we point out that in this event you may not be able to fully utilise all the functions of this website. You may furthermore prevent the recording of the data generated by the cookie that relates to your use of the website (including your IP address) by Google as well as the processing of this data by Google by downloading and installing the browser add-on from the following link: (https://tools.google.com/dlpage/gaoptout?hl=de).

Objection to data recording
You can stop Google Analytics collecting your data by clicking on the following link. An opt-out cookie will be installed that prevents your data from being collected during future visits to this website:

Further information about the handling of user data by Google Analytics is available in the Google data protection declaration: support.google.com/analytics/answer/6004245.

Contract data processing
We have concluded a contract data processing agreement with Google and comprehensively apply the strict conditions of the German data protection authorities to the use of Google Analytics.

Demographic parameters provided by Google Analytics
This website uses the function “demographic parameters” provided by Google Analytics. It makes it possible to generate reports providing information on the age, gender and interests of website visitors. The sources of this information are interest-related advertising by Google as well as visitor data obtained from third party providers. This data cannot be allocated to a specific individual. You have the option to deactivate this function at any time by making pertinent settings changes for advertising in your Google account or you can generally prohibit the recording of your data by Google Analytics as explained in section “Objection to the recording of data.”

Archiving period
Data on the user or incident level stored by Google linked to cookies, user IDs or advertising IDs (e.g. DoubleClick cookies, Android advertising ID) will be anonymized or deleted after 14 month. For details please click the following link: https://support.google.com/analytics/answer/7667196?hl=en

Google AdWords and Google Conversion Tracking
This website uses Google AdWords. AdWords is an online advertising program of Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States (“Google”).

We use conversion tracking within the context of Google AdWords. If you click on an ad placed by Google, a conversion tracking cookie will be installed. Cookies are small text files that the Internet browser deposits on the computer of the user. These cookies lapse after 30 days and are not used to identify the person of the user. If the user visits specific sections of this website before the cookie lapses, Google and we will be able to identify that the user has clicked on the ad and was redirected to this website.

Each Google AdWords customer receives a different cookie. The cookies cannot be traced via the websites from AdWords customers. The information collected with the help of conversion cookies serves to draw up conversion statistics for AdWords customers who deploy conversion tracking. Customers learn the total number of users who have clicked on their ads and were redirected to a website with a conversion tracking tag. They do not, however, receive any information that enables users to be personally identified. If you do not wish to take part in the tracking, you may object to this use with ease by deactivating the cookie of the Google conversion tracking in the user settings of your Internet browser. You will then no longer be included in the conversion tracking statistics.

Conversion cookies are saved on the basis of Art. 6 (1) f) GDPR. The website operator has a legitimate interest in analysing user behaviour, in order to optimise both their web services as well as advertising.

Further information about Google AdWords and Google conversion tracking is available in the Google data protection provisions: www.google.de/policies/privacy/.

You can set your browser in order to be notified about the placement of cookies; you can permit the acceptance of cookies only on a case-by-case basis or can generally disable this activity and can also activate the automatic deletion of cookies when the browser closes. If cookies are deactivated, the functions of this website may be restricted.

8. Newsletter

Newsletter data
If you wish to subscribe to the newsletter offered on the website, we require an email address from you as well as information that enables us to verify that you are the owner of the specified email address and agree to receive the newsletter. Further data will not be collected, or will be collected only on a voluntary basis. We use this data exclusively to dispatch the requested information, and do not pass this on to any third party.

This means the data in the newsletter registration form is processed on the basis of your consent (Art. 6 (1) a) GDPR). You may at any time revoke the consent issued to save the data, the email address as well as the use thereof to send the newsletter, for example by clicking on the “Unsubscribe” link in the newsletter. The lawfulness of the previous data processing will not be affected by the revocation.

The data deposited by you for the purpose of subscribing to the newsletter will be retained by us until you unsubscribe from the newsletter, and will be erased after you have cancelled the newsletter. Data that is saved by us for other purposes (such as email addresses for the membership field) remain unaffected by this.

9. Plugins und Tools

Google Web Fonts
This website uses so-called Web Fonts provided by Google to ensure the uniform use of fonts on this site. These Google fonts are locally installed so that a connection to Google’s servers will not be established in conjunction with this application.

10. Own services

Job applications
We offer you the opportunity to submit applications to us (e.g. by email or post). Here you can find out about the scope, purpose and uses of the personal data collected from you during the application process. We make sure that your data are collected, processed and used in accordance with the currently applicable data protection legislation and all other legal provisions and that your data are treated as strictly confidential.

Scope and purpose of data collection
If you send us an application, we process the associated personal data (e.g. contact details and communication, application documents, notes from job interviews, etc.) to the extent required to enable a decision about whether to make you an offer of employment. The legal basis for this is Section 26 of the new German Federal Data Protection Act (BDSG-neu) under German law (initiation of employment), Article 6 (1) (b) GDPR (general commencement of a contract) and – if you have given consent – Article 6 (1) (a) GDPR. Consent to this can be withdrawn at any time. Your personal data will only be passed to people within our company who are involved in processing your application.

If your application is successful, the data you have provided are stored in our data processing systems as per Section 26 of the new German Federal Data Protection Act and Article 6 (1) (b) GDPR for the purpose of managing the employment relationship.

Retention period for the data
If we do not make you an offer of employment, you reject an offer of employment, you withdraw your application, you withdraw your consent to your data being processed or you ask us to delete the data, the data that you have provided to us including any remaining hard copy documents related to your application will be stored and retained (retention period) for a maximum of 6 months after the application process has concluded in order to make it possible to review aspects of the application process in case of any disagreements (Article 6 (1) (f) GDPR).

¬¬YOU CAN OBJECT TO THIS STORAGE IF YOU HAVE A LEGITIMATE INTEREST WHICH OVERRIDES OUR INTERESTS.

Once the retention period has elapsed, the data will be deleted if there is no statutory requirement to retain them and no other legal basis for their continued storage. If it is clear that there will be a need to retain your data after the retention period has elapsed (e.g. due to a potential or pending legal dispute), the data will only be deleted when they are no longer relevant. This shall not affect other statutory retention periods.

11. Contact

Controller of data processing according to Art. 13 (1) a)

BUZIL-WERK Wagner GmbH & Co. KG
Fraunhoferstr. 17
D-87700 Memmingen
Telefon: +49 (0) 8331 / 930-6
Telefax: +49 (0) 8331 / 930-880

Managing Directors: Isabell Janoth
 

Contact details of the data protection officer according to Art. 13 (1) b) GDPR

Helbig Datenschutz GmbH
Michaela Helbig
Bergstraße 11
91207 Lauf an der Pegnitz
+49 9123 70275-10
michaela.helbig@helbig-datenschutz.de
 

Source: E-Recht 24