Datenschutz

We are pleased to welcome you to our Web pages. You can find information below about how your data are handled under Article 13 of the data protection regulations (GDPR).


Person responsible

The person holding the job shown in the Legal Notice is responsible for the data acquisition and processing referred to below.


Data security

We have taken technical and organizational steps to protect your data as fully as possible from unauthorized access. We currently implement an encryption method on our pages. In the future your data will be transmitted from your computer to our server and back on the Internet via TLS encryption. You can see this from the fact that in the status bar of your browser, the padlock icon is closed and the address line starts with http://https://.


Data transmission to third parties

Within the framework of job processing under Article 28 of the data protection regulations, we transmit your data to service providers who help us to manage our Web pages (e.g. e-connect) and execute the corresponding processes. Our service providers are under our strict instructions and they are bound by contract accordingly. Moreover, we have signed contracts with Google Inc., Microsoft, Dropbox and Mailchimp, covering job processing under Article 28 of the data protection regulations. Under the contracts, all the information provided can only be used for carefully defined specific purposes.


Data transmission to other countries

In some cases, we transmit personal data to another country outside the EU. Here, we always take care to ensure an appropriate level of data protection:

In the case of Google Analytics (USA) and Microsoft (USA), an appropriate level of data protection is ensured via their corresponding participation in the Privacy Shield Convention (Article 45, Section 1 of the data protection regulations).


Cookies

We use cookies on our Web pages. Cookies are small text files that are stored on your terminal and can be read. A distinction can be made between session cookies, which are deleted when you close your browser, and permanent cookies, which are stored after the individual sessions have been closed. Cookies can contain data that enable recognition of the terminal used. In some cases, however, cookies only contain information for specific settings that does not constitute personal data.

We use [session cookies and permanent cookies] on our Web pages. Their processing is carried out in compliance with Article 6, Section 1, Paragraph f of the data protection regulations and with a view to optimizing or enabling user guidance and adapting the presentation of our Web site.

You can set your browser so that it informs you about placing of cookies. This makes use of cookies transparent for you. Moreover, you can delete cookies at any time via the corresponding browser setting and block placing of new cookies. We would like to point out that in that case, our Web pages may not be displayed optimally, and certain technical functions may no longer be available.

 


Google Analytics

To ensure appropriate design of our Website, we create pseudonymous user profiles with the help of Google Analytics. Google Analytics uses cookies that are stored on your terminal and can be read by us. This enables us to recognise repeat visitors and count them as such. The data processing is carried out in compliance with Article 6, Section 1, Paragraph f of the data protection regulations or § 15 Section 3 of the German Telemedia Law, and with a view to finding out how often our Web pages are called up by various users.

The information generated by the cookie concerning your use of this Web site is usually transmitted to a Google server in the USA and stored there. As we have activated IP anonymization on this Web site, your IP address is truncated beforehand by Google within the Member States of the European Union. Only in exceptional cases is the full IP address transmitted to a Google server in the USA (an appropriate level of data protection is provided under Article 45, Section 1 of the data protection regulations, via Google’s participation in the Privacy Shield) and truncated there. Furthermore, we have signed a contract with Google Inc. (USA) covering job processing under Article 28 of the data protection regulations. Under the contract, Google uses all such information solely for carefully defined specific purposes, in order to assess use of our Web site for us and compile reports on Web site activities.

You can inhibit processing at any time. To do so, please use one of the following possibilities:

  • You can inhibit storage of cookies by selecting a corresponding setting in your browser software; however, we would like to point out to you that in that case, you may not be able to use all the functions provided by this Web site in full.
  • Moreover, you can inhibit acquisition by Google of the data generated by the cookie and concerning your use of the Web site (including your IP address), together with processing of that data by Google, by downloading and installing the browser plug-in available via the following link: (Google Tools).

Remarketing

In our Web pages, we can insert keywords that are linked to statements about the contents of the Web site, such as products on offer. Google receives the keywords, which do not contain any personal data or sensitive information. If you visit a page that features specific keywords linked to products, Google stores the information and allocates it to your pseudonymous recognition features. The link enables Google to determine whether our advertisements are displayed to you, and if so, which ones.


Cross Device Marketing

Google can link pseudonymous features, e.g. those of your terminals such as tablets, smartphones and mailboxes, with one another technically (Cross Device Marketing). This presupposes that you have come to an understanding with Google in the past concerning such data processing. This enables Google to execute targeted advertising campaigns via various terminals.

Your data are transmitted to Google and stored in the USA. An appropriate level of data protection is provided under Article 45, Section 1 of the data protection regulations, via Google’s participation in the Privacy Shield. Moreover, we have signed a contract with Google Inc. (USA) covering job processing under Article 28 of the data protection regulations. Under the contract, Google uses all such information solely for carefully defined specific purposes, in order to assess use of our Web site for us and compile reports on Web site activities.


Objection rights

You can object to Retargeting at any time under Article 21 of the data protection regulations. To do so, please contact marketing@bk-factory.eu


Your user rights

The data protection regulations entitle you, as a Web site user, to specific rights regarding processing of your personal data:

  1. Access rights (Article 15 of the data protection regulations):

You are entitled to demand confirmation as to whether your personal data are processed; if that is the case, you are entitled to access such personal data and the information listed in detail in Article 15 of the data protection regulations.

  • Correction and deletion rights (Articles 16 and 17 of the data protection regulations):

You are entitled to demand immediate correction of any inaccurate personal data concerning you, and where applicable, completion of any incomplete personal data. Moreover, you are also entitled to demand immediate deletion of personal data concerning you, to the extent that one of the grounds set out in detail in Article 17 of the data protection regulations is applicable, e.g. if the data are no longer necessary for the purposes sought.

  • Right to restrict processing (Article 18 of the data protection regulations):

You are entitled to demand restriction of processing if one of the prerequisites set out in Article 18 of the data protection regulations is met, e.g. if you have objected to such processing for the duration of any such verification.

  • Right to data transferability (Article 20 of the data protection regulations):

In certain cases that are set out in detail in Article 20 of the data protection regulations, you are entitled to obtain personal data concerning you in a structured, common, machine-readable format, or require forwarding of such data to a third party.

  • Right to object (Article 21 of the data protection regulations):

If data are collected under Article 6, Section 1, Paragraph f (data processing to safeguard justified interests), you are entitled, on grounds stemming from your specific situation, to object at any time to such processing. We then stop processing the personal data, unless there are demonstrable overriding legitimate grounds for such processing, which outweigh the interests, rights and liberties of the person concerned, or if processing serves the establishment, exercise or defence of legal claims.

  • Right of appeal to a supervisory authority

Under Article 77 of the data protection regulations, you are entitled to appeal to a supervisory authority if you consider that processing of data concerning you infringes on provisions covering data protection rights. In particular, such right of appeal can be exercised before a supervisory authority in the Member State in which you reside or work, or in that of the location of the supposed infringement.

If you have any questions regarding your rights, please contact us via dsgvo@bk-factory.eu.