The Data Controller for these web pages is Brass Regalanlagen GmbH, Im Sichert 14+16, 74613 Öhringen, Germany. You can find more information about our company and the persons authorised to represent it in the Legal Notice.
What data do we process?
Legal basis for data processing
In order to be able to provide you with access to our website and associated services, we process personal data based on the following legal principles:
- Consent (Art. 6(1) a) GDPR)
- for the performance of contracts (Art. 6(1) b) GDPR
- based on legitimate interests (Art. 6(1) f) GDPR)
- to fulfil a legal obligation (Art. 6(1) c) GDPR)
For each type of processing, we will refer to the corresponding terminology so that you know on what basis we are processing personal data. If personal data is processed based on consent received from you, you have the right to withdraw your consent at any time; this will have future effect. If we process data based on legitimate interests, as the data subject you have the right, under the provisions of Art. 21 GDPR, to object to your personal data being processed.
When you visit our web pages, personal data are processed so that the website content can be displayed on your device. The IP address of the device you are using must be processed in order to display the pages in your browser. Other information about your device’s browser is added to this.
We are also obliged under data protection law to guarantee the confidentiality and integrity of the personal data processed through our IT systems. For this purpose and as a result of such interests, the following data are logged based on legitimate interests:
- IP address of the computer accessing the website (for a maximum of 7 days)
- operating system of the computer accessing the website
- browser version of the computer accessing the website
- name of the file accessed
- date and time of access
- quantity of data transmitted
- referring URL
The IP address will be deleted from all systems used in connection with the operation of these web pages after 7 days at the latest. After this, we will no longer be able to establish any personal reference from the remaining data.
The data are further used to detect errors on the web pages and rectify them.
We provide a contact form on our website through which you can request information about our products or services or generally get in touch with us. The information we require to answer your query is marked as mandatory fields. Information in the other data fields is optional.
We need this information to process your enquiry, address you correctly and send you a reply. For specific enquiries, data are processed for the performance or initiation of a contract. For general enquiries, data are processed based on legitimate interests.
Enquiries received via the contact form on our website are processed electronically at our company in order to answer your enquiry. In this context, other persons or departments and third parties (where appropriate) may become aware of the contents of the form that you sent.
The data on the form are transmitted through the Internet via encrypted connections.
Personal data are also processed for the operation of our online shop and when ordering goods and/or services. For shop functions, the processing is essentially for the initiation or performance of contracts for the sale or purchase of our goods and services.
In order to display suitable products on your device, we process the data from your use of the online shop on the basis of legitimate interests.
You can block cookies in your browser settings. We should point out, however, that this may limit the use of our web pages in some cases. The cookies will not install or start any programs or other applications on your computer.
We use the WordPress Slimstat Analytics plug-in. IP addresses are anonymised at the time of collection so it is not possible to draw any conclusions about the user. The anonymised visitor figures are stored solely on our server in Germany. They are only used to evaluate the general behaviour of visitors and for purposes of improving the website, and are automatically deleted after 90 days.
Purposes of processing personal data
We process the aforementioned data for the operation of our website, to meet contractual obligations towards our customers and to protect our legitimate interests. If you make an enquiry without being in an active customer relationship, we process the data for purposes of sales and advertising. You can object to the use of your personal data for advertising purposes at any time.
If you voluntarily provide us with data, e.g. in forms, that are not necessary for fulfilling our contractual obligations, we process such data on the legitimate assumption that processing and using the said data is in your interest.
Recipient / transmission of data
The data you provide are not passed onto third parties as a matter of principle. In particular, your data are not passed onto third parties for their advertising purposes.
We do, however, employ service providers for the operation of these web pages and for other products or services provided by us. A service provider may therefore become aware of personal data. We select our service providers carefully – particularly with regard to data protection and data security – and take all the necessary measures under data protection law to ensure that data processing is lawful.
Data processing outside the European Union
Where personal data are processed outside the European Union, this is made clear in the statements above.
Data protection officer
We have appointed a data protection officer. You can contact them as follows:
Im Sichert 14+16
Your rights as the data subject
You have the right to information about the personal data concerning you. You can contact us at any time for information. Where a request for information is not made in writing, we may request you to prove that you are the person you say you are.
Furthermore you have a right to rectification, erasure and to restrict the processing of your data, as long as this is permitted by law.
Finally you have a right to object to processing, in accordance with the legal requirements.
Data protection law also provides for the right to data portability.
Erasure of data
We erase personal data as a matter of principle when there is no longer any need to store it. A need may exist in particular if the data are still required to fulfil contractual performances, check and grant warranty and guarantee claims or to be able to defend against them. In the case of legal retention requirements, erasure is only possible after expiry of the relevant retention obligation.
Right to appeal to a regulatory authority
You have the right to appeal to a regulatory authority for data protection about our processing of your personal data. Responsible regulatory authority:
Der Landesbeauftragte für den
Datenschutz und die Informationssicherheit [The State Data Protection Officer
for Data Protection and Information Security]
Königstrasse 10a, 70173 Stuttgart
Changes to this data protection policy
We will revise this data protection policy if changes are made to this website or in case of other reasons that would render this necessary. You will always find the current version on this website.