Data Privacy Policy

Data Controller

The Data Controller for these web pages is Brass Regalanlagen GmbH, Im Sichert 14+16, 74613 Öhringen, Germany. You can find more information about our company and the persons authorised to represent it in the Legal Notice.

What data do we process?

Legal basis for data processing

In order to be able to provide you with access to our website and associated services, we process personal data based on the following legal principles:

  • Consent (Art. 6(1) a) GDPR)
  • for the performance of contracts (Art. 6(1) b) GDPR
  • based on legitimate interests (Art. 6(1) f) GDPR)
  • to fulfil a legal obligation (Art. 6(1) c) GDPR)

For each type of processing, we will refer to the corresponding terminology so that you know on what basis we are processing personal data. If personal data is processed based on consent received from you, you have the right to withdraw your consent at any time; this will have future effect. If we process data based on legitimate interests, as the data subject you have the right, under the provisions of Art. 21 GDPR, to object to your personal data being processed.

Access data

When you visit our web pages, personal data are processed so that the website content can be displayed on your device. The IP address of the device you are using must be processed in order to display the pages in your browser. Other information about your device’s browser is added to this.

We are also obliged under data protection law to guarantee the confidentiality and integrity of the personal data processed through our IT systems. For this purpose and as a result of such interests, the following data are logged based on legitimate interests:

  • IP address of the computer accessing the website (for a maximum of 7 days)
  • operating system of the computer accessing the website
  • browser version of the computer accessing the website
  • name of the file accessed
  • date and time of access
  • quantity of data transmitted
  • referring URL

The IP address will be deleted from all systems used in connection with the operation of these web pages after 7 days at the latest. After this, we will no longer be able to establish any personal reference from the remaining data.

The data are further used to detect errors on the web pages and rectify them.

Contact form

We provide a contact form on our website through which you can request information about our products or services or generally get in touch with us. The information we require to answer your query is marked as mandatory fields. Information in the other data fields is optional.

We need this information to process your enquiry, address you correctly and send you a reply. For specific enquiries, data are processed for the performance or initiation of a contract. For general enquiries, data are processed based on legitimate interests.

Enquiries received via the contact form on our website are processed electronically at our company in order to answer your enquiry. In this context, other persons or departments and third parties (where appropriate) may become aware of the contents of the form that you sent.

The data on the form are transmitted through the Internet via encrypted connections.

Shop

Personal data are also processed for the operation of our online shop and when ordering goods and/or services. For shop functions, the processing is essentially for the initiation or performance of contracts for the sale or purchase of our goods and services.

In order to display suitable products on your device, we process the data from your use of the online shop on the basis of legitimate interests.

Cookies

Our web pages use cookies. Cookies are small text files that are stored on your device via your browser. These cookies are necessary to enable certain functions on our web pages. We use session cookies, which are automatically deleted from your browser as soon as your visit to the web pages is finished. However, for the purposes of web analytics, we also use persistent cookies, which are not automatically deleted after your visit to our website.

You can block cookies in your browser settings. We should point out, however, that this may limit the use of our web pages in some cases. The cookies will not install or start any programs or other applications on your computer.

Web analytics

We use the WordPress Slimstat Analytics plug-in. IP addresses are anonymised at the time of collection so it is not possible to draw any conclusions about the user. The anonymised visitor figures are stored solely on our server in Germany. They are only used to evaluate the general behaviour of visitors and for purposes of improving the website, and are automatically deleted after 90 days.

Purposes of processing personal data

We process the aforementioned data for the operation of our website, to meet contractual obligations towards our customers and to protect our legitimate interests. If you make an enquiry without being in an active customer relationship, we process the data for purposes of sales and advertising. You can object to the use of your personal data for advertising purposes at any time.

Optional information

If you voluntarily provide us with data, e.g. in forms, that are not necessary for fulfilling our contractual obligations, we process such data on the legitimate assumption that processing and using the said data is in your interest.

Recipient / transmission of data

The data you provide are not passed onto third parties as a matter of principle. In particular, your data are not passed onto third parties for their advertising purposes.

We do, however, employ service providers for the operation of these web pages and for other products or services provided by us. A service provider may therefore become aware of personal data. We select our service providers carefully – particularly with regard to data protection and data security – and take all the necessary measures under data protection law to ensure that data processing is lawful.

Data processing outside the European Union

Where personal data are processed outside the European Union, this is made clear in the statements above.

Data protection officer

We have appointed a data protection officer. You can contact them as follows:

Brass Regalanlagen GmbH
Datenschutzbeauftragter
Im Sichert 14+16
74613 Öhringen
Email: datenschutz@brass-regalbau.de

Your rights as the data subject

You have the right to information about the personal data concerning you. You can contact us at any time for information. Where a request for information is not made in writing, we may request you to prove that you are the person you say you are.

Furthermore you have a right to rectification, erasure and to restrict the processing of your data, as long as this is permitted by law.

Finally you have a right to object to processing, in accordance with the legal requirements.

Data protection law also provides for the right to data portability.

Erasure of data

We erase personal data as a matter of principle when there is no longer any need to store it. A need may exist in particular if the data are still required to fulfil contractual performances, check and grant warranty and guarantee claims or to be able to defend against them. In the case of legal retention requirements, erasure is only possible after expiry of the relevant retention obligation.

Right to appeal to a regulatory authority

You have the right to appeal to a regulatory authority for data protection about our processing of your personal data. Responsible regulatory authority:

Der Landesbeauftragte für den Datenschutz und die Informationssicherheit [The State Data Protection Officer for Data Protection and Information Security]
Königstrasse 10a, 70173 Stuttgart

Changes to this data protection policy

We will revise this data protection policy if changes are made to this website or in case of other reasons that would render this necessary. You will always find the current version on this website.

Issued: 06/12/2018