Data Protection Regulation
We manage our websites according to the principles regulated below:
We undertake to comply with the legal provisions on data protection and strive to always observe the principles of data avoidance and data minimization.
Name and address of the person responsible and Data Protection Representative
The person responsible within the meaning of the General Data Protection Regulation and other national data protection laws of the member states of the European Union as well as other data protection regulations is:
BRUXSAFOL Folien GmbH
Tel: +49 9732/7873-0
Fax: +49 9732/7873-78
b. The Data Protection Representative
You can reach the data protection representative of the data controller as follows:
Tel: 0931 780877-0
We have designed our data protection declaration according to the principles of clarity and transparency. Should there still be any ambiguities regarding the use of different terms, the corresponding definitions can be found here.
Legal basis for processing data
a. Processing of personal data according to the GDPR
We only process your personal data such as your surname and first name, your e-mail address and IP address, etc. if there is a legal basis for this. According to the General Data Protection Regulation, the following regulations in particular come into consideration:
- Art. 6 para. 1 p. 1 lit. a DSGVO: The data subject has given his/her consent to the processing of personal data relating to him/her for one or more specific purposes.
- Art. 6 para. 1 p. 1 lit. b DSGVO: Processing is necessary for the performance of a contract to which the data subject is party or for the performance of pre-contractual measures taken at the request of the data subject..
- Art. 6 para. 1 p. 1 lit. c DSGVO: Processing is necessary for compliance with a legal obligation to which the controller is subject.
- Art. 6 para. 1 p. 1 lit. d DSGVO: Processing is necessary to protect the vital interests of the data subject or another natural person.
- Art. 6 (1) p. 1 lit. e DSGVO: processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.
- Art. 6 para. 1 p. 1 lit. f DSGVO: the processing is necessary to safeguard the legitimate interests of the controller or a third party necessary, unless the interests or fundamental rights and fundamental freedoms of the data subject, which require the protection of personal data are overriding, in particular where the data subject is a child.
However, at the respective points in this data protection declaration, we will always point out once again the legal basis on which your personal data is processed.
b. Processing of information according to § 25 para.1 TTDSG
We also process information according to Section 25 (1) TTDSG by storing information on your terminal equipment or accessing information that is already stored on your terminal equipment. This can be both personal information and non-personal data, e.g. cookies, browser fingerprints, advertising IDs, MAC addresses and IMEI numbers. Terminal equipment is any device connected directly or indirectly to the interface of a public telecommunications network for sending, processing or receiving messages, Section 2 (2) No. 6 TTDSG.
As a rule, we process this information on the basis of your consent, § 25Abs.1 TTDSG.
As far as an exception according to § 25 Abs.2 Nr. 1 und Nr.2 TTDSG is given, we do not need consent. Such an exception is given if we only access or store the information in order to transmit a message via a public telecommunications network or if this is absolutely necessary so that we can provide a telemedia service expressly requested by you. You may revoke your consent at any time.
We inform you that the withdrawal of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the withdrawal
4. Disclosure of the personal data
The transfer of personal data is also a processing in the sense of the previous number 3. However, we would like to inform you here again separately about the topic of the transfer to third parties. The protection of your personal data is very important to us. For this reason, we are particularly careful when it comes to passing on your data to third parties.
A transfer to third parties therefore only takes place if there is a legal basis for the processing. For example, we disclose personal data to persons or companies that act for us as processors according to Art. 28 DSGVO. A processor is anyone who processes personal data on our behalf - i.e. in particular in an instruction and control relationship with us.
In accordance with the requirements of the GDPR, we conclude a contract with each of our processors in order to oblige them to comply with data protection regulations and thus to provide your data with comprehensive protection.
5. Storage period and deletion
Your personal data will be deleted by us if it is no longer necessary for the purposes for which it was collected or otherwise processed, if processing is not necessary for the exercise of the right to freedom of expression and information, for the fulfilment of a legal obligation, for reasons of public interest, or for the assertion of legal claims. obligation, for reasons of public interest or for the assertion, exercise or defense of legal claims are necessary.
6. SSL or TLS encryption
This website uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as requests that you send to us as the website operator. You can recognize an encrypted connection by the fact that the address line of the browser changes from ‚http://‘ to ‚https://‘ and by the lock symbol in your browser bar.
If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.
When using cookies, a distinction is made between technically necessary cookies and „other“ cookies. Technically necessary cookies are given when they are absolutely necessary to provide an information society service that you have expressly requested.
a. Technically necessary cookies
In order to make the use of our offer more pleasant for you, we use technically necessary cookies. (e.g. language and font selection, shopping cart, etc.), consent cookies, cookies to ensure server stability and security or similar. The legal basis for the cookies arises from Art. 6 para. 1 p. 1 lit. f) DSGVO, our legitimate interest in the error-free operation of the website and the interest in making our services available to you in an optimized manner.
b. More cookies
Other cookies include cookies for statistical, analysis, marketing and retargeting purposes.
We use these cookies for you based on your consent according to Art. 6 para. 1 p. 1 lit. a) DSGVO.
We inform you that the withdrawal of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the withdrawal.
Change cookie settings
8. Cookie banner
To obtain consent for the cookies we use, we use the cookie banner of the service provider Borlabs GmbH, Rübenkamp 32, 22305 Hamburg, Germany. This itself sets a so-called consent cookie to query and process the respective consent status. This consent cookie is technically necessary and is therefore used based on our legitimate interest accordingto Art. 6 para.1 p.1 lit. f DSGVO, § 25 para.1 TTDSG.
Collection and storage of personal data as well as their type and purpose of use
Our website is hosted by IONOS SE, Elgendorfer Str. 57, 56410 Montabaur. For this reason, all personal data collected on our website is stored on the servers of our hoster, unless an external service of a third party is integrated. This may be the IP address, your e-mail address, communication data or similar. You can find out what specific personal data is involved in the individual functions and services explained by us below. If we use an external service of a third party, this will be made clear in the description of the respective service or tool.
The hoster processes your data only on our instructions and to the extent necessary to fulfill the services on the website. A processing of the data by the hoster for its own purposes does not take place.
b. When visiting the website
When calling up our website, information is automatically sent to the server of our website by the browser used on your end device. This information is temporarily stored in a so-called log file. The following information is collected without your intervention and stored until automated deletion:.
- IP address of the requesting computer
- Date and time of access
- Name and URL of retrieved file
- Website accessed from (referrer URL)
- The browser used and, if applicable, the operating system of your computer and the name of your access provider
The aforementioned data will be processed by us for the following purposes:
- Ensuring a smooth connection establishment of the website
- Ensuring comfortable use of our website
- Evaluation of system security and stability
- Error Analysis
Data that allow a conclusion to your person, such as the IP address, will be deleted after 7 days at the latest. If we store the data beyond this period, this data is pseudonymized, so that an assignment to you is no longer possible.
The legal basis for data processing is Art. 6 para. 1 p. 1 lit. f DSGVO. Our legitimate interest follows from the purposes for data collection listed above. In no case do we use the collected data for the purpose of drawing conclusions about your person.
Content of the newsletter and registration data
The sending of our newsletter as well as the implementation of statistical surveys and analyses as well as logging of the registration process only takes place if you order it from us and have given your corresponding consent in accordance with Art. 6 para. 1 p. 1 lit. a DSGVO, § 25 para.1 TTDSG.
The contents of the newsletter are specifically described when registering for the newsletter. For the registration of the newsletter, it is sufficient to provide your e-mail address. If you provide further voluntary information, such as your name and / or gender, these will be used exclusively for the personalization of the newsletter addressed to you.
Double-Opt-In and logging
For security reasons, we use the so-called double-opt-in procedure to register for our newsletter, so that no one can register with other people‘s email addresses. Therefore, after you have registered for our newsletter, you will first receive an e-mail asking you to confirm your registration. Only after the confirmation, the registrations is valid.
Furthermore, your registration for the newsletter is logged. The logging includes the storage of the registration and confirmation time, your specified data and your IP address. If you make changes to your data, these changes are also logged.
If you no longer wish to receive our newsletter, you can revoke your consent at any time for the future. To do this, you can click on the unsubscribe link at the end of each newsletter or send us an email to the following email address: firstname.lastname@example.org
The withdrawal of consent shall not affect the lawfulness of the processing carried out on the basis of the consent until the withdrawal.
Use of CleverReach
We use the email tool CleverReach (CleverReach GmbH & Co. KG, Mühlenstr. 43,26180 Rastede, Germany) for sending our newsletter..
For this purpose, the data you provide will be passed on to CleverReach and processed by them. Via this tool we have the possibility to evaluate how the newsletters are opened and used.
We have concluded an order processing contract with CleverReach. CleverReach does not obtain the right to share your data.
d. Contact form / e-mail contact
We provide you with forms on our website so that you can contact us at any time. In order to use the contact form, it is necessary to provide a name for a personal salutation and a valid e-mail address so that we know who sent the request and can also process it.
If you send us inquiries via the contact form, your details from the inquiry form, including the contact details you provided there and your IP address, will be processed in accordance with Art. 6 Para. 1 S. 1 lit . b and f GDPR to carry out pre-contractual measures that are carried out at your request or to exercise our legitimate interest, namely to carry out our business activities.
Sometimes further data is collected in our contact forms. We collect this for the purpose of processing your request on a voluntary basis in accordance with Article 6 (1) sentence 1 lit. a GDPR. You can revoke the corresponding consent in whole or in part at any time for the future.
The withdrawal of the consent does not affect the legality of the processing carried out on the basis of the consent up to the point of withdrawal.
You are welcome to send us an e-mail instead using the e-mail address given on our website. In this case, we store and process your e-mail address and the information you provide in the e-mail in accordance with Art. 6 Para. 1 S. 1 lit. b and f GDPR to process your message.
The inquiries and the associated data will be deleted no later than 3 months after receipt, provided they are not required for a further contractual relationship.
Types of contact forms on our website:
New customer form, complaint form, form for training registration, form for registration for events, assembly request form, transport damage form
We use a chat from Tidio on our website. This is a live chat software from Tidio LLC, 160 Spear Street, #1000, San Francisco, CA 94105 U.S.A.
With the live chat, the following data will be collected and processed from you.
- Chat history
- Specified Name
- IP address
- Country of origin
- Visited Pages
- Duration of visiting the pages
- More personal information, depending on the information provided (e.g. e-mail address, telephone number)
The chat is used for real-time communication.
The processing takes place on the basis of Art. 6 Para.1 lit. f GDPR in accordance with our legitimate interest in direct and customer-friendly communication.
More information about Tidio can be found here: https://www.tidio.com/privacy-policy/
With Tidio, we agreed on the standard contract provisio as definied by the European Union on 07/04/2021
If you have any questions, you can also contact Tidio directly: email@example.com
10. Analysis and tracking tools
We use the analysis and tracking tools listed below on our website. These serve to ensure the continuous optimization of our website and to design it in line with requirements.
We use these tools on the basis of your consent in accordance with Article 6 Paragraph 1 Clause 1 Letter a GDPR. You can withdraw your consent at any time by changing the cookie settings. Processing until withdrawal remains lawful.
The respective data processing purposes and data categories can be found in the corresponding tools. We would like to point out that we have no influence on whether and to what extent the service providers carry out further data processing.
a. Google Analytics
We use Google Analytics on our website, a web analysis service provided by Google (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, hereinafter „Google“).
- Name and version of the browser used
- Your computer‘s operating system
- Website from which access is made (referrer URL)
- IP address of the requesting computer
- Time of server request
are usually transferred to a Google server in the USA and stored there.
Your IP address is automatically anonymized by Google before being recorded across EU domains and servers. Your IP address is therefore not logged or stored.
Google will use this information on our behalf to evaluate your use of our website, to compile reports on website activity and to provide us with other services related to website activity and internet usage. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.
We have entered into an order processing contract and standard contractual clauses with Google.
Please click here for an overview of data protection at Google. [https://support.google.com/analytics/answer/6004245]
b. Google Remarketing
We use the Google Analytics remarketing function to target advertising campaigns - including Google AdWords campaigns - to visitors to our website.
When you visit our website, relevant advertisements are presented to you when you visit other websites in the Google Display Network.
The Double Click cookie enables Google to show us and other third parties targeted advertising that corresponds to the interests determined on the basis of your previous visits to our website and/or other websites. This advertising may be displayed on Google and/or other operators of the Google advertising network websites. We also use the Google Analytics advertising features to analyze the effectiveness of our own advertising campaigns.
If you have agreed in your Google account that your web and app browsing history is linked to your Google account by Google and that information from your Google account is used to personalize ads , Google uses data from you together with Google Analytics data to create audience lists for cross-device remarketing. To do this, Google Analytics first collects Google-authenticated IDs for you as a user on our website, which are linked to your Google account. Google Analytics then temporarily associates these IDs with Google Analytics data to optimize our audiences.
Please click here for an overview of data protection at Google. [https://support.google.com/analytics/answer/6004245]
c. Google Photos
We have integrated „Google Photos“ on our website. Google Photos is a service provided by Google.
The integration of Google Photos takes place through a server call, usually a Google server in the USA. As a result, your IP address is transmitted to and stored by Google.
The use of Google Photos is based on your consent in accordance with Article 6 Paragraph 1 Clause 1 Letter a GDPR. You can revoke your consent at any time.
d. Google Tag Manager
We use the Google Tag Manager from Google (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). The Google Tag Manager is a Administration and management tool in which other tracking and/or statistics Tools can be managed and played out centrally.
When you visit our website and give your consent in accordance with Article 6 Paragraph 1 S.1 lit can also be transferred to the USA. However, the Google Tag Manager does not create a user profile or analyzes itself.
We embed videos from YouTube, which is operated by Google (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) into our website within the framework of iFrame. As part of the embedding of the videos, we have activated YouTube‘s extended data protection mode.
If you play a YouTube video during your visit, a connection to the YouTube servers will be established and the YouTube server will be informed which of our pages you have visited. This allows YouTube to associate your surfing behavior directly with your personal profile. You can prevent this by logging out of your member account before visiting our website. In addition, YouTube sets various cookies when starting the service in order, according to its own statements, to improve the services it offers and to prevent misuse.
You can find further information on the handling of user data and the cookies set in YouTube‘s data protection declaration at: https://www.google.de/intl/de/policies/privacy
The legal basis results from the one you have given Consent in accordance with Art. 6 Para. 1 S. 1 lit. a GDPR. You can revoke your consent at any time by change the cookie setting on our website.
12. Rights of the data subject
You have the following rights:
According to Art. 15 GDPR, you have the right to request information about your personal data processed by us. This right to information includes information about
- the processing purposes
- the categories of personal data
- the recipients or categories of recipients to whom your data is shared have been or will be disclosed
- the planned storage period or at least the criteria for determining the Storage duration
- The existence of a right to correction, deletion, restriction of Processing or objection
- The existence of a right of appeal to a supervisory authority
- the origin of your personal data, if not collected from us
- The existence of automated decision-making including Profiling and, if necessary, meaningful information about their details
According to Art. 16 GDPR, you have the right to immediate correction of incorrect or incomplete personal data stored by us.
According to Art. 17 DSGVO, you have the right to request the immediate deletion of your personal data from us, provided that further processing is not necessary for one of the following reasons:
- the personal data are relevant for the purposes for which they were collected or processed, still necessary
- to exercise the right to freedom of expression and information
- to fulfill a legal obligation that requires processing under European Union or Member State law to which the controller is subject, or to perform a task of public interest or in the exercise of official authority takes place, which has been transferred to the person responsible
- for reasons of public interest in the field of public health in accordance with Art. 9 Para. 2 lit. h and i and Art. 9 Paragraph 3 GDPR
- For archiving purposes in the public interest, scientific or historical research purposes or for statistical purposes in accordance with Art. 89 Para Law is likely to make it impossible or seriously impair the achievement of the objectives of this processing
- to assert, exercise or defend legal claims
d. Restriction of processing
In accordance with Art. 18 GDPR, you can request the restriction of the processing of your personal data for one of the following reasons:
- You dispute the accuracy of your personal data.
- The processing is unlawful and you oppose the erasure of the personal data.
- We no longer need the personal data for the purposes of processing, but you need them to assert, exercise or defend legal claims.
- You object to the processing in accordance with Art. 21 Para. 1 GDPR.
If you have requested the correction or deletion of your personal data or a restriction of processing in accordance with Art. 16, Art. 17 or Art. 18 GDPR, we will inform all recipients to whom your personal data has been disclosed, unless because this proves to be impossible or involves a disproportionate effort. You can ask us to inform you of these recipients.
You have the right to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format.
You also have the right to request the transmission of this data to a third party, provided that the processing was carried out using automated procedures and is based on consent in accordance with Article 6 Paragraph 1 Clause 1 Letter a or Article 9 Para. 2 lit. a or on a contract in accordance with Art. 6 Para. 1 S. 1 lit. b GDPR.
According to Art. 7 Para. 3 GDPR you have the right to revoke the consent you have given us at any time. The withdrawal of the consent does not affect the legality of the processing carried out on the basis of the consent up to the point of withdrawal. In the future, we may no longer continue the data processing that was based on your revoked consent.
According to Art. 77 GDPR, you have the right to complain to a supervisory authority if you believe that the processing of your personal data violates the GDPR.
If your personal data is processed on the basis of legitimate interests in accordance with Art. 6 Para. 1 S. 1 lit. f GDPR, you have the right to object to the processing of your personal data if there are reasons for this that arise from your particular situation or if the objection is directed against direct advertising. In the latter case, you have a general right of objection, which we will implement without specifying the particular situation. If you would like to make use of your right of withdrawal or objection, an e-mail to firstname.lastname@example.org sufficient
j. Automated individual decision-making including profiling
You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you. This does not apply if the decision
- necessary for entering into, or the performance of, a contract between you and us
- is permitted by law of the European Union or the Member States to which we are subject and that law contains appropriate measures to protect your rights and freedoms and your legitimate interests
- is done with your express consent
However, these decisions must not be based on special categories of personal data according to Art. 9 Para. 1 GDPR, unless Art. 9 Para. 2 lit. a or g GDPR applies and appropriate measures to protection of your rights and freedoms and your legitimate interests.
With regard to the cases referred to in i) and iii), we take appropriate measures to safeguard your rights and freedoms and legitimate interests, including at least the right to obtain human intervention on our part, to express your point of view and to appeal the decision.
Should we change the data protection declaration, this will be indicated on the website.