Data
protection declaration
Introduction
and general information
Thank you very much for your
interest in our website. Protecting your personal data is very important to us.
The following contains information on the handling of your data which are
collected when you use our website. Your data are processed in accordance with
the legal provisions on data protection.
Responsible
entity with regard to data protection law
Brändle GmbH
Rosenweg 4
78713 Schramberg, Germany
Registration court: Local Court of Oberndorf
Registration number: HRB 732052
info@braendle-gmbh.eu
+49 7422-241688
Contact
information of the data protection officer
Ralf Brändle info@braendle-gmbh.eu
Definitions
Our data protection declaration is
intended to be easy to read and understandable by everyone. In this data
protection declaration, the official terms of the General Data Protection
Regulation (GDPR) are generally used. The official definitions are explained in
Article 4 of the GDPR.
Data
processing carried out as a result of using our website
When you call up our website, data
about your web browser must be sent to our web server for technical reasons. The
following data are recorded during an active connection for communication
between your web browser and our web server:
We collect the data listed above to
ensure smooth establishment of a connection to the website and enable
convenient use of our website by the user. The log file is also used for the
evaluation of system security and stability, as well as for administrative
purposes. The legal basis for the temporary saving of data and log file is
Article 6 Para. 1 letter f of the GDPR.
Contact
form and making contact via email
When you send us enquiries using the
contact form or by email, your information from the enquiry form or email,
including the first name, surname, address and postal address specified
by you there, is saved by us for the purpose of processing the enquiry and in
case there are any follow-up questions. The specification of an email address
is required for making contact, but specifying your name and telephone number
is voluntary. Under no circumstances do we pass this data on to other parties
without your consent. The legal basis for processing the data is our legitimate
interest in responding to your concern as per Article 6 Para. 1 letter f of the
GDPR and potentially Article 6 Para. 1 letter b of the GDPR if your enquiry is
in regard to the conclusion of a contract. Once your enquiry has been
processed, your data are deleted unless this is contradicted by legal retention
requirements. In the case of Article 6 Para. 1 letter f of the GDPR, you can
enter an objection to the processing of your personal data at any time.
Google
Analytics
Our website uses Google Analytics,
an Internet analysis service provided by Google Ireland Limited, Gordon House,
Barrow Street, Dublin 4, Ireland ("Google"). Google Analytics uses
so-called "cookies".
Google will use this information on
behalf of the owner of this website to evaluate your use of the website and
create reports on website activities. Google will also use this information to
render additional services associated with the use of the website and the
Internet for the website owner. The IP address sent by your browser as part of
Google Analytics is not combined with any other data by Google. Processing
occurs as per Article 6 Para. 1 letter f of the GDPR based on our legitimate
interest in statistical analysis of user behaviour for optimisation and
marketing purposes.
We only use Google Analytics with IP
anonymisation activated. This means that your IP address is only processed
further by Google in a shortened form. We have concluded an order processing
contract with the service provider in which we have obligated them to protect
the data of our customers and not pass them on to third parties. As personal
data are transferred to the USA, additional protection mechanisms are required
for ensuring the same level of data protection as the GDPR. To ensure this, we
have agreed upon standard data protection clauses as per Article 46 Para. 2
letter c of the GDPR with the provider. These clauses obligate the recipient of
the data in the USA to process the data in accordance with the level of
protection used in Europe. In cases where this cannot be ensured even with this
contractual extension, we make an effort to ensure additional regulations and
assurances by the recipient in the USA. The usage conditions of Google
Analytics and information on data protection can be called up using the
following links: https://marketingplatform.google.com/about/analytics/terms/us/ https://policies.google.com/?hl=en&gl=en
The data are deleted as soon as they are no longer required for the purpose for
which they were collected. Deletion of the data on the user and event level
linked with cookies, user IDs and advertising IDs (e.g. double-click cookies,
Android advertising ID, IDFA [Apple code for advertisers]) occurs no later than
14 months following their collection.
You can prevent the saving of cookies by making the corresponding settings in
your browser software. We would like to point out, however, that you may not be
able to make full use of all functions on this website if you do so. You can
also prevent Google collecting the data generated by the cookie and analysing
your use of the website (including your IP address) and the processing of these
data by Google by downloading and installing the browser plugin available here:
https://tools.google.com/dlpage/gaoptout?hl=en.
Google
Maps
Our website uses the online map
provider Google Maps over an interface. The provider of the map service is
Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The use
of Google Maps functions requires that your IP address be saved. The legal
basis for the processing of your personal data is the consent you have granted
for this purpose as per Article 6 Para. 1 Clause 1 letter a of the GDPR. When
this service is used, personal data are sent to the USA. The legal basis for
the transfer of your personal data to the USA is the consent you have granted
as per Article 49 Para. 1 Clause 1 letter a of the GDPR. Please note that for
this type of transmission of personal data without an adequacy decision and without
suitable guarantees you are being put at risk. The risk here is that American
authorities (intelligence services in particular) could access the personal
data due to legislation in the USA. Legal protection options or information on
the handling of your data by US authorities are highly limited or even lacking
altogether. Accordingly, data protection on the level of the GDPR cannot be
ensured. More information on handling user data can be found in the Google data
privacy declaration: https://policies.google.com/privacy?hl=en&gl=en.
Opt-out: https://www.google.com/settings/ads/
Cookies
Our website uses cookies saved on
your device by your browser which contain certain settings for use of the
website (e.g. the current session). Cookies are used to make our offering more
user-friendly, efficient and secure. Cookies are small text files placed on
your computer and saved by your browser. Most of the cookies used by us are
so-called session cookies which are deleted automatically when the browser is
closed. Other cookies remain saved on your end device until you delete them or
the storage duration expires. These cookies enable us to recognize your browser
the next time you visit.
In part, these cookies serve to
simplify website processes by saving settings (e.g. the retention of options
already selected). If personal data are also processed by individual cookies
implemented by us, processing occurs as per Article 6 Para. 1 letter b of the
GDPR either for performance of the contract or as per Article 6 Para. 1 letter
f of the GDPR for protecting our legitimate interests in the best possible
functioning of the website and a customer-friendly and efficient design of the
website visit. You can set your browser in such a way that you are informed of
the setting of cookies and only permit cookies in individual cases, preclude
the acceptance of cookies for specific cases or in general and activate the
automatic deletion of cookies upon closing the browser. Cookie settings can be
managed using the following links for respective browsers.
You can also manage the cookies of
many companies and functions used for advertising. For this purpose, use the
corresponding user tools, which can be accessed under https://www.aboutads.info/choices/ or http://www.youronlinechoices.com/uk/your-ad-choices. Most browsers also offer a so-called "do not track
function" with which you can specify that you do not wish to be
"tracked" by websites. If this function is activated, the respective
browser informs advertising networks, websites and applications that you do not
wish to be tracked for the purpose of behaviour-based advertisement etc.
Information and instructions on how you can edit this function are available
from your respective browser provider at the following links:
You can also prevent the loading of
so-called scripts by default. NoScript makes it possible to execute
JavaScripts, Java and other plug-ins only for trustworthy domains of your
choice. Information and instructions on how you can edit this function are
available from your browser provider (e.g. for Mozilla Firefox under: https://addons.mozilla.org/en-US/firefox/addon/noscript/). Please note that deactivating cookies may limit the
functionality of this website.
Data
transfer and recipients
Your personal data are not
transferred to third parties unless
We also use carefully selected
external service providers commissioned in writing for providing our services.
They are bound by our instructions and are monitored by us on a regular basis.
We have concluded order processing contracts with them as per Article 28 of the
GDPR where required. They are service providers for web hosting, the sending of
emails and the maintenance & servicing of our IT systems etc. The service
providers will not pass on this data to third parties.
Duration
of the storage of personal data
The duration of the storage of
personal data depends on the relevant legal retention periods (e.g. according
to commercial law and tax law). Upon expiry of the respective period, the
corresponding data are routinely deleted. Should data be required for contract
fulfillment or contract initiation or if we have a legitimate interest in their
continued storage, the data are deleted when they are no longer required for
these purposes or you have exercised your right to withdraw or object.
Your
rights
The following contains information
on the rights of the person concerned granted to you by the applicable data
protection law with regard to the processing of your personal data:
The right to demand information on
your personal data processed by us as per Article 15 of the GDPR.
In particular, you can demand information on the purposes of processing, the
category of personal data, the categories of recipients to whom your data has
been or is revealed, the planned duration of storage, the existence of a right
to correction, deletion, restriction of processing or objection, the existence
of a right to appeal, the origin of your data if they were not collected by us,
as well as on the existence of automated decision making, including profiling
and, if applicable, meaningful information on their details.
The right as per Article 16 of the
GDPR to demand the immediate correction (if incorrect) or completion of your
personal data saved by us.
The right as per Article 17 of the
GDPR to demand the deletion of your personal data saved by us if their
processing is not required for exercising the right to free expression of opinion
and information, for the fulfillment of a legal obligation, for reasons of
public interest or for the assertion, exercising or defence of legal claims.
The right as per Article 18 of the
GDPR to demand limitation of the processing of your personal data if the
correctness of the data is being disputed by you or processing of the data is
unlawful, but you reject the deletion of the data and we no longer require
them, but you require them for the assertion, exercising or defence of legal
claims or you have entered an objection to their being processed as per Article
21 of the GDPR.
The right as per Article 20 of the
GDPR to obtain your personal data which you have provided to us in a
structured, commonly used, machine-readable format or to demand transfer to
another responsible party.
The right as per Article 77 of the
GDPR to lodge a complaint with a supervisory authority. In general, you can
contact the supervisory authority of the federal state of our location
specified above or, if applicable, that of your usual place of residence or
place of work for this purpose.
The right to withdraw granted
consent as per Article 7 Para. 3 of the GDPR: You have the right to withdraw
granted consent to the processing of data at any time with future effect. In
case of withdrawal, we will immediately delete the affected data if further
processing cannot be supported by a legal basis for processing without consent.
The withdrawal of consent does not affect the legality of processing which
occurred based on consent up to the point of withdrawal.
Right
to object
If your personal data are processed by us based on
legitimate interest as per Article 6 Para. 1 Clause 1 letter f of the GDPR, you
have the right as per Article 21 of the GDPR to make an objection to the
processing of your personal data if it occurs for reasons arising from your
special situation. If the objection regards the
processing of personal data for the purposes of direct advertising, you have a
general right to object without the requirement of specifying a special
situation. If you would like to exercise your right to withdraw or object, it
is sufficient if you send us an email: info@braendle-gmbh.eu.
Right
to make changes
We reserve the right to adjust or
update this data protection declaration under consideration of the applicable
data protection regulations if necessary. In this way, we are able to adjust
them to current legal requirements and take changes to our services into
account, e.g. when introducing new services. The respective most recent version
applies for your visit.
Date of this data protection
declaration: 5 August, 2022