Source: https://www.buefa.de/en/privacy/
Timestamp: 2019-04-22 18:39:28+00:00

Document:
Modern information and communications technologies play an increasingly large role in the activities of the BÜFA Group. That is why we take the protection of your privacy and personal particulars that you make available to us very seriously. We observe the provisions of the German Federal Data Protection Act as a matter or course. Details of any data we possibly collect and how we handle such data are set out below.
You can visit our websites without us requiring any personal data from you. We only learn the name of your Internet Service Provider, the website from which you visit us and the pages that you visit on our website. Personal data are only requested and processed if you use specific services. Your attention is then specifically drawn to this in the menu.
As we are constantly endeavouring in a continuous process to improve both our services and your experience with our websites, the above general data are evaluated statistically. However, for this purpose we are interested in your personal opinion and your sphere in this connection. That is why at some points we request you to provide additional information. This information is voluntary and we naturally treat it confidentially.
If you use our services, generally we only collect such data as we need to provide the services. In as far as we ask you for any further data, this comprises voluntary information. The personal data are processed solely to perform the service requested and to maintain our own justified business interests.
Are personal data passed on to third parties?
We will only pass on your personal data to third parties in as far as this is absolutely necessary to provide the service requested. Beyond this we will not disclose, pass on, sell or otherwise market your personal data to other enterprises or institutions unless your express declaration of agreement to this is received. The situation is different if we are obligated to disclose and transmit the data by law or by a court judgement.
Alternatively, you can view and change your current cookie settings for this website here.
You have the possibility to contact us in several ways. By contact form, by e-mail, by telephone or by post. If you contact us, we will use the personal data that you voluntarily provide to us for the sole purpose of contacting you and processing your enquiry.
The legal basis for this data processing is Art. 6 para. 1 letter a), Art. 6 para. 1 letter b), Art. 6 para. 1 letter c) GDPR and Art. 6 para. 1 letter f) GDPR.
This website uses Google Analytics, a web analytics service provided by Google, Inc. (“Google”). Google Analytics uses “cookies”, which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of the website (including your IP address) will be transmitted to and stored by Google on servers in the United States. Because of the activation of the IP anonymization, Google will truncate/anonymize the last octet of the IP address for Member States of the European Union as well as for other parties to the Agreement on the European Economic Area. Only in exceptional cases, the full IP address is sent to and shortened by Google servers in the USA.
We have taken technical and organisational measures to prevent the personal data you provide against loss, destruction, tampering and unauthorised access. This includes the encrypted transmission of data using sha256RSA (2048 bits) signature algorithm. All our staff and third parties participating in data processing are obligated to observe the German Federal Data Protection Act and treat personal data confidentially.
We reserve the right to modify this declaration at any time. It does not constitute any contractual or other formal right vis-à-vis or on behalf of any party.
The information regarding data protection for applicants can be found here.
The information regarding the data protection of our social media presences can be found here.
You have the right to request confirmation as to whether personal data relating to you are being processed; if this is the case, you have the right to access this personal data and the information specified in Art. 15 GDPR.
You have the right to demand the immediate correction of incorrect personal data concerning you and, if necessary, the completion of incomplete personal data.
They also have the right to demand that personal data relating to them be deleted immediately if one of the reasons specified in Art. 17 GDPR applies, e.g. if the data is no longer required for the purposes pursued.
You have the right to demand the restriction of the processing if one of the conditions listed in Art. 18 GDPR is met, e.g. if you have lodged an objection against the processing for the duration of any examination.
In certain cases, which are listed in detail in Art. 20 GDPR, you have the right to receive the personal data concerning you in a structured, common and machine-readable format or to request the transfer of this data to a third party.
If data is collected on the basis of Art. 6 para. 1 lit. f (data processing to safeguard legitimate interests), you have the right to object to such processing at any time for reasons arising from your particular situation. We will then no longer process the personal data unless there are verifiable compelling grounds for processing worthy of protection which outweigh the interests, rights and freedoms of the person concerned, or the processing serves to assert, exercise or defend legal claims.
Pursuant to Art. 77 GDPR, you have the right to complain to a supervisory authority if you are of the opinion that the processing of the data concerning you violates data protection provisions. The right of appeal can be asserted in particular with a supervisory authority in the member state of your residence, your place of work or the place of the presumed infringement.

References: Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 15
 Art. 17
 Art. 18
 Art. 20
 Art. 6
 Art. 77