Source: https://shop.berner.no/privacy-notice
Timestamp: 2019-04-26 03:39:59+00:00

Document:
Data privacy is of especially great importance for our company and our corporate group. It is essentially possible to use the website without providing any personal data. Should a person wish to make use of special services of our company online, however, it may be necessary to process personal data. Should the processing of personal data be required, and should no legal basis exist for such processing, we will obtain the prior consent of the person concerned.
Our company has implemented numerous technical and organizational measures to ensure that any personal data processed is protected as comprehensively as possible. Web-based data transmission may, however, possibly contain security gaps, so that absolute protection cannot be guaranteed.
Profiling means any kind of automated processing of personal data where such personal data is used to assess certain personal aspects relating to a natural person, to analyze or predict aspects regarding work performance, economic position, health, personal preferences, interests, reliability, conduct, place of residence or change of location of such natural person.
Pseudonymizing means processing personal data in the case where the personal data can no longer be assigned to a specific person concerned without drawing upon additional information. Such additional information that is subject to the technical and organizational measures is stored separately, and it is thus guaranteed that the personal data cannot be allocated to an identified or identifiable natural person.
A third party is a natural or legal person, authority, institution or other body other than the person concerned, the responsible party, the contract data processor and the persons who are authorized, under the direct responsibility of the party responsible or the contract data processor, to process the personal data.
Consent means any expression of intent in the form of a declaration or any other clear confirmatory action voluntarily submitted by the person concerned regarding the particular case in an informed way and unmistakably, with which the person concerned makes it understood that he or she agrees with the processing of the personal data concerning him or her.
Any person affected may, if he or she has any questions or suggestions on data privacy related to German Berner Group companies, contact our Data Privacy Officer directly.
The following chapter is focused on informing our customers (you) on the processing of your personal data regarding our business relationship.
We process personal data that we receive from our customers or other interested parties in the course of our business relationship to fulfill orders or handle after sales activities like returns or claims.
Lawfulness of processing is based on Art. 6 part 1 lit. b GDPR (contractual fulfilment) and Art. 6 part 1 lit. f GDPR (legitimate interest) for identification and communication and for pressing the order and payments.
Besides the personal and identification data, it might also include data from the fulfilment of our contractual obligations, documentation data and other comparable data.
Your data will be given to only departments within the company, that require the infor-mation so that we can fulfil its contractual and legal obligations. Service providers and vicarious agents used by us may also receive data for these purposes. These are compa-nies in the categories of e.g. IT services, logistics or telecommunications.
We process and store your personal data as long as it is necessary for the fulfilment of our contractual and legal obligations.
In addition, we are subject to various storage and documentation obligations arising, among other things, from the German Commercial Code (HGB).
Finally, the storage period is also assessed according to the statutory statute of limita-tions, which may amount to up to thirty years according to §§ 195 ff. of the German Civil Code, whereby the regular statute of limitations is three years.
As soon as the storage of the data is no longer necessary for the execution of the pro-cessing purpose and there are no legal retention periods, your data will be deleted imme-diately.
Every time the website is accessed by a particular person or an automated system, the web server of our company gathers a range of pieces of general data and information. This general data and information is stored in the log files of the server. The browser types and versions used, the operating system used by the accessing system, the website from which an accessing system reaches our website, the sub-pages of the website which are accessed on our website via an accessing system, the date and time of any access to the website, an Internet protocol address (IP address), the Internet Service Provider of the accessing system and any other similar data and information which serves to fend off risk in the event of our IT systems being attacked may be gathered.
When using such general data and information, our company does not draw any conclusions concerning the person concerned. Rather, such information is needed to deliver the content of our website correctly, optimize the content of our website, as well as the advertising for it, guarantee the ongoing functionality of our IT systems and the technology of our website, and provide law enforcement agencies with the information necessary for prosecution in the event of a cyber-attack. Such data and information gathered anonymously is therefore evaluated by our company on the one hand statistically, and with the aim of increasing data privacy and data security at our company, in order to ultimately ensure an optimum level of protection for the personal data processed by us. The anonymous data of the server log files is stored separately from any personal data given by a person concerned.
The data subject may register on the website of the controller, providing personal data. The personal data transferred to the controller is determined by the respective input mask used for registration. The personal data entered by the data subject are collected and stored exclusively for internal use by the controller and for the data subject's own purposes. The controller may arrange for the data to be transferred to one or more processors, such as a packaging service provider, who also uses the personal data exclusively for internal use attributable to the controller.
Furthermore, the IP address assigned by the Internet Service Provider (ISP) of the data subject, the date and time of registration are stored by registration on the website of the data controller. This data is stored to prevent misuse of our services and, if necessary, to enable us to investigate criminal offences committed. In this respect, the storage of this data is necessary to protect the data controller. This data will not be passed on to third parties unless required to do so by law or for criminal prosecution.
The controller shall always, and upon request, inform each data subject of the personal data relating to that data subject. Furthermore, the controller shall correct or delete personal data at the request or notice of the data subject, provided that there is no legal obligation to keep such data in safekeeping.
On our website of the Berner Group, users are given the opportunity to subscribe to the company’s newsletter. Which personal data are transmitted to the person responsible for processing when ordering the newsletter is determined by the input mask used for this purpose.
The Berner Group informs its customers and business partners at regular intervals about company offers by means of a newsletter. The newsletter of our company can only be received by the person concerned if the person concerned has a valid e-mail address and the person concerned registers for the newsletter dispatch. For legal reasons, a confirmation e-mail in the double opt-in procedure is sent to the e-mail address entered by the person concerned for the first time for sending the newsletter. This confirmation e-mail serves to check whether the owner of the e-mail address has authorized the receipt of the newsletter as the person concerned.
When registering for the newsletter, the IP address of the computer system used by the person concerned at the time of registration assigned by the Internet Service Provider (ISP) is also stored as well as the date and time of registration. The collection of this data is necessary and enables us to trace the (possible) misuse of the e-mail address of a data subject at a later point in time and therefore serves the legal protection of the person responsible for the processing.
The personal data collected when registering for the newsletter will be used exclusively for sending our newsletter. Furthermore, subscribers to the newsletter may be informed by e-mail if this is necessary for the operation of the newsletter service or for registration, as could be the case in the event of changes to the newsletter offer or changes in the technical conditions. The personal data collected in the context of the newsletter service will not be passed on to third parties. The subscription to our newsletter can be cancelled by the person concerned at any time. The consent to the storage of personal data, which the person in question has given us for the newsletter dispatch, can be revoked at any time. For the purpose of revoking consent, every newsletter contains a corresponding link to do so. Furthermore, it is possible at any time to unsubscribe directly from the newsletter dispatch on the website of the controller or to inform the controller in any other way.
The Berner Group newsletters being sent primary with Inxmail software contain so-called tracking pixels. A tracking pixel is a miniature graphic embedded in e-mails sent in HTML format to enable log file recording and analysis. This allows a statistical evaluation of the success or failure of online marketing campaigns to be carried out. By means of the embedded pixel-code, the Berner Group can recognize whether and when an e-mail was opened by an affected person and which links in the e-mail were called up.
Personal data collected via the tracking pixels contained in the newsletters are stored and evaluated by the data controller to optimize the dispatch of the newsletter and to adapt the content of future newsletters even better to the interests of the person concerned. This personal data will not be passed on to third parties. Affected persons are entitled at any time to revoke the respective separate declaration of objection submitted via the double opt-in procedure. After revocation, this personal data will be deleted by the data controller. If you unsubscribe from receiving the newsletter, the Berner Group automatically interprets this as a revocation.
The person responsible for the processing has integrated components of the company Facebook on our website or offers company-related information pages directly in Facebook. Facebook is a social network. A social network is an Internet-based social meeting place, an online community that usually enables users to communicate with each other and interact in virtual space. A social network can serve as a platform for the exchange of opinions and experiences or enables the Internet community to provide personal or company-related information. Facebook enables social network users to create private profiles, upload photos and network via friendship requests, among other things.
Each time one of the web pages operated by the controller and on which a Facebook component (Facebook plug-in) has been integrated, the Internet browser on the person's IT system is automatically prompted by the respective Facebook component to download a representation of the corresponding Facebook component from Facebook.
An overview of all Facebook plug-ins can be found at https://developers.facebook.com/docs/plugins/?locale=en_DE. As part of this technical process, Facebook is informed about which specific subpage of our website is visited by the person concerned.
If a person is logged on to Facebook at the same time, Facebook recognizes which specific subpage of our website the person visits each time the person visits our website and for the entire duration of the respective stay on our website. This information is collected by the Facebook component and assigned by Facebook to the respective Facebook account of the person concerned. If the person presses one of the Facebook buttons integrated on our website, for example the "Like" button, or if the person makes a comment, Facebook assigns this information to the personal Facebook user account of the person concerned and stores this personal data.
Facebook receives information via the Facebook component that the person concerned has visited our website whenever the person concerned is logged on to Facebook at the same time as accessing our website; this happens regardless of whether the person concerned clicks on the Facebook component or not. If the person concerned does not want this information to be transmitted to Facebook, they can prevent it from being transmitted by logging out of their Facebook account before visiting our website.
The data policy published by Facebook, which is available at https://www.facebook.com/about/privacy/, provides information about the collection, processing and use of personal data by Facebook. It also explains what setting options Facebook offers to protect the privacy of the person concerned.
In addition, various applications are available that make it possible to suppress data transmission to Facebook, for example the Facebook blocker of the provider Web graph, which can be obtained at http://webgraph.com/resources/facebookblocker/. Such applications can be used by the person concerned to suppress data transmission to Facebook.
The Google Analytics component is operated by Google, Inc., 1600 Amphitheatre, Parkway, Mountain View, CA 94043 1351, USA.
This website also uses Dynatrace software collecting and storing data for performance and user experience purposes what requires collection of up to last eight digits shortened IP address. As well this website will store the full IP address with the usage of Elasticsearch software for a limited period of time to prevent hacker attacks.
The controller has integrated components of LinkedIn Corporation on this website. LinkedIn is an Internet-based social network that enables users to connect to existing business contacts and make new business contacts. Over 400 million registered users in more than 200 countries use LinkedIn. This makes it currently the largest platform for business contacts and one of the most visited websites in the world.
Every time a LinkedIn component (LinkedIn Plug-In) is installed on our website, this component causes the browser used by the person concerned to download a corresponding representation of the LinkedIn component. Further information on the LinkedIn Plug-Ins can be found at https://developer.linkedin.com/plugins. During this technical procedure, LinkedIn is informed about which specific subpage of our website is visited by the person concerned.
If the person concerned is simultaneously logged in to LinkedIn, LinkedIn recognizes which specific subpage of the website the person visits each time they visit the website and for the entire duration of the respective stay on the website. This information is collected by the LinkedIn component and assigned by LinkedIn to the respective LinkedIn account of the person concerned. If the person clicks a LinkedIn button integrated on the website, LinkedIn assigns this information to the personal LinkedIn user account of the person concerned and stores this personal data.
LinkedIn receives information via the component that the person has visited the website whenever the person concerned is logged in to LinkedIn at the same time as accessing our website; this takes place regardless of whether the person concerned clicks on the LinkedIn component or not. If such a transmission of this information to LinkedIn is not desired, the person can prevent the transmission by logging out of his or her LinkedIn account before going on our website.
The person responsible for processing integrated components of WiredMinds on this website. WiredMinds components automatically identify and qualify companies visiting a Web site. The WiredMinds component enables the operator of a website using the component to generate leads, i.e. to qualify potential new customers.
We use a WiredMinds pixel-code. A tracking pixel is a miniature graphic embedded in a website to enable log file recording and analysis for subsequent statistical analysis.
WiredMinds also places a cookie on the person's IT system. By setting the cookie, we are enabled to analyze the use of our website.
Pseudonymized user profiles are created using the data obtained. The pseudonymized user profiles are used for the purpose of analyzing visitor behavior and enable us to improve our Internet offering. Data collected through the WiredMinds component will not be used to identify the data subject without the prior, separate and explicit consent of the data subject. This data is not combined with personal data or with other data containing the same pseudonym.
Each time the individual pages of this website are called up, the WiredMinds component automatically triggers the Internet browser on the person's IT system to transmit data for online analysis. During this process, WiredMinds receives information about personal data, such as the IP address, which is used, among other things, to trace the origin of visitors and clicks.
Cookies are used to store personal information, such as access time, the location from which the access originated and the frequency of visits to our website. Whenever you visit our website, this personal data, including the IP address of the Internet connection used, is transmitted to the WiredMinds server. These personal data are stored by WiredMinds, but not passed on to third parties.
The person concerned can prevent the setting of cookies by our website at any time, as already described above, by means of an appropriate setting of the Internet browser used and thus permanently object to the setting of cookies. Such a setting of the Internet browser used would also prevent WiredMinds from placing a cookie on the IT system of the person concerned. In addition, a cookie already set by WiredMinds can be deleted at any time via an Internet browser or other software programs.
Furthermore, the data subject has the possibility to object to the collection of data generated by WiredMinds regarding the use of the website and to prevent such collection. The person concerned must click the Don’t-Track-My-Visits button under the link https://wm.wiredminds.de/track/cookie_mgr.php?mode=dont_track_ask&websitesel. If the person's IT system is deleted, formatted or reinstalled at a later date, the person concerned must set an opt-out cookie again.
The person responsible for processing integrated Xing components on this website. Xing is an Internet-based social network that enables users to connect to existing business contacts and make new business contacts. Individual users can create a personal profile of themselves at Xing. For example, companies can create company profiles or publish job offers on Xing.
Each time one of the pages of this website is visited, which is operated by the controller and on which a Xing component (Xing plug-in) has been integrated, the Internet browser on the IT system of the person concerned is automatically prompted by the respective Xing component to download a representation of the corresponding Xing component from Xing. More information about the Xing plug-ins can be found at dev.xing.com/plugins. During this technical process, Xing is informed about which specific subpage of our website is visited by the person.
If the person concerned is logged in to Xing at the same time, Xing recognizes every visit to our website by the person and for the entire duration of the stay on our website which specific subpage is visited. This information is collected by the Xing component and assigned to the respective Xing account of the person concerned by Xing. If the person clicks one of the Xing buttons integrated on our website, for example the "Share" button, Xing assigns this information to the personal Xing user account of the person concerned and stores this personal data.
Xing receives information via the Xing component that the person has visited our website whenever the person concerned is logged in to Xing at the same time as accessing our website; this takes place regardless of whether the person clicks on the Xing component or not. If such a transmission of this information to Xing is not desired, the person can prevent the transmission by logging out of his or her Xing account before calling up our website.
The data protection regulations published by Xing, which can be accessed at https://www.xing.com/privacy, provides information on the collection, processing and use of personal data by Xing. Xing has also published privacy notice for the XING share button at https://www.xing.com/app/share?op=data_protection.
The person responsible for processing has integrated YouTube components on this website. YouTube is an Internet video portal that allows video publishers to post video clips and other users to view, rate and comment on them free of charge. YouTube allows the publication of all kinds of videos, which is why complete film and television programs, but also music videos, trailers or videos produced by users themselves can be called up via the Internet portal.
Each time a YouTube component (YouTube video) is integrated into one of the individual pages of this website operated by the data controller, the Internet browser on the person's IT system is automatically prompted by the respective YouTube component to download a representation of the corresponding YouTube component from YouTube. More information about YouTube can be found at https://www.youtube.com/yt/about/. During this technical procedure, YouTube and Google are informed which specific subpage of our website is visited by the person concerned.
If the person concerned is simultaneously logged in to YouTube, YouTube recognizes which specific subpage of our website the person is visiting when calling up a subpage containing a YouTube video. This information is collected by YouTube and Google and assigned to the respective YouTube account of the person concerned.
YouTube and Google receive information via the YouTube component that the person concerned has visited our website whenever the person concerned is logged on to YouTube at the same time as accessing our website; this happens regardless of whether the person concerned clicks on a YouTube video or not. If such a transmission of this information to YouTube and Google is not wanted, the person can prevent the transmission by logging out of his or her YouTube account before accessing our website.
This website uses Userlike, a live chat software of the company Userlike UG (limited liability). Userlike uses "cookies", which are text files that are stored on your computer and that allow personalized conversation in form of a real-time chat. Additionally the chat protocol will be stored. The data contained therein is not used for personal identification of the website visitor or for other purpose.
The person concerned moreover has a right to information on whether personal data has been transmitted to a non-EU country or an international organization. Should this be the case, the person concerned shall also be entitled to receive information on the appropriate warranties regarding the transmission.
Any person affected by the processing of personal data has the right to demand immediate correction of any incorrect personal data concerning him or her. The person concerned is, furthermore, entitled, considering the purpose of the processing, to demand that incomplete personal data is completed - also by way of a supplementary statement.
Pursuant to Art. 21(1) General Data Privacy Regulation (GDPR), the person concerned is filing an opposition to the processing, and there is no overriding justified grounds for the processing, or the person concerned is filing an opposition against the processing pursuant to Art. 21(2) General Data Privacy Regulation (GDPR).
Any person affected by the processing of personal data has the right, for reasons which arise from his or her particular situation, to object against the processing of personal data concerning him or her that is being undertaken based on Art. 6(1)(e) or (f) General Data Privacy Regulation (GDPR), at any time. This also applies to any profiling based on these provisions.
In the event of a objection, our company no longer processes the personal data, unless we can provide evidence of mandatory grounds for the processing, worthy of protection, which outweigh the interests, rights and freedoms of the person concerned, or the processing serves the purpose of asserting, exercising or defending legal claims.
Should our company process personal data in order to carry out direct marketing, the person concerned is entitled to file an objection against the processing of the personal data for the purposes of such marketing, at any time. This also applies to profiling, in so far as it is connected with such direct marketing. Should the person concerned oppose the data being processed for the purposes of direct marketing, vis-à-vis our company, we will no longer process the personal data for such purposes.
In addition, the person concerned is entitled, for reasons arising from his or her particular situation, to file an objection against the processing of personal data concerning him or her that is performed by our company for scientific or historic research purposes or for statistical purposes pursuant to Art. 89(1) General Data Privacy Regulation (GDPR), unless such processing is necessary in order to complete a task that falls within the scope of the public interest.
In order to exercise the right of an objection, the person concerned may contact the Data Privacy Officer directly.
The party responsible for the processing gathers and processes the personal data of applicants for the purpose of executing the application procedure. The processing may also be carried out electronically. This is the case if an applicant transmits corresponding application documents to our company electronically, for example by e-mail or via a web form to be found on the website. Should our company conclude an employment contract with an applicant, the data transmitted will be saved for the purpose of handling the employment relationship, adhering to the statutory regulations. Should no employment contract with the applicant be concluded by our company, the application documents will automatically be deleted six months after announcing the decision to turn down the application, unless such deletion is in conflict with any justified interests on the part of the party responsible for the processing. A justified interest, in this sense, may, for example, be an obligation to provide evidence in any proceedings under the German General Equal Treatment Act (AGG).

References: Art. 6
 Art. 6
 Art. 21
 Art. 21
 Art. 6
 Art. 89