Source: https://www.btb.gmbh/en/privacy
Timestamp: 2019-04-22 00:14:13+00:00

Document:
We are very delighted that you have shown interest in our enterprise. Data protection is of a particularly high priority for the management of the BTB GmbH. The use of the Internet pages of the BTB GmbH is possible without any indication of personal data; however, if a data subject wants to use special enterprise services via our website, processing of personal data could become necessary.
The processing of personal data, such as the name, address, e-mail address, or telephone number of a data subject shall always be in line with the General Data Protection Regulation (GDPR), and in accordance with the country-specific data protection regulations applicable to the BTB GmbH. By means of this data protection declaration, our enterprise would like to inform the general public of the nature, scope, and purpose of the personal data we collect, use and process. Furthermore, data subjects are informed, by means of this data protection declaration, of the rights to which they are entitled.
As the controller, the BTB GmbH has implemented numerous technical and organizational measures to ensure the most complete protection of personal data processed through this website. However, Internet-based data transmissions may in principle have security gaps, so absolute protection may not be guaranteed.
The data protection declaration of the BTB GmbH is based on the terms used by the European legislator for the adoption of the General Data Protection Regulation (GDPR). Our data protection declaration should be legible and understandable for the general public, as well as our customers and business partners. To ensure this, we would like to first explain the terminology used.
The website of the BTB GmbH collects a series of general data and information when a data subject or automated system calls up the website. This general data and information are stored in the server log files.
An anonymized Internet Protocol address (IP-address) that stores only the first two octets or first two bytes of the IP address.
These anonymously collected data and information are evaluated by BTB GmbH with the aim of increasing data protection and data security in our company in order to ensure an optimum level of protection for the personal data processed by us (in accordance with Art. 6 Ch. 1 lit. f GDPR).
An IP address represents personal data in accordance with Art. 4 Ch. 1 GDPR. Therefore, IP addresses in the server log files are anonymized immediately after collection. This means that the last two octets of the IP addresses are overwritten with zeros in a standardized manner.
This changed IP address therefore no longer allows any personal reference. The anonymous data of the server log files are stored separately from all personal data provided by a person concerned.
Data within log files is kept for seven days. No further storage is planned.
The person concerned can prevent cookies from being set by our website at any time by setting the Internet browser accordingly. This allows you to permanently object to the setting of cookies. Furthermore, cookies that have already been set can be deleted at any time via an Internet browser or other software programs. This is possible in all common internet browsers. If the person concerned deactivates the setting of cookies in the Internet browser used, not all functions of our Internet site may be fully usable.
The website of BTB GmbH contains a contact and a download form, which enables a quick electronic contact to our company as well as a direct communication with us.
Your consent will be obtained for the processing of the data as part of the sending process. Alternatively, you can contact us via the e-mail address provided. In this case, the user's personal data transmitted by e-mail will be stored. In this context, the data will not be passed on to third parties. The data is used exclusively for processing the conversation.
The processing of personal data from the contact form and the download form serves us solely to process the establishment of contact. In the event of contact by e-mail, this also constitutes the necessary legitimate interest in the processing of the data.
The data will be deleted as soon as they are no longer necessary to achieve the purpose for which they were collected. For the personal data from the input mask of the contact form and those that were sent by e-mail, this is the case when the respective conversation with the user is finished. The conversation is terminated when it can be inferred from the circumstances that the facts in question have been finally clarified. If contractual relations arise from the establishment of contact via the contact or download form (either through a purchase contract or an employment contract for an application via the contact form), the statutory retention obligations shall apply.
The legal basis for the processing of data is Art. 6 Ch. 1 lit. a GDPR, if the user has given his consent. The legal basis for the processing of data transmitted in the course of sending an e-mail is Art. 6 Ch. 1 lit. f GDPR. If the e-mail contact aims at the conclusion of a contract, then additional legal basis for the processing is Art. 6 Ch. 1 lit. b GDPR.
In order to present our contents correctly and graphically appealing across all browsers, we use script libraries and font libraries such as Google Web Fonts (https://www.google.com/webfonts/) (in accordance with Art. 6 Para. 1 letter f DS-GVO) on this website. Google Web Fonts are transferred to your browser's cache to avoid multiple loading. If your browser does not support Google Web Fonts or does not allow access, content will be displayed in a default font.
The processing of users' personal data enables us to analyse the surfing behaviour of our users. This helps us to continuously improve our website and its user-friendliness. For these purposes, it is also in our legitimate interest to process the data in accordance with Art. 6 Ch. 1 lit. f GDPR. By anonymizing the IP address, users' interest in protecting their personal data is sufficiently taken into account.
The legal basis for the processing of users' personal data is Art. 6 Ch. 1 lit. f GDPR.
If one of the aforementioned reasons applies, and a data subject wishes to request the erasure of personal data stored by the BTB GmbH, he or she may, at any time, contact any employee of the controller. An employee of BTB GmbH shall promptly ensure that the erasure request is complied with immediately.
Where the controller has made personal data public and is obliged pursuant to Article 17(1) to erase the personal data, the controller, taking account of available technology and the cost of implementation, shall take reasonable steps, including technical measures, to inform other controllers processing the personal data that the data subject has requested erasure by such controllers of any links to, or copy or replication of, those personal data, as far as processing is not required. An employees of the BTB GmbH will arrange the necessary measures in individual cases.
If one of the aforementioned conditions is met, and a data subject wishes to request the restriction of the processing of personal data stored by the BTB GmbH, he or she may at any time contact any employee of the controller. The employee of the BTB GmbH will arrange the restriction of the processing.
In order to assert the right to data portability, the data subject may at any time contact any employee of the BTB GmbH.
The BTB GmbH shall no longer process the personal data in the event of the objection, unless we can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or for the establishment, exercise or defence of legal claims.
If the BTB GmbH processes personal data for direct marketing purposes, the data subject shall have the right to object at any time to processing of personal data concerning him or her for such marketing. This applies to profiling to the extent that it is related to such direct marketing. If the data subject objects to the BTB GmbH to the processing for direct marketing purposes, the BTB GmbH will no longer process the personal data for these purposes.
In addition, the data subject has the right, on grounds relating to his or her particular situation, to object to processing of personal data concerning him or her by the BTB GmbH for scientific or historical research purposes, or for statistical purposes pursuant to Article 89(1) of the GDPR, unless the processing is necessary for the performance of a task carried out for reasons of public interest.
In order to exercise the right to object, the data subject may contact any employee of the BTB GmbH. In addition, the data subject is free in the context of the use of information society services, and notwithstanding Directive 2002/58/EC, to use his or her right to object by automated means using technical specifications.
If the decision (1) is necessary for entering into, or the performance of, a contract between the data subject and a data controller, or (2) it is based on the data subject's explicit consent, the BTB GmbH shall implement suitable measures to safeguard the data subject's rights and freedoms and legitimate interests, at least the right to obtain human intervention on the part of the controller, to express his or her point of view and contest the decision.
If the data subject wishes to exercise the rights concerning automated individual decision-making, he or she may, at any time, contact any employee of the BTB GmbH.
f the data subject wishes to exercise the right to withdraw the consent, he or she may, at any time, contact any employee of the BTB GmbH.

References: Art. 6
 Art. 4
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6