Source: https://bskp.de/privacy-policy/?lang=en
Timestamp: 2019-04-20 02:46:23+00:00

Document:
We only process personal data of our users if this is necessary to provide a functional website as well as our contents and services. The processing of personal data of our users takes place regularly only after consent of the user. An exception applies in those cases where prior consent cannot actually be obtained and the processing of the data is permitted by law.
Art. 6 para. 1 lit. b DSGVO serves as the legal basis in cases where processing of personal data is required for the performance of a contract to which the data subject is a party. This also applies to processing operations that are necessary to carry out pre-contractual measures.
Insofar as the processing of personal data is required to fulfil a legal obligation to which our company is subject to, Art. 6 para. 1 lit. c DSGVO serves as the legal basis.
This information is not stored together with other personal data of the user.
The temporary storage of the IP address by the system is necessary to enable delivery of the website to the user’s computer (smooth connection establishment). For this the IP address of the user must remain stored for the duration of the session. The storage in log files is done to ensure the functionality of the website (comfortable use). In addition, the data serves us to optimize (stability) the website and to ensure the security of our information technology systems. An evaluation of the data for marketing purposes does not take place in this context.
The legal basis for the temporary storage of data and log files is Art. 6 para. 1 lit. f DSGVO. Our legitimate interest is a result of the purposes for data collection listed above. Under no circumstances do we use the collected data for the purpose of drawing conclusions about you personally.
The data will be deleted as soon as they are no longer necessary to achieve the purpose for which they were collected. In the case of the collection of data for the provision of the website, this is the case when the respective session is terminated, at the latest, however, after 14 days.
the disclosure pursuant to Art. 6 para. 1 sentence 1 f DSGVO is necessary to protect our legitimate interests or to protect the legitimate interests of third parties and there is no reason to assume that you have an overriding interest worthy of protection in not disclosing your data.
The data will be processed by us, Cleverreach and, if available, by subcontractors of Cleverreach within the scope of data processing. Subcontractors process the data in the same way as Cleverreach itself and in accordance with our instructions. With the help of the Cleverreach service we analyse the success and coverage of our newsletter (campaigns). For example, we evaluate in particular whether you open a newsletter or how you otherwise proceed with the newsletter, see point 7. We will not pass on any further information in connection with data processing for the purpose of sending the newsletter to third parties.
The legal basis for processing of data after registration for the newsletter by the user is given with the user’s consent in accordance with Art. 6 para. 1 letter A DSGVO.
The newsletter is sent by the mailing service “Cleverreach”, a newsletter delivery platform of CleverReach GmbH & Co. KG, Mühlenstr 43, 26180 Rastede. The data protection regulations of the mailing service provider can be viewed here: » https://www.cleverreach.com/de/datenschutz/. The mailing service provider is used on the basis of our legitimate interests according to Art. 6 Para. 1 letter f DSGVO and an order processing contract according to Art. 28 Para. 3 S. 1 DSGVO. The mailing service provider can use the recipient’s data in pseudonymous form, i.e. without assignment to a user, to optimize or improve its own services, e.g. to technically optimize the dispatch and presentation of the newsletter or for statistical purposes. However, the mailing service does not use the data of our newsletter recipients to write them down itself or to pass the data on to third parties.
We would like to point out that we evaluate your user behaviour when sending our newsletter. We use an external service provider for mailing the newsletter and the data processing mentioned below. This service provider has been carefully selected and commissioned by us, is bound by our instructions and is regularly checked. For the evaluation of usage behaviour, the e-mails sent contain so-called web beacons or tracking pixels, which represent single-pixel image files stored on the website of our external service provider. For the evaluation we link the web beacons with your e-mail address and an individual ID. Links and/or QR codes received in the newsletter also contain this ID. With the data obtained in this way, we create a user profile in order to adapt the newsletter to your individual interests. We record when you read our newsletters, which links you click on in the newsletters, and draw conclusions about your personal interests. We link this data to actions taken by you on our website.
Your consent is obtained for the processing of the data within the scope of the sending process and reference is made to this data protection declaration. Alternatively, you can contact us via the e-mail address provided. In this case, the user’s personal data transmitted by e-mail will be stored. Please note that the extent of the personal data collected in the contact form also depends on what data you yourself disclose in the contact form, especially in the “Your message” field and by attaching your documents to an e-mail.
The legal basis for processing the data for sending the newsletter and the related performance measurement is based on the user’s consent under Art. 6 para. 1 lit. a, Art. 7 DSGVO in conjunction with § 7 para. 2 no. 3 UWG or on the legal permission under § 7 para. 3 UWG.
In addition, the legal basis for the processing of data transmitted in the course of sending an e-mail is Art. 6 para. 1 lit. f DSGVO. If the e-mail contact aims at the conclusion of a contract, then additional legal basis for the processing is Art. 6 exp. 1 lit. b DSGVO.
The processing of personal data from the input mask serves us to handle the established contact only. In the event of contact by e-mail, this also constitutes the necessary legitimate interest in the processing of the data. The other personal data processed during the sending process serve to prevent misuse of the contact form and to ensure the security of our information technology systems.
The data will be deleted as soon as they are no longer necessary to achieve the purpose for which they were collected. For the personal data from the input mask of the contact form and those that were sent by e-mail, this is the case when the respective conversation with the user is finished. The conversation is finished when it can be inferred from the circumstances that the facts in question have been finally clarified. The additional personal data collected during the sending process will be deleted after a period of 14 days at the latest.
Most browsers automatically accept cookies. However, you can configure your browser in a way that no cookies are stored on your computer or a message always appears before a new cookie is created. However, the complete deactivation of cookies can lead to the fact that you cannot use all functions of our website.
The user data collected in this way is pseudonymised by technical precautions. Therefore, it is no longer possible to assign the data to the user visiting our website. The data will not be stored together with other personal data of the users.
We use various services of Google Inc. on our website. “(“Google”), 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. You will find more detailed information on the individual specific Google services that we use on this website in the further data protection declaration. By integrating the Google services, Google may collect and process information (including personal data). It cannot be ruled out that Google may also transfer the information to a server in a third country.
As can be seen from Google’s Privacy Shield certification (found at » https://www.privacyshield.gov/list under the search term “Google”), Google is committed to the EU-US Privacy Shield Framework and the Swiss-US Privacy Shield Framework for the collection, use and storage of personal data from the member states of the EU and Switzerland. Google, including Google LLC and its wholly owned subsidiaries in the United States, has declared by certification that it complies with the Privacy Shield Principles. For more information, please visit » https://www.google.de/policies/privacy/frameworks/.
If you are signed in to your Google Account, Google may add the processed information to your account and treat it as personal information, depending on your account settings, see in particular » https://www.google.de/policies/privacy/partners.
To learn more about Google’s privacy settings, please visit » https://privacy.google.com/take-control.html.
This page uses so-called web fonts to display the font. These are provided by Google (» http://www.google.com/webfonts/). To do this, your browser loads the required web font into your browser cache when you visit our site. This is necessary so that your browser can also display an optically improved representation of our texts. If your browser does not support this feature, your computer will use a standard font for display. For more information about Google Web Fonts, visit » https://developers.google.com/fonts/faq?hl=en-GB&csw=1. For general information about Google’s privacy practices, visit » http://www.google.com/intl/de-DE/policies/privacy/. To do this, the browser you are using must connect to Google’s servers. This gives Google knowledge that our website has been accessed via your IP address. The use of Google Web Fonts is in the interest of a uniform and appealing presentation of our online offers. This represents a legitimate interest within the meaning of Art. 6 para. 1 lit. f DSGVO.
This page uses the map service Google Maps via an API. The provider is Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. To use the functions of Google Maps it is necessary to save your IP address. This information is usually transferred to a Google server in the USA and stored there. The provider of this site has no influence on this data transmission. The use of Google Maps is in the interest of an appealing representation of our online offers and enables the user to the places indicated by us on the web page more easily. This represents a legitimate interest within the meaning of Art. 6 para. 1 lit. f DSGVO. You can find more information on the handling of user data in Google’s data protection declaration: » www.google.de/intl/de/policies/privacy/.
This website uses Google Analytics, a web analysis service of Google Inc, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA. The use includes the “Universal Analytics” operating mode. This makes it possible to assign data, sessions and interactions across multiple devices to a pseudonymous user ID and thus analyze a user’s activities across devices.
Option 1: You can prevent cookies from being stored by setting your browser software accordingly. However, we would like to point out that in this case you may not be able to use all functions of this website to their full extent.
Option 2: You can prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading and installing a so-called browser add-on under the following link: » https://tools.google.com/dlpage/gaoptout?hl=en.
to complain to a supervisory authority pursuant to Art. 77 DSGVO. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or our registered offices.
You have the right to object at any time, for reasons arising from your particular situation, to the processing of personal data concerning you under Article 6(1)(e) or (f) of the DSBER; this also applies to profiling based on these provisions. The data controller no longer processes the personal data concerning you, unless he can prove compelling reasons worthy of protection for the processing, which outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims. If the personal data concerning you are processed for direct marketing purposes, you have the right to object at any time to the processing of the personal data concerning you for the purpose of such advertising; this also applies to profiling, insofar as it is associated with such direct marketing. If you object to the processing for direct marketing purposes, the personal data concerning you will no longer be processed for these purposes. You have the possibility to exercise your right of objection in connection with the use of Information Society services by means of automated procedures using technical specifications, notwithstanding EU-Directive 2002/58/EC.
In addition to this website, we also maintain presences in various social media, which you can access via corresponding buttons on our website. If you visit such a presence, personal data may be transmitted to the provider of the social network. In addition to storing the data you have entered in this social medium, other information may also be processed by the social network provider. In addition, the social networking provider may process the most important data of the computer system from which you visit it – such as your IP address, processor type and browser version used, including plug-ins. If you are logged in with your personal user account of the respective network while visiting such a website, this network can assign the visit to this account.
We also point out that we have no influence on the processing of data on these external websites.
We use the most common SSL procedure (Secure Socket Layer) in connection with the highest level of encryption supported by your browser. Usually this is a 256 bit encryption. If your browser does not support 256-bit encryption, we use 128-bit v3 technology instead. Whether a single page of our website is transmitted in encrypted form is indicated by the closed display of the key or lock symbol in the lower status bar of your browser. We also use suitable technical and organisational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or unauthorised access by third parties. Our security measures are continuously improved in line with technological developments.
This data protection declaration is currently valid. Due to the further development of our website and offers above or due to changed legal or official requirements, it may become necessary to change this data protection declaration. The current data protection declaration can be accessed and printed at any time on the website under » bskp.de/datenschutz/.

References: Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 28
 Art. 6
 Art. 7
 § 7
 § 7
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 77