Source: https://www.baumerhhs.com/footer/data-protection-declaration.html
Timestamp: 2019-04-19 04:56:01+00:00

Document:
The controller has commissioned an external data protection officer. The data protection officer can be reached by email at datenschutz(at)m-consecom.de.
Provision of data is conducted on your request. Personal data processed during communication are deleted upon expiry of the statutory retention periods if the controller has no legitimate interest in further retention. In any event, data are continued to be stored only if they are truly necessary for the corresponding purpose. Personal data are anonymised as far as possible.
If you have consented or if a legal provision applies, the controller may process your data for advertising purposes.
The admissibility of such processing is based on Art. 6 (1) f) GDPR according to which processing is lawful if it is necessary for the purposes of the legitimate interests pursued by the Controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data.
The use of information for marketing purposes represents a legitimate interest according to Art. 6 (1) f) GDPR. The controller depends on actively offering his services to new and or existing customers.
As a customer of the controller, you might get recommendations for the controller’s services and products via e-mail. Those recommendations are based on previous purchasing habits.
The provision of the data is neither required by law nor by contract. However, it is required to obtain information from the controller. Failure to provide means that the operator is unable to provide you with information about new products.
In the case of direct advertising to customers, § 7 (3) UWG applies, according to which unreasonable harassment in advertising using electronic mail is not to be assumed in the cases mentioned therein. You are able to object to the use at any time without incurring any costs other than the transmission costs according to the basic tariffs.
The provision of the data is necessary for the conclusion of a contract. Failure to provide means that no contractual relationship can be established.
Cookies do not damage your computer in any way. They do not contain viruses and also do not allow the operator to spy on you. There are two types of cookies.
This type of cookie allows your computer to be recognised when you visit the website on a re-entry. The cookies allow the operator to track your use behaviour for the purposes listed above and to an appropriate extent. Cookies also allow you to optimally surf the operator's website. These data are collected by the operator only in anonymised form.
The legal admissibility of this data processing is based on Art. 6 (1) f) GDPR, according to which processing is lawful when it is necessary to safeguard the legitimate interests of the controller or a third party, so long as these interests are not overridden by the fundamental rights or freedoms of the data subject, which require the protection of personal data. The legitimate interests of the controller involve the provision of a website that contains no errors and the opportunity to offer visitors the best user experience. Provision of your data is not prescribed by law. It is possible to visit the website without cookies.
If you do not want the operator to recognise your computer, you can prevent the storage of cookies on your hard drives by selecting the option "do not accept cookies" on your browser settings. To find out specifically how to do this, please read the instructions provided by your browser manufacturer. If you choose to accept no cookies, this may limit the functionality of the website.
Temporary cookies are automatically deleted when you close your browser (session cookies). In contrast, permanent cookies expire upon date of reaching the given lifetime. These types of cookies allow your computer to be recognised on your next visit on the controller’s website.
Contractual partners, employees of the controller and its subsidiaries have the possibility to log in with their user name and password. The nominated persons gain access at the beginning of the contract. The login gives them access to internal information.
The admissibility of such processing is based on Art. 6 (1) f) GDPR, according to which processing is lawful if it is necessary for the purposes of the legitimate interests pursued by the Controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data.
The legitimate interest of the Controller lies within the provision of additional information to its employees.
The provision of the data is neither required by law nor by contract. Failure to provide means that the employee does not have access to the employee area.
The data collected during login will be deleted if the Controller has no legitimate interest in further storage.
The data will be used by controller in order to perform the application procedure. After registration you can log in with your user name and password and follow the application procedure.
The Controller processes your data for the purpose of carrying out the application procedure. The admissibility of this processing is governed by § 26 BDSG (new), according to which personal data of employees may be processed for employment purposes if this is necessary for the decision on the establishment of an employment relationship. If you do not provide the requested information and documents to the Controller, he cannot consider you in the application procedure. The provision of the data is contractually prescribed.
The operator uses Google Maps to enable you to use the interactive route finding maps.
The legal admissibility of this data processing may also be based on Art. 6 (1) f) GDPR, according to which processing is lawful when it is necessary to safeguard the legitimate interests of the controller or a third party, so long as these interests are not overridden by the fundamental rights or freedoms of the data subject, which require the protection of personal data. The use of data for the purpose of providing the route finding maps constitutes a legitimate interest of the operator within the meaning of Article 6 (1) f) of the GDPR. This facilitates access to the operator's place of business. The provision of data is neither required by law nor required for the performance of a contract. Failure to provide the data will result in you being unable to use the service.
Upon request, the operator shall provide information as to whether your data is being processes. The operator endeavours to respond to requests without undue delay.
You have the right to obtain from the controller the erasure of personal data concerning you without undue delay and the controller has the obligation to erase personal data without undue delay where one of the grounds listed in Art. 17 (1) a)-f) applies.
You have the right to object, on grounds relating to your particular situation, at any time to processing of your personal data concerning that is based on Art. 6 (1) e) or f), including profiling based on those provisions. The controller shall no longer process your personal data unless the controller demonstrates compelling legitimate grounds for the processing that override your interests, rights and freedoms or if processing is used for the establishment, exercise or defence of legal claims.
Where personal data is processed for scientific or historical research purposes or statistical purposes pursuant to Art. 89 (1) GDPR, you have the right to object to processing of your personal data on grounds relating to your particular situation, unless the processing is necessary for the performance of a task carried out for reasons of public interest.
You have the right to receive information about your personal data that you have provided to a controller, in a structured, commonly used and machine-readable format and you have the right to transmit these data to another controller without hindrance from the controller to which the personal data have been provided, so long as the processing is based on consent pursuant to Art. 6 (1) a) GDPR, Art. 9 (2) a) GDPR or on a contract pursuant to Art. 6 (1) b) GDPR and if the processing is carried out by automated means.
Information regarding the processing of personal data by Baumer hhs in relation to the sale and distribution of our products.

References: Art. 6
 Art. 6
 § 7
 Art. 6
 Art. 6
 § 26
 Art. 6
 Art. 17
 Art. 6
 Art. 89
 Art. 6
 Art. 9
 Art. 6