Source: https://at.burgbad.com/en/company/privacy-statement/
Timestamp: 2019-04-25 19:46:02+00:00

Document:
Thank you for visiting our website at www.burgbad.de/de and for your interest in our company. The protection of your personal data is important to us. Personal data is information about personal or factual circumstances of a specific or identifiable natural person. This includes, for example, the real name, address, telephone number and date of birth, but also all other data that can be related to an identifiable person. Since personal data enjoys special legal protection, it is only collected by us insofar as this is necessary for the provision of our website and the performance of our services. What follows is a description of the personal information we collect during your visit to our website and how we use it. Our data protection practice complies with the legal regulations, in particular those of the Federal Data Protection Act (BDSG), the Telemedia Act (TMG) and the General Data Protection Regulation of the EU (GDPR). We will only collect, process and store your personal data insofar as this is necessary for the functional provision of this website and our contents and services, as well as for the processing of inquiries and, if applicable, for the processing of orders and conclusion of contracts, but only insofar as this is in a legitimate interest within the meaning of Art. 6 para. 1 sentence 1 lit. f of the GDPR or insofar as any other justification exists. Only if you have given your prior consent separately, will your data also be used for further, precisely defined purposes, e.g. for sending advertising information in the form of newsletters.
This data is stored in the log files of our system. This data is not stored together with personal data of any specific user, meaning that visitors of individual pages cannot be identified.
The legal basis for the processing of personal data is Art. 6 para.1 lit.f of the GDPR (legitimate interest).
Our legitimate interest is to ensure that the purpose described below is achieved.
Logging takes place to ensure that our website remains compatible for as many visitors as possible, to prevent abuse and for troubleshooting purposes. For this purpose, it is necessary to log technical data of the accessing computer in order to be able to respond as early as possible to display errors, attacks on our IT systems and/or errors in the functionality of our website. In addition, we use the data to optimize our website and to ensure the security of our IT systems.
The above technical data will be deleted as soon as it is no longer required to ensure the compatibility of the website for all visitors, but no later than three months after accessing our website.
- Scope of processing of personal data entered in our contact forms.
The data collected via our contact form/s will only be used for processing the specific contact request received via the contact form.
After processing your request, we will delete the data collected immediately, unless there are legal retention periods to comply with.
Your rights of objection and removal are based on the general regulations on the right of objection and removal under data protection law described below in this data protection declaration.
Our website makes use of a web service offered by Website-Check GmbH, Beethovenstraße 24 in 66111 Saarbrücken, Germany (hereinafter: website-check.de). We use this data to ensure proper functioning of our entire website. As a result, your browser may transmit personal data to website-check.de. The legal basis for data processing is Art. 6 para. 1 lit. f of the GDPR (legitimate interest). Legitimate interest consists in the error-free functioning of the website. Data will be deleted as soon as the purpose of its collection has been fulfilled. Further information on the handling of the transferred data can be found in the data protection declaration of website-check.de: https://www.website-check.de/datenschutzerklaerung/. You can prevent website-check.de from collecting and processing your data by disabling the execution of script code in your browser or by installing a script blocker in your browser (available for example at www.noscript.net or www.ghostery.com).
Our website makes use of a web service offered by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter: Doubleclick). We use this data to ensure proper functioning of our entire website. As a result, your browser may transmit personal data to Doubleclick. The legal basis for data processing is Art. 6 para. 1 lit. f of the GDPR. Legitimate interest consists in the error-free functioning of the website. Doubleclick is certified under the EU-US Privacy Shield Agreement (see https://www.privacyshield.gov/list). Data will be deleted as soon as the purpose of its collection has been fulfilled. Further information on the handling of the transferred data can be found in the data protection declaration of Doubleclick: https://policies.google.com/privacy?hl=en. You can prevent Doubleclick from collecting and processing your data by disabling the execution of script code in your browser or by installing a script blocker in your browser (available for example at www.noscript.net or www.ghostery.com).
Our website makes use of a web service offered by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter: Google). We use this data to ensure proper functioning of our entire website. As a result, your browser may transmit personal data to Google. The legal basis for data processing is Art. 6 para. 1 lit. f of the GDPR. Legitimate interest consists in the error-free functioning of the website. Google is certified under the EU-US Privacy Shield Agreement (see https://www.privacyshield.gov/list). Data will be deleted as soon as the purpose of its collection has been fulfilled. Further information on the handling of the transferred data can be found in the data protection declaration of Google: https://policies.google.com/privacy?hl=en. You can prevent Google from collecting and processing your data by disabling the execution of script code in your browser or by installing a script blocker in your browser (available for example at www.noscript.net or www.ghostery.com).
Our website makes use of a web service offered by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter: Google Maps). We use this data to ensure proper functioning of our entire website. As a result, your browser may transmit personal data to Google Maps. The legal basis for data processing is Art. 6 para. 1 lit. f of the GDPR. Legitimate interest consists in the error-free functioning of the website. Google Maps is certified under the EU-US Privacy Shield Agreement (see https://www.privacyshield.gov/list).
Data will be deleted as soon as the purpose of its collection has been fulfilled. Further information on the handling of the transferred data can be found in the data protection declaration of Google Maps: https://policies.google.com/privacy?hl=en. You can prevent Google Maps from collecting and processing your data by disabling the execution of script code in your browser or by installing a script blocker in your browser (available for example at www.noscript.net or www.ghostery.com).
Our website makes use of a web service offered by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter: Google APIs).
We use this data to ensure proper functioning of our entire website. As a result, your browser may transmit personal data to Google APIs. The legal basis for data processing is Art. 6 para. 1 lit. f of the GDPR. Legitimate interest consists in the error-free functioning of the website. Google APIs are certified under the EU-US Privacy Shield Agreement (see https://www.privacyshield.gov/list). Data will be deleted as soon as the purpose of its collection has been fulfilled. Further information on the handling of the transferred data can be found in the data protection declaration of Google APIs: https://policies.google.com/privacy?hl=en. You can prevent Google APIs from collecting and processing your data by disabling the execution of script code in your browser or by installing a script blocker in your browser (available for example at www.noscript.net or www.ghostery.com).
The legal basis for the processing of personal datais Art. 6 para.1 lit.f of the GDPR (legitimate interest). Our legitimate interest is to maintain the full functionality of our website, to increase its usability and to enable a more customised approach. Identification of individual visitors of a page is only possible with the help of cookie technology if the visitor of a page has previously consented to providing us with personal data.
The cookies are set by our website in order to maintain the full functionality of our website and to improve its usability. In addition, cookie technology enables us to recognise individual visitors using pseudonyms, e.g. an individual, arbitrary ID, so that we are able to offer more customised services.
Our cookies are stored in your browser until they are deleted or, if it is a session cookie, until the session has expired.
Your personal data is protected by technological and organisational measures during its collection, storage and processing in such a way that it cannot be accessed by third parties. In the case of unencrypted communication by e-mail, we cannot guarantee complete data security during transmission to our IT systems. We therefore recommend encrypted or postal communication for information requiring high confidentiality.
We expressly point out that our e-mail system has an automated archiving function. All incoming and outgoing e-mails are digitally archived in a audit-proof manner. The legal basis for the processing of personal data is Art. 6 para.1 lit.f of the GDPR (legitimate interest). Our legitimate interest is compliance with tax and commercial law requirements (e.g. Sections 146, 147 of the German Fiscal Code (AO)).
The purpose of archiving is to comply with tax and commercial law requirements (e.g. Sections 146, 147 AO).
If you have any questions regarding our e-mail archiving system, please contact our data protection officer. We would also like to point out that we only consider applications in PDF format. Zipped files (WinZip, WinRAR, 7Zip, etc.) are filtered out by our security systems and hence not delivered. We do not consider applications in Word or other file formats and delete them unread. Please note that unencrypted application documents sent by e-mail may be opened by third parties before they are received by our IT systems. We assume that you agree that we will also reply to unencrypted application e-mails without using encryption. If you do not agree to this, please include a note in your application e-mail.
You have the right that we provide you with the personal data that you have transmitted to us in a structured, common and machine-readable format. You can also request that we transmit this data to a third party immediately upon your first instruction, provided that the processing is based on a consent pursuant to Art. 6 para. 1 lit. a of the GDPR or Art. 9 para. 2 lit. a of the GDPR or on a contract pursuant to Art. 6 para. 1 lit. b of the GDPR and the processing is carried out by us within the framework of automated data processing. In exercising this right of data transferability, you also have the right to have the personal data concerning you transferred directly by a data controller to another data controller, insofar as this is technically feasible. The freedoms and rights of other persons must not be affected by this. The right to transferability shall not apply to the processing of personal data required for the performance of a task in the public interest or in the exercise of official authority conferred on the controller.
If you suspect that your data is being processed illegally on our website, you can of course seek judicial clarification of the problem at any time. In any case, you always have the option of contacting a supervisory authority. You have the right of appeal in the EU Member State of your place of residence, your place of work and/or the place of the alleged infringement, i.e. you can choose the supervisory authority to which you turn at the above-mentioned places. The supervisory authority to which the complaint has been lodged will then inform you of the status and outcome of your complaint, including the possibility of a judicial remedy under Article 78 of the GDPR.

References: Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 9
 Art. 6