Source: https://www.buss-offshore-solutions.com/en/privacy-policy/
Timestamp: 2019-04-24 11:14:36+00:00

Document:
The EU General Data Protection Regulations (from here on GDPR) apply throughout Europe. We would like to inform you about the processing of personal data carried out by our company in accordance with this regulation (compare Articles 13 and 14 GDPR).
If you have questions or comments on this data protection declaration you may direct them to the place given in points 2 or 3 at any time.
In this section of the data protection declaration you will find information on the scope of application, on the person responsible for the data processing, his data protection officer and on data security.
For the purpose of implementing application processes all necessary data will be processed by the contracted Company.
When the Buss Offshore Solutions website/application is called up various information between your terminal device and our server will be exchanged. This may also be personal data. The information collected in this way will be used, amongst other things, to optimize our website.
Always, whenever this data protection declaration is referenced from one of our offers (e.g. Websites, subdomains, mobile applications, web services or integrations in third party sites), regardless of the way in which you call up or use these.
All of these offers will be referred to collectively as “Services”.
To develop the measures called for in Art. 32 of GDPR and thereby attain a level of protection appropriate to the risk, we have in our company established the Information Security Standard according to ISO/IEC 17799:2000.
The recommendations of ISO/IEC 17799:2000 include requirements and assistance for various control mechanisms for information security, as well as concrete measures for the organizational and technical protection of IT infrastructures. They are designed with the aim of ensuring an appropriate level of protection.
In this section of the data protection declaration we will provide you with detailed information on the processing of personal data within the framework of our services. For the sake of clarity we organize this information according to specific functions of our services. During normal use of the services different functions, and therefore also different processing, may take effect either in succession or at the same time.
There is neither a contractual nor legal obligation to provide personal data. You are not obliged to provide data.
The consequence of not providing data that is required (data that is marked as mandatory information when entering it) is that the service concerned cannot be provided. Other than that the consequence of non-provision if necessary is that our services cannot be provided in the same form and Quality.
In various cases you have the option of also giving us your consent in connection with the processing described below (if necessary for part of the data) for further processing. In this case we are providing you with information in connection with the submission of the respective declaration of consent separately, on all modalities and the range of consent and what we aim to do with this processing.
If we transfer data to third countries, that is countries outside of the European Union, then the transfer takes place exclusively in compliance with the legally controlled admissibility requirements.
Our data processing to a large extent is done using so-called Hosting Service Providers, who provide us with storage space and processing capacities in their data centres and under our instruction also process personal data on our behalf. These service providers process data either exclusively within the EU or with the aid of the EU standard data protection clauses we have an appropriate level of data protection guaranteed.
We pass on personal data to state authorities (including law enforcement agencies), if this is necessary to fulfil a legal obligation, which we are subject to (legal basis: Art. 6, para. 1C) GDPR) or if it is required for the enforcement, execution or defence of legal claims (legal basis Art. 6, para 1 f) GDPR).
It is also possible for us to continue to store your data, if you have expressly given us your express consent for this.
Besides the explicit categories of recipients given below, personal data may, if necessary, also be sent to the following categories of recipients: Shipping providers, telephone and fax providers.
Here we will describe how we process your personal details when our services are called up. We point out in particular that the sending of access data to external content providers (see under b), due to the technical functioning of the information transfer, is inevitable.
In the following, we describe how your personal data is processed using tracking technologies for analysis and optimization of our services, as well as for advertising purposes.
The tracking procedure depicted processes personal data only in pseudonymous form. There is no connection to a specific identified natural person, and the data will not be conflated with information about the bearer of the pseudonym.
The analysis of user behaviour through tracking helps us check how effective our services our, improve them and adjust them to user needs, as well as address errors. It also serves to statistically determine key figures regarding the use of our services (reach, use intensity, surfing patterns of users) - based on uniform standard methods - and thus obtain comparable values across the market.
Tracking to gauge the success of ad campaigns serves to improve our ads for the future and also allows marketers and advertisers to improve their ads accordingly. Tracking to improve the display of ads serves the purpose of displaying ads to users based on their interests, and increasing advertising success and thus advertising revenue as well.
Data transmitted to non-member states?
As an alternative to the browser add-on or if you are using browsers on mobile devices, please click this Link, to prevent Google Analytics from collecting data within this website in the future.
If you would like to opt out of interest-based advertising, you can also search for the website http://www.youronlinechoices.com/de/, click “Preference management” there and follow the instructions to prevent all or some of the service providers listed there from using data for interest-based advertising. However, you will still receive ads that are not based on your interests.
This website does not contain any add-on programs (plug-ins) for social networks.
If we process your personal data for the purposes of direct advertising, you have the right to object to the processing of your personal data for this sort of advertising at any time, with effect for the future; this also applies to profiling related to such direct advertising.
You also have the right to object, on grounds related to your particular situation, at any time to processing of personal data that concerns you based on point e) or f) of art. 6(1) GDPR; this also applies to profiling based on these provisions.
You may assert your right to object at no cost.
You can reach us using the contact information provided under I.2.
You have the right to obtain confirmation as to whether or not personal data concerning you is being processed by us and, if it is, which personal data this is and other information pursuant to art. 15 GDPR.
You may assert your right of access in writing.
You have the right to request that we immediately rectify inaccurate personal data concerning you (art. 16 GDPR). Taking into account the purposes of the processing, you have the right to have incomplete personal data completed - including by means of providing a supplementary statement.
You have the right to request that we delete the personal data concerning you without delay where one of the grounds specified in art. 17(1) GDPR applies and processing is not required for one of the purposes regulated in art. 17(3) GDPR.
You may assert your right to erasure in writing.
You have the right to request the restriction of processing of your personal data where one of the requirements under art. 18(1)A)-d) GDPR applies. You may assert your right to the restriction of processing in writing.
You have the right to receive the personal data concerning you that you provided to us in a structured, commonly used and machine-readable format. You also have the right to transmit that data to another controller without hindrance from us or to have us transmit it directly where technically feasible. This shall always apply where the basis of data processing is consent or a contract and data is processed automatically. Thus this does not apply to data held in paper form.
If processing is based on your consent, you have the right to revoke this consent at any time. This does not affect the legality of processing based on consent up to the time of revocation.
The term “cookie” actually comes from English; its original meaning can be translated into German as “Keks.” When used in relation to the internet, however, a cookie refers to a small text file that is stored locally on the user’s computer when they visit a website. This file stores data about the user’s behaviour. If the browser is accessed and the respective website is visited again, the cookie comes into use and used the data stored to provide the web server with information about the user’s surfing behaviour.
So a cookie in this context is not a biscuit, but a piece of information that a website stores locally on the user’s computer in a small text file. This can be in the form of settings that a user has already made on their end, but can also be information that the website has independently collected from the user. Later, these locally stored text files can be read by the same web server that stored them. Most browsers accept cookies automatically. You can manage cookies by using browser functions (usually under “Options” or Settings”). This disables the storing of cookies, allows you to consent to cookies in individual cases, or otherwise restricts their use. You can also erase cookies at any time.
Any information relating to an identified or identifiable natural person. Identifiable refers to a natural person who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, identification number, location data, online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person.
Any operation or set of operations that is performed on personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or modification, retrieval, consultation, use, disclosure by transmission, distribution or otherwise making available, alignment or combination, restriction, erasure or destruction.
A natural or legal person, public authority, agency or other body that processes personal data on behalf of the controller.
Any form of automated processing of personal data consisting of the use of that personal data to evaluate certain personal aspects related to a natural person, in particular to analyse or predict aspects concerning that person’s performance at work, economic situation, health, personal preferences, interests, reliability, behaviour, location or movements.
Our offers to which this privacy statement applies (see scope of application).
The collection of data and its evaluation regarding the behaviour of visitors to our services.
Tracking may be done through the activity logs (log files) stored on our web servers or through data collection from your device via pixels, cookies and similar tracking technologies.
The privacy statement is currently in effect.

References: Art. 32
 Art. 6
 Art. 6
 art. 6
 art. 15
 art. 17
 art. 17
 art. 18