Source: http://www.boom-luminaires.com/en/user-area/privacy-policy/
Timestamp: 2018-07-22 12:17:17
Document Index: 85278449

Matched Legal Cases: ['Art. 4', 'Art. 95', 'Art. 13', 'Art. 13', 'Art. 13', 'Art. 4', 'Art. 4', 'Art. 4', 'Art. 13', 'Art. 13', 'Art. 28', 'Art. 4', 'Art. 13', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 13', 'Art. 17', 'Art. 13', 'Art. 7', 'Art. 15', 'Art. 16', 'Art. 18', 'Art. 17', 'Art. 7', 'Art. 6', 'Art. 7', 'Art. 21', 'Art. 6', 'Art. 20', 'Art. 77']

Our privacy policy has changed. To continue, you must first read and accept the privacy policy.
The protection and security of your personal data are of primary importance to us. Accordingly we observe the statutory regulations in order to provide the best possible protection for your data. Below we would like to inform you about the type, scope and purpose of our data processing:
BEGA Gantenbrink-Leuchten KG (hereinafter “BEGA”) processes personal data as defined by Art. 4 (1) of the General Data Protection Regulation (GDPR) solely within the scope of the GDPR and data covered by Art. 95 GDPR in conjunction with sections 11-15a of the German Telemedia Act (TMG) solely within the scope of these provisions.
This privacy policy provides information in accordance with Art. 13 GDPR.
1. Contact details of the Controller (Art. 13 (1) a) GDPR)
Responsibility for operating the website and thus for handling personal data lies with
2. Contact details of the Data Protection Officer (Art. 13 (1) b) GDPR)
The responsible Data Protection Officer at BEGA is:
Mr M. Helling
c/o BEGA Gantenbrink-Leuchten KG
E-mail address: ds_beauftragter@bega.de
a. On its website, BEGA offers a public area and a private (access-protected) area (“user area”), which pose different usage requirements (see the terms and conditions of use). Accordingly there are also differences in the processing of personal data.
b. When the public area of the website is used, the user’s automatically anonymised IP address is saved. As a result of the anonymisation, it is impossible to identify the anonymised user and tracking their movement on the website does not allow for any conclusions to be drawn about a specific user.
c. The user is required to register or log in with an existing BEGA ID in order to use the access-protected user area.
The data listed below are data defined by Art. 4 (1) GDPR.
a. Visiting the website/free downloads
With every website visit and download of documents in the freely accessible area of the website, the respective user’s log files as listed below are recorded automatically:
The address of the preceding website visited
Every successful log-in to the user’s account
The e-mail address (solely within the web app).
In addition, the following log files are recorded within the context of use of the access-protected area:
(Un)successful log-in
Change of password by user
Change of user data
Error during deletion process for user
Error when re-sending the activation e-mail
(Un)successful activation
Error when sending the “forgotten password” e-mail
Data protection or terms and conditions of use were accepted by user
Error when sending e-mail
b. BEGA ID
BEGA processes the following data for receipt of the BEGA ID:
c. Contact by e-mail
If the user opts to contact BEGA by sending an e-mail to info@bega.de, the e-mail address, all data technically associated with the e-mail and the contents of the e-mail will be saved. In particular, the e-mail address, if personalised, may be a piece of personal data as defined by Art. 4 (1) GDPR, as may the e-mail contents or parts thereof.
d. Use of the contact form
BEGA processes the data supplied by the user via the contact form:
Application documents may also be submitted by e-mail (see the “Jobs” page). Data which are processed within this context are personal data as defined by Art. 4 (1) GDPR.
5. Purposes of the processing of the personal data (Art. 13 (1) c) GDPR)
The log files are processed in order to ensure the functionality of the website. The data are also used in order to optimise the website and ensure the security of the information technology systems. No analysis of the data is performed for marketing purposes.
The data entered by the user upon registration to receive the BEGA ID are used solely for the purpose of performing the functions offered as part of BEGA’s telemedia and for carrying out the contract of use. As such, the data are used solely for internal customer administration purposes and for processing enquiries from the registered user.
If users log in to their user account using their BEGA ID, they can create what are known as project lists. These are then saved in a BEGA database and can be accessed as long as the user account exists.
c. Making contact
The data entered by the user when making contact are used solely for the purpose of processing the user’s request.
The data are processed in order to determine the applicant’s qualifications and suitability for the BEGA vacancy to be filled.
6. Recipient/third parties/transfer to a third country (Art. 13 (1) e) and f) GDPR)
Alongside BEGA, recipients of the data may be third parties which process data on BEGA’s behalf or which have access to the data as part of their service provision to BEGA (e.g. IT service providers). There is a data processing agreement with these third parties pursuant to Art. 28 GDPR.
When BEGA is contracted by users to provide services or to supply products, it is necessary under certain circumstances to forward personal data such as name and address to companies which BEGA uses to provide a service or deliver a product. No other transfer of user data to third parties (Art. 4 (10) GDPR) will take place unless the user gives express consent.
The user has the option of downloading project lists within the user account (cf. terms and conditions of use). In this case, the user has the option to choose whether a sales partner pre-selected by BEGA and responsible for the site where the project is being conducted will receive the project list data and the user’s contact data (opt-in). Such an arrangement is not made without the user’s active choice.
All data are saved on servers or computers within the European Union; they are not transferred to a third country, nor are there any plans to do so.
The forwarding of personal data to governmental institutions and authorities takes place only within the scope of statutory regulations.
a. Session ID cookies
In the public area of the website, the user can create what is known as a watch list. BEGA uses so-called session ID cookies to save this list. Cookies are small text files which save the settings of websites, e.g. in the user’s web browser, in the course of using the website. The cookies are used to save user-related information and, amongst other things, enable the user to create watch lists (cf. terms and conditions of use). The session ID cookies used by BEGA are saved solely for the current session in the user’s web browser and are deleted automatically when the browser is closed.
Access-protected area
BEGA also uses session ID cookies within the access-protected area. As soon as the user has logged in to the access-protected area, the session ID cookies save the link to the website that was open at the time of the log-in, the language selected at the time of the log-in and the information about whether the privacy policy is to be displayed to the user. In addition, the remote user ID and user ID are recorded. The session ID cookies used by BEGA are saved solely for the current session in the user’s web browser and are deleted automatically when the browser is closed.
Use of the access-protected user area requires the user to allow the session ID cookies used by BEGA and to permit the saving of data by sessionStorage.
The Matomo open-source analytics tool, which saves a cookie on the user’s hard disk for seven days, is used for the processing of statistical data concerning the use of this website (public and access-protected area), e.g. how often which products are placed on watch lists. No personal data are collected when the statistical data are transferred. All data processed by Matomo are stored on the BEGA servers in the Netherlands. The user’s IP address is truncated before it is stored in order to prevent any conclusions being drawn about the natural person. BEGA uses Matomo to analyse usage behaviour solely for internal purposes and to improve its range of products and services. This involves recording the user’s complete navigation path on the website, therefore including details about which sections/products are accessed during use of the website, scrolling behaviour, the playing of videos, time, operating system, duration of use, links, exit and anonymised IP address.
In the case of users who have activated a “Do not track” function in their browser, no web tracking is performed with Matomo. Moreover, it is possible to opt out of the anonymous usage data analysis by Matomo via the opt-out page: Activate or deactivate data collection by Matomo..
BEGA operates a video channel on the YouTube website, which can be accessed from www.bega.com via a link. The YouTube website operator is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA (hereinafter “YouTube”).
When the user clicks on the link, a connection is established to the YouTube servers. As part of this process, information is passed on to the YouTube server about which pages of the www.bega.com website the user has visited.
Further information about the handling of user data can be found in the YouTube privacy policy at: https://policies.google.com/privacy.
Links are also used which take the user to the Facebook social network, which is operated by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA (hereinafter “Facebook”).
When the user clicks on the Facebook link on www.bega.com, the user is taken to the BEGA Facebook profile and information is passed on to the Facebook server about which BEGA web pages the user has visited. If, at this point in time, the user is logged in as a Facebook member, Facebook will associate this information with the user’s personal Facebook account.
If plug-in functions are used (e.g. clicking on the “Like” button, leaving a comment), this information is also associated with the Facebook account.
More detailed information about how Facebook collects and uses data, user rights in this regard and ways of protecting one’s privacy can be found in Facebook’s data policy; https://www.facebook.com/about/privacy/update?ref=old_policy
BEGA operates a Company Page on the LinkedIn network. The supplier is LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA (hereinafter “LinkedIn”). If the user clicks on the LinkedIn link on www.bega.com, the user is taken to the Company Page maintained by BEGA.
If the user clicks on the LinkedIn “Recommend” button and is simultaneously logged in to his or her LinkedIn account, it is possible for LinkedIn to associate the visit to the BEGA website with the user’s account. Please note that BEGA, as the supplier of the pages, has no knowledge about the content of the transferred data or usage of these data by LinkedIn.
Further information can be found in LinkedIn’s privacy policy at: https://www.linkedin.com/legal/privacy-policy.
There are also links to the Pinterest social network, which is operated by Pinterest Inc., 808 Brannan Street, San Francisco, CA 94103-490, USA (hereinafter “Pinterest”). If the user clicks on the link on www.bega.com, the user is taken to the Pinterest page operated by BEGA.
Further information about the purpose, scope, further processing and use of the data by Pinterest as well as the user’s rights and ways of protecting one’s privacy can be found in Pinterest’s privacy policy: https://about.pinterest.com/de/privacy-policy
BEGA uses XING network functions. The provider is XING AG, Dammtorstraße 29-32, 20354 Hamburg, Germany (hereinafter “Xing”). Every time a user visits one of our pages which contains XING functions, a connection to XING servers is established. To our knowledge, no personal data are saved during this process.
f. houzz
There are also links on www.bega.com which lead to the houzz platform, which is operated by Houzz Inc., 285 Hamilton Avenue, Palo Alto, CA 94301, USA (hereinafter “houzz”). If the user clicks on the link on www.bega.com, the user is taken to the houzz information page about BEGA.
Further information about the purpose, scope, further processing and use of the data by houzz as well as the user’s rights and ways of protecting one’s privacy can be found in the houzz privacy policy: https://www.houzz.de/privacyPolicy
9. Legal basis for the processing of data (Art. 13 (1) c) GDPR)
The legal basis for the processing of data within the public area using cookies, analytics tools, social media links and log files is Art. 6 (1) f) GDPR.
The legal basis for the processing of data in the access-protected area is Art. 6 (1) b) GDPR.
The legal basis for the processing of data which are transferred when an e-mail is sent is Art. 6 (1) f) GDPR if the sender is not yet a customer or is not already in a business relationship with us in some other way. If there is a contractual relationship already or if this is to be set up directly on the sender’s initiative, the legal basis is Art. 6 (1) b) GDPR.
c. Use of the contact form
The legal basis for the processing of the data provided is Art. 6 (1) a) GDPR. Before submitting the data you have supplied in the form, you give your consent for your personal data to be transferred and processed for the purpose of processing your enquiry.
d. Submission of application documents
The legal basis for processing and, in particular, for temporarily storing the data provided in the application documents is section 26 of the (new) German Federal Data Protection Act (BDSG).
10. Period for which the personal data will be stored (Art. 13 (2) a) GDPR)
The data will be stored until they are no longer necessary in relation to the purposes for which they were collected or until consent that was given is withdrawn, subject in each case to the restrictions of Art. 17 (3) GDPR.
Log files: are deleted automatically every 14 days
Download: on completion of the download
Transmission of contact form / e-mail: The data are deleted one year after the enquiry has been answered unless there has been further communication on the same topic before this deadline has passed or the data are still required due to a contractual relationship (for the purpose of executing/implementing the contract) or need to be kept for periods defined by law due to statutory storage obligations.
Registration details: once the usage relationship has come to an end
Application documents: The data are deleted one year after a rejection has been sent. The documents of any applicant appointed by BEGA are transferred to a personal file.
Cookies/analytics tools: see above
11. User’s rights (Art. 13 (2) b) – e), Art. 7 (3) GDPR).
The user has the right at all times, subject to the legal requirements being satisfied, to information about the personal data concerning him or her that we have stored (Art. 15 GDPR), as well as the right to rectification (Art. 16 GDPR), the right to restriction of processing (Art. 18 GDPR) and the right to erasure of personal data concerning him or her (Art. 17 GDPR).
If the user has exercised his or her right to rectification, erasure or restriction of processing with BEGA, BEGA will communicate this rectification or erasure of the data or restriction of processing to all recipients to whom the personal data in question were disclosed, unless this proves impossible or involves a disproportionate amount of work.
The user also has the right, in respect of consent given (Art. 7, Art. 6 (1) a) GDPR), to withdraw this consent (Art. 7 (3) GDPR). The proper withdrawal of consent does not affect the lawfulness of the collection of data prior to this withdrawal.
In addition, the user has the right, for reasons arising from his or her particular situation, to object (Art. 21 GDPR) at any time to the processing of the personal data concerning him or her on the basis of Art. 6 (1) e) 6 (1) f) GDPR. 21 GDPR).
The user also has the right, subject to the legal conditions being satisfied, to receive the personal data concerning him or her that he or she has provided to BEGA in a structured, commonly used and machine-readable format (right to data portability, Art. 20 GDPR).
In order to exercise these rights, the user should use the contact details in section 1 or 2.
The user further has the right, subject to the legal conditions being satisfied, to lodge a complaint with a supervisory authority (Art. 77 GDPR).
12. BEGA’s rights
For the reasons listed in the terms and conditions of use, BEGA is entitled to block a user’s right of access to the access-protected area by the deactivation or complete deletion of the user account by an administrator. In the case of blocking, the previously collected data will not be deleted automatically. The user’s right to request the deletion of his or her data is not affected by this. BEGA reserves the right to place the e-mail address of the blocked user on a so-called blacklist, preventing him from re-registering with this e-mail address.