Privacy Statement of bdtronic GmbH

We are taking the protection of your personal data very seriously. Your personal data is processed in compliance with the applicable regulations on the protection of personal data, especially the EU General Data Protection Regulation (EU-GDPR) and the country-specific supplementary law applying. With this privacy statement, we are providing information on how bdtronic GmbH is processing your personal data and the right you are entitled to as a data subject.

Personal data is any information which provides for the identification of a natural person. Such, among others, is your name, birthdate, postal address, telephone number, e-mail-address, but also your IP-address.

Anonymous data is present, if the information may not be linked to the data subject.

Your Rights as a Data Subject

First of all, we want to inform you about the rights you are entitled to as a data subject. These rights are stipulated by Articles 15 to 22 of the EU-GDPR. It consists of the rights to:

• Data access (Art. 15 EU-GDPR)
• Deletion (Art. 17 EU-GDPR)
• Rectification (Art. 16 EU-GDPR)
• Data portability (Art. 20 EU-GDPR)
• Restriction of data processing (Art. 18 EU-GDPR)
• Contradiction against data processing (Art. 21 EU-GDPR).

To exercise these rights, please turn to datenschutz@bdtronic.de. The same applies, if you should have questions on data privacy at our company or if you should seek to withdraw a declaration of consent you may have provided. Moreover, you are entitled to lodge a complaint with a data protection supervisory authority.

Purposes and Legal Bases of Data Processing

Whenever your personal data is processed all provisions of the EU-GDPR and all further legal provisions on data privacy applying are complied with. The legal bases for processing do especially originate from Art. 6 EU-GDPR.

We are processing your data for the initiation of a business relation, to execute contracts and to comply with legal obligations, to offering goods and services and to strengthen the customer-relation., which may contain analyses for purposes of marketing and direct marketing.

Your declaration of consent may also constitute a legal basis for data processing. Prior to any such declaration of consent you may grant, we will provide information on the purpose of data processing and about your right to contradiction, as well.

Transfer of Data

Your data will solely be transferred to third parties, if there is a legal requirement or your according declaration of consent present. Your personal data will not be transferred in any other case but if there is a provision of law we are required to comply with (Transfer to external bodies, such as, e.g. supervisor authorities or criminal prosecution services).

Data Recipients / Categories of Data Recipients

Within our company we ensure, that your data is accessible only to the persons and functions, who require the data to execute their respective contractual and legal obligations.

In certain cases, service providers are supporting our company departments in fulfilling their tasks. All these service providers have been entered into an according data protection contract with.

Transfer of Data to Third Countries/ Intent to transfer Data to Third Countries

A transfer of data to third countries (to outside the European Union respectively the European Economic Area) does only take place if such is required to execute a contractual relationship, for legal compliance or if it can be based on your declaration of consent. If so required, we may transfer your personal data to our subsidiaries in the USA, the UK, China, India and to a service Provider based in South Korea. The required level of data protection, in each of these cases, is safeguarded by EU-standard contractual clauses.

Data Retention

Your data is retained as long as it is required to be retained for the respectively underlying purpose of processing. Please be aware, that certain legal provisions may require a retention of data which may even exceed this retention. Such especially applies in case of commercial or tax-related retention (e.g. Tax Code, Code of Duties, etc.). As soon as retention is not mandatory any longer, your data is deleted as soon as the underlying purpose of processing ceases to apply.

In addition, we ma y store data in case you should have granted your consent or in cases of legal dispute for which we may use data as evidence within the applying period of statutory retention, which may last for up to thirty years – where the standard retention is this regard is three years.

Safe Transfer of Your Data

For the best possible protection of your data against incidental or intentional manipulation, loss, destruction or access by unauthorized persons, we have implemented according technical and organizational security measures. The security levels are under ongoing reviews and adjustment to current standards, which we are executing in cooperation with security experts.

The exchange of data with our website is encrypted. As a transfer protocol we are offering HTTPS, where current encryption protocols are implemented. Additionally, you may use alternative ways of communication (e.g. surface mail).

Obligation to provide Data

A number of personal data is required to initiate, execute and terminate contractual relations and to fulfill corresponding contractual and legal obligations. The same applies for the use of our website and its functions.

Details are summarized in the previous section. In certain cases, data has to be provided, respectively processed for compelling legal reasons. Please consider, that it may not be possible to answer your request or to execute an underlying contractual relationship if the data required is not provided.

Categories, Sources and Origin of Data

Which data we process is subject to the respective context and depends on whether you, e.g. are asking a question through our contact form or subscribe to our newsletter.

Please remind, that we may provide privacy information on special processing situations aside from this data privacy statement.

Data processed in Case of a Visit to our Website

• Name of the internet service provider
• Information on the website from which you are surfing our website (referrer-URL)
• Web-browser and operating system
• The IP-address assigned to your device by your internet service provider
• Data downloaded, volume of data transmitted, files/ data exported
• Information on the websites you browse with us incl. time and date
• For reasons of technical security (especially, to prevent attack-attempts in regard of our web-servers) this data is processed as per Art. 6 I 1 f EU-GDPR. The data is anonymized by shortening the IP-address after seven days at the latest, which means the data can no longer be linked to you personally.

Concerning a contact request the following data is processed:

• Company name
• Company address
• Country/ region
• Name, surname
• Contact data
• Information on your wishes and interests
• Data you may upload (if applicable)

Concerning newsletters, the following data is processed:

• Name, surname
• E-mail-address
• Company name

Concerning our service contacts (e.g. Maintenance plan/ technical support/ Remodeling of installations/ requests for construction guidelines), the following data is processed:

• E-mail-address
• Particularities of your request (e.g. company name, location of the installation, serial number)
• Telephone number
• Pictures or further data you may upload through our form (if applicable)

Automated decision making

There is no fully automated decision making in place when it comes to taking decisions.

Usercentrics (Art. 6 I 1 c EU-GDPR)

To get an administer you declaration of consent, we are using the Usercentrics Consent Management Platform, which is operated by Usercentrics GmbH, Sendlinger Straße 7, 80331 Munich, Germany. The Usercentrics Consent Management Platform is collecting device-related information, browser-information, anonymized IP-addresses, Opt-In and Opt-Out-information, date and time of user-visits, URL-requests, side-path and geo-location via java-script. This java script enables the Usercentrics GmbH to inform the user on certain tags and web-technologies on our website and to get, administer and document the users´ consent. The legal basis is Art. 6 I 1 c EU-GDPR as we are legally obliged to provide evidence on the fact that we have been declared consent (as per Art. 7 I EU-GDPR). The aim is to know about and to implement the users´ preferences and to document it in a way providing for usable evidence. The data is deleted as soon as it is no longer required for logging-purposes and if there are no more legal retention-requirements present. Your consent-related data is retained for three years. After that period has expired, your data is deleted or transferred to the controller upon request. The user may permanently stop the execution of java-scripts by respective browser-settings, which would prevent Usercentrics from executing the underlying java-scripts. Further information on data privacy at Usercentrics may be obtained from https://usercentrics.com/privacy-policy.

Cloudfront (Art. 6 I 1 f EU-GDPR, Section 25 II TDDDG)

This website uses the Content Delivery Network (CDN) Cloudfront. Cloudfront is a service of Amazon Web Services Inc., 410 Terry Avenue North, Seattle, WA 98109-5210. The Cloudfront CDN is offering copies of a website through several servers around the globe which provides for quicker loading of the website, a better availability and an improved protection against data-loss. A number of pictures and videos embedded to this website is loaded from the Cloudfront CDN, when the website is loaded. This request leads to a transfer of data on your use of the website (such as, e.g., your IP-address) to servers of Amazon in third countries, where the information is stored. This happens as soon as you are entering our website. The use of the Amazon Web Services and the Amazon CDN Cloudfront is executed for reasons of improved availability, Art. 6 I 1 f EU-GDPR. More information on data privacy at Amazon may be obtained from: https://aws.amazon.com/de/data-protection/

The current privacy statement of Amazon Web Services may be obtained from: https://aws.amazon.com/de/privacy/
This service may transfer the data collected to another country. Please consider that this service may transfer data to outside the European Union and the European Economic Area and to a country which does not offer an adequate level of data protection. If data should be transferred to the US, the data is at risk to being processed by US-authorities for purposes of check and surveillance – (potentially) without legal remedies left available for you. However, we have implemented measures for data protection to the extent possible and legally required, Art. 44 et. seq. EU-GDPR, to safeguard tan adequate level of data protection in the third country.

Google reCAPTCHA (Art. 6 I 1 f EU-GDPR)

This website uses the reCAPTCHA-function of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. This function mainly uses to distinguishing whether entries are initiated by a human user or abusively by automated processing. The legal basis for this processing is our legitimate interest in securely operating our website an in preventing abusive use and spam, Art. 6 I 1 f EU-GDPR.

The request contains a transfer of the IP-address and potentially of further information required to offer the service to Google. For this purpose, your entries are transferred to and further processed at Google. This service may forward your data to another country. Please consider that this service may transfer your data to outside the European Union and the European Economic area to a country which may not offer an adequate level of data protection. Should your data be transferred to the Us, your data may be processed for control- and surveillance-purpose by US-authorities, which may leave you without legal remedies against it. However, we have implemented the measures possible a legally required as per Art. 44 et. seq. EU-GDPR to provide for an adequate data protection in such third countries.

Googles´ privacy information may be obtained from http://www.google.de/intl/de/policies/terms/regional.html, additional privacy information may be obtained through the “Google Privacy Policy”) which is available through http://www.google.de/intl/de/policies/privacy/
Opt-Out: https://adssettings.google.com/authenticated.

etracker (Art. 6 I 1 a EU-GDPR, Section 25 I TDDDG)

The controller of this website uses the services of etracker GmbH from Hamburg, Germany (www.etracker.com) to analyze usage data. Cookies are used, which enable a statistical analysis of the use of this website by its visitors as well as the display of usage-related content or advertising.

Cookies are small text files that are stored by the Internet browser on the user's device. etracker cookies do not contain any information that would allow to identify single users. The data generated with etracker is processed and stored by etracker exclusively in Germany on behalf of the controller of this website and is therefore subject to the strict German and European data protection laws and standards. The data processing takes place on the legal basis of Art. 6 I 1 f EU-GDPR (legitimate interest). Our legitimate interest is the optimization of our online content and our website. Since the privacy of our visitors is particularly important to us, the IP address is anonymized at etracker and login- or device-IDs are converted to a unique key at etracker that is not assigned to a person. etracker does not use it for any other purpose, merge it with other data or transfers it to third parties.

You may object to the data processing described above at any time, insofar as it is personal. Your objection will not have any negative consequences for you. Further information on data protection at etracker can be obtained from: https://www.etracker.com/en/data-privacy/

Google Maps (Art. 6 I 1 a EU-GDPR, Section 25 I TDDDG)

On our website we use Google Maps (API) of Google LLC., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA on the basis of your consent in accordance with Article 6 I 1 a EU-GDPR ("Google").

Google Maps is a web service for displaying interactive maps to visually display geographic information. Using this service will show you our location and make it easier for you to contact us. For example, you can view specialist dealers in your area or plan your journey quickly and easily.

As soon as you browse the sub-pages in which the Google Maps map is integrated, information about your use of our website (e.g. your IP address) is transferred to Google servers in the USA and stored there. This takes place regardless of whether Google provides a user account through which you are logged in or whether there is no user account. If you are logged in to Google, your data will be assigned directly to your account. Google Maps was implemented on our part via the consent banner, so that data collection is only possible as soon as you provide your consent to the integration of Google Maps. Please note that your consent also includes the transfer of data, in particular to the USA.

If you do not wish to be associated with your profile on Google, you must log out of Google before giving your consent and browsing a corresponding subpage with Google Maps. Google processes your data (even for users who are not logged in) as usage profiles and evaluates it.

Such an evaluation is carried out in accordance with Article 6 I 1 a EU-GDPR on the basis of your consent. Google, in turn, uses the data to display personalized advertising, market research and/or needs-based design of its website. You have the right to object to the creation of these user profiles, although you must contact Google to exercise this right, as we may unfortunately not influence this.

If you do not agree to the future transfer of your data to Google when using Google Maps, you also have the option of completely deactivating the Google Maps web service by switching off the JavaScript application in your browser. Unfortunately, Google Maps and thus also the map display on this website cannot then be used.

You can view Google's terms of use at https://www.google.de/intl/de/policies/terms/regional, the additional terms of use for Google Maps can be found at https://www.google.com/intl/de_US/help/terms_maps.

Detailed information on data protection in connection with the use of Google Maps can be found on the Google website ("Google Privacy Policy"): https://www.google.de/intl/de/policies/privacy.

You have the option to revoke your consent at any time with effect for the future under the following link.

Please note that in this context personal data may be processed in a third country, the USA. Appropriate contractual regulations and guarantees ensure compliance with the European level of data protection for data transfer and processing in third countries. Data processing in third countries can also take place on the basis of your consent (Art. 49 I 1 a EU-GDPR), in this case you will be informed within the scope of obtaining your consent, as well as the possibility of revocation, separately noted.

Facebook Pixel (Art. 6 I 1 a EU-GDPR, Section 25 I TDDDG)

This website uses the "Facebook Pixel" from Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.

If explicit consent is given, the behavior of users can be tracked after they have seen or clicked on a Facebook ad. This process is used to evaluate the effectiveness of Facebook ads for statistical and market research purposes and can help to optimize future advertising. The data collected is anonymous to us, so we cannot draw any conclusions about the identity of the user. However, the data is stored and processed by Facebook so that a connection to the respective user profile is possible and Facebook can use the data for its own advertising purposes in accordance with the Facebook data usage guidelines (https://www.facebook.com/about/privacy/).

You can enable Facebook and its partners to place advertisements on and outside of Facebook. A cookie can also be stored on your computer for these purposes. The Facebook pixel also collects the following data from the use of our website: e-mail address, gender, city, region, postal code, country, first and last name, telephone number, date of birth. This gives Facebook the opportunity to assign your data to a specific Facebook profile and import suitable advertising measures there.

When collecting data, we rely on your consent in accordance with Article 6 I 1 a EU GDPR for the corresponding data processing.

You can of course revoke your consent at any time using the following link.

If you revoke your consent, your data will no longer be used for this purpose and will be deleted, provided that there are no legal retention periods to the contrary. Without revocation, the storage period of the data is 180 days. The data will then be automatically deleted.

You can also deactivate the use of cookies by third parties such as Facebook on the following website of the Digital Advertising Alliance: http://www.aboutads.info/choices/.

Specific information about the Facebook pixel and how it works can be found here: https://www.facebook.com/business/help/651294705016616.

Please note that in this context personal data may be processed in a third country, the USA. Appropriate contractual regulations and guarantees ensure compliance with the European level of data protection for data transfer and processing in third countries. Data processing or storage in third countries can also take place on the basis of your consent (Art. 49 Para. 1 S. 1 lit. a DSGVO), in this case you will be informed within the scope of obtaining your consent, as well as the possibility of revocation, separately noted.

Use of LinkedIn Insights (Art. 6 I 1 a EU-GDPR)

The LinkedIn services process and store your data in the USA. LinkedIn is obliged by corresponding contractual regulations to comply with the data protection standards and the data protection level of the EU. Data processing or storage in third countries can also take place on the basis of your consent (Article 49 I 1 a EU-GDPR). Further information on third-country transfers can be found under the following link: https://www.linkedin.com/help/linkedin/answer/62533.

You can find more information on data protection at LinkedIn in the LinkedIn data protection information. Link: https://de.linkedin.com/legal/privacy-policy?src=direct%2Fnone&veh=direct%2Fnone.

Creation of user profiles respectively implementation of cookies which are not merely functional (Art. 6 I 1 a EU-GDPR)

Google Double Click (Art. 6 I 1 a EU-GDPR)

This website uses Google DoubleClick functions. The provider is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland, (hereinafter "DoubleClick").

DoubleClick is used to show you interest-based ads across the Google advertising network. With the help of DoubleClick, the advertisements can be tailored to the interests of the respective viewer. For example, our advertising may be displayed in Google search results or in advertising banners associated with DoubleClick.

In order to be able to show users interest-based advertising, DoubleClick must recognize the respective viewer and be able to assign the websites they have visited, clicks and other information on user behavior to them. For this purpose, DoubleClick uses cookies or comparable recognition technologies (e.g. device fingerprinting and individual IDs). The information collected is combined into a pseudonymous user profile in order to display interest-based advertising to the user concerned. Doubleclick cookies enable Google and its partners to place ads based on previous visits to websites on the Internet. The information obtained in this way is transferred to a Google server in the USA and stored there in order to carry out an evaluation.

Google DoubleClick is used on the basis of your consent in accordance with Article 6 I 1 a EU-GDPR. You can revoke your consent at any time by deactivating the consent banner (fingerprint symbol).

For more information on how to object to the advertisements displayed by Google, see the following links: https://policies.google.com/technologies/ads and https://adssettings.google.com/authenticated.