GDPR
Everything You Need to Know
Personal data (hereinafter mostly referred to simply as “data”) is processed by us only to the extent necessary and for the purpose of providing a functional and user-friendly website, including its content and the services offered there.
According to Article 4, No. 1 of Regulation (EU) 2016/679, the General Data Protection Regulation (hereinafter referred to as “GDPR”), “processing” means any operation or set of operations performed on personal data, whether or not by automated means. This includes the collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure, or destruction of personal data.
With the following privacy policy, we inform you in particular about the type, scope, purpose, duration, and legal basis for the processing of personal data, insofar as we decide, either alone or jointly with others, on the purposes and means of processing. In addition, we inform you below about third-party components we use for optimization purposes and to improve usability, insofar as third parties process data under their own responsibility.
Our privacy policy is structured as follows:
I. Information about us as the controller
II. Rights of users and data subjects
III. Information on data processing
I. Information about us as the controller
The party responsible for this website in terms of data protection law is:
Bügener Metalltechnik GmbH
Benzstraße 10
48599 Gronau
Germany
Phone: +49 2562 9922510
Email: info@buegener.de
The data protection officer of the provider is:
Bertin Bügener
II. Rights of Users and Data Subjects
With regard to the data processing described in more detail below, users and data subjects have the right
- to obtain confirmation as to whether data concerning them is being processed, to receive information about the processed data, to obtain further information about the data processing, and to receive copies of the data (see also Art. 15 GDPR);
- to request the rectification or completion of inaccurate or incomplete data (see also Art. 16 GDPR);
- to request the immediate deletion of data concerning them (see also Art. 17 GDPR), or, alternatively, if further processing is necessary pursuant to Art. 17 (3) GDPR, to request restriction of processing in accordance with Art. 18 GDPR;
- to receive the data concerning them and provided by them and to have this data transmitted to other providers/controllers (see also Art. 20 GDPR);
- to lodge a complaint with the supervisory authority if they believe that data concerning them is being processed by the provider in violation of data protection regulations (see also Art. 77 GDPR).
Furthermore, the provider is obliged to inform all recipients to whom data has been disclosed by the provider of any correction or deletion of data, or the restriction of processing, carried out pursuant to Articles 16, 17 (1), and 18 GDPR. This obligation does not apply if such notification is impossible or would involve disproportionate effort. Notwithstanding this, the user has the right to obtain information about these recipients.
Users and data subjects also have the right under Art. 21 GDPR to object to the future processing of their data, provided the data is processed by the provider pursuant to Art. 6 (1) (f) GDPR. In particular, an objection to data processing for the purposes of direct marketing is permitted.
III. Information on Data Processing
The data processed during your use of our website will be deleted or blocked as soon as the purpose of storage no longer applies, no legal retention obligations prevent deletion, and unless otherwise specified below for individual processing procedures.
Server Data
For technical reasons, particularly to ensure a secure and stable website, data is transmitted to us or our web hosting provider by your web browser. These so-called server log files collect, among other things, the type and version of your web browser, the operating system, the website from which you accessed our website (referrer URL), the page(s) of our website you visit, the date and time of each access, and the IP address of the internet connection from which the site is accessed.
These data are temporarily stored, but not combined with other personal data from you.
This storage is based on the legal basis of Art. 6 (1) (f) GDPR. Our legitimate interest lies in improving the functionality, stability, and security of our website.
The data will be deleted no later than seven days, unless further retention is necessary for evidentiary purposes. Otherwise, the data are exempt from deletion, in whole or in part, until the final clarification of an incident.
Cookies
a) Session Cookies
Our website uses so-called cookies. Cookies are small text files or other storage technologies that are placed and stored on your device by your web browser. Through these cookies, certain information about you—such as your browser or location data or your IP address—is processed individually.
This processing makes our website more user-friendly, efficient, and secure, as it enables functions such as displaying the website in different languages or offering a shopping cart feature.
The legal basis for this processing is Art. 6 (1) (b) GDPR, provided these cookies process data for the purpose of initiating or executing a contract.
If the processing does not serve the initiation or execution of a contract, our legitimate interest lies in improving the functionality of our website. The legal basis in this case is Art. 6 (1) (f) GDPR.
These session cookies are deleted when you close your web browser.
b) Third-Party Cookies
In some cases, our website also uses cookies from partner companies with which we cooperate for purposes of advertising, analysis, or website functionality.
Details regarding these third-party cookies, including their purposes and legal basis for processing, can be found in the following information.
c) Option to Disable
You can prevent or restrict the installation of cookies by adjusting your web browser settings. You can also delete cookies that have already been stored at any time. The necessary steps and measures depend on the specific web browser you are using. For questions, please use the help function or documentation of your web browser, or contact the manufacturer or support team. For so-called Flash cookies, processing cannot be prevented via browser settings. Instead, you must change the settings of your Flash Player. The steps and measures required for this depend on your specific Flash Player. For questions, please also use the help function or documentation of your Flash Player or contact the manufacturer or user support.
If you prevent or restrict the installation of cookies, some functions of our website may not be fully available.
Newsletter
If you sign up for our free newsletter, the data you provide for this purpose—namely your email address and, optionally, your name and address—will be transmitted to us. At the same time, we store the IP address of the internet connection from which you access our website, as well as the date and time of your registration. During the registration process, we will obtain your consent for receiving the newsletter, clearly describe its content, and refer you to this privacy policy. The data collected in this process is used exclusively for sending the newsletter and is not shared with third parties.
The legal basis for this is Art. 6 (1) (a) GDPR.
You may withdraw your consent to receive the newsletter at any time in accordance with Art. 7 (3) GDPR, with effect for the future. To do so, you only need to notify us of your withdrawal or use the unsubscribe link provided in each newsletter.
Contact Requests / Contact Options
If you contact us via the contact form or by email, the data you provide will be used to process your request. Providing this data is necessary for processing and responding to your inquiry—without it, we may not be able to respond to your request, or only to a limited extent.
The legal basis for this processing is Art. 6 (1) (b) GDPR.
Your data will be deleted once your request has been fully processed, provided that no statutory retention obligations prevent deletion, such as in the case of any subsequent contract processing.
We maintain an online presence on Twitter to present our company and services and to communicate with customers and interested parties. Twitter is a service of Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA.
We would like to point out that it is possible that user data is processed outside the European Union, particularly in the USA. This can involve increased risks for users, for example, because later access to user data may be limited. We also do not have access to these user data; access is exclusively with Twitter.
Twitter’s privacy information can be found at:
https://twitter.com/de/privacy
YouTube
We maintain an online presence on YouTube to present our company and services and to communicate with customers and interested parties. YouTube is a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, a subsidiary of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
We would like to point out that it is possible that user data is processed outside the European Union, particularly in the USA. This can involve increased risks for users, for example, because later access to user data may be limited. We also do not have access to this user data; access is exclusively with YouTube.
YouTube’s privacy policy can be found at:
https://policies.google.com/privacy
We maintain an online presence on LinkedIn to present our company and services and to communicate with customers and interested parties. LinkedIn is a service of LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland, a subsidiary of LinkedIn Corporation, 1000 W. Maude Avenue, Sunnyvale, CA 94085, USA.
We would like to point out that it is possible that user data is processed outside the European Union, particularly in the USA. This can involve increased risks for users, for example, because later access to user data may be limited. We also do not have access to this user data; access is exclusively with LinkedIn.
LinkedIn’s privacy policy can be found at:
https://www.linkedin.com/legal/privacy-policy
We maintain a company presence on the Facebook platform to promote our products and services and to communicate with customers and interested parties.
On this social media platform, we are jointly responsible together with Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.
The data protection officer of Facebook can be reached via a contact form:
https://www.facebook.com/help/contact/540977946302970
We have regulated the joint responsibility in an agreement regarding the respective obligations under the GDPR. This agreement, which defines the mutual obligations, is available at the following link:
https://www.facebook.com/legal/terms/page_controller_addendum
The legal basis for the processing of personal data described here is Art. 6(1)(f) GDPR. Our legitimate interest lies in analyzing, communicating, and promoting the sale of our products and services.
The legal basis can also be the user’s consent under Art. 6(1)(a) GDPR given to the platform operator. The user can revoke this consent at any time for the future according to Art. 7(3) GDPR by notifying the platform operator.
When accessing our online presence on Facebook, the platform operator Facebook Ireland Ltd. processes user data (e.g., personal information, IP address, etc.) in the EU.
This user data is used for statistical information about the use of our company presence on Facebook. Facebook Ireland Ltd. uses this data for market research and advertising purposes, as well as for creating user profiles. Based on these profiles, Facebook Ireland Ltd. can, for example, advertise to users inside and outside of Facebook according to their interests. If the user is logged into their Facebook account while accessing our presence, Facebook Ireland Ltd. can also link the data to the user account.
If the user contacts us via Facebook, the personal data provided on that occasion is used to process the inquiry. The user’s data is deleted once the inquiry has been fully answered, provided that no statutory retention obligations exist, e.g., for subsequent contract processing.
For data processing, Facebook Ireland Ltd. may also set cookies.
If the user does not agree with this processing, they can prevent the installation of cookies via browser settings. Cookies that have already been stored can also be deleted at any time. The steps for this depend on the respective browser. Flash cookies cannot be blocked via the browser settings, but require adjustments in the Flash player settings. If the user prevents or restricts cookies, not all functions of Facebook may be fully available.
More information about Facebook’s processing activities, blocking, and deletion of user data can be found in Facebook’s privacy policy:
https://www.facebook.com/privacy/explanation
It is also possible that processing by Facebook Ireland Ltd. occurs via Facebook Inc., 1601 Willow Road, Menlo Park, California 94025, USA.
We maintain a company presence on the Instagram platform to promote our products and services and to communicate with customers and interested parties.
On this social media platform, we are jointly responsible together with Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.
The data protection officer of Instagram can be reached via a contact form:
https://www.facebook.com/help/contact/540977946302970
We have regulated the joint responsibility in an agreement regarding the respective obligations under the GDPR. This agreement, which defines the mutual obligations, is available at the following link:
https://www.facebook.com/legal/terms/page_controller_addendum
The legal basis for the processing of personal data described here is Art. 6(1)(f) GDPR. Our legitimate interest lies in analyzing, communicating, and promoting the sale of our products and services.
The legal basis can also be the user’s consent under Art. 6(1)(a) GDPR given to the platform operator. The user can revoke this consent at any time for the future according to Art. 7(3) GDPR by notifying the platform operator.
When accessing our online presence on Instagram, the platform operator Facebook Ireland Ltd. processes user data (e.g., personal information, IP address, etc.) in the EU.
This user data is used for statistical information about the use of our company presence on Instagram. Facebook Ireland Ltd. uses this data for market research and advertising purposes, as well as for creating user profiles. Based on these profiles, Facebook Ireland Ltd. can, for example, advertise to users inside and outside of Instagram according to their interests. If the user is logged into their Instagram account while accessing our presence, Facebook Ireland Ltd. can also link the data to the user account.
If the user contacts us via Instagram, the personal data provided on that occasion is used to process the inquiry. The user’s data is deleted once the inquiry has been fully answered, provided that no statutory retention obligations exist, e.g., for subsequent contract processing.
For data processing, Facebook Ireland Ltd. may also set cookies.
If the user does not agree with this processing, they can prevent the installation of cookies via browser settings. Cookies that have already been stored can also be deleted at any time. The steps for this depend on the respective browser. Flash cookies cannot be blocked via the browser settings, but require adjustments in the Flash player settings. If the user prevents or restricts cookies, not all functions of Instagram may be fully available.
More information about Instagram’s processing activities, blocking, and deletion of user data can be found in Instagram’s privacy policy:
https://help.instagram.com/519522125107875
It is also possible that processing by Facebook Ireland Ltd. occurs via Facebook Inc., 1601 Willow Road, Menlo Park, California 94025, USA.
Linking Social Media via Graphics or Text Links
On our website, we also promote our presences on the social networks listed below. The integration is done via a linked graphic of the respective network. Using this linked graphic prevents an automatic connection to the server of the social network when a user accesses a website with a social media promotion in order to display the graphic itself. Only by clicking the graphic is the user redirected to the respective social network service.
After the user is redirected, the respective network collects information about the user. It cannot be excluded that processing of such collected data may take place in the USA.
These are initially data such as IP address, date, time, and visited page. If the user is logged into their account on the respective network at the time, the network operator may link the collected visit information to the personal account. If the user interacts via a "Share" button of the network, this information may be stored in their personal account and potentially published. To prevent the collected information from being directly associated with their account, the user must log out before clicking the graphic. Additionally, the user can configure their account settings accordingly.
The following social networks are integrated into our site via linking:
Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland, a subsidiary of Facebook Inc., 1601 S. California Ave., Palo Alto, CA 94304, USA.
Privacy Policy: https://www.facebook.com/policy.php
YouTube
Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, a subsidiary of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA
Privacy Policy: https://policies.google.com/privacy
LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland, a subsidiary of LinkedIn Corporation, 1000 W. Maude Avenue, Sunnyvale, CA 94085 USA.
Privacy Policy: https://www.linkedin.com/legal/privacy-policy
Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland, a subsidiary of Facebook Inc., 1601 S. California Ave., Palo Alto, CA 94304, USA.
Privacy Policy: https://help.instagram.com/519522125107875
Google Maps
On our website, we use Google Maps to display our location and to create a route description. This is a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, hereinafter referred to as “Google.”
To display certain fonts on our website, a connection is established to Google servers in the USA when our site is accessed.
If you use the Google Maps component embedded in our website, Google stores a cookie on your device via your web browser. To display our location and create a route description, your user settings and data are processed. We cannot exclude that Google uses servers in the USA for this purpose.
The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in optimizing the functionality of our website.
Through this connection to Google, Google can determine from which website your request was sent and to which IP address the route description should be delivered.
If you do not agree to this processing, you can prevent the installation of cookies via the corresponding settings in your web browser. Details on this can be found above under “Cookies.”
In addition, the use of Google Maps and the information obtained via Google Maps is subject to the Google Terms of Service https://policies.google.com/terms?gl=DE&hl=de and the Google Maps Terms of Service https://www.google.com/intl/de_de/help/terms_maps.html.
Additionally, Google provides information at
https://adssettings.google.com/authenticated
https://policies.google.com/privacy
for further information.
Google reCAPTCHA
On our website, we use Google reCAPTCHA to check and prevent interactions on our site by automated access, e.g., by so-called bots. This is a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, hereinafter referred to simply as "Google".
Through this service, Google can determine from which website a request is sent and from which IP address you use the so-called reCAPTCHA input box. In addition to your IP address, Google may collect other information necessary to provide and ensure this service.
The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in the security of our website and in preventing unwanted, automated access in the form of spam or similar activities.
Google provides further information on
https://policies.google.com/privacy
regarding the general handling of your user data.
Google Fonts
On our website, we use Google Fonts to display external fonts. This is a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, hereinafter referred to simply as "Google".
To enable the display of certain fonts on our website, a connection to the Google server in the USA is established when you access our website.
The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in the optimization and economic operation of our website.
Through the connection to Google established when accessing our website, Google can determine from which website your request was sent and to which IP address the font display should be delivered.
Google provides further information at
https://adssettings.google.com/authenticated
https://policies.google.com/privacy
especially regarding options to prevent the use of your data.
FontAwesome
To display fonts and visual elements on our website, we use the external fonts from FontAwesome. FontAwesome is a service provided by
Fonticons Inc., 6 Porter Road, Apartment 3R, Cambridge, MA 02140, USA, hereinafter referred to simply as "FontAwesome".
When accessing our website, a connection to the FontAwesome server in the USA is established to enable and update the display of fonts and visual elements.
The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in the optimization and economic operation of our website.
Through the connection to the FontAwesome server established when accessing our website, FontAwesome can determine from which website your request was sent and to which IP address the font display should be delivered.
FontAwesome provides further information at
https://fontawesome.com/privacy
especially regarding options to prevent the use of your data.
YouTube
On our website, we use YouTube. This is a video platform provided by YouTube LLC, 901 Cherry Ave., 94066 San Bruno, CA, USA, hereinafter referred to simply as "YouTube".
YouTube is a subsidiary of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, hereinafter referred to simply as "Google".
We use YouTube in connection with the "Enhanced Privacy Mode" feature to display videos. The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in improving the quality of our website. According to YouTube, the "Enhanced Privacy Mode" ensures that the data described below is only transmitted to the YouTube server if you actually start a video.
Without this "Enhanced Privacy Mode," a connection to the YouTube server in the USA is established as soon as you access one of our web pages on which a YouTube video is embedded.
This connection is necessary to display the respective video on our website through your web browser. In this process, YouTube will at least collect and process your IP address, the date and time, and the website you visited. Additionally, a connection is made to Google's advertising network "DoubleClick".
If you are simultaneously logged into YouTube, YouTube will assign the connection information to your YouTube account. To prevent this, you must either log out of YouTube before visiting our website or adjust the corresponding settings in your YouTube account.
For functionality and analysis of user behavior, YouTube permanently stores cookies via your web browser on your device. If you do not agree to this processing, you can prevent the storage of cookies by adjusting your web browser settings. More information can be found above under "Cookies".
Further information about the collection and use of data, as well as your related rights and protection options, is provided by Google in the privacy policy available at
https://policies.google.com/privacy
BootstrapCDN
To optimize the loading speed, design, and display of content on different devices, we use the service BootstrapCDN, a Content Delivery Network ("CDN"), on our website. This is a service provided by StackPath, LLC, 2021 McKinney Ave. Suite 1100, Dallas, TX 75201, USA, hereinafter referred to simply as "BootstrapCDN".
To deliver the content of our website quickly, the service uses so-called JavaScript libraries. Corresponding files are loaded from a server of BootstrapCDN, which records your IP address.
BootstrapCDN also provides further privacy information at
https://www.stackpath.com/legal/master-service-agreement/#privacy
The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in speeding up the loading times of our website and optimizing its performance.
To completely prevent the execution of JavaScript code from BootstrapCDN, you can install a so-called JavaScript blocker, such as noscript.net or ghostery.com. However, preventing or restricting the execution of JavaScript code may, for technical reasons, result in some content and functions of our website not being available.
jQuery CDN
To optimize the loading speed, design, and display of content on different devices, we use the service
jQuery CDN, a Content Delivery Network ("CDN"), on our website. This is a service provided by the jQuery Foundation, hereinafter referred to simply as "jQuery". jQuery is distributed for the JS Foundation via the StackPath CDN.
To quickly deliver the content of our website, the service uses so-called JavaScript libraries. The corresponding files are loaded from the CDN server, unless they are already present in your browser cache from visiting another website. When connecting to the CDN server, your IP address is recorded. It cannot be ruled out that a connection to a server outside the EU may occur.
The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in speeding up the loading times of our website and optimizing its performance.
To completely prevent the execution of JavaScript code from jQuery, you can install a so-called JavaScript blocker, such as noscript.net or ghostery.com. However, preventing or restricting the execution of JavaScript code may, for technical reasons, result in some content and functions of our website not being available.
Cookiebot
We use "Cookiebot" as a "cookie banner." "Cookiebot" is a product of Cybot A/S, Havnegade 39, 1058 Copenhagen, Denmark, hereinafter referred to as "Cybot."
Through the "Cookiebot" function, we inform users about the use of cookies on the website and allow them to make a decision regarding their use.
If the user consents to the use of cookies, the following data is automatically logged by Cybot:
• The anonymized IP number of the user;
• Date and time of consent;
• User agent of the end user’s browser;
• The URL of the provider;
• An anonymous, random, and encrypted key;
• The user’s allowed cookies (cookie status), which serves as proof of consent.
The encrypted key and the cookie status are stored via a cookie on the user’s device to maintain the corresponding cookie status for future visits. This cookie automatically deletes itself after 12 months.
The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in the user-friendliness of the website and in fulfilling the statutory requirements of the GDPR.
The installation and storage of this cookie, and therefore the cookie consent, can be prevented or revoked by the user at any time through their browser settings.
Further information on data protection is provided by Cybot at the following link:
https://www.cookiebot.com/de/privacy-policy/