Privacy Policy

Entity responsible in the sense of Art. 4 No. 7 GDPR
Entity responsible in the sense of the GDPR and other national data protection laws of the member states as well as other data protection regulations:

burgbad GmbH
Werner-Schlinsog-Str.4
36341 Lauterbach-Allmenrod
Germany

E-mail: info@burgbad.com
Tel.: +49 (0) 2974 / 7720
Fax: +49 (0) 2974 / 772269

 

Name and address of the data protection officer
Name: Eva-Daniela Jung
Address: Haus-Gravener-Straße 96, 40764 Langenfeld/Rheinland
E-mail: datenschutz@burgbad.com

Provision of the website and creation of log files
Every time you visit our website, our system automatically collects data and information from the computer system of the computer used to access the website. The following data is collected:
Scope of data processing
Information about the type and version of the browser used
The operating system of the device used
The IP address of the device used
Date and time our website and resources (images, files, other page content) were accessed. Websites from which the user was directed to our website (referrer tracking)
This data is stored in the log files of our system. This data is not stored together with personal data of any specific user, meaning that visitors of individual pages cannot be identified.

The legal basis for the processing of personal data is Art. 6 para.1 lit.f of the GDPR (legitimate interest).
Our legitimate interest is to ensure that the purpose described below is achieved.


Purpose of data processing
Logging takes place to ensure that our website remains compatible for as many visitors as possible, to prevent abuse and for troubleshooting purposes. For this purpose, it is necessary to log technical data of the accessing computer in order to be able to respond as early as possible to display errors, attacks on our IT systems and/or errors in the functionality of our website. In addition, we use the data to optimize our website and to ensure the security of our IT systems.

Storage duration
The above technical data will be deleted as soon as it is no longer required to ensure the compatibility of the website for all visitors, but no later than three months after accessing our website.

Right of objection and removal
Your right of objection and removal are based on the general regulations on the right of objection and removal under data protection law described below in this data protection declaration. Special features of our website. Our website offers various features which, if used, collect, process and store personal data. Below we explain what happens to your data:

Contact form/s:
- Scope of processing of personal data entered in our contact forms.
Legal basis for the processing of personal data is Art. 6 para. 1 lit.a of the GDPR (tacit consent)
Purpose of data processing
The data collected via our contact form/s will only be used for processing the specific contact request received via the contact form.
Duration of storage
After processing your request, we will delete the data collected immediately, unless there are legal retention periods to comply with.
Right of objection and removal
Your rights of objection and removal are based on the general regulations on the right of objection and removal under data protection law described below in this data protection declaration.

Statistical evaluation of visits to this website - web trackers
We collect, process and store the following data when you access this website or individual files on the website: IP address, website from which the file was accessed, name of the file, date and time of access, amount of data transferred and information of the success of access (so-called web log). We use this access data exclusively in non-personalised form for the continuous improvement of our internet offer and for statistical purposes. We also use the following web trackers to evaluate the visits to this website:

Google Analytics
- Scope of processing of personal data. We use the web tracking service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland (hereafter: Google Analytics) on our website. Google Analytics uses cookies for web tracking purposes. These are stored on your computer and enable analysis of the use of our website and your browsing behaviour (tracking). We perform this analysis using the tracking service of Google Analytics in order to constantly optimise and make our online offer more available. When using our website, data such as your IP address and your user activities are transmitted to servers of Google LLC and processed and stored outside the European Union, e.g. in the USA. The EU Commission has found that an adequate level of data protection can exist in the USA if the data processing company complies with the US-EU Privacy Shield Agreement and the export of data to the USA has been made permissible in this way. By enabling IP anonymisation in the Google Analytics tracking code of this website, your IP address is made anonymous by Google Analytics before transmission. This website uses a Google Analytics tracking code that has been extended by the operator gat._anonymizeIp(); in order to only allow anonymous collection of IP addresses (so-called IP masking). - The legal basis for the processing of personal data is Art. 6 Para.1 lit.a of the GDPR (consent), either as part of a registration with Google (opening of a Google account and acceptance of the data protection information implemented therein) or, if you have not registered with Google, by explicit consent when accessing our site. - Purpose of data processing. On our behalf, Google will use this information to evaluate your visit to this website, compile reports on website activities and to provide us with further services relating to website and internet use. The IP address transmitted by your browser as part of Google Analytics is not merged with other Google LLC data. - Duration of storage. Google will store the data relevant for the provision of web tracking for as long as it is necessary to fulfil the purchased web service. Data is collected and stored anonymously. If there is any personal reference, the data will be deleted immediately, as far as it is not subject to any legal storage obligations. In any case, the deletion takes place after expiry of the storage obligation. - Right of objection and removal. You can prevent your personal data from being collected and transferred to Google (in particular your IP address) as well as the processing of this data by Google by disabling the execution of script code in your browser, installing a script blocker in your browser (which you can find e.g. at www.noscript.net or www.ghostery.com) or by enabling the "Do not track" option of your browser. You can also prevent Google from collecting the data generated by the Google cookie and relating to your use of the website (including your IP address) and processing of this data by Google by clicking on the following link (http://tools.google.com/dlpage/gaoptout?hl=en) and downloading the available browser plug-in. You can find Google Analytics' security and privacy policy at https://policies.google.com/privacy

Google Tag Manager
- Scope of processing of personal data. We use the service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland (hereafter: Google Tag Manager). Google Tag Manager offers a technical platform to run and bundle other web services and web tracking programs using so-called "tags". Google Tag Manager stores cookies on your computer and analyses your browsing behaviour (so-called "tracking"), provided web tracking tools are operated using Google Tag Manager. The data sent by individual tags embedded in Google Tag Manager is merged, stored and processed by Google Tag Manager under a unified user interface. All embedded "tags" are also listed separately in this data protection declaration. For more information about the data protection practices of the tools included in Google Tag Manager, please see the relevant section of this data protection statement. When using our website with Google Tag Manager enabled and tags integrated, data such as your IP address and your user activities are transmitted to servers of Google LLC and processed and stored outside the European Union, e.g. in the USA. The EU Commission has found that an adequate level of data protection can exist in the USA if the data processing company complies with the US-EU Privacy Shield Agreement and the export of data to the USA has been made permissible in this way. This is the case with Google LLC. Regarding the web services integrated with Google Tag Manager, the regulations in the respective section of this data protection declaration apply. The tracking tools used in Google Tag Manager ensure that Google Tag Manager's IP address is anonymised through IP anonymisation of the source code before transmission. Google Tag Manager only allows for anonymous collection of IP addresses (so-called IP masking). - The legal basis for the processing of personal data is Art. 6 Para.1 lit.a of the GDPR (consent), either as part of a registration with Google (opening of a Google account and acceptance of the data protection information implemented therein) or, if you have not registered with Google, by explicit consent when accessing our site. - Purpose of data processing. On our behalf, Google will use this information to evaluate your visit to this website, compile reports on website activities and to provide us with further services relating to website and internet use. The IP address transmitted by your browser as part of Google Analytics is not merged with other Google LLC data. - Duration of storage. Google will store the data relevant for the provision of web tracking for as long as it is necessary to fulfil the purchased web service. Data is collected and stored anonymously. If there is any personal reference, the data will be deleted immediately, as far as it is not subject to any legal storage obligations. In any case, the deletion takes place after expiry of the storage obligation. - Right of objection and removal. You can prevent your personal data from being collected and transferred to Google (in particular your IP address) as well as the processing of this data by Google by disabling the execution of script code in your browser, installing a script blocker in your browser (which you can find e.g. at www.noscript.net or www.ghostery.com) or by enabling the "Do not track" option of your browser. You can also prevent Google from collecting the data generated by the Google cookie and relating to your use of the website (including your IP address) and processing of this data by Google by clicking on the following link (http://tools.google.com/dlpage/gaoptout?hl=en) and downloading the available browser plug-in. You can find Google Analytics' security and privacy policy at https://policies.google.com/privacy

Integration of external web services and processing of data outside the EU
We use active JavaScript content from external providers on our website (so-called web services). When you visit our website, these external providers may receive personal information about your visit to our website. It is potentially possible that data will be processed outside the EU. You can prevent this by installing a JavaScript blocker such as the browser plug-in 'NoScript' (www.noscript.net) or by disabling Java Script in your browser. This may result in functional restrictions on websites that you visit.
We use the following external web services:

Google
Our website makes use of a web service offered by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland (hereinafter: Google). We use this data to ensure proper functioning of our entire website. As a result, your browser may transmit personal data to Google. The legal basis for data processing is Art. 6 para. 1 lit. f of the GDPR. Legitimate interest consists in the error-free functioning of the website. Google is certified under the EU-US Privacy Shield Agreement (see https://www.privacyshield.gov/list). Data will be deleted as soon as the purpose of its collection has been fulfilled. Further information on the handling of the transferred data can be found in the data protection declaration of Google: https://policies.google.com/privacy. You can prevent Google from collecting and processing your data by disabling the execution of script code in your browser or by installing a script blocker in your browser (available for example at www.noscript.net or www.ghostery.com).

Google Maps
Our website makes use of a web service offered by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland (hereinafter: Google Maps). We use this data to ensure proper functioning of our entire website. As a result, your browser may transmit personal data to Google Maps. The legal basis for data processing is Art. 6 para. 1 lit. f of the GDPR. Legitimate interest consists in the error-free functioning of the website. Google Maps is certified under the EU-US Privacy Shield Agreement (see https://www.privacyshield.gov/list).
Data will be deleted as soon as the purpose of its collection has been fulfilled. Further information on the handling of the transferred data can be found in the data protection declaration of Google Maps: https://policies.google.com/privacy. You can prevent Google Maps from collecting and processing your data by disabling the execution of script code in your browser or by installing a script blocker in your browser (available for example at www.noscript.net or www.ghostery.com).

Google APIs
Our website makes use of a web service offered by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland (hereinafter: Google APIs).
We use this data to ensure proper functioning of our entire website. As a result, your browser may transmit personal data to Google APIs. The legal basis for data processing is Art. 6 para. 1 lit. f of the GDPR. Legitimate interest consists in the error-free functioning of the website. Google APIs are certified under the EU-US Privacy Shield Agreement (see https://www.privacyshield.gov/list). Data will be deleted as soon as the purpose of its collection has been fulfilled. Further information on the handling of the transferred data can be found in the data protection declaration of Google APIs: https://policies.google.com/privacy. You can prevent Google APIs from collecting and processing your data by disabling the execution of script code in your browser or by installing a script blocker in your browser (available for example at www.noscript.net or www.ghostery.com).

Information about the use of cookies
Scope of processing of personal data
We use cookies on various pages to enable the use of certain functions of our website. ‘Cookies' are small text files that your browser can store on your computer. These text files contain a characteristic string of characters that uniquely identify the browser when you return to our website. The process of storing a cookie file is also called 'setting a cookie'.

The legal basis for the processing of personal datais Art. 6 para.1 lit.f of the GDPR (legitimate interest). Our legitimate interest is to maintain the full functionality of our website, to increase its usability and to enable a more customised approach. Identification of individual visitors of a page is only possible with the help of cookie technology if the visitor of a page has previously consented to providing us with personal data.

Purpose of data processing
The cookies are set by our website in order to maintain the full functionality of our website and to improve its usability. In addition, cookie technology enables us to recognise individual visitors using pseudonyms, e.g. an individual, arbitrary ID, so that we are able to offer more customised services.

Duration of storage
Our cookies are stored in your browser until they are deleted or, if it is a session cookie, until the session has expired.

Right of objection and removal
You can set your browser to according to your wishes in such a way that you always prevent the setting of cookies, are only informed about it, decide from case to case about the acceptance of cookies: or always accept the acceptance of cookies. Cookies can be used for various purposes, e.g. to recognise that your computer has previously connected to our website (permanent cookies) or to store recently viewed offers (session cookies). We use cookies to offer you an enhanced user experience. In order to make use of these functions, we recommend that you accept cookies for our website. Your rights of objection and removal are based on the general regulations on the right of objection and removal under data protection law described below in this data protection declaration. Data security and data protection, communication by e-mail
Your personal data is protected by technological and organisational measures during its collection, storage and processing in such a way that it cannot be accessed by third parties. In the case of unencrypted communication by e-mail, we cannot guarantee complete data security during transmission to our IT systems. We therefore recommend encrypted or postal communication for information requiring high confidentiality.

Automatic e-mail archiving
Scope of processing of personal data
We expressly point out that our e-mail system has an automated archiving function. All incoming and outgoing e-mails are digitally archived in a audit-proof manner. The legal basis for the processing of personal data is Art. 6 para.1 lit.f of the GDPR (legitimate interest). Our legitimate interest is compliance with tax and commercial law requirements (e.g. Sections 146, 147 of the German Fiscal Code (AO)).

Purpose of data processing
The purpose of archiving is to comply with tax and commercial law requirements (e.g. Sections 146, 147 AO).

Duration of storage
Our e-mail communication is stored until the expiry of tax and commercial storage obligations. The storage period can be up to ten years. Right of objection and removal

If you have any questions regarding our e-mail archiving system, please contact our data protection officer. We would also like to point out that we only consider applications in PDF format. Zipped files (WinZip, WinRAR, 7Zip, etc.) are filtered out by our security systems and hence not delivered. We do not consider applications in Word or other file formats and delete them unread. Please note that unencrypted application documents sent by e-mail may be opened by third parties before they are received by our IT systems. We assume that you agree that we will also reply to unencrypted application e-mails without using encryption. If you do not agree to this, please include a note in your application e-mail.

Revocation of consents - Information on data and requests for changes - Deletion and blocking of data
Once a year you have a right to free information about your stored data and a right to correction, blocking or deletion of your data at any time. Your data will be deleted by us on your first request, unless this is contrary to legal regulations. You can revoke your permission to use your personal data at any time. Information, deletion and correction requests for your data and suggestions can be sent to the following address at any time: Responsible in the sense of the GDPR and other national data protection laws of the member states as well as other data protection regulations:

burgbad GmbH
Werner-Schlinsog-Str.4
36341 Lauterbach-Allmenrod
Deutschland
E-Mail: info@burgbad.com
Telefon: +49 (0) 6641.9604-0
Telefax: +49 (0) 6641.9604-46

Right to data transferability
You have the right that we provide you with the personal data that you have transmitted to us in a structured, common and machine-readable format. You can also request that we transmit this data to a third party immediately upon your first instruction, provided that the processing is based on a consent pursuant to Art. 6 para. 1 lit. a of the GDPR or Art. 9 para. 2 lit. a of the GDPR or on a contract pursuant to Art. 6 para. 1 lit. b of the GDPR and the processing is carried out by us within the framework of automated data processing. In exercising this right of data transferability, you also have the right to have the personal data concerning you transferred directly by a data controller to another data controller, insofar as this is technically feasible. The freedoms and rights of other persons must not be affected by this. The right to transferability shall not apply to the processing of personal data required for the performance of a task in the public interest or in the exercise of official authority conferred on the controller.

Right of appeal to the supervisory authority pursuant to Art. 77 I of the GDPR
If you suspect that your data is being processed illegally on our website, you can of course seek judicial clarification of the problem at any time. In any case, you always have the option of contacting a supervisory authority. You have the right of appeal in the EU Member State of your place of residence, your place of work and/or the place of the alleged infringement, i.e. you can choose the supervisory authority to which you turn at the above-mentioned places. The supervisory authority to which the complaint has been lodged will then inform you of the status and outcome of your complaint, including the possibility of a judicial remedy under Article 78 of the GDPR.