We manage our websites in accordance with the principles set out below: We undertake to comply with the legal provisions on data protection and endeavour to always take into account the principles of data avoidance and data minimisation.

 

1. Name and address of the person responsible

The responsible party within the meaning of the General Data Protection Regulation and other national data protection laws of the member states of the European Union as well as other data protection regulations is:
 

BMZ Germany GmbH
Management: Sven Bauer
Zeche Gustav 1
63791 Karlstein Germany

Tel.: 06188/9956-0
Fax: 06188/9956-900
E-mail: mail@bmz-group.com
Website: https://bmz-group.com

 

2. explanations of terms

We have designed our data protection declaration according to the principles of clarity and transparency. However, if there are any ambiguities regarding the use of various terms, the relevant definitions can be found here.

 

3. Legal basis for the processing of personal data

We only process your personal data, such as your surname and first name, your e-mail address and IP address, etc., if there is a legal basis for doing so. Three regulations in particular come into consideration here according to the General Data Protection Regulation:
 

a) You have given us your consent to the processing of your personal data for one or more purposes, Art. 6 para. 1 sentence 1 lit. a DSGVO. In this context, you will be informed by us in detail about the purpose(s) of the processing and your explicit consent will be documented with us.

b) The processing of your personal data is necessary for the performance of a contract or for the implementation of pre-contractual measures with you, Art. 6 para. 1 p. 1 lit. b DSGVO.

c) The processing of personal data is necessary for the protection of our legitimate interests, unless your interests or fundamental rights and freedoms prevail, Art. 6 para. 1 p. 1 lit. f DSGVO.

 

However, we will always point out to you again at the respective points on which legal basis the processing of your personal data takes place.

 

4. transfer of personal data
 

We do not transfer your personal data to third parties for purposes other than those listed below. We will only disclose your personal data to third parties if:
 

a) you have given your express consent to do so in accordance with Art. 6 (1) p. 1 lit. a DSGVO,

b) the disclosure is necessary for the assertion, exercise or defence of legal claims pursuant to Art. 6 (1) sentence 1 lit. f DSGVO and there is no reason to assume that you have an overriding interest worthy of protection in the non-disclosure of your data,

c) there is a legal obligation for the disclosure in accordance with Art. 6 para. 1 sentence 1 lit. c DSGVO

d) this is legally permissible and necessary for the processing of contractual relationships with you in accordance with Art. 6 Para. 1 S. 1 lit. b DSGVO.

5. storage period and deletion
 

We store all personal data that you transmit to us only for as long as it is needed to fulfil the purposes for which this data was transmitted or for as long as this is required by law. Once the purpose has been fulfilled and/or the legal storage periods have expired, we delete or block the data.

6. SSL encryption

"With the DSGVO, SSL encryption becomes mandatory for all websites that provide a contact form, order form or newsletter order. However, we generally recommend SSL encryption for all websites because we believe this is state of the art."

This website uses SSL encryption for security reasons and to protect the transmission of confidential content, such as enquiries that you send to us as the website operator. You can recognise an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser line.

If SSL encryption is activated, the data you transmit to us cannot be read by third parties.

 

7. collection and storage of personal data as well as their type and purpose of use

a) When you visit the website When you visit our website, information is automatically sent to our website server by the browser used on your end device. This information is temporarily stored in a so-called log file. The following information is collected without your intervention and stored until automatic deletion:

- IP address of the requesting computer
- Date and time of access
- Name and URL of the file accessed
- Website from which access was made (referrer URL)
- Browser used and, if applicable, the operating system of your computer as well as the name of your access provider.

The above data is processed by us for the following purposes:

- Ensuring a smooth connection to the website
- Ensuring a comfortable use of our website
- evaluation of system security and stability
- for further administrative purposes

Data that allow a conclusion to your person, such as the IP address, will be deleted after 7 days at the latest. If we store the data beyond this period, the data will be pseudonymised so that it can no longer be attributed to you.
The legal basis for data processing is Art. 6 para. 1 p. 1 lit. f DSGVO. Our legitimate interest follows from the purposes for data collection listed above. In no case do we use the collected data for the purpose of drawing conclusions about your person.

 

b) Newsletter

 

Content of the newsletter and registration data

 

We will only send you a newsletter if you order it from us and have given your consent in accordance with Art. 6 Para. 1 lit. a DSGVO. The contents of the newsletter will be specifically described when you register for the newsletter. To register for the newsletter, it is sufficient to provide your e-mail address. If you provide further voluntary information, such as your name and/or gender, this will only be used to personalise the newsletter addressed to you.

 

Double opt-in and logging

 

For security reasons, we use the so-called double opt-in procedure to register for our newsletter, so that no one can register with other people's e-mail addresses. Therefore, after registering for our newsletter, you will first receive an e-mail asking you to confirm your registration. Your registration will only become effective once it has been confirmed.

 

Furthermore, your registration for the newsletter will be logged. The logging includes the storage of the registration and confirmation time, your specified data and your IP address. If you make changes to your data, these changes will also be logged.

 

Revocation

 

If you no longer wish to receive our newsletter, you can revoke your consent at any time for the future. To do so, you can click on the unsubscribe link at the end of each newsletter or send us an email to the following email address: mail@bmz-group.com.

The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until revocation.

 

Use of Sendinblue

We use the e-mail tool Sendinblue (Sendinblue GmbH, Köpenickerstr. 126, 10179 Berlin) to send our newsletter.

For this purpose, the data you provide will be passed on to Sendinblue and processed by them. This tool enables us to evaluate how the newsletters are opened and used.

Sendinblue is a German company whose servers are located in Germany, so they are also subject to the provisions of the BDSG and the DSGVO.
We have also concluded an order processing contract with Sendinblue3. Sendinblue does not obtain the right to pass on your data.

Further information on Sendinblue's data protection can be found here.

The use of the shipping service provider Sendinblue is based on our legitimate interests pursuant to Art. 6 para. 1 p. 1 lit. f DSGVO. Our interest is directed towards the use of a user-friendly and secure newsletter system that serves both our business interests and the expectations of users.

c) Contact form / e-mail contact

We provide a form on our website so that you have the opportunity to contact us at any time. When using the contact form, it is necessary to provide a name for a personal salutation and a valid e-mail address for contacting us, so that we know who the enquiry is from and can process it.

If you send us enquiries via the contact form, your details from the enquiry form, including the contact details you provide there and your IP address, will be processed in accordance with Art. 6 para. p. 1 lit. b and f DSGVO for the purpose of carrying out pre-contractual measures that take place in response to your enquiry or for the exercise of our legitimate interest, namely to carry out our business activities.

You are also welcome to send us an email instead using the email address provided on our website. In this case, we will store and process your e-mail address and the information you provide in the e-mail in accordance with Art. 6 Para. 1 lit. b and f DSGVO in order to process your message.
The enquiries as well as the associated data will be deleted no later than 3 months after receipt, unless they are required for a further contractual relationship.

 

d) Registration for training/education

You are welcome to register with us for trainings and courses by sending us an e-mail. In this case, we will store and process your e-mail address and the information you provide in the e-mail in accordance with Art. 6 Para. 1 lit. b and f DSGVO in order to process your message.

The enquiries as well as the associated data will be deleted no later than 3 months after receipt, unless they are required for a further contractual relationship.

 

8. cookies

 

We use cookies on our website. Cookies are small data packages that are automatically created by your browser and stored on your terminal device when you visit our website. These cookies serve to store information in connection with the respective end device used. However, a personal identification of your person is not possible through the cookies.

 

The data processed by cookies is necessary for the aforementioned purposes to protect our legitimate interests as well as those of third parties in accordance with Art. 6 para. p. 1 lit. f DSGVO. Most browsers automatically accept cookies due to the browser default setting. However, you can configure your browser in such a way that either no cookies are stored on your end device or at least a notice is displayed before a new cookie is stored. If you completely deactivate the cookie function in your browser, you may not be able to use all the functions of our website.

Below we explain the different types of cookies that we use.

 

a) Session cookies

In order to make the use of our offer more pleasant for you, we use so-called session cookies to recognise that you have already visited individual pages of our website.
These session cookies are automatically deleted after you leave our site.

 

b) Temporary cookies

We also use cookies that allow us to recognise you when you visit our website again and use our services. This means that you do not have to repeat the entries and settings you made the last time. These temporary cookies are stored on your end device for a certain fixed period of time.

 

c) Cookies for marketing and optimisation purposes

Finally, we also use cookies for marketing and optimisation purposes. These record the use of our website statistically and are evaluated for the purpose of optimising the offer for you. The cookies make it possible to recognise your internet browser when you visit our website again. These cookies are automatically deleted after a defined period of time.

 

9. analysis and tracking tools

We use the analysis and tracking tools listed below on our website. These serve to ensure the ongoing optimisation of our website and to design it in line with requirements.
These interests are to be regarded as legitimate within the meaning of Art. 6 para. p. 1 lit. f DSGVO. The respective data processing purposes and data categories can be found in the corresponding tools.

Google Analytics

We use Google Analytics on our website, a web analytics service provided by Google Inc (https://www.google.de/ intl/en/about/) (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; hereinafter "Google").

Google Analytics uses cookies in this context (see section 8). The information generated by the cookie about your use of this website, such as

- Name and version of the browser used
- Operating system of your computer
- Website from which access is made (referrer URL)
- IP address of the requesting computer
- Time of the server request

are usually transferred to a Google server in the USA and stored there.

Since we have activated IP anonymisation on our website, your IP address will, however, be truncated beforehand by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there.

Google will use this information on our behalf for the purpose of evaluating your use of our website, compiling reports on website activity and providing other services relating to website activity and internet usage. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

You can prevent cookies from being stored by setting your browser software accordingly. However, we would like to point out that in this case you may not be able to use all the functions of our website to their full extent.

You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) by Google and the processing of this data by Google by downloading and installing the browser plugin available at the following link http://tools.google.com/dlpage/gaoptout?hl=de.

 

10. rights of the data subject

You have the following rights:

a) Information

In accordance with Art. 15 DSGVO, you have the right to request information about your personal data processed by us. This right to information includes information about

- the purposes of processing
- the categories of personal data
- the recipients or categories of recipients to whom your data have been or will be disclosed
- the planned storage period or at least the criteria for determining the storage period
- the existence of a right to rectification, erasure, restriction of processing or objection
- the existence of a right of appeal to a supervisory authority
- the origin of your personal data, if it was not collected by us
- the existence of automated decision-making, including profiling, and, if applicable, meaningful information on the details of such.

b) Correction

In accordance with Art. 16 DSGVO, you have the right to have incorrect or incomplete personal data stored by us corrected without delay.

c) Deletion

Pursuant to Art. 17 DSGVO, you have the right to request that we delete your personal data without delay, unless further processing is necessary for one of the following reasons:

- to exercise the right to freedom of expression and information
- for compliance with a legal obligation which requires processing under the law of the European Union or the Member States to which the controller is subject, or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller
- for reasons of public interest in the area of public health pursuant to Art. 9(2)(h) and (i) and Art. 9(3) DSGVO
- for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes pursuant to Art. 89(1) DSGVO, insofar as the right referred to in section a) is likely to render impossible or seriously prejudice the achievement of the purposes of such processing
- for the assertion, exercise or defence of legal claims

 

d) Restriction of processing

 

In accordance with Art. 18 DSGVO, you may request the restriction of the processing of your personal data for one of the following reasons:

- You dispute the accuracy of your personal data.
- The processing is unlawful and you object to the erasure of the personal data.
- We no longer need the personal data for the purposes of processing, but you need it to assert, exercise or defend legal claims.
- You object to the processing in accordance with Article 21 (1) DSGVO.

 

e) Information

 

If you have requested the rectification or erasure of your personal data or a restriction of processing pursuant to Art. 16, Art. 17 (1) and Art. 18 DSGVO, we will inform all recipients to whom your personal data have been disclosed, unless this proves impossible or involves a disproportionate effort. You may request that we inform you of these recipients.

 

f) Transmission

 

You have the right to receive your personal data that you have provided to us in a structured, common and machine-readable format. You also have the right to request the transfer of this data to a third party, provided that the processing was carried out with the help of automated processes and is based on consent pursuant to Art. 6 para. 1 sentence 1 lit. a or Art. 9 para. 2 lit. a or on a contract pursuant to Art. 6 para. 1 sentence 1 lit. b DSGVO.

 

g) Revocation

 

In accordance with Art. 7 (3) DSGVO, you have the right to revoke your consent at any time. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation. In the future, we may no longer continue the data processing that was based on your revoked consent.

 

h) Complaint

 

In accordance with Article 77 of the GDPR, you have the right to lodge a complaint with a supervisory authority if you believe that the processing of your personal data violates the GDPR.
eheard.

 

i) O