Loading content …
Name and contact data of the controller and the company data protection officer
This data protection information applies to data processing by:
Controller: BF.direkt AG, Friedrichstrasse 23 a, D-70174 Stuttgart, Germany
E-mail: firstname.lastname@example.org, Tel.: +49 (0) 711 225544100,
Fax: +49 (0) 711 225544200
The company data protection officer of BF.direkt AG can be reached at the above address, Attn. Jochen Geck, or at email@example.com.
Collection and storage of personal data and type and purpose of use
a) When visiting the website
When visiting our website, www.bf-direkt.de, the browser you are using on your device automatically sends information to the server of our website. This information is temporarily stored in a log file. The following information is collected and saved, without any action on your part, until automated erasure:
- IP address of the computer sending the request;
- date and time of access;
- name and URL of the file accessed;
- website from which access occurs (referrer URL);
- browser used and possibly the operating system of your
- computer and the name of your access provider.
We process these data for the following purposes:
- ensuring a smooth connection to the website;
- ensuring the convenient use of our website;
- analysis of system security and stability; and
- other administrative purposes.
b) When registering for our newsletter
If you have expressly granted consent in accordance with Article 6(1) sentence 1(a) GDPR, we use your e-mail address to regularly send you our newsletter. To receive the newsletter, it is sufficient to provide an e-mail address.
You can unsubscribe at any time, for example by using a link at the end of each newsletter. Alternatively you can unsubscribe at any time by sending an e-mail to firstname.lastname@example.org.
c) When using our contact form
If you have questions of any kind, we offer you the opportunity of contacting us using a form provided on the website. You must provide a valid e-mail address to that we know who has sent the question and how we can answer it. Further information can be provided voluntarily.
In accordance with Article 6(1) sentence 1(a) GDPR, data processing for the purposes of contacting us is based on your voluntary consent.
The personal data collected by us for the use of the contact form are deleted automatically after your inquiry has been processed.
Personal data are not transferred to third parties for any purposes other than those stated below.
We only transfer your personal data to third parties if:
- you have expressly granted your consent in accordance with Article 6(1) sentence 1(a) GDPR;
- when, in accordance with Article 6(1) sentence 1(f) GDPR, the transfer is necessary for the establishment, exercise or defence of legal claims and there is no reason for the assumption that you have a compelling legitimate interest in your data not being transferred;
- in the event of a legal obligation to transfer in accordance with Article 6(1) sentence 1(c) GDPR; and
- this is legally permissible and necessary for the processing of contractual agreements with you in accordance with Article 6(1) sentence 1(b) GDPR.
The cookie stores information relating to the specifically used device. However, this does not mean that we directly learn your identity as a result.
On the one hand, cookies are used to enhance your use of our website. To do this we use session cookies to recognise that you have already visited individual pages of our website. These are automatically deleted when you leave the site.
We also use temporary cookies to optimise user-friendliness. These are stored on your device for a specific period. When you visit our website again to use our services, it automatically recognises that you have visited us before and remembers any data you entered or changes you made to settings so that you do not need to repeat them.
The data processed by cookies are necessary for the stated purposes to safeguard our legitimate interests and those of third parties in accordance with Article 6(1) sentence 1(f) GDPR.
Most browsers accept cookies automatically. However, you can configure your browser so that cookies are not stored on your computer or so that a pop-up message appears before a new cookie is created. However, fully deactivating cookies can result in you being unable to use all the features of our website.
a) Tracking tools
The legal basis for the tracking measures listed below that we use is Article 6(1) sentence 1(f) GDPR. By using these tracking measures, we want to ensure the needs-driven design and ongoing optimisation of our website. We also use tracking measures for the statistical analysis of the use of our website, and to analyse this information to optimise our offering for you. These interests are legitimate as referred to by the above regulation.
For information on the respective data processing purposes and data categories, please refer to the corresponding tracking tools.
For the purposes of the needs-driven design and ongoing optimisation of our website, we use Google Analytics, a web analysis service provided by Google Inc. (https://www.google.de/ intl/de/about/) (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; hereinafter: “Google”). Pseudonymised usage profiles are created and cookies are used (see section 4) in this context. The information generated by the cookie about your use of this website, such as
browser type/version, operating system used, referrer URL (the previously visited page), host name of the accessing computer (IP address), time of server request,
are sent to a Google server in the US and stored there. The information is used to analyse your use of the website, to produce reports on website activities and to perform other services relating to website and Internet use for the purposes of market research and the needs-driven design of these Internet pages. This information is also sent to third parties if this is provided for by law or if third parties process these data on behalf of others. On no account is your IP address kept with other data from Google. The IP addresses are anonymised to render allocation impossible (IP masking). You can prevent cookies from being installed using the corresponding settings in your browser software; however, please note that this may prevent you from using all the functions of this website in full.
You can also prevent the data generated by the cookie relating to your use of this website (including your IP address) from being collected and processed by Google by downloading and installing a browser plug-in (https://tools.google.com/dlpage/gaoptout).
As an alternative to the browser add-on, in particular for browsers on mobile devices, you can prevent tracking by Google Analytics by clicking on this link. This creates an opt-out cookie that prevents data about your use of this website from being collected in future. The opt-out cookie applies to this browser only and to our website only, and it is stored on your device. If you erase the cookies in this browser, you must save the opt-out cookie again.
Further information on data protection in connection with Google Analytics can be found, for instance, on the Google Analytics help site (https://support.google.com/analytics#topic=9143232).
Google Ads conversion tracking
We also use Google conversion tracking for the statistical analysis of the use of our website, and to analyse this information to optimise our website for you. Google Adwords creates a cookie (see section 4) on your computer if you access our website through a Google ad.
These cookies expire after 30 days and are not used to identify you personally. If the user visits certain pages of the Adwords customer’s website and the cookie has not yet expired, Google and the customer can recognise that the user clicked on the ad and was redirected to this page.
Every Adwords customer receives a different cookie. Cookies can therefore not be traced using the websites of Adwords customers. The information obtained using conversion cookies is used to produce conversion statistics for Adwords customers that have chosen to use conversion tracking. Adwords customers are informed of the total number of users that have clicked on their ad and been redirected to a page with a conversion tracking tag. They do not receive any information with which they can identify users personally.
Social media plug-ins
On our website, on the basis of Article 6(1) sentence 1(f) GDPR, we use plugins of the social networks Facebook, Twitter and Instagram to raise our company’s profile. The promotional purpose of this is considered a legitimate interest as referred to by the GDPR. Responsibility for operation in compliance with data protection requirements must be ensured by the respective providers. We use these plug-ins in line with the two-click method to offer visitors to our website the best possible protection.
Our website uses Facebook social media plug-ins to make its use more personal. We use the “Like” and “Share” buttons. This is a service provided by Facebook.
When you access a page on our website that contains such a plug-in, your browser establishes a direct connection to Facebook servers. The content of the plug-in is sent to your browser directly from Facebook and integrated by it into the website.
By integrating the plugins, Facebook receives the information that your browser has accessed the corresponding page of our website even if you do not have a Facebook account or are not currently logged in to Facebook. This information (including your IP address) is sent by your browser directly to a Facebook server in the US and stored there.
If you are logged into Facebook, Facebook can directly associate your visit to our website with your Facebook account. If you interact with the plug-ins, for example by using the “Like” and “Share” buttons, the corresponding information is also sent directly to a Facebook server and stored there. The information is also published on Facebook and shown to your Facebook friends.
Facebook can use this information for the purposes of advertising, market research and the needs-driven design of Facebook pages. To do so, Facebook creates usage, interest and relationship profiles, for example to analyse your use of our website in terms of the ads shown on Facebook, to inform other Facebook users of your activities on our website and to perform other services associated with the use of Facebook.
If you do not wish for Facebook to associate the data gathered from your use of our website with your Facebook account, you must log out of Facebook before visiting our website.
Plug-ins for the short message network of Twitter Inc. (Twitter) are integrated on our website. The Twitter plug-ins (tweet button) can be recognised by the Twitter logo on our site. An overview of tweet buttons can be found here (https://about.twitter.com/resources/buttons).
When you access a page on our website that contains such a plug-in, a direct connection is created between your browser and the Twitter server. As a result, Twitter receives the information that you have visited our page with your IP address. If you click on the Twitter “tweet” button while you are logged into your Twitter account, you can link the content of our pages to your Twitter profile. As a result, Twitter can associate the visit to our pages with your user account. Please note that, as page provider, we have no knowledge of the content of the data transferred or its use by Twitter.
If you do not wish for Twitter to associate your visit to our website, please log out of your Twitter user account.
Data subject rights
You have the right:
in accordance with Article 15 GDPR to obtain information on personal data of yours processed by us. In particular, you can request information on the purposes of processing, the category of personal data, the categories of recipients to whom your personal data have been or will be disclosed, on the envisaged storage period, the existence of the right to request rectification, erasure, restriction of processing or to object, the existence of the right to lodge a complaint, the source of your data if they are not collected by us and the existence of automated decision-making, including profiling, and any meaningful information on the details of this; in accordance with Article 16 GDPR, to request the rectification of personal data that are inaccurate or the completion of your personal data stored by us without delay; in accordance with Article 17 GDPR, to request the erasure of your personal data stored by us, provided that processing is not required for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defence of legal claims; in accordance with Article 18 GDPR, to request the restriction of processing of your personal data, if you contest the accuracy of the data, if the processing is unlawful but you oppose its erasure and we no longer need the data but you require them for the establishment, exercise or defence of legal claims or if you have objected to processing in accordance with Article 21 GDPR; in accordance with Article 20 GDPR, to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format or to request transmission to another controller; in accordance with Article 7(3) GDPR, to withdraw the consent you have already granted us at any time. As a result, we will no longer be permitted to continue the data processing that was based on this consent in future and you will have the right to lodge a complaint with a supervisory authority in accordance with Article 77 GDPR. To do so, you can typically contact the supervisory authority of your habitual residence or place of work or our corporate headquarters. Right to object
Provided that your personal data are processed based on the legitimate interests in accordance with Article 6(1) sentence 1(f) GDPR, you have the right in accordance with Article 21 GDPR to object to the processing of your personal data to the extent that there are grounds for this relating to your particular situation or if the objection is to direct marketing. In the latter case, you have a general right to object that we will implement without your specifying a particular situation.
If you wish to exercise your right to withdraw or object, it is sufficient to send an e-mail to email@example.com
For visits to our website, we use the common SSL procedure (Secure Socket Layer) in conjunction with the highest encryption level supported by your browser. This is typically 256-bit encryption. If your browser does not support 256-bit encryption, we instead use 128-bit v3 technology. You can see if an individual page of our website is transmitted in encrypted form by the closed key/lock symbol in the lower status bar of your browser.
We also use suitable technical and organisation measures to protect your data against accidental or deliberate manipulation, partial or complete loss or destruction and against unauthorised third-party access. Our security measures are continuously improved to keep pace with advancements in technology.
Status and amendment of this Data Protection Policy
This Data Protection Policy is currently valid and was last updated in May 2018.
The ongoing development of our website and our service offering or changes in legal or administrative regulations may necessitate the amendment of this Data Protection Policy. You can access and print out the current Data Protection Policy on our website at any time at https://www.bf-direkt.de/datenschutz.
Contact person for data protection
If you have any questions about the collection, processing or use of your personal data, if you wish to receive information on your data or request their rectification, restriction or erasure, or if you wish to revoke prior consent, please contact: Jochen Geck, VIVACIS Consulting GmbH, Horexstrasse 1, 61352 Bad Homburg.