Introduction
Bartscher GmbH (hereinafter: “We”) is the responsible party, as operator of the online service, for processing the user’s personal data from the online service. You can find our contact data in the legal notice of the online service, and the names of contacts for issues regarding the processing of personal data are directly provided in this data protection declaration.
We take the protection of your private sphere and private data very seriously. We only collect, save and use your personal data in compliance with the contents of this data protection declaration as well as applicable data protection law regulations, especially the European General Data Protection Regulation (GDPR) and the national data protection regulations.
With this data protection declaration, we want to inform you of the extent and purpose regarding the processing of your personal data in association with use of the online service.
Personal data
Personal data is information about an identified or identifiable individual. This includes all information about your identity, such as your name, email address or postal address. Information that cannot be associated with your identity (statistics, for example, such as the number of users of an online service) does not count as personal information.
You can generally use our online service without disclosing your identity and without entering any personal data. Only general information about your visit to our online service shall then be collected. However, personal data will be collected from you for some of the services offered. This data shall generally only be processed by us for the purpose of using this online service, and especially for providing the required information. Only essential data must be provided as mandatory data in the collection of personal data. Further details may be possible in addition, but these are voluntary details. We point out in each case whether they are mandatory or voluntary details. We provide specific details in the corresponding section of this data protection declaration.
Automated decision-making on the basis of your personal data does not take place in association with use of our online service.
Processing of personal information
Your details will be saved on specially protected servers within the European Union. These are protected with technical and organizational measures against loss, destruction, access, modification or distribution of your data by unauthorized persons. Access to your data is only possible by a few, authorized persons. These are responsible for technical, commercial or editorial server support. Despite regular controls, full protection against all dangers is not possible.
Your personal data will be transmitted encrypted via the Internet. We use SSL (Secure Socket Layer) encryption for data transfer.
Transfer of personal data to third parties
We generally only use your personal information to provide the services you request. If external service providers are commissioned by us to provide a service, their access to the data is exclusively for the purposes of providing the service. We employ technical and organizational measures to ensure compliance with the data protection law specifications and we also obligate our external service providers to do the same.
Legal basis of data processing
If we obtain your consent for processing your personal data, art. 6 sec. 1 lit. a) GDPR serves as a legal basis for data processing.
If we process your personal data because it is necessary to fulfil the contract or within the scope of contract-like relationship with you, art. 6 sec. 1 lit. b) GDPR serves as a legal basis for data processing.
If we process your personal data to fulfil a legal obligation, art. 6 sec. 1 lit. a) GDPR serves as a legal basis for data processing.
Art. 6 sec. 1 lit. f) GDPR can also be considered as a legal basis for data processing if processing your personal data is necessary to ensure the justified interests of our company or a third party and if your interests, basic rights and basic freedoms do not require the protection of personal data.
As part of this data protection declaration, we always point out on which legal basis the processing of your personal data is based.
Data deletion and storage period
We generally always delete or block your personal data when the purpose of storage no longer applies. Further storage can however take place if foreseen by legal stipulations we are subjected to, such as with regard to legal storage and documentation obligations. In such cases, we delete or block your personal data after the end of the corresponding stipulations.
Use of our online service
Information about your computer
Independent of your registration, we collect the following information about your computer every time our online service is accessed: The computer's IP address, your browser request and the time of the request. Furthermore, the status and the transmitted data volume as part of this request are recorded. We also record product and version information about the browser being used and the computer operating system. We also record the website from which access to the online service took place. Your computer's IP address shall only be saved for the time of using our online service and shall then be deleted or anonymized by encryption. The remaining data is stored for a limited period.
We use this data for the operation of an online service, especially to identify and rectify errors, to establish the capacity of our online service and to undertake modifications or improvements. We have an authorized interest in data processing according to art. 6 sec. 1 lit. f) GDPR for these purposes.
Use of Cookies
We use Cookies for our online service – like on many websites. Cookies are small text files that are saved on your computer and save certain settings and data for us to exchange with the online service via your browser. A Cookie generally contains the name of the domain from which the Cookie has been sent as well as information about the age of the Cookie and an alphanumerical identification code.
Cookies allow us to recognize your computer and make any advance settings immediately available. Cookies help us to improve the online service and enable us to offer you a better and even more customized service. Our authorized interest in data processing can be seen therein according to art. 6 sec. 1 lit. f) GDPR.
The Cookies used by us are so-called 'session Cookies', which are automatically deleted again after the end of the browser session. In some cases, Cookies can also be used with a longer storage period so that your advance settings and preferences can still be considered for your next visit to our online service.
Most browsers are set so that they automatically accept Cookies. You can deactivate the system from saving Cookies or set your browser so that it informs you as soon as Cookies are sent. It is also possible to manually deleted saved Cookies using the browser settings. This may prevent you from taking full advantage of our online service or may mean you cannot use it at all if you reject the storage of Cookies or delete necessary Cookies.
Google Analytics
We use Google Analytics for statistical evaluations. Google Analytics is a web analysis service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland (“Google”). Google Analytics uses so-called 'Cookies', text files that are saved on your computer, and allow you to use the website. Information on your use of this website generated by the Cookies is transferred to a Google server in the USA and saved there.Information on your use of this website generated by the Cookie is transferred to a Google server in the USA and saved there. On behalf of the website operator, Google will use this information to evaluate your usage of the website, to compile reports on website activities for the website operators and to perform other services connected to website and Internet usage. Google will not link the IP address transmitted by your browser to other Google data within the scope of Google Analytics. You can prevent the Cookies from being saved by making a relevant setting in your browser software; however, we would like to point out that you may not, in this case, be able to have full use of all the functions of this website. You can also object to the collection of data produced by the Cookie and use of the website (including your IP address) by Google and prevent Google from processing this data by downloading the available browser plugin under the following link http://tools.google.com/dlpage/gaoptout?hl=de.
You can access the security and data protection policies for Google Analytics at https://policies.google.com/privacy?hl=de&gl=de.
In our opinion, the protection precautions taken for data processing to optimize our online service can be seen as an authorized interest in data processing according to art. 6 sec. 1 lit. f) GDPR.
Registration
As an existing Bartscher trade partner, you can register for use of our online service. For this, you must provide us with the data requested as part of registration, which is your customer number, company name, first name and surname, telephone number and email address. We also record the date and time of registration and the IP address. After registration, we compare your details with our customer data; use of the customer account is activated if the details match.
The legal basis for processing your data for registration is your consent according to art. 6 sec. 1 lit. a) GDPR. If you register with us for fulfillment or initiation of a contract, the legal basis for processing the data is additionally art. 6 sec. 1 lit. b) GDPR. Information requested as a mandatory field as part of the registration is required to fulfil or initiate a contract with us for certain services.
Order processing
We use your personal information for orders only within our company and associated companies, as well as companies commissioned to process orders.
Storage and data transfer for orders
We work together with various companies for order processing, which are responsible for payment processing and logistics. We ensure that our partners also comply with the data protection law regulations. We give your address data (name and address) to the respective transport company that is delivering the ordered products to you. The legal basis is art. 6 sec. 1 lit. b) GDPR. Processing of your personal data is required for fulfillment of the contract with you.
The data shall be stored by us for as long as it is required for fulfillment of the contract. Furthermore, we store this data for the fulfillment of post-contractual obligations and on the basis of trade and tax law retention periods for the legally specified period of time. This retention period is generally 10 years to the end of the respective calendar year.
Payment processing for orders
Depending on the selected payment method, payments for orders may be processed by involving a service provider.
For payments by credit card or PayPal, technical processing takes place via the company Computop Wirtschaftsinformatik GmbH, Schwarzenbergstr. 4, 96050 Bamberg. Computop is a PCI DSS certified Payment Service Provider and leading service provider for secure payment transactions. Computop is subjected to regular security certification and meets the PCI security standard. The corresponding account or credit card information will be exclusively saved and processed by the company Computop Wirtschaftsinformatik GmbH.
For payment by PayPal, you will be transferred to the PayPal Internet site via a link. Your personal data shall thereby be processed. This is your name, address, e-mail address, possibly your telephone number, and your account or credit card data. Please observe the general terms of business, conditions of use and data protection principles of PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg on the Internet site www.paypal.com.
The legal basis for payment transactions is art. 6 sec. 1 lit. b) GDPR. Processing of your personal data is required for fulfillment of the contract with you, whereby you are free to choose the payment method.
The data shall be stored by us for as long as it is required for fulfillment of the contract. Furthermore, we store this data for the fulfillment of post-contractual obligations and on the basis of trade and tax law retention periods for the legally specified period of time. This retention period is generally 10 years to the end of the respective calendar year.
Credit check
If we pay in advance, we reserve the right to order credit rating information based on mathematical-statistical procedures from the following company(ies) to safeguard our legitimate interests:
- Creditreform Paderborn, Friederichs & Davis KG, Am Hoppenhof 30, D - 33104 Paderborn
- Coface, Germany office, Isaac-Fulda-Allee 1, D- 55124 Mainz
For a credit rating, we send personal data and use the information we receive about the statistical probability of a payment default. The credit rating information may contain probability values (score values) calculated based on scientifically recognized mathematical-statistical procedures. Using a number of markers, for instance income, address data, career, marital status and previous payment behavior, the future payment default risk of the customer can be estimated. The result is presented as a number (a so-called score). This information collected in this way forms the basis for our decision about the justification, execution or termination of the contractual relationship.
However, the selection of one of the payment options does not depend on this kind of information.
The legal basis for the credit check is art. 6 sec. 1 lit. a) GDPR.
Communication with us
You can contact us in a number of ways. We would also be pleased to give you regular information in our email newsletter.
Communication by email
In the case of electronic communication, we are not able to guarantee data security; any highly confidential information should therefore be sent by post.
You can personally decide which information to transmit to us by email. The legal basis for processing your data is your consent according to art. 6 sec. 1 lit. a) GDPR.
Please be aware that our mail system automatically archives emails. All incoming and outgoing emails are digitally archived in an audit-proof manner in order to comply with tax law (GoBD §§ 146, 147 of the tax code AO ) and commercial law. They can be stored for a period of up to 10 years. One exception is all emails sent to karriere@bartscher.de. If you have any further questions regarding our digital archiving procedures please contact our data protection supervisor. Please also be aware that we only accept job applications in PDF format. Our security system does not permit zipped files (WinZip, WinRAR, 7Zip, etc.). Your application documents will not be encrypted. We assume that we are also permitted to answer any job application emails without using encryption. If this is not the case please inform us of this by email when you submit your application. We cannot be held responsible for any unauthorized third party viewing of your documents that may occur during the transmission of unencrypted emails.
Newsletter
Your email address will be used for our own advertising purposes when you register for our newsletter, until you unsubscribe. You will receive regular information by email on current topics as well as emails on special occasions, such as specific campaigns. The emails may be personalized and individualized based on our information about you.
Unless you have given us your consent in writing, we use the so-called Double-Opt-In method for registration for our newsletter i.e. we will only start sending you a newsletter by email if you have explicitly confirmed that we should activate dispatch of the newsletter. We shall send you an email and ask you to confirm that you want to receive our newsletter by clicking on the link contained in this email.
The legal basis for processing your data is your consent according to art. 6 sec. 1 lit. a) GDPR, if you have explicitly registered for the newsletter. Within the scope of legal specifications, it may also be possible that you receive our newsletter without explicit consent because you have ordered goods or services from us, if we have received your email address in association with this, and if you have not rejected the receipt of information by email. Our authorized interest in transmission of direct advertising according to art. 6 sec. 1 lit. f) GDPR shall be viewed as the legal basis in this case.
If you no longer want to receive our newsletter, you can withdraw your consent at any time with future effect or revoke further receipt of the newsletter without any costs being incurred other than the transmission costs according to the basic tariffs. Simply use the unsubscribe link contained in each newsletter or send a message to us or our data protection officer.
Social media
You will find links to the career network Xing and YouTube in our online service. You can recognize the links by the respective logo of the provider.
The corresponding external services will be opened by clicking on the links. This data protection declaration does not apply to these offers. Please find further information on the valid regulations in the corresponding data protection declarations of the individual providers; these can be found at:
Xing: https://www.xing.com/privacy
YouTube: https://policies.google.com/privacy?hl=de&gl=de
Personal information is not transmitted to the respective providers before calling up the corresponding links. Your retrieval of the linked page is also the basis for data processing by the respective provider.
Use of YouTube
Our online service incorporates videos and we use a plugin from YouTube (“YouTube“), a service operated by Google, to play them. The operator of the service is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. A connection is made to the YouTube servers if you call up an Internet page of our online service where a video is incorporated. The YouTube server will be notified about which of our Internet pages of our online service you have visited.
If you are logged into your YouTube account, you make it possible for YouTube to directly assign your surfing behavior to your personal profile. You can prevent this by logging out of your YouTube account. Further information on handling user data can be found in the Google data protection declaration at https://policies.google.com/privacy?hl=de&gl=de, which also applies to YouTube.
We use YouTube so that we can show you videos and convey more about us and our services; this also includes our authorized interest in terms of art. 6 sec. 1 lit. f) GDPR.
Your rights and contact
We attach huge importance to explaining as transparently as possible how your personal data is processed and also informing you about your rights. If you would like further information or want to exercise your rights, you are welcome to contact us at any time so we can deal with the matter.
Rights of data subjects
Extensive rights are available to you regarding the processing of your personal data. Firstly you have an extensive right to disclosure of information and can demand the correction and/or deletion or blockage of your personal data. You can also request the restriction of processing and have a right to appeal. With respect to the personal data you have transmitted us, you also have a right to data portability.
Please contact our customer service if you would like to enforce your rights and/or would like further information. Alternatively, you can contact our data protection officer.
Withdrawal of consent and appeal
You can revoke the consent you have given at any time with future effect. Consent can be revoked without affecting the legitimacy of the processing that was carried out based on the consent before it was revoked. Our customer service and data protection officer are the contacts in this matter.
If the processing of your personal data is not based on consent, but on another legal basis, you can appeal data processing. Your appeal shall lead to a review and possibly the termination of data processing. You will be informed about the result of the review and will receive – if data processing should still be continued – further information from us on why data processing is permitted.
Data protection officer and contact
We have appointed an external data protection officer who assists us in data protection law issues and whom you are welcome to contact directly. Our data protection officer and his team are pleased to remain at your disposal to answer any questions regarding the handling of personal data or other information on data protection law issues:
Sachverständigenbüro Mülot GmbH
Dirk-Michael Mülot
Grüner Weg 80, 48268 Greven, Germany
Tel.: +49 2571 5402-0
Fax: +49 2571 5402-199
E-mail: d.muelot@svb-muelot.de
Complaints
You have the right to lodge a complaint with a supervisory authority if you believe that the processing of your personal data does not comply with this data protection declaration or the applicable data protection regulations. You can also lodge a complaint with our data protection officer. The data protection officer shall then review the matter and inform you about the result of the review.
Further information and changes
Links to other websites
Our online service may contain links to other websites. Theses links are generally indicated as such. We have no influence over the extent to which linked websites comply with the valid data protection regulations. We therefore recommend that you inform yourself about the respective data protection declarations for other websites.
Changes to this data protection declaration
Last update of this data protection declaration is indicated by the date (below). We reserve the right to modify this data protection declaration at anytime with future effect. A change is made specifically in case of technical adaptations of the online service or in case of changes to data protection law stipulations. The latest version of the data protection declaration can always be directly retrieved via the online service. We recommend that you inform yourself regularly about changes to this data protection declaration.
Last update of this data protection declaration: May 2018