Privacy Policy

Privacy Policy

Data Protection

Privacy Policy

Below we inform you about the processing of your personal data by us. Personal data within the meaning of Article 4 of the General Data Protection Regulation (GDPR) includes all information relating to an identified or identifiable natural person (such as name, address, telephone number, email address, invoices, bank details, etc., as well as your user behavior).

Contents

  • Contact Details

  • Lawfulness of the Processing of Personal Data

  • Collection and Storage of Personal Data and the Nature and Purpose of Their Use

  • Storage Period and Data Deletion

  • Disclosure of Data to Third Parties

  • Hosting

  • Cookies

  • Payment Service Providers

  • Credit Checks

  • Analytics Services

  • Social Media Services

  • Other Online Services

  • Rights of Data Subjects

  • Right to Object

  • Data Security

  • Currency and Amendment of this Privacy Policy

Contact Details

This privacy information applies to data processing carried out by the following controller:

Controller:
BBE Bamberg + Bormann-Electronic GmbH

Address:
Wiebelsheidestr. 45
59757 Arnsberg
Germany

Email: info@bbe-electronic.de
Phone: +49 (0) 2932 547765
Fax: +49 (0) 2932 34675

Lawfulness of the Processing of Personal Data

We generally collect and use personal data of our users only insofar as this is necessary to provide a functional website and our content and services. The collection and use of personal data is generally carried out only with the user’s consent. An exception applies in cases where prior consent cannot be obtained for factual reasons or where data processing is permitted by law.

Pursuant to Article 6 GDPR, the processing of personal data is lawful if one or more of the following conditions are met:

  • You have given your explicit consent pursuant to Art. 6(1)(a) GDPR;

  • Processing is necessary pursuant to Art. 6(1)(b) GDPR for the performance of a contract with you or for pre-contractual measures taken at your request;

  • Processing is necessary to comply with a legal obligation pursuant to Art. 6(1)(c) GDPR;

  • Processing is necessary to protect vital interests of you or another natural person pursuant to Art. 6(1)(d) GDPR;

  • Processing is necessary pursuant to Art. 6(1)(e) GDPR for the performance of a task carried out in the public interest or in the exercise of official authority vested in us;

  • Processing is necessary pursuant to Art. 6(1)(f) GDPR for the purposes of legitimate interests pursued by us or a third party, unless your interests or fundamental rights and freedoms requiring the protection of personal data prevail.

Collection and Storage of Personal Data and the Nature and Purpose of Their Use

When using our website, we may process personal data of users (including customers, interested parties, and visitors), such as contact data, usage data, and communication data.

This is done, among other things, to provide a functional online service, to communicate with users, to process contact or customer inquiries, and to fulfill contractual obligations. Data may also be collected and processed for marketing purposes.

Below we inform you which data may be collected and processed and for what purpose.

When Visiting the Website

When accessing our website, information is automatically transmitted by the browser used on your device to our server. This information is temporarily stored in a so-called log file. The following information may be collected without your intervention and stored until automatically deleted:

  • IP address of the requesting device

  • Date and time of access

  • Content of the request (specific page)

  • Name and URL of the retrieved file

  • Access status / HTTP status code

  • Amount of data transferred

  • Website from which access is made (referrer URL)

  • Browser used and, if applicable, the operating system of your device and the name of your access provider

  • Language and version of the browser software

The data is processed for the following purposes:

  • Ensuring a smooth connection to the website

  • Ensuring comfortable use of the website

  • Evaluating system security and stability

  • Further administrative purposes

The legal basis for processing is Art. 6(1)(f) GDPR. Our legitimate interest follows from the purposes listed above. The data is not used to draw conclusions about your identity.

Cookies and online services may also be used. Further details are provided below.

Contract Initiation / Contract Performance

We process personal data received in the course of pre-contractual inquiries and contractual relationships. This may include salutation, first and last name, address, phone number, email address, IBAN / credit card number including verification code (only where necessary for payment processing).

Data may be disclosed to third parties (see section “Disclosure of Data to Third Parties”).

Processing is carried out pursuant to Art. 6(1)(b) GDPR for contract performance or pre-contractual measures, otherwise based on consent pursuant to Art. 6(1)(a) GDPR or our legitimate interest pursuant to Art. 6(1)(f) GDPR.

Newsletter Registration

You may subscribe to our newsletter. For this, we require your email address and optionally your name.

We use the double opt-in procedure. After registration, you will receive an email asking you to confirm your subscription. By clicking the activation link, you confirm that you are the owner of the email address and wish to receive the newsletter.

If confirmation is not provided within three weeks, the email address will be deleted.

We store your IP address and the date of registration for documentation purposes. You may unsubscribe at any time via the unsubscribe link in each newsletter email or by contacting us. Data stored for other purposes remains unaffected.

Contact Form

When contacting us via the contact form, your first and last name and a valid email address are required. Providing a phone number is optional.

Processing is carried out pursuant to Art. 6(1)(b), (a), and (f) GDPR for the purpose of handling your inquiry.

Storage Period and Data Deletion

Personal data is stored only as long as necessary for the purpose for which it was collected. Thereafter, it is deleted unless statutory retention periods apply (e.g. tax or commercial law obligations of up to ten years).

Consent may be withdrawn at any time, resulting in deletion unless legal retention obligations apply.

Disclosure of Data to Third Parties

Personal data is disclosed only if:

  • You have given explicit consent;

  • Disclosure is necessary for legitimate interests;

  • There is a legal obligation;

  • Disclosure is required for contract performance (e.g. shipping companies, dropshippers);

  • Disclosure is required for payment processing via payment service providers.

Where necessary, a data processing agreement pursuant to Art. 28 GDPR has been concluded.

Hosting

This website is hosted by an external service provider. Personal data may be stored on servers of the host, possibly in the United States.

A data processing agreement pursuant to Art. 28 GDPR has been concluded. Processing is based on Art. 6(1)(b) and (f) GDPR.

Cookies

We use cookies to ensure proper website functionality and improve user experience. Necessary cookies are used without consent; other cookies require consent pursuant to Art. 6(1)(a) GDPR or are based on legitimate interest pursuant to Art. 6(1)(f) GDPR.

You may configure your browser to reject cookies; however, this may limit website functionality.

Payment Service Providers – PayPal

Payments via PayPal are processed by PayPal (Europe) S.à r.l. et Cie, S.C.A., Luxembourg. PayPal may conduct credit checks. Further information is available in PayPal’s privacy policy:
https://www.paypal.com/de/webapps/mpp/ua/privacy-full

Credit Checks

For invoice payments, credit checks may be conducted based on legitimate interests pursuant to Art. 6(1)(f) GDPR.

Analytics Services – Google Analytics

We use Google Analytics (Google Ireland Limited). IP anonymization is enabled. Data may be processed on servers in the USA.

Storage period: 14 months.

You may opt out via browser plugin:
http://tools.google.com/dlpage/gaoptout?hl=en

Privacy policy:
https://policies.google.com/privacy

Google Remarketing / Similar Audiences

We use Google Analytics Remarketing and cross-device advertising. Cookies are used with a maximum lifespan of 18 months.

Opt-out options:
https://tools.google.com/dlpage/gaoptout?hl=en
https://www.google.com/settings/ads/onweb

Google Ads Conversion Tracking

Google Ads conversion tracking is used. Cookies expire after 30 days and do not identify individuals.

Social Media Services

We do not use social media services.

Other Online Services

Google AdSense, Google Maps, Google Fonts, Userlike Live Chat, Geprüfter Webshop Seal

Various Google services and Userlike technologies may be used based on consent or legitimate interests. Details are governed by the respective providers’ privacy policies.

Rights of Data Subjects

You have the right to:

  • Access your data (Art. 15 GDPR)

  • Rectification (Art. 16 GDPR)

  • Erasure (Art. 17 GDPR)

  • Restriction of processing (Art. 18 GDPR)

  • Data portability (Art. 20 GDPR)

  • Withdrawal of consent (Art. 7(3) GDPR)

  • Lodge a complaint with a supervisory authority (Art. 77 GDPR)

Right to Object

You may object to processing based on legitimate interests pursuant to Art. 21 GDPR. For direct marketing purposes, you may object at any time.

An email to the address stated in the legal notice is sufficient.

Data Security

We use SSL encryption (up to 256-bit). Technical and organizational security measures are implemented and continuously improved.

Currency and Amendment of this Privacy Policy

This privacy policy is currently valid and was last updated in November 2020.

Due to legal or technical changes, updates may be required. The current version is always available on this website.