Privacy Policy of Alexander Maier GmbH

The following privacy policy applies to the use of the website [https://www.busbaer.de] (hereinafter the “Website”).

This is a translation of the German original for your convenience. In the event of any discrepancy, the German version prevails.

Company
Alexander Maier GmbH
Beckstraße 3, 69412 Eberbach, Germany
Register court: Mannheim
Commercial register: HRB 335404

Managing Director: Alexander Maier
 

(hereinafter “we” or “us”), as the operator of the website https://www.busbaer.de, is the controller of the personal data of the customers and visitors of the Website (hereinafter “you” or “the buyer”) within the meaning of the General Data Protection Regulation (“GDPR”).

We protect your privacy and your private data. We collect, process and use your personal data in accordance with the content of this privacy policy and with the applicable data protection provisions, in particular the GDPR and the ePrivacy rules, in order to be able to offer you the portal named above. This privacy policy sets out which personal data we collect, process and use about you. We therefore ask you to read the following explanations carefully.

By using this Website you consent to the collection, use and transfer of your data in accordance with this privacy policy.
 

1.    Controller
The controller responsible for the collection, processing and use of your personal data within the meaning of the GDPR is

Alexander Maier GmbH
Beckstraße 3
D - 69412 Eberbach, Germany
Tel.: +49 (0) 6271-919470
E-mail: Info (@) busbaer.de

If you wish to object to the collection, processing or use of your data by us under this privacy policy, either in whole or in respect of individual measures, you may address your objection to the controller named above. You may save and print this privacy policy at any time.

General use of the website

Collection of personal data
Personal data within the meaning of this privacy policy means any information relating to an identified or identifiable natural person (hereinafter the “data subject”). This includes in particular your name, your e-mail address and, where applicable, your address, your telephone number and your VAT details if you are a registered reseller. Personal data also includes information about your use of our Website. In this context we collect personal data from you as follows: information about your visits to our Website, such as the volume of data transferred, the location from which you access data on our Website, as well as other connection data and the resources you access. This is generally done by using log files and cookies.

As a matter of principle, your personal data is deleted within the statutory deletion periods. Where we collect your IP address, it is stored only for the duration of your use of the Website and is then deleted without delay or anonymised by truncation. The remaining data is stored for a limited period determined by the following criteria:

    - Master personal data such as name, date of birth, place of birth, language, job title and industry sector
    - Contact and address data such as address, company address and e-mail address
    - Tax data such as tax number and/or VAT identification number
    - Order data such as the type and quantity of the goods ordered or the services used
    - Payment terms
    - Data arising from complaints
    - Identification and authentication data such as identity document data, signature, company stamp and passwords
    - Advertising and sales data including target-group-specific information
    - Data arising from ongoing contact management or from the initiation of business relations, such as data on the communication that has taken place, including date, time and purpose
    - Copies of correspondence, where this takes place in writing, by e-mail or by fax

Purpose of use and legal basis

We use your personal data for the following purposes:
- to provide the services you have requested
- to ensure that our Website and the catalogues and services it contains are presented to you in the most effective and interesting manner possible
- to fulfil our obligations under any contracts concluded between you and us
- to enable you to take part in interactive offerings, should you wish to do so
- to inform you about changes to our services.

With regard to your personal data we will comply with the relevant statutory provisions, in particular the General Data Protection Regulation (GDPR).

Your personal data is collected, stored, processed and used by us if, to the extent that and for as long as this is necessary for the establishment, performance or termination of a contractual relationship. Any further collection, storage, processing and use of personal data takes place only to the extent that a legal provision requires or permits this, or where you have given your consent. We point out that, in order to carry out pre-contractual measures such as registration as a new customer and to perform contracts concluded with you, the collection, processing and use of, among other things, the names of your employee authorised to place orders, consumer or business status, address, date of birth and bank details is necessary on the basis of Art. 6 (1) (b) GDPR. Without providing this personal data, placing an order and registering as a customer with us is not possible.

Data security
All information you transmit to us is stored on servers within the European Union. Unfortunately, the transmission of information over the internet is not completely secure, which is why we cannot guarantee the security of data transmitted to our Website over the internet. However, we protect our Website and other systems by technical and organisational measures against loss, destruction, access, alteration or dissemination of your data by unauthorised persons. In particular, your personal data is transmitted to us in encrypted form. For this purpose we use the SSL (Secure Socket Layer) encryption system.

No disclosure of your personal data
We do not disclose your personal data to third parties unless you have consented to the disclosure or unless we are entitled or obliged to disclose data on the basis of statutory provisions and/or official or court orders. This may concern in particular the provision of information for the purposes of criminal prosecution, for the prevention of danger or for the enforcement of intellectual property rights.

Data protection and third-party websites
The Website may contain hyperlinks to and from third-party websites. If you follow a hyperlink to one of these websites, please note that we cannot accept any responsibility or liability for external content or privacy terms. Please make sure you are aware of the applicable privacy terms before transmitting personal data to such websites.

Changes to this privacy policy
We reserve the right to change this privacy policy at any time with effect for the future. The current version is available on the Website at all times. Please visit the Website regularly and inform yourself about the applicable privacy policy.
 

Your rights and contact
Pursuant to Art. 21 (1) GDPR you may object at any time, by informal notice to the seller, to any use of your personal data (I) for the performance of a task carried out in the public interest or in the exercise of official authority vested in us, or (II) for the purposes of the legitimate interests pursued by us or by a third party – such as, where applicable, following the transfer to a credit reference agency described above. If in such a case we are unable to demonstrate compelling legitimate grounds for the use which override your interests, we will no longer use the data concerned for these purposes after receipt of the objection. We point out that in such a case, for example, order functions or payment methods may be restricted.

Likewise, pursuant to Art. 21 (2) GDPR you may object at any time and free of charge, by informal notice to us, to any use of your personal data for direct marketing purposes. After receipt of the objection we will no longer use the data concerned for these purposes.

You have extensive rights regarding the processing of your personal data. Subject to the statutory conditions, we will on request provide you free of charge with information about the personal data stored about you. Subject to the statutory conditions you also have the right to request the rectification, erasure or restriction of processing of your data, or its transmission to a third party. You may also request a restriction of processing and you have a right to object as well as a right to data portability. If you wish to exercise any of your rights and/or to receive more detailed information about them, please contact us at info@busbaer.de.

In addition, you have the right to lodge a complaint with a supervisory authority. Should you have any questions, comments or requests regarding the collection, processing and use of your personal data by us, please also contact us using the contact details provided.

Specific information for visitors to the website

Alexander Maier GmbH attaches great importance to the protection of your personal data when providing the website as well. In this privacy policy we inform visitors to our website about the collection, use, disclosure, storage and protection of your personal data. In principle you can use the websites of Alexander Maier GmbH without providing any personal data, although not to their full extent.

“Personal data” means any information relating to an identified or identifiable natural person (hereinafter the “data subject”). “Processing” means any operation or set of operations performed on personal data, whether or not by automated means.

This privacy policy applies to all websites, applications, services or tools of Alexander Maier GmbH (hereinafter the “Services”) which refer to this privacy policy, including access via mobile devices. The controller responsible for the processing of personal data on our website is Alexander Maier GmbH, Beckstraße 3, 69412 Eberbach, Germany. Contact: info@busbaer.de We process your data exclusively on the basis of the statutory provisions (GDPR, DDG and TDDDG).

1. Legal basis
The collection and processing of personal data on our website and Services takes place on the basis of Art. 6 (1) (f) GDPR. Under that provision, the processing of personal data is permitted where the processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, and where the interests or fundamental rights and freedoms of the data subject that are to be taken into account by law do not override those interests. The processing of personal data which we store when you visit our website takes place for the purpose of maintaining the functionality of the information made publicly available, for the control of functions on the website and its general technical operation, and for the analysis of the website’s functionality and navigation. Our concern within the meaning of the GDPR (legitimate interest) is to improve our offering and our web presence. Because the privacy of our users is important to us, user data is pseudonymised. We therefore accommodate the interests of website visitors as data subjects by means of pseudonymisation and routine deletion within 30 days.
 

2. Cookies
Our website uses so-called cookies. These are small text files which are stored on your device by means of your browser. They do no harm. Cookies are set only after separate notice to, and consent by, the visitor. We use cookies in order to make our offering user-friendly. Some cookies remain stored on your device until you delete them. They allow us to recognise your browser on your next visit. If you do not wish this, you can configure your browser so that it informs you about the setting of cookies and you permit this only in individual cases. You can also delete cookies that have been set in your browser settings. If cookies are deactivated, the functionality of our website may be restricted.

Cookie for your consent
So that we do not have to ask you again on every page view, we store your decision about external content in a cookie named “busbaer_consent”. It contains only the value “yes” or “no” – no identifier by which you could be recognised – and is deleted after six months. This cookie is necessary for the service you have expressly requested and therefore does not require consent (§ 25 (2) no. 2 TDDDG, the German act implementing the ePrivacy Directive).

Withdrawal
You can change your decision at any time – via the “Cookie settings” link at the foot of every page. It is also sufficient to delete the cookie in your browser settings.

3. IP addresses
Your IP address is recorded in the server log files when you access the website, but is pseudonymised immediately by deleting the last 8 bits. As a result, only a rough localisation remains possible.

4. Contacting us
If you contact us using a form on the website or by e-mail, the data you provide will be stored by us for six weeks for the purpose of processing your enquiry and in case of follow-up questions. We do not pass this data on without your consent; in particular, it is not passed on for advertising purposes. Required data which you must provide to us via the contact form – such as your e-mail address, your name and the reason for contacting us (mandatory fields) – as well as the voluntary details you provide for contact purposes, are transmitted in encrypted form via SSL.

5. Newsletter
In the following notes we inform you about the content of our newsletter, about the subscription and dispatch procedure, and about your rights to object. By subscribing to our newsletter you agree to receive it and to the procedures described.

5.1 Content of the newsletter
We send newsletters, e-mails and other electronic notifications containing promotional information (hereinafter “newsletter”) only with the consent of the recipients or on the basis of a statutory permission.

Where the content of the newsletter is described specifically as part of the subscription process, that description is decisive for the users’ consent. Otherwise, our newsletters contain information on topics relating to our software “EisBär KNX/SCADA”, home automation, bus systems and other technologies, as well as about our company (this may include, in particular, references to trade fairs, events and workshops, our products and services, or online presences).

5.2 Double opt-in and logging
Subscription to our newsletter takes place in a so-called double opt-in procedure. This means that after subscribing you will receive an e-mail asking you to confirm your subscription. This confirmation is necessary so that nobody can subscribe using someone else’s e-mail address.

Newsletter subscriptions are logged in order to be able to prove that the subscription process complies with the legal requirements. This includes storing the time of subscription and of confirmation, as well as the IP address.

5.3 Dispatch
Our newsletters are sent via our own installation on our web hosting. No external dispatch service provider is involved; your e-mail address is not transferred to third parties for this purpose and is not transferred to a third country.

Our newsletters include a measurement of success: we evaluate whether and how often a mailing is opened and which links in it are clicked. What is collected, for what purpose, for how long, and how you can object is set out in 5.5 “Measurement of success”.

5.4    Subscription data
For subscription to the newsletter we require only your e-mail address. No further details are collected.

5.5    Measurement of success
Our newsletters contain a so-called tracking pixel – an image file the size of a single pixel which is retrieved from our server when the message is opened. In addition, the links in the message first lead via our server and from there to the actual destination.

In doing so we collect whether and when you opened a mailing, how often this happened, which links you clicked, and the identification transmitted by your e-mail program. This information is assigned to your e-mail address and is therefore personal data. We do not store your IP address.

The sole purpose is to align our newsletters with the interests of our recipients – that is, to recognise which topics are read – and, where appropriate, to repeat a mailing once to those who did not open it. The information is not combined with other data, not passed on to third parties and not evaluated for any other purpose.

We store this information for as long as it is required for the purposes stated. We will delete it at your request. We retain your e-mail address in a suppression list even after you unsubscribe, so that we can permanently honour your unsubscription; this list serves no other purpose.

Your right to object: You may object to the measurement of success at any time without having to cancel the newsletter. An informal message to Info@busbaer.de is sufficient. We will then send future mailings to you without a tracking pixel and without click measurement, and we will no longer evaluate messages already delivered to you. You may of course also cancel the newsletter altogether instead (see 5.6).

5.6    Cancellation / withdrawal
You can cancel receipt of our newsletter at any time, i.e. withdraw your consent. You will find an unsubscribe link at the end of every newsletter. After withdrawal, your e-mail address is removed from the distribution list.

5.7    Legal bases under the General Data Protection Regulation
In accordance with the requirements of the applicable European General Data Protection Regulation (GDPR), we inform you that consent to the dispatch of e-mails is obtained on the basis of Art. 6 (1) (a) and Art. 7 GDPR as well as § 7 (2) no. 3 and § 7 (3) of the German Act against Unfair Competition (UWG).

The logging of the subscription procedure takes place on the basis of our legitimate interests pursuant to Art. 6 (1) (f) GDPR. Our interest is directed at the use of a user-friendly and secure newsletter system which serves both our business interests and the expectations of users.

The measurement of success described in 5.5 takes place on the basis of our legitimate interests pursuant to Art. 6 (1) (f) GDPR. Our interest is directed at aligning our newsletters with the interests of our recipients and at being able to assess their success. You may object to this processing at any time pursuant to Art. 21 GDPR without losing access to the newsletter – see 5.5.
 

6. Use of Google Maps
On our site we use “Google Maps” in combination with the so-called “share function” to make it easier to find and locate our premises.  “Google Maps” is a service of Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, hereinafter “Google”.

Embedded only with your consent. This map is not loaded automatically. On your first visit we ask you whether you wish to allow external content; a connection to Google is established only once you have agreed. If you decline, you will see a notice in place of the map with a “Load map” button – clicking it loads only this single map for this page view and does not constitute general consent. The information below applies as soon as the map is loaded.

Each time a web page containing an embedded Google Maps map is accessed, Google sets a cookie in order to process your user settings and data when displaying the page visited. Please note that as a rule this cookie is not deleted when you close your browser, but expires only after a certain period unless you delete it manually beforehand. You can prevent this data processing by Google and the loading of the embedded content, for example by deactivating the “Google Maps” service through disabling the JavaScript function in your browser. 

The use of “Google Maps” and of the information obtained via “Google Maps” takes place in accordance with the Google Terms of Service http://www.google.de/intl/de/policies/terms/regional.html and the additional terms of service for “Google Maps” https://www.google.com/intl/de_de/help/terms_maps.html

7. Use of YouTube components with enhanced privacy mode
On our website we use content (videos) of YouTube, LLC, 901 Cherry Ave., 94066 San Bruno, CA, USA, a company of Google Inc., Amphitheatre Parkway, Mountain View, CA 94043, USA. Videos are embedded on our website only using the “enhanced privacy mode” option provided by YouTube.

When you access a page containing an embedded video, a preview image is loaded from YouTube’s internet servers and displayed in your browser within the page accessed on your computer. According to YouTube, in “enhanced privacy mode” website data – in particular which of our pages you have visited – is transmitted to the YouTube server only when you watch the video. If you are logged in to YouTube at the same time, this information is assigned to your YouTube member account. You can prevent this by logging out of your member account before visiting our website.

Further information on data protection at YouTube is provided by Google at the following link: https://www.google.de/intl/de/policies/privacy/

8. Privacy policy for the use of Facebook plugins
(Like button)

Embedded only with your consent. These plugins are not loaded automatically. On your first visit we ask you whether you wish to allow external content; a connection to Facebook is established only once you have agreed. If you decline, no connection takes place and the buttons do not appear. The information below applies as soon as the plugins are loaded.

Plugins of the social network Facebook, provider Facebook Inc., 1 Hacker Way, Menlo Park, California 94025, USA, are integrated into our pages. You can recognise the Facebook plugins by the Facebook logo or the “Like button” on our site. You can find an overview of the Facebook plugins here: http://developers.facebook.com/docs/plugins/.

When you visit our pages, the plugin establishes a direct connection between your browser and the Facebook server. Facebook thereby receives the information that you have visited our page with your IP address. If you click the Facebook “Like button” while logged in to your Facebook account, you can link the content of our pages to your Facebook profile. This allows Facebook to associate your visit to our pages with your user account. We point out that, as the provider of the pages, we obtain no knowledge of the content of the transmitted data or of its use by Facebook. Further information on this can be found in Facebook’s privacy policy at http://de-de.facebook.com/policy.php.

If you do not wish Facebook to be able to associate your visit to our pages with your Facebook user account, please log out of your Facebook user account.

9. Typefaces
We use the typeface “Roboto” for the design of our pages. The font files are located on our own server and are loaded from there. No connection to third-party servers – in particular not to “Google Fonts” – takes place; your IP address is not transmitted to third parties for this purpose.

The typeface “Roboto” is licensed under the Apache License 2.0.

10. Your rights
In principle you have the rights to information, rectification, erasure, restriction, data portability, withdrawal of consent and objection. If you believe that the processing of your data infringes data protection law, or that your data protection rights have otherwise been violated in some way, you may lodge a complaint with the supervisory authority.

11. Deletion periods
Unless a specific deletion period is stated in the information above, data is generally deleted as follows: if the purpose of storage ceases to apply or a statutory retention period expires, the personal data is routinely blocked or deleted in accordance with the statutory provisions.

12. Right to data portability
You have the right to data portability pursuant to Art. 20 (1) GDPR. This means that you may request that the personal data we have collected be transmitted directly to another controller, insofar as this is technically feasible and provided that the rights and freedoms of other persons are not adversely affected.

13. Automated decisions
Automated decision-making in individual cases, including profiling, does not take place when you use our website and Services.

14. Job applications
If you use the contact addresses on our website to apply for a position as an employee, Alexander Maier GmbH collects and processes the personal data of applicants for the purpose of conducting the application procedure. The application, and thus the processing, may take place by electronic means. If an employment contract is subsequently concluded with the applicant, the transmitted data is stored for the purpose of administering the employment relationship in compliance with the statutory provisions and any works agreements in place. If no employment contract is concluded with the applicant, the application documents are automatically deleted two months after notification of the rejection, provided that no other legitimate interests of Alexander Maier GmbH – such as a burden of proof in proceedings under the German General Equal Treatment Act (AGG) – prevent such deletion.

15. Customer relationship
If you are interested in a customer relationship with Alexander Maier GmbH, this takes place in accordance with the information on the processing of personal data set out above. You can also enquire about this via our contact form.