Data Privacy Statement

1. General information on data processing
 

This Data Privacy Statement explains the type, scope and purposes of processing of personal data by us as the controller BYK-Gardner GmbH (hereinafter referred to as “BYK” or “we”) via this website.
 

Our contact details:

BYK-Gardner GmbH
Lausitzer Straße 8
82538 Geretsried
Tel +49 8171/3493-0
Email: info.byk.gardner@altana.com
 

The contact details of our data protection officer are as follows:

BYK-Gardner GmbH

Florian Hartmann
Data Protection Officer
Lausitzer Straße 8
82538 Geretsried
Tel +49 8171/3493-0
Email: datenschutz.byk.gardner@altana.com
 

1.1 Scope of processing of personal data

As a general rule, we process your personal data only if you order goods via this website, contact us through it, if this is necessary for the provision of an operational website or for the presentation and use of our content, offers and services.  
 

1.2 Legal basis for the processing of personal data

If you have given your consent to the processing of personal data, Art. 6 (1) lit. a of the European Union's General Data Protection Regulation (GDPR) serves as the legal basis for the processing.
The legal basis for the processing of personal data which serves the execution of a contract to which you are a party is Art. 6 (1) lit. b GDPR. This also applies to processing operations which are necessary to implement pre-contractual measures.
If processing is necessary for compliance with a legal obligation to which our company is subject, Art. 6 (1) lit. c GDPR serves as the legal basis for processing.
If processing is necessary in order to protect the vital interests of the data subject or of another natural person, Art. 6 (1) lit. d GDPR serves as the legal basis for processing.
If processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, and such interests are not overridden by the interests or fundamental rights and freedoms of the data subject, Art. 6 (1) lit. f GDPR serves as the legal basis for processing.
 

1.3 Transfer of personal data to third parties

All personal data collected in connection with the provision of this website will be transferred by us exclusively to our affiliates as well as to technical service providers employed as processors according to the GDPR.

Data will be transferred to processors within the European Union or in third countries (countries outside the European Economic Area) if it is necessary to do so to fulfill your orders (e.g. cooperation with our production facilities in third countries) or to get in contact with you to answer your requests.
 

In individual cases, transfer to a third country outside the EU and the EFTA may occur. However, we transfer personal data solely to third countries where the EU Commission has determined an adequate level of data protection by decision according to Art. 45 GDPR, or if we and the recipient of the data have agreed upon standard data protection clauses, adopted by the Commission according to Art. 46 (2) lit. c GDPR.
 

1.4 Data erasure and storage duration

If you have not consented to a specific storage duration, we will store your personal data only as long as this is necessary to pursue the respective processing purpose, and if there are no conflicting legal retention or storage periods.

2. Provision of the website
If you visit our website, we log the IP address (i.e. the Internet address) of the computer accessing the site and other general usage data, such as date and time (“user-related data”), in order to evaluate which parts of our website are of particular interest. Your user-related data are rendered anonymous.
The processing of these data serves the internal evaluation of our website’s frequency of use. We pursue our legitimate interest to verify the efficiency of our offer. The legal basis for the processing of data is Art. 6 (1) lit. f GDPR.
 

3. Use of cookies

Our website uses cookies. Cookies are text files which are saved in the internet browser or by the internet browser on the user’s computer system. A cookie normally contains the name of the domain the cookie data were sent from as well as information about the cookie’s age and an alphanumeric identifier. Cookies help us to improve our website and to offer a service that is better and more tailored to your specific needs. You enable us to recognize your computer if you return to our website.
 

etracker

The provider of this website uses the services of etracker GmbH, Hamburg, Germany (www.etracker.com) to analyze usage data. Here, cookies are used which enable the statistical analysis of the use of this website by its visitors as well as the display of usage-relevant content or advertising. Cookies are small text files that are stored by the Internet browser on the user's device. etracker cookies do not contain any information that could identify a user.

The data generated with etracker is processed and stored by etracker solely in Germany on behalf of the provider of this website and is thus subject to strict German and European data protection laws and standards. In this regard, etracker has been checked, certified and awarded with the ePrivacyseal data protection seal of approval.

The data are processed on the legal basis of Art. 6 (1) lit. f (legitimate interest) of the EU General Data Protection Regulation (GDPR).Our legitimate interest is the optimization of our online offer and our website. As the privacy of our visitors is very important to us, etracker anonymizes the IP address as early as possible, and converts login or device IDs into a unique key with which, however, no connection to any specific person can be made. etracker does not use this for any other purpose, combine it with other data or pass it on to third parties.

You can object to the outlined data processing at any time provided it is related to your person. Your objection has no detrimental consequences for you.
 

Further information on data protection with etracker can be found at https://www.etracker.com/en/data-privacy.

To manage our cookies, we use the Consent Management Tool (CMT) from FAKTOR.io. With the help of the CMT, you can agree or decline the setting of our cookies. If you decline our cookies, you might only have a limited use of our website and our offer.

Cookies are used for purposes of improving the quality of our website and its content. These purposes also constitute our legitimate interest in the processing of these personal data. The legal basis for the processing of data is Art. 6 (1) lit. f GDPR.

Furthermore, the use of cookies serves to guarantee confidentiality, integrity, availability and resilience of our web offer and the systems used for its supply. Here, the legal basis for the processing of data is Art. 6 (1) lit. c GDPR.

 

4. Contact form

Our website features contact forms, which may be used for making contact electronically or to order goods. If you make use of this opportunity, the data entered on the input screen will be transferred to and processed by us.

The processing of personal data from the input screen serves the sole purpose of handling the contact and your concern.
Here, the legal basis for the processing of data is Art. 6 (1) lit. f GDPR. The handling of contacting constitutes our legitimate interest for the processing of data.

An additional legal basis for data processing is, in case of consent having been given by you, Art. 6 (1) 1 lit. a GDPR. You may revoke your consent informally at any time. If the aim of the contacting is the conclusion of a contract, Art. 6 (1) lit. b GDPR is an additional legal basis for processing.

 

5. reCAPTCHA

We use Google's reCAPTCHA service to protect our website against spam and other misuse. reCAPTCHA prevents automatic software ("bots") from using the website improperly or for malicious purposes. This means that a check is performed to verify that the data has actually been entered by a real person. To make this possible, the following data is collected and processed:

Referrer (address of the page on which the Captcha is used)
User's IP address
Google account (detection and identification of the user if they are logged into Google)
The user's input behavior (e.g., response to the reCAPTCHA question, input speed in the form fields, sequence in which the user completed the fields) is used to improve Google's pattern recognition. Browser, browser size and resolution, browser plug-ins, date, language setting
Display commands (CSS) and scripts (JavaScript) on the webpage
Mouse/touch events on the page

Legal basis for the aformentioned processing is Art. 6 (1) f) GDPR. Protecting the websites of BYK-Gardner from abusive automated access attempts and spam is regarded as carried out for a legitimate interest.

Google also reads the cookies from other Google services, such as Gmail, Search and Analytics. All of the data listed above is sent to Google in encrypted form. Google's subsequent analysis determines which type of Captcha will be displayed on the page, i.e., checkbox or text input. No personal data from the input fields on the respective form is filtered out or stored.

More information on Google's privacy policy can be found here: www.google.com/policies/privacy/

 

6. Your rights

 In general, i.e. subject to any legal restrictions, you have the rights listed below. In order to facilitate the exercise of these rights, we wish to inform you that any corresponding request does not require a certain form - you may send such a request electronically (in particular per email).  

You may request information about your personal data from the controller.

 

You may request the rectification of your personal data by the controller if the data are inaccurate.

 

You may request the erasure of your personal data by the controller.

 

You may request the restriction of further processing of your personal data by the controller.

 

You have the right to object to further processing of your personal data by the controller, provided you set out the respective grounds relating to your particular situation.

 

You may ask to receive your personal data in a structured, commonly used and machine-readable format, and to transmit those data to another person without hindrance from the controller to whom the personal data have been provided.

 

Furthermore, you have the right to file a complaint about the handling of your personal data by a controller with a supervisory authority competent for data protection. In order to facilitate the exercise of this right, we inform you that the supervisory authority competent for our place of business may be contacted at the following address:

Bayerisches Landesamt für Datenschutzaufsicht (BayLDA), Promenade 27, 91522 Ansbach, Germany

7. Data security

We apply the technical and organizational measures necessary to protect your data from manipulation, loss, destruction or unauthorized access, and to safeguard their integrity and availability. Our safety precautions are improved constantly in line with technical developments.  

 

8. Amendment of this data privacy statement

This data privacy statement has the status of December 5th, 2019. We reserve the right to carry out appropriate amendments at any given time.