en

Privacy notice

Thank you very much for visiting our website. The protection of your personal data and your privacy is important to us and we would like you to feel safe when you use our website. We process your personal data in accordance with the contents of this privacy notice, the relevant national data protection regulations, and the EU General Data Protection Regulations (“GDPR”).

Below, we give you an overview of which information we collect and process.

You can reach our data protection officer at datenschutz(at)brunnen.de or +49 (0)7131 886 364.

1. Name and address of the controller

Baier & Schneider GmbH & Co. KG, Wollhausstraße 60-62, 74072 Heilbronn (“we”), in our capacity as the operator of the website www.brunnen.com shall be the controller as defined in the GDPR and in other national data protection regulations.

2. Data protection officer

In the event that you have any concerns with respect to data protection or privacy issues, please contact our data protection officer, Raphael Künzig, at datenschutz(at)brunnen.de or at +49 (0) 7131 886 364.

3. Personal data

Personal data means any information relating to an identified or identifiable natural person; an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
Personal data also include information about your use of our website: such information is usually collected by the use of log files or cookies. You will find more information about log files and cookies below.

4. Purpose of use and related personal data

Scope and type of the collection, processing, and use of your data depend on whether you visit our web presence only to obtain generally available information or make use of any services beyond that.

a) Use for information only
If you use our website for information only, it is generally not necessary that you enter any personal data.
In that case, we only collect the data that are automatically transmitted by your internet browser, as the case may be, when you visit our website, for example:

  • Referrer (website visited before)
  • Requested web page or file
  • Browser type and version
  • Used operating system
  • Used device type
  • Time of access
  • IP address in an anonymized form (will only be used to determine the location of access)

For this, your computer’s IP address is only stored for the time of your use of the website, in so-called log files, and is deleted immediately thereafter, or anonymized by truncation. All other data is only stored for a limited period of time. We use these data to operate our website, in particular to identify and remove faults from our website, to determine our website's utilization, and to make adjustments or improvements.

4b) Use of other services
To the extent that you use other services through our website, it may be required that you enter personal data for this. In that case, your data is only processed for the purpose of delivering the services requested by you.

5. Contact

At our website, you can contact us via our contact form or by E-mail. The personal data that you enter in the course of contacting us is only used to handle your enquiry and is then immediately deleted from the web server. Please note that we may be obligated to store your messages to comply with any statutory retention obligations. Subject to the statements below, we shall not disclose your data to third parties.

6. Cookies and web analysis tools

a) Google Analytics
If you have given us your consent, we will use Google Analytics from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, to measure its reach. Please take note that your data will also be transferred to the USA. You will find Google’s privacy polhttps://policies.google.com/privacy. 

We use it to analyze and measure the reach of our online services. For example, we can identify the times at which our online services or its functions or contents are used most commonly or invite users to revisit. It will also help us understand which areas require optimization. Google may use the collected data for analysis and its own advertising activities too.

In this context, user profiles can be created and stored in cookies. These may include information such as visited websites, viewed content, time and duration of use, used browser type or computer system. The collected data is stored using pseudonyms only, i.e. they cannot be attributed to names or e-mail addresses.

You can install a browser plugin that prevents the analysis of your data by Google Analytics: https://tools.google.com/dlpage/gaoptout?

7. External services, social media buttons

We integrated functions and content elements in our online services that are made available through the servers of the respective providers (hereinafter referred to as “Third-party Providers”). These may include, for example, graphics, videos, or social media buttons or postings (hereinafter referred to as “Content”).
To allow Third-party Providers to send Content to your browser, it is required that they process your IP address. Third-party Providers can also use so-called pixel tags (invisible graphics that are also known as web beacons). These pixel tags can analyze visitor traffic on websites for statistical or marketing purposes. This pseudonymous information can also be stored in cookies on your device and contain, among other things, technical information about your browser and operating system, referring websites, time of visit, and other information about the use of our online services, and it can be linked with other information of this type from other sources.
Insofar as we ask you for your consent to the use of such Content, the use of such Content is based on your consent. Otherwise, the use of such Content is based on our interest in an efficient, economic, and user-friendly presentation of our website.

8. No disclosure of your personal data

Your personal data could be transferred or disclosed to other companies or persons while they are processed. Such other companies or persons, in particular, could be providers of services that are integrated into this website, payment institutions, or IT services providers.

Within our group of companies, your data are transferred to dedicated affiliated companies if your request requires this, or if these companies provide shared data processing services for the affiliated companies within the group.

Otherwise, we do not disclose your personal data to any third parties, unless we are entitled or obligated to transfer the data based on statutory provisions or official or judicial orders. This may include but is not limited to requests for information for the purpose of criminal prosecution, to avert danger, or to enforce intellectual property rights.

9. Data security

Unless mentioned otherwise in this data protection notice, any information that you submit to us will be stored on servers that are located within the European Union. We protect our website and other systems against loss, destruction, access, modification, or disclosure of your data by unauthorized persons by means of technical and organizational measures.

10. Your rights

You are entitled to:

  • Obtain information free of charge about the personal data we retain about you (right of access);
  • Demand confirmation whether we process personal data relating to you (right to confirmation);
  • Demand from us to immediately delete the personal data relating to you to the extent that their processing is no longer required and that any further requirements of the GDPR with respect to erasure are fulfilled (right to erasure);
  • Demand immediate correction and completion of incorrect personal data relating to you (right to correction);
  • Demand the restriction of processing of your personal data (right to restriction of processing);
  • Obtain the personal data relating to you in a structured, customary, and machine-readable format (right to data portability);
  • Object to the processing of your personal data (right to objection);
  • Not being subjected to a decision that is exclusively based on automated processes – including profiling – that legally affects you or significantly impairs you in a similar way (right to decisions on a case-by-case basis);
  • Withdraw your consent to the processing of your personal data in the future at any time;
  • Lodge a complaint with the supervisory authority in charge of data protection if you are of the opinion that the processing of the personal data relating to you violates the GDPR (right to lodge a complaint).

For any further information on your rights, please contact our data protection officer.

11. Erasure of and making unavailable personal data after their purpose is fulfilled

We process and store personal data only as long as it is necessary to fulfill their purpose and in no event any longer than the statutory retention and storage periods. After their purpose is fulfilled or the statutory retention and storage periods have expired, the personal data are deleted or made unavailable in accordance with the data privacy regulations.