Privacy policy

Information regarding data processing for this website pursuant to Art. 13 of the EU Data Protection Regulation (DSGVO) when personal data is collected from the data subject

This Privacy Policy (Version: DSOGOS 1.0 dated 09/01/2020) was written by: Deutsche Datenschutzkanzlei Datenschutz-Office München – www.deutsche-datenschutzkanzlei.de

Data protection
BAU Süddeutsche Baumaschinen Handels GmbH is responsible for this website and, as the provider of a teleservice, is required to inform about the type, scope and purpose of the collection and use of personal data in a precise, transparent, comprehensible, easily accessible form and in a clear and simple language before your visit. This content must be available to you at all times.

We attach great importance to the security of your data and compliance with data protection regulations. The processing of personal data is subject to the provisions of current European and national laws.

With the following privacy policy we would like to demonstrate to you how we handle your personal data and how you can contact us:

BAU Süddeutsche Baumaschinen Handels GmbH
Am alten Flugplatz 5
89231 Neu-Ulm
Germany
Trade Register No.: HRB 7322
Authorized Directors: Norbert Karrer und Dr.-Ing. Christoph Karrer
Phone: +49 731 97419-0
E-Mail: info@bau-baumaschinen.de

Our data protection officer
Sven Lenz
Deutsche Datenschutzkanzlei – Datenschutzkanzlei Lenz GmbH & Co. KG
Bahnhofstraße 50
87437 Kempten
Germany

If you have any questions regarding data protection or other data protection issues, please send an e-mail to the following address: datenschutz@bau-baumaschinen.de

A. General Information
For the sake of clarity, we do not differentiate between genders. In the sense of equal treatment, corresponding terms apply to all genders.

The meaning of the terms used, such as “personal data” or “processing”, can be found in Art. 4 DSGVO.

The personal data processed in the context of this website include

inventory data (e.g. customer names and addresses),
contract data (e.g. services used, administrator names, payment information),
usage data (e.g. pages visited on our website, interest in our products) and
content data (e.g. entries in the contact form).

B. Specific Information

Privacy Policy
We guarantee that we process your data only in connection with the processing of your inquiries and for internal purposes, as well as to provide you with requested services or contents.

Basics of data processing
We process your personal data only in compliance with the relevant data protection regulations. The legal basis is:

Delivery of our contractual services (e.g. processing of orders) and online services
Proof of your electronic consent (e.g. registration for newsletter or in online application procedure for extended retention)
Enforcement of our legitimate interests (i.e. interest in the analysis, optimisation and economic operation and security of our website, especially the measuring of audience reach, creation of profiles for advertising and marketing purposes, as well as the collection of access data and use of the services of third parties)

To show you where the above legal basis is/are regulated, we kindly refer you to the following:

Processing for the fulfilment and contractual implementation of our services: Art. 6 para. 1 lit. b) DSGVO

Consent: Art. 6 para. 1 lit. a) and Art. 7 DSGVO

Processing to protect our legitimate interests: Art. 6 para. 1 lit. f) DSGVO

Data transmission to third parties
We point out that data is transferred to third parties.

Your data will only be forwarded to third parties within the context of the legal requirements. We will only pass on your data if this is necessary, for example, for contractual purposes or on the basis of justified interests allowing the economic and effective operation of our business operations.

If we use subcontractors to provide our services, we take appropriate legal precautions as well as appropriate technical and organisational measures to ensure the protection of personal data in accordance with the relevant legal regulations.

Transfer of data to a third country or an international organisation
Third countries are countries in which the DSGVO is not directly applicable law. In principle, this includes all countries outside the EU or the European Economic Area.

Data is transferred to a third country or an international organisation. This takes into account the existence of appropriate guarantees and the availability of enforceable rights and effective legal remedies.

You can obtain a copy of the applicable warranties by clicking on the links below:

Privacy shield: https://www.privacyshield.gov/list

Standard contractual clauses: http://eur-lex.europa.eu/LexUriServ/LexUriServ.do?uri=OJ:L:2010:039:0005:0018:DE:PDF

Retention period of your personal data
We adhere to the principles of data economy and data avoidance. This means that we only store your data for as long as necessary to fulfil the above-mentioned purposes or as required by the various retention periods stipulated by law. If the respective purpose no longer applies or if the corresponding periods expire, your data will be routinely blocked or deleted in accordance with the statutory provisions.

To this end, we have devised an internal company scheme to ensure this procedure.

Contacting us
If you contact us by email or contact form, you agree to communicating electronically. Personal data will be processed within the scope of electronic contact with us. Which data is collected by using a contact form can be seen from the respective contact form. Your data will be transmitted SSL-encoded. The information you provide will be stored exclusively for the purpose of processing your inquiry and for possible follow-up questions.

You also have the possibility to contact us by phone and fax. Your data will also be processed for further communication.

We would like to inform you about the legal basis for this:

Processing for the fulfilment and contractual implementation of our services: Art. 6 para. 1 lit. b) DSGVO

Processing to protect our legitimate interests: Art. 6 para. 1 lit. f) DSGVO

To this end, we have concluded a contract with the provider which includes so-called standard contractual clauses (http://eur-lex.europa.eu/LexUriServ/LexUriServ.do?uri=OJ:L:2010:039:0005:0018:DE:PDF), and where the provider undertakes to process the user data only according to our instructions and to comply with the EU data protection regulations. The provider is also certified under the Privacy Shield Agreement and thus offers an additional guarantee to comply with the European data protection regulation: https://www.privacyshield.gov/participant?id=a2zt0000000KzX1AAK&status=Active

We would like to point out that emails can be read or changed without authorisation and unnoticed during transmission. Furthermore, we would like to draw your attention to the fact that we use software to filter unsolicited emails (spam filters). Emails may be rejected by the spam filter if they are wrongly identified as spam by certain features.

What are your rights?
a) Right of information
You have the right to obtain information about your stored data free of charge. Upon request, we will inform you in writing which of your personal data we have retained. This also includes the origin and recipients of your data, as well as the purpose of data processing.

b) Right to correction
If the data stored with us is incorrect, you have the right to have it corrected. In doing so, you can demand the processing to be restricted, e.g. if you dispute the correctness of your personal data.

c) Right to block
Furthermore, you can have your data blocked. In order to ensure that your data is blocked at any time, this data must be kept in a block file for control purposes.

d) Right of deletion
You can request the deletion of your personal data, provided that there are no legal obligations to keep records. If such an obligation exists, we will block your data upon request. If the relevant legal requirements are met, we will delete your personal data even without your request.

e) Right to data transferability
You have the right to request that we provide you with the personal data sent to us in a format that allows it to be transferred to another location.

f) Right of appeal to a supervisory authority
You have the possibility to lodge a complaint with one of the data protection supervisory authorities.

Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
Promenade 27, 91522 Ansbach, Germany
Phone: +49 981 53-1300
Fax: +49 981 53-981300

You can open the complaint form via the following link: https://www.lda.bayern.de/de/beschwerde.html

g) Right of objection
You have the possibility at any time to object to the processing of your data, to which you have previously consented, with effect for the future. For this purpose, it is sufficient to send a corresponding email to datenschutz@bau-baumaschinen.de.

However, such an objection does not affect the lawfulness of the processing that has taken place up to this point in time. This does not affect the data processing with regard to all other legal provisions, such as the initiation of a contract (see “data processing principles”).

Protection of your personal data
We take state-of-the-art contractual, technical and organisational security measures to ensure that the data protection laws are observed and thus to protect the processed data against accidental or intentional manipulation, loss, destruction or access by unauthorised persons.

Security measures include, in particular, the encrypted data transmission between your browser and our server. A 256-bit SSL (AES 256) encryption technology is used for this purpose.

In this context, your personal data will be protected as follows (excerpt):
a) Maintaining the confidentiality of your personal data
In order to protect the confidentiality of your data stored with us, we have taken various measures for access and entry control.

b) Maintaining the integrity of your personal data
In order to maintain the integrity of your data stored with us, we have taken various measures to control the transfer and input of data.

c) Ensuring the availability of your personal data
In order to ensure the availability of your data stored with us, we have taken various measures for order and availability control.

The security measures in use are continuously improved in line with technological developments. Despite these precautions, we cannot guarantee the security of your data transmission to our website due to the insecure nature of the Internet. Therefore, any data transmission carried out by you is at your own risk.

Protection of minors
Personal information may only be made available to us by persons under the age of 16 with the express consent of a parent or guardian. This data will be processed in accordance with this Privacy Policy.

Server log files
The provider of the pages automatically collects and retains information in so-called server log files, which your browser automatically transmits to us. These are:

Browser type and browser version
Operating system used
Referrer URL
Host name of the accessing computer
Time of the server request
IP address

This data will not be merged with other data sources.

The basis for the data processing in accordance with Art. 6 para. 1 lit. f) DSGVO, is our legitimate interest in (provision and protective measures to prevent misuse of our website) and in accordance with Art. 6 para. 1 lit. b) DSGVO, which permits the processing of data in order to fulfil a contract or pre-contractual measures.

Online applications via a form
We offer applicants on our website the opportunity to apply online by filling in the appropriate form. To be included in the application process, applicants must provide us with all the personal data required for a thorough and informed assessment and selection via the form.

The information required includes general personal information (name, address, telephone or electronic contact details) as well as performance-specific evidence of the qualifications required for a position. Health-related information may also be required, which must be given special consideration under labour and social law to ensure the applicant’s social protection.

By sending the form, your data will be encrypted using the latest technologies and will be used exclusively for the purpose of processing your application.

The legal basis for the processing is Art. 6 para. 1 lit. b) DSGVO in conjunction with § 26 para. 1 BDSG, where the completion of the application procedure is regarded as the initiation of an employment contract. Insofar as special categories of personal data in terms of Art. 9 para. 1 DSGVO (e.g. health data such as information on the status of severely disabled persons) are requested from applicants during the application procedure, processing is carried out in accordance with Art. 9 para. 2 lit. b) DSGVO so that we can exercise the rights arising from labour law and social security and social protection law and fulfil our obligations.

Based on this, or alternatively, the processing of the special categories of data may also be carried out according to Art. 9 para. 1 lit. h) DSGVO if it is carried out for purposes of preventive health care or occupational medicine, for assessing the applicant’s ability to work, for medical diagnosis, care or treatment in the health or social field or for the management of systems and services in the health or social field.

If, in the course of the evaluation described above, the applicant is not selected, or if an applicant withdraws his or her application prematurely, the data provided by the applicant will be deleted after six months at the latest after notification to this effect. This period is calculated on the basis of our legitimate interest in being able to answer any follow-up questions about the application and, if necessary, to comply with our obligation to provide evidence under the regulations on the equal treatment of applicants.

In the event of a successful application, the data provided will be further processed on the basis of Art. 6 para. 1 lit. b) DSGVO in conjunction with § 26 para. 1 BDSG for the purposes of carrying out the employment relationship.

Cookies
Cookies are small text files that are stored locally in the cache of your Internet browser. The cookies enable, for example, the recognition of the Internet browser. The files are used to help the browser navigate through the website and to make full use of all functions.

We use browser cookies.

Control of cookies by the user
Browser cookies: You can set all browsers to accept cookies only on request. You can also set your browser to only accept cookies from pages you are currently visiting. All browsers provide features that allow the selective deletion of cookies. The acceptance of cookies can also be disabled in general, however, the user-friendliness of this website may then be restricted.

Lifetime of the cookies used
Cookies are managed by the web server of our website. This website uses:
Session cookies (single use)
Lifetime: Until this website is closed

Persistent cookies (permanent browser recognition)
Lifetime: 30 days

Disable or remove cookies (opt-out)
Each web browser provides ways to restrict and delete cookies. For more information, visit the following websites:

Use of Google reCaptcha
To protect your contact details provided via the internet form, we use the reCAP-TCHA service of Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (Google). The query is used to distinguish whether the input is made by a person or improperly by automated machine processing. The query includes the sending of the IP address and any other data required by Google for the recaptCHA service to Google and is carried out in accordance with Art. 6 para. 1 lit. f DSGVO on the basis of our legitimate interest to determine a person’s individual consent of actions carried out on the Internet and the prevention of abuse and spam. For this purpose, your input is transmitted to Google and used there. By using reCaptcha you agree that the recognition you provide will be incorporated into the digitisation of old works.

On our behalf Google will use this information to evaluate your use of this service. The IP address transmitted by your browser in the context of reCaptcha is not combined with other data from Google. This data is subject to the deviating data protection regulations of the Google company.

When using Google reCAPTCHA, personal data may also be transferred to Google LLC’s servers in the USA. If IP anonymisation is activated on this website, your IP address will be shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area beforehand.

In the event that personal data is transferred to Google LLC. based in the USA, Google LLC. has certified itself for the US/European data protection agreement “Privacy Shield”. This ensures compliance with the level of data protection applicable in the EU. The current certificate can be viewed at the following link: https://www.privacyshield.gov/list

For more information about Google’s privacy policy, visit: https://www.google.com/intl/de/policies/privacy/

Google (Universal) Analytics web analysis service
We use Google Analytics, a web analysis service provided by Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). Google Analytics uses “cookies”, text files that are stored on your computer and enable an analysis of the use of the online offer. The information generated by the cookie about the use of this website (including the shortened IP address) is usually transferred to a Google server and stored there. This may also result in a transmission to the servers of Google LLC. in the USA.

We would like to point out that this online offer uses Google Analytics with the extension “_anonymizeIp()” and therefore IP addresses are only processed in abbreviated form in order to exclude a direct personal reference. As a result of the extension, your IP address will be shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area beforehand. Only in exceptional cases will your full IP address be transferred to a Google LLC server in the United States and shortened there. In these exceptional cases, this processing is carried out in accordance with Art. 6 para. 1 lit. f) DSGVO on the basis of our legitimate interest.

The IP address provided by your browser as part of Google Analytics will not be merged with other Google data.

On our behalf, Google will use this information on the basis of our legitimate interest in the statistical analysis of user behaviour for optimisation and marketing purposes. This involves:

• to compile reports on the activities of our online offer.
• to provide us with further services connected with the use of the online offer and the use of the Internet.
• to carry out a cross-device analysis of visitor flows by means of a user ID.

When a page is first accessed, the user is assigned a unique, permanent and anonymous ID, which is set across devices. This allows interaction data from different devices and from different sessions to be assigned to a single user. The user ID does not contain any personal data and does not transmit such data to Google.

The collection and storage of data via the user ID can be revoked at any time with effect for the future. To do so, you must deactivate Google Analytics on all systems you use, e.g. in another browser or on your mobile device.

We also use Google Analytics reports to record demographic characteristics and interests.

The data we send and which is linked to cookies, user IDs or advertising IDs is automatically deleted after 14 months. Data that has reached its retention period is automatically deleted once a month. For more information on terms of use and privacy, please visit https://www.google.com/analytics/terms/de.html or https://policies.google.com/?hl=de

You can prevent the storage of cookies by making the appropriate setting in your browser software. However, we would like to point out that in this case not all functions of this online offer can be used to their full extent.

You can also prevent Google from collecting the data generated by the cookie and related to the use of the online offer (including your IP address) and from processing this data by downloading and installing a browser plug-in via the following link: http://tools.google.com/dlpage/gaoptout?hl=de.

As an alternative to the browser plug-in or within browsers on mobile devices, the following link applies in order to set an opt-out cookie, which in future prevents the collection by Google Analytics within this online offer (this opt-out cookie only works in this browser and only for this domain, delete the cookies in this browser, click the link again): Opt-out of Google Analytics

Disable Google Analytics
For more information about Google’s (Universal) Analytics privacy policy, click on the following link: https://policies.google.com/privacy?hl=de&gl=de

Insofar as legally required, we have obtained your consent for the processing of your data as described above in accordance with Art. 6 para. 1 lit. a) DSGVO. You can revoke your consent at any time with effect for the future. In order to revoke the consent you have given, we refer you to the aforementioned revocation options.

Use of YouTube
Our online offer includes functions of the YouTube service for displaying and playing videos. “YouTube” is owned by Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”).

The extended data protection mode is used here, which, according to the provider, only initiates the storage of user information when the video(s) is(are) played.

If embedded YouTube videos are played, YouTube uses cookies to collect information about user behaviour. According to information provided by YouTube, these are used, among other things, to collect video statistics, improve user-friendliness and prevent abusive behaviour.

If you are logged in to Google, your data will be directly associated with your account when you click on a video. If you do not want your profile to be associated with YouTube, you must log out before activating the button. Google saves your data (even for users who are not logged in) as user profiles and evaluates them. Such an evaluation is carried out in particular in accordance with Art. 6 para. 1 lit. f DSGVO on the basis of Google’s legitimate interest in the display of personalised advertising, market research and/or adaptive design of its website. You have the right of objection to the creation of these user profiles; to exercise this right, you have to contact YouTube.

In the context of the use of Youtube, personal data may also be transferred to the servers of Google LLC. in the USA. Regardless of any playback of the embedded videos, each time you visit this website a connection to the Google network is established, which may trigger further data processing operations and is not influenced by us.

In the event that personal data is transferred to Google LLC. based in the USA, Google LLC. has certified itself for the US/European data protection agreement “Privacy Shield”, which guarantees compliance with the level of data protection applicable in the EU. A current certificate can be viewed here: https://www.privacyshield.gov/list

Regardless of the playback of the embedded videos, a connection to the Google network “DoubleClick” is established each time our online offer is called up, which can trigger further data processing that is not influenced by us.

Further details about the use of cookies on YouTube can be found in the YouTube privacy policy at: http://www.youtube.com/t/privacy_at_youtube

Submit rating by means of Recommendations Feed
Within our website you have the opportunity to rate our company. If you click on the “rate now” button, you will be redirected to our Facebook fan page. In order to create a rating, it is necessary that you log in with your Facebook profile.

The rating is displayed within our Facebook fan page. The Recommendation Feed allows a connection between our Facebook fan page and our website, which enables us to display your rating within our online offer. The following data is processed for this purpose:

• first and last name
• Facebook profile name
• Facebook profile picture

The legal basis for data processing is your consent in accordance with Art. 6 para. 1 lit. a) DSGVO.

We assume that you agree to the publication of your rating on our website if you post it on our Facebook fan page. For technical reasons it is not possible for us to separate the publication within the different channels.

If you do not agree with the publication of your rating afterwards, please revoke it by sending us an email (datenschutz@bau-baumaschinen.de) or delete your rating on our Facebook fan page. After deleting your rating, it will be automatically removed from our website. This process may take some time as there is no real-time synchronisation.

For more information on data processing by Facebook, please click on the following link: https://www.facebook.com/about/privacy/

Changes to our Privacy Policy
We reserve the right to modify our privacy policy at short notice to ensure that it always complies with current legal requirements or to implement changes to our services. For example, this could affect the introduction of new services. The new privacy policy will then apply to your next visit.

Trademark Protection
Any company or trademark mentioned herein is the property of the respective company. The mention of trademarks and names is for informational purposes only.

C. Russia-specific Provisions
The following applies to users who are resident in the Russian Federation:

The above services of our website are not intended for citizens of the Russian Federation that are resident in Russia.

If you are a Russian citizen resident in Russia, you are hereby expressly informed that any personal information you provide to us through this website is at your sole risk and responsibility. You further agree that you will not hold us responsible for any failure to comply with the laws of the Russian Federation.