DATA PROTECTION STATEMENT

The BSS Brand Communication Sachse Gerlach GmbH takes the protection of your personal data very seriously and adheres to the statutory, especially data protection, regulations.

1. RESPONSIBLE

Person responsible within the meaning of Art. 4 No. 7 EU General Data Protection Regulation (DSGVO) is BSS Brand Communication Sachse Gerlach GmbH („we“), Seewiesenstr. 2, 74321 Bietigheim-Bissingen. For more information about us, please refer to our imprint. You can reach our data protection officer at datenschutz@bss-brand.com.

2. GENERAL

The following statement gives you an overview of what type of personal data is collected for what purpose and on what legal basis. Personal data is any data personally available to you, e.g. Name, address, e-mail addresses, user behavior. In addition, we inform you about your rights towards us as responsible.

3. DATA PROCESSING ON THIS WEB SITE

If you only use this website for informational purposes, we automatically collect information that your browser transmits to us.

• Browser type / version;
• Used operating system;
• Referrer URL (the previously visited page);
• Host name of the accessing computer (IP address);
• Time of server request; and
• Name and URL of the retrieved file and transferred amount of data.

This data is technically required for us to display this website to you. The temporary storage of the IP address by the system is necessary to enable delivery of the website to your computer. To do this, your IP address must be saved for the duration of the session.

The legal basis for the collection and temporary storage is Section 25 (2) No. 2 of the Telecommunications Telemedia Data Protection Act (TTDSG) in conjunction with Article 6 (1) sentence 1 lit. f GDPR. Our legitimate interest according to Art. 6 Para. 1 S. 1 lit. f GDPR lies in the above-mentioned purposes.

This data is stored on servers in Germany. They will be deleted as soon as they are no longer required to achieve the purpose for which they were collected. In the case of the collection of data for the provision of the website, this is the case when the respective session has ended.

The collection of data for the provision of the website is absolutely necessary for the operation and delivery of the website. Consequently, there is no possibility of objection on the part of the user.

4. CONTACT FORM

You have the option of contacting us via the contact form on our website. In order to be able to process your request, you must provide a valid email address. In addition, you can voluntarily provide the following information:

• Your title
• Your name
• Your first name
• Your company

At the time of sending your request, we also store the following data:

• We also store your IP address
• as well as the time of your request.

Alternatively, you can contact us via the email address provided. In this case, the user’s personal data transmitted with the e-mail will be stored. The legal basis for the processing of the data transmitted in the context of sending an e-mail is Article 6 Paragraph 1 Sentence 1 lit. f GDPR. If the e-mail contact is aimed at concluding a contract, the legal basis for processing is Article 6 (1) sentence 1 lit. b GDPR.

The processing of the personal data from the input mask serves us solely to process the contact. The other personal data processed as part of the sending process is used to prevent misuse of the contact form and to ensure the security of our information technology systems.

In this context, the data will not be passed on to third parties. The data will only be used to process the conversation.

The data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected. For the personal data from the input mask of the contact form and those sent by e-mail, this is the case when the respective conversation with the user has ended. The conversation is over when it can be inferred from the circumstances that the matter in question has been finally clarified. The additional personal data collected during the sending process will be deleted after a period of 30 days at the latest.
If you contact us, you can object to the storage of your personal data at any time. In such a case, the conversation cannot continue.

You can send your objection to the following address:

datenschutz@bss-brand.com

All personal data stored in the course of making contact will be deleted in this case, unless there are compelling legitimate reasons for processing on our side that outweigh your interests, rights and freedoms, or the processing allows us to assert, exercise or defend of legal claims.

5. USE OF COOKIES

5. 1. General

When using our website, cookies are stored on your computer. Cookies are small text files that are stored on your hard drive, assigned to the browser you are using, and through which certain information flows to the place that sets the cookie (in this case, us). Cookies cannot run programs or transmit viruses to your computer. They help us to make our website more user-friendly and effective overall.

Below is an overview of the types of cookies we use.

You can edit your cookie settings under the following link: data protection settings.

5. 2. Necessary Cookies

We use so-called technically necessary cookies on our website. Technically necessary cookies are cookies that are required for our website to function properly. They help make our website usable by enabling basic functions such as page navigation and access to secure areas of the website.

In this respect, so-called session cookies (also called temporary or transient cookies) are used in particular. These store a so-called session ID, with which various requests from your browser can be assigned to the joint session. This allows your computer to be recognized when you return to our website. The session cookies are deleted when you log out or close the browser.
The legal basis for the use of technically necessary cookies is Section 25 (2) No. 2 TTDSG in conjunction with Article 6 (1) sentence 1 lit. f GDPR.

5. 3. Performance and Statistics Cookies

These cookies are used to collect information about how the website is used. These cookies register, among other things, the number of website visitors, the pages visited and the length of their stay. The data collected is used to improve the service and to optimally adapt the content of the website to the wishes and needs of the visitors.

The legal basis for the use of these cookies is your consent in accordance with Section 25 (1) TTDSG i. In conjunction with Article 6 Paragraph 1 Clause 1 Letter a GDPR. You can revoke this at any time with effect for the future.

These cookies also include Google Analytics Google Ireland Ltd. You can find more information on this under Section 6.

5. 4. More information about the cookies used on this website

The following cookies are used on this website:

6. GOOGLE ANALYTICS

If you have given your consent, we also use the web analysis service Google Analytics, a service provided by Google, to regularly analyze and improve our website (for more information on Google Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001 (“Google”).

Google’s privacy policy and terms of use can be found at: https://policies.google.com/?hl=de.

. We can use the statistics obtained to improve our offer and make it more interesting for you as a user.

Google Analytics uses so-called “cookies”, text files that are saved on your computer and enable your use of the website to be analyzed. The information generated by the cookie about your use of the website is usually transferred to a Google server in the USA and stored there. The recipient of the data collected is Google. If IP anonymization is activated on the website, your IP address will be shortened beforehand by Google within the member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be sent to a Google server in the USA and only be shortened there. We, but also Google, used this information to evaluate your use of the website and to compile reports on website activity. Google also uses the information to provide us with other services generally related to the use of the website and your internet use.

The data will be deleted after 14 months.

We use Google Analytics with the extension “anonymizeIp ()” on our website. As a result, IP addresses are further processed in abbreviated form, so that personal references can be excluded.

The legal basis for the use of Google Analytics is your consent in accordance with Art. 6 Paragraph 1 Sentence 1 Letter a GDPR. You can revoke your consent at any time with effect for the future by preventing the storage of cookies by setting your browser software accordingly; however, we would like to point out that in this case you may not be able to use all functions of this website to their full extent.

You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by using the browser add-on available under the following link. Download and install On: https://tools.google.com/dlpage/gaoptout?hl=de. This procedure must be carried out separately for each browser used. As an alternative to the browser add-on, especially for browsers on mobile devices, you can prevent Google Analytics from collecting data by clicking here: Opt-Out Cookie. The opt-out cookie is only valid in this browser and only for our website and is stored on your device. To prevent Google Analytics from collecting data across different devices, you must opt-out on all devices.

Note on the processing of your data collected on this website by Google in the USA:

By consenting to the use of the respective Google services, you also consent to your data being processed in the USA. The USA is rated by the European Court of Justice as a country with an insufficient level of data protection according to EU standards. With these transmissions, Google relies on the standard contractual clauses published by the EU Commission in order to establish an appropriate level of protection for personal data in the USA that is comparable to that of the EU. Nevertheless, there is a particular risk that your data may be processed by US authorities for control and monitoring purposes, possibly without the possibility of legal redress. If you have not consented to the use of these Google services, the transmission described above will not take place.

7. Use of Vimeo

We also use videos from the global company Vimeo on our website, a video platform that enables the streaming of high-resolution videos. The video portal is operated by Vimeo.com Inc., 555 West 18th Street, New York, New York 10011, USA.

With the help of a plug-in, we can show you interesting video material directly on our website. Certain data can be transferred from you to Vimeo. Vimeo offers us the opportunity to present you with high-quality content directly on our website. Instead of just giving you a link to an interesting video, you can watch the video right away with us. This expands our services and makes it easier for you to access interesting video content in addition to our texts and images.

If you call up a subpage on our website that has an embedded Vimeo video, your browser connects to the Vimeo servers. Data is collected, stored and processed on the Vimeo servers, regardless of whether you have a Vimeo account or not. This data includes

• your IP address,
• technical information about your browser type,
• Your operating system or very basic device information,
• via which website you use the Vimeo service,
• what actions (web activities) you perform on our website.

These web activities include, for example

• Session duration,
• bounce rate,
• Which button you clicked on on our website with the built-in Vimeo function.

Vimeo can track and store these actions using cookies and similar technologies. As a registered and logged-in Vimeo member, additional data can be collected and your actions on our website linked directly to your Vimeo account. To prevent this, you must log out of Vimeo while “surfing” on our website. Storage on Vimeo takes place as long as Vimeo has an economic reason for storage. The data is then deleted or made anonymous.

The legal basis for the transmission of your data to Vimeo is your consent in accordance with Section 25 (1) TTDSG, Article 6 (1) sentence 1 lit. a GDPR.

You can revoke your consent at any time with effect for the future. In addition, you always have the possibility to manage cookies in your browser according to your wishes. You can change the collection and storage of your data and the setting of Vimeo cookies in your browser settings and delete or deactivate cookies at any time. Please note that after deactivating/deleting cookies, various functions may no longer be fully available. If you are a registered Vimeo member, you can also manage the cookies used in the Vimeo settings.

You can find out more about the use of cookies at Vimeo at https://vimeo.com/cookie_policy, and information on data protection at Vimeo can be found at https://vimeo.com/privacy.

Note on the processing of your data collected on this website by Vimeo in the USA:

By agreeing to the use of Vimeo, your data will be processed in the USA. The USA is rated by the European Court of Justice as a country with an insufficient level of data protection according to EU standards. In particular, there is a risk that your data may be processed by US authorities for control and monitoring purposes, possibly without the possibility of legal remedies. If you have not consented to the use of Vimeo, the transmission described above will not take place.

8. BSS IN SOCIAL MEDIA

In addition to our website, we are also represented on Facebook, Instagram, LinkedIn and Xing. On our website we only provide links to our respective profiles. Please refer to the data protection regulations of the respective operator for the purpose and scope of the data collection as well as the provisions for the use of your data by the respective platform.

Facebook:   https://de-de.facebook.com/privacy/explanation

LinkedIn:   https://www.linkedin.com/legal/privacy-policy

Instagram: https://privacycenter.instagram.com/policy

Xing:           https://privacy.xing.com/de/datenschutzerklaerung

9. YOUR RIGHTS

You have the following rights towards us with regard to your personal data:

Right to information (Article 15 GDPR)

In principle, you have the right to receive information about the points mentioned in Art. 15 GDPR. In addition, you have the right to request a copy of your personal data in accordance with Art. 15 (3) GDPR. For any additional copies you request, we may charge a reasonable fee based on administrative costs.

Right to rectification or erasure (Art. 16 and 17 GDPR)

You have the right to have inaccurate personal data concerning you corrected. In addition, you have the right to request the deletion of your personal data if further processing is no longer necessary, the processing is unlawful or you have revoked your consent.

Right to restriction of processing (Article 18 GDPR)

If the requirements in Art. 18 GDPR are met, you have the right to have the processing of your personal data restricted, i.e. to prevent further processing for the time being.

Right to data portability (Art. 20 GDPR)

Within the limits of Art. 20 GDPR, you have the right to receive your personal data in a machine-readable format in order to forward it or have it forwarded to another person responsible.

Right to object to processing (Article 21 GDPR)

You have the right, for reasons arising from your particular situation, to object at any time to the processing of your personal data, which is based on Article 6 (1) (e) or (f) GDPR to file an objection; this also applies to profiling based on these provisions.

We will no longer process your personal data unless we can demonstrate compelling legitimate grounds for processing that outweigh your interests, rights and freedoms, or the processing is for the establishment, exercise or defense of legal claims.

If the personal data concerning you is processed in order to operate direct advertising, you have the right to object at any time to the processing of your personal data for the purpose of such advertising; this also applies to profiling insofar as it is associated with such direct advertising.

If you object to the processing for direct marketing purposes, your personal data will no longer be processed for these purposes.

To assert these rights, please contact us at datenschutz@bss-brand .com. The exercise of your rights is generally free of charge for you.

You also have the right to complain to a data protection supervisory authority about the processing of your personal data by us.

10. FURTHER INFORMATION

Your trust is important to us. Therefore, we would like to be your answer at any time regarding the processing of your personal data. If you have any questions that this privacy statement could not answer or if you would like more in-depth information, please contact us at any time at datenschutz@bss-brand.com.

November 2022