Privacy Policy

1. General Information on the Collection of Personal Data

(1) In the following privacy policy, we would like to explain how we handle the personal data transmitted to us when using our online presence or our offers. Personal data refers to all information that can be related to you personally, e.g. name, address, email addresses, or user behavior. (2) Responsible party according to Art. 4 No. 7 GDPR: Brauns-Heitmann GmbH & Co. KG Lütkefeld 15 34414 Warburg Phone: +49 56 41 / 95 0 Fax: +49 56 41 / 95 141 Email: info@brauns-heitmann.de (3) Our operational data protection officer can be reached at Datenschutzbeauftragter@brauns-heitmann.de or at the above address with the addition “The Data Protection Officer”

2. Rights of the Data Subject

(1) You have the following rights concerning your personal data:

Right to access (Art. 15 GDPR) to your processed personal data;

Right to rectification (Art. 16 GDPR) or completion of your processed personal data;

Right to erasure (Art. 17 GDPR) of your processed personal data, unless processing is necessary under Art. 17 para. 3 GDPR;

Right to restriction of processing (Art. 18 GDPR);

Right to notification (Art. 19 GDPR);

Right to data portability (Art. 20 GDPR);

Right to withdraw any consent you have given (Art. 7 para. 3 GDPR). The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

(2) Additionally, you have the right to file a complaint with a supervisory authority if you believe that the processing of your personal data by us is unlawful. These are the data protection authorities, and you can find the relevant contact under: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html (3) Objection to the processing of your data If we base the processing of your personal data on legitimate interests, you may object to the processing. This applies particularly if the processing is not necessary for the performance of a contract with you, which we outline in the description of the functions. If you exercise such an objection, we request that you provide the reasons why we should not process your personal data as we have done. In the case of a justified objection, we will review the situation and either cease the data processing or provide you with our compelling legitimate grounds to continue processing. Of course, you can object to the processing of your personal data for the purposes of advertising and data analysis at any time. You can inform us of your objection to advertising via the following contact details: Brauns-Heitmann GmbH & Co. KG, Lütkefeld 15, 34414 Warburg, Phone: +49 56 41 / 95 0, Fax: +49 56 41 / 95 141, Email: info@brauns-heitmann.de

3. Data Security

Since the security of your data is important to us, your personal data is transmitted with secure SSL or TLS encryption. TLS (Transport Layer Security) and its predecessor version SSL (Secure Socket Layer) are protocols for encrypting data transmissions over the internet. With this, we protect your personal data from unauthorized access. You can recognize the encryption of the connection in the browser bar by the “https://” or the lock symbol. Furthermore, we secure our online presence and other systems with technical and organizational measures against loss, destruction, access, modification, or dissemination of your data by unauthorized persons. Despite regular checks, complete protection against all dangers is, however, not possible.

4. Visiting our Website

When using our website purely for informational purposes (i.e., when you do not register or transmit information to us), we collect only the personal data that your browser transmits to our server. As soon as you request a file from our online presence, access data is automatically collected and stored. This data set consists of:

The page from which the file was requested;
The name of the file;
The date and time of the request;
The amount of data transferred;
The access status / HTTP status code (i.e., whether the file was transferred or possibly not found, etc.);
A description of the type and version of the web browser used;
The IP address used.

This data is necessary for us to display our online presence and ensure its stability and security. Furthermore, this data is analyzed for internal statistical purposes and technical administration of the website. The legal basis is Art. 6 para. 1 sentence 1 lit. f GDPR. Our legitimate interest follows from the aforementioned purposes of data collection.

5. When Registering for Our Newsletter

(1) When subscribing to our newsletter, you agree that we use your email address for our own advertising purposes (so-called direct marketing).

Permission for sending the newsletter

“I would like to be regularly informed about interesting offers for products or services from Heitmann Hygiene & Care via email. I can withdraw this consent at any time for the future. The newsletter will be sent in accordance with our privacy policy” (2) Subscription to our newsletter is processed in the so-called double-opt-in process, meaning that after you register with your email address, you will initially receive an email with an activation link, which you must click to confirm your registration. Only after you have clicked the activation link is the subscription confirmed. During the registration process, we store not only your email address but also your IP address and the times of registration and confirmation. This is done to clarify any misuse of foreign data later on and to provide proof of your registration. (3) If the registration is not confirmed within 24 hours via the activation link, the data stored during the registration process will be automatically deleted.

(4) Only the email address is required for the newsletter registration. The provision of additional, separately marked data is voluntary and is used to address you personally. After confirmation, we store your email address for the purpose of sending the newsletter, in which we inform you about our products and services. The legal basis for processing your personal data is your consent under Art. 6 para. 1 sentence 1 lit. a GDPR.

(5) You can withdraw your consent to the storage and use of your email address for sending the newsletter at any time with effect for the future and unsubscribe from the newsletter, e.g., by sending an email to: newsletter@brauns-heitmann.de, or by clicking the link at the end of each newsletter.

6. When Contacting Us by Email or Contact Form

(1) When you contact us by email or via the contact form on our website, personal data is collected and stored. The personal data collected during contact via the contact form is detailed in the contact form. In the case of contact by email, the following personal data is collected and stored: email address and email text, as well as any other voluntarily provided data. (2) The data you provide is processed exclusively for handling your contact request. The legal basis is Art. 6 para. 1 sentence 1 lit. b GDPR or our legitimate interest in answering your inquiry in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR. (3) Once storage is no longer necessary, we will delete all personal data collected in this context. If there is a legal obligation to retain data, processing will be limited to this purpose. The legal basis is Art. 6 para. 1 lit. c GDPR.

7. Cookies

(1) This website uses cookies. Cookies are small text files that your internet browser stores on your device (PC, laptop, tablet, smartphone, etc.). Where cookies are used that are necessary for the operation of the website, the legal basis is either our legitimate interest in operating the website according to Art. 6 para. 1 sentence 1 lit. f GDPR, or if the cookies are used to fulfill or perform a contract, the legal basis is Art. 6 para. 1 sentence 1 lit. b GDPR. (2) You can change your browser settings to prevent cookies from being stored or delete them at any time.

8. Analytics Tools

Facebook Custom Audiences This website uses the remarketing function “Custom Audiences” of Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (“Facebook”). This service uses cookies. The cookies used and their duration are listed above under Section 11 “Cookies” and there under “Marketing”.

Scope

By visiting the website, Facebook receives the information that you have visited the respective page of our website. Additionally, the data mentioned under “Visiting our Website” Section 4 of this statement is transmitted. This happens regardless of whether Facebook provides a user account that you are logged into or if no user account exists. If you are logged into your Facebook account, your data can be directly attributed to this account. If you do not want this association with your Facebook profile, you must log out. It is possible that this data is passed on to Facebook’s contractual partners, third parties, and authorities. We have no control over the data collected nor do we know the full extent of data collection and storage duration by Facebook. It may also result in the transmission of your data to Facebook’s servers in the USA and/or other third countries. Further information about the scope of data collection and its processing by Facebook is available at https://www.facebook.com/about/privacy

Purpose

The purpose of this service is to display interest-based advertisements (“Facebook Ads”) to users of the website while visiting the social network Facebook or other websites using the same method. We aim to display ads that are of interest to you in order to make our website more appealing to you. Furthermore, Facebook evaluates the data received through the use of this service for the purposes of advertising, market research, and/or tailored design of its website. Further information on the scope of data collection and processing by Facebook can be found at https://www.facebook.com/about/privacy

Legal Basis

The legal basis for the processing of your data is your consent according to Art. 6 para. 1 sentence 1 lit. a GDPR. This means that this tool is only used after you have given consent.

Consent / Withdrawal

You can give your consent here. You have the right to withdraw your consent at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent prior to the withdrawal. You can withdraw your consent here.

9. Marketing Tools

Affiliate Marketing

We cooperate with partners who advertise our products on various platforms on the internet (“Affiliate Marketing”). By clicking the ad, you are redirected to our website. The cooperation partners receive a commission for this placement activity. To calculate the commission, we capture the sales initiated by the cooperation partner, along with the data relevant to the compensation calculation. The above data is kept after completing the payment in accordance with tax and commercial law for verification purposes. This is also handled by our service provider Webgains in our name in accordance with Art. 28 GDPR. Legal basis for data processing: Art. 6 para. 1 lit. b GDPR. Further information can be found in the respective privacy policies of the programs involved.

10. Storage Duration of Personal Data

The storage duration of personal data is determined by the respective statutory retention periods (e.g. commercial and tax law retention periods). Once the statutory retention periods have expired, we will delete the personal data, as long as and to the extent that the personal data is no longer required for the fulfillment of a contract or initiation of a contract, or we no longer have a legitimate interest in storing it.

11. Disclosure of Data to Third Parties

(1) We use external hosting providers to process your data and provide this online presence. They have been carefully selected and contracted, are bound by our instructions, and are regularly monitored. Legal basis is Art. 28 GDPR. (2) Beyond the cases mentioned above, we only disclose your personal data to third parties in the following cases:

If you have given us explicit consent according to Art. 6 para. 1 sentence 1 lit. a GDPR, or
If there is a legal obligation to disclose under Art. 6 para. 1 sentence 1 lit. c GDPR, such as in the context of criminal prosecution, or
If the disclosure is necessary under Art. 6 para. 1 sentence 1 lit. f GDPR for the assertion or defense of legal claims or the exercise of rights, and it is not assumed that there is an overriding, legitimate interest of the data subject opposing the disclosure.