In the following paragraphs we will inform you about the collection of your personal data when you use this website. Personal data are defined as all data which can be related personally to you, i.e. for example, name, address, e-mail addresses, user behaviour.

 

1. Name and address of the data controller and of the data protection officer

Data controller in terms of GDPR

BWPARTS GmbH
Industriestraße 6
D – 86420 Diedorf

Phone:       +49 8238 3003-0

represented by the managing directors Anton Müller, Michael Zeich cf. our legal notice.

If you have questions about data protection, you can contact our data protection officer:

by e-mail: datenschutz@bwparts.eu
by post: at the above address with the addition of data protection officer

 

2. Your rights when using the website

• In accordance with Art. 15 GDPR, you have the right to obtain information about any personal data we have stored about you which have been collected during your visit to the website.

• In accordance with Art. 16 GDPR, you have the right to demand correction of incorrect data or completion of any personal data we have stored about you;

• In accordance with Art. 17 GDPR, you have the right to demand the deletion of any personal data we have stored about you, provided that the processing is not required to fulfil a legal obligaton, or to enforce, exercise or defend legal claims;

• In accordance with Art. 7 Para. 3 GDPR, you have the right, in respect of us, to revoke consent you may have granted to have your data processed at any time. As a consequence, we are no longer permitted to continue the data processing which was based on this consent in the future. The legality of the processing which has already been carried out on the basis of the consent until the affected party revokes it remains unaffected.

• In accordance with Art. 20 GDPR, you have the right to obtain the personal data that you have provided to us in a structured, common and machine-readable format or to demand that they are transferred to another responsible person;

• In accordance with Art. 18 GDPR, you have the right to demand that the processing is restricted. We will restrict the processing if the prerequisites of Art. 18 Para. 1 GDPR have been met;

• the right, pursuant to Art. 77 GDPR, to lodge a complaint with the competent data protection supervisory authority if you believe that your right to informational self-determination has been infringed by the processing of the personal data that is collected during your visit to our website. The Bavarian State Office for Data Protection Supervision, Promenade 27 in 91522 Ansbach, Germany www.lda.bayern.de, is responsible for BWPARTS GmbH.
• If your personal data are being processed on the basis of legitimate interests in accordance with Art. 6 Para. 1 Clause. 1 lit. f GDPR, you have the right, in accordance with Art. 21 GDPR, to lodge an objection against the processing of your personal data, provided there are reasons for this arising from your particular situation or if the objection is against direct advertising. In the latter case you have a general right of objection which we will uphold without you having to specify a particular situation.

Please send all requests for information, requests for access or objections to the data processing to our data protection officer via datenschutz@bwparts.eu or at the contact details provided under No. 1.

 

3. Data security

We maintain up-to-date technical measures to guarantee data security in particular to protect your personal data from risks incurred while your data are being transferred, as well as from third parties obtaining knowledge of it. These measures are adapted accordingly in each case in accordance with the latest technical knowledge.

 

4. Processing of personal data

4.1 Collection of personal data when visiting our website

General use of the website

When the website is used merely for information purposes, i.e. when you do not log in to use the website, register or transmit information to us in any other way, we shall only collect the personal data that your browser transmits to our server. If you would like to view our website, we will collect the following data which we require from a technical point of view to display our website to you and to guarantee stability and safety (the legal basis is Art. 6 Para. 1 Clause. 1 lit. f GDPR)

• IP address
• Date and time of the request
• Time zone difference to Greenwich Mean Time (GMT)
• Content of the request (specific page)
• Access status/HTTP status code
• Data volume transferred in each case
• Website from which the request comes
• Browser
• Operating system and its interface
• Language and version of the browser software.

Use of cookies

Our website uses cookies, which are stored on your device by your browser and contain the specific settings for the use of the website (e.g. for the current session). Cookies help to make our website more user-friendly, more effective and more secure. Cookies are small text files that are stored on your computer and saved by your browser.

You can configure your browser setting in accordance with your requirements. We would, however, like to point out that if you do so, you may not be able to use all the functions of this website.

The cookies that are technically necessary are stored on the basis of Art. 6 (1) f) GDPR. The website operator has a legitimate interest in the storage of cookies for the technically perfect and optimised provision of our services. Other cookies are only stored with your consent on the basis of Art. 6 (1) a) GDPR. You may revoke your consent at any time with effect for the future.

4.2 Further functions and features of our website

In addition to the use of our website purely for information, we offer various services that you can use if you are interested. For this, you generally have to provide additional personal information, which we shall use to provide the respective service.

Contacting by e-mail

For questions of any kind, we offer you the option of getting in contact with us using the e-mail addresses specified on the website. The data you provide are processed to answer your enquiry.

We delete the data that is generated in this context as soon as it no longer needs to be stored, or we restrict the processing if statutory storage obligations exist.

The data that is provided for the purpose of getting in touch with us shall be processed in accordance with Art. 6 (1) Sentence 1 a) GDPR, on the basis of your voluntarily granted consent.

 

5. Integration of OpenStreetMap

On the website we integrate the maps of the service “OpenStreetMap” of the provider OpenStreetMap Foundation, St John’s Innovation Centre, Cowley Road, Cambridge, CB 4 0 WS, United Kingdom.

This allows us to show you interactive maps directly on the website and enables you to use the map function conveniently. The legal basis is Art. 6 Para. 1 Clause 1 lit. f GDPR.

According to our knowledge, the users’ data are used by OpenStreetMap for the purpose of presenting the map functions and interim storage of the selected settings. These data may in particular include IP addresses and after the consent of the users (as a rule carried out within the scope of the settings of their mobile devices) location data.

You can find further information pertaining to the handling of your data under: https://wiki.osmfoundation.org/wiki/Privacy_Policy

 

6. Privacy notice regarding our presence on Facebook

The company uses the technical platform and the services of Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. Our presence on Facebook facilitates a better, active communication with our customers and prospective customers. The legal basis for this is Art. 6 (1) f) GDPR.

According to a ruling of the ECJ on 5th June 2018, the operator of a Facebook page shall be jointly responsible with Facebook for the processing of personal data.

When you visit our Facebook page, Facebook shall collect your IP address and other information that is available on your PC in the form of cookies. This information shall be used to provide us, as the operator of the Facebook page, with statistical information about the use of the Facebook page. Facebook provides more detailed information about this under the following link:
http://de-de.facebook.com/help/pages/insights. We have no influence on the generation and presentation of the information.

The information collected about you in this context shall be processed by Facebook Ltd. and, if applicable, transferred to countries outside the European Union. In its data use policy, Facebook describes, in a general way, which information Facebook receives and how this is used. There, you will also find information about ways of getting in touch with Facebook and about the options for ad settings. The data use policy is available under the following link: http://de-de.facebook.com/about/privacy  .

You can find Facebook’s full data policy here:

https://de-de.facebook.com/full_data_use_policy

How Facebook uses the data from your visit to Facebook pages for its own purposes, to what extent activities on the Facebook page are assigned to individual users, for how long Facebook stores this data and whether data from a visit to the Facebook page is passed on to third parties is not specified clearly and conclusively by Facebook and is not known to us.

When you access a Facebook page, the IP address assigned to your device shall be transmitted to Facebook. According to Facebook, this IP address shall be anonymised (in the case of “German” IP addresses) and deleted after 90 days. Facebook shall also store information about its user’s devices (e.g. within the framework of the “log-in notification” function). If applicable, Facebook shall thus be able to assign IP addresses to individual users.

If you are currently logged into Facebook as a user, there is a cookie on your device with your Facebook identification. As a result, Facebook is able to see that you have visited this page and to track how you have used it. This also applies to all other Facebook pages. Via Facebook buttons integrated into webpages, Facebook is able to record your visits to these pages and assign them to your Facebook profile. Contents or advertising tailored to you may be offered on the basis of this data.

If you would like to avoid this, you should log out of Facebook or deactivate the function “remain logged in”, delete the cookies that are available on your device and close and restart your browser. In this way, Facebook information which allows you to be directly identified will be deleted. Thus, you can use the Facebook pages without your Facebook identification being revealed. If you access interactive functions of the page (like, comment, share, message etc.), a Facebook log-in window will appear. After you have logged in, you are again identifiable to Facebook as a specific user.

You can find information on how to manage or delete existing information on the following Facebook support pages:

https://de-de.facebook.com/about/privacy

Facebook has the primary responsibility for the processing of insights data and for the protection of the rights of the data subjects pursuant to Art. 15 ff. GDPR. In the case of requests for information or other questions relating to your rights, such as the right to the erasure of data, please contact Facebook directly, as it is only Facebook that has full access to your user data. If we receive such requests directly, we shall forward them to Facebook.

Furthermore, we collect and process no data from your use of the company’s own Facebook page.

 

7. Social media profiles on Instagram

We maintain a profile in the social network Instagram in order to communicate with the registered users and to inform them about our products, services and news.

When you use and access our profile in the social network, the data privacy notices and terms of use of the respective social media provider shall apply. When you visit our profile on Instagram, your data shall be processed on the basis of our legitimate interest in a varied external image of our company, the use of an effective opportunity to provide information, and communication with you. The legal basis is Art. 6 (1) f) GDPR. If you have given the provider of the social network your consent to the processing of your personal data, the legal basis is Art. 6 (1) a) GDPR. We have no influence on the processing of personal data by the respective social media provider.

When you visit our profiles, the social media provider shall generally store cookies in your browser, in which your user behaviour or your interests shall be stored for market research and advertising purposes. You can find detailed information on the data processing when you use our social media profile and on your rights in the data privacy statements of the social media providers:

• Instagram (provider: Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland)

Data privacy statement/ opt-out: http://instagram.com/about/legal/privacy/.

 

8. Storage period for the personal data

We shall process and store your personal data for as long as this is necessary for the fulfilment of the aforementioned obligations, in particular our contractual and statutory obligations. If the data is no longer necessary for the fulfilment of these purposes and our obligations, it shall be deleted regularly, unless its temporary further processing is necessary for the following purposes:

• performance of storage obligations under commercial and tax law: in particular the German Commercial Code and the German Fiscal Code. The terms specified there for storage or documentation amount to six to ten years.
• preservation of proof in the context of the statutory statute of limitations. In accordance with Sections 195 ff. of the German Civil Code (BGB), these limitation periods may amount to up to 30 years, whereby the regular limitation period shall be three years.

 

9. Obligation to provide data

There is no statutory obligation to provide data.

In the context of a business relationship, you must provide the specific personal data that is required to execute your order and the associated contractual obligations or which we are legally obliged to collect. Without this data, we are not in a position to conclude an agreement or execute it.

 

10. Existence of an automated decision-making process including profiling.

Such a procedure is not used.

 

11. External links

If you use external links which are offered as part of our website, this privacy statement does not apply to these links. We have no influence over other providers’ adherence to data protection and security provisions. Therefore, please also inform yourself on the websites of other providers about the data processing which takes place on these sites.

 

12. Amendments to the privacy statement

As the result of enhancements to our website and its offerings or due to changed legal or official specifications, it may be necessary to amend this privacy statement.

 

13. Privacy policy for business partners

Our privacy policy for business partners can be found here.