PRIVACY POLICY

Bartscher GmbH (hereinafter referred to as "we"), as the operator of the online service, is responsible for processing the personal data of users of the online service. Our contact details can be found in the imprint of the online offer, the contact persons for questions regarding the processing of personal data are named directly in this data protection declaration.

We take the protection of your privacy and your private data very seriously. We only collect, store and use your personal data in accordance with the content of this privacy policy and the applicable data protection regulations, in particular the European General Data Protection Regulation (GDPR) and national data protection regulations.

With this privacy policy, we would like to inform you to what extent and for what purpose personal data is processed in connection with the use of the online offer.

Personal data
Personal data is information about an identified or identifiable natural person. This includes all information about your identity, such as your name, your e-mail address or your postal address. Information that cannot be linked to your identity (such as statistical data, e.g. the number of users of the online offering) is not considered personal information.

In principle, you can use our online offering without disclosing your identity and without providing personal data. We will then only collect general information about your visit to our website. For some of the services offered, however, personal data is collected from you. This data is then only processed by us for the purposes of using this online service, in particular to provide the requested information. When collecting personal data, only the data that is absolutely necessary must be provided. In addition, it may be possible to provide further information, in which case this is voluntary. We indicate in each case whether the information is mandatory or voluntary. We will then inform you about the specific details in the corresponding section of this privacy policy.

Automated decision-making based on your personal data does not take place in connection with the use of our online offer.

Processing of personal information
Your data will be stored by us on specially protected servers within the European Union. These are protected by technical and organisational measures against loss, destruction, access, modification or dissemination of your data by unauthorised persons. Access to your data is only possible for a few authorised persons. These persons are responsible for the technical, commercial or editorial support of the servers. Despite regular checks, however, complete protection against all risks is not possible.

Your personal data is encrypted and transmitted via the internet. We use SSL encryption (Secure Socket Layer) for data transmission.

Disclosure of personal data to third parties
We only use your personal information to provide the services you have requested. If external service providers are used by us to provide the service, their access to the data is also exclusively for the purpose of providing the service. We take technical and organisational measures to ensure compliance with data protection regulations and also oblige our external service providers to do the same.

Legal bases for data processing
Insofar as we obtain consent for the processing of your personal data, Art. 6 para. 1 lit. a) GDPR serves as the legal basis for data processing.

Insofar as your personal data is processed because this is necessary for the fulfilment of a contract or in the context of a contractual relationship with you, Art. 6 para. 1 lit. b) GDPR serves as the legal basis for data processing.

Insofar as we process your personal data to fulfil a legal obligation, Art. 6 para. 1 lit. c) GDPR serves as the legal basis for data processing.

Art. 6(1)(f) GDPR also serves as the legal basis for data processing if the processing of your personal data is necessary to safeguard a legitimate interest of our company or a third party and your interests, fundamental rights and freedoms do not require the protection of personal data.

In this privacy policy, we always point out the legal basis on which we base the processing of your personal data.

Data deletion and storage duration
We always delete or block your personal data when the purpose of storage no longer applies. However, data may be stored beyond this if this is provided for by legal requirements to which we are subject, for example with regard to statutory retention and documentation obligations. In such a case, we delete or block your personal data after the end of the corresponding requirements.

Information about your computer
Whenever you access our online offer, we collect the following information about your computer, regardless of your registration: the IP address of your computer, the request from your browser and the time of this request. In addition, the status and the amount of data transferred are recorded as part of this enquiry. We also collect product and version information about the browser used and the computer's operating system. We also record the website from which the online offer was accessed. The IP address of your computer is only stored for the time of use of the online offer and is deleted or anonymised by shortening it in Connection. The remaining data is stored for a limited period of time.

We use this data for the operation of the online service, in particular to detect and eliminate errors, to determine the utilisation of the online service and to make adjustments or improvements. These purposes also constitute our legitimate interest in data processing in accordance with Article 6(1)(f) GDPR.

Use of cookies
As is the case on many websites, cookies are used for our online offering. Cookies are small text files that are stored on your computer and that save certain settings and data for exchange with our online offer via your browser. A cookie usually contains the name of the domain from which the cookie file was sent as well as information about the age of the cookie and an alphanumeric identifier.

Cookies enable us to recognise your computer and make any pre-settings immediately available. Cookies help us to improve our online offering and to provide you with a better and more personalised service. This also constitutes our legitimate interest in data processing in accordance with Art. 6 Para. 1 lit. f) GDPR.

The cookies we use are so-called session cookies, which are automatically deleted again at the end of the browser session. In some cases, cookies with a longer storage period can also be used so that your default settings and preferences can still be taken into account the next time you visit our website.

Most browsers are set to accept cookies automatically. However, you can deactivate the storage of cookies or set your browser to notify you as soon as cookies are sent. It is also possible to manually delete cookies that have already been saved via the browser settings. Please note that you may only be able to use our online services to a limited extent or not at all if you refuse the storage of cookies or delete necessary cookies.

Google Analytics
We use Google Analytics for statistical analyses. Google Analytics is a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Google Analytics uses "cookies", which are text files placed on your computer, to help the website analyse how users use the site. The information generated by the cookies about your use of this website is usually transmitted to a Google server in the USA and stored there. Google will use this information on behalf of the operator of this website for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. You can prevent the storage of cookies by setting your browser software accordingly; however, we would like to point out that in this case you may not be able to use all the functions of this website to their full extent. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available at the following link http://tools.google.com/dlpage/gaoptout?hl=de.

You can find Google's security and data protection principles at https://policies.google.com/privacy?hl=de.

We are of the opinion that, due to the protective measures taken, data processing for the optimisation of our online offer is to be regarded as a legitimate interest in data processing in accordance with Art. 6 Para. 1 lit. f) GDPR.

As an existing Bartscher trading partner, you can register to use our online service. To do so, you must provide the data requested during registration, namely your customer number, company name, first and last name, telephone number and e-mail address. We also record the date and time of registration and the IP address. After registration, we compare your details with our customer data; if the comparison is positive, the customer account is activated for use.

The legal basis for processing the data for registration is your consent pursuant to Art. 6 (1) (a) GDPR. If you register with us for the fulfilment or initiation of a contract, the legal basis for the processing of the data is additionally Art. 6 para. 1 lit. b) GDPR.

The information requested as a mandatory field during registration is required for the fulfilment or initiation of a contract with us for certain services.

We use your personal information for orders only within our company and affiliated companies, as well as with the company commissioned to process orders.

Storage and data transfer for orders
We work together with various companies that are responsible for payment processing and logistics to process orders. We ensure that our partners also comply with data protection regulations. For example, we pass on your address data (name and address) to the respective transport company that delivers the products you have ordered. The legal basis for this is Art. 6 para. 1 lit. b) GDPR. The processing of your personal data is necessary for the fulfilment of the contract with you.

The data will be stored by us for as long as it is necessary for the fulfilment of the contract. In addition, we store this data for the fulfilment of post-contractual obligations and due to retention periods under commercial and tax law for the period required by law. This retention period is generally 10 years to the end of the respective calendar year.

Payment processing for orders
Depending on the selected payment method, payment processing for orders may be carried out by a service provider.

In the case of payment by credit card or PayPal, the technical processing is carried out by Computop Wirtschaftsinformatik GmbH, Schwarzenbergstr. 4, 96050 Bamberg. Computop is a PCI DSS-certified payment service provider and leading service provider for secure payment transactions. Computop undergoes regular security certification and fulfils the PCI security standard. The corresponding account or credit card information is stored and processed exclusively by Computop Wirtschaftsinformatik GmbH.

When paying via PayPal, you will be redirected to the PayPal website via a link. Your personal data will be processed. This includes your name, address, e-mail address, telephone number and account or credit card details. Please refer to the General Terms and Conditions, Terms of Use and Privacy Policy of PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg on the website www.paypal.com.

The legal basis for payment processing is Art. 6 para. 1 lit. b) GDPR. The processing of your personal data is necessary for the fulfilment of the contract with you, whereby the payment method can be freely chosen by you.

The data will be stored by us for as long as it is necessary for the fulfilment of the contract. In addition, we store this data for the fulfilment of post-contractual obligations and due to retention periods under commercial and tax law for the legally prescribed period. This retention period is generally 10 years to the end of the respective calendar year.

Bonitätsprüfung
If we make advance payments, we reserve the right to carry out a credit check to protect our legitimate interests. obtain a credit report on the basis of mathematical-statistical procedures from the following company(ies):

- Creditreform Paderborn, Friederichs & Davis KG, Am Hoppenhof 30, D - 33104 Paderborn

- Coface, Niederlassung Deutschland, Isaac-Fulda-Allee 1, D- 55124 Mainz

For this purpose, we transmit the personal data required for a credit check and use the information received about the statistical probability of a payment default. The credit report may contain probability values (score values) that are calculated on the basis of scientifically recognised mathematical-statistical procedures. A large number of characteristics, such as income, address data, occupation, marital status and previous payment behaviour, are used to determine the customer's future risk of non-payment. The result is expressed in the form of a payment score. The information obtained in this way forms the basis of our decision regarding the establishment, execution or termination of the contractual relationship.

However, the possibility of selecting one of the payment methods offered is not dependent on such information.

The legal basis for the credit check is Art. 6 para. 1 lit. a) GDPR.

Communication with us
You can contact us in various ways. We are also happy to keep you regularly informed with our newsletter by e-mail.

Communication by e-mail
We cannot guarantee complete data security when communicating by e-mail, so we recommend that you send information with a high level of confidentiality by post.

You can decide for yourself what information you wish to send us by email. The legal basis for the processing of your data is your consent in accordance with Art. 6 para. 1 lit. a) GDPR.

We would like to expressly point out that our mail system has an automated archiving procedure. In this case, all incoming and outgoing emails are archived digitally and in an audit-proof manner for reasons of tax law (GoBD §§ 146, 147 AO) and commercial law. The retention period can be up to 10 years. Emails sent to karriere@bartscher.de are exempt from archiving. If you have any further questions regarding this digital archiving, please contact our data protection officer. We would also like to point out that you should only send us application documents in PDF format. Zipped (WinZip, WinRAR, 7Zip, etc.) files will not be allowed through our security systems. Please be aware that your application documents will not be transmitted in encrypted form. We assume that we may also reply to your application mails in unencrypted form. If you do not wish us to do so, please let us know in your application e-mail. We accept no liability for any unauthorised access to application documents by third parties that may occur during the transmission of unencrypted emails.

Newsletter
When you register for our newsletter, your email address will be used for our own advertising purposes until you unsubscribe. You will receive regular information by email on current topics as well as emails for special occasions, such as special promotions. The emails may be personalised and individualised based on the information we have about you.

For the registration for our newsletter, we use the so-called double opt-in procedure, unless you have given us your consent in writing, i.e. we will only send you a newsletter by e-mail if you have expressly confirmed to us beforehand that we should activate the newsletter dispatch. We will then send you a notification email and ask you to confirm that you wish to receive our newsletter by clicking on a link contained in this email.

The legal basis for the processing of your data is your consent in accordance with Art. 6 para. 1 lit. a) GDPR if you have expressly registered for the newsletter. Within the framework of the legal requirements, it may also be possible for you to receive our newsletter from us without express consent because you have ordered goods or services from us, we have received your e-mail address in this context and you have not objected to receiving information by e-mail. In this case, the legal basis is our legitimate interest in the transmission of direct advertising in accordance with Art. 6 para. 1 lit. f) GDPR.

If you no longer wish to receive newsletters from us, you can revoke your consent at any time with effect for the future or object to the further receipt of the newsletter without incurring any costs other than the transmission costs according to the basic rates. Simply use the unsubscribe link included in every newsletter or send a message to us or our data protection officer.

Social media
You will find links to the Xing career network and YouTube on our website. You can recognise the links by the respective provider logo.

Clicking on the links opens the corresponding external offers, for which this data protection declaration does not apply. For details on the provisions applicable there, please refer to the corresponding data protection declarations of the individual providers; you can find these at

Xing: https://www.xing.com/privacy
YouTube: https://policies.google.com/privacy?hl=de&gl=de

No personal information is transmitted to the respective providers before the corresponding links are called up. Your access to the linked page is also the basis for data processing by the respective provider.

Use of YouTube
Our online offering includes videos for which we use a plugin from the Google-operated YouTube service ("YouTube"). The operator of the service is YouTube LLC, 901 Cherry Ave, San Bruno, CA 94066, USA. When you access a page on our website that contains an embedded video, a connection to the YouTube servers is established. This tells the YouTube server which pages of our website you have visited.

If you are logged into your YouTube account, you enable YouTube to assign your surfing behaviour directly to your personal profile. You can prevent this by logging out of your YouTube account. You can find more information on the handling of user data in Google's privacy policy at https://policies.google.com/privacy?hl=de&gl=de, which also applies to YouTube.

We use YouTube so that we can show you videos and tell you more about us and our services; this is also our legitimate interest within the meaning of Art. 6 para. 1 lit. f) GDPR.

We attach great importance to explaining the processing of your personal data as transparently as possible and to informing you about your rights. If you would like more information or wish to exercise your rights, you can contact us at any time so that we can take care of your request.

Data subject rights
You have extensive rights with regard to the processing of your personal data. Firstly, you have a comprehensive right to information and can request the correction and/or deletion or blocking of your personal data if necessary. You can also request a restriction of processing and have the right to object. With regard to the personal data you have provided to us, you also have the right to data portability.

If you would like to assert one of your rights and/or receive more information about this, please contact our customer service. Alternatively, you can also contact our data protection officer.

Revocation of consent and objection
Once you have given your consent, you can freely revoke it at any time with effect for the future. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal. Contact persons for this are also our customer service and our data protection officer.

If the processing of your personal data is not based on consent, but on another legal basis, you can object to this data processing. Your objection will lead to a review and, if necessary, termination of the data processing. You will be informed of the result of the review and - if the data processing is nevertheless to be continued - you will receive further information from us as to why the data processing is permissible.

Data protection officer and contact
We have appointed an external data protection officer who supports us in data protection issues and whom you can also contact directly. Our data protection officer and his team will be happy to answer any questions you may have regarding our handling of personal data or further information on data protection issues:

Dirk-Michael Mülot GmbH
Grüner Weg 80, 48268 Greven

Tel.: +49 2571 5402-0
Fax: +49 2571 5402-199
E-mail: d.muelot@svb-muelot.de

Complaints
If you believe that the processing of your personal data by us is not in accordance with this privacy policy or the applicable data protection regulations, you have the right to lodge a complaint with a supervisory authority. You can lodge a complaint with our data protection officer. The data protection officer will then investigate the matter and inform you of the outcome of the investigation.

Links to other websites
Our online offering may contain links to other websites. These links are generally labelled as such. We have no influence on the extent to which the applicable data protection regulations are complied with on the linked websites. We therefore recommend that you also inform yourself about the respective data protection declarations on other websites.

Amendments to this data protection declaration
The status of this data protection declaration is indicated by the date (below). We reserve the right to amend this privacy policy at any time with effect for the future. Amendments are made in particular in the event of technical adjustments to the online offering or changes to data protection regulations. The current version of the data protection declaration can always be accessed directly via the online offer. We recommend that you inform yourself regularly about changes to this privacy policy.

Status of this privacy policy: 03/2024