Data privacy statement of Brunner Engineering GmbH & Co. KG

We take the protection of your personal data during your visit to our website very seriously. All your personal details, such as your name, address, telephone number, email address, account number, etc., as well as any information that can be traced back to you, are referred to as personal data. This also includes your IP address, which is automatically transmitted when you visit a website. This is essential for technical reasons.

We want you to know if and when we collect which data and how it will be used. We have taken technical and organizational measures to ensure that data protection regulations are observed both by us and by any external service providers. We hereby take into account especially the European Union’s (EU) General Data Protection Regulation (GDPR), which has been in force since 25 May 2018, and the national Telecommunications and Telemedia Data Protection Act (TTDSG).

As a general rule, personal data is collected on this website only to the extent necessary for the purposes listed below. We provide you with information on the type of data collected during your visit to the website and how it is used.

If you wish to exercise your rights (see below), please contact us as the responsible data controller for this website. You can find our contact details in the legal notice. When communicating in writing, please include the keyword “data protection” so that we can allocate this internally.

For general questions or concerns regarding data protection, please contact our external Data Protection Officer (DPO) Thomas Schneider by email:

DSB Baden GmbH
Robert-Schuman-Str. 21
77704 Oberkirch
Phone: +49 (7802) 98 99 04-1
E-Mail: t.schneider@dsb-baden.de

Please include our company name in the subject line so that the external DPO can assign it.

1.1 Legal bases

Personal data must be “processed” only if there is a valid legal basis for doing so. In doing so, processing is tied to a specific purpose. We process personal data that we may collect from you via this website on the basis of the following legal grounds:

1.1.1 Balancing of interests pursuant to Section 6(1)(f) GDPR

If tools are used with the aim of making our website more user-friendly, efficient and secure, this may be done within the framework of a balancing of interests, as this does not include the profiling of user behavior and the visitor’s IP address is stored in a non-anonymised form for a short period only.

We also process information that you provide to us for the purposes of a potential or existing business relationship (B2B relationship) within the framework of a balancing of interests.

1.1.2 Contractual relationship pursuant to Section 6(1)(b) GDPR

If you, as a private person, provide us with your personal information (e.g. as part of a job application or product inquiry), we will process this data in the context of entering into a contract or for the purpose of managing the contractual relationship with you.

1.1.3 Legal requirement pursuant to Section 6(1)(c) GDPR

Insofar as we are subject to legal requirements for which we must use your personal data to comply, this will be done on this legal basis.

1.1.4 Consent pursuant to Section 6(1)(a) GDPR

In rare cases, we may wish to use personal data you have transmitted for a purpose other than the originally intended one. Should this occur and no other legal basis apply, we will require your voluntary consent – which may be withdrawn at any time with future effect – for this purpose, and we will ask for this separately.

1.2 Website access

When you visit our website, your IP address – which is technically necessary for communication – will be stored for the duration of the session, and further information will be automatically transmitted. We log every access to our homepage as well as every possible retrieval of a file stored on the homepage.

The following are logged:

• Name of the retrieved file
• Date and time of retrieval
• Transferred amount of data
• Notification of successful retrieval and web browser
• IP address

For reasons of security and website availability, and in accordance with Section 12 of the TTDSG (disruption of telecommunications systems and misuse of telecommunications services), the IP address is also logged for a short period of up to 7 days at most. Access to this log is carried out for the reasons stated above, in particular to investigate security incidents and, on the basis of existing legal grounds, to pass on information to law enforcement authorities for criminal prosecution. We are unable to link data to specific persons. We do not merge this data with other data sources. The legal basis for this processing is Section 6(1)(f) of the GDPR (“Balancing of interests”).

1.3 Information obligations under Section 13 of the GDPR

Under the General Data Protection Regulation, we are obligated to provide appropriate information whenever personal data are collected directly from the data subject. We collect personal data from you via our website and would therefore like to inform you accordingly. This collection takes place, for example, when we

• Collect your IP address for the technical provision of the website
• Use a tracking tool that utilizes the IP address
• Receive your entries in a contact form for communication with us.

General approach:
Insofar as you have provided us with personal data, we generally use them only to respond to your inquiries and for technical administration. As an exception, anonymized IP addresses may be used for statistical analysis. Should the IP address be used for any purposes other than that, this will be listed below.

Your personal data will be passed on to third parties or otherwise transferred only if this is necessary for the purpose of contract execution – in particular the transfer of order data to suppliers – if it is necessary for billing purposes, if we are legally obligated to do so, within the context of order processing by subcontractors, or if you have previously given your consent. You are entitled to withdraw your consent at any time with future effect.

Stored personal data will be deleted if you withdraw your consent to its storage, if knowledge of the data is no longer necessary to fulfill the purpose for which it was stored – i.e. the transaction has been completed and there are no statutory retention periods preventing this – or if its storage is unlawful for other legal reasons. Your objection to processing can also lead to the deletion of the stored data.
In the event that data cannot be deleted for technical reasons, we will anonymize it so that a personal reference can no longer be established in the future.

All data collection and processing on this website is carried out within our company’s scope of responsibilities.

Further detailed information can be found in the following items.