Privacy Policy

General information about the processing of your data 

We are obliged by law to inform you about the processing of your personal data (hereinafter referred to as “data”) when you use our website. This data protection notice informs you about the details of the processing of your data and about your legal rights in this regard. For terms such as “personal data” and “processing”, the legal definitions pursuant to Art. 4 GDPR apply. We reserve the right to adapt the privacy policy with future effect, in particular in the event of further development of the website, the use of new technologies or changes to the legal bases or the corresponding case law. We recommend that you read this privacy policy from time to time and take a printout or a copy for your records.

Scope 

This privacy policy is addressed to all users of our website www.bollin.de (hereinafter referred to as “website”) as well as all interested parties, customers, suppliers and other cooperation partners of Christian Bollin Armaturenfabrik GmbH

Controller 

The following party is known as the controller under data protection law and therefore responsible for the processing of personal data within the scope of this privacy policy: 

Christian Bollin Armaturenfabrik GmbH
Willy-Brandt-Straße 15
D-61440 Oberursel

Telefon +49-6171-883366-0
Telefax +49-6171-883366-9
E-Mail bollin (at) bollin.de

Questions about data protection 

If you have any questions about data protection with regard to our company or our website, you can contact us using the contact details provided under “Controller”. 

Security  

We have taken comprehensive technical and organisational precautions to protect your personal data from unauthorised access, abuse, loss and other external disruption. To this end, we regularly review our security measures and adapt them to the latest standards. 

Your rights 

You have the following rights with regard to the personal data concerning you that you can assert against us: 

  • Right of access: You can request access to the personal data concerning you which we process, as set forth in Art. 15 GDPR.  
  • Right to rectification: If the information concerning you is not (or no longer) correct, you can request its rectification in accordance with Art. 16 GDPR. If your data is incomplete, you can request that it be completed. 
  • Right to erasure: You may request the erasure of your personal data in accordance with Art. 17 GDPR. 
  • Right to restriction of processing: Pursuant to Art. 18 GDPR, you have the right to demand that the processing of your personal data be restricted.  
  • Right to object to processing: Pursuant to Art. 21(1) GDPR, you have the right to object at any time, for reasons arising from your particular situation, to the processing of your personal data which occurs based on Art. 6(1) Sentence 1(e) or (f) GDPR. If you object, we will not process your data further, unless we can prove compelling legitimate reasons for the processing which override your interests, rights and freedoms. Processing will also continue if the processing serves to establish and exercise or defend against legal claims (Art. 21(1) GDPR). Furthermore, under Art. 21(2) GDPR you have the right to object at any time to the processing of your personal data for direct marketing purposes, which includes profiling to the extent that this is related to such direct marketing. In this privacy policy, we draw your attention to this right to object when describing each processing operation. 
  • Right to withdraw your consent: If you have given your consent for processing, you have a right to withdraw that consent under Art. 7(3) GDPR.  
  • Right to data portability: You have the right to receive the personal data you have given us in a structured, commonly used, machine-readable format (“data portability”) and the right to transfer this data to another controller, if the prerequisites of Art. 20(1)(a), (b) GDPR are fulfilled (Art. 20 GDPR). 

You can assert your rights by informing us using the contact details specified under “Controller” above.

If you believe that the processing of your personal data violates data protection law, then under Art. 77 GDPR you also have the right to lodge a complaint with a data protection supervisory authority of your choice. This also includes the data protection supervisory authority responsible for the controller:  

Hessischer Beauftragte für Datenschutz und Informationsfreiheit, Postfach 31 63, 65021 Wiesbaden, Gustav-Stresemann-Ring 1, 65189 Wiesbaden, Telefon: 0611/14080, E-Mail: poststelle(at)datenschutz.hessen.de, https://www.datenschutz.hessen.de.

 

Using our website 

In principle, you can use our website for purely informational purposes without disclosing your identity. When you access the individual pages of the website in this sense, this only results in access data being transferred to our web hosting service so that the website can be displayed to you. This involves the following data being processed: 

  • Browser type/browser version 
  • Operating system used 
  • Language and version of the browser software 
  • Date and time of access 
  • Hostname of the accessing device 
  • IP address 
  • Content of the request (specific page) 
  • Access status / HTTP status code 
  • Websites accessed via the website 
  • Referrer URL (website visited before) 
  • Notification of whether the access was a success and 
  • Volume of data transferred. 

It is necessary for this data to be processed temporarily in order to make it technically possible for you to visit our website and to deliver the website to your device. The access data is not used to identify individual users and is not combined with other data sources. The legal basis for the processing is Art. 6(1) Sentence 1(f) GDPR. We have legitimate interests in ensuring the functionality, integrity and security of the website. The access data will be erased as soon as it is no longer required for achieving the purpose of its processing. In the case of recording the data to provide the website, this is the case when you end your visit to the website.  

You may object to the processing. Your right of objection exists if you have reasons arising from your particular situation. You may send us your objection using the contact details specified under “Controller” above. 

Device information 

In addition to the aforementioned access data, technologies are used when you use the website which store information in your device (e.g. desktop PC, laptop, tablet or smartphone) or access information which is already stored on your device. These technologies may include, for example, cookies, pixels, local storage, session storage, IndexedDB or browser fingerprinting technologies. These technologies can be used to recognise you across devices and websites.  

According to Sect. 25(1) of the German Telecommunications and Telemedia Data Protection Act (TTDSG), we generally require your consent for the use of these technologies. According to Sect. 25(2) TTDSG, this is only not required if the technologies either enable the transmission of a message via a public telecommunications network or if they are absolutely necessary to provide a telemedia service that you have expressly requested: 

We only use elements on our website that either enable the transmission of a message via a public telecommunications network or if they are absolutely necessary to provide a telemedia service that you have expressly requested. We do not require your consent for this in accordance with Section 25 (2) TTDSG. Specifically, we use the following cookie on our website:

Name: PHPSESSID

Purpose: To record the current browser session for security functions.

The cookie is deleted after the end of the browser session (session). You can prevent processing by making the appropriate settings in your browser software.

Contacting our company 

When you contact our company, e.g. by email or using the contact form on the website, we will process the personal data you provide so that we can respond to your request. In order for us to process enquiries submitted via the contact form, it is essential that you provide you name, the name of your company, your email address and your message. At the time the message is sent to us, your IP address and the date and time of registration will be processed. The legal basis for this processing is Art.  6 (1) Sentence 1(f) GDPR and Art. 6(1) Sentence 1(b) GDPR, if the contact is made with the intention of concluding a contract. If the request is aimed at concluding a contract, it is necessary for you to provide your data. If you do not provide your data, it will not be possible to conclude/execute a contract and process the request. The other data processed during the submission process serves to prevent any misuse of the contact form and to ensure the security of our information technology systems. As soon as processing is no longer necessary, we erase the data generated here – usually two years after the end of the communication – or, if statutory retention obligations apply, restrict processing of the data. 

You may object to the processing. Your right of objection exists if you have reasons arising from your particular situation. You may send us your objection using the contact details specified under “Controller” above. 

Catalog order

When you order our catalog via the order form in our download area, we will process the personal data you provide so that we can respond to your request. In order for us to process enquiries submitted via the order form, it is essential that you provide you name and your email address. At the time the message is sent to us, your IP address and the date and time of registration will be processed. The legal basis for this processing is Art. 6(1) Sentence 1(b) GDPR. For ordering our catalog, it is necessary for you to provide your data. If you do not provide your data, it will not be possible to conclude/execute a contract and process the request. The other data processed during the submission process serves to prevent any misuse of the contact form and to ensure the security of our information technology systems. As soon as processing is no longer necessary, we erase the data generated here – usually two years after the end of the communication – or, if statutory retention obligations apply, restrict processing of the data. 

Processing for contractual purposes 

We process your personal data if and to the extent necessary for the initiation, creation, execution and/or termination of a legal transaction with our company. The legal basis for this results from Art. 6(1) Sentence 1(b) GDPR. It is necessary for you to provide your data in order to conclude the contract and you are contractually obliged to provide your data. If you do not provide your data, it will not be possible to conclude and/or execute a contract. Once the purpose has been achieved (e.g. contract processing), the personal data will be blocked for further processing or erased, unless we are entitled to keep processing the data on the basis of a consent granted by you (e.g. consent to the processing of your email address for sending promotional emails), a contractual agreement, a statutory authorisation (e.g. authorisation to send direct marketing) or on the basis of justified interests (e.g. retention for asserting claims). 

Your personal data will be passed on to third parties if 

  • it is necessary for the creation, execution or termination of legal transactions with our company (e.g. when transmitting data to a payment service provider/a shipping company to process a contract with you), in accordance with Art. 6(1) Sentence 1(b) GDPR), or 
  • a subcontractor or party we use to perform our obligations, which we use exclusively within the framework of providing the offers or services requested by you, needs this data (unless you are expressly informed otherwise, such auxiliary parties are only entitled to process the data insofar as this is necessary for the provision of the offer or service), or 
  • there is an enforceable official order (Art. 6(1) Sentence 1(c) GDPR), or 
  • there is an enforceable court order (Art. 6(1) Sentence 1(c) GDPR), or 
  • we are legally obliged to do so (Art. 6(1) Sentence 1(c) GDPR), or 
  • the processing is necessary in order to protect the vital interests of the data subject or another natural person (Art. 6(1) Sentence 1(d) GDPR), or 
  • this is necessary for the performance of a task carried out in the public interest or in the exercise of official authority (Art. 6(1) Sentence 1(e) GDPR), or 
  • qe can cite our overriding legitimate interests, or those of a third party, in the disclosure (Art. 6(1) Sentence 1(f) GDPR). 

Your personal data will not be transmitted to other persons, companies or bodies unless you have effectively consented to such transmission. The legal basis for the processing is then Art. 6(1) Sentence 1(a) GDPR. In this privacy policy, we draw your attention to the respective recipients when describing each processing operation.  

Application process  

As part of the application process, we process your contact details such as your name, address, email address, telephone number(s), data from your application documents, in particular certificates, CV, cover letter, date of birth and gender, and, if applicable, special categories of personal data such as marital status and degree of disability. The purpose of this processing is to check your suitability for a position in our company and to conduct the application process.

The legal basis for this processing is Art. 6(1) Sentence 1(b) GDPR in conjunction with Sect. 26(1) of the German Federal Data Protection Act (BDSG), insofar as the data processing is necessary for hiring you and for carrying out the employment relationship. If we process special categories of personal data, the legal basis is Art. 9(2)(b) GDPR in conjunction with Sect. 26(3) BDSG. The provision of your data is necessary and obligatory in order to conclude and execute the contract. You will not be able to apply for a job with us if you do not provide your data.

We will store your data for as long as necessary in connection with the employment relationship. As a rule, we will erase your personal data as soon as it is no longer required for the purposes mentioned above and unless otherwise required by law. In particular, we store personal data for as long as we need it to establish legal claims or to defend against claims. Accordingly, in the event of a rejection we erase the data of applicants six months after sending the rejection notification.

If you accept a job offer, we will store your data for the subsequent employment relationship within our employee data management system. Further details are available in the data protection information for employees. 

Hosting 

We use external hosting services provided by IONOS SE (Elgendorfer Str. 57, 56410 Montabaur, Deutschland), which serve to provide the following services: infrastructure and platform services, computing capacity, storage resources and database services, security and technical maintenance services. For these purposes, all of the data required for the operation and use of our website – including the access data mentioned under “Using our website” – is processed. The legal basis for this processing is Art. 6(1) Sentence 1(f) GDPR. By using external hosting services, our aim is to make providing our website efficient and secure. 

You may object to the processing. Your right of objection exists if you have reasons arising from your particular situation. You may send us your objection using the contact details specified under “Controller” above. 

Website support

We use the services of EDV-Service Flade, Martin-Luther-Str. 35, 60389 Frankfurt, Germany, to support our website. In the context of this support, our provider may process (e.g. for backups) the access data mentioned in the section "Using our website", in particular your IP address and the data provided when using the download offer. The legal basis for the processing is Art. 6 para. 1 p. 1 lit. f) DSGVO. By using the services, we pursue an efficient and secure provision of our web offer.

You may object to the processing. Your right of objection exists if you have reasons arising from your particular situation. You may send us your objection using the contact details specified under “Controller” above. 

Copyright by Spirit Legal I Diana Ettig