Privacy Policy
1. Name and Address of the Controller
Your contact person as the controller in accordance with the European General Data Protection Regulation ("EU-GDPR") and other national data protection laws of the member states as well as other data protection regulations is:
SCHULZE-BRAKEL GmbH
Warburger Straße 33-35
33034 Brakel
Germany
(hereinafter referred to as "we," "us," or "our")
2. Name and Address of the Data Protection Officer
The protection of your personal data is of great importance to SCHULZE-BRAKEL GmbH. To express this significance, we have commissioned a consulting company specialized in data protection and data security to take on these central issues. Our data protection officer also comes from this very experienced group of experts. We are advised by:
ProIT Service GmbH
Urbanstraße 1
81371 Munich
Germany
Please contact our data protection officer at ProIT Service GmbH directly for any questions regarding data protection and data security:
Email: https://datenschutz_schulze-brakel@proit-services.net/
Phone: +49 (89) 41 41 41 31-0
3. General Information on Data Processing
a. Scope of Processing Personal Data
We offer our sales exclusively in the B2B sector. This means that data from the B2C sector is not taken into account.
We process your personal data primarily only to the extent necessary for the performance of our services. The processing of your personal data usually occurs only on the basis of your consent. An exception applies in cases where obtaining prior consent is not possible for factual reasons or where the processing of your personal data is permitted by a legal provision.
b. Legal bases for the processing of personal data
To the extent that we obtain your consent for the processing of personal data, Article 6(1)(a) of the EU General Data Protection Regulation (GDPR) serves as the legal basis for us.
In the case of processing personal data that is necessary for the fulfillment of a contract between you and us, Article 6(1)(b) of the EU GDPR serves as the legal basis. This also applies to processing operations that are necessary for the performance of pre-contractual measures.
To the extent that processing personal data is necessary for the fulfillment of a legal obligation to which we are subject, Article 6(1)(c) of the EU GDPR serves as the legal basis.
In the event that vital interests of you or another natural person make the processing of personal data necessary, Article 6(1)(d) of the EU GDPR serves as the legal basis for processing.
If the processing is necessary to protect a legitimate interest of ours or a third party and your interests, fundamental rights, and freedoms do not outweigh the aforementioned interest, then Article 6(1)(f) of the EU GDPR serves as the legal basis for processing.
c. Data deletion and storage duration
Your personal data will be deleted or blocked as soon as the purpose of storage ceases to exist. Storage may also occur if this is provided for by European or national legislators in union law regulations, laws, or other provisions to which we are subject.
Blocking or deletion of the data also occurs when a storage period prescribed by the aforementioned norms expires, unless there is a necessity for further storage of the data for the conclusion of a contract or for contract fulfillment.
4. Provision of the website and creation of log files
a. Legal basis for data processing
The legal basis for the processing of your personal data in the context of providing the website and creating log files is Article 6(1)(f) of the EU GDPR.
b. Purpose of data processing
The temporary storage of your personal data by us is necessary to enable the delivery of the website to your computer. For this purpose, your personal data must be stored for the duration of the session.
The storage of your personal data in log files occurs to ensure the functionality of the website. The log files contain the following data:Referrer (previously visited website)Requested website or fileBrowser type and browser versionOperating system usedTime of accessIP address in anonymized form (used only to determine the location of access)
Additionally, your personal data is used to optimize the website and to ensure the security of our information technology systems. An evaluation of your personal data for marketing purposes does not take place in this context.
In these purposes lies our legitimate interest in data processing according to Article 6(1)(f) of the EU GDPR.
c. Duration of Storage
Your personal data will be deleted as soon as they are no longer necessary for the purpose of their collection. In the case of collecting your personal data for the provision of the website, this is the case as soon as the respective session has ended.
In the case of storing your personal data in log files, these will be deleted after a maximum of seven days. Further storage is possible. In this case, your personal data will be deleted or anonymized so that it is no longer possible to associate it with the calling client.
d. Right to Object and Erasure
The collection of your personal data for the provision of the website and the storage of your personal data in log files is essential for the operation of the website. Therefore, you do not have the right to object.
5. Use of Cookies
a. Legal Basis for Data Processing
The legal basis for processing your personal data in the context of using technically necessary cookies is Art. 6 para. 1 lit. f EU GDPR.
b. Purpose of Data Processing
The use of technically necessary cookies serves to simplify your use of our website. Some functions of our website cannot be offered without the use of cookies. For these, it is necessary that your internet browser is recognized again after a page change. The user data collected through technically necessary cookies will not be used to create user profiles.
In this purpose lies our legitimate interest in processing your personal data according to Art. 6 para. 1 lit. f EU GDPR.
c. Duration of Storage
Your personal data will be deleted as soon as they are no longer necessary for the purpose of their collection; this is particularly the case when cookies are deactivated.
d. Right to Object and Erasure
Cookies are stored on your computer and transmitted from there to our website. Therefore, you also have full control over the use of cookies. By changing the settings in your internet browser, you can deactivate or restrict the transmission of cookies. You can delete already stored cookies at any time. This can also be done automatically. If cookies are disabled for our website, not all functions of the website may be fully usable.
The transmission of Flash cookies cannot be prevented through the settings of your internet browser. Changes to the settings of the Adobe Flash Player are required for this.
6. Contact Form and Contact via Email
a. Legal Basis for Data Processing
The legal basis for processing your personal data transmitted in the event of contact via the contact form or by email is Art. 6 para. 1 lit. f EU GDPR. If the contact via the contact form or by email aims at the conclusion of a contract, Art. 6 para. 1 lit. b EU GDPR is an additional legal basis for processing.
b. Purpose of Data Processing
The processing of your personal data in the event of contact via the contact form or by email serves solely to process the contact.
c. Duration of Storage
Your personal data will be deleted as soon as they are no longer necessary for the purpose of their collection.
d. Right to Object and Erasure
You have the right to object to the processing of your personal data in the context of contact via the contact form or by email at any time in the future. In such a case, the conversation between you and us cannot be continued. All personal data that was stored during the contact will be deleted in this case.
7. YouTube
On this website, we use videos to present our company. Videos are a great way to convey content more effectively and make it easier to understand. Since local hosting of the video is not efficient enough, we use the option of an external video provider. We exclusively use YouTube as our video provider.
By embedding the video, the server of the provider YouTube is called for technical reasons. For the associated use of data from your browser or device, we refer to the respective privacy notices of the provider, as they are responsible for the corresponding data processing. You can find YouTube's privacy notices here: https://www.youtube.com/intl/en_us/howyoutubeworks/our-commitments/protecting-user-data/
8. Direct Marketing
a. Legal Basis for Data Processing
The legal basis for processing your personal data in the context of direct marketing by post is Art. 6 para. 1 lit. f EU GDPR.
b. Purpose of Data Processing
The purpose of processing your personal data in the context of direct marketing by mail is to promote the sale of goods or services. This purpose reflects our legitimate interest in data processing according to Art. 6 para. 1 lit. f EU GDPR.
c. Duration of Storage
Your personal data will be deleted as soon as they are no longer necessary for the purpose of their collection; this is particularly the case upon receipt of your objection.
d. Right to Object and Erasure
You can object to the processing of your personal data in the context of direct marketing by mail at any time for the future.
9. Legal Defense and Enforcement
a. Legal Basis for Data Processing
The legal basis for processing your personal data in the context of legal defense and enforcement is Art. 6 para. 1 lit. f EU GDPR.
b. Purpose of Data Processing
The purpose of processing your personal data in the context of legal defense and enforcement is to defend against unjustified claims as well as to legally enforce claims and rights. This purpose reflects our legitimate interest in data processing according to Art. 6 para. 1 lit. f EU GDPR.
c. Duration of Storage
Your personal data will be deleted as soon as they are no longer necessary for the purpose of their collection.
d. Right to Object and Erasure
The processing of your personal data in the context of legal defense and enforcement is essential for legal defense and enforcement. Consequently, you do not have the right to object.
10. Categories of Recipients
Within our company, those departments and offices that need personal data to fulfill the aforementioned purposes will receive it. Additionally, we partially rely on different service providers and transmit your personal data to other trusted recipients. These may include, for example:
BanksScanning ServicePrinting CompaniesLettershopsIT Service ProvidersLawyers and Courts
We have valid and up-to-date data processing agreements with all service providers and trusted recipients.
11. Applications
A separate email address (https://bewerbung@schulze-brakel.de) is exclusively available for applications. This address is not subject to automatic archiving. The application will be stored for a maximum of 6 months after the application process is completed and then deleted.
12. Disclosure of Data to Third Parties, No Data Transfer Outside the EU
In principle, we only use your personal data within our company. There is no data transfer to entities or individuals outside the EU, and none is planned.
If and to the extent that we involve third parties in the fulfillment of contracts (e.g., logistics service providers), they will receive personal data only to the extent necessary for the corresponding service.
In the event that we outsource certain parts of data processing ("order processing"), we contractually obligate processors to use personal data only in accordance with the requirements of data protection laws and to ensure the protection of the rights of the data subject.
13. Rights of the Data Subject
If your personal data is processed by us, you are a data subject within the meaning of the EU GDPR, and you have the following rights against us:
a. Right to Information
You can request confirmation from us as to whether personal data concerning you is being processed by us.
If such processing occurs, you can request information from us about the following:
(1) the purposes for which the personal data is processed;
(2) the categories of personal data that are processed;
(3) the recipients or categories of recipients to whom the personal data concerning you has been disclosed or will be disclosed;
(4) the planned duration of storage of the personal data concerning you or, if specific details cannot be provided, the criteria for determining the storage duration;
(5) the existence of a right to rectification or erasure of the personal data concerning you, a right to restriction of processing by us, or a right to object to this processing;
(6) the existence of a right to lodge a complaint with a supervisory authority;
(7) all available information about the origin of the data, if the personal data is not collected from you;
(8) the existence of automated decision-making, including profiling, according to Art. 22 para. 1 and 4 EU GDPR, and – at least in these cases – meaningful information about the logic involved as well as the scope and intended effects of such processing on you.
You have the right to request information about whether the personal data concerning you is transferred to a third country or to an international organization. In this context, you may request to be informed about the appropriate safeguards according to Art. 46 EU GDPR in connection with the transfer.
b. Right to Rectification
You have the right to rectification and/or completion with respect to us, provided that the processed personal data concerning you is inaccurate or incomplete. We are obliged to make the rectification without delay.
c. Right to Restriction of Processing
You may request the restriction of processing of the personal data concerning you under the following conditions:
(1) if you contest the accuracy of the personal data concerning you for a period that allows us to verify the accuracy of the personal data;
(2) the processing is unlawful and you refuse the deletion of the personal data and instead request the restriction of the use of the personal data;
(3) we no longer need the personal data for the purposes of processing, but you need it for the establishment, exercise, or defense of legal claims, or
(4) if you have lodged an objection to the processing according to Art. 21 para. 1 EU GDPR and it is not yet clear whether our legitimate grounds override your grounds.
If the processing of the personal data concerning you has been restricted, these data – apart from their storage – may only be processed with your consent or for the establishment, exercise, or defense of legal claims or to protect the rights of another natural or legal person or for reasons of significant public interest of the Union or a member state.
If the restriction of processing has been lifted according to the above conditions, you will be informed by us before the restriction is lifted.
d. Right to Deletion
I. Obligation to Delete
You may request that the personal data concerning you be deleted without delay, and we are obliged to delete this personal data without delay if one of the following reasons applies:
(1) The personal data concerning you is no longer necessary for the purposes for which it was collected or otherwise processed.
(2) You withdraw your consent on which the processing according to Art. 6 para. 1 lit. a or Art. 9 para. 2 lit. a EU GDPR is based, and there is no other legal basis for the processing.
(3) You lodge an objection to the processing according to Art. 21 para. 1 EU GDPR and there are no overriding legitimate grounds for the processing, or you lodge an objection to the processing according to Art. 21 para. 2 EU GDPR.
(4) The personal data concerning you has been processed unlawfully.
(5) The deletion of the personal data concerning you is necessary to comply with a legal obligation under Union law or the law of the member states to which we are subject.
(6) The personal data concerning you was collected in relation to offered services of the information society according to Art. 8 para. 1 EU GDPR.
II. Information to Third Parties
If we have made the personal data concerning you public and are obliged to delete it according to Art. 17 para. 1 EU GDPR, we will take reasonable steps, taking into account available technology and implementation costs, including technical measures, to inform data controllers who process the personal data that you, as the data subject, have requested the deletion of all links to this personal data or of copies or replications of this personal data.
III. Exceptions
The right to erasure does not exist insofar as the processing is necessary
(1) for the exercise of the right to freedom of expression and information;
(2) for compliance with a legal obligation to which we are subject under Union or Member State law, or for the performance of a task carried out in the public interest or in the exercise of official authority vested in us;
(3) for reasons of public interest in the area of public health in accordance with Art. 9 para. 2 lit. h and i as well as Art. 9 para. 3 EU GDPR;
(4) for archiving purposes in the public interest, scientific or historical research purposes, or for statistical purposes in accordance with Art. 89 para. 1 EU GDPR, insofar as the right mentioned in section a) is likely to make it impossible to achieve the objectives of this processing or seriously impair them, or
(5) for the establishment, exercise, or defense of legal claims.
e. Right to Information
If you have asserted your right to rectification, erasure, or restriction of processing against us, we are obliged to inform all recipients to whom your personal data have been disclosed of this rectification or erasure of the data or restriction of processing, unless this proves impossible or involves a disproportionate effort.
You have the right to be informed about these recipients.
f. Right to Data Portability
You have the right to receive the personal data concerning you that you have provided to us in a structured, commonly used, and machine-readable format. You also have the right to transmit this personal data provided to us to another controller without hindrance from us, provided that
(1) the processing is based on consent in accordance with Art. 6 para. 1 lit. a EU GDPR or Art. 9 para. 2 lit. a EU GDPR or on a contract in accordance with Art. 6 para. 1 lit. b EU GDPR, and
(2) the processing is carried out by automated means.
In exercising this right, you also have the right to obtain that the personal data concerning you be transmitted directly by us to another controller, where technically feasible. The freedoms and rights of other persons must not be adversely affected by this.
The right to data portability does not apply to the processing of personal data that is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in us.
g. Right to Object
You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is based on Art. 6 para. 1 lit. e or f EU GDPR; this also applies to profiling based on these provisions.
We will no longer process the personal data concerning you unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms, or the processing is necessary for the establishment, exercise, or defense of legal claims.
If the personal data concerning you are processed for the purpose of direct marketing, you have the right to object at any time to the processing of personal data concerning you for the purposes of such marketing; this also applies to profiling to the extent that it is related to such direct marketing.
If you object to the processing for the purposes of direct marketing, the personal data concerning you will no longer be processed for these purposes..
You have the option to exercise your right to object in connection with the use of services of the information society – regardless of Directive 2002/58/EC – through automated procedures that use technical specifications.
h. Right to withdraw the data protection consent declaration
You have the right to withdraw your data protection consent declaration at any time. The withdrawal of consent does not affect the lawfulness of the processing that has taken place based on the consent until the withdrawal.
i. Automated decision-making in individual cases, including profiling
You have the right not to be subject to a decision based solely on automated processing – including profiling – that has legal effects concerning you or similarly significantly affects you. This does not apply if the decision
(1) is necessary for the conclusion or performance of a contract between you and us,
(2) is permissible under Union or Member State law to which we are subject and such law provides for appropriate measures to safeguard your rights and freedoms as well as your legitimate interests, or
(3) is based on your explicit consent.
However, these decisions must not be based on special categories of personal data under Art. 9(1) GDPR, unless Art. 9(2)(a) or (g) GDPR applies and appropriate measures have been taken to protect the rights and freedoms as well as your legitimate interests.
Regarding the cases mentioned in (1) and (3), we take appropriate measures to safeguard the rights and freedoms as well as your legitimate interests, which include at least the right to obtain intervention from a person on our part, to present your own point of view, and to contest the decision.
j. Right to lodge a complaint with a supervisory authority
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, particularly in the Member State of your residence, your workplace, or the place of the alleged infringement, if you believe that the processing of your personal data violates the GDPR.
The competent supervisory authority for us is:
State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia
Kavalleriestraße 2-44
40213 Düsseldorf
Germany
Phone: 02 11. 384 24 - 0
Fax: 02 11. 384 24-10
Email: https://poststelle@ldi.nrw.de/
The supervisory authority with which you have lodged a complaint will inform you about the status and results of the complaint, including the possibility of a judicial remedy under Art. 78 GDPR.
For any questions, our data protection officer is always available to assist you.
14. Google Analytics
For informational purposes, we use Google Analytics on this website. In this context, the data protection provisions of Google apply, which you can find at the following links:
https://policies.google.com/privacy?hl=en
https://support.google.com/analytics/answer/6004245?hl=en&utm_id=ad