§ 1 Information about the collection of personal data
(1) In the following, we inform you about the collection and processing of personal data when using our website and in accordance with the EU General Data Protection Regulation (hereafter abbreviated as “GDPR”) rights.
(2) Personal data is all data that is personally available to you, e.g. Name, address, e-mail addresses, and user behaviour.
(3) Responsible acc. Article 4 (7) of the EU General Data Protection Regulation (GDPR) is:
Transformatorenwerk Breimer-Roth GmbH
Managing Director: Wolfgang Orio
Ostring 11-13
64711 Erbach
Tel. 06062-9425-0
datenschutz@bre-trafo.com
(4) When you contact us by e-mail or via a contact form, we will store the information you have provided (your e-mail address, your name and your telephone number if applicable) in order to answer your questions. We delete the data that arises in this context after the storage is no longer required or limit the processing if there are statutory retention requirements.
(5) If we rely on commissioned service providers for individual functions of our offer or would like to use your data for advertising purposes, we will inform you in detail below about the respective transactions. In doing so, we also name the specified criteria for the storage duration.
(6) For security reasons and to protect the confidential data transmitted to us when using our website, such as the sending of requests or the execution of orders, SSL or TLS encryption is provided. An encrypted connection can be detected by the browser’s address bar changing from “http: //” to “https: //”. In addition, the symbol “lock” is displayed in the browser line in this case. Please note that complete security cannot be guaranteed in the context of data transmission over the Internet.
§2 Your rights
(1) You have the following rights with respect to the personal data concerning you:
Explanation of your rights in detail:
(2.1) Right to information
You may ask the person in charge to confirm if personal data concerning you is processed by us. If such processing is available, you can request information from the person responsible about the following information:
a. the purposes for which the personal data are processed;
b. the categories of personal data that are processed;
c. the recipients or categories of recipients to whom the personal data related to you have been disclosed or are still being disclosed;
d. the planned duration of the storage of your personal data or, if specific information is available, criteria for determining the duration of storage;
e. the existence of a right to rectification or erasure of personal data concerning you, a right to restriction of processing by the controller or a right to object to such processing;
f. the existence of a right of appeal to a supervisory authority;
g. all available information on the source of the data if the personal data are not collected from the data subject;
h. the existence of an automated decision making including profiling acc. Articles 22 (1) and (4) GDPR and – at least in these cases – meaningful information about the logic involved and the scope and intended impact of such processing on the data subject.
You have the right to request information about whether your personal information relates to a third country or an international organization. In this connection, you can request the appropriate guarantees in accordance with Art. 46 GDPR, in connection with the transmission of information.
(2.2) Right to rectification
You have a right to rectification and/or completion to the controller, if the personal data relating to you is incorrect or incomplete. The responsible person must make the correction immediately.
(2.3) Right to erasure
(2.3.1) You may require the controller to remove your personal information without delay, and the controller shall promptly remove that data if one of the following is true:
a. Your personal data are no longer necessary for the purposes for which they were collected or otherwise processed.
b. You revoke your consent to the processing acc. to Art. 6 § 1 lit. a or Art. 9 § 2 lit. a GDPR and there is no other legal basis for the processing.
c. You object to the processing acc. to Art. 21 §1 GDPR and there are no prior justifiable reasons for the processing, or you object to processing acc. to Art. 21 (2) GDPR.
d. Your personal data has been processed unlawfully.
e. The deletion of personal data relating to you is required to fulfil a legal obligation under Union law or the law of the Member States to which the controller is subject.
f. The personal data relating to you has been used in relation to information society services provided in accordance with Art. 8 (1) GDPR.
(2.3.2) If the person responsible has made the personal data concerning you public and is acc. to Article 17 (1) of the GDPR required to erase the data, so they take due under account the technology available and the costs of implementation, including appropriate technical measures to inform data controllers who process the personal data that they are obliged to delete all links to such personal data or copies or replications of such personal data.
(2.3.3) The right of cancellation does not exist if the processing is necessary
a. to exercise the right to freedom of expression and information;
b. to fulfil a legal obligation required by the law of the Union or of the Member States to which the controller is subject, to carry out a task of public interest or to exercise the public authority delegated to the controller;
c. for reasons of public interest in the field of public health Art. 9 (2) letter h and i, as well as Art. 9 (3) GDPR;
d. for archival purposes of public interest, scientific or historical research purposes or for statistical purposes acc. to Article 89 (1) of the GDPR, in so far as the law referred to in paragraph 1 is likely to render impossible or seriously affect the achievement of the objectives of that processing, or
e. to assert, exercise or defend legal claims.
(2.4) Right to restriction of processing
You may request the restriction of the processing of your personal data under the following conditions:
a. if you contest the accuracy of your personal information for a period of time that enables the controller to verify the accuracy of your personal information;
b. the processing is unlawful and you refuse to delete the personal data and instead request the restriction of the use of the personal data;
c. the controller no longer requires personal data for the purposes of processing, but you need them to assert, exercise or defend legal claims, or
d. if you object to the processing acc. to Art. 21 (1) GDPR and it is not yet certain whether the legitimate reasons of the person responsible outweigh the reasons for your decision.
If the processing of personal data relating to you has been restricted, this data may only be used with your consent or for the purpose of asserting, exercising or defending legal claims or protecting the rights of another natural or legal person or for reasons of important Union public interest or of the Member State. If the restriction on processing has been restricted in accordance with the above conditions, the person responsible will inform you before the restriction is repealed.
(2.5) Right to information
If you have asserted the right of rectification, erasure and restriction of the processing to the controller, they are obliged to inform all recipients of the personal data about this authorization or deletion of the data or restriction of the processing, unless this case proves to be impossible or involves a disproportionate effort. You have a right to the controller to be informed about these recipients.
(2.6) Right to data portability
You have the right to receive personally identifiable information you provide to the controller in a structured, common and machine-readable format. In addition, you have the right to transfer this data to another person without hindrance by the controller to whom the data have been made available, provided that
a. the processing is based on a consent acc. to Art. 6 (1) letter a GDPR or Art. 9 (2) letter a GDPR or on a contract acc. to Art. 6 (1) letter b GDPR and
b. the processing is done using automated procedures.
In exercising this right, you also have the right to obtain that your personal data relating to you are transmitted directly from one controller to another, as far as this is technically feasible. Freedoms and rights of other persons may not be affected. The right to data portability does not apply to the processing of personal data necessary for the performance of a task in the public interest or in the exercise of official authority delegated to the controller.
(2.7) Right to objection
You have the right to objection at any time, for reasons that arise from your particular situation, against the processing of your personal data, which pursuant to Art. 6 (1) lit. e or f GDPR; this also applies to profiling based on these provisions.
The controller will no longer process the personal data concerning you unless they can demonstrate compelling legitimate grounds for processing that outweigh your interests, rights and freedoms, or the processing is for the purpose of enforcing, pursuing or defending legal claims.
If the personal data relating to you are processed for direct marketing purposes, you have the right to object at any time to the processing of your personal data for the purpose of such advertising; this also applies to profiling insofar as it is associated with such direct-mail.
If you object to processing for direct marketing purposes, your personal data will no longer be processed for these purposes.
Regardless of Directive 2002/58/EC, you have the option, in the context of the use of information society services, of exercising your right to object through automated procedures that use technical specifications.
(2.8) Right to withdraw the data protection consent declaration
You have the right to withdraw your data protection consent declaration at any time. The withdrawal of consent does not affect the legality of the processing carried out on the basis of the consent prior to the withdrawal.
(2.9) Automated decision on a case-by-case basis including profiling
You have the right not to be subject to a decision based solely on automated processing, including profiling, which has a legal effect on you or, in a similar manner, significantly affects it. This does not apply if the decision
a. is required for the conclusion or performance of a contract between you and the controller,
b. is permissible on the basis of Union or Member State legislation to which the controller is subject, and that legislation contains adequate measures to safeguard your rights and freedoms and your legitimate interests, or
c. is made with your express consent.
However, these decisions must not be based on special categories of personal data pursuant to Art. 9 (1) GDPR, unless Art. 9 (2) letters a or g and reasonable measures have been taken to protect the rights and freedoms and your legitimate interests.
Regarding the in a. and c. in the above-mentioned cases, the person responsible shall take appropriate measures to safeguard the rights and freedoms and your legitimate interests, including at least the right to obtain the intervention of a person by the controller, to express their own position and to contest the decision.
(2.10) Right to complain to the supervisory authority
Without prejudice to any other administrative or judicial remedy, you have the right to complain to a supervisory authority, in particular in the Member State of your residence or in place of work or place of alleged infringement, if you believe that the processing of your personal data against violates GDPR. A list of the data protection officers and their contact details are available at:
https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html
§3 Legal basis of processing
(1) Insofar as we request the consent of the data subject for processing the personal data, Art. 6 (1) letter a, the EU General Data Protection Regulation (GDPR) is the legal basis.
(2) In the processing of personal data necessary for the performance of a contract to which data subject is the related party, is the Art. 6 § 1 letter b GDPR as legal basis. This also applies to processing operations required to carry out pre-contractual actions.
(3) Insofar as processing of personal data is required to fulfil a legal obligation to which our company is subject, Art. 6 (1) letter c GDPR is the legal basis.
(4) In the event that vital interests of the data subject or another natural person require the processing of personal data, Art. 6 (1) letter d GDPR is the legal basis.
(5) If processing is necessary to safeguard the legitimate interests of our company or a third party and if the interests, fundamental rights and fundamental freedoms of the data subject do not prevail over the first interest, Art. 6 (1) letter f GDPR serves as legal basis for processing. The legitimate interest of our company lies in the execution of our business activities.
(6) Insofar as information on the collection of individual personal data is provided below, reference will be made separately to the corresponding legal basis.
§4 Collection of personal data when visiting our website/use of cookies
(1) In the event that you only use our website for informational purposes, i.e. if you do not register or otherwise provide us with information, we will only collect the personal data that your browser transmits to our server. If you wish to view our website, we collect the following data, which is technically necessary for us to display our website and to ensure the stability and security (legal basis is Art. 6 (1) sentence 1 letter f GDPR):
(2) In addition to the aforementioned data, cookies are stored on your computer when you use our website. Cookies are small text files that are stored on your hard drive assigned to the browser you are using and by which the body that sets the cookie (here through us) receives certain information. Cookies cannot run programs or transmit viruses to your computer. They serve to make the Internet offer more user-friendly and effective.
(3) Use of cookies:
a) a) This website uses the following types of cookies, the scope and operation of which are explained below:
b) Transient cookies are automatically deleted when you close the browser. These include in particular the session cookies. These store a so-called session ID, with which various requests from your browser can be assigned to the common session. This will allow your computer to be recognized when you return to our website. The session cookies are deleted when you log out or close the browser.
c) Persistent cookies are automatically deleted after a specified period, which may differ depending on the cookie. You can delete the cookies in the security settings of your browser at any time.
d) You can configure your browser setting according to your wishes and e.g. decline the acceptance of third-party cookies or all cookies. Please be aware that you may not be able to use all features of this site.
e) Cookies that are required to carry out a communication process or to provide certain functions (e.g. an order process) are stored on the basis of Art. 6 (1) lit. b and f GDPR. If cookies are also stored on the website for the purpose of analyzing your usage behaviour, we will separately inform you about them below.
§5 Further functions and offers of our website
(1) In addition to the purely informational use of our website, we offer various services that you can use if you are interested. To do this, you will generally need to provide other personal information that we use to provide the service and for which the aforementioned data processing principles apply.
(2) In part, we use to process your data from external service providers. These have been carefully selected and commissioned by us, are bound by our instructions and are regularly inspected.
(3) Furthermore, we may disclose your personal data to third parties, if action participations, competitions, contracts or similar services are offered by us together with partners. For more information, please refer to your personal data or below in the description of the offer.
(4) Insofar as our service providers or partners are based in a country outside the European Economic Area (EEA), we inform you about the consequences of this circumstance in the description of the offer.
§6 Use of Google Analytics
(1) This website uses Google Analytics, a web analytics service provided by Google Inc. (“Google”). If you use our webshop, we point out that we do not use Google Analytics as part of the use of the webshop.
(2) Google Analytics uses so-called “Cookies”, text files stored on your computer, which allow an analysis of your use of the Website. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. We have activated the function IP anonymization on this website. However, in the event of activation of IP anonymization on this website, your IP address will be shortened beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be sent to a Google server in the US and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide other services related to website usage and internet usage to the website operator.
(3) The IP address transmitted by Google Analytics as part of Google Analytics will not be merged with other data provided by Google.
(4) You can prevent the storage of cookies by setting your browser software accordingly; however, please note that if you do this, you may not be able to use all the features of this website to the fullest extent possible. You may also prevent the collection by Google of the data generated by the cookie and related to your use of the website (including your IP address) as well as the processing of this data by Google by downloading and installing the browser plug-in available under the following link: http://tools.google.com/dlpage/gaoptout?hl=de.
(5) This website uses Google Analytics with the extension “_anonymizeIp ()”. As a result, IP addresses are processed in a shortened version, hence person-relatedness can be excluded. Insofar as the data collected about you is assigned a personal reference, it will be immediately excluded and the personal data will be deleted immediately.
(6) (6) We use Google Analytics to analyze and regularly improve the use of our website. Thanks to statistics we can improve our offer and make it more interesting for you as a user. For the exceptional cases in which personal Information is transferred to the US, Google has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.
(7) The legal basis for the use of Google Analytics is Art. 6 (1) sentence 1 letter f GDPR. We have a corresponding contractual privacy agreement with Google in the sense of Art. 28 GDPR.
(8) Third-party information: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001.
User Conditions:
https://www.google.com/analytics/terms/us.html
Privacy overview:
https://policies.google.com/?hl=en&gl=ZZ
as well as the privacy policy:
https://policies.google.com/privacy?hl=en&gl=de
§ 7 Integration of Google Maps
(1) On this website, we use the offer of Google Maps. This allows us to show you interactive maps directly in the website and allow you to conveniently use the map feature.
(2) By visiting the website, Google receives the information that you have accessed the corresponding subpage of our website. In addition, the data mentioned in § 4 of this declaration will be transmitted. This is done regardless of whether Google provides a user account that you are logged in to, or if there is no user account. When you’re logged in to Google, your data will be assigned directly to your account. If you do not wish to be associated with your profile on Google, you must log out before activating the button. Google stores your data as usage profiles and uses them for purposes of advertising, market research and/or tailor-made website design. Such an evaluation is done in particular (even for users who are not logged in) to provide appropriate advertising and to inform other users of the social network about their activities on our website. You have a right of objection to the formation of these user profiles, and you must comply with this to Google.
(3) Further information on the purpose and scope of the data collection and its processing by the plug-in provider can be found in the provider’s privacy policy. You can also find more information about your rights and privacy settings here: https://policies.google.com/privacy?hl=en&gl=de. Google also processes your personal information in the United States and has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.
§8 Google Web Fonts
(1) This site uses so-called web fonts provided by Google for the uniform representation of fonts. When you call up a page, your browser loads the required web fonts into your browser cache to display texts and fonts correctly.
(2) To do this, the browser you use must connect to Google’s servers. As a result, Google learns that our website has been accessed via your IP address. The use of Google Web Fonts is in the interest of a consistent and attractive presentation of our online services. This constitutes a legitimate interest within the meaning of Art. 6 (1) letter f GDPR.
(3) If your browser does not support web fonts, a standard font will be used by your computer.
(4) For more information about Google Web Fonts, visit https://developers.google.com/fonts/faq
and see Google’s Privacy Policy: https://policies.google.com/privacy?hl=en.
§ 9 General information and mandatory information for video or optoelectronic remote monitoring on our company premises
Purpose of the processing of personal data and legal basis
a) the effective exercise of the domiciliary right,
b) the protection against property damage,
c) ensuring the assertion of legal claims and the investigation of criminal offences,
d) If applicable, protection of life, limb, freedom in large-scale, publicly accessible installations and facilities.
Legal bases of the processing are
§ 4 (1) s. 1 no. 2 and 3 BDSG if applicable s. 1 or 2 for large-scale, publicly accessible installations and facilities in conjunction with art. 6 (1) sentence 1 letter f) and art. 9 p. 2 letter e) and f) GDPR
Storage duration and deletion periods
The personal data in the form of the collected and stored image material are always deleted after 72 hours. Incidentally, the collected imagery is stored in the appropriate cases for the entire duration of the investigation of a criminal offence and the judicial assertion and enforcement of claims for damages. With the final conclusion of the respective procedure, the stored image material is deleted immediately.
Recipient of the personal data and their transmission
We assure you that we will not pass on your data to third parties and only use them internally for the above purposes. Access to your data is solely possible in our company’s management and the appropriate department.
END OF PRIVACY POLICY – Status: June 2018
+49 (0) 60 62 - 9 42 50 
info@bre-trafo.com