1. Name and address of the controller
BartelsRieger Atemschutztechnik GmbH
Tel.: +49 (0)221 59 77 7-0
Fax: +49 (0)221 59 77 7-159
2. Contact details of data protection officer
Mr. Kent Schwirz
3. Processing of personal data
The use of your Data is governed by the applicable statutory provisions as amended from time to time, in particular the General Data Protection Regulation (“GDPR”).
3.1 Orders via the online shop
Why and subject to which legal basis are Data processed?
Whenever orders are placed via our online shop, the data required to conclude a contract and handle your order are processed; this refers to first name and last name, address, email address and, if required, phone number, fax number, company name, invoice address and, if applicable, a different delivery address. The Data are processed in order to be able to allocate the order to you, to deliver the ordered goods and, if applicable, to send the invoice, handle payment and clarify any legal claims that may arise. The legal basis for the processing is point (b) of Art. 6(1) GDPR.
If you wish, you can set up a customer account for future orders (“Registration”), enabling us to store your customer Data. This way you will not need to reenter your Data when placing future orders via our online shop. For Registration, you will also need to enter an identifier and a password (“Log-In Data”) to ensure that only you can log into your customer account. Pursuant to point (b) of Art. 6(1) GDPR, we may process the Data provided upon Registration to the extent that this is required to conclude or perform a contract. Further, we may process your Data pursuant to point (f) of Art. 6(1) GDPR as we wish to make future orders easier for you.
Do I have to provide my Data?
You are required neither by law nor by contract to provide your Data. However, in order to conclude a contract with us, you need to provide at least your name, address and email address. Otherwise we cannot send your order to your address and cannot send you an order confirmation by email.
Is Data passed on?
We transmit the named Data to the following recipients:
|PayPal (Europe) S.à r.l. & Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg||We will transmit the invoice amount and a pseudonymised transaction code to PayPal (Europe) if you choose PayPal as a payment method.|
|Stünings Medien GmbH, Dießemer Bruch 167, 47805 Krefeld, Germany||Hosting and maintenance of the website|
When at the latest will my Data be erased?
We may store Data until the respective contract has been fully completed. In the case of contracts of sale, we may store the Data for up to one year after delivering the goods. If, pursuant to point (c) of Art. 6(1) GDPR, we need to store the data in order to fulfil our legal obligations under the German Commercial Code (“HGB”) or the German Fiscal Code (“AO”), we are authorised to store the Data until the preservation periods stipulated in the respective act have expired. Data provided in connection with the Registration process are erased whenever requested by you or, at the latest, four years after the last order, unless the aforementioned grounds entitle us to store the Data for a longer period.
3.2 How to contact us
If you wish to contact us via email, letter, telephone or fax to make enquiries concerning your orders, you might need to transmit Data such as your name, address, date of birth, order or invoice number so that we can process your enquiry. Such Data will be used exclusively to verify your identity and to process your enquiry. The legal basis for this type of use is the first sentence of point (b) of Art. 6(1) GDPR.
We also use your Data to send advertising or e-mail advertising for our products, provided that you were our customer in the last two or three years, you have given us your postal address or e-mail address and you have not objected to the advertising (for your right of objection see 4.4). The processing of the Data is carried out on the basis of Art. 6 para. 1 f) GDPR. We have a legitimate economic interest in sending advertising to our existing customers by post or e-mail.
3.4 Website visitors
3.3.1 Creating log files
Whenever you visit this website
(1) the IP address of your terminal,
(2) the name of your internet service provider,
(3) the BartelsRieger website you are visiting and
(4) the date and duration of your visit
will be stored in a log file for the duration of your visit (until the closing of the website).
Many of these Data need to be stored for technical reasons in order to display the website on your terminal and to ensure system security. We further analyse these Data in anonymised form for statistical purposes and in order to improve our internet presence. We do not combine these Data with your other Data.
These Data are processed on the basis of point (f) of Art. 6(1) GDPR and points (a) and (c) of Art. 8(1) ePrivacy Regulation. We have a legitimate interest in properly displaying our website to you, in promptly identifying and solving the causes of disruptions and hacker attacks and in analysing the anonymised data for statistical purposes.
You are required neither by law nor by contract to provide your Data, but for technical reasons many of these Data need to be processed so that you can actually use the website.
We further use session cookies and permanent cookies on our website. Session cookies are erased once the browser is closed. Permanent cookies are erased after 14 months. Cookies are small text files with an identification number allocated by us. Cookies will be stored on your terminal when you access our website. Whenever you visit our website again, the identification number allows your terminal to be recognised.
Cookies make it easier to navigate through our website by ensuring that articles added to the shopping cart are stored and that you as a registered customer remain logged in, even if you visit different websites.
3.3.3 Use of our Contact Form
For personal Data that you enter in our contact form, and which is necessary for the performance of a contract between you and BartelsRieger, or which is necessary for conducting pre-contractual measures, only item 3.1 applies. In addition, we may also process your personal Data (e.g. name, email address, telephone number, address), as entered in our contact form, in accordance with Art. 6 (1a) GDPR, outside of contractual relations, provided that you have agreed to such processing by checking the relevant box below the contact form.
Processing is performed for the purpose of dealing with and answering the query entered in the contact form. The Data will be deleted 2 years after the date of receipt of the query. The provision of this Data is neither statutorily nor contractually required, and is not necessary for the conclusion of a contract. The use of the contact form requires that you at least provide an email address, as otherwise we cannot reply to your query. If you give further (more) Data, this is done on a voluntary basis.
You may at any time request that we delete your Data sent via this contact form by writing to us or sending an email to [email@example.com]. We will then delete all Data transmitted via the contact form, insofar as we are not entitled and/or obliged to retain it due to legal regulations.
3.3.4 Google Analytics
Google will process such Data on our behalf to analyse the use of our website and to compile reports on activities on our website. Google uses the Data in the log files to prepare statistics, for instance, regarding the frequency of visits to our website. In some cases, the processed Data will be used to prepare pseudonymised user profiles of website visitors.
We only use Google Analytics when IP anonymisation is activated. This means that Google will shorten your IP address within the member states of the European Union or the European Economic Area. Only in exceptional cases will the full IP address be transmitted to the US and shortened there. Google has submitted to observing the EU-US-Privacy-Shield whenever it transmits Data to the US under the aforementioned exception. In its Adequacy decision (EU) 2016/1250 of 12 July 2016, the European Commission decided that this provides adequate protection.
You can prevent the storage of cookies by adjusting your browser settings accordingly (see 3.3.2 above). You can further prevent processing of the Data generated by the cookie by downloading and installing the plugin available from: https://tools.google.com/dlpage/gaoptout?hl=en.
By clicking the following link, you can prevent being recorded by Google Analytics. The link activates an opt-out cookie that prevents your Data from being recorded when you visit the website again:
We would like to point out that the code “anonymizeIp” was added to Google Analytics on this website to ensure that only anonymised IP addresses are recorded (IP masking).
The Data is processed on the basis of Art. 28 and point (f) of Art. 6(1) GDPR and, if you are a Google customer and if applicable, on the basis of point (a) or (b) of Art. 6(1) GDPR. We have a legitimate economic interest in using the analysis of the aforementioned statistics to adjust our website to the needs of our visitors and to use such statistics for internal market research purposes. Providing such Data is neither mandatory nor required for a contract to be concluded with us.
More information on Google Analytics is available on the following Google website: https://support.google.com/analytics/?hl=en#topic=3544906.
3.3.5 Google “reCAPTCHA” Service
3.3.6 Google Web Fonts
This site uses so-called web fonts provided by Google to uniformly display fonts. When you visit a website, your browser loads the required web fonts into your browser cache to display texts and fonts correctly.
To do this, the browser you are using must connect to Google’s servers thus informing Google that our website has been accessed via your IP address. The Data transmitted to Google may be transmitted to the USA. Google has submitted to the US-EU Privacy Shield. In its Adequacy decision (EU) 2016/1250 of 12 July 2016, the European Commission has decided that this can provide an adequate level of data protection. The use of Google Web Fonts is in the interest of a uniform and appealing presentation of our online offers. This represents a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR.
3.3.7 Google Maps
Our website includes content from Google Maps. When you visit a page of our website on which Google Maps is integrated, Data about you use of Google Maps is transmitted to Google and processed by Google. Google receives, for example, the information that you have called up the corresponding subpage of our website. Your IP address will also be transmitted. Google collects and stores this Data as usage profiles and uses it for the purposes of market research and/or the design of Google Maps. If you are a Google customer and logged in to a Google service, this information will be linked directly to your Google Account. If you do not wish to do so, you must log out of Google before visiting our website. For more information about Google’s privacy practices, please visit: https://www.google.com/intl/de/policies/privacy/.
The data transmitted to Google may be transmitted to the USA. Google has submitted to the US-EU Privacy Shield. In its Adequacy Decision (EU) 2016/1250 of 12 July 2016, the European Commission has decided that this can provide an adequate level of data protection.
3.3.8 Matomo (former Piwik)
Matomo cookies are stored on the basis of Art. 6 para. 1 lit. f GDPR. BartelsRieger has a legitimate interest in anonymised analysis of user behaviour in order to optimise both his website and his advertising.
3.3.9 MyFonts Counter
4. Rights of data subjects
Whenever your Data is processed by us you are deemed a data subject in terms of the GDPR and have the following rights vis-à-vis the controller. You can assert these rights by sending an email to BartelsRieger or by using the address stated above in item 1.
4.1 Right of access to personal Data and Data portability
Pursuant to Art. 15 GDPR, you have the right to obtain from us information
- as to whether we have stored personal Data concerning you and, if yes, which Data we have stored for what purposes,
- where such Data come from,
- and to which recipients or categories of recipients such Data might possibly be passed on.
4.2 Right to request rectification
You have the right vis-à-vis the controller to request rectification and/or completion if the Data concerning you is incorrect or incomplete (Art. 16 GDPR).
4.3 Right to erasure or to restricted processing
You have the right to request that we erase the Data concerning you if the conditions stipulated in Art. 17 GDPR are met or that we restrict processing of your Data if the conditions stipulated in Art. 18 GDPR are met. When you delete your customer account, we will erase the Data concerning you, unless we are authorised to store such Data in order to fulfil contracts not yet fully performed, to assert legal claims or to comply with legal requirements.
4.4 Right to object
To the extent that we process Data to safeguard our interests only on the basis of point (f) of Art. 6(1) GDPR, you have the right to object to the processing of such Data on grounds relating to your particular situation. If you object, we will no longer process the Data concerned, unless we are able to demonstrate that we have compelling legitimate grounds for processing, which override your interests, rights and freedoms or for the enforcement of legal claims.
Furthermore, you may at any time object to your Data being processed for marketing purposes without incurring more than the cost of transmission as per the applicable basic fees. You may at any time object to marketing emails, which you can do, for instance, by clicking the corresponding unsubscribe link at the bottom of a marketing email.
4.5 Right to withdraw consent
If we process data for our legitimate interests exclusively on the basis of Art. 6 para. 1 f) GDPR, you have the right to object to the processing of your Data for reasons arising from your particular situation. If you file an objection, we will no longer process the Data concerned unless we can prove compelling reasons worthy of protection for the processing which outweigh your interests, rights and freedoms or the processing serves to enforce legal claims.
Furthermore, you can object to the processing of your Data for advertising purposes at any time without incurring any costs other than the transmission costs according to the basic rates. You can object to the sending of advertising e-mails at any time free of charge, e.g. by clicking on the corresponding unsubscribe link at the end of an advertising e-mail.
4.6 Right to lodge a complaint with a supervisory authority
You have the right to lodge a complaint with a supervisory authority, in particular the North Rhine-Westphalia Commissioner for Data Protection and Freedom of Information, Kavalleriestr. 2-4, 40213 Düsseldorf, Germany („LDI NRW“).
Last amended in: May 2018