Data Privacy Statement - b&m Homepage

As the provider of this website, we are legally obligated to inform you of the purpose, scope, and type of the collection and use of your personal data. To give you a good sense of how we collect, process, and use data, we would like to give you this overview of our data processing. Please feel free to ask us any additional questions you may have.

Controller and Service Provider
The controller in the sense of the German Data Protection Act (BDSG) and the General Data Protection Regulation (GDPR), is baier & michels GmbH and Co. KG.

Personal Data
Personal data is individual information about the personal and factual circumstances of an identified or identifiable natural person.
When our website is visited, data is collected, processed, and used; in this data, it may not always be possible to exclude a reference to a specific person. For the pages to be displayed in your browser, the IP addresses must be collected and stored.

Consent
With the completion of all necessary registration steps in the b&m online portal, I hereby consent to the processing of my personal data that has been collected there. This includes that baier & michels GmbH&Co.KG may notify me, using the contact details provided, about the b&m online portal and about the catalog accessed via the portal. The data will not be passed on to third parties. I know that I can revoke the consent for information at any time with effect for the future, without specifying reasons . I can send the revocation via the usual contact options provided by baier & michels GmbH&Co.KG. I am also entitled to the data subject rights listed in this data protection declaration.

General Information about Data Processing

1. Object of Data Protection
The object of data protection is personal data. In accordance with European law, the General Data Protection Regulation (GDPR), and the German Data Protection Act (BDSG), this includes all information that relates to a natural person or could relate to a natural person and would allow conclusions to be drawn about their identity. For example, this would include information such as your name, postal address, email address, or telephone number, as well as user information such as your IP address.

2. Scope of Personal Data Processing
We generally process the personal data of our users only inasmuch as is necessary for the provision of a functioning website and for our contents and services. The personal data of our users generally only occurs after we have received the user’s consent. An exception applies in cases in which it is not possible to get consent in advance for factual reasons and processing of the data is allowed under the relevant statutory provisions.

3. Legal Basis for Processing Personal Data
Inasmuch as we receive consent from the relevant person for processing their personal data, Art. 6 para. 1 lit. a EU General Data Protection Regulation (GDPR) is the legal basis.

If it is necessary to process personal data to fulfill a contract to which the affected person is a contractual party, Art. 6 para. 1 lit. b GDPR is the legal basis. This also applies for processing activities that are necessary to perform pre-contractual measures.
If it is necessary to process personal data for the fulfillment of a legal obligation to which our company is subject, Art. 6 para. 1 lit. c GDPR is the legal basis.
In the event that an essential interest of the affected person or another natural person render it necessary to process personal data, Art. 6 para. 1 lit. d GDPR is the legal basis.
If processing is necessary to protect a legitimate interest of our company or of a third party and the interests, basic rights, and basic freedoms of the affected party do not outweigh the interest named above, Art. 6 para. 1 lit. f GDPR is the legal basis for processing.

4. Deletion of Data and Length of Storage
The personal data of the affected person will be deleted or locked as soon as the reason for data storage lapses. Storage may continue after this if this is provided for by the European or national legislature in regulations, laws, or other provisions under Union law to which the controller is subject. The data will also be locked or deleted if the storage period indicated by one of the norms named above elapses, unless it is necessary to continue storing the data for contractual conclusion or contractual fulfillment.

Collecting, Processing, and Using Your Personal Data
Each time our website is visited, our system automatically records data and information from the computer system of the accessing computer.
The following data is collected in the process:
 Information about the browser type and the version used
 The operating system of the user
 The Internet service provider of the user
 The IP address of the user
 The date and time of access
 Websites from which the system of the user reached our website
 Websites that the system of the user accesses from our website
The data will be stored in the log files of our system. This data is not stored together with other personal data of the user.
The legal basis for temporary storage of the data and the log files is Art. 6 para. 1 lit. f GDPR.
The temporary storage of the IP addresses by the system is necessary to facilitate delivery of the website to the user”s computer. For this purpose, the IP address of the user must be stored for the duration of the session. The storage in log files occurs to ensure that the website can function. This data also helps us to optimize the website and to guarantee the security of our IT systems. The data will not be used for marketing purposes in this context.
For these purposes, we also have a legitimate interest in data processing in accordance with Art. 6 para. 1 lit. f GDPR.
The data will be deleted as soon as it is no longer necessary to achieve the purposes for which it was collected. In cases in which the data was collected to provide the website, this is the case as soon as the respective session ends. In cases in which the data is stored in log files, this is the case after no more than seven days. It is possible that storage could last longer than this. In this case, the IP
addresses of the user are deleted or anonymized, making it impossible to attribute them to the accessing client
The collection of data to provide the website and the storage of data in log files is absolutely necessary for the operation of the website. For this reason, it is not possible to object to it given your usage.

IP Addresses
Generally, an IP address is issued dynamically by your provider. These addresses generally change on a regular basis, meaning that we would not be able to make a connection to a specific person from an IP address. In some individual cases (e.g., for static IP addresses), however, it would theoretically be possible to make a connection to a person from an IP address. As a provider, however, we have no interest in the creation of a personal connection, and will not attempt to do so. In detail, the following data set is stored for each visit by your end device (PC, mobile telephone, etc.):
 IP address of the accessing end device,
 Operating system of the accessing end device,
 Browser version of the accessing end device,
 Name of the file accessed,
 Date and time of access,
 Transferred data quantity,
 Referring URL
The stored data will only be used for statistical purposes and will not be used to create a connection to a specific person. The data will also be used to help use correct any errors.
IP addresses will be stored as long as there is a valid registration for the portal. After a permanent discontinuation of portal usage has been declared in writing, the IP addresses will be deleted after 24 months

Cookies
This website uses cookies. Cookies are small texts that are stored in the end device as files via your browser. Cookies enable user interactions and facilitate additional functions during the visit to the website.
Using cookies, we analyze things such as which pages are visited particularly often by users, which search terms are used to find the website, etc. (“webtracking”). You can prevent the analysis of user behavior and the use of cookies by blocking cookies from being set by the www.baier-michels.com domain in your browser, which you can do by setting an exception in your browser (for example, in the Firefox browser). If necessary, you can look in program help to find out how to set this up in your browser. Of course, you can also delete cookies from your browser either as needed or periodically, to prevent or limit the analysis of your user behavior.

Borlabs Cookie
This website uses Borlabs Cookie, providing a technically necessary cookie (borlabs-cookie) to store your cookie consents.
Borlabs Cookie does not process any personal data.
The cookie (borlabs-cookie) saves your consents that you have provided when you accessed the website. If you wish to revoke these consents, simply delete the cookie in your browser. When you re-access/reload the website, you will be asked again for your cookie consent.

Use of SalesViewer® technology:

This website uses SalesViewer® technology from SalesViewer® GmbH on the basis of the website operator’s legitimate interests (Section 6 paragraph 1 lit.f GDPR) in order to collect and save data on marketing, market research and optimisation purposes.

In order to do this, a javascript based code, which serves to capture company-related data and according website usage. The data captured using this technology are encrypted in a non-retrievable one-way function (so-called hashing). The data is immediately pseudonymised and is not used to identify website visitors personally

The data stored by Salesviewer will be deleted as soon as they are no longer required for their intended purpose and there are no legal obligations to retain them.

The data recording and storage can be repealed at any time with immediate effect for the future, by clicking on https://www.salesviewer.com/opt-out in order to prevent SalesViewer® from recording your data. In this case, an opt-out cookie for this website is saved on your device. If you delete the cookies in the browser, you will need to click on this link again.

Web Analysis by Matomo (Formerly PIWIK)
1. Scope of Personal Data Processing
We use the open source software tool Matomo (formerly PIWIK) on our website to analyze the surfing behavior of our users. The software sets a cookie on the user’s computer (you can find more about cookies in another section of this page). If individual pages of our website are visited, the following data is stored:
(1) The IP address of the visiting system of the user
(2) The visited website
(3) The website from which the user arrived at the visited website (referrer)
(4) The sub-pages visited from the visited website
(5) The amount of time the website was viewed
(6) The frequency of visits to the website
In the process, the software runs exclusively on the servers of our website. Personal user data is only stored there. The data is not disclosed to third parties.

2. Legal Basis for Processing Personal Data
The legal basis for processing personal user data is Art. 6 para. 1 lit. f GDPR.

3. Purpose of Data Processing
Processing user data enables us to analyze the surfing behavior of our users. Through evaluating the collected data, we are able to compile information about the use of individual components of our website. This helps us to make our website better and more user-friendly. For these purposes, we also have a legitimate interest in processing data in accordance with Art. 6 para. 1 lit. f GDPR. Storing IP addresses allows the user to have protected access to their customer-specific portal. This means that storing the IP addresses helps to protect the data stored behind the protection of the portal.

4. Length of Storage
The data will be deleted when it is no longer needed for our record-keeping purposes. For us, this is the case after 24 months.

5. Opportunity to Object
All portal users have the opportunity to deregister from our portal. If we receive this information from a customer in writing, access will be deleted immediately, and the user data will be deleted after 24 months.

Web Analysis by LinkedIn Insight Tag

1. Scope of Personal Data Processing
We use the LinkedIn Insight Tag tool to analyze data on visits to our website. LinkedIn Insight Tag creates a unique LinkedIn browser cookie in a visitor”s browser and allows us to collect the following information for that cookie:
(1) URL
(2) Referrer URL
(3) IP address
(4) Device and Browser Properties
(5) Time stamp
(6) Page Views

2. Legal Basis for Processing Personal Data
The legal basis for the use of LinkedIn Insight Tag and the resulting processing of users” personal data is our interest in targeted direct marketing pursuant to Art. 6 Para. 1 lit f DSGVO.

3. Purpose of Data Processing
We use LinkedIn Insight Tag to analyze visits to our website and receive aggregated reports from LinkedIn Insight Tag about website audience and ad performance. In addition, LinkedIn Insight Tag allows us to target advertising outside of our website to LinkedIn, but without identifying the user of our website and/or the LinkedIn member to us.

4. Length of Storage
The data is encrypted, anonymized within seven days and the anonymized data is deleted within 90 days. LinkedIn does not share any personal data with us but only provides us with aggregated statistical data.

5. Opportunity to Object
Members of LinkedIn can control the use of their personal information for promotional purposes in their account settings.

Google Tag Manager
This website uses the Google Tag Manager. Google Tag Manager is a solution that allows marketers to manage website tags through a single interface. The Tag Manager tool itself (which implements the tags) is a cookie-less domain and does not collect any personally identifiable information. The tool triggers other tags that may themselves collect data. Google Tag Manager does not access this data. If deactivation has been made at the domain or cookie level, it will persist for all tracking tags implemented with Google Tag Manager. For more information, see Google”s Terms of Use and Google”s privacy notices for this product.

Use of reCAPTCHA

Google reCAPTCHA is a service from Google that allows website operators to verify whether a user on their site is a human or a bot, a robot. This verification is used to make sure that no automatic interactions can take place on the website.
We use Google reCAPTCHA on our website. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). reCAPTCHA is a service from Google that allows website operators to verify (such as in a contact form or through a registration process) whether the user of the www.baier-michels.de website is a human or a bot, a robot. As soon as you visit the website, reCAPTCHA analyzes your behavior using various characteristics. reCAPTCHA evaluates several types of information. The following information is sent to Google Inc.: Your IP address, the referrer URL, the operating system you use, cookies, your mouse movements and keystrokes, your time spent on the website, as well as your device settings such as language or location. This analyzed and recorded data, which is analyzed in the background, is forwarded to Google. There is no notification of this forwarding.
The data is processed on the basis of Art. 6 para. 1 lit. f GDPR (legality of processing). The website operator has a legitimate interest in protecting the website from abusive automated spying and from spam.
More information about Google reCAPTCHA and Google’s data privacy statement can be found at: https://www.google.com/intl/de/policies/privacy/ and https://www.google.com/recaptcha/intro/android.html.

Email
If you send us an email, we will store it until your inquiry has been complete or until any statutory retention periods have elapsed. We take care to ensure that the data is stored securely against any unauthorized access by third parties.
However, please note that unencrypted emails that are sent over the Internet may not be sufficiently protected against unauthorized third party access. Alternatively, you can send us a message using our secure contact form (SSL standard).

Contact Form
When you send the information entered in the contact form by clicking on the button on the contact form, you thereby declare your consent for us to use your information to answer your inquiry or to contact you. It will not be transferred to third parties unless the applicable data protection provisions justify such a transfer or we are legally obligated to do so. You can withdraw your consent with effect for the future at any time. In the event of withdrawal, your data will be deleted without delay. Otherwise, your data will be deleted once we have processed your inquiry or the purpose for storage has lapsed. You can get information about the data that has been stored regarding your person at any time.

Security of Your Data
We will protect the data that you transfer using appropriate technological and organizational means to protect it from accidental or intentional manipulation, loss, destruction, or access by unauthorized persons. Our security measures will be continuously monitored and improved in correspondence with technological development and organizational opportunity.

Exclusion of Liability
baier & michels GmbH & Co.KG has created the contents of these websites with great care and updates them regularly. However, this information is only intended for non-binding, general informational purposes, and does not replace detail individual consultation.
baier & michels GmbH & Co.KG assumes no guarantee for the timeliness, accuracy, and completeness of the information on this website or for its constant, disturbance-free accessibility. With respect to links to third party websites, baier & michels GmbH & Co.KG assumes no responsibility for the contents of the linked websites.
When you follow the link, you leave the informational website of baier & michels GmbH & Co.KG. For this reason, different regulations may apply to third party websites, particularly with regard to data protection. Equally, baier & michels GmbH & Co.KG excludes liability for mildly negligent breaches in services, particularly with respect to files provided by baier & michels GmbH & Co.KG as downloads on the websites of baier & michels & Co.KG.

Changes to Our Data Privacy Statement
To guarantee that our Data Privacy Statement always corresponds to the most current statutory provisions, we reserve the right to make changes at any time. This also applies in the event that the Data Privacy Statement must be adjusted due to new or altered services, such as new service features. The new Data Privacy Statement then applies for your next visit to our website.

Additional Information
Your trust is important to us! If you have questions that our Data Privacy Statement can’t answer, or if you would like more detailed information on some point, please inquire with the contact person for data protection at any time.

Controller
The controller in the sense of data protection is:
– Name: Mr. Hansjörg Koroschetz
– Company: baier & michels GmbH & Co. KG
– Address: Carl-Schneider-Strasse 1
64372 Ober-Ramstadt / Rohrbach
– Telephone: +49 (0) 6154 6960 0
– Fax: +49 (0) 6154 6960 500
– Email: dataprotection@baier-michels.com
The appointed Data Protection Officer is:
– Name: Dr. Frank H. Thiele
– Company: Dr.-Thiele IT-Beratung
– Address: Im Seesengrund 19
64367 Ober-Ramstadt
– Email: gdpo@baier-michels.com