Data Privacy Statement

Section 1 – Information about the Collection of Personal Data
(1) In the following, we inform you about the collection of personal data when you use our website. Personal data are all data that pertain to you, such as your name, address, e-mail addresses and user behaviour.
(2) Responsible party acc. to Art. 4 Para. 7 of the EU General Data Protection Regulation (GDPR) is:

brühl & sippold GmbH
Alter Bad Stebener Weg 1
95138 Bad Steben (Germany)
info@bruehl.com
(see our legal information).

You can reach our data protection officer by contacting datenschutz@bruehl.com or by mail, adding “The Data Protection Officer” to the postal address.
(3) When you establish contact with us via e-mail or a contact form, we store the data that you sent us (your e-mail address and, where appropriate, your name and phone number) so we can answer your questions. We delete the data generated in this context after their storage is no longer necessary or we restrict the processing if there are legal record-keeping obligations.
(4) If we use contracted service providers for individual functions of our offerings or would like to use your data for advertising purposes, we will inform you in detail about the corresponding procedures below and also mention the stipulated storage duration criteria.

Section 2 – Your Rights
(1) Concerning your personal data, you have the following rights with respect to us:

– right to information,
– – right to correction or deletion,
– right to restriction of processing,
– right to object against to the processing,
– right to data portability.
(2) You also have the right to complain to a data protection supervisory authority about our processing of your personal data.

Section 3 – Collection of Personal Data during a Visit to our Website
(1) While visiting the website for purely informational reasons, i.e. if you do not register or send us other information, we collect only the personal data that your browser sends to our server. If you would like to view our website, we collect the following data that are technically required for us to show you our website and guarantee the stability and security (the legal foundation is Art. 6 Para. 1 Page 1 Letter f of the GDPR):
– IP address
– Date and time of the inquiry
– Time zone difference to Greenwich Mean Time (GMT)
– Content of the request (specific page)
– Access status/HTTP status code
– Data quantity transferred in each case
– Website from which the request originates
– Browser
– Operating system and its interface
– Language and version of the browser software.
(2) In addition to the previously mentioned data, cookies are stored on your computer when you use our website. Cookies are small text files that are stored on your hard disk that can be assigned to the browser you use and through which certain information flows to the location that places the cookie (in this case, us). Cookies cannot execute programs or transfer viruses to your computer; they serve to make internet offerings overall more user-friendly and effective.
(3) Use of cookies:
a) This website uses the following types of cookies, whose extent and functioning are explained below:
– Transient cookies (see b)
– Persistent cookies (see c).
b) Transient cookies are automatically deleted when you close the browser. They include particularly the session cookies, which store a so-called session ID; this is used to assign various enquiries of your browser to the common session so your computer can be recognised again when you return to our website. Session cookies are deleted when you log out or close the browser.
c) Persistent cookies are automatically deleted after a specified length of time, which can vary depending on the cookie. You can always delete the cookies in your browser’s security settings.
d) You can configure your browser’s setting according to your wishes and reject, for example, the acceptance of third-party cookies or all cookies.
However, please note that if you do this you may not be able to use all the functions of this website.

Section 4 – Revocation or Objection to the Processing of your Data
(1) If you have given your consent to the processing of your data, you can revoke it at any time. Such a revocation impacts the permissibility of the processing of your personal data after you have expressed it to us.
(2) If we base the processing of your personal data on balancing the interests, you can file an objection to the processing. This is the case when the processing is especially not required for us to fulfil a contract with you, which we explain below in the description of the functions. When exercising such an objection, we request that you state the reasons why we should not process your personal data in the way we have been doing. If your objection is justified, we check the facts and will either suspend or adapt the data processing or show you our compelling reasons worth protecting, based on which we continue the processing.
(3) Naturally, you can object to the processing of your personal data for advertising and data analysis purposes at any time. Our contact information for notifying us about your objection to advertising is:
brühl & sippold GmbH
Alter Bad Stebener Weg 1
95138 Bad Steben
Germany
Tel.: +49 (0) 9288/955-0
Fax: +49 (0) 9288/955-99
E-mail: info@bruehl.com

Newsletter
(1) With your consent, you can subscribe to our newsletter so we can inform you about our current interesting offerings. The promoted goods and services are mentioned in the declaration of consent.
(2) We use the so-called double opt-in process for registering to our newsletter. This means that after your registration, we send you an e-mail to the indicated e-mail address in which we request that you confirm that you would like the newsletter to be sent to you. If you do not confirm your registration within 24 hours, your information is blocked and automatically deleted after one month. On top of this, we store both your used IP addresses and times of registration and confirmation. The purpose of the process is to confirm your registration and, if applicable, to be able to clarify any possible misuse of your personal data.
(3) The mandatory information for sending the newsletter is only your e-mail address. After your confirmation, we store your e-mail address for the purpose of sending you the newsletter. The legal foundation is Art. 6 Para. 1 Page 1 Letter a GDPR.
(4) You can revoke the sending of the newsletter at any time and unsubscribe to it by clicking on the link provided in the newsletter e-mail, e-mailing info@bruehl.com or by sending us a message to the contact information given in the legal information.

Use of Google Analytics
(1) This website uses Google Analytics, a web analysis service of Google Inc. (“Google”), that uses so-called cookies, text files stored in your computer to allow the analysis of your use of the website. The information generated by the cookie about your use of this website is generally transferred to a Google server in the USA for storage. In the event that IP anonymisation is activated on this website, however, Google will shorten your IP address beforehand within the member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be sent to a Google server in the USA to be shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website to compile reports about the website’s activities and provide additional services related to the use of the website and internet to the website operator.
(2) The IP address transmitted by your browser as part of Google Analytics is not combined with other Google data.
(3) You can prevent the storage of the cookies by setting your browser accordingly, but we would like to remind you that in this case you may not be able to use all the functions of this website. In addition, you can prevent the acquisition of the data generated by the cookie related to your use of the website (including your IP address) sent to Google and Google’s processing of these data by downloading and installing the browser plug-in available in the following link: http://tools.google.com/dlpage/gaoptout?hl=de.
(4) This website uses Google Analytics with the expansion “anonymizeIp()” to further process IP addresses in a shortened way, thereby ruling out personal identification. If the data collected through you allows for a personal reference, it will be immediately excluded and the personal data thereby immediately deleted.
(5) We use Google Analytics so we can analyse the use of our website and improve it on a regular basis. We can improve our offerings with the statistics obtained and design them to be more interesting for you as a user. For the exceptional cases in which personal data are transferred to the USA, Google has agreed to be subject to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework. The legal foundation for the use of Google Analytics is Art. 6 Para. 1 Page 1 Letter f of the GDPR.
(6) Information about the third-party provider: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001. User conditions: http://www.google.com/analytics/terms/de.html, data protection overview: http://www.google.com/intl/de/analytics/learn/privacy.html, and the Data Privacy Statement: http://www.google.de/intl/de/policies/privacy.
(7) This website also uses Google Analytics for a visitor flow analysis across devices performed via a user ID. In your customer account under “My data”, “personal data”, you can deactivate the analysis across devices that you use.

Use of Social Media Plug-Ins
(1) We use the so-called two-click solution in the social media plug-in that we are currently using, namely Instagram. This means that basically, when you visit our site, no personal data are initially forwarded to the providers of the plug-ins. You can recognise the plug-in provider by the marking on the box above its first letter or the logo. We open up the opportunity for you to communicate directly with the plug-in provider by using the button. Only when you click on the marked field to activate it will the plug-in provider receive the information that you have accessed the corresponding website of our online offering. Additionally, the data mentioned in Section 3 of this Statement are transmitted. Therefore, by activating the plug-in, your personal data are transmitted to the respective plug-in provider and stored there (for American providers, in the USA). Since the plug-in provider collects the data (especially through cookies), we recommend that you delete all cookies before clicking on the grey box above your browser’s security settings.
(2) We neither have an influence on the collected data and data processing procedures nor do we know the full extent of the data collection, the processing purposes and the storage periods. We also have no information about the deletion of the data that the plug-in provider has collected.
(3) The plug-in provider stores the data collected through you as usage profiles and uses them for advertising purposes, market research and/or needs-based design of his website. Such evaluation takes place (also for users not logged in) especially for displaying needs-based advertising and informing other users of the social network about your activities on our website. You are entitled to object to the creation of these profiles, although you must contact the respective plug-in provider to exercise this right. Through the plug-ins, we offer you the opportunity to interact with the social networks and other users, so that we can improve our offerings and can design them in a more interesting way for you as a user. The legal foundation for the use of the plug-ins is Art. 6 Para. 1 Page 1 Letter f of the GDPR.
(4) Data forwarding takes place regardless whether you have an account with the plug-in provider and are logged in there or not. If you are logged in with the plug-in provider, your data that we collected are directly assigned to the existing account of the plug-in provider. When you click on the activated button and link the site, for example, the plug-in provider also stores this information in your user account and communicates it publicly to your contacts. We recommend that you regularly log out after using a social network, especially however before activating the button so you can prevent such an assignment to your profile with the plug-in provider.
(5) You can receive further information about the purpose and scope of the data collection and their processing by the plug-in provider in the Data Privacy Statements of the providers indicated below. There you will also receive more information about your respective rights and setting options to protect your privacy.
(6) Addresses of the respective plug-in providers and URL with their data protection notices:
a) Instagram LLC; 1601 Willow Rd, Menlo Park CA 94025 USA https://help.instagram.com/155833707900388

Integration of Vimeo Videos
(1) We have integrated vimeo videos into our online offerings, stored inhttp://www.vimeo.com, that our website can play directly. All of them are integrated into the “expanded data protection mode”, which means that no data about you as a user are transferred to YouTube if you do not play the videos. Only if you play them will the data mentioned in Paragraph 2 be transferred. We have no influence on this data transfer.
(2) By visiting the website, vimeo receives the information that you have visited the respective subpage of our website. Additionally, the data mentioned in Section 3 of this Statement are transmitted. This occurs regardless whether vimeo provides a user account through which you are logged in or there is no user account. Vimeo stores your data as user profiles and uses them for advertising, market research and/or needs-based design of its website. Such evaluation takes place (also for users not logged in) especially for providing needs-based advertising and for informing other users of the social network about your activities on our website. You are entitled to object against the creation of these user profiles, although you must contact vimeo to exercise this right.
(3) You can receive further information about the purpose and scope of the data collection and their processing by vimeo in the Data Privacy Statements. There you will also receive more information about your rights and setting options to protect your privacy: https://vimeo.com/privacy

Integration of Google Map
(1) We use the offerings of Google Maps on this website so we can show you interactive maps directly on the website and allow you to use the map function comfortably.
(2) By visiting the website, Google receives the information that you have visited the respective subpage of our website. Additionally, the data mentioned in Section 3 of this Statement are transmitted. This occurs regardless whether Google provides a user account through which you are logged in or there is no user account. When you log into Google, your data are directly assigned to your account. If you do not want the assignment to your profile at Google to take place, you must log out before activating the button. Google stores your data as user profiles and uses them for the purposes of advertising, market research and/or needs-based design of its website. Such evaluation takes place (also for users not logged in) especially for providing needs-based advertising and for informing other users of the social network about your activities on our website. You are entitled to object against the creation of these user profiles, although you must contact Google to exercise this right.
(3) You can receive further information about the purpose and scope of the data collection and their processing by the plug-in provider in the Data Privacy Statements of the provider. There you will also receive more information about your respective rights and setting options to protect your privacy: http://www.google.de/intl/de/policies/privacy. Google also processes your personal data in the USA and has agreed to be subject to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

→ Information on data processing