The protection of your personal data and compliance with the respective applicable data protection rules it of outmost importance for us. This applies in particular to the General Data Protection Regulation (Regulation (EU) 2016/679; hereinafter referred to as “GDPR”) and the respective applicable national data protection regulations, in particular those of the German Federal Data Protection Act (“Bundesdatenschutzgesetz” “BDSG”).
I. Controller and contact details
BRYCK GmbH & Co. KG,
registered in the Commercial Register of the Local Court of Essen under HRA 11296,
(hereinafter also referred to as “we” or “BRYCK”), is responsible for the collection, processing and administration of personal data processed in connection with this website.
If you have any questions, comments or suggestions about your rights as a data subject or about the processing of your personal data by BRYCK, please feel free to contact us by e-mail at firstname.lastname@example.org or at the contact details provided in the imprint.
You can contact our data protection officer at:
datenschutz nord GmbH
– Data Protection Officer / Datenschutzbeauftragter –
or by e-mail at email@example.com
II. Purposes and legal basis
During the use of our website, we collect and process technically provided data or data that you submit in your inputs and by using our website. This processing enables us to provide you with the content and functions of our website and to send you our newsletter or other notifications for attractive offers and special promotions with your consent.
The processing of this data is based on your consent, for the initiation of business relationships or fulfillment of contracts. Furthermore, we process the data on the basis of our legitimate interests in providing customer-friendly and interesting content and functions, as well as to maintain and strengthen our good relationship with our customers. Furthermore, we process the data if we are legally obliged to do so, for example due to tax and commercial law retention and documentation obligations. If and insofar as the processing is based on your consent, you can revoke the consent at any time with effect for the future. The legal basis for this processing is art. 6 para. 1 s. 1, lit. a), b), c), f) GDPR.
III. General use of the website
If you use our website, we only process data that is necessary or appropriate for the fulfillment of the above purposes, to facilitate all functions and to ensure a safe use of our website.
Each time a user accesses our website, data and information about the respective user are processed automatically in order to ensure technical delivery of the content and functionality of our website. The processing is carried out for the fulfilment and initiation of a contract as well as on the basis of our legitimate interests in providing a functional and user-friendly website. In addition, the processing is carried out in order to provide law enforcement authorities with the information necessary for prosecution in the event of a cyber-attack. The legal basis of the processing is art. 6 para. 1 s. 1 lit. b), f) GDPR). In this context, we process in particular:
- browser type, incl. version of the browser,
- information about the language settings of your browser as well as country settings,
- operating system,
- IP address of the user,
- date and time of access,
- websites from which your system accesses our website and
- websites that are accessed by your system via our website.
The data will be processed and, in particular, stored for as long as is necessary to achieve the aforementioned purpose. Insofar as data is required for the provision of the website, the necessity ends when the respective session has ended. The data will then be deleted. In case of storage of data in log files, the data is usually deleted after fourteen days at the latest. Thereafter, the data will be anonymised or deleted, except of data that (i) is still required for the investigation or prosecution of cyber-attacks or (ii) must be stored/saved in accordance to legal or statutory documentation obligations. Data submitted by you via the contact form and other forms will be stored for a period of ten years and delete thereafter to fulfil our storage obligations. If we further store or save the aforementioned data, your IP address will be deleted or alienated, so that it is no longer possible to retrace an individual connection. The collection of data for the provision of the website and the storage of the data in log files is mandatory for the operation of the website.
After registering for our newsletter, you will receive an e-mail asking you to confirm your registration (so-called double opt-in). This confirmation is necessary so that no one can register with other people’s e-mail addresses. The registrations for the newsletter are logged to comply with the legal requirements to document the registration process. This includes the storage of the registration and confirmation time and the IP address used by the user.
The legal basis for the processing within the scope of the newsletter is your voluntary consent, art. 6 para. 1 s. 1 lit. a) GDPR. You can easily revoke your consent at any time with effect for the future and unsubscribe from our newsletter. For this purpose, we send a link to unsubscribe in each newsletter. In addition, you can revoke your consent at any time via the aforementioned contact details. As far as the processing of the data is also necessary to deliver the ordered newsletter or to fulfil our legal obligations, the processing is also based on art. 6 para. 1 s. 1 lit. b), c), f) GDPR.
We use the services of HubSpot Germany GmbH, Am Postbahnhof 17, 10243 Berlin, a subsidiary of HubSpot, Inc., 25 First Street, 2nd Floor, Cambridge, MA 02141, USA (“HubSpot”) for the administration and distribution of our newsletter. These services enable us to organise and analyse the newsletter dispatched. HubSpot processes the data on our behalf. We have concluded a data processing agreement with HubSpot.
The functions in the newsletter allow us to analyse, among other things, how many recipients have opened the newsletter message and how often which link in the newsletter was clicked. By so-called conversion tracking, we can also analyse whether a predefined action (e.g. registration for an event) has taken place after clicking on the link in the newsletter. The data processing is based on your consent, Art. 6 para. 1 s. 1 lit. a) GDPR.
If you do not agree with the processing by HubSpot, you can revoke your consent at any time and unsubscribe from the newsletter. The legality of the data processing operations already carried out remains unaffected. Further information on data processing by HubSpot can be found at: https://legal.hubspot.com/privacy-policy.
Your data will be deleted as soon as they are no longer required to achieve the intended purpose, especially if you unsubscribe from our newsletter. If the data is required for the fulfilment of a contract or for the initiation of a contract, a deletion can only take place if it does not violate other contractual or legal obligations. We would like to point out that in some cases we have to store data even after termination of the contract (e.g. due to tax and commercial law retention obligations). The storage periods that apply here are determined individually for the respective contracts and contractual parties.
V. Contact form
On our website you can also contact us via a contact form. This form offers you an easy way to contact us, so you can communicate with us and send us your questions and suggestions.
The data you provide in the contact form will be processed by our employees in order to handle your request. A transfer to other recipients will only take place if it is necessary to answer your request.
Here, we process the data that you voluntarily provide to us as part of the contact form. This includes your contact information as well as your questions and suggestions, i.e. the actual content of your message.
We process this data for the initiation and fulfilment of a contract (art. 6 para. 1 s. 1 lit. b) GDPR). We also pursue the legitimate interest of processing your requests efficiently and user-friendly (art. 6 para. 1 s. 1 lit. f GDPR). In addition, we are obliged to store data due to commercial and tax regulations (art. 6 para. 1 s. 1 lit. c) GDPR).
A transfer to third countries outside the European Economic Area is not intended, unless this is necessary for the fulfilment of your request. We delete the data as soon as we are no longer obliged to store it due to commercial and tax regulations.
When using cookies, it is necessary to differentiate whether they are technical cookies, which are necessary for the functions of our website, or analytical cookies, which are used to better understand the user behaviour and user wishes, so that we can always respond to your wishes to provide you with a user-friendly, secure and smoothly working website in the future.
The use of technical cookies serves our legitimate interest in ensuring the functionality and security of our website (art. 6 para. 1 s. 1 lit. f) GDPR).
You can prevent the setting of cookies by our website at any time via your internet browser settings and thus permanently object to the setting of cookies. Furthermore, cookies that have already been set can be deleted at any time via your internet browser or other software programs. This is possible in all common internet browsers. If you deactivate the setting of cookies in the internet browser, however, not all functions of our website may be fully usable.
Specifically, we use the following cookies for the purposes stated in each case with the expiration dates stated in each case:
Cookie name Purpose Expiration date
moove_gdpr_popup If enabled, this cookie will be used to store your cookie settings on our website. 12 months
UserMatchHistory LinkedIn Ads ID syncing 30 days
li_oatml Used to identify LinkedIn Members off LinkedIn for advertising and analytics outside the Designated Countries and, for a limited time, advertising in the Designated Countries 30 days
lms_ads Used to identify LinkedIn Members off LinkedIn in the Designated Countries for advertising 30 days
li_fat_id Member indirect identifier for Members for conversion tracking, retargeting, analytics 30 days
Brwsr / IRLD Affiliate Marketing Cookie for LinkedIn 2 years
ABSELB Load Balancer Cookie for affiliate marketing 2 years
_fbp Cookie used by Facebook to display ads 90 days
Fr Cookie to control the Facebook Pixel 90 days
Comment_author_x Information if a user leaves a comment 12 months
A “session” ends when you close your internet browser.
VII. Facebook Pixel
If you have given your consent to the use of tracking cookies, we also use the Facebook Pixel to optimize our advertising offering (art. 6 para. 1 s. 1 lit. a) GDPR). The social media platform Facebook and its plugins are operated by Facebook Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, and Meta Platforms, Inc., located at 1601 Willow Road, Menlo Park, California, 94025, USA, (“Facebook”). You can find more information about these Facebook services under the link https://www.facebook.com/privacy/explanation. If you use a Facebook user account, this is recognizable for the Facebook pixel on our websites by the Facebook cookie set, via which the collected usage data is transmitted to Facebook for analysis and marketing purposes. You can check and/or deactivate this data collection and the further processing and use of the data by Facebook directly at Facebook.
- HTTP header information (including IP address, web browser information, page location, document, web page URL and web browser user agent, and day and time of use).
- Pixel-specific data; this includes the pixel ID and Facebook cookie data, including your Facebook ID (this data is used to link events to a specific Facebook ad account and associate them with a Facebook user).
- Additional information about the visit to our websites, as well as standard and custom data events.
- Conclusion of registrations and trial subscriptions
- Searched products, call of product information
The aforementioned data processing only concerns users who have an account with Facebook or who have accessed a Facebook partner page (whereby a cookie has been set). The display of advertising on Facebook (partner) pages using the “Custom Audience” service does not affect users who are not members of Facebook. If an assignment of the Facebook ID contained in the Facebook cookie to a Facebook user can be made, Facebook assigns this user to a target group (“Custom Audience”) on the basis of the rules defined by us, provided that the rules are relevant. We use the information obtained in this way to present Telekom advertising on Facebook (partner) pages.
When using the Facebook Pixel, we are jointly responsible with Facebook for a part of the processing of that data. Therefore, we have concluded a joint controllership agreement (“Controller Addendum”). More information about this joint controllership, especially the respective areas of responsibility, can be found at https://www.facebook.com/legal/controller_addendum.
VIII. LinkedIn Insights
If you have given your consent to the use of tracking cookies, we also use LinkedIn Insights to optimize our advertising offering (art. 6 para. 1 s. 1 lit. a) GDPR). The social media platform LinkedIn and its plugins are operated by LinkedIn Corporation, 1000 W. Maude Avenue, Sunnyvale, CA 94085, USA, (“LinkedIn”). You can find more information about these LinkedIn services under the link https://business.linkedin.com/marketing-solutions/insight-tag. If you use a LinkedIn user account, this is recognizable for the LinkedIn Insights Tag on our websites by the LinkedIn cookie set, via which the collected usage data is transmitted to LinkedIn for analysis and marketing purposes. Timestamps and events such as page views are also stored. This enables us to statistically evaluate the use of our website in order to constantly optimize it. We learn, for example, which LinkedIn ad or interaction on LinkedIn brought you to our website. This allows us to better control how our ads are displayed.
For more information on Conversion Tracking by the LinkedIn Insight Tag, see https://www.linkedin.com/help/linkedin/answer/67595/linkedin-conversion-trackingubersicht. Information about the Cookies used by LinkedIn can be found at https://www.linkedin.com/legal/l/cookie-table.
When using the LinkedIn Insights Tag, we are jointly responsible with LinkedIn for a part of the processing of that data. Therefore, we have concluded a joint controllership agreement (“Page Insights Joint Controller Addendum”). More information about this joint controllership, especially the respective areas of responsibility, can be found at https://legal.linkedin.com/pages-joint-controller-addendum.
We have integrated YouTube components on this website. YouTube is an internet video portal that allows video publishers to post video clips free of charge and other users to view, rate and comment on them. YouTube allows the publication of all types of videos, which is why complete film and TV shows, but also music videos, trailers or videos made by users themselves can be accessed via the internet portal.
To ensure that you always have control over whether YouTube components are used, they are generally inactive. YouTube components are only activated when you click on the respective button and thereby give your consent to use YouTube components. The corresponding processing of personal data is based on your consent (art. 6 para. 1 s. 1 lit. a) GDPR).
The operating company of YouTube is YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, USA (here: “YouTube”). YouTube is a subsidiary of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). If and to the extent that data is processed in the USA with the use of YouTube services, we conclude appropriate contractual agreements with Google. Such a transfer is also based on your consent.
If you have activated the YouTube components and access a page on which a YouTube component (YouTube player) has been integrated, the Internet browser on your computer is caused to download a representation of the corresponding YouTube component from YouTube. Further information on YouTube can be found at https://www.youtube.com/yt/about/de/. As part of this technical procedure, YouTube and Google obtain knowledge of which IP address you are using and which video you have played (if you have played one).
If you are logged in to YouTube at the same time, YouTube recognizes which IP address you are using and which video you have played (if you have played one) when you call up a sub-page that contains a YouTube video. This information is collected by YouTube and Google and assigned to your respective YouTube account.
YouTube and Google always receive information via the YouTube component that you have visited our website if you are logged into YouTube at the same time as accessing our website. If you do not want this information to be transmitted to YouTube and Google, you can prevent this transmission by logging out of your YouTube account before accessing our website.
We do not retain any personal data within YouTube.
Personal data is not transferred to other recipients within the framework of YouTube.
- X. Hosting and CMS
1. Hosting provider
Our website is hosted on the servers of Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany (“Hosting Provider”). Therefore, it is technically necessary that a use of our website results in a transfer of data to the Hosting Provider. However, the Hosting Provider only acts on our behalf as an data processor. Only servers located within the European Union or the European Economic Area are used for our website and the associated data processing. The use of the Hosting Provider as a processor is based on our legitimate interest, art. 6 para. 1 s. 1 lit. f) GDPR.
We use the services of Contenful GmbH, Max-Urich-Straße 3, 13355 Berlin, Germany (“Contenful”) to manage our website by using a content management system (CMS). Contenful is acting on our behalf as a data processor.
The use of Contentful´s CMS is based on our legitimate interests in the management of our website, to improve user experience and to protect us from unauthorised access and cyber attacks, art. 6 para. 1 s. 1 lit. f) GDPR.
XI. Data subject rights
- You have the following rights with regard to your personal data:
- Right of access, art. 15 GDPR
- Right to rectification, art. 16 GDPR
- Right to erasure, art. 17 GDPR
- Right to restriction of processing, art. 18 GDPR
- Right to data portability, art. 20 GDPR
- Right to object to processing, art. 21 GDPR
Furthermore, you can file a complaint with a competent data protection supervisory authority at any time if you think that your data is being processed unlawfully. For BRYCK, this is the data protection supervisory authority of North Rhine-Westphalia.