Privacy policy

1. Scope of the processing of personal data

We process personal data of our users and customers only to the extent necessary to achieve the purpose pursued with the data processing.

2. Legal basis for the processing of personal data

Insofar as we obtain the consent of the data subject for the processing of personal data, Art. 6 Para. 1 S.1. lit. a EU Data Protection Ordinance (GDPR) serves as the legal basis.
In the processing of personal data required for the performance of a contract to which the data subject is a party, Art. 6 para. 1 sentence 1 lit. b GDPR serves as the legal basis. This also applies to processing operations that are necessary to carry out pre-contractual measures.
Insofar as the processing of personal data is required to fulfil a legal obligation to which our company is subject, Art. 6 para. 1 sentence 1 lit. c GDPR serves as the legal basis.
If processing is necessary to protect a legitimate interest of our company or a third party and if the interests, fundamental rights and freedoms of the data subject do not outweigh the former interest, Art. 6 para. 1 sentence 1 f GDPR serves as the legal basis for processing.

3. Data erasure and storage time

The personal data of the person concerned will be deleted or blocked as soon as the purpose of storage ceases to apply. Furthermore, data may be stored if this has been provided for by the European or national legislator in EU regulations, laws or other provisions to which the person responsible is subject.

4. Category of persons concerned

The persons concerned by the data processing are categorized in:
Natural persons as customers, interested parties and other visitors, summarized as "users or customers".

5. Passing on of data

A passing on of data to third parties does not take place in principle. If it takes place, then on a statutory basis, for example pursuant to Art. 6 para. 1 sentence 1 lit. b GDPR for the processing of contractual relationships with you when data is passed on to transport companies for the purpose of delivering the goods ordered by the Customer. A disclosure to third parties may also take place if there is a legal obligation to do so, pursuant to Art. 6 para. 1 sentence 1 lit. c GDPR, if you have given your consent, Art. 6 para. 1 sentence 1 lit a GDPR or the disclosure pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR is necessary to safeguard the legitimate interests of the person responsible or a third party, unless the interests or fundamental rights and freedoms of the person concerned, which require the protection of personal data, prevail.

1. Description and scope of data processing

Every time you visit our website https://www.boellhoff.com/th-en , the browser used on your device automatically sends information and data to the server of our website. This information and data is temporarily stored in a so-called log file.
If you use our website for information purposes only, i.e. if you do not register or otherwise provide us with information, we only collect the personal data that your browser transmits to our server.
If you wish to view our website, our system collects the following information and data from the computer system of the calling computer without your intervention and stores it until it is automatically deleted:

1. Information about the browser type and version used
2. The user's operating system
3. The Internet service provider of the user
4. The IP address of the user
5. Date and time of the request
6. Websites from which the user's system reaches our website
7. Websites accessed by the user's system via our website
8. Name and URL of the file retrieved
9. Amount of data transmitted in each case
10. Time zone difference to Greenwich Mean Time (GMT)
11. Access status/HTTP status code

2. Legal basis for data processing

The legal basis for the temporary storage of data and log files is Art. 6 Par. 1 S.1 lit. f GDPR. Our legitimate interest follows from the purposes listed under point 3. Since we do not use the data mentioned in paragraph 1. in any case to draw conclusions about your person, our interests outweigh.

3. Purpose of data processing

The temporary storage of the IP address by the system is necessary to enable the website to be delivered to the user's computer. For this the IP address of the user must remain stored for the duration of the session.
The data is stored in log files to ensure that the website functions properly and to ensure a smooth connection to the website. In addition, the data serves us to optimize the website, to guarantee comfortable use of our website and to ensure the security of our information technology systems in terms of system security and stability. An evaluation of the data for marketing purposes does not take place in this context.

In these purposes also lies our legitimate interest in data processing according to Art. 6 Para. 1 S.1 lit. f GDPR (see No. 2.).

4. Duration of storage

The data will be deleted as soon as they are no longer necessary to achieve the purpose for which they were collected. If the data is stored in log files, this is the case after seven days at the latest.

5. Possibility of opposition and elimination

The collection of the data for the provision of the website and the storage of the data in log files is absolutely necessary for the operation of the website. Consequently, there is no possibility of objection on the part of the user.

6. External service providers

We use an external webhosting service provider to process your data. This is carefully selected and commissioned by us and is bound by our instructions and is regularly checked by us. Technical and organisational measures have been taken to ensure the security of your data. It is based in the Federal Republic of Germany.

7. Content Delivery Network

For the distribution of our online offer - especially large media files - we use a so-called Content Delivery Network (CDN). Our CDN is a network of regionally distributed servers of our technical service providers (order processors) connected via the Internet. When the online offer is called up, the Internet browser or the programme with which the offer is called up automatically transmits information to these service providers, which is collected in corresponding log files, the so-called server log files, and processed on servers within the European Union. The server log files are anonymised on these servers and then transmitted to the USA without any personal reference. The server log files are stored there for 90 days and then automatically deleted. The server log files include, in particular, details of the browser and operating system used, an indication of the origin of the previously visited pages (so-called referral URL), the IP address of the device used, the name of the Internet provider, as well as the date and time of all page views under the offer, including the amount of data transmitted. In addition, in order to optimise the video quality and ensure the accessibility of the videos, technical, non-personal data in the form of video start time, technically caused interruptions and loading times, received quality and network information are collected at evaluation servers.tagesschau.de generally also collects measurement data about the offer in order to determine metrics such as loading times, transmission speed, file sizes etc. (monitoring). This enables the functionality of the service on the respective end device to be checked and improved. This data is processed by the technical service provider on servers within the European Union and then transmitted anonymously and without personal reference to the USA for evaluation. After the legal storage periods have expired, the anonymised measurement data is automatically deleted.

1. Description and scope of data processing

Our website at https://www.boellhoff.com/th-en uses cookies. Cookies are text files that are stored in the Internet browser or by the Internet browser on the user's computer system and through which certain information flows to the site that places the cookie (here by us). When a user visits a website, a cookie may be stored on the user's operating system. This cookie contains a characteristic character string that enables a unique identification of the browser when the website is called up again. Cookies do no damage to your end device, do not contain viruses, Trojans or other malware.

Our website uses cookies, which are necessary for the display of the website. We use cookies to make our website more user-friendly. Some elements of our website require that the calling browser can be identified even after a page change. These are technically necessary cookies for the operation of the website.
The website https://www.boellhoff.com/th-en does not use cookies for marketing purposes or for advertising tracking. Flash cookies are also not used.

The following data is stored and transmitted in the cookies, for example:

1. Language settings
2. Items in a shopping cart
3. Log-in information
4. Indication of origin of the cookie

On the website https://www.boellhoff.com/th-en , technically unnecessary cookies are also used within the scope of google Analytics. For this purpose, reference is made to XI. of this data protection declaration (Google Analytics), which determine an analysis of the surfing behaviour of the users.
Otherwise Böllhoff does not use technically unnecessary cookies on the website https://www.boellhoff.com/th-en nor do we use cookies for marketing purposes or Flash cookies.

2. Legal basis for data processing

The legal basis for the processing of personal data using cookies is Art. 6 Para. 1 S.1 lit. f GDPR. Our legitimate interest follows from the purpose of data processing set out in Section 3.

3. Purpose of data processing

The purpose of using technically necessary cookies is to simplify the use of websites for users. Some functions of our website cannot be offered without the use of cookies. For this it is necessary that the browser is recognized even after a page change.

We need cookies for the following applications:

1. Shopping Cart
2. Accepting language settings
3. Remembering search terms
4. Log-in information

For these purposes, our legitimate interest also lies in the processing of personal data in accordance with Art. 6 Para. 1 S.1 lit. f GDPR (Section 2.).

The user data collected by technically necessary cookies are not used to create user profiles. A so-called profiling of the user does not take place at Böllhoff.
For the purpose of data processing at Google Analytics, reference is made to XI. of this data protection declaration (Google Analytics).

4. Duration of storage, possibility of objection and elimination

Cookies are stored on the user's computer and transmitted to our site. Therefore, you as a user also have full control over the use of cookies. You can deactivate or restrict the transmission of cookies by changing the settings in your Internet browser. Cookies that have already been saved can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to use all functions of the website in full. The so-called session cookies used by Böllhoff are automatically deleted when you log out or close your browser.

1. Description and scope of data processing

You can subscribe to a free newsletter on our website. The advertised goods and services are mentioned in the declaration of consent. When registering for the newsletter, the data from the input mask is transmitted to us.

The only mandatory information for sending the newsletter is your e-mail address. The indication of further, separately marked data (first name, surname) is voluntary and is used to be able to address you personally.

In addition, the following data is collected and stored during registration:

1. IP address of the calling computer
2. Date and time of the declaration of consent (registration)
3. Content of the declaration of consent

Your consent will be obtained for the processing of your data during the registration process.

For the registration to our newsletter we use the so-called double opt-in procedure. This means that after your registration we will send you an e-mail to the specified e-mail address in which we ask you to confirm that you would like the newsletter to be sent. If you do not confirm your registration within 24 hours, your information will be blocked and automatically deleted after 7 days.

For the purpose of proof of your registration, the following additional data will be collected and stored in the double-opt-in procedure:

1. Date and time of confirmation
2. Contents of the confirmation mail
3. IP address of the calling computer

In connection with data processing for the dispatch of newsletters, no data is passed on to third parties. The data will be used exclusively for sending the newsletter.

2. Legal basis for data processing

The newsletter is sent after the user has registered on our website. In doing so, the user gives his consent, which can be revoked at any time, to the sending of the newsletter. No newsletter will be sent without your consent.
The legal basis for the processing of the data after registration for the newsletter by the user is Art. 6 Par. 1 S.1 lit. a GDPR.
The legal basis for the storage of the registration and confirmation data mentioned under item 1. is Art. 6 Para. 1 S.1 lit. f GDPR for protection against civil and competition law claims, in order to be able to provide proof of the user's consent.

3. Purpose of data processing

The collection of the user's e-mail address serves to send the newsletter.

The collection of other personal data within the registration process serves to prevent misuse of the services or the e-mail address used as well as to be able to clarify a possible misuse of your personal data and to be able to prove your consent. This is at the same time our legitimate interest according to clause 2.

4. Duration of storage

The data will be deleted as soon as they are no longer necessary to achieve the purpose for which they were collected. The user's e-mail address will therefore be stored for as long as the subscription to the newsletter is active.

5. Possibility of revocation

You can revoke your consent to receive the newsletter at any time and unsubscribe from the newsletter. You can declare your cancellation by clicking on the cancellation link provided in every newsletter e-mail or by sending a message to the contact details given in the imprint (included in every newsletter e-mail). The revocation does not change the legality of the advertising sent until the revocation (no retroactive effect of the revocation).

1. Description and scope of data processing

Wilhelm Böllhoff GmbH & Co. KG, Böllhoff GmbH and Böllhoff Verbindungstechnik GmbH would like to send their customers or users regular information, newsletters, trade fair invitations, feedback requests, training opportunities, offers and advertising about fasteners and assembly technology as well as related technical and logistical services and products of the Böllhoff Group (in detail at www.boellhoff.com) by e-mail:

For this the respective company requires the prior consent of the customer or the user to the sending of these advertising e-mails and to the storage of the date (e-mail address) required for the sending.

In case of the consent of the customer or the user, his e-mail address will be processed in order to be able to send him the advertising. The provision of further data, such as first names and surnames, is voluntary and is used in order to address the customer or the user personally.

The customer and the user are informed that they are neither contractually nor legally obliged to give their consent for the sending of information, newsletters, trade fair invitations, feedback requests, training opportunities, offers and advertising about products and services of the respective Böllhoff company and the Böllhoff Group, but that this is solely on a voluntary basis, without the refusal of consent having any legal disadvantage or other disadvantage for the customer or the user.

In addition to the e-mail address, the following data is also collected and stored when the consent is obtained:

1. IP address of the calling computer
2. Date and time of the declaration of consent (registration)
3. Content of the declaration of consent

The so-called double opt-in procedure is used to obtain consent. This means that after the customer has given his consent, we will send an e-mail to the e-mail address provided asking him to confirm that he agrees to the sending of advertising e-mails. If confirmation is not received within 24 hours, the information will be blocked and automatically deleted after 7 days.

For the purpose of proof of consent, the following additional data is collected and stored in the double-opt-in procedure:

1. Date and time of confirmation
2. Contents of the confirmation mail
3. IP address of the calling computer

The data will not be passed on to third parties in connection with data processing for sending advertising e-mails. The data will be used exclusively for sending advertising e-mails.

2. Legal basis for data processing

The legal basis for the storage of the e-mail address and, if applicable, first names and surnames, is the consent to the sending of advertising e-mails by the user or customer, which may be revoked at any time. No advertising e-mails will be sent without your consent. The legal basis is Art. 6 para. 1 sentence 1 lit. a GDPR.
Furthermore, the legal basis for the storage of the consent and confirmation data mentioned under No.  1. is Art. 6 Para. 1 S.1 lit f GDPR for protection against civil and competition law claims, in order to be able to provide proof of the user's and the customer's consent.

3. Purpose of data processing

The collection of the user's e-mail address serves to send the advertising mail.

The collection of other personal data as part of the consent process serves to prevent misuse of the services or the e-mail address used as well as to clarify a possible misuse of your personal data and to be able to prove the consent given by the user or customer. This is at the same time our legitimate interest according to clause 2.

4. Duration of storage

The data will be deleted as soon as they are no longer necessary to achieve the purpose for which they were collected. The e-mail address and, if applicable, first name and surname of the user will therefore be stored as long as the consent is not revoked. After the revocation, which is possible at any time, the data will be deleted immediately.

5. Possibility of revocation

The consenting party has the right to revoke his consent at any time. The revocation does not change the legality of the advertising sent until the revocation (no retroactive effect of the revocation).
The cancellation can be declared by clicking on the cancellation link provided in each advertising e-mail or by sending a message to the contact details given in the imprint (included in each advertising e-mail).

1. Description and scope of data processing

If you send us an inquiry (by contact form, by callback form, by return form) you declare your consent to the processing of the data you have entered and given.
When you contact us by e-mail or via the contact forms provided on the website, the data provided by you will be stored by us in order to answer your questions and process your request.
There is a contact form on our website which can be used for electronic contact. If a user takes advantage of this possibility, the data entered in the input mask will be transmitted to us and stored.

At the time the message is sent via the contact form, the following data is also stored:

1. The IP address of the user
2. Date and time of dispatch

Your consent is obtained for the processing of the data within the scope of the sending process and reference is made to this data protection declaration.

Alternatively, you can contact us via the e-mail address provided. In this case, the user's personal data transmitted by e-mail will be stored.

In this context, the data will not be passed on to third parties. The data is used exclusively for the execution of the inquiry.

2. Legal basis for data processing

The legal basis for the processing of the data is Art. 6 Para. 1 S.1 lit. a GDPR if the user has given his consent.

The legal basis for the processing of data transmitted in the course of sending an e-mail is Art. 6 para. 1 sentence 1 lit. f GDPR. If the e-mail contact aims at the conclusion of a contract, then additional legal basis for the processing is Art. 6 exp. 1 S.1 lit. b GDPR.

3. Purpose of data processing

The purpose of data processing is to process and answer your inquiry and your request.
The processing of the personal data from the input mask serves us only for the treatment of the establishment of contact. In the event of contact by e-mail, this also constitutes the necessary legitimate interest in the processing of the data.
The other personal data processed during the sending process serve to prevent misuse of the contact form and to ensure the security of our information technology systems.

4. Duration of storage

The data will be deleted as soon as they are no longer necessary to achieve the purpose for which they were collected. For the personal data from the input mask of the contact form and those that were sent by e-mail, this is the case when the respective conversation with the user is finished. The conversation is over when it can be inferred from the circumstances that the matter in question has been finally clarified, e.g. your inquiry has been answered and thus settled.

The additional personal data collected during the sending process will be deleted after a period of seven days at the latest.

5. Possibility of revocation, objection and removal

The user has the possibility to revoke his consent to the processing of personal data at any time. The revocation does not change the legality of the advertising sent until the revocation (no retroactive effect of the revocation). If the user contacts us by e-mail, he can object to the storage of his personal data at any time. In such a case, the conversation cannot be continued. You can revoke your consent as well as your objection at any time by sending a message to

BOLLHOFF CO.,LTD.

218/7-218/8 Romklao Road.
Bangkok 10520

Phone: +6621367966
Fax:+6623608940
E-Mail: info_th@bollhoff.com

if you have used their contact form (at https://www.boellhoff.com/th-en) or have sent an e-mail to them.

1. Scope of data processing

This website uses Google Analytics, a web analysis service of Google Inc. (https://www.google.de/intl/de/about 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA hereinafter "google"). Google Analytics uses cookies, which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of this website (such as browser type/browser version, operating system used, referrer URL (previously visited page), IP address, time of server request) is generally transferred to a Google server in the USA and stored there. However, if IP anonymisation is activated on this website, Google will reduce your IP address within member states of the European Union or in other signatory states to the Agreement on the European Economic Area beforehand. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. For these exceptional cases in which personal data is transferred to the USA, Google has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.
On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide the website operator with other services relating to website and Internet use.

The IP address transmitted by your browser in the context of Google Analytics is not merged with other Google data.

The website https://www.boellhoff.com/us-en uses Google Analytics with the extension "_anonymizeIp".
IP anonymization is therefore activated at Böllhoff. The IP address is made anonymous, so that an assignment to a certain natural person is not possible. As far as the data collected about you is personal, it will be excluded immediately and the personal data will be deleted immediately.

2. Purpose of data processing

The purpose of the use of google-analytics is the demand-oriented design and continuous optimization of our website. We use Google Analytics to analyse and regularly improve the use of our website. We can improve our offer and make it more interesting for you as a user.

3. Legal basis

The use of google analytics is based on Art. 6 Para. 1 S.1 lit. f GDPR. With the use of Google Analytics we want to ensure a demand-oriented design and continuous optimization of our website. Furthermore, we want to record the use of our website statistically and evaluate it for the purpose of optimizing our offer. Since your IP address is made anonymous and therefore no longer personally identifiable, our interest in optimising our website through the use of Google Analytics predominates. By anonymizing the IP address, users' interest in protecting their personal data is sufficiently taken into account.

4. Elimination possibility

You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website.
If you want to prevent the collection of data by Google Analytics, you can object via the opt-out link and deactivate data collection. This deactivation is stored in the cookies. Please note that this setting is lost if you delete the cookie.
You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the available browser add-on.

• Browser add-on to disable Google Analytics

5. Third Party Information

Information of the third party provider, including data protection in connection with Google Analytics: Google Dublin, Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001. user conditions: https://www.google.com/analytics/terms/gb.html, data protection overview: https://support.google.com/analytics/answer/6004245, and data protection declaration: https://policies.google.com/privacy

1. Scope of data processing

We have integrated YouTube videos from Böllhoff into our online offer, which are stored on https://www.youtube.com and can be played directly from our website. These are all integrated in the "extended data protection mode", i.e. no data about you as a user will be transmitted to YouTube if you do not play the videos. Only when you play the videos, the data mentioned below will be transferred. We have no influence on this data transmission.
By visiting the website, YouTube receives the information that you have accessed the corresponding subpage of our website. In addition, the data mentioned under IV point 1. of this declaration will be transmitted. This is independent of whether YouTube provides a user account through which you are logged in or whether no user account exists. If you are logged in to Google, your information will be directly associated with your account. If you do not wish to be associated with your profile on YouTube, you must log out before activating the button. YouTube stores your data as user profiles and uses them for purposes of advertising, market research and/or demand-oriented design of its website. Such evaluation takes place in particular (even for unlogged-in users) to provide demand-oriented advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact YouTube to exercise this right.
Further information on the purpose and scope of data collection and its use processing by YouTube is described in YouTube's privacy policy. There you will also receive further information on your rights and privacy settings: https://policies.google.com/privacy. Google also processes your personal data in the USA and has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

2. Legal basis

The legal basis for the processing of users' personal data is Art. 6 para. 1 sentence 1 lit. f GDPR. Videos from Böllhoff on the YouTube platform are integrated in the extended data protection mode. It is the user's responsibility to decide whether he or she will play the video displayed to him or her, as is the case with any other possible visit to the YouTube platform at any time. Our interest in the integration of Böllhoff videos on YouTube is the presentation of our company and our products to both customers and potential applicants. A higher-quality interest of the user, who can freely decide on the playability of a video, is not apparent.

1. Data protection in the case of online presences of the Böllhoff Group in social media such as YouTube, LinkedIn, and Instagram

The editorial team of the Böllhoff Group is active and present within social networks and platforms in order to communicate with interested parties and users there and to be able to inform them about further offers. As the European Court of Justice (ruling of 05.06.2018 - C-210/16) has stated, in the case of these so-called fan pages, the operators of the pages are also jointly responsible for data processing in addition to the portal owners.
Therefore, the Böllhoff Group informs here about the data processing, as far as we know and can influence it.

2. Type and purpose of data processing

The portals collect personal data in order to evaluate user behaviour. Some of this data is made available to the operators of fan pages in anonymised form. As the operator of these fan pages, the Böllhoff Group also receives anonymised statistical data from the platform operators or via a service provider commissioned by the Böllhoff Group. No conclusions can be drawn about the respective person via this data. This data is only used to analyse user behaviour so that the Böllhoff Group can better tailor its offers to the needs and interests of its customers. The Böllhoff Group can only specify the categories of data and persons according to which the portal operator evaluates its data collection and makes it available in the form of anonymised statistics. The Böllhoff Group does not know which data is collected in total and for which purposes it is processed. We ask for your understanding that we can only inform you as far as our knowledge of the data processing and our influence on the data processing go.
However, the Böllhoff Group would like to point out that the operators of the platforms are mostly American companies and therefore their data may also be processed outside the European Union. This may give rise to risks because, for example, it could make it more difficult to enforce the rights of users. More details are provided in the data protection declarations of the individual providers.

3. Data protection declarations of the platforms used

1. Google / YouTube
   https://policies.google.com/privacy
2. LinkedIn
   https://www.linkedin.com/legal/privacy-policy
3. Instagram
   https://help.instagram.com

If personal data are processed by you, you are affected within the meaning of the GDPR and you have the following rights vis-à-vis the person responsible:

1. Right to information

You can ask the person responsible to confirm whether personal data concerning you will be processed by him or her.
If such processing has taken place, you can request the following information from the person responsible:

1. the purposes for which the personal data are processed;
2. the categories of personal data being processed;
3. the recipients or categories of recipients to whom the personal data concerning you have been or are still being disclosed;
4. the planned duration of the storage of the personal data concerning you or, if specific information on this is not possible, criteria for determining the storage period;
5. the existence of a right to rectification or deletion of personal data concerning you, a right to limitation of processing by the controller or a right to object to such processing;
6. the existence of a right of appeal to a supervisory authority;
7. any available information on the origin of the data if the personal data are not collected from the data subject;
8. the existence of automated decision-making including profiling in accordance with Art. 22 para. 1 and 4 GDPR and - at least in these cases - meaningful information on the logic involved and the scope and intended effects of such processing for the data subject.

You have the right to request information as to whether the personal data concerning you is transferred to a third country or to an international organisation. In this context, you may request to be informed of the appropriate guarantees pursuant to Art. 46 GDPR in connection with the transmission.

2. The right to correction

You have a right of rectification and/or completion vis-à-vis the data controller if the personal data processed concerning you are incorrect or incomplete. The person responsible shall make the correction without delay.

3. Right to limitation of processing

Under the following conditions, you may request that the processing of personal data concerning you be restricted:

1. if you dispute the accuracy of the personal data concerning you for a period that enables the data controller to verify the accuracy of the personal data;
2. the processing is unlawful and you refuse to delete the personal data and instead request that the use of the personal data be restricted;
3. the data controller no longer needs the personal data for the purposes of the processing, but you do need them to assert, exercise or defend legal claims, or
4. if you have filed an objection to the processing pursuant to Art. 21 para. 1 GDPR and it has not yet been determined whether the legitimate reasons of the person responsible outweigh your reasons.

If the processing of personal data concerning you has been restricted, such data may only be processed - apart from being stored - with your consent or for the purpose of asserting, exercising or defending rights or protecting the rights of another natural or legal person or on grounds of an important public interest of the Union or a Member State.
If the processing restriction has been restricted according to the above conditions, you will be informed by the person responsible before the restriction is lifted.

4. Right to cancellation

a) Duty to delete
You may request the data controller to delete the personal data relating to you without delay and the controller is obliged to delete this data without delay if one of the following reasons applies:

1. The personal data concerning you are no longer necessary for the purposes for which they were collected or otherwise processed.
2. You revoke your consent, on which the processing was based pursuant to Art. 6 para. 1 lit. a, and there is no other legal basis for the processing.
3. You file an objection against the processing pursuant to Art. 21 para. 1 GDPR and there are no overriding legitimate reasons for the processing, or you file an objection against the processing pursuant to Art. 21 para. 2 GDPR.
4. The personal data concerning you have been obtained unlawfully is processed.
5. The deletion of personal data relating to you is necessary to fulfil a legal obligation under Union law or the law of the Member States to which the data controller is subject.

b) Information to third parties
If the data controller has made the personal data concerning you public and is obliged to delete it pursuant to Art. 17 para. 1 GDPR, he shall take appropriate measures, including technical measures, taking into account the available technology and the implementation costs, to inform data processors who process the personal data that you as the data subject have requested the deletion of all links to this personal data or of copies or replications of this personal data.

c) Exceptions
The right to cancellation does not exist insofar as the processing is necessary

1. to exercise freedom of expression and information;
2. for the performance of a legal obligation required for processing under the law of the Union or of the Member States to which the controller is subject or for the performance of a task in the public interest or in the exercise of official authority conferred on the controller;
3. to assert, exercise or defend legal claims.

5. Right to information

If you have exercised your right to have the data controller correct, delete or limit the processing, he/she is obliged to inform all recipients to whom the personal data concerning you have been disclosed of this correction or deletion of the data or restriction on processing, unless this proves impossible or involves a disproportionate effort.
The person responsible shall have the right to be informed of such recipients.

6. Right to data transferability

You have the right to receive the personal data concerning you that you have provided to the person responsible in a structured, common and machine-readable format. In addition, you have the right to pass this data on to another person in charge without obstruction by the person in charge to whom the personal data was provided, provided that

1. processing is based on consent pursuant to Art. 6 para. 1 lit. a GDPR or on a contract pursuant to Art. 6 para. 1 lit. b GDPR and
2. processing is carried out by means of automated methods.

In exercising this right, you also have the right to request that the personal data concerning you be transferred directly from one data controller to another data controller, insofar as this is technically feasible. The freedoms and rights of other persons must not be affected by this.
The right to transferability shall not apply to the processing of personal data necessary for the performance of a task in the public interest or in the exercise of official authority conferred on the controller.

7. Right of objection

You have the right to object at any time to the processing of personal data concerning you on the basis of Art. 6 para. 1 sentence 1 letter f GDPR for reasons arising from your particular situation.
The data controller no longer processes the personal data concerning you, unless he can prove compelling reasons worthy of protection for the processing, which outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.
If the personal data concerning you are processed for direct marketing purposes, you have the right to object at any time to the processing of the personal data concerning you for the purpose of such advertising.
If you object to the processing for direct marketing purposes, the personal data concerning you will no longer be processed for these purposes.

If you would like to make use of your right of objection, please inform the respective responsible person under one of the contact possibilities mentioned in I.

8. Right to revoke the data protection declaration of consent

You have the right to revoke your data protection declaration of consent at any time. The revocation of consent does not affect the legality of the processing carried out on the basis of the consent until revocation (no retroactive effect of the revocation). If you would like to make use of your right of revocation, please inform the respective responsible person under one of the contact possibilities mentioned in I.

9. Automated decision in individual cases

You have the right not to be subject to a decision based exclusively on automated processing that has legal effect against you or significantly impairs you in a similar manner. This does not apply if the decision

1. is necessary for the conclusion or performance of a contract between you and the person responsible,
2. the legislation of the Union or of the Member States to which the person responsible is subject is admissible and that legislation contains appropriate measures to safeguard your rights, freedoms and legitimate interests; or
3. with your express consent.

In the cases referred to in (1) and (3), the person responsible shall take reasonable measures to safeguard your rights, freedoms and legitimate interests, including at least the right to obtain the intervention of a person by the person responsible, to state his own position and to challenge the decision.

10. Right of appeal to a supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right of appeal to a supervisory authority, in particular in the Member State where you reside, work or suspect of infringement, if you believe that the processing of personal data concerning you is contrary to the GDPR.
The supervisory authority to which the complaint has been lodged shall inform the complainant of the status and results of the complaint, including the possibility of a judicial remedy under Art. 78 GDPR.

We use the most common SSL procedure (Secure Socket Layer) in connection with the highest level of encryption supported by your browser. Usually this is a 256 bit encryption. If your browser does not support 256-bit encryption, we use 128-bit v3 technology instead. Whether a single page of our website is transmitted in encrypted form is indicated by the closed display of the key or lock symbol in the lower status bar of your browser.
We also use suitable technical and organisational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or unauthorised access by third parties. Our security measures are continuously improved in line with technological developments.

This data protection declaration is valid as of February 2022

Due to future changes and extensions of our online offer or due to changed legal or official requirements, a change of this data protection declaration may become necessary. You can find the current data protection declaration at https://www.boellhoff.com/us-en .