Data protection declaration

This data protection declaration (Version: GDPR 1.0 dated 5/14/2018) was produced by the:
German Data Protection Office, Data Protection Office Munich – www.deutsche-datenschutzkanzlei.de

Data protection
We at Blaser Group GmbH are responsible for this online offer and, as the provider of a teleservice, we must inform you at the beginning of your visit to our online offer about the type, scope and purposes of the collection and use of personal data in a precise, transparent, comprehensible and easily accessible form in clear, straightforward language. The content of the information must be available to you at all times. Therefore, we are required to inform you which personal data is collected or used. Personal data is deemed to be all information which relates to an identified or identifiable natural person.

We place great importance on the security of your data and compliance with data protection regulations. The collection, processing and use of personal data is subject to the provisions of current European and national law.

With the following data protection declaration, we would like to show you how we handle your personal data and how you can contact us:

Blaser Group GmbH 
Ziegelstadel 1
88316 Isny im Allgäu
Germany
Commercial register No.: HRB 726822
Managing Director: Dr. Jens Uwe Drowatzky
Telephone: +49 7562 702-0
E-Mail: info@blaser-group.com

Our data protection officer

If you have any questions, please contact our data protection officer as follows:

DSB Münster GmbH
Hr. Heiner Niehüser
Martin-Luther-King-Weg 42-44
48155 Münster
E-Mail: datenschutz@dsb-ms.de
URL: www.dsb-ms.de

A. General

For reasons of clarity, our data protection declaration does not differentiate between the genders. For the purpose of equal treatment, the corresponding terms shall apply for both genders.

The meaning of the terms used, such as “personal data” or its “processing” can be found in Art. 4 of the EU General Data Protection Regulation (GDPR).
The personal data of users processed within the scope of this online offer includes inventory data (e.g. names and addresses of customers), contractual data (e.g. services used, names of agents, payment information), usage data (websites visited in our online offer, interest in our products) and content data (e.g. entries in the contact form).
The term “user(s)” includes all categories of persons affected by data processing, such as our business partners, customers, interested parties and other visitors to our online offer.

 

B. Specific

Data protection declaration
We guarantee that we shall only collect, process, store and use your data in connection with the processing of your inquiries and for internal purposes, as well as to provide the requested services or content.

Bases for data processing
We process the personal data of users solely in compliance with the relevant data protection regulations. Users’ data is only processed in the following cases of legal permission:

  • To provide our contractual services (e.g. processing of orders) as well as online services;
  • the processing is required by law,
  • if you have given your consent, or
  • on the basis of our legitimate interests (i.e. interest in the analysis, optimization and cost-effective operation and security of our online offer within the meaning of Art. 6 Para. 1(f) GDPR, in particular for range measurement, the creation of profiles for advertising and marketing purposes as well as the collection of access data and use of third-party services)

We would like to point out where the aforementioned legal bases are regulated in the GDPR:

Consent Art. 6 Para. 1(a) and Art. 7 GDPR
Processing to fulfill our services and carry out contractual measures Art. 6 Para. 1(b) GDPR
Processing to fulfill our legal obligations Art. 6 Para. 1(c) GDPR
Processing to safeguard our legitimate interests Art. 6 Para. 1(f) GDPR

 

Transfer of data to third parties
We only forward data to third parties in line with statutory requirements. We only then forward user data to third parties if these are required, for instance, for contractual purposes, or on the basis of the legitimate interest of our commercial and effective business operations.

If we instruct sub-contractors to provide our services, we take the appropriate legal precautions along with adequate technical and organisational measures to ensure the protection of personal data in accordance with the relevant statutory provisions.

We would like to point out that data is transferred when using our online offer due to the use of Google Analytics.

Data transmission to a third country or an international organization
A third country is deemed to be one in which the GDPR is not a directly applicable law. In principal, this includes all countries outside the EU or the European Economic Area.
Data will be transmitted a third-party country or an international organization. In the process, care will be taken to ensure that suitable/appropriate guarantees exist there and that enforceable rights and effective remedies are available to you.

You can obtain a copy of the requisite guarantees at the following links:

Storage period of your personal data
We shall observe the principles of data economy and data avoidance. This means that we store the data that you provide to us only for as long as necessary to fulfill the aforementioned purposes or as long as the various storage periods prescribed by the legislator. If the respective purpose expires or after the expiry of the corresponding periods, your data shall be routinely blocked and deleted in accordance with the statutory guidelines.
For this purpose, we have developed an internal company concept to ensure this procedure.

Contacting Blaser Group GmbH
If you contact us by e-mail, by phone or via the contact form, you agree to the electronic communication. Personal data is collected when you contact us. The data that is collected in the case of a contact form can be seen from the respective contact form. Your data shall be transmitted securely (SSL encryption). The information that you provide shall be stored solely for the purpose of processing your inquiry as well as for possible follow-up questions.

We would like to mention the legal bases for this:

Processing to fulfill our services and carry out contractual measures Art. 6 Para. 1(b) GDPR
Processing to safeguard our legitimate interests Art. 6 Para. 1(f) GDPR

We use software to maintain customer data (CRM system) or similar software based on our legitimate interests (efficient and timely processing of user inquiries).
We have concluded a contract processing agreement with the provider in this regard in which the provider undertakes to process user data only in accordance with our instructions and to comply with the EU data protection level.
We would like to point out that e-mails may be read or changed during transmission without authorization and unnoticed. We would also like to point out that we use a software to filter out unwanted e-mails (spam filter). The spam filter can reject e-mails that have been incorrectly identified as spam due to certain features.

What are your rights?

a) Right to information
You have the right to obtain free-of-charge information about your stored data. Upon request, we shall inform you in writing about the nature of the personal data that we have stored about you in accordance with applicable law. This shall also include the origin and the recipients of your data as well as the purpose of the data processing.

b) Right to correction
You have the right to have your personal data stored with us corrected if it is incorrect. You can request a restriction of the processing, e.g. if you dispute the accuracy of your personal data.

c) Right to block
You can also have your data blocked. To ensure that your data can be blocked at any time, this data must be maintained in a lock file for control purposes.

d) Right to deletion
You may also request the deletion of your personal data as long as no statutory storage obligations exist. If such an obligation exists, we shall block your data upon request. If the relevant legal requirements exist, we shall delete your personal data even if you do not request it.

e) Right to data transferability
You are entitled to request that we provide the personal data transmitted to us in a form which allows it to be transmitted to another location.

f) Right of appeal to a supervisory authority
You have the opportunity to contact one of the data protection supervisory authorities with a complaint.

State representative for data protection and freedom of information Baden-Württemberg.
Postal address: P.O.Box 10 29 32, 70025 Stuttgart, Germany
Home address: Königstraße 10a, 70173 Stuttgart, Germany
Telephone +49 711 615541–0
Telefax: +49 711 615541–15
E-mail: poststelle(at)lfdi.bwl.de
Web: https://www.baden-wuerttemberg.datenschutz.de

You can open the complaint form via the following link: https://www.baden-wuerttemberg.datenschutz.de/online-beschwerde

g) Right to object
You may revoke the use of your data for internal purposes with effect for the future at any time. It is sufficient to send an e-mail to datenschutz@blaser-group.de in this regard. However, such a revocation shall not affect the legality of the processing procedures that we have carried out up to that point. This shall not affect data processing with regard to all other legal bases, such as the initiation of contracts (see above).

Protection of your personal data
We shall take contractual, organizational and technical security measures in accordance with the state of the art to ensure that the regulations of the data protection laws are observed, and also to protect the data processed by us against any accidental or intentional manipulation, loss, destruction or against access by unauthorized persons.

The security measures include in particular the encrypted transmission of data between your browser and our server. 256-bit-SSL (AES 256) encryption technology is used for this purpose.

Your personal data is protected in the following ways (excerpt):
a) Safeguarding the confidentiality of your personal data
We have taken different measures for entry, admission and access control to safeguard the confidentiality of your personal data stored with us.

b) Safeguarding the integrity of your personal data
We have taken different measures for transfer and input control to maintain the integrity of your data stored with us.

c) Maintaining the availability of your personal data
We have taken different measures for order and availability control to maintain the availability of your personal data stored us.
The security measures used are improved on an ongoing basis in line with technological developments. Despite these precautions, we cannot guarantee the security of your data transmission to our online offer due to the insecure nature of the Internet. Therefore, any data that you transmit to our online offer is at your own risk.

Protection of minors
Persons under the age of 16 may not transmit any personal data to us without the consent of their legal guardian(s). Personal information may only be made available to us by persons under the age of 16 if they have the express consent of their guardian(s), or by persons who are 16 years of age or older. Said data shall be processed in accordance with this data protection declaration.

Cookies
We use cookies. Cookies are small text files which are stored locally in the cache of your Internet browser. Cookies enable the recognition of the Internet browser. The files are used to help the browser navigate through the online offer and be able to use all functions fully.
Our online offer uses: Browser cookies

Control of cookies by the user
Browser cookies: You can set all browsers to only accept cookies on request. Furthermore, only cookies whose pages are currently being visited can be accepted. All browsers offer functions which enable the selective deletion of cookies. The acceptance of cookies can also be generally turned off; however, all restrictions on the user-friendliness of this online offer have to be accepted.

Using first-party cookies (Google Analytics cookies)
Log Google Analytics cookies:

  •  Unique users – Google Analytics cookies collect and group your data. All activities during a visit are summarized. A distinction is made between users and unique users by setting Google Analytics cookies.
  •  User activities – Google Analytics cookies also store data about the start and end time of a visit to the online offer and how many pages you have viewed. When the browser is closed or the user is inactive for a longer period (default 30 minutes), the user session is ended and the cookie records the visit as finished. The date and the time of the first visit are also recorded. The total number of visits per unique user is also logged. External link: http://www.google.com/analytics/terms/de.html

You can prevent Google from collecting the data generated by the cookie and relating to the use of the online offer (incl. your IP address) and from processing this data by downloading and installing the following link in the browser plug-in: External link: http://tools.google.com/dlpage/gaoptout?hl=de.

Further information is available under the point “Web analysis service Google Analytics/Universal Analytics”.

Lifetime of the cookies used
Cookies are managed by the web server of our online offer. This online offer uses:
Persistent cookies (permanent browser identification)
Lifetime: 2 years

Disable or remove cookies (opt-out)
Every web browser offers the option to restrict and delete cookies. Further information is available on the following websites:

 

Web analysis Google Analytics/Universal Analytics
We use Google Analytics, a web analysis service of Google Inc. (“Google”). Google Analytics uses “cookies”, which are text files placed on your computer to enable analysis of the use of the online offer. The information generated by the cookie about the use of this online offer is usually transmitted to a Google server in the USA and stored there. Thus, data is transmitted to a third country. In the process, care will be taken to ensure that suitable/appropriate guarantees exist there and that enforceable rights and effective remedies are available to you.

You can obtain a copy of the requisite guarantees at the following links:

If IP anonymization is activated in our online offer, your IP address will be truncated by Google within the area of the Member States of the European Union or in other countries which are party to the Agreement on the European Economic Area.
However, your full IP address will be transmitted to a Google server in the USA and truncated there only in exceptional cases. Google uses this information on our behalf to evaluate the use of our online offer, to compile reports on the activities of online offer and to provide further services to us associated with the use of the online offer and the Internet. The IP address that your browser conveys within the scope of Google Analytics will not be associated with any other data held by Google. You may prevent the storage of cookies by selecting the appropriate settings in your browser software. However, please note that you may not be able to use all the functions of this online offer as a result.
We would like to inform you that this online offer uses Google Analytics with the extension “_anonymizeIp()”, which only allows IP addresses to be processed in a truncated form to prevent them from being linked directly to persons.
Furthermore, we use Google Analytics reports to collect demographic features and interests.
The user names sent by us and with cookies (e.g. user ID) or data linked with advertising IDs shall be automatically deleted after 14 months. Data whose retention period has been reached shall be deleted automatically once a month. Further information on usage conditions and data protection is available athttps://www.google.com/analytics/terms/de.html or at https://policies.google.com/?hl=de

Furthermore, you can prevent Google from collecting the data generated by the cookie and relating to the use of the online offer (incl. your IP address) and from processing this data by downloading and installing the following link in the browser plug-in: http://tools.google.com/dlpage/gaoptout?hl=de.

As an alternative to the browser plug-in or for browsers on mobile devices, please click on the following link to set an opt-out cookie which prevents Google Analytics from collecting data (this opt-out cookie only functions in this browser and only for this domain; if you delete the cookies in this browser, click on the link again):

Click here to opt-out of Google Analytics

 

Changing our data protection provisions
We reserve the right to occasionally adjust our data protection declaration so that it always corresponds to the current legal requirements, or to implement changes in our services in the data protection declaration. This may affect the introduction of new services, for example. The new data protection declaration shall then apply for any further visits that you make to our online offer.

Brand protection
Every trade mark or logo shall be the property of the respective company. Trademarks and names are mentioned for purely informative purposes.

 

C. Russia-specific provisions

The following shall apply for users who are resident in the Russian Federation:
The afore-mentioned services of our online offer are not provided for citizens of the Russian Federation who are resident in Russian.
If you are a Russian citizen resident in Russia, please note that any personal data that you provide to us via this online offer shall be exclusively at your own risk and responsibility. You also agree that you shall not make us responsible for any non-compliance with laws of the Russian Federation.