Privacy policy.

The responsible party within the meaning of the data protection laws, in particular the EU General Data Protection Regulation (DSGVO), is:

BGA Media GmbH (WEBSITE OWNERS)

1. General notice

The operators of these pages (the controller) take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the legal data protection regulations as well as this privacy policy.

In cooperation with our hosting providers, we take every possible precaution to protect the databases as well as possible against unauthorized access, loss, misuse or falsification.

We would like to point out that data transmission on the Internet (e.g. communication by e-mail) can have security gaps. A complete protection of data against access by third parties is therefore not possible.

By using this website, you consent to the collection, processing and use of data in accordance with the following description. This website can be visited without registration. For statistical reasons, data, such as date and time of access, pages accessed or names of files accessed are stored on the server. This data cannot be linked to individual users. If personal data, in particular name, address or e-mail address are collected, this happens entirely on a voluntary basis. Without consent, data will not be passed on to third parties.

2. Cookies

In order to constantly improve the user-friendliness of our website, we monitor the usage of our website.

3. Collection of general data and information

This website collects a series of general data and information when a data subject or automated system calls up the website. This general data and information are stored in the server log files. Collected may be (1) the browser types and versions used, (2) the operating system used by the accessing system, (3) the website from which an accessing system reaches our website (so-called referrers), (4) the sub-websites which are targeted by the system accessing our website, (5) the date and time of access to the website, (6) an IP address, (7) the internet service provider of the accessing system, and (8) similar data and information that may be used in the event of attacks on our information technology systems. When using these general data and information, the website owners do not draw any conclusions about the data subject. Rather, this information is needed to (1) deliver the content of our website correctly, (2) ensure the long-term viability of our information technology systems and website technology, and (3) provide law enforcement authorities with the information necessary for criminal prosecution in case of a cyber-attack. Therefore, the website owners analyzes anonymously collected data and information statistically, with the aim of increasing the data protection and data security, and to ensure an optimal level of protection for the personal data we process. Server log files are stored separately from all personal data provided by a data subject.

4. Contact through the website

According to legal requirements, this website contains information that enables a quick electronic contact, as well as direct communication with us, through e-mail. If a data subject contacts us by e-mail, the personal data transmitted by the data subject are automatically stored. Such personal data transmitted on a voluntary basis by a data subject to the data controller are stored for the purpose of processing or contacting the data subject. There is no transfer of this personal data to third parties. Art. 6 I lit. f DSGVO further permits further processing if it is necessary to preserve legitimate interests of us or a third party as long as civil rights and fundamental freedom of the respective data subject don’t prevail. We take every precaution to protect your data from loss, misuse, unauthorized access, unauthorized distribution, distortion or destruction. Your data are stored on a password protected server, to which only a limited number of persons have access.

5. Routine erasure and blocking of personal data

The data controller shall process and store the personal data of the data subject only for the period necessary to achieve the purpose of storage, or as far as this is granted by the European legislator or other legislators in laws or regulations to which the controller is subject to.

If the storage purpose is no longer applicable, or if a storage period prescribed by the European legislator or any other competent legislator expires, the personal data are routinely blocked or erased in accordance with legal requirements.

6. Rights of the data subject (user)

As a user of our web services, you have the right at any time to free access to your stored personal data, their origin and recipient, the purpose of data processing, as well as the right to correction, blocking or deletion of this data. Simply contact us at any time under the address provided with your query in this regard or to ask further question on the issue of personal data management.

7. Data protection provisions about the application and use of Vimeo

Videos from Vimeo are embedded on our website, which is operated by Vimeo LLC, 555 West 18th Street, New York 10011 (“Vimeo”).

The plugins are marked with a Vimeo logo, for example in the form of the letter “V” or the lettering “vimeo”.

When you access a page of our website that contains such a plugin, your browser establishes a direct connection to the servers of Vimeo. The content of the plugin is transmitted by Vimeo directly to your browser and integrated into the page. Through this integration, Vimeo receives the information that your browser has accessed the corresponding page of our website, even if you do not have a Vimeo profile or are not currently logged in to Vimeo.

This information (including your IP address) is transmitted by your browser directly to a Vimeo server in the USA and stored there. If you are logged in to Vimeo, Vimeo can directly assign your visit to our website to your Vimeo account. If you interact with the plugins, for example by clicking the “Vimeo” button, this information is also transmitted directly to a server of Instagram and stored there.

The information is also published on your Vimeo account and displayed there to your contacts.

If you do not want Vimeo to assign the data collected via our website directly to your Vimeo account, you must log out of Vimeo before visiting our website.

For more information, see the privacy policy (https://vimeo.com/privacy) of Vimeo.

8. Legal basis for processing

Art. 6(1) lit. a GDPR serves as the legal basis for processing operations for which we obtain consent for a specific processing purpose. If the processing of personal data is necessary for the performance of a contract to which the data subject is party, as is the case, for example, when processing operations are necessary for the supply of goods or to provide any other service, the processing is based on Article 6(1) lit. b GDPR. The same applies to such processing operations which are necessary for carrying out pre-contractual measures, for example in the case of inquiries concerning our products or services. Is our company subject to a legal obligation by which processing of personal data is required, such as for the fulfillment of tax obligations, the processing is based on Art. 6(1) lit. c GDPR. In rare cases, the processing of personal data may be necessary to protect the vital interests of the data subject or of another natural person. This would be the case, for example, if a visitor were injured in our company and his name, age, health insurance data or other vital information would have to be passed on to a doctor, hospital or other third party. Then the processing would be based on Art. 6(1) lit. d GDPR. Finally, processing operations could be based on Article 6(1) lit. f GDPR. This legal basis is used for processing operations which are not covered by any of the above mentioned legal grounds, if processing is necessary for the purposes of the legitimate interests pursued by our company or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data. Such processing operations are particularly permissible because they have been specifically mentioned by the European legislator. He considered that a legitimate interest could be assumed if the data subject is a client of the controller (Recital 47 Sentence 2 GDPR).

9. The legitimate interests pursued by the controller or by a third party

Where the processing of personal data is based on Article 6(1) lit. f GDPR our legitimate interest is to carry out our business in favor of the well-being of all our employees and the shareholders.

10. Period for which the personal data will be stored

The criteria used to determine the period of storage of personal data is the respective statutory retention period. After expiration of that period, the corresponding data is routinely deleted, as long as it is no longer necessary for the fulfillment of the contract or the initiation of a contract.

11. Provision of personal data as statutory or contractual requirement; Requirement necessary to enter into a contract; Obligation of the data subject to provide the personal data; Possible consequences of failure to provide such data

We clarify that the provision of personal data is partly required by law (e.g. tax regulations) or can also result from contractual provisions (e.g. information on the contractual partner). Sometimes it may be necessary to conclude a contract that the data subject provides us with personal data, which must subsequently be processed by us. The data subject is, for example, obliged to provide us with personal data when our company signs a contract with him or her. The non-provision of the personal data would have the consequence that the contract with the data subject could not be concluded. Before personal data is provided by the data subject, the data subject must contact any employee. The employee clarifies to the data subject whether the provision of the personal data is required by law or contract or is necessary for the conclusion of the contract, whether there is an obligation to provide the personal data and the consequences of non-provision of the personal data.

12. Existence of automated decision-making

As a responsible company, we do not use automatic decision-making or profiling.

13. Amendment of Privacy Statement

We may update our Privacy Statement from time to time. Updates of our Privacy Statement will be published on our website. Any updates become effective upon publication on our website. We therefore recommend that you regularly visit this site to keep yourself informed on possible updates.

This Privacy Policy has been generated with the help of the Privacy Policy Generator developed in cooperation with RC GmbH, which sells used notebooks and the Media Law Lawyers from WBS-LAW.