Welcome to our website and thank you for your interest in our company. We take the protection of your personal data very seriously. We process your data in accordance with applicable personal data protection legislation, in particular the GDPR and our country-specific implementation laws, which provide comprehensive information about the processing of your personal data by BARTEC Top Holding GmbH and your rights.
Personal data is any information that makes it possible to identify a natural person. This includes, in particular, your name, date of birth, address, telephone number, email address and IP address.
Anonymous data is available if no personal reference to the individual/user can be made.
- Responsible body and data protection officer
- Your rights as a data subject
- Right to object
- Purposes and legal bases of data processing
- Data transfers / Disclosure to third parties
- Data recipients / categories of recipients
- Transfers of personal data to third countries
- Period of data storage
- Secure transfer of data
- Obligation to provide data
- Data categories, sources and origin of data
- Contact form / Contact via email
- Application portal
- Automated decisions in individual cases
- Web tracking
- Social plugins
- Links to other providers
- Links to other providers
- Links to other providers
- Registration for the HELOC Pro software
1. Responsible body and data protection officer
2. Your rights as a data subject
We would first like to notify you of your rights as a data subject. These rights are set out in Articles 15 – 22 GDPR, and include:
- The right of access (Art. 15 GDPR),
- The right to rectification (Art. 16 GDPR),
- The right to data portability (Art. 20 GDPR),
- The right to object to data processing (Art. 21 GDPR),
- The right to erasure / right to be forgotten (Art. 17 GDPR),
- The right to restriction of data processing (Art. 18 GDPR).
To exercise these rights, please contact: email@example.com. The same applies if you have any questions regarding data processing in our company or when you withdraw your consent. You also have a right of appeal to the relevant data protection supervisory authority.
3. Right to object
Please note the following with respect to your right to object:
When we process your personal data for the purpose of direct marketing, you have the right to object to this data processing at any time without providing the reasons for such objection. This also applies to profiling insofar as it is associated with direct marketing.
If you object to the processing for direct marketing, we will no longer process your personal data for such purposes. The objection is free of charge and can be made informally, where appropriate to: firstname.lastname@example.org.
Should we process your data to protect legitimate interests, you may object to such processing at any time for reasons that arise from your specific situation; this also applies to profiling based on these provisions.
We will then cease to process your personal information unless we can demonstrate compelling legitimate grounds for processing such information that outweigh your interests, rights and freedoms, or the processing is intended to assert, exercise or defend legal claims.
4. Purposes and legal bases of data processing
The processing of your personal data complies with the provisions of the GDPR and all other applicable data protection regulations. Legal bases for data processing arise in particular from Art. 6 GDPR.
We use your data to initiate business, to fulfil contractual and legal obligations, to conduct the contractual relationship, to offer products and services and to consolidate customer relationships, which may include marketing and direct marketing.
Your consent also constitutes a data protection regulation. In this respect, we will inform you of the purposes of data processing and the right to withdraw your consent. If the consent also relates to the processing of special categories of personal data, we will explicitly notify you in the consent process
Processing of special categories of personal data within the meaning of Art. 9 (1) GDPR may only take place where necessary on the grounds of legal regulations and there is no reason to assume that your legitimate interests should prevail to the exclusion of processing such data.
5. Data transfers / Disclosure to third parties
We will only transmit your data to third parties within the scope of given statutory provisions or based on consent. In all other cases, information will not be transferred to third parties unless we are obliged to do so owing to mandatory legal regulations (disclosure to external bodies, including the supervisory authorities or law enforcement authorities).
6. Data recipients / categories of recipients
In our organisation, we ensure that only individuals who are required to process the relevant data to fulfil their contractual and legal obligations are authorised to handle personal data.
In many cases, service providers assist our specialist departments to fulfil their tasks. The necessary data protection contract has been concluded with all service providers.
7. Transfers of personal data to third countries
A transfer of data to third countries (outside the European Union or the European Economic Area) shall only take place if required by law or if you have provided your consent for such a transfer.
8. Period of data storage
We store your data for as long as such is required for the relevant processing purposes. Please note that numerous retention statutory periods require that data must be stored for a specific period of time. This relates in particular to retention obligations for commercial or fiscal purposes (e.g. commercial code, tax code, etc.). The data will be routinely deleted after use unless a further period of retention is required.
We may also retain data if you have given us your permission to do so, or in the event of any legal disputes and we use the evidence within the statutory limitation period, which may be up to 30 years; the standard limitation period is 3 years.
9. Secure transfer of data
We implement the appropriate technical and organisational security measures to ensure the optimal protection of the data stored by us against accidental or intentional manipulation, loss, destruction or access by unauthorised persons. The security levels are continuously reviewed in collaboration with security experts and adapted to new security standards.
The data exchange to and from our website is encrypted. We provide https as a transfer protocol for our website, and always use the current encryption protocols. In addition, we offer our users content encryption in our contact forms and applications. We alone can decrypt this data .It is also possible to use alternative communication channels (e.g. surface mail).
10. Obligation to provide data
A range of personal data is required to establish, implement and terminate the obligation and the fulfilment of the relevant contractual and legal obligations. The same applies to the use of our website and the various functions we provide.
We have summarised the relevant details in the above point. In some cases, legal regulations require data to be collected or made available. Please note that it will not be possible to process your request or execute the underlying contractual obligation without this information.
11. Data categories, sources and origin of data
The data we process is defined by the relevant context: it depends on whether, for example, you place an order online, enter a request on our contact form or if you want to send us an application or submit a complaint.
Please note that we may also provide information at specific points for specific processing situations separately where appropriate, e.g. when uploading application documents or when making a contact request.
We collect and process the following data when you visit our website:
- Name of the Internet service provider
- Web browser and operating system used
- Information on the website from which you visited us
- The IP address by your allocated Internet service provider
- Files accessed, volume of data transferred, downloads/file export
- Information on websites accessed on our site, including date and time
For reasons of technical security (in particular to safeguard against attempts to attack of our web server), this data is stored in accordance with Article 6 (1) lit f GDPR. Anonymisation takes place no later than after seven days by abbreviating the IP address so that no reference is made to the user.
Where applicable: we collect and process the following data as part of a contact request:
As compulsory information
- Street, house number, zip code, city
- Security check
As voluntary information
- Your areas of interest
- Additional Information
Where applicable: we collect and process the following data as part of online applications:
- Last name, first name (eventually: title)
- E-mail address
- Password and password confirmation
- Contact details
- Other information that you provide us with in your application (eg resume, certificates)
- We also use data that we have legitimately gained from publicly accessible directories (e.g., professional networks).
12. Contact form / Contact via email (Article 6 (1) lit a, b GDPR)
A contact form is available on our website which can be used to contact us electronically. If you write to us using the contact form, we will process the data you submitted in the contact form to respond to your queries and requests.
In so doing, we respect the principle of data minimisation and data avoidance, such that you only have to provide the information we require to contact you, which is your postal address, your email address, your phone number and the message field itself. Your IP address will also be processed for technical reasons and for legal protection. All other data is voluntary, and additional fields are optional (e.g. to provide a more detailed response to your questions).
If you contact us by email, we will process the personal information provided in the email solely for the purpose of processing your request. If you do not contact us using the forms provided, no additional data will be collected.
13. Application portal (Article 6 (1) lit a, b GDPR)
Thank you for your interest in the activities of our BARTEC Top Holding GmbH. We are aware of the importance of your data and process the personal data you provide on the application form solely for the purposes of the effective and correct execution of the application process and for contacting you during the application process. We shall not disclose data to third parties without your consent.
As part of the application form you will be asked to provide personal information. In so doing, we respect the principle of data minimisation and data avoidance, such that you only have to provide the information we require to carry out a review your application documents, e.g.: your curriculum vitae or if we are legally obliged to collect such information. The mandatory fields are marked with a (*). Your IP address will also be processed for technical reasons and for legal protection.
We cannot review your application documents without this data, so in this case our application system will not allow us to upload the application documents. You can, of course, submit voluntary information on the application form.
We implement the appropriate security measures to ensure the optimum protection of your data. Your application documents will be encrypted and transmitted to us through our application system.
We store your data for the above purpose until the application process has been completed and the relevant deadlines have expired, which will be no later than six months after receipt of a decision. However, you may allow us to store your application documents for a longer period to review them for other vacancies that match your profile.
We require your consent for this, which you can provide by clicking the checkbox prior to uploading your application documents. In this case, we will store your data for 12 months. You can of course always give your consent at any time without stating reasons with effect for the future by e-mail to email@example.com or by post to BARTEC GmbH, Max-Eyth-Str. 16, 97980 Bad Mergentheim revoked.
14. Automated decisions in individual cases
We do not use purely automated processing to make decisions.
Our website uses “cookies” at various locations, which serve to make our offer more user-friendly, effective and secure. Cookies are small text files that are placed on your computer and stored by your browser (locally on your hard disk).
Cookies enable us to analyse how users use our websites so we can design the website content in accordance with the visitor’s needs. Cookies also allow us to measure the effectiveness of a particular ad and, for example, to place it based on the user’s interests.
Most of the cookies we use are “session cookies”, which will be automatically deleted after your visit. Persistent cookies are automatically deleted from your computer when their validity period (generally six months) has expired or you delete them yourself prior to expiry.
Most web browsers automatically accept cookies. You can generally change your browser’s settings if you prefer not to send the information. You can still use the offers on our website without restrictions (exception: configurators).
Please note: If you deactivate the placing of cookies on your device, you may not be able to access all our website functions in certain circumstances.
16. Web tracking
This website uses Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland (“Google”). Google Analytics uses so-called “cookies”, text files that are stored on your computer that allow an analysis of how you use the website. The information generated by the cookies about the use of this website is usually transmitted to a Google server in the USA and stored there. By activating the IP anonymization on this website, however, your IP address will be truncated by Google beforehand within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases, will the full IP address be transmitted to a Google server in the USA and truncated there. On behalf of the operator of this website, Google will use this information to evaluate the use of the website, to compile reports on website activity and to provide other services related to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.
Google is certified under the Privacy Shield Agreement and thus offers a guarantee to comply with European data protection law.
The legal basis for this is your informed consent Article 6 (1) a GDPR.
The personal data of users will be deleted or anonymized after 14 months.
You can prevent the storage of cookies by setting the browser software accordingly; however, we would like to point out that in this case you may not be able to make full use of all the functions of this website.
You can also prevent Google from collecting the data generated by the cookie and related to your use of the website (including your IP address) and the processing of this data by Google by downloading and installing the browser plug-in available under the following link https://tools.google.com/dlpage/gaoptout?hl=de.
As an alternative to the browser add-on or within browsers on mobile devices, please click this link to prevent detection by Google Analytics within this website in the future:
An opt-out cookie will be stored on your device. If you delete your cookies, you will need to click this link again.
Please note that on this website Google Analytics has been extended to include the code “gat. _ anonymizeIp () ” to ensure an anonymised collection of IP addresses (so-called IP masking).
For the purpose of marketing and optimization, products and services of wiredminds GmbH (www.wiredminds.de) are used on this website. Data is collected, processed and stored, from which usage profiles are created under a pseudonym. The legal basis for processing is Article 6 (1) lit f GDPR . The website operator has a legitimate interest in analyzing user behavior in order to optimize both its website and its advertising. Where possible and useful the usage profiles are completely anonymous. Cookies can be used for this purpose. Cookies are small text files that are stored in the visitor’s Internet browser and serve to recognize the Internet browser. The collected data, which may also contain personal data, is transmitted to wiredminds or collected directly from wiredminds. wiredminds may use information that is left by visits to the websites to create anonymized user profiles. The data obtained will not be used to personally identify the visitor to this website without the separately granted consent of the person concerned, and they will not be combined with personal data about the bearer of the pseudonym. As far as IP addresses are collected, they will be anonymized immediately after collection by deleting the last number block. Data collection, processing and storage can be objected to at any time with future effect.
Exclude from tracking.
For more information about privacy at Google, see https://policies.google.com/technologies/ads?hl=en If you want to stop this tracking, then you can use the following link: https://www.google.com/settings/ads/plugin?hl=de
Google Tag Manager
This website uses Google Tag Manager. This service allows web page tags to be managed through a single interface. Google Tool Manager only implements tags. This means: no cookies are used and no personal data is collected. Google Tool Manager triggers other tags, which may collect data. However, Google Tag Manager does not access this data. If deactivated at the domain or cookie level, it will remain in effect for all tracking tags as far as they are implemented with the Google Tag Manager
17. Social plugins
18. Links to other providers
Our website also contains clearly identifiable links to the Internet sites of other companies. Although we provide links to websites of other providers, we have no influence on their content, and no guarantee or liability can therefore be assumed for such. The content of these pages is always the responsibility of the respective provider or operator of the pages.
The linked pages were checked at the time of linking for potential legal violations and identifiable infringements. No illegal content was identified at the time of linking. However, a permanent content control of the linked pages is not reasonable without concrete evidence of an infringement and, upon notification of a violation of rights, such links will be promptly removed.
19. Links Social Media
On our website you will find links to the social media services of Facebook, Twitter, Google+, YouTube, Pinterest and Instagram. You can recognize links to the websites of the social media services by the respective company logo. If you follow these links, you will reach the corporate image of BARTEC at the respective social media service. When clicking on a link to a social media service, a connection is made to the servers of the social media service. This will communicate to the servers of the Social Media Service that you have visited our website. In addition, further data will be transmitted to the provider of the social media service. These are for example:
- Address of the website where the activated link is located
- Date and time when the website was accessed or when the link was activated
- Information about the browser used and the operating system used
- IP address
20. Information about privacy in the social media
BARTEC Top Holding GmbH maintains appearances in the “social media”. As far as we have control over the processing of your data, we ensure that the applicable data protection regulations are adhered to.
Below you will find the most important information on data protection in relation to our appearances.
Name and address of the person responsible for the operation
Responsible for the company appearances within the meaning of the EU General Data Protection Regulation (GDPR) and other data protection regulations are in addition to the BARTEC Top Holding GmbH
(Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbor, Dublin 2, Ireland)
(Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbor, Dublin 2, Ireland)
(Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland)
(Xing SE, Dammtorstrasse 30, 20354 Hamburg, Germany)
(LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland)
However, you use these platforms and their functions on your own responsibility. This is especially true for the use of interactive features (e.g., commenting, sharing, rating).
We further point out that your data can be processed outside the territory of the European Union. Regarding US providers certified under the Privacy Shield, we point out that these providers are committed to complying with EU privacy standards.
Purpose and legal basis
We ourselves maintain the fan pages to communicate with the visitors of these pages and to inform them in this way about our offers.
In addition, we collect data for statistical purposes in order to further develop and optimize the content and to make our offer more attractive. The data required for this (e.g., total page views, page activity, and visitor-provided data, interactions) are edited and provided by the social networks. We have no influence on the production and presentation.
In addition, your personal data will be processed by the providers of social media for market research and advertising purposes. So it is possible that e.g. Based on your user behavior and the resulting interests usage profiles are created. Among other things, advertisements can be placed inside and outside the platforms that are allegedly in line with your interests. As a rule, cookies are stored on your computer for this purpose. Irrespective of this, data that is not collected directly from your end devices can also be stored in your usage profiles. The storage and analysis is also cross-device, this applies in particular, but not exclusively, if you are registered as a member and logged in to the respective platforms.
In addition, we do not collect and process any personal data that follows.
The processing of your personal data by BARTEC Top Holding GmbH is based on our legitimate interests in effective information and communication in accordance with Art. Article 6 (1) lit f GDPR.
If you are asked to consent to data processing, meaning if you declare your consent by confirming a button or similar (opt-in), the legal basis of the processing is Article 6 (1) lit f GDPR, Article 7 GDPR.
Your rights / opposition
If you are a member of a social network and you do not want the network to collect information about you through our website and link it to your stored membership data on the respective network, you must
- log out of the respective network before visiting our fan page,
- delete the cookies on the device and
- Exit your browser and restart.
However, after logging in again, you will be recognizable to the network again as a specific user.
For a detailed description of the respective processing and the possibilities of contradiction (opt-out), we refer to the following linked data:
Opt-Out: https://www.facebook.com/settings?tab=ads; and http://www.youronlinechoices.com;
Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active
Opt-Out: http://www.networkadvertising.org/managing/opt_out.asp; and http://www.youronlinechoices.com;
Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active
Opt-Out: https://tools.google.com/dlpage/gaoptout?hl=en; and http://www.youronlinechoices.com;
Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active
Opt-Out: https://www.linkedin.com/legal/cookie-policy; and http://www.youronlinechoices.com;
Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt0000000L0UZAA0
21. Registration for the HELOC Pro software (Art. 6 para. 1 lit. b GDPR)
On our website you can register for the use of HELOC Pro.
We process the following data as part of the registration process:
- Last name
- HELOC Programm ID
- Phone nummer
Data collected in the registration process will be processed to send you the access code for the use of HELOC Pro via e-mail.
Data will be further processed to send you important notifications regarding updates of the HELOC Pro software via e-mail.
In carrying out the registration for the HELOC Pro software we are supported by the external service provider ercas GmbH & Co. KG. The necessary data protection contract has been concluded with the service provider.
In total, you have the following rights regarding the processing of your personal data: Right to information; Right to rectification; Right to erasure; Right to restriction of processing; Right to objection; Right to data portability; Right to complain about illegal processing of your personal data by the competent data protection authority.
However, as BARTEC Top Holding GmbH does not have complete access to your personal data, you should contact the social media providers directly for asserting their rights, as they have access to their users’ personal data and can take appropriate measures and provide information , If you still need help, we try to support you, of course. Please contact firstname.lastname@example.org.
Aktueller Stand: 12.11.2019