The following privacy policy applies to the use of our online offering bsa-maschinen.de (hereinafter "website").

We attach great importance to data protection. The collection and processing of your personal data is carried out in compliance with applicable data protection regulations, in particular the General Data Protection Regulation (GDPR).

1. Person responsible

The person responsible for the collection, processing and use of your personal data within the meaning of Art. 4 No. 7 GDPR is

Dipl. - Ing. Andreas Wimmer Leimengrube 5 99098 Erfurt / Urbich

vertrieb@wimmer-umformtechnik.de

Telephone: +49 361 4210004 (Wimmer-Umformtechnik GmbH]

If you wish to object to the collection, processing, or use of your data by us in accordance with this privacy policy in whole or in relation to individual measures, you can address your objection to the person responsible. You can save and print this privacy policy at any time.

2. General purposes of processing

We use personal data for the purpose of operating the website and for processing and use to the extent necessary to process inquiries or orders. To facilitate this task, your data may be shared with third parties involved in order processing, for example, when delivering the goods (e.g., transport companies, parcel services) or when processing your payment (credit institution, bank, leasing).

Furthermore, your personal data will not be passed on to third parties or transferred to third countries outside the EU unless Wimmer Umformtechnik GmbH is legally obliged to do so or you request this yourself.

3. What data do we use and why?

3.1. Hosting

The hosting services we use serve to provide the following services: infrastructure and platform services, computing capacity, storage space and database services, security services and technical maintenance services, which we use for the purpose of operating the website.

We, or our hosting provider, process inventory data, contact data, content data, contract data, usage data, meta and communication data of customers, interested parties and visitors to this website on the basis of our legitimate interests in the efficient and secure provision of our website in accordance with Art. 6 (1) (f) GDPR in conjunction with Art. 28 GDPR.

3.2. Access data

We collect information about you when you use this website. We automatically collect information about your usage behavior and interaction with us, and record data about your computer or mobile device. We collect, store, and use data about every access to our website (so-called server log files). Access data includes:

Name and URL of the retrieved file

Date and time of retrieval

amount of data transferred

Message about successful retrieval (HTTP response code)

Browser type and version

Referrer URL (i.e. the previously visited page)

Websites accessed by the user's system via our website

User's Internet service provider

IP address and the requesting provider

We use this log data without personally identifying you or creating any other profile for statistical evaluations for the purpose of operating, securing, and optimizing our website. We also use it to anonymously record the number of visitors to our website (traffic) and the extent and nature of use of our website and services, as well as for billing purposes and to measure the number of clicks received from cooperation partners. Based on this information, we can provide personalized and location-based content, analyze traffic, search for and correct errors, and improve our services.

This is also our legitimate interest according to Art. 6 (1) (f) GDPR.

We reserve the right to subsequently review the log data if there is reasonable suspicion of illegal use based on concrete evidence. We store IP addresses in the log files for a limited period of time if this is necessary for security purposes or for the provision or billing of a service, e.g., if you use one of our services. After the order process is canceled or after payment has been received, we delete the IP address if it is no longer required for security purposes. We also store IP addresses if we have concrete suspicion of a criminal offense in connection with the use of our website. We also store the date of your last visit (e.g., during registration, login, clicking on links, etc.) as part of your account.

3.3. "Session cookies"

We use so-called "session cookies" to optimize our website. A "session cookie" is a small text file that is sent by the respective servers when you visit a website and temporarily stored on your hard drive. This file contains a so-called session ID, which allows various requests from your browser to be assigned to the shared session. This allows your computer to be recognized when you return to our website. These "cookies" are deleted after you close your browser. They are used, for example, to enable you to use the shopping cart function across multiple pages.

To a limited extent, we also use persistent "cookies" (also small text files stored on your device) that remain on your device and allow us to recognize your browser the next time you visit. These "cookies" are stored on your hard drive and delete themselves after a specified period of time. Their lifespan is one month to ten years. This allows us to present our services in a more user-friendly, effective, and secure way and, for example, to display information on the site that is specifically tailored to your interests.

Our legitimate interest in using cookies pursuant to Art. 6 (1) (f) GDPR is to make our website more user-friendly, effective and secure.

The following data and information is stored in "cookies":

entered search terms

Information about the number of visits to our website and the use of individual functions of our website.

When the cookie is activated, it is assigned an identification number, and your personal data is not linked to this identification number. Your name, IP address, or similar data that would allow the cookie to be associated with you are not stored in the cookie. Based on cookie technology, we only receive pseudonymized information, for example, about which pages of our shop were visited, which products were viewed, etc.

You can set your browser to notify you in advance about the setting of cookies and to decide on a case-by-case basis whether you want to exclude cookies for specific cases or in general, or to block cookies completely. This may limit the functionality of the website.

3.4. Data to fulfill our contractual obligations

We process personal data that we need to fulfill our contractual obligations, such as name, address, email address, ordered products, billing and payment information. Collecting this data is necessary for the conclusion of the contract.

Data will be deleted after the warranty period and statutory retention periods have expired. Data linked to a user account (see below) will remain retained for the duration of the account.

The legal basis for the processing of this data is Art. 6 Para. 1 S. 1 b) GDPR, because this data is required so that we can fulfill our contractual obligations to you.

3.5. Product recommendations

We send you product recommendations by email. This way, we send you information about products from our range that might interest you based on your recent purchases of goods or services from us. In doing so, we strictly adhere to legal requirements. You can withdraw your consent at any time without incurring any costs other than the transmission costs according to the basic rates. A written notification to the contact details listed under section 1 (e.g., email, fax, letter) is sufficient. Of course, you will also find an unsubscribe link in every email.

The legal basis for this is the statutory permission according to Art. 6 Para. 1 S. 1 f) GDPR in conjunction with Section 7 Para. 3 UWG.

3.6. Email contact

If you contact us (e.g. via contact form or email), we will process your information to process your request and in case any follow-up questions arise.

If the data processing is carried out to carry out pre-contractual measures at your request or, if you are already our customer, to carry out the contract, the legal basis for this data processing is Art. 6 (1) (b) GDPR.

We only process further personal data if you consent to this (Art. 6 (1) (a) GDPR) or if we have a legitimate interest in processing your data (Art. 6 (1) (f) GDPR). A legitimate interest, for example, is responding to your email.

4. Google AdWords

Our website uses Google AdWords. Google uses cookies that are stored on your device if you were redirected to our website via a Google ad. These cookies are only valid for a limited time and are not used for personal identification. When you visit certain pages of our website, we and Google can recognize – provided the cookie has not yet expired – that you reached our website via a Google ad. Each Google AdWords customer receives a different cookie. Cookies therefore cannot be tracked across AdWords customers' websites.

4.1. Google Analytics

This website uses data collected by Google Analytics to improve the website's functionality. However, you can opt out of this data collection by downloading and installing a browser add-on.

4.2.Analysis by wiredminds

Our website uses the tracking pixel technology of wiredminds GmbH

(www.wiredminds.de) to analyze visitor behavior.

In doing so, data may be collected, processed, and stored, from which user profiles are created under a pseudonym. Where possible and appropriate, these user profiles are completely anonymized. Cookies may be used for this purpose. Cookies are small text files that are stored in the visitor's Internet browser and are used to recognize the Internet browser. The collected data, which may also contain personal data, is transferred to

wiredminds or collected directly by wiredminds. wiredminds may

Information collected through visits to the website is used to create anonymized user profiles. The data obtained in this way will not be used to personally identify the visitor to this website without the express consent of the data subject, and it will not be merged with personal data about the bearer of the pseudonym. If IP addresses are recorded, they are immediately anonymized by deleting the last block of numbers.

5. Storage period

Unless specifically stated, we only store personal data for as long as necessary to fulfill the purposes pursued.

In some cases, the law requires the retention of personal data, for example, in tax or commercial law. In these cases, we will continue to store the data solely for these legal purposes, but will not process it for any other purpose, and will delete it after the statutory retention period has expired.

6. Your rights as a data subject

Under applicable law, you have various rights regarding your personal data. If you wish to exercise these rights, please send your request by email or post, clearly identifying yourself, to the address stated in Section 1.

Below you will find an overview of your rights.

6.1 Right to confirmation and information

You have the right to clear information about the processing of your personal data.

In detail:

You have the right at any time to obtain confirmation from us as to whether personal data concerning you is being processed. If this is the case, you have the right to request information about the personal data stored about you, along with a copy of this data, free of charge. Furthermore, you have the right to the following information:

the purposes of processing;

the categories of personal data being processed;

the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organisations;

where possible, the envisaged period for which the personal data will be stored, or, where not possible, the criteria used to determine that period;

the existence of a right to rectification or erasure of personal data concerning you or to restriction of processing by the controller or a right to object to such processing;

the existence of a right to lodge a complaint with a supervisory authority;

if the personal data are not collected from you, all available information as to their source;

the existence of automated decision-making, including profiling, pursuant to Art. 22 (1) and (4) GDPR and – at least in these cases – meaningful information about the logic involved, as well as the scope and intended effects of such processing for you.

If personal data is transferred to a third country or to an international organization, you have the right to be informed of the appropriate safeguards pursuant to Art. 46 GDPR in connection with the transfer.

6.2. Right to rectification

You have the right to request that we correct and, if necessary, complete your personal data.

In detail : You have the right to request that we immediately correct any inaccurate personal data concerning you. Taking into account the purposes of the processing, you have the right to request that incomplete personal data be completed, including by means of a supplementary statement.

6.3 Right to erasure ("right to be forgotten")

In a number of cases, we are obliged to delete personal data concerning you.

In detail: According to Art. 17 (1) GDPR, you have the right to request that we delete personal data concerning you immediately, and we are obliged to delete personal data immediately if one of the following reasons applies:

The personal data are no longer necessary for the purposes for which they were collected or otherwise processed.

You withdraw your consent on which the processing was based according to Art. 6 (1) (a) GDPR or Art. 9 (2) (a) GDPR, and there is no other legal basis for the processing.

You object to the processing pursuant to Art. 21 (1) GDPR and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Art. 21 (2) GDPR.

The personal data was processed unlawfully.

The erasure of personal data is necessary to fulfil a legal obligation under Union or Member State law to which we are subject.

The personal data were collected in relation to information society services offered in accordance with Art. 8 (1) GDPR.

If we have made the personal data public and are obliged to delete it pursuant to Art. 17 (1) GDPR, we shall take appropriate measures, including technical ones, taking into account the available technology and the implementation costs, to inform data controllers which process the personal data that you have requested the deletion of all links to these personal data or of copies or replications of these personal data.

6.4 Right to restriction of processing

In a number of cases, you have the right to request that we restrict the processing of your personal data.

In detail: You have the right to request that we restrict processing if one of the following conditions applies:

the accuracy of the personal data is contested by you, for a period enabling us to verify the accuracy of the personal data,

the processing is unlawful and you have opposed the erasure of the personal data and have requested the restriction of their use instead;

we no longer need the personal data for the purposes of processing, but you need the data to assert, exercise or defend legal claims, or

You have objected to the processing pursuant to Art. 21 (1) GDPR, as long as it has not yet been determined whether the legitimate reasons of our company outweigh yours.

6.5 Right to data portability

You have the right to receive, transmit or have us transmit personal data concerning you in a machine-readable format.

In detail: You have the right to receive the personal data concerning you that you have provided to us in a structured, common and machine-readable format and you have the right to transmit this data to another controller without hindrance from us, provided that

the processing is based on consent pursuant to Art. 6 (1) (a) GDPR or Art. 9 (2) (a) GDPR or on a contract pursuant to Art. 6 (1) (b) GDPR and

the processing is carried out using automated procedures.

When exercising your right to data portability pursuant to paragraph 1, you have the right to have the personal data transmitted directly from us to another controller, where technically feasible.

6.6. Right of objection

You have the right to object to the lawful processing of your personal data by us if this is based on your particular situation and our interests in the processing do not outweigh them.

In detail: You have the right to object at any time to the processing of personal data concerning you based on Art. 6 (1) (e) or (f) GDPR , for reasons related to your particular situation; this also applies to profiling based on these provisions. We will no longer process the personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing serves to assert, exercise, or defend legal claims.

If we process personal data for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for the purposes of such advertising; this also applies to profiling insofar as it is related to such direct marketing.

You have the right to object to the processing of personal data concerning you for scientific or historical research purposes or for statistical purposes pursuant to Art. 89 (1) GDPR, unless the processing is necessary to perform a task carried out in the public interest, for reasons related to your particular situation.

6.7 Automated decisions including profiling

You have the right not to be subjected to a decision based solely on automated processing – including profiling – that produces legal effects concerning you or similarly significantly affects you.

Automated decision-making based on the personal data collected does not take place.

6.8 Right to revoke consent under data protection law

You have the right to withdraw your consent to the processing of personal data at any time.

6.9 Right to lodge a complaint with a supervisory authority

You have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of personal data concerning you is unlawful.

7. Data security

We make every effort to ensure the security of your data within the framework of applicable data protection laws and technical possibilities.

Your personal data is transmitted using encrypted technology. This applies to your orders and customer login. We use the SSL (Secure Socket Layer) encryption system, but we would like to point out that data transmission over the Internet (e.g., when communicating via email) can be subject to security vulnerabilities. Complete protection of data from unauthorised access by third parties is not possible.

To protect your data, we maintain technical and organizational security measures in accordance with Art. 32 GDPR, which we continually adapt to the state of the art.

Furthermore, we do not guarantee that our services will be available at any given time; disruptions, interruptions, or failures cannot be ruled out. The servers we use are regularly and carefully backed up.

8. Transfer of data to third partiesNo data transfer to non-EU countries

In principle, we only use your personal data within our company.

If and to the extent that we engage third parties in the context of the fulfilment of contracts (e.g. logistics service providers), these third parties will only receive personal data to the extent that the transmission is necessary for the corresponding service.

In the event that we outsource certain parts of the data processing (“contract processing”), we contractually oblige the processors to use personal data only in accordance with the requirements of data protection laws and to ensure the protection of the rights of the data subject.

Data transfer to locations or persons outside the EU outside the case mentioned in section 4 of this declaration does not take place and is not planned.

9. Data Protection Officer

If you have any further questions or concerns about data protection, please contact our data protection officer:

Dipl. - Ing. Andreas Wimmer Leimengrube 5 99098 Erfurt / Urbich

vertrieb@wimmer-umformtechnik.de

Phone: +49 361 4210004

©Urheberrecht. Alle Rechte vorbehalten.