Data protection policy

DATA PROTECTION STATEMENT

PREAMBLE
1. BPW Bergische Achsen Kommanditgesellschaft (BPW) is delighted about your participation in our BPW Web-EDI portal.
2. The protection of your personal data in relation to participation on the BPW Web-EDI portal is important to us. We strictly adhere to the legal data protection requirements. Personal data is processed in relation to the BPW Web-EDI portal to the extent necessary for the purposes described below.
3. The BPW Web-EDI portal websites may contain links to websites from other providers to whom this data protection statement does not apply. BPW has no influence on whether the operators of linked websites comply with the legal data protection regulations. Despite careful content monitoring, BPW can accept no liability for the content of external websites.
4. Below you will find information on how we guarantee data protection and what type of data is collected for which purposes.

I. BPW RESPECTS YOUR PRIVACY
1. The protection of your privacy during the processing of your personal data and the security of all business data is an important concern for us that we take into account in our business processes.
2. We process personal data collected in relation to your participation in our BPW Web-EDI portal confidentially and in accordance with the provisions of the General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG) and the German Teleservices Act (TMG).

II. DATA PROCESSING IN RELATION TO THE USE OF THE BPW WEB-EDI PORTAL
1. Every time a page of the BPW Web-EDI portal is called up, access data is saved in a log file (to the server log). The data set stored in this way contains the following data, among other things:
- the date and the time that your browser provides to the server,
- the amount of data transferred,
- the website from which you accessed the requested page (IP address),
- the product and version information of the browser used (user agent).
2. This data is not assigned to an identifiable person by BPW. The data saved is exclusively evaluated for statistical purposes. Passing on information to third parties for commercial or non-commercial purposes does not occur.

III. PROCESSING OF PERSONAL DATA
1. BPW processes your transferred personal data in relation to the registration only to the extent necessary for the fulfillment of a contract or for carrying out pre-contractual measures, and the technical administration of the service range in relation to participation in the BPW Web-EDI portal.
2. The following personal data that you disclose to BPW in relation to the registration for the BPW Web-EDI Portal is logged:
Surname, first name, company e-mail address, telephone number and mobile phone number.
3. This data is handled confidentially and is not passed on to third parties which are not involved in the ordering, delivery or payment processes.
4. The personal data collected by us is stored until the expiration of the tax and commercial law storage and documentation obligations (from the HGB [German Commercial Code] and AO [Tax Code]) and deleted thereafter, unless you have consented to further storage in accordance with Art. 6 para. 1 sentence 1 lit. a of the GDPR.

IV. SECURITY OF PERSONAL DATA
1. Your personal data is only passed on to third parties or transferred if this is necessary for carrying out the contract, processing the contact or for invoicing or if you have consented to it. The transferred data is restricted to the minimum amount required in accordance with the principle of data economy. If BPW is legally required or required by court order to transfer personal data, we only pass this on to the state institutions and authorities entitled to receive the information in accordance with the statutory regulations.
2. BPW takes security measures to protect your data managed by us against manipulation, loss, destruction or access by unauthorised persons and against unauthorised disclosure. Our security precautions are constantly improved in line with technological developments. We cannot guarantee complete data security for unencrypted communication by e-mail, as is the case here.

V. GOOGLE ANALYTICS
1. This website uses Google Analytics, a web analysis service from Google Inc. (“Google”). Google Analytics uses “cookies” - text files which are saved to your computer and enable analysis of your usage of the website. The information collected by the cookies about your usage of the website is generally transferred to a server in the USA and stored there. If IP anonymisation is activated on this website, however, your address will be shortened beforehand by Google within member states of the European Union or in other signatory states to the Agreement on the European Economic Area. The full IP address is only transferred to Google servers in the USA in exceptional cases and is shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activities and to provide the website operator with further services associated with website use and internet use. The IP address transferred by your browser in the context of Google Analytics is not linked to other data from Google. You can prevent the saving of cookies with the corresponding settings in your browser; we must however inform you that in this case you may not be able to use all of the functions of this website to their full extent. You can also prevent Google from collecting the data generated by cookies and relating to your use of the website (including your IP address) and prevent Google from processing this data in the future on the website https://tools.google.com/dlpage/gaoptout?hl=en by downloading and installing the browser add-on available there.
2. By using this website you give your consent to the processing of the data about you collected by Google in the ways described above and for the purposes stated.

VI. COOKIES
On some of our web pages, we use “session cookies” in order to make your use of our website easier. These are small text files which are only saved to your hard drive for the duration of your visit to the website and, depending on the settings of your browser, are deleted when you close the browser. These cookies do not retrieve any information about you stored on your hard disk and do not affect your PC or your files. Most browsers are set so that they automatically accept cookies. However you can deactivate the saving of cookies or set your browser to inform you when cookies are sent.

VII. YOUR RIGHTS AS A DATA SUBJECT
1. You have the right
a. to revoke your consent to the storage, use and passing on of your personal data in accordance with Art. 7 para. 3 GDPR at any time with effect for the future. Your stored personal data will be deleted or blocked if you revoke your consent, if it is no longer required to fulfill the purpose for which it was stored or if its storage is inadmissible for other legal reasons. As a result, we are no longer allowed to continue the processing of data based on this consent in the future;
b. to free disclosure of your personal data that we have stored in accordance with Art. 15 GDPR. In particular, you may request information about the purposes of processing, the categories of the personal data concerned, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, deletion, restriction of processing or objection, the existence of a right of appeal, the origin of your data, if these have not been collected by us, and the existence of automated decision-making including profiling and, if applicable, meaningful information on their details;
c. to immediately request the rectification of incorrect or incomplete personal data stored by us in accordance with Art. 16 GDPR, if incorrect information has been stored despite our efforts to ensure data accuracy;
d. to request the deletion of your personal data stored by us in accordance with Art. 17 GDPR, unless the processing is necessary to exercise the right to freedom of expression and information, to fulfill a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims:
e. in accordance with Art. 18 GDPR, to request a restriction of the processing of your personal data if you contest the accuracy of the personal data, the processing is unlawful but you oppose its deletion and we no longer need the data but you need it to assert, exercise or defend legal claims or you have filed an objection to the processing pursuant to Art. 21 GDPR;
f. in accordance with Art. 20 GDPR, to receive your personal data that you have provided to us in a structured, current and machine-readable format or to request its transfer to another person responsible;
g. to complain to a regulatory authority in accordance with Art. 77 GDPR. Generally, you can contact the regulatory authority at your usual place of residence, workplace or at our company headquarters.
2. If you have suggestions or complaints regarding the collection, processing and usage of your personal data by BPW, you can contact the person responsible.

VIII. PARTY RESPONSIBLE, DATA PROTECTION OFFICER
Party responsible in terms of data protection laws:
BPW Bergische Achsen Kommanditgesellschaft, Ohlerhammer, 51674 Wiehl

Telephone: +49 (0) 2262 78-0

If you have questions about data protection, rights or if you would like to exercise your rights to your personal data, please send us an e-mail to: datenschutz@bpw.de.

Data protection officer of the responsible party:
Holger Schneider
BPW Bergische Achsen Kommanditgesellschaft
Ohlerhammer
51674 Wiehl