Data Protection

Updated: May 25, 2018

Thank you for visiting our website and for your interest in our company and products. In the following, we have provided information about the collection of personal data when using our website www.buschvacuum.com.

If you are not located in the European Union, you can find the global data protection statement here.

Data protection statement

1. Basic information

(1) You can print out or save this document by using the standard functionality of your browser (generally by clicking "File" > "Save as") or the website's implemented print function.

(2) If we use contracted service providers for individual functions on our website, or would like to use your data for marketing purposes, we will inform you of the details of the relevant procedures below. This also includes the stipulated criteria for the duration of storage.

(3) Unless otherwise described in the following sections, the legal basis for processing of personal data arises from the necessity of processing for the provision of the functionalities requested by you on this website (point (b) of Article 6(1) General Data Protection Regulation, GDPR).

2. Controller/data protection officer

(1) The controller pursuant to Article 4(7) GDPR is

Busch Dienste GmbH
Schauinslandstraße 1
79689 Maulburg

hereinafter referred to as "Busch", "we" or "us".

Additional information is available in our site notice.

(2) You can contact the Busch data protection officer as follows: dpo@buschvacuum.com or using our postal address and adding "Datenschutzbeauftragter".


3. Provision of the website and log files

(1) For purely informational use of the website, i.e. if you do not register or otherwise provide us with information, we only collect the personal data that your browser automatically transmits to our server. If you wish to view our website, we collect the following data that are technically necessary for us to display our website to you and guarantee its stability and security (the legal basis for this is point (f) of the first sentence of Article 6(1) GDPR):
 

  • IP address
  • The date and time of the request
  • The time difference in relation to Greenwich Mean Time (GMT)
  • The content of the request (specific page)
  • The access status/HTTP status code
  • The data volume transferred in each case
  • The website from which the request is received
  • The browser
  • The operating system and its interface
  • The browser language and version.

 

(2) User IP addresses are erased or anonymized after their use has ended. In the case of anonymization, IP addresses are changed in such a way that individual information regarding personal or material circumstances can no longer be allocated to an identifiable natural person, or identifying it with a natural person would involve a disproportionate amount of time, costs, and personnel.

4. Cookies

(1) In addition to the log file data specified above, cookies are also stored on your computer when you use our website. Cookies are small text files that are allocated to the browser you use and stored on your hard drive, and through which certain information passes to the entity that set the cookie (in this case, through us). Cookies are not able to execute any programs, or transfer viruses to your computer. They are used to make the website more user-friendly and more effective overall.

(2) Use of cookies:

a) This website uses the following types of cookies, the scope and functionality of which are explained in the following:
 

  • Session cookies (see point b)
  • Persistent cookies (see point c).
     

b) Transient cookies are automatically deleted when you close the browser. These cookies save a session ID via which various requests by your browser can be allocated to the joint session. This enables your computer to be recognized the next time you return to our website. Session cookies are deleted when you log out or close the browser.

c) Persistent cookies are deleted automatically after a specified duration, which may vary depending on the cookie. You can delete cookies using your browser's security settings at any time.

(3) Why do we set cookies?

a) Settings and functionality

When you visit our website, the determined country and language, or the country and language you select yourself, are stored in cookies so that you don't have to make the selection again the next time you visit. An advance check as to whether your browser supports cookies is performed, and this information is stored in an additional cookie. The contact information localized to your country and language – which are also stored – are then shown to you. The legal basis for this is point (b) of the first sentence of Article 6(1) GDPR.

b) Identification

We use cookies in order to be able to identify you during subsequent visits, if you have an account for the Busch online shop. The legal basis for this is point (b) of the first sentence of Article 6(1) GDPR.

c) Advertising

We use advertising cookies  to assess the efficiency of our adverts and derive optimizations from this. Furthermore, we also use advertising cookies to address users of our website with targeted advertising messages on websites within the Google Inc.  ("Google") display network (AdWords remarketing). The legal basis for this is point (f) of the first sentence of Article 6 (1) GDPR.

d) Analytics

In order to continually improve this website for our customers and interested parties, we use the Google Analytics web analytics service. Through the use of these cookies, we receive information from Google regarding the use of our website. For example, we find out how often and in what order the individual pages have been accessed, and how much time visitors spend browsing our website. We also find out whether users have previously visited our website at an earlier point in time. The legal basis for this is point (f) of the first sentence of Article 6 (1) GDPR.

-> See Section 8 Web analyzis services

(4) Control of cookies

You can adjust your browser settings to meet your preferences and, for example, manage or refuse the acceptance of third-party cookies or all cookies as you prefer. You can delete existing cookies using your browser settings. Please note that you if you do this, you may not be able to use all the functions of this website.

5. Use of the online shop

(1) If you would like to place an order in our online shop, it is necessary for contract conclusion that you state your personal data that we need for processing your order. It is necessary for you to register in order to enable this. The information required in this respect can be found in the web form. The mandatory information for processing contracts is marked separately; additional information is voluntary. Following our checks, the account (customer login) will be released. We will process the data you have provided for the purposes of dealing with your order. To this end, we may transfer your payment details to our banks. The legal basis for this is point (b) of the first sentence of Article 6(1) GDPR.

(2) We may also process the information you have provided for the purposes of informing you of additional interesting products from our portfolio, or to send you emails with technical information. The legal basis for this is point (f) of the first sentence of Article 6 (1) GDPR.

(3) Due to specifications under commercial and tax law, we are required to store your address, payment, and order data for a duration of ten years. However, after the expiry of the statutory period of limitation we undertake a restriction of processing, i.e. your data is only used for compliance with statutory retention obligations.

(4) The order process is encrypted using TLS technology in order to prevent unauthorized access to your personal data by third parties.

6. Newsletter

(1) For the sending of newsletters, we ask for your explicit consent and approval in relation to this data protection statement. With your consent, you can subscribe to our newsletter via which we inform you of current offers from our portfolio. We collect the following data in this process:
 

  • Your email address
  • Country
  • Language


(2) We use the double-opt-in procedure for our newsletter registration. This means that after you register, we send an email to the email address provided, asking for confirmation that you would like to receive the newsletter. If you do not confirm your registration, your information will be blocked, and erased after one month. In addition, we store the addresses used in each case, and the times of registration and confirmation. The purpose of this procedure is to verify your registration and where applicable to be able to clarify possible misuse of your personal data.

(3) After you have confirmed, we store your email address for the purpose of sending you the newsletter. The legal basis for this is point (a) of the first sentence of Article 6(1) GDPR.

(4) You may at any time withdraw your consent to receiving the newsletter, and unsubscribe from the newsletter. You can declare your withdrawal of consent by sending an email to newsletter@news.buschvacuum.com or by messaging the contact details stated in the site notice.

Your personal data will be erased. Your email address will be stored for technical reasons in order to prevent you from receiving further newsletters from us in the future.

(5) Please note that we assess your user behaviour when we send the newsletter. For this assessment, the sent emails contain web beacons and/or tracking pixels, which are single-pixel image files that are stored on our website. For the assessments, we link the data stated in Section 3 and the web beacons with your email address and your individual ID.

7. Contact form and email contact

(1) There is a contact form on our website that can be used for making contact with us electronically. First, please use the drop-down menu to select your country and therefore the correct local point of contact for your enquiry. Your request will automatically be sent to the locally relevant sales company within Busch Group. If a user makes use of this option, the data entered in the web form shall be transferred to us and stored. The mandatory information required for the contact request is marked separately; additional information is voluntary.

In addition, the following data is stored at the time of sending:
 

  • The user's IP address
  • The date and time that the form was sent


(2) To enable the processing of data, your consent is collected and reference is made to this data protection statement in the context of the send procedure. Alternatively, you may contact us using the email address provided. In this case, the user's personal data transferred with the email is stored. The data is used exclusively for processing the conversation.

(3) The legal basis for processing the data is the presence of the user's consent; point (a) of Article 6(1) GDPR. The legal basis for processing the data that is transferred in the course of sending an email is point (f) of Article 6(1) GDPR. If the contact is geared towards concluding a contract, the additional legal basis for processing is point (b) of Article 6(1) GDPR.

(4) The processing of personal data from the input screen exclusively serves our processing of the contact. In the event of users contacting us by email, there is also a necessary legitimate interest in the processing of data. The other personal data processed during the sending procedure are used to prevent misuse of the contact form and to ensure the security of our information systems.

(5) The data are deleted as soon as they are no longer necessary for achieving the purpose for which they were captured. This is the case for personal data arising from the input screen for the contact form and that has been sent by email if the respective conversation with the user has ended. The conversation has ended if, based on the relevant circumstances, it can be seen that the relevant matters have been finally clarified. The IP address additionally collected during the sending procedure is anonymized directly after the sending procedure (see Section 8, Google Analytics).

8. Web analytics services

Busch uses Google Analytics and Google AdWords Conversion Tracking. The legal basis for this is point (f) of the first sentence of Article 6 (1) GDPR.

a) Google Analytics

(1) This website uses Google Analytics, a web analytics service provided by Google, Inc. ("Google"). Google Analytics uses "cookies", which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of the website will generally be transmitted to and stored by Google on servers in the United States.  If IP anonymization is activated on this website, the IP address will however be truncated by Google in advance within member states of the European Union or in other states that are party to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the United States and be truncated there. Google will use this information on behalf of the operator of this website in order to assess the use of the website, collect reports of our website activities, and to provide additional services associated with website and internet usage with respect to the website operator.

(2) The IP address transmitted by your browser in the context of Google Analytics will not be associated with other Google data.

(3) You can prevent the storage of cookies by selecting the appropriate settings on your browser; however, please note that if you do this you may not be able to use all functions of this website to their full extent. In addition, you can prevent data created by the cookie and related to your use of the website (including your IP address) from being transmitted to Google, and prevent the processing of this data by Google by downloading and installing the browser plugin provided by Google: http://tools.google.com/dlpage/gaoptout?hl=de.

Instead of a browser plugin, or within browsers on mobile devices, an opt-out cookie can be set using the following link: Deactivate Google Analytics.

The opt-out cookie prevents future data collection by Google Analytics on this website. However, it only works in this browser and for this domain. If your cookies in this browser have been deleted, it is not necessary to click on the above-mentioned link again.

(4) This website uses Google Analytics with the "_anonymizeIp()" extension. This means that the IP addresses are processed in truncated form, which means that it is not possible to relate them to an individual. If a link to an individual is associated with the data collected concerning you, this will be immediately excluded and the personal data will therefore be immediately erased.

(5) We use Google Analytics to analyse the use of our website and improve it on an ongoing basis. We can use the statistics we obtain to improve our offering, and to make it more interesting for you as a user. For the exceptional cases in which personal data is transferred to the USA, Google has committed to the EU-U.S. Privacy Shield, https://www.privacyshield.gov/EU-US-Framework. The legal basis for the use of Google Analytics is point (f) of the first sentence of Article 6(1) GDPR.

(6) Information regarding the third-party provider: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001. User terms: https://www.google.com/analytics/terms/de.html, Data protection overview: http://www.google.com/intl/de/analytics/learn/privacy.html, as well as the data protection statement: https://policies.google.com/privacy.

b) Google AdWords Conversion Tracking

This website uses Google AdWords Conversion Tracking. The Conversion Tracking cookie is activated in the user's browser by Google AdWords when you click one of the adverts transferred by Google. These cookies expire after 30 days. They are not used to collect personal identification data. If the user visits a certain page on this website and the cookie has not yet expired, Google and Busch will know that the user has clicked on the ad and has been directed to that page. Every Google AdWords customer receives a different cookie. As a result, cookies cannot be traced via the AdWords customer's website. Conversion statistics are generated from the data collected by the conversion cookies for AdWords customers who have selected conversion tracking. AdWords customers are notified of the total number of users who have clicked on the ad and have been redirected to a conversion tracking page. However, they do not receive any information that they can use to personally identify users. If you do not wish to participate in the tracking program, you can easily refuse to use this program by disabling the Google conversion tracking cookie in the personal settings of your internet browser. You can also deactivate conversion tracking cookies at any time by setting your browser to block cookies from "googleadservices.com".

c) Google Tag Manager

(1) This website uses the Google Tag Manager as part of Google Analytics. Tags are small code elements on our website which are used, among other things, to measure traffic and visitor behaviour, capture the impact of online advertising and social media, use remarketing and targeting, and to test and optimize the website. Google Tag Manager is a solution that allows Busch to manage website tags via an interface. The Tag Manager tool itself (which implements the tags) is a cookie-free domain. The tool triggers other tags, which in turn may collect data. Google Tag Manager does not access this data. If a deactivation has been made at domain or cookie level, it will remain in effect for all tracking tags implemented with Google Tag Manager.

(2) Further information on Google Tag Manager is available online at: https://www.google.de/tagmanager/use-policy.html.

9. Your rights

If personal data concerning you is processed, you are the data subject as defined by the GDPR and you are due the following rights with respect to us as the controller:

a) Rights in accordance with Article 15 et seqq. GDPR

(1) You have the right to access in accordance with Article 15 GDPR. Under certain circumstances, you have the right to rectification in accordance with Article 16 GDPR, the right to restriction of processing in accordance with Article 18 GDPR and the right to erasure ("right to be forgotten") in accordance with Article 17 GDPR. In addition, you have the right to the data you have provided being disclosed in a structured, commonly used and machine-readable format (right to data portability) in accordance with Article 20 GDPR, in as far as processing takes place with the aid of automated procedures, and is based on consent in accordance with point (1) of Article 6(1) or point (a) of Article 9(2) GDPR, or a contract pursuant to point (b) of Article 6(1) GDPR. With regard to the right to access and the right to erasure, the restrictions in accordance with Sections 34 and 35 of the German Federal Data Protection Act (Bundesdatenschutzgesetz, BDSG) apply.

(2) You can revoke your consent to the processing of personal data at any time. This also applies to the revocation of declarations of consent that were given to us before the EU General Data Protection Regulation came into effect, i.e. before 25 May, 2018. Please note that the revocation will only take effect in the future. Processing that took place before the revocation is not affected by this.

b) Right to lodge complaints

You have the option of contacting us or a supervisory authority for data protection to lodge a complaint, in particular in the member state of your place of residence, your place of work, or the place of the suspected breach (Article 77 GDPR in conjunction with Section 19 BDSG).

c) Right to object

In addition to the rights specified above, you are also entitled to a right to object in accordance with Article 21 GDPR as follows:

(1) Case-specific right to object

You have the right to at any time submit an objection to the processing – that takes place based on point (e) of Article 6(1) GDPR (data processing in the public interest) and point (f) of Article 6(1) GDPR (data processing on the basis of a balancing of interests) – of personal data concerning you, for reasons that arise from your particular situation; this also applies for profiling based on this provision as defined by Article 4(4) GDPR.

If you submit an objection, we will not process your personal data unless we are able to prove binding legitimate grounds for such processing that override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.

(2) Right to object to processing of data for marketing purposes

In individual cases we process your personal data for direct marketing purposes. You have the right to object at any time to the processing of personal data concerning you for the purposes of such marketing; this also applies to profiling insofar as this is associated with direct marketing. If you object to processing for the purposes of direct marketing, we will no longer process your personal data for this purpose.
The objection may be submitted in any format to the body detailed under Section 1 of this data protection statement.

10. Supervisory authority

The supervisory authority relevant for Busch, which is headquartered in Maulburg, Germany can be contacted as follows:

Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit

Postfach 10 29 32
D-70025 Stuttgart
Tel.: +49 711 615541-0
Fax: +49 711 615541-15
Email: poststelle@lfdi.bwl.de

11. Automated decision-making

As a rule, we do not use any automated decision-making pursuant to Article 22 GDPR to justify and implement the business relationship.

12. Profiling

In order to provide you with targeted information and advice regarding products, we – or service providers on our behalf – may use web analytics tools, and in particular tracking technology. These enable demand-oriented communication and advertising. Please refer to Section 8, Web Analytics Services, in this respect.