1. General information on data processing
This Data Privacy Statement explains the type, scope and purposes of processing of personal data by us as the controller BYK (hereinafter referred to as “BYK” or “we”) via this website.
Our contact details:
Tel +49 281/670-0
The contact details of our data protection officer are as follows:
Data Protection Officer
Tel +49 281/670-0
1.1 Scope of processing of personal data
We process your personal data in principle only if you contact us via this website, if this is necessary for the provision of an operational website or for the presentation and use of our contents, offers and services. Without this processing, we could not provide our offering and usage would be impossible.
1.1.1. Provision of the website
If you visit our website, we log the IP address (i.e. the Internet address) of the computer accessing the site and other general usage data, such as date and time (“user-related data”), in order to evaluate which parts of our website are of particular interest. Your user-related data are rendered anonymous.
The processing of these data serves the internal evaluation of our website’s frequency of use. We pursue our legitimate interest to verify the efficiency of our offer. Legal basis for the processing of data is Art. 6 para. 1 lit. f GDPR.
1.1.2 Contact form
Our website features a contact form, which may be used for making contact electronically. If you take this opportunity, the data entered on the input screen will be transferred to and processed by us. The processing of personal data from the input screen serves the sole purpose of handling the contacting and your concern.
1.2 Legal basis for the processing of personal data
As far as you have given your consent to process personal data, Art. 6 para. 1 lit. a of the GDPR serves as the legal basis for the processing.
For the processing of personal data which serves the execution of a contract to which you are a party, Art. 6 para. 1 lit. b GDPR serves as the legal basis for processing. This also applies to processing operations, which are necessary to implement pre-contractual measures.
As far as processing is necessary for compliance with a legal obligation to which our company is subject, Art. 6 para. 1 lit. c GDPR serves as the legal basis for processing.
In case processing is necessary in order to protect the vital interests of the data subject or of another natural person, Art. 6 para. 1 lit. d GDPR serves as the legal basis for processing.
If processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, and such interests are not overridden by the interests or fundamental rights and freedoms of the data subject, Art. 6 para. 1 lit. f GDPR serves as the legal basis for processing.
1.3 Transfer of personal data to third parties
All personal data collected in connection with the provision of this website will only be transferred by us to our affiliates as well as to technical service providers and financial services providers which are employed as processors according to the GDPR. These financial services providers sometimes gather this data themselves when you set up an account with them. In this case, for the registration and ordering process you will have to use your registration data to log on to the financial services provider’s site. The data protection declaration of the respective financial services provider will then apply.
In individual cases, a transfer to a third country outside the EU and the EFTA may occur. However, we transfer personal data only to third countries where the EU Commission has determined an adequate level of data protection by decision according to Art. 45 GDPR or if we and the recipient of the data have agreed upon standard data protection clauses adopted by the Commission according to Art. 46 para. 2 lit. c GDPR.
1.4 Data erasure and storage duration
As far as you did not give consent to a specific storage duration, we will store your personal data only as long as this is necessary to pursue the respective processing purpose and if there are no conflicting legal retention or storage periods. After the contract has been processed in full or when the customer account is deleted, further processing of your data will be limited, and your data will be deleted on expiry of the retention periods defined by commercial law and tax law, unless you have consented to your data being used further or unless we retain the right to further permitted data usage, which we shall inform you about in this privacy statement.
We use a Content Management Tool (CMT) to manage our cookies. The CMT allows you to consent or decline to the placement of certain technically unnecessary cookies. The settings for technically necessary cookies cannot be changed. If you reject certain cookies, only limited use of our website and our services may be possible. By clicking on the "FINGERPRINT" button, you can change your cookie preferences at any time with effect for the future.
Essential technical cookies are used for the purpose of ensuring our website and its contents run properly. These purposes also substantiate our legitimate interest in processing personal data. Article 6, para. 1 f of the GDPR constitutes the legal grounds for this data processing.
You can, of course, configure your browser so that it does not store our cookies on your end device. The Help function in the menu found on most web browsers explains how you can prevent your browser from accepting new cookies, how you can have your browser notify you when you receive a new cookie, or even how you can delete all cookies that have already been received and completely block any more cookies. However, the CMT only works in the browser you are using to set it and will only work properly if your browser accepts third-party browser cookies. If you delete cookies or change browser, computer, or operating system, you will need to adjust the setting again.
2.1 Google reCAPTCHA
To ensure a sufficient level of data security when forms are transmitted, we sometimes use the reCAPTCHA service from Google Inc. This primarily serves to determine whether data has been entered by a real person or fraudulently via machine or automated processing. As part of this service, the IP address is sent to Google, along with any other data Google requires so it can provide its reCAPTCHA service. The data privacy provisions enforced by Google Inc., which may differ from those set out here, shall apply in this regard. You can find more information about Google Inc. privacy guidelines
at https://policies.google.com/privacy. Article 6, para. 1 f of the GDPR constitutes the legal grounds for this data processing.
We use the services of etracker GmbH from Hamburg, Germany (www.etracker.com) to analyze usage data. Cookies are used to enable a statistical analysis of the use of our website by visitors and to display usage-related content or advertising.
The data generated by etracker is processed and stored by etracker on behalf of the provider of this website exclusively in Germany. The data processing is in our legitimate interest, i.e. in the optimization of our online offer and our web presence. Further information on data protection at etracker can be found here: https://www.etracker.com/datenschutz/.
3. Social media
You will find links to Facebook, Instagram, Xing, Linkedin, YouTube, Wikipedia and Twitter on our website. If you activate a platform of this type, your browser will establish a short connection with the server of the relevant network, which serves primarily to display the content of the plugin. The cooperating party will, however, learn your IP address through this plugin. This will not identify you by name automatically, but if you are logged in to Facebook at the same time your visit to our website may be matched to your Facebook account.
4. Your rights
In general, i.e. subject to any legal restrictions, you have the rights listed below. In order to facilitate the exercise of these rights, we wish to inform you that any corresponding request does not require a certain form - you may send such a request electronically (in particular per email).
You may request information about your personal data from the controller.
You may request the rectification of your personal data by the controller if the data are inaccurate.
You may request the erasure of your personal data by the controller.
You may request the restriction of further processing of your personal data by the controller.
You have the right to object to further processing of your personal data by the controller, provided you set out the respective grounds relating to your particular situation.
You may ask to receive your personal data in a structured, commonly used and machine-readable format, and to transmit those data to another person without hindrance from the controller to whom the personal data have been provided.
Furthermore, you have the right to file a complaint about the handling of your personal data by a controller with a supervisory authority competent for data protection. In order to facilitate the exercise of this right, we inform you that the supervisory authority competent for our place of business may be contacted at the following address:
Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen, Kavalleriestrasse 2-4, 40213 Düsseldorf, Germany
5. Automated individual decision-making, including profiling
Automated decision-making in individual cases, including profiling in accordance with Art. 22 GDPR, do not take place in connection with the use of our website and our offer.
6. Data security
We apply the technical and organizational measures necessary to protect your data from manipulation, loss, destruction or unauthorized access, and to safeguard their integrity and availability. Our safety precautions are improved constantly corresponding to technical developments.
7. Amendment of this data privacy statement
This data privacy statement has the status of May 25, 2020. We reserve the right to carry out appropriate amendments at any given time.