Data protection statement
This website, "www.bp-online.com“ / www.bp-online.com/at, /de (hereinafter: website), is operated by Bierbaum-Proenen GmbH & Co. KG, Domstrasse 55-73, 50668 Cologne, Germany (referred to below as "BP", "we" or "us").
For BP the protection of the personal data of visitors to the website is a matter of great importance. This data protection statement gives you information on the processing of your personal data on the website in compliance with the General Data Protection Regulation (GDPR).
1 Name and contact data of responsible entity
Bierbaum-Proenen GmbH & Co. KG, represented by BP Unternehmensverwaltungs-GmbH, this in turn represented by its managing director, Harald Goost
im carré domstrasse
Domstrasse 55-73
50668 Köln,
Tel.: +49 221/ 16 56 0
Email: info@bp-online.com
2 Name and contact data of data protection officer
The data protection officer at Bierbaum-Proenen GmbH & Co KG is:
Elvira Schetzke
Bierbaum-Proenen GmbH & Co. KG
im carré domstrasse
Domstrasse 55-73
50668 Köln
Email: bp-datenschutz@bierbaum-proenen.de
3 Automatic processing of data on a visit to the website
Description of data processing:
When the website is accessed, your internet browser, for technical reasons, automatically transmits data about the access to the website to our web server, and the data are then temporarily stored in a protocol file (so-called server logfile).
The information and data that are processed:
The information comprises the date and time of the access, the domain accessed (e.g. bp-online.com), the URL and method accessed (e.g. "GET /de/couponcampaigns/index/getHint/ HTTP/1.1"), HTTP status (200), URL of the referring website (the website from which you are visiting us), the name of your internet service provider, the file accessed, the volume of data sent, browser type and version, operating system, your IP address and error messages.
Purpose and legal basis of this data processing:
The data and information are processed for the purpose of ensuring the trouble-free operation and the security of the website, and in particular for the event of unauthorised access to or attacks on the website. The data and the information are also analysed for statistical purposes with a view to continuously improving our website. They are stored temporarily and kept separate from other data which you enter in the course of a visit to the website (e.g. registration data for the opening of a customer account). It is not possible for us to assign these automatically collected data to a specific person or use them to establish the identity of same.
Ensuring the trouble-free operation and security of the website, ascertaining users' interests and analysing user behaviour all represent legitimate interests of BP. The legal basis of this data processing is article 6 (1) letter f) GDPR.
Recipients of the data:
The data and information are transferred, exclusively subject to the above-stated purposes, to Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA, maxcluster GmbH, Lise-Meitner-Str. 1b, D-33104 Paderborn, Germany, Amazon Web Services, Inc., 410 Terry Avenue North, Seattle WA 98109, United States, Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; Google Ireland Limited, Gordon House, Barrow Street Dublin 4, Irland, which process the data, as set out above, under contract from BP.
Duration of the storage of the data:
A key criterion for us is that we only store personal data for as long as is absolutely necessary for the provision of our services and products. This means that we delete personal data as soon as the reason for processing the data no longer exists. In some cases, we are legally obliged to store certain data even after the original purpose has ceased to exist, for example for accounting purposes.
Should you wish your data to be deleted or revoke your consent to data processing, the data will be deleted as soon as possible and insofar as there is no obligation to store it.
We will inform you about the specific duration of the respective data processing below, provided we have further information on this.
4 Cookies
Description of data processing:
Cookies are used on our website. Cookies are small text files which, when our website is visited, are sent by our web server to the browser you use and are placed by the browser on your computer or mobile terminal (e.g. mobile phone, tablet). On your next visit to our website your browser returns the cookie to us, and this enables us to recognise you. Examples of the information stored are the pages visited on the website, the duration of the visit and data entered by the user (e.g. log-in data) on the website during the visit, and this information is read out on a subsequent visit.
The information and data that are processed:
Unfortunately, it is not possible to generalise which data is stored in cookies, but we will inform you about the processed or stored data per service in the following privacy policy.
The information and data are mostly the IP address, the URL of the referring website (the website from which you are visiting us), browser language. operating system, age, gender, interests, product sales, products in shopping basket, product information examined, device, browser and all add-ons used, computer's resolution, visitor source, files downloaded, average duration of visit and pages visited in the shop.
Purpose and legal basis of data processing:
Cookies are, firstly, imperative in order to enable us to offer certain functions on the website, for example the shopping basket. Secondly, they help to make the website more user-friendly and support you as a user (e.g. the storage of log-in data, so that they are ready for entry in the log-in form); and thirdly to enable statistical data on the use of the website to be collected and analysed with a view to improving our offering on the website. The legal basis are sections 13 (1) 2nd sentence, section 15 (3) TMG (German telemedia act). Most browsers are configured to accept cookies automatically. You can however decide to set your browser to reject cookies or inform you when a cookie is sent.
If you want to find out which cookies have been stored in your browser, if you want to change or delete cookie settings, you can find this in your browser settings:
- Chrome: Delete, activate and manage cookies in Chrome.
- Safari: Manage cookies and website data with Safari
- Firefox: Delete cookies to remove data that websites have placed on your computer
- Internet Explorer: Delete and manage cookies
- Microsoft Edge: Delete and manage cookies
If you generally do not want cookies, you can set up your browser so that it always informs you when a cookie is to be set. In this way, you can decide for each individual cookie whether you allow the cookie or not. The procedure varies depending on the browser. It is best to search for the instructions in Google with the search term "Delete Cookies Chrome" or "Deactivate Cookies Chrome" in the case of a Chrome browser.
Recipients of the data:
See section 5 of this data protection statement.
Duration of the storage of the data:
The storage period depends on the cookie and is specified further below. Some cookies are deleted after less than an hour, others can remain stored on a computer for several years. Session cookies are not permanently stored on the hard disk or in the memory of your end device and are automatically deleted when you exit the browser.
You also have control over how long they are stored. You can delete all cookies manually at any time via your browser (see also above "Purpose and legal basis of data processing"). Furthermore, cookies that are based on consent will be deleted at the latest after revocation of your consent, whereby the legality of the storage remains unaffected until then.
5 Date collection via tracking services
5.1 Google Analytics
Description and purpose of data processing:
This website uses Google Analytics, a web analysis service provided by Google Inc. ("Google"). Google Analytics utilises so-called "cookies", text files which are stored on your computer and make it possible for your use of the website to be analysed. The information generated by the cookie on your use of this website is as a rule transmitted to a Google server in the USA and stored there. If the IP anonymising function on this website is activated, however, your IP address is first abbreviated by Google inside the member states of the European Union or in other signatory states to the Agreement on the European Economic Area. Only in exceptional cases is the complete IP address first sent to a Google server in the USA and then abbreviated there. Under commission from the operator of this website, Google will use this information in order to analyse your use of the website, compile reports on the website activities and perform, for the website operator, other services related to the use of the website and the use of the internet. The IP address transmitted by your browser in connection with the Google Analytics service is not combined with other Google data. You can prevent the storage of the cookies by means of the relevant setting on your browser software. We must however inform you that in this case you will possibly not be able to make full use of all the functions of the website. You can moreover prevent the transfer to Google of the data generated by the cookie and related to their use of the website (including your IP address) and the processing of the said data by Google by downloading and installing the browser plug-in available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de.
You can prevent the collection of data by Google Analytics by clicking on the following link. This will place an opt-out cookie preventing the future collection of your data on a visit to the website: deactivate Google Analytics at https://tools.google.com/dlpage/gaoptout?hl=de
More detailed information on terms of use and data protection can be found at http://www.google.com/analytics/terms/de.html or at https://www.google.de/intl/de/policies/.
Please note that the code "gat._anonymizeIp();“ has been added on to Google Analytics on this website, in order to ensure that IP addresses are collected in an anonymised form (so-called IP masking).
The information and data that are processed:
The information and data are the IP address, the URL of the referring website (the website from which you are visiting us), browser language. operating system, age, gender, interests, product sales, products in shopping basket, product information examined, device, browser and all add-ons used, computer's resolution, visitor source, files downloaded, average duration of visit and pages visited in the shop.
Purpose and legal basis of data processing:
The data processing supports the analysis of user behaviour for the purpose of modifying and optimising the website, and thus constitutes a legitimate interest of BP. The legal basis of the data processing is article 6 (1) letter f) GDPR.
You have the right to object to the data processing at any time. We would refer you to the explanation above of how you can prevent the use of cookies or processing by Google.
Recipients of the data:
This website uses Google Analytics, a web analytics service provided by Google Ireland Limited; Gordon House, Barrow Street, Dublin 4, Ireland, ("Google"), provided that you have given your consent to this in accordance with Art. 6 (1) lit. a DSGVO. Google Analytics uses "cookies", which are text files placed on your computer, to help the website analyse how users use the site. The information generated by the cookies about your use of this website (including your shortened IP address) is transmitted to a Google server in the USA and stored there for 26 months. Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity for website operators and providing other services relating to website activity and internet usage. Google may also transfer this information to third parties, such as US authorities, where required to do so by law, or where such third parties process the information on Google's behalf. If you have agreed to the use of analysis and tracking cookies and would like to object to this at a later date, you can do this at any time in the cookie banner or the cookie settings via our website. Alternatively, you can install a so-called add-on in your browser. To do this, you can follow the following link, which will take you to the Google page: https://tools.google.com/dlpage/gaoptout?hl=de."
Duration of the storage of the data:
The data are stored for a period of 26 months.
5.2 Google Ads
Description and purpose of data processing:
We use Google Ads (formerly Google AdWords) as an online marketing measure to promote our products and services. In this way, we want to draw more people's attention to the high quality of our offers on the internet. As part of our advertising measures through Google Ads, we use the conversion tracking of the company Google Inc. on our website. In Europe, however, the company Google Ireland Limited (Gordon House, Barrow Street Dublin 4, Ireland) is responsible for all Google services. With the help of this free tracking tool, we can better adapt our advertising offer to your interests and needs. In the following article, we will go into more detail about why we use conversion tracking, what data is stored in the process and how you can prevent this data storage.
Google Ads (formerly Google AdWords) is the in-house online advertising system of Google Inc. We are convinced of the quality of our offer and want as many people as possible to get to know our website. In the online sector, Google Ads offers the best platform for this. Of course, we also want to get an accurate overview of the cost-benefit factor of our advertising campaigns. That's why we use the conversion tracking tool from Google Ads.
But what is a conversion actually? A conversion occurs when you go from being a purely interested website visitor to an acting visitor. This happens whenever you click on our ad and then perform another action, such as visiting our website. With Google's conversion tracking tool, we record what happens after a user clicks on our Google Ads ad. For example, we can see whether products are purchased, services are used or whether users have signed up for our newsletter.
Information about Google Ads conversion tracking on our website:
We use Google Ads to draw attention to our offer on other websites. The aim is to ensure that our advertising campaigns reach only those people who are interested in our offers. With the conversion tracking tool we can see which keywords, ads, ad groups and campaigns lead to the desired customer actions. We see how many customers interact with our ads on a device and then make a conversion. This data allows us to calculate our cost-benefit factor, measure the success of individual advertising measures and consequently optimise our online marketing measures. We can also use the data obtained to make our website more interesting for you and adapt our advertising offer even more individually to your needs.
What data is stored with Google Ads conversion tracking?
We have integrated a conversion tracking tag or code snippet on our website in order to be able to better analyse certain user actions. If you now click on one of our Google Ads ads, the "Conversion" cookie is stored on your computer (usually in the browser) or mobile device by a Google domain. Cookies are small text files that store information on your computer.
Here are the details of the most important cookies for Google's conversion tracking:
Name: Conversion, Value: EhMI_aySuoyv4gIVled3Ch0llweVGAEgt-mr6aXd7dYlSAGQ311830885-3, Purpose: This cookie stores every conversion you make on our site after coming to us through a Google Ad. Expiry date: after 3 months
Name: _gac, Value: 1.1558695989.EAIaIQobChMIiOmEgYO04gIVj5AYCh2CBAPrEAAYASAAEgIYQfD_BwE, Purpose: This is a classic Google Analytics cookie and is used to record various actions on our website. Expiry date: after 3 months,
Note: The _gac cookie only appears in connection with Google Analytics. The above list is not exhaustive, as Google also uses other cookies for analytical purposes.
As soon as you complete an action on our website, Google recognises the cookie and saves your action as a so-called conversion. As long as you surf our website and the cookie has not yet expired, we and Google will recognise that you found us via our Google Ads ad. The cookie is read and sent back to Google Ads with the conversion data. It is also possible that other cookies are used to measure conversions. The conversion tracking of Google Ads can be further refined and improved with the help of Google Analytics. For ads that Google displays in various locations on the web, cookies called "__gads" or "_gac" may be set under our domain. Since September 2017, various campaign information has been stored by analytics.js with the _gac cookie. The cookie stores this data as soon as you call up one of our pages for which the automatic tagging of Google Ads has been set up. Unlike cookies set for Google domains, Google can only read these conversion cookies when you are on our website. We do not collect or receive any personal data. We receive a report from Google with statistical evaluations. For example, we learn the total number of users who clicked on our ad and we see which advertising measures were well received.
How long and where is the data stored?
At this point, we would like to point out that we have no influence on how Google uses the collected data. According to Google, the data is encrypted and stored on secure servers. In most cases, conversion cookies expire after 30 days and do not transmit any personal data. The cookies named "Conversion" and "_gac" (which is used in conjunction with Google Analytics) have an expiry date of 3 months.
How can I delete my data or prevent data storage?
You have the option of not participating in Google Ads' conversion tracking. If you deactivate the Google conversion tracking cookie via your browser, you block conversion tracking. In this case, you will not be included in the statistics of the tracking tool. You can change the cookie settings in your browser at any time. This works slightly differently for each browser. Here you will find instructions on how to manage cookies in your browser:
- Chrome: Delete, activate and manage cookies in Chrome.
- Safari: Managing cookies and website data with Safari
- Firefox: Delete cookies to remove data that websites have placed on your computer
- Internet Explorer: Delete and manage cookies
- Microsoft Edge: Delete and manage cookies
If you generally do not want cookies, you can set up your browser so that it always informs you when a cookie is to be set. In this way, you can decide for each individual cookie whether you allow the cookie or not. Downloading and installing this browser plug-in at https://support.google.com/ads/answer/7395996 will also deactivate all "advertising cookies". Keep in mind that by deactivating these cookies you do not prevent the advertisements, only the personalised advertising.
Legal basis
If you have consented to Google Ads Conversion Tracking being used, the legal basis for the corresponding data processing is this consent. According to Art. 6 (1) lit. a DSGVO (consent), this consent constitutes the legal basis for the processing of personal data as it may occur during the collection by Google Ads Conversion Tracking.
On our part, there is also a legitimate interest in using Google Ads Conversion Tracking to optimise our online service and our marketing measures. The corresponding legal basis for this is Art. 6 para. 1 lit. f DSGVO (Legitimate Interests). Nevertheless, we only use Google Ads Conversion Tracking if you have given your consent.
Google also processes data in the USA, among other places. We would like to point out that according to the opinion of the European Court of Justice, there is currently no adequate level of protection for the transfer of data to the USA. This may be associated with various risks to the lawfulness and security of data processing.
Google uses standard contractual clauses approved by the EU Commission (= Art. 46. para. 2 and 3 DSGVO) as the basis for data processing at recipients located in third countries (outside the European Union, Iceland, Liechtenstein, Norway, i.e. in particular in the USA) or a data transfer there. These clauses oblige Google to comply with the EU level of data protection when processing relevant data outside the EU. These clauses are based on an implementing decision of the EU Commission. You can find the decision and the clauses here: https://ec.europa.eu/germany/news/20210604-datentransfers-eu_de.
If you would like to learn more about data protection at Google, we recommend Google's general privacy policy: https://policies.google.com/privacy?hl=de.
5.3. Google Tag Manager
Description and purpose of data processing:
For our website we use the Google Tag Manager of the company Google Inc. For the European area the company Google Ireland Limited (Gordon House, Barrow Street Dublin 4, Ireland) is responsible for all Google services. This Tag Manager is one of many helpful marketing products from Google. Via the Google Tag Manager, we can centrally integrate and manage code sections of various tracking tools that we use on our website.
In this privacy statement, we would like to explain in more detail what Google Tag Manager does, why we use it and in what form data is processed.
The Google Tag Manager is an organisational tool that allows us to incorporate and manage website tags centrally and via a user interface. Tags are small sections of code that, for example, record (track) your activities on our website. For this purpose, JavaScript code sections are inserted into the source code of our page. The tags often come from Google-internal products such as Google Ads or Google Analytics, but tags from other companies can also be integrated and managed via the manager. Such tags perform different tasks. They can collect browser data, feed marketing tools with data, embed buttons, set cookies and also track users across multiple websites.
What data is stored by the Google Tag Manager?
The Tag Manager itself is a domain that does not set cookies or store data. It acts as a mere "administrator" of the implemented tags. The data is collected by the individual tags of the various web analysis tools. The data is virtually passed through to the individual tracking tools in the Google Tag Manager and is not stored.
However, the situation is completely different with the integrated tags of the various web analysis tools, such as Google Analytics. Depending on the analysis tool, various data about your web behaviour is usually collected, stored and processed with the help of cookies. For this, please read our privacy texts on the individual analysis and tracking tools we use on our website.
In the account settings of the Tag Manager, we have allowed Google to receive anonymised data from us. However, this is only about the use and usage of our Tag Manager and not your data stored via the code sections. We allow Google and others to receive selected data in anonymised form. We thus consent to the anonymous sharing of our website data. Which summarised and anonymous data is forwarded exactly, we could not find out - despite long research. In any case, Google deletes all information that could identify our website. Google combines the data with hundreds of other anonymous website data and creates user trends as part of benchmarking measures. Benchmarking compares our own results with those of our competitors. Processes can be optimised on the basis of the information collected.
How long and where is the data stored?
When Google stores data, this data is stored on Google's own servers. The servers are distributed all over the world. Most of them are located in America. You can find out exactly where Google servers are located at https://www.google.com/about/datacenters/inside/locations/?hl=de.
You can find out how long the individual tracking tools store your data in our individual data protection texts for the individual tools.
How can I delete my data or prevent data storage?
The Google Tag Manager itself does not set cookies, but manages tags from various tracking websites. In our data protection texts for the individual tracking tools, you will find detailed information on how you can delete or manage your data.
Please note that when using this tool, your data may be stored and processed outside the EU. Most third countries (including the USA) are not considered secure under current European data protection law. Data to insecure third countries may therefore not simply be transferred, stored and processed there unless there are appropriate safeguards (such as EU standard contractual clauses) between us and the non-European service provider.
Legal basis:
The use of the Google Tag Manager requires your consent, which we have obtained with our cookie pop-up. According to Art. 6 para. 1 lit. a DSGVO (consent), this consent constitutes the legal basis for the processing of personal data, as may occur during the collection by web analytics tools.
5.4 Facebook Pixel
We use Facebook’s Facebook pixel on our website. For that, we have implemented a code on our website. The Facebook pixel is a segment of a JavaScript code, which, in case you came to our website via Facebook ads, loads an array or functions that enable Facebook to track your user actions. For example, if you buy a product on our website, the Facebook pixel is triggered and stores your actions on our website in one or more cookies. These cookies enable Facebook to match your user data (customer data such as IP address, user ID) with the data of your Facebook account. After that, Facebook deletes your data again. The collected data is anonymous as well as inaccessible and can only be used for ad placement purposes. If you are a Facebook user and you are logged in, your visit to our website is automatically assigned to your Facebook user account.
We exclusively want to show our products or services to persons, who are interested in them. With the aid of the Facebook pixel, our advertising measures can get better adjusted to your wishes and interests. Therefore, Facebook users get to see suitable advertisement (if they allowed personalised advertisement). Moreover, Facebook uses the collected data for analytical purposes and for its own advertisements.
If you are registered on Facebook, you can change the settings for advertisements yourself at https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen. If you are not a Facebook user, you can manage your user based online advertising at https://www.youronlinechoices.com/uk/your-ad-choices. You have the option to activate or deactivate any providers there.
We would like to note, that according to the European Court of Justice, there is currently no adequate level of protection for data transfer to the USA. Data processing is done mainly through Facebook Pixel. This may lead to data not being anonymously processed and stored. Furthermore, US government authorities may get access to individual data. The data may also get linked to data from other Facebook services you have a user account with.
If you want to learn more about Facebook’s data protection, we recommend you the view the company’s in-house data policies at https://www.facebook.com/policy.php.
5.5 Retargeting
In order to be able to individually recommend products which are relevant to you and which you are in fact interested in, on other websites as well, this website uses retargeting technologies from Google Analytics (section 5.1) and Facebook Pixel (section 5.4). You are therefore also targeted with our advertising on other websites if you have already shown interest in our offering. What we are aiming at is to make our advertising appealing and relevant to you. Retargeting involves the display of advertisements on the basis of a cookie-based analysis of previous user behaviour. On the subject of cookies, see above, section 4. You may object at any time to this analysis of your user behaviour. How this works can be found in sections 5.1, 5.3, 5.4 and 5.5.
6 Newsletter and email product recommendation
Description and purpose of data processing:
We regularly send email newsletters and email product recommendations, for which you can register in our online shop with your email address. We also analyse the way you use and read the emails you receive.
The data that are processed:
The data are: name, company, email address and information on when you opened the news letter, what links you clicked on in the newsletter and what images you accessed on it, the email clients used and, in the case of shop customers, the time of your last order and the customers' average order value.
Legal basis of data processing:
The legal basis for the processing of these data for the purpose of sending the newsletter is your consent under article 6 (1) letter a) GDPR and section 7 (2) no. 3 UWG (German act against unfair competition).
When you order our newsletter we expressly request your consent and verify it with the double opt-in procedure. To do so, we send a so-called check email to your email address after you order the newsletter. This email contains a confirmation link which you need to click on for finally ordering the newsletter. Without this confirmation you do not receive the newsletter.
You can withdraw your consent at any time by deregistering via the link provided in every newsletter or by a communication to us. The lawfulness of the data processing done on the basis of your consent up to the time of withdrawal is unaffected by a withdrawal.
If we have received your email address in connection with the sale of an article or a service and you have not objected, we reserve the right to send you by email, even without specific consent, offers for products from our range that are similar to those already purchased. This constitutes a legitimate interest. The legal basis in this case is article 6 (1) letter f) GDPR and section 7 (3) UWG.
You can object to this data processing at any time via a message to us or by using the link provided for the purpose in the advertising email. The only costs incurred are the transmission costs according to basic rates.
The data processing for the purpose of analysing your use and reading of the newsletter and your purchasing behaviour constitutes a legitimate interest of BP. The legal basis of this data processing is article 6 (1) letter f) GDPR. You have the right to object to the processing of data at any time. Further information on your right to object can be found in section 13.7 of this data protection statement.
Recipients of the data:
The data are transferred, exclusively subject to the above-stated purposes, to Inxmail GmbH, Wentzingerstr. 17, D-79106 Freiburg or to Zoho Corporation GmbH, Trinkausstr.7, 402413 Düsseldorf,
, which processes the data, as set out above, under contract from BP.
Duration of the storage of the data:
The data remain stored for the duration of your subscription to the newsletter. If you desubscribe from tne newsletter or object to the data processing for newsletter purposes, your data will only remain stored for the purpose of fulfilling statutory data retention requirements as long as these are applicable.
7 Data processing in case of making contact
Description and purpose of data processing:
When you contact us (e.g. by phone, email or contact form), your details will be processed for the purpose of dealing with your enquiry or other request and in the event that follow-up questions arise, and may be recorded in our customer relationship management system (CRM). If we are unable to process your enquiry ourselves, we will forward the information to a support partner for processing.
The information and data that are processed:
First name and surname, company*, postal address, telephone number, email address, email communication, possibly customer number, content of enquiry or other matter.
*In the case of data concerning legal persons, the information may possibly not be personal data within the meaning of the GDPR, so that in this case the GDPR and other data protection legislation do not apply. See recital 14 of the GDPR.
Legal basis of data processing:
The data processing constitutes a legitimate interest of BP. The legal basis of this data processing is article 6 (1) letter f) GDPR.
You have the right to object at any time, on grounds relating to your particular situation, to the processing of data. Further information on your right to object can be found in section 13.7 of this data protection statement.
Recipients of the data:
The data may be transferred within the scope of the aforementioned purposes to Zoho Corporation GmbH, Trinkausstr.7, 402413 Düsseldorf, which processes the data as described above on behalf of BP.
Duration of the storage of the data:
After your enquiry or the matter you raised has been finally dealt with, the data remain stored for the period of data retention required in commercial and tax law.
8 Data processing for catalogue orders
Description and purpose of data processing:
On our website it is possible for you to request catalogues, brochures and other information free of charge. Your data and the information you give are processed for the purpose of handling your request.
The information and data that are processed:
First name and surname, postal address, telephone number, email address, email communication, where applicable your comments with the enquiry, also specification of the catalogue, brochure and/or other information you wish to receive.
Legal basis of data processing:
The data are processed with your consent (article 6 (1) letter a) GDPR), which you can withdraw at any time with effect for the future; the lawfulness of the data processing done on the basis of your consent up to the time of withdrawal is unaffected by a withdrawal. The data processing also constitutes a legitimate interest of BP. The legal basis is article 6 (1) letter f) GDPR. You have the right to object at any time to the processing of data. Further information on your right to object can be found in section 13.7 of this data protection statement .
The data processing is also necessary for taking steps prior to entering into a contract between you and BP. The legal basis is article 6 (1) letter b) GDPR.
Duration of the storage of the data:
After your enquiry has been finally dealt with, the data remain stored for the period of data retention required in commercial and tax law.
9 Data processing for purchase orders
Description and purpose of data processing:
We process your personal data for the handling and execution of your orders. It is possible for you to purchase as a guest or to open a customer account protected by a password, where you can inspect the data on your orders and manage your address data, bank details, etc. You undertake to keep the personal access data confidential and not make it accessible to unauthorised third parties.
The data that are processed:
Company*, title, first name(s), surname, articles ordered, delivery address, invoice address, method of payment, mode of shipment, information on whether order is for a joint stock company; private person; medical practices, one-man companies, free-lancers and/or self-employed, sector, data of birth, email address and password.
*In the case of data concerning legal persons, the information may possibly not be personal data within the meaning of the GDPR, so that in this case the GDPR and other data protection legislation do not apply. See recital 14 of the GDPR.
Purpose and legal basis of this data processing:
The data processing is necessary for the purpose of concluding and subsequently performing the contract between you and BP for the purchase and shipment of goods. The legal basis is article 6 (1) letter b) GDPR.
Passing on your e-mail address to postal service providers for the purpose of informing you about the delivery date:
You will receive your order and shipping confirmation via your e-mail address as well as, depending on the respective transport service provider, the notification from DPD or from DHL for parcel notification as well as for possible delivery options. The legal basis for the transmission of the e-mail address to the respective parcel service provider and its use is Art. 6 (1) f) DSGVO, based on our overriding legitimate interest in also being able to offer the notification service to our customers and thus to make shipping as customer-friendly as possible. The transmitted data is deleted from the respective service provider when the parcel could be delivered.
Recipients of the data:
BP passes this data on to parcel service providers, delivery companies, credit and credit card institutions or other payment services (PayPal, Sofortüberweisung) selected by you as part of the payment process for the purpose of fulfilling the contract.
Duration of the storage of the data:
The data remain stored for the period of your registration as a user and also for the period of data retention required in commercial and tax law.
10 Credit check / Report to enquiry agency
Description of data processing:
In order to be able to offer you the purchase on account method of payment, we carry out a so-called credit check before display of the payment methods offered. For this purpose information is obtained on your payment record to date and creditworthiness information based on mathematical and statistical procedures. After you have entered your contact and invoice data, your consent is obtained to the performance of a credit check in the form of a checkbox to be confirmed by you.
If you fail to make a due payment, BP will transfer your data relating to the non-performance of contract (amount(s) owed to us, the relevant article(s), your name and address data) to unzer, Inkassodienstleister, und Partner [UNIVERSUM Inkasso GmbH, UNIVERSUM Payment Solution GmbH], subject to the conditions laid down in section 31 (2) BDSG (German data protection act) (for example if the payment obligation has been established by a court decision or you have admitted the claim).
The information and data that are processed:
Your name, your date of birth and your address, also information on the amount claimed, the goods purchased by you, the due date of the claim and information on your payment record to date and creditworthiness information based on mathematical and statistical procedures, using address data.
Purpose and legal basis of this data processing:
The purpose of the data processing is to ensure that you have the necessary credit status to fulfil your statutory payment obligations vis-à-vis BP in the case of prior performance by BP. The legal basis for the processing of these data is your consent under article 6 (1) letter a) and article 22 (2) letter c) GDPR. You can withdraw your consent at any time with effect for the future by communication to us. The lawfulness to date of the data processing done on the basis of your consent up to the time of withdrawal is unaffected by a withdrawal.
Data processing in the event of your failure to make a due payment, the conditions laid down in section 31 (2) BDSG being fulfilled, constitutes a legitimate interest of BP. The legal basis of this data processing is article 6 (1) letter f) GDPR. You have the right to object at any time, on grounds relating to your particular situation, to the processing of data. Further information on your right to object can be found in section 10.7 of this data protection statement.
Recipients of the data:
BP transmits the data and obtains information on your previous payment history and creditworthiness information on the basis of mathematical-statistical procedures using address data to assess creditworthiness. In detail, this may involve the following service providers - named by way of example but not exhaustively: Schufa Holding AG, CRIF Bürgel GmbH, Unzer GmbH, Universum Business GmbH, Bisnode D & B Austria GmbH.
Duration of the storage of the data:
The data remain stored for the period of your registration as a user and also for the period of data retention required in commercial and tax law.
11 Data processing for online job applications
Description and purpose of data processing:
Our online offering includes an overview of vacant positions in our company and the possibility of applying by email for a specific position or submitting an unsolicited application.
The information and data that are processed:
To assess your application we need information about your person (name, address, telephone number, email address) and your professional career, together with other documents such as letters of reference and photographs. Your data and documents are processed for the assessment and processing of your application and for no other purpose.
Legal basis of data processing:
The data processing is necessary for taking steps prior to entering into a contract between you and BP. The legal basis is article 6 (1) letter b) GDPR.
Duration of the storage of the data:
If we cannot accept your application, your data and documents will, after dispatch of the rejection letter, be stored only for the purpose of fulfilling data retention obligations under commercial and tax law, and then deleted.
12 Your rights
If your personal data are processed, you are the data subject within the meaning of the GDPR and you have the following rights vis-à-vis BP (the "controller"):
12.1 Right of access by data subject (article 15 GDPR)
You can obtain from BP confirmation as to whether personal data concerning you are being processed by us. Where that is the case, you have the right of access to the personal data and the information listed in article 15 GDPR.
12.2 Right to rectification (article 16 GDPR)
You have the right to rectification and/or completion by BP, without undue delay, if the processed data concerning you are inaccurate or incomplete. You can also have incomplete data completed by means of a supplementary statement.
12.3 Right to erasure (article 17 GDPR)
You can obtain from BP the erasure without undue delay of personal data concerning you where one of the grounds listed in article 17 GDPR applies.
Where BP has made the personal data public and is obliged pursuant to article 17 (1) GDPR to erase the personal data, we will, taking account of available technology and the cost of implementation, take reasonable steps, including technical measures, to inform the controllers processing the personal data that you as the data subject have requested the erasure by such controllers of any links to, or copy or replication of, those personal data.
The right to erasure does not apply where the conditions listed in paragraph 3 of article 17 GDPR are present.
12.4 Right to restriction of processing (article 18 GDPR)
Subject to the conditions listed in article 18 (1) GDPR, you can obtain restriction of the processing of personal data concerning you.
Where processing of the personal data concerning you has been restricted, such data may, with the exception of storage, only be processed with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the European Union or of a Member State.
Where the processing has been restricted subject to the above-stated conditions, you will be informed by us before the restriction of processing is lifted.
12.5 Notification obligation (article 19 GDPR)
BP will communicate any rectification or erasure of personal data or restriction of processing which it has carried out to all recipients to whom the personal data have been disclosed, unless this proves impossible or involves disproportionate effort.
We will inform you about these recipients if you so request.
12.6 Right to data portability (article 20 GDPR)
Subject to the conditions listed in article 20 (1) GDPR, you have the right to receive the personal data concerning you, which you have provided to BP, in a structured, commonly used and machine-readable format and the right to transmit those data to another controller. You also have the right to have the personal data concerning you transmitted directly from BP to another controller, where technically feasible.
12.7 Right to object
You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on point (e) or (f) of article 6 (1) GDPR.
BP will no longer process the personal data concerning you unless we demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or if the processing is for the establishment, exercise or defence of legal claims.
Where personal data concerning you are processed for direct marketing purposes, you have the right to object at any time to processing of personal data concerning you for such marketing, which includes profiling to the extent that it is related to such direct marketing.
Where you object to processing for direct marketing purposes, the personal data concerning you will no longer be processed for such purposes.
12.8 Right to withdraw declaration of consent under data protection law
You have the right to withdraw your declaration of consent under data protection law at any time. The withdrawal of consent will not affect the lawfulness of processing based on consent before the time of withdrawal.
12.9 Right to lodge a complaint with a supervisory authority
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of personal data relating to you infringes the GDPR.
The supervisory authority with which the complaint has been lodged will inform the complainant on the progress and the outcome of the complaint including the possibility of a judicial remedy pursuant to article 78 GDPR.
Do you have any questions about the shop or our products?
We will be happy to help you!
Our service hotline: +49 (0) 221 1656-999
We are available for you Mon-Thu from 8 a.m. until 5 p.m. and on Fri from 8 a.m. until 4. p.m
Any questions?
We are available for you Mon-Thu from 8 a.m. until 5 p.m., Fri from 8 a.m. until 4. p.m. //
We will help you!
Our service hotline: +49 (0) 221 1656 - 999
€ 0.14 /min. incl. VAT from a German landline, max. € 0.42 /min. incl. VAT from German mobile networks