Privacy Policy & Cookies

The protection of your privacy is an important concern for us. We process your personal data only in accordance with the provisions of the General Data Protection Regulation (GDPR) and other statutory data protection regulations, in particular the Federal Data Protection Act (BDSG). All data will of course be treated confidentially. With the following data protection information, we would like to explain to you in detail how your data is handled when using our websites.

1. General information on the collection of personal data

In principle, the collection, processing and use of personal data for the use of our Internet presence is limited to the necessary extent and data. Personal data are all data that can be related to you personally, e.g. name, address, e-mail addresses, user behavior. In addition, we use the common SSL (Secure Socket Layer) procedure within our website in conjunction with the highest level of encryption supported by your web browser. As a rule, this is a 256-bit encryption. If your browser does not support 256-bit encryption, we use 128-bit v3 technology instead. You can tell whether an individual page of our website is being transmitted in encrypted form by the closed display of the key or lock symbol in the lower status bar of your browser.

1.1 Responsible body

Responsible for the collection, processing and use of your personal data in accordance with Art. 4 para. 7 GDPR is

BOSIG GmbH,
Brunnenstraße 75-77
73333 Gingen

Phone: +49 (0) 7162/4099-0
Fax: +49 (0) 7162/4099-200
E-mail: info@bosig.de

Name and address of the Data Protection Officer

You can reach the BOSIG GmbH data protection officer at the following contact details:

MSO Consulting
Daniel Voigtländer
Zeisigweg 11
71397 Leutenbach
Phone: +49 (0) 7195 / 977 2959
E-mail: datenschutz@bosig.de

2. Purposes and legitimate basis of the processing of your personal data as well as further information on specific data processing

2.1 Visiting our websites

2.1.1 Description and scope of data processing

Whenever you visit our websites, our systems automatically record data and information from the computer system of the calling computer (personal data that your browser sends to our server). This also occurs if you do not register or otherwise provide us with information, for example through active entries. The following data is always collected when you visit our websites:

• IP address of the user
• Date and time of the request or access
• Time zone difference to Greenwich Mean Time (GMT)
• Content of the request (concrete page)
• Access status/HTTP status code
• Amount of data transferred in each case
• Website from which the request comes (from which the user's system accesses our website)
• Website that is called up by the user's system via our website
• Information about the browser type and version used
• Operating system and its interface
• Language and version of the browser software

This data is stored in the log files of our system. A storage together with other of your personal data does not take place regularly. 

2.1.2  Purposes of data processing

The storage of the aforementioned data, in particular the IP address by our systems, is basically only temporary for the duration of the session and is necessary to enable the proper operation and presentation of the website. This processing of your data also serves the purposes of evaluating and further ensuring system security and system stability as well as other administrative purposes.

Insofar as your data is stored in our log files, this is also only done for reasons of ensuring the functionality of our websites. In addition, the data serves us to optimize and ensure the security of our information technology systems. 

An evaluation of the data for marketing purposes does not take place in this context.

2.1.3  Legitimate bases of data processing

The legitimate basis for the processing and temporary storage of your personal data is Art. 6 para. 1 sentence 1 letter f GDPR. Our legitimate interests follow from the purposes for data collection described above.

2.1.4  Duration of storage

Your data will be deleted as soon as they are no longer required for the purpose for which they were collected. In the case of the collection of data for the provision of the website, this is the case when the respective session is ended.

In the case of storage of your data in log files, this is the case after seven days at the latest. Storage beyond this period is only envisaged in exceptional cases, for example if this is necessary for technical reasons or to improve our systems. In this case, the IP addresses of the users are deleted or alienated so that an allocation is no longer possible.

2.1.5  Possibility of objection and removal

The collection of your data for the provision of the website and the storage in log files if applicable is absolutely necessary for the operation of the website.

There is therefore no possibility of objection.

2.2 Contact form, e-mail contact

A contact form is integrated on our website, through which you can get in touch with us. When using the contact form, the data entered in the input mask is transmitted to us and stored:

• Title, first name, surname, company, address, telephone number, e-mail address
• Interests in specific services.

In addition, your IP address and the date and time of the request are stored. For the processing of the data, your consent will be obtained during the sending process and reference will be made to this Privacy Policy.

It is also possible to contact us via e-mail addresses provided by us. In this case, your personal data transmitted with the e-mail will be stored and processed by us, in particular to process your request or the reason for contacting us.

Depending on the content of your inquiry, the data will be forwarded to the responsible company in the BOSIG Group. The data will be used exclusively for processing the conversation.

2.2.1  Legitimate basis of the data processing

The legitimate basis for the processing of your data when using the contact form is your consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR.

The legitimate basis for the processing of your data when sending an e-mail to us is Art. 6 para. 1 sentence 1 lit. a as well as f GDPR. The processing is based on an implied consent and on our legitimate interests. If the e-mail contact is aimed at the conclusion of a contract, the additional legitimate basis for processing is Art. 6 para. 1 sentence 1 lit. b GDPR.

2.2.2  Purposes of data processing

The processing of personal data from the input mask or the e-mail sent to us serves only to process your contact with us. In the case of contacting us by e-mail, this indicates the necessary legitimate interest in the processing of the data by us. The other personal data processed during the sending process serves to prevent misuse of the contact form and to ensure the security of our information technology systems.

2.2.3  Duration of storage

We will delete your data as soon as it is no longer required for the purposes described. For the personal data from the input mask of the contact form and those sent by e-mail, this is the case when the respective conversation with you has ended. As a rule, the conversation is finished when the circumstances indicate that the reason for contacting us has been conclusively clarified.

The additional personal data collected during the sending process will be deleted after a period of 7 days at the latest.

2.2.4  Possibility of objection and erasure

You have the possibility to revoke your consent to the processing of your personal data at any time. If you contact us by e-mail, you can object to the storage of your personal data at any time. In such a case, however, the conversation with you may not be able to continue. All personal data stored in the course of the contact will be deleted in this case.

2.3 Orders

2.3.1  

We process your order data (such as name, address, e-mail address, delivery modalities and other order information) to process the order and to deliver the ordered goods. In addition, we process the payment information required according to the payment method; for example, we store IBAN and BIC ourselves.

2.3.2  

The legitimate basis for processing is the conclusion and fulfilment of the purchase contract for the ordered goods, Art. 6 para. 1 sentence 1 lit. b GDPR.

2.3.3  

These data are deleted when they are no longer required for the execution of the contract (including customer service and warranty), unless we are legally obliged to store them, e.g. due to commercial or tax law retention obligations.

2.4 Applicant data

2.4.1  

If you apply for a job offer or send an unsolicited application, you agree that we may save the documents sent and use the information contained therein to process your application. As a rule, your documents contain special categories of personal data (e.g. information on marital status; information on health; a photograph allowing conclusions to be drawn about your ethnic origin and, where applicable, sight and/or religion; similarly sensitive data within the meaning of Art. 9 GDPR), which may only be processed in the present form with your consent. You agree that we may process the special categories of personal data contained in your letter of application and the attached documents for the purpose of carrying out the application procedure. This consent serves exclusively to enable us to consider the application in its present form. The information will not be considered in the application process, unless there is a legal obligation to do so. You can refuse your consent to the processing of the application in the application process without giving reasons and revoke any consent you have given at any time, for example by e-mail. In the event of revocation, your data covered by your consent will be deleted immediately. As a result, data processing based on this consent may no longer be continued in the future. In the event that consent is not granted or is revoked, an application already submitted cannot be considered in its present form.

2.4.2  

If your application is unsuccessful, you can agree that your personal data, which have been communicated during the entire application procedure (e.g. in cover letters, CV, certificates, applicant questionnaires, applicant interviews), may be stored beyond the end of the specific application procedure. For this purpose, you can consent to us using this data to contact you later and to continue the application procedure if you should be considered for another position. If special categories of personal data in accordance with Art. 9 GDPR have been communicated via the application documents (e.g. a photo that shows the ethnic origin, information about being severely handicapped, etc.), the consent also refers to this data. This consent also applies to data on your qualifications and activities from generally accessible data sources (especially professional social networks), which we have permissibly collected during the application process. Your data will not be passed on to third parties. This consent is voluntary and has no effect on your chances in the current application procedure. You can also revoke your consent at any time. In this case, your data will be deleted immediately after completion of the application procedure. As a result, we are not allowed to continue the data processing that was based on this consent in the future.

2.4.3  

The legitimate basis for data processing of applications is your consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR.

2.5 General information on the use of cookies

2.5.1   

When you visit and use our website, cookies are stored on your computer. Cookies are text files that are stored in the Internet browser or by the Internet browser on the user's computer system. If a user calls up a website, a cookie may be stored on the user's operating system. This cookie contains a characteristic string that enables the browser to be uniquely identified when the website is called up again. 

Some of them are essential, i.e. they are technically necessary for the operation of our website. Other cookies are used for statistical purposes or to analyze the access to our website or for marketing purposes or to offer you the use of external media. Temporary/session cookies as well as longer stored cookies (so-called permanent cookies) are used. Temporary cookies are deleted as soon as you close your browser. Permanent cookies are retained for a longer period of time, but can be deleted manually at any time. Some cookies are placed by third parties.

The legal basis for data processing in the use of essential cookies is Art. 6 para. 1 sentence 1 lit. f GDPR, in the use of all other cookies the legal basis is your consent under Art. 6 para. 1 sentence 1 lit. a GDPR. If we do not process your data on the basis of your explicit consent, your personal data will only be processed to the extent necessary to protect our legitimate interests or the legitimate interests of a third party and not to the extent that your interests or fundamental rights and freedoms that require the protection of personal data prevail.

2.5.2   

We use only essential cookies as follows:

essential/technically necessary cookies (1)

Essential or technical cookies enable basic functions and are necessary for the proper functioning of the website.

iwcc (privacy policy cookie, http-cookie)

• Provider:       bosig.de
• Purpose:        Stores the user's consent status for cookies on the current domain     
• Duration:       1 year

2.5.3   

The legal basis for data processing in the use of essential cookies is Art. 6 para. 1 sentence 1 lit. f GDPR, in the use of all other cookies the legal basis is your consent under Art. 6 para. 1 sentence 1 lit. a GDPR. If we do not process your data on the basis of your explicit consent, your personal data will only be processed to the extent necessary to protect our legitimate interests or the legitimate interests of a third party and not to the extent that your interests or fundamental rights and freedoms that require the protection of personal data prevail.

3. Transfer of your data to third parties

We do not share personal information with companies, organizations or individuals outside of our company except in one of the following circumstances:

3.1 With your consent

We pass on personal data to third companies, organizations or persons outside our company if you have given us your explicit consent to do so.

3.2 Processing by other bodies

We may make your personal data available to our third party business partners, other trustworthy companies or persons who process it on our behalf. This will always be done based on our instructions and in accordance with our privacy policy and other appropriate confidentiality and security measures.

3.3 For legal reasons

We will disclose your personal information to companies, organizations or individuals outside of our company if we have a good faith belief that access to or use, preservation or disclosure of such information is reasonably necessary, in particular to comply with any applicable law, regulation or legal process or to comply with an enforceable governmental request.

4. Disclosure of your data to a third country or international organization

Unless expressly stated in this privacy policy, your personal data will not be transferred to third countries or international organizations.

5. Automated decision making

There is no automated decision making.

6. Your rights

You have the right:

• to request information about your personal data processed by us in accord-ance with Art. 15 GDPR. In particular, you may request information on the purposes of processing, the category of personal data, the categories of re-cipients to whom your data have been or will be disclosed, the planned stor-age period, the existence of a right of rectification, cancellation, restriction of processing or objection, the existence of a right of appeal, the origin of your data, if not collected by us, as well as the existence of automated decision making including profiling and, if applicable, meaningful information on the details of the data;
• in accordance with Art. 16 GDPR, to demand without delay the correction of incorrect or incomplete personal data stored by us;
• in accordance with Art. 17 GDPR to demand the deletion of your personal data stored with us, unless processing is necessary to exercise the right to freedom of expression and information, to fulfil a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims;
• in accordance with Art. 18 GDPR, to demand the restriction of the processing of your personal data, insofar as the accuracy of the data is disputed by you, the processing is unlawful, but you refuse to delete it and we no longer re-quire the data, but you require it for the assertion, exercise or defense of legal claims or you have lodged an objection to the processing in accordance with Art. 21 GDPR;
• in accordance with Art. 20 GDPR, to receive your personal data that you have provided us with in a structured, common and machine-readable format or to request its transfer to another responsible party;
• in accordance with Art. 7 para. 3 GDPR, to revoke your consent to us at any time (see also Section 7.1). As a result, we may no longer continue data pro-cessing based on this consent for the future and
• complain to a supervisory authority in accordance with Art. 77 GDPR. As a rule, you can turn to the supervisory authority of your usual place of resi-dence or workplace or to the supervisory authority of our company head-quarters.