Data protection

Privacy Policy

I. Name and address of the controller
Bischoff GmbH

Draisstraße 19 a-b
76461 Muggensturm

Germany

Tel.: 07222/966650
Email office@bischoff-group.com

Website: https://www.bischoff-group.com

is the controller within the meaning of the EU General Data Protection Regulation (GDPR) and other national data protection laws.

II. Name and address of the Data Protection Officer
The controller’s Data Protection Officer is:

AGOR AG

Niddastraße 74

60329 Frankfurt am Main

Tel: +49 (0) 69 – 9494 32 410

Email: info@agor-ag.com

Website: www.agor-ag.com

General information on data processing

Scope of the processing of personal data

As a rule, we collect and use our website users’ personal data only to the extent necessary to provide a functional website and our content and services.

As a rule, we collect and use our users’ personal data only with their consent. An exception to this principle applies where processing is permitted by law or where obtaining prior consent is not possible for factual reasons.

Legal basis for processing personal data
The legal bases for processing personal data generally arise
from:

• Art. 6(1) sentence 1 lit. a GDPR when obtaining the data subject’s consent
• Art. 6(1) sentence 1 lit. b GDPR for processing necessary for the performance of a contract to which the data subject is a party. This also includes processing necessary to take steps prior to entering into a contract
• Art. 6(1) sentence 1 lit. c GDPR for processing necessary to comply with a legal obligation
• Art. 6(1) sentence 1 lit. d GDPR where vital interests of the data subject or another natural person require the processing of personal data
• Art. 6(1) sentence 1 lit. f GDPR where processing is necessary for the purposes of the legitimate interests pursued by our company or a third party, unless the interests, fundamental rights and freedoms of the data subject override those interests. To rely on legitimate interests as a basis for processing personal data, an assessment is carried out for each relevant process in coordination with the Data Protection Officer, and the following three requirements must be met:
  • 1) The controller processing the personal data and/or
    a third party has a legitimate interest in the data processing.
  • 2) The processing is necessary to safeguard the legitimate interest.
  • 3) The interests or fundamental rights and freedoms of the data subject requiring
    the protection of personal data do not override the legitimate interest.

Data deletion and storage period

Users’ personal data will be deleted or blocked as soon as the purpose for storing it no longer applies. Storage beyond this may take place if provided for by the European or national legislator in EU regulations, laws or other provisions to which the controller is subject. Data will also be blocked or deleted when a retention period prescribed by the aforementioned provisions expires, unless further storage of the data is necessary for entering into or performing a contract.

Use of our website, general information

Description and scope of data processing

Each time our website is accessed, our system automatically collects data and information from the user’s computer system. The following information may be collected:

• Information about the browser type and version used
• The user’s operating system
• The user’s internet service provider
• The user’s IP address
• Date and time of access
• Websites from which the user’s system accesses our website
• Websites accessed by the user’s system via our website

The data described is stored in our system’s log files. This data is not stored together with other personal data of the user.

Purpose and legal basis for data processing

The temporary storage of the IP address by our system is necessary to deliver the website to the user’s computer. For this purpose, the user’s IP address must remain stored for the duration of the session.

Storage in log files is carried out to ensure the functionality of the website. In addition, the data helps us optimize the website and ensure the security of our IT systems. The data is not evaluated for marketing purposes in this context.

The legal basis for the temporary storage of the data and the log files is Art. 6(1) sentence 1 lit. f GDPR.

The collection of your personal data to provide our website and the storage of the data in log files is strictly necessary for operating the website. Therefore, the user has no right to object.

Storage period

Your data will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. If your data is collected to ensure the provision of the website, it will be deleted when the respective session ends. If your data is stored in log files, it will be deleted after no later than seven days. Further storage is possible; in this case, users’ IP addresses are deleted or anonymized. This means the accessing client can no longer be assigned.

General information on the use of cookies

We use cookies on our website. Cookies are text files that are stored in the internet browser or by the internet browser on the user’s computer system. When you access a website, a cookie may be stored on your operating system. It contains a characteristic string that enables the browser to be uniquely identified when the website is accessed again.

We use cookies to make our website more user-friendly. Some elements of our website require that the browser can be identified even after a page change.

TDDDG:

The legal basis for storing cookies, device identifiers and similar tracking technologies, or for storing information on the end user’s terminal equipment and accessing this information, is the European ePrivacy Directive in conjunction with the Telecommunications Digital Services Data Protection Act (TDDDG).

Please note that the legal bases for processing the personal data collected in this context then arise from the GDPR (Art. 6(1) sentence 1 GDPR). The legal basis applicable in each specific case for processing personal data can be found further below for the respective cookie or the respective processing itself.

The primary legal basis for storing information on the end user’s terminal equipment—particularly for storing cookies—is your consent, Section 25(1) sentence 1 TDDDG. Consent is given when you visit our website—although it does not have to be given—and can be withdrawn at any time in the cookie settings.

Pursuant to Section 25(2) no. 2 TDDDG, consent is not required if storing information on the end user’s terminal equipment or accessing information already stored on the end user’s terminal equipment is strictly necessary so that the provider of a telemedia service can provide a telemedia service expressly requested by the user. The cookie settings indicate which cookies are to be classified as strictly necessary (often also referred to as “technically necessary cookies”), therefore fall under the exception in Section 25(2) TDDDG and thus do not require consent.

GDPR:

When cookies are used, the following data is stored and transmitted:
Log-in information
The legal basis for processing personal data using cookies arises from Art. 6(1) sentence 1 lit. f GDPR. The purpose of using technically necessary cookies is to simplify the use of our website.

We would like to point out that certain functions of our website can only be offered with the use of cookies.
These include the following applications:
Use of the form

User data collected through technically necessary cookies is not used
to create user profiles.

Cookies are stored on the user’s computer and transmitted by the user to our site. As a user, you therefore have control over the use of cookies.
You can restrict or disable the transmission of cookies by changing the settings in your internet browser. Stored cookies can also be deleted there. Please note that if you disable cookies, you may no longer be able to use all functions of our website.

The legal basis for processing personal data using cookies for analysis and advertising purposes is Art. 6(1) sentence 1 lit. a GDPR, provided the user has given consent.

Cookie consent with Borlabs

This website uses the provider Borlabs (Borlabs – Benjamin A. Bornschein, Rübenkamp 32, 22305 Hamburg), which sets a technically necessary cookie (borlabs-cookie) to enable you to make individual cookie settings and to document them in compliance with data protection requirements. When our website is accessed, the following data is transmitted to Borlabs: your consent or withdrawal of consent to
setting cookies, a cookie set in your browser by the Borlabs cookie, the cookie lifetime and version, domain and path of the website, and the UID. The UID is a randomly generated ID and not personal information. Borlabs does not process any personal data.

The Borlabs cookie consent technology is used to obtain the legally required consents for the use of cookies. The legal basis for this is Art. 6(1) sentence 1 lit. c GDPR.

Your consents given when you entered the website are stored in the borlabs-cookie. If you wish to withdraw these consents, simply delete the cookie in your browser. When you re-enter/reload the website, you will be asked again for your cookie consent. Here you can view and adjust your cookie settings.

Your rights / data subject rights

Right of access

You have the right to obtain information from us, as the controller, as to whether and which personal data concerning you is processed by us, as well as further information in accordance with the statutory requirements under Art. 13, 14 GDPR.

You can assert your right of access at:
info@bischoff-group.com

Right to rectification

If the personal data concerning you that we process is inaccurate or incomplete, you have the right to rectification and/or completion vis-à-vis us. Rectification will be carried out without undue delay.

Right to restriction

You have the right to restriction of the processing of personal data concerning you
in accordance with the statutory provisions (Art. 18 GDPR).

Right to erasure

If the grounds set out in Art. 17 GDPR apply, you may request that personal data concerning you be erased without undue delay.
We would like to point out that the right to erasure does not apply insofar as processing
is necessary for one of the exceptions listed in Art. 17(3).

Right to be informed

If you have asserted your right to rectification, erasure or restriction of processing,
we are obliged to inform all recipients to whom personal data concerning you
has been disclosed of this rectification or erasure of the data
or restriction of processing, unless this proves impossible or is with
disproportionate effort. You also have
the right to be informed about these recipients.

Right to data portability

Under the GDPR, you also have the right to receive the personal data concerning you
that you have provided to us in a structured, commonly used and machine-readable
format, or to request that it be transmitted to another controller.

Right to withdraw the data protection consent declaration

You have the right to withdraw your data protection consent declaration at any
time. We would like to point out that withdrawing consent does not affect the
lawfulness of processing carried out on the basis of consent up to the time of
withdrawal.

Right to object

You also have the right, on grounds relating to your particular situation,
to object at any time to the processing of personal data concerning you,
that is carried out on the basis of Art. 6(1) sentence 1 lit. e or f GDPR.

Automated individual decision-making, including profiling

Under the EU General Data Protection Regulation, you also have the right not to be subject to a
decision based solely on automated processing—including profiling—that
produces legal effects concerning you or
similarly significantly affects you.

Right to lodge a complaint with a supervisory authority

If you believe that the processing of personal data concerning you
violates the GDPR, you also have the right to lodge a complaint with
a supervisory authority, in particular in the Member State of your habitual residence, your
place of work or the place of the alleged infringement.

Data transfer outside the EU

The GDPR ensures an equally high level of data protection within the European Union. When selecting our service providers, we therefore rely on European partners wherever possible when your personal data is to be processed.
Only in exceptional cases will we have data processed outside the European Union in the course of using third-party services. We only permit processing of your data in a third country if the special requirements of Art. 44 et seq. GDPR are met. This means that your data may then only be processed on the basis of special safeguards, such as an adequacy decision officially recognized by the EU Commission, or compliance with officially recognized specific contractual obligations, the so-called “Standard Data Protection Clauses”.

EU-US Trans-Atlantic Data Privacy Framework

Under the so-called “Data Privacy Framework” (DPF), the EU Commission has also recognized the
level of data protection as adequate for certain companies from the USA under the
adequacy decision of 10/07/2023. You can find the list of
certified companies as well as further information on the DPF on the
website of the US Department of Commerce at
https://www.dataprivacyframework.gov/s/participant-search (in English).

Data processing under the Swiss FADP

In principle, the use of our website is subject to the statutory provisions of the
GDPR. If you also visit our website from Switzerland and the related
data processing also affects you as a Swiss citizen,
these data protection provisions apply to you analogously to the GDPR also for
you under the Swiss Federal Act on Data Protection (“Swiss FADP” in the
version of September 1, 2023).

The Swiss FADP generally does not require stating a legal basis. Accordingly,
we process your data from Switzerland only if the processing is lawful,
carried out in good faith and proportionate in accordance with Art. 6(1) and (2)
of the Swiss FADP. Furthermore, we collect your data only for specific purposes that are
recognizable to the data subject and process it only in a manner compatible with
those purposes in accordance with Art. 6(3) of the Swiss FADP.

Please also note in this context that certain terms are worded differently under
the GDPR, but have the same legal meaning as under
the Swiss FADP. Thus, the GDPR terms used in these
privacy notices “processing” of
“personal data” as well as “legitimate interest” and “special categories of
data” correspond to the terms used in the Swiss FADP “processing” of “personal data”,
“overriding interest” and “particularly sensitive personal data”.

The data subject rights set out here pursuant to Art. 12 et seq. GDPR can also be asserted by
data subjects from Switzerland analogously under the provisions of Art. 25 et seq. Swiss FADP
.

Minors under 16 years of age

Minors under 16 years of age are expressly not the target audience of our website and our offers on this website. We would like to point out that parents/legal guardians must supervise their children’s online activities. Minors under 16 years of age should not transmit any personal data to us without the consent of their parents or legal guardians. We do not explicitly request personal data from minors under 16 years of age, do not knowingly collect it, and do not pass it on to third parties.

Newsletter

General

You can subscribe to a free newsletter on our website, with which we
inform you about our current and interesting offers. The advertised goods and
services are named in the consent declaration. The data you enter in the input form
during registration is transmitted to us.

On the basis of the consent obtained from you during the registration process,
we collect the following data:
Last name, first name, email address

In addition, the following data is stored at the time of transmission:
IP address of the accessing computer, date and time of registration.

Your data will not be passed on to third parties in connection with data processing for sending
newsletters. The data is used exclusively for sending the
newsletter.

Double opt-in and logging

Registration for our newsletter takes place using a so-called double opt-in procedure. You
will receive an email after registering, in which you will be asked to confirm your registration.
This confirmation is necessary to prevent anyone from registering with third-party email
addresses.

Newsletter registrations are logged in order to be able to demonstrate the registration process in accordance with legal requirements. This includes storing the time of registration and confirmation, as well as the IP address.

Legal basis

The legal basis for processing the data is Art. 6(1) sentence 1 lit. a GDPR if the user has given
consent. Collecting the user’s email address serves
to deliver the newsletter.

Deletion, withdrawal and objection

Your data will be deleted as soon as it is no longer necessary to achieve the purpose for which it was
collected. Your email address will therefore be stored for as long as the
newsletter subscription is active. The subscription of the newsletter can be terminated by you
at any time by withdrawing your consent. For this purpose, there is
a corresponding link in each newsletter.

We also inform you that you can object at any time to the future processing of your personal data in accordance with the statutory provisions under Art. 21 GDPR. The objection may in particular be made against processing for direct marketing purposes.

Statistical analysis

We would like to point out that we evaluate your user behavior when sending the newsletter. For this evaluation, the emails sent contain so-called web beacons or tracking pixels, which are one-pixel image files stored on our website. For the evaluations, we link the data mentioned in item 1 and the web beacons with your email address and an individual ID.

Links contained in the newsletter also contain this ID.

The data is collected exclusively in pseudonymized form; the IDs are therefore not linked to
your other personal data, and direct identification of a person is
excluded.

Using the data obtained in this way, we create a user profile in order to tailor the newsletter to your
individual interests. In doing so, we record when you read our newsletters,
which links you click in them, and infer your personal interests from this.
We link this data with actions you take on our website.

If you do not want analysis via our newsletter, you must unsubscribe from the newsletter. For this purpose, we provide a corresponding link in each newsletter message. You can also unsubscribe directly on the website. The information is stored for as long as you have subscribed to the newsletter.

Electronic contact

If you would like to contact us, a contact form is available on our website,
which you can use for electronic contact. The data entered in the
input form is transmitted to us and stored. This
data is:
Name, company, email address, telephone number, message

At the time the message is sent, the following data is also stored:
The user’s IP address, date and time of contact
You can also contact us via the email address provided.
In this case, the user’s personal data transmitted with the email will be stored.

Your data will not be passed on to third parties in this context; the data
is used exclusively for processing the communication.

The legal basis for processing the contact request and handling it is
generally Art. 6(1) sentence 1 lit. b GDPR.

If additional personal data is processed during the sending process, this serves only to prevent misuse of the contact form and to ensure the security of our IT systems.

Your data will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. For the personal data from the contact form input fields and that sent by email, this is the case when the respective conversation with the user has ended. The conversation is deemed ended when it can be inferred from the circumstances that the matter in question has been conclusively clarified.

The additional personal data collected during the sending process
will be deleted after no later than seven days.

Google Tag Manager

This website uses Google Tag Manager. Google Tag Manager is a solution that allows marketers to manage website tags via an interface. The tool itself (which implements the tags) does not use cookies and, for technical reasons, only collects your IP address. The tool triggers other tags, which in turn may set cookies and collect data. Google Tag Manager does not access this data. If deactivation has been carried out at the domain or cookie level, it will remain in place for all tracking tags implemented with Google Tag Manager.

If we have obtained your consent, the legal basis for using Google Tag Manager is Art. 6(1) sentence 1 lit. a GDPR. Otherwise, the legal basis for using the technically necessary cookie arises from our legitimate interest pursuant to Art. 6(1) sentence 1 lit. f GDPR.

Further information can be found in the provider’s terms of use at:
https://www.google.com/intl/de/tagmanager/use-policy.html

Content Delivery Networks (CDN)

This site uses so-called content delivery networks to provide popular online libraries and web fonts. Access then takes place directly on the operators’ servers, so that data such as the accessing IP address, referrer, browser information, etc. is generated there.

The legal basis is our legitimate interests pursuant to Art. 6(1) sentence 1 lit. f GDPR, to present our site in line with requirements and optimize the user experience.
You can prevent CDNs from collecting and processing your data by disabling the execution of script code in your browser or installing a script blocker in your browser (you can find one, for example, at www.noscript.net).
Below is a list of the CDNs used:

• cdn.jsdelivr.net

Google Analytics

This website uses Google Analytics, a web analytics service provided by Google Inc.
(“Google”). Google Analytics uses so-called “cookies”, text files that are stored on your computer and enable analysis of your use of the website. The information generated by the cookie about your use of this website is generally transmitted to a Google server in the USA and stored there. If IP anonymization is activated on this website, your IP address will, however, be truncated by Google within Member States of the European Union or in other contracting states to the Agreement on the European Economic Area beforehand. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, compile reports on website activity and provide other services related to website use and internet use to the website operator.

The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. You can prevent the storage of cookies by adjusting your browser software settings; however, we would like to point out that in this case you may not be able to use all functions of this website to their full extent. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available at the following link:
http://tools.google.com/dlpage/gaoptout?hl=de.

This website uses Google Analytics with the extension “_anonymizeIp()”. This means
IP addresses are processed in truncated form, so personal identification can be
excluded. If the data collected about you can be linked to a person,
this link is immediately excluded and the personal data is therefore
deleted without delay.

We use Google Analytics to analyze and regularly improve the use of our website. The statistics obtained enable us to improve our offering and make it more interesting for you as a user. The legal basis for using Google Analytics is your consent pursuant to Art. 6(1) sentence 1 lit. a GDPR.
Third-party provider information: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001.

Terms of use: http://www.google.com/analytics/terms/de.html,
Privacy overview: http://www.google.com/intl/de/analytics/learn/privacy.html,
and the privacy policy: http://www.google.de/intl/de/policies/privacy.

The legal basis for processing personal data using cookies arises from Art. 6(1) sentence 1 lit. f GDPR. The purpose of using technically necessary cookies is to simplify the use of our website.
We would like to point out that certain functions of our website can only be offered with the use of cookies.