Privacy Policy
I. General notes
SCHULLER&Company GmbH (hereinafter referred to as "Schuller") operating the website www.bocad.com takes the protection of personal data very seriously. We treat personal data confidential and in accordance with applicable legal data protection regulations and based upon this privacy policy. The legal basis can be found in particular in the General Data Protection Regulation (DS-GVO) and the Federal Data Protection Act (BDSG).
When you use this website, various personal data are processed depending on the type and extent of use. Personal data is information that relates to an identified or identifiable natural person (hereinafter "data subject"). An identifiable natural person is one who can be identified directly or indirectly (e.g. by means of association with an online identifier). This includes information such as the name, address, telephone number and date of birth.
This privacy policy informs you in accordance with Art. 12 et seq. DS-GVO about handling of your personal data when using our website. In particular, it explains which data we collect and what we use it for. In addition, it informs you about how and for what purpose this is done.
This privacy policy expressly refers to the website-specific data processing procedures when visiting our website at www.schullerandcompany.com. Schuller also allocates great importance to the protection of personal data beyond website-specific data processing. Please ask your contact person at our company for our current data protection policy in accordance with the DS-GVO.
II. Responsible person
The controller is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data (e.g. names, e-mail addresses, etc.). The controller within the meaning of the GDPR and the applicable national data protection laws (esp. BDSG) and other data protection provisions is the:
SCHULLER & Company GmbH
Represented by the Managing Director Mr. Helmut Schuller
Tel.: +49 (0) 6196 7008 210
E-mail: dataprotection@schullerco.com
III. Company data protection officer
We have appointed a company data protection officer for our company. You can reach him under:
Data Protection Officer
Dr. Christian Breuer
Tel.: 089/383870
E-mail: dataprotection@schullerco.com
IV. Purposes and legal bases of data processing
1. Call and visit of our website - server log files
For the purpose of the technical provision of the website, it is necessary that we process certain information automatically transmitted by your browser enabling our website to be displayed in your browser and your use of the website. This information is automatically collected each time you call up our website and is automatically stored in so-called server log files. These include:
-
Browser type and version
-
Operating system used
-
Website from which the access is made (referrer URL)
-
Host name of the accessing computer
-
Date and time of access
-
IP address of the requesting computer
The storage of the aforementioned access data is necessary for technical reasons to provide a functional website and to ensure system security. This also applies to the storage of your IP address, which necessarily takes place and, under further conditions, can at least theoretically enable an assignment to your person. In addition to the above-mentioned purposes, we use server log files exclusively for the needs-based design and optimization of our Internet offering purely statistically and without any inference to your person. This data will not be merged with other data sources, nor will the data be evaluated for marketing purposes.
The access data collected in the context of the use of our website will only be stored for the period of time during this data is required to achieve the aforementioned purposes. Your IP address is stored on our web server for a maximum of 7 days for IT security purposes.
If you visit our website to obtain information about our range of products and services or to use them, the basis for the temporary storage and processing of the access data is Art. 6 (1) sentence 1 lit. b DS-GVO (legal basis), which permits the processing of data for the performance of a contract or for the implementation of pre-contractual measures. In addition, Art. 6 para. 1 p. 1 lit. f DS-GVO serves as the legal basis for the temporary storage of technical access data. Our legitimate interest is to be able to provide you with a technically functioning and user-friendly website and to ensure the security of our systems.
2. Contact form
If you send us inquiries via the contact form, your message (comment) including the contact data you provided there will be stored and processed accordingly for the purpose of processing and answering the inquiry as well as for follow-up questions. We do not pass on this data to third parties unless this is necessary in the context of processing and answering your contact request or you have given us your corresponding consent.
If you contact us within the framework of an existing contractual relationship or contact us in advance for information about our range of services or our other services, the data and information you provide will be processed for the purpose of processing and responding to your contact request in accordance with Art. 6 (1) sentence 1 lit. b DS-GVO (legal basis). Incidentally, for the protection of our legitimate interests pursuant to Art. 6 para. 1 p. 1 lit. f DS-GVO for the appropriate response to customer/contact inquiries.
The data you enter in the contact form will be stored until the purpose for storing/processing the data no longer applies (e.g. after processing of your request has been completed). Mandatory legal provisions - in particular retention periods - remain unaffected.
3. Use of cookies and related functions/technologies
We sometimes use so-called cookies on our website. Cookies do not cause any damage to your computer and do not contain viruses. Cookies serve to make our offer more user-friendly, effective and secure and to enable the provision of certain functions. Cookies are small text files that are stored on your computer and saved by your browser. A cookie contains a characteristic string of characters that allows your browser to be uniquely identified when you return to the website.
Most of the cookies we use are so-called "session cookies". They are automatically deleted after the end of your visit or browser session (so-called transient cookies). Other cookies remain stored on your terminal device for a specified period of time or until you delete them (so-called persistent cookies). These cookies enable us to recognize your browser on your next visit. Upon written request, we are happy to provide further information on the functional cookies used. In this case, Please contact us using the above contact information.
You can set up your browser to be informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general and activate the automatic deletion of cookies when closing the browser. You can regularly obtain the procedure for deactivating cookies via the "Help" function of your Internet browser. When disabling cookies, the functionality and/or full availability of this website may be limited. For further cookie-specific setting and deactivation options, please also see below the individual explanations of the cookies and associated functions/technologies specifically used when visiting our website.
Some of the cookies we use on our website come from third parties that help us analyze the impact of our website content and visitors' interests, measure the performance of our website, or serve customized advertising and other content to our website or other websites. As part of our website, we use both first party cookies (only visible from the domain you are visiting) and third party cookies (visible across domains and regularly set by third parties).
Cookie-based data processing is carried out on the basis of your consent pursuant to Art. 6 (1) sentence 1 lit. a DS-GVO (legal basis) or on the basis of Art. 6 (1) sentence 1 lit. f DS-GVO (legal basis) to protect our legitimate interests. Our legitimate interests here lie in particular in being able to provide you with a technically optimized website user-friendly and tailored to your needs, as well as to ensure the security of our systems. You can revoke the consent you have given us at any time, e.g. by deactivating the cookie-based tools/plugins listed in detail in the following overview. By making the appropriate settings, you can also object to processing based on legitimate interests.
Specifically, the following cookie-based tools/plugins are used within this website:
This website uses the functions of Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, on the basis of your consent given to us (Art. 6 (1) p. 1 lit. a DS-GVO). You can give us your consent voluntarily when you call up our website by pressing the corresponding button in the "cookie banner". On a regular basis, data is also transmitted to Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) as part of the processing described below. Google Ireland Limited and Google LLC are hereinafter jointly referred to as "Google". Google Analytics uses cookies (first-party cookies), which enable an analysis of your use of the website. However, this does not mean that we gain direct knowledge of your identity as a result. Google uses the information generated by the cookies on our behalf for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage. This enables us to improve the quality of our website and its content. We learn on the basis of statistical analyses how the website is used and can thus constantly optimize our offer.
The information generated by the Google Analytics cookies about your use of this website (for example, time, location and frequency of your website visit, including IP address) will be transmitted to and stored by Google on servers in the United States. Google is certified under the Privacy Shield agreement (https://www.privacyshield.gov/eu-us-framework). We have set the storage period at Google for corresponding data at user and event level to 14 months (shortest possible setting option).
4. IP anonymization
We have activated the IP anonymization function on this website. This means that your IP address is shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area before being transmitted to the USA and thereby anonymized. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. According to Google's own information, the IP address transmitted by your browser within the scope of Google Analytics is not merged with other Google data relating to your person.
5. Browser plugin
You can prevent the storage of Google Analytics cookies by selecting the appropriate settings on your browser software (see above). You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de
6. Objection to data collection
Alternatively, you can enable/disable the collection of your data by Google Analytics, especially on mobile devices, by clicking on the following link:
Disable Google Analytics: https://tools.google.com/dlpage/gaoptout?hl=de
When deactivated, a cookie is set that prevents the collection of your data during future visits to this website.
Specifically, the following tracking cookies are used by Google Analytics:__utmz, __utma, __utmb, __utmc, __utmt.
More information on the handling of user data at Google Analytics and the security and data protection principles as well as setting and objection options can be found in Google's privacy policy, available via the following link: https://support.google.com/analytics/answer/6004245?hl=de
7. YouTube
Our website uses plugins of the video platform YouTube to embed videos and display them directly on our website. The operator of the video platform is YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, USA ("YouTube"). YouTube is a company affiliated with Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; "Google").
The integration of YouTube videos takes place in the so-called "extended data protection mode", which, according to the provider, only triggers the storage of user information when the video(s) is/are played. However, the transfer of data to YouTube partners is not necessarily excluded by the extended data protection mode. Thus, YouTube establishes a connection to the Google DoubleClick network - regardless of whether you watch a video.
When you activate embedded videos on our website, a connection to YouTube's servers is established and a data transmission is started. We have no influence on the scope and content of the data that is transmitted to YouTube and possibly other YouTube partners by activating the plugin. Among other things, the YouTube server is informed which of our pages you have visited. According to YouTube, this information is used, among other things, to collect video statistics, improve user-friendliness and prevent abusive behavior. YouTube uses cookies to collect information about user behavior. The cookies remain on your terminal device until you delete them. You can prevent YouTube from storing cookies by making the appropriate settings in your browser software (see above).
If you are logged into your YouTube account, you enable YouTube to assign your surfing behavior directly to your personal profile. You can prevent this by logging out of your YouTube account before activating the play button.
YouTube is used in the interest of an appealing presentation of our online offers. This represents a legitimate interest within the meaning of Art. 6 para. 1 p. 1 lit. f DS-GVO.
For more information on the handling of user data, please refer to YouTube's privacy policy at: https://www.google.de/intl/de/policies/privacy
8. Google Maps
This website uses the map service Google Maps. The provider is Google Ireland Limited Gordon House, Barrow Street, Dublin 4, Ireland. Data is also regularly transmitted to Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) as part of the processing described below. Google Ireland Limited and Google LLC are hereinafter jointly referred to as "Google". To use the functions of Google Maps, it is necessary to store your IP address. This information is usually transmitted to a Google server in the USA and stored there. The provider of this site has no influence on this data transmission.
The use of Google Maps is in the interest of an appealing presentation of our online offers and an easy location of the places indicated by us on the website. This represents a legitimate interest within the meaning of Art. 6 para. 1 p. 1 lit. f DS-GVO.
You can find more information on the handling of user data in Google's privacy policy: https://www.google.de/intl/de/policies/privacy/
9. Other processing purposes
Compliance with legal requirements: We also process your personal data to comply with other legal obligations that may affect us in connection with our business activities. These include, in particular, retention periods under commercial, trade or tax law. We process your personal data in accordance with Article 6 (1) sentence 1 lit. c DS-GVO (legal basis) to fulfill legal obligations we are subject to.
Law enforcement: We also process your personal data in order to be able to assert our rights and enforce our legal claims. Likewise, we process your personal data in order to be able to defend ourselves against legal claims. Finally, we process your personal data to the extent necessary to prevent or prosecute criminal offences. In this context, we process your personal data to protect our legitimate interests pursuant to Art. 6 (1) sentence 1 lit. f DS-GVO (legal basis), insofar as we assert legal claims or defend ourselves in legal disputes or we prevent or investigate criminal acts (legitimate interest).
Consent: If you have given us a consent to process personal data for certain purposes (e.g. sending information material and offers), the lawfulness of this processing is based on your consent. Any consent given can be revoked at any time. This also applies to the revocation of declarations of consent given to us before the applicability of the GDPR, i.e. before 25.5.2018. Please note that any revocation is only effective for the future and any processing until then is not affected.
V. Recipients of data
Within the Schuller company, access to your data is granted to those departments that need it to fulfill our contractual and legal obligations. Service providers and vicarious agents used by us (e.g. technical service providers, shipping companies, waste disposal companies) may also receive data for these purposes. We limit the transfer of your personal data to what is necessary, taking into account the requirements of data protection law. In some cases, the recipients receive your personal data as order processors and are then strictly bound by our instructions when handling your personal data. In some cases, the recipients act independently in their own data protection responsibility and are also obliged to comply with the requirements of the GDPR and other data protection regulations.
Finally, in individual cases we transmit personal data to our consultants in legal or tax matters. These recipients are obligated to special confidentiality and secrecy due to their professional status.
VI. Data transfer to third countries
In the context of the use of the above tools, e.g. Google, we may transfer your IP address to third countries (see above). The data transfer may be based, among other things, on an adequacy decision of the EU Commission pursuant to Art. 45 DS-GVO. Otherwise, we do not transfer your personal data to countries outside the EU or the EEA or to international organizations, unless explicitly stated otherwise in this privacy policy.
VII. Duration of data storage
We initially process and store your personal data for the duration for which the respective purpose of use requires corresponding storage (see above for the individual processing purposes). If applicable, this also includes the periods of the initiation of a contract (pre-contractual legal relationship) and the processing of a contract. On this basis, personal data is regularly deleted as part of the fulfillment of our contractual and/or legal obligations, unless its temporary further processing is necessary for the following purposes:
-
Fulfillment of statutory retention obligations, e.g. those arising from the German Commercial Code (sections 238, 257 (4) HGB) and the German Fiscal Code (section 147 (3) and (4) AO). The periods specified there for storage and documentation are up to ten years.
-
Preservation of evidence taking into account the statute of limitations. According to Sections 194 et seq. of the German Civil Code (BGB), these limitation periods can be up to 30 years, with the regular limitation period being three years.
VIII. Data security
Personal data is protected by us by means of suitable technical and organizational measures in order to ensure an appropriate level of protection and to safeguard the personal rights of the persons concerned. The measures taken serve, among other things, to prevent unauthorized access to the technical equipment used by us and to protect personal data from unauthorized disclosure by third parties. In particular, this website uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as your contact requests that you send to us as the site operator. You can recognize an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser line. If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties. Nevertheless, we would like to point out that data transmission on the Internet (e.g. when communicating by e-mail) can have security gaps. A complete protection of data against access by third parties is therefore not possible.
IX. Your rights as a data subject
You are entitled to the following rights as a data subject under statutory requirements:
Right to information: You are entitled to request confirmation from us at any time within the scope of Art. 15 DS-GVO as to whether we are processing personal data related to you. If this is the case, you are also entitled within the scope of Art. 15 DS-GVO to receive information about this personal data as well as certain other information (including processing purposes, categories of personal data, categories of recipients, planned storage period, the origin of the data, the use of automated decision-making and, in the case of third country transfers, the appropriate safeguards) and a copy of your data. The restrictions of § 34 BDSG apply.
Right to rectification: Pursuant to Art. 16 DS-GVO, you are entitled to demand that we rectify the personal data stored about you if it is inaccurate or incorrect.
Right to erasure: You have the right, under the conditions of Art. 17 DS-GVO, to demand that we delete personal data relating to you without delay. The right to erasure does not apply if the processing of the personal data is necessary, for example, to comply with legal obligations (e.g., statutory retention obligations) or to assert, exercise or defend legal claims. In addition, the restrictions of § 35 BDSG apply.
Right to restrict processing: You are entitled to demand that we restrict the processing of your personal data under the conditions of Art. 18 DS-GVO.
Right to data portability: You are entitled, under the conditions of Art. 20 DS-GVO, to demand that we hand over the personal data concerning you that you provided to us in a structured, common and machine-readable format.
Right of withdrawal: You may withdraw your consent to the processing of personal data at any time. This also applies to the revocation of consent declarations given to us before the applicability of the DS-GVO, i.e. before 25.5.2018. Please note that the revocation only takes effect for the future. Processing that took place before the revocation is not affected. To declare the revocation, an informal communication, e.g. by e-mail to us, is sufficient.
Right of objection: You have the right to object to the processing of your personal data under the conditions of Art. 21 DS-GVO, so that we must stop processing your personal data. The right to object exists only within the limits provided for in Art. 21 DS-GVO. In addition, our interests may conflict with the termination of processing, so that we are entitled to process your personal data despite your objection. We will consider an objection to any direct marketing measures immediately and without weighing the existing interests again.
Information about your right to object according to Art. 21 DS-GVO:
You have the right to object at any time to the processing of your data that is carried out on the basis of Art. 6 (1) sentence 1 lit. f DS-GVO (data processing on the basis of a balance of interests) or Art. 6 (1) sentence 1 lit. e DS-GVO (data processing in the public interest) if there are grounds for doing so arising from your particular situation.
If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the purpose of asserting, exercising or defending legal claims.
The objection can be made form-free and should preferably be addressed to:
Schuller&Company GmbH
Mergenthaler Allee 15-21
65760 Eschborn
E-mail: datenschutz@schullerco.com
Right of appeal to a supervisory authority: Under the conditions of Art. 77 DS-GVO, you have a right of appeal to a competent supervisory authority. In particular, you can address a complaint to the supervisory authority responsible for us, the Hessian Commissioner for Data Protection and Freedom of Information, Tel. 06 11/140 80, e-mail poststelle@datenschutz.hessen.de or any other competent supervisory authority. A list of data protection supervisory authorities and their contact details can be found at the following link: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html
Other concerns: If you have any further data protection questions or concerns, please do not hesitate to contact our Data Protection Officer. Relevant inquiries as well as the exercise of your aforementioned rights should, if possible, be sent in writing to our address given above or by e-mail to datenschutz@schullerco.com.
X. Obligation to provide data
In principle, you are not obliged to provide us with your personal data. However, if you do not do so, we will not be able to provide you with unrestricted access to our website or answer your inquiries to us. Personal data that we do not necessarily need for the above-mentioned processing purposes are marked accordingly as voluntary information.
XI. Automated decision making/profiling
We do not use automated decision making or profiling (an automated analysis of your personal circumstances).
XII. Actuality and change of this privacy policy
1. this privacy policy is currently valid and has the status 01 May 2023.
2. Due to the further development of our website and offers on it or due to changed legal or regulatory requirements, it may become necessary to change this privacy policy.