Responsible Person:

BKV GmbH
Dr. Ingo Sartorius
Mainzer Landstr. 55
60329 Frankfurt am Main, Germany
VAT-NO.: DE161749355
HRB: 37068

Phone: +49 69 2556 1921
E-Mail: info(at)bkv-gmbh.de

Date: 15.05.2018

1. Basic information on data processing and legal bases

1.1 This data protection declaration explains to you the type, scope and purpose of the processing of personal data within our online offer and the associated websites, functions and contents (hereinafter jointly referred to as "online offer" or "website"). This privacy policy applies regardless of the domains, systems, platforms and devices (e.g. desktop or mobile) on which the online offer is executed.

1.2 The terms used, such as "personal data" or their "processing", we refer to the definitions in Art. 4 of the Basic Data Protection Ordinance (DSGVO).

The personal data of users processed within the scope of this online offer include usage data (e.g., the websites visited on our online offer, interest in our products) and content data (e.g., entries in the contact form).

1.3 The term "user" covers all categories of data subjects. These include our business partners, customers, interested parties and other visitors to our online offering. The terms used, such as "user", are to be understood as gender-neutral.

1.4 We process personal user data only in compliance with the relevant data protection regulations. This means that user data will only be processed if a legal permission has been obtained. This means, in particular if data processing is necessary for the provision of our contractual services (e.g. processing of orders) and online services, or is required by law, if the user has given his or her consent, as well as on the basis of our legitimate interests (i.e. interest in the analysis, optimisation and economic operation and security of our online services within the meaning of Art. 6 Para. 1 letter f. DSGVO, in particular for range measurement, creation of profiles for advertising and marketing purposes, collection of access data and use of third-party services.

1.5 We point out that the legal basis of the consents Art. 6 para. 1 lit. a. and Art. 7 DSGVO, the legal basis for the processing for the fulfilment of our services and implementation of contractual measures Art. 6 para. 1 lit. b. DSGVO, the legal basis for processing to fulfil our legal obligations Art. 6 para. 1 lit. c. DSGVO, and the legal basis for processing to protect our legitimate interests Art. 6 para. 1 lit. f. DSGVO is.

2 Security measures>

2.1 We take organizational, contractual and technical security measures in accordance with the state of the art in order to ensure that the provisions of data protection laws are observed and thus to protect the data processed by us against accidental or intentional manipulation, loss, destruction or against access by unauthorized persons.

3 Disclosure of data to third parties and third-party providers

3.1 Data will only be passed on to third parties within the framework of legal requirements. We only pass on user data to third parties if, for example, this is necessary for contractual purposes on the basis of Art. 6 para. 1 lit. b) DSGVO or on the basis of legitimate interests pursuant to Art. 6 para. 1 lit. f. DSGVO on the economic and effective operation of our business operations.

3.2 If we use subcontractors to provide our services, we will take appropriate legal precautions as well as appropriate technical and organisational measures to ensure the protection of personal data in accordance with the relevant statutory provisions.

3.3 If content, tools or other means from other providers (hereinafter jointly referred to as "third party providers") are used in the context of this data protection declaration and their named registered office is in a third country, it is to be assumed that data is transferred to the countries in which the third party providers have their registered office. Third countries are countries in which the DSGVO is not directly applicable law, i.e. in principle countries outside the EU or the European Economic Area. The transfer of data to third countries takes place either if an appropriate level of data protection, user consent or other legal permission is available.

4 Performance of Contractual Services

4.1 We process inventory data (e.g., names and addresses as well as contact data of users), contract data (e.g., services used, names of contact persons, payment information) for the purpose of fulfilling our contractual obligations and services pursuant to Art. 6 para. 1 lit b. DSGVO.

Selected users receive a user account in which they can view internal documents (extranet). During the registration process, the required information will be communicated to the users. The user accounts are not public and cannot be indexed by search engines. If users have terminated their user account, their data will be deleted with regard to the user account, subject to its storage is necessary for commercial or tax reasons according to Art. 6 Para. 1 lit. c DSGVO. It is up to the users to save their data before the end of the contract if they have given notice of termination. We are entitled to irretrievably delete all user data stored during the term of the contract.

When registering, re-registering and using our online services, we store the IP address and the time of the respective user action. The data is stored on the basis of our legitimate interests as well as the user's protection against misuse and other unauthorized use. A passing on of this data to third parties does not take place in principle, unless it is necessary to pursue our claims or there is a legal obligation in accordance with Art. 6 para. 1 lit. c DSGVO.

5 Establishment of Contact

5.1 When contacting us (via contact form or e-mail), the user's details will be processed for processing the contact request and its handling in accordance with Art. 6 Para. 1 lit. b) DSGVO.

6 Comments and Contributions

6.1 If users leave comments or other contributions, their IP addresses will be used on the basis of our legitimate interests within the meaning of Art. 6 para. 1 letter f. DSGVO for 7 days.

6.2 This takes place for our safety, if someone leaves illegal contents in comments and contributions (insults, forbidden political propaganda, etc.). In this case we can be prosecuted ourselves for the comment or contribution and are therefore interested in the identity of the author.

7 Collection of Access Data and Log Files

7.1 On the basis of our legitimate interests within the meaning of Art. 7 para. 1 lit. f. DSGVO data on each access to the server on which this service is located (so-called server log files). Access data includes the name of the accessed website, file, date and time of access, transferred data volume, notification of successful access, browser type and version, the user's operating system, referrer URL (the previously visited page), IP address and the requesting provider.

7.2 Log file information is stored for a maximum of seven days for security reasons (e.g. to investigate misuse or fraud) and then deleted. Data whose further storage is required for evidentiary purposes are excluded from deletion until the respective incident has been finally clarified.

8 Cookies and Range Measurement

8.1 Cookies are information that is transferred from our web server or third party web servers to the user's web browser and stored there for later retrieval. Cookies can be small files or other types of information storage.

8.2 We use "session cookies" that are only stored on our website for the duration of your current visit (e.g. to enable the storage of your login status or the shopping basket function and thus the use of our online offer at all). A randomly generated unique identification number, a so-called session ID, is stored in a session cookie. A cookie also contains information about its origin and the storage period. These cookies cannot store any other data. Session cookies are deleted when you have finished using our online offer and log out or close your browser, for example.

8.3 If users do not want cookies to be stored on their computer, they are asked to deactivate the corresponding option in the system settings of their browser. Stored cookies can be deleted in the system settings of the browser. The exclusion of cookies can lead to functional restrictions of this online offer.

8.4 You may opt-out of the use of cookies for range measurement and promotional purposes via the deactivation page of the Network Advertising Initiative (http://optout.networkadvertising.org/) and additionally the US website (http://www.aboutads.info/choices) or the European website (http://www.youronlinechoices.com/uk/your-ad-choices/).

9 Range Analysis with Matomo (formerly PIWIK)

9.1 On the basis of our legitimate interests (i.e. interest in the analysis, optimisation and economic operation of our online offer within the meaning of Art. 6 para. 1 lit. f. DSGVO) Matomo, an open source software for statistical evaluation of user access. The IP address of the users is shortened before it is stored. However, Matomo uses cookies which are stored on the user's computer and which enable an analysis of the use of this online offer by the user. Pseudonymous user profiles can be created from the processed data.

9.2 The information generated by the cookie about your use of this online offer is stored on our server and not passed on to third parties.

You can decide here whether a unique web analysis cookie may be stored in your browser to enable the operator of the website to collect and analyze various statistical data.

If you wish to opt out, click the following link to place the Matomo deactivation cookie in your browser.

Deaktivierung durchgeführt! Ihre Besuche auf dieser Webseite werden von der Webanalyse nicht mehr erfasst. Bitte beachten Sie, dass auch der Matomo-Deaktivierungs-Cookie dieser Webseite gelöscht wird, wenn Sie die in Ihrem Browser abgelegten Cookies entfernen. Außerdem müssen Sie, wenn Sie einen anderen Computer oder einen anderen Webbrowser verwenden, die Deaktivierungsprozedur nochmals absolvieren.