Data privacy statement

In accordance with Article 13 of the General Data Protection Regulation (GDPR), it is our duty to inform you about the handling of your personal data:

a) Name and contact data of the responsible party and their representative:
Gerd Bär GmbH
Pfaffenstraße 7
74078 Heilbronn
Phone: +49 7131 2877-0
Email: info(at) info(at)baer-cargolift.de

Managing Director: Tobias Bär
Data protection officer: Wolfgang Matzke

b) Contact data of the data protection officer:
Gerd Bär GmbH has appointed a data protection officer. You can contact him via the email address datenschutz(at)baer-cargolift.de or our post address to the attention of the "Data Protection Officer".

c) Purpose and legal bases of data processing
We process your personal data for the purpose of fulfilment of a contract. The legal basis is Art. 6, Para. 1, b) of the GDPR.

d) Recipients or categories of recipients of your personal data
Your personal data is processed internally by the departments of Gerd Bär GmbH involved with the business transaction. This includes the sales, service and accounting departments.

e) Transfer of your personal data to a third country
We do not plan to transfer your personal data to a third country or international organisation.

f) Term of storage of your personal data
The data stored by us is deleted as soon as it is no longer necessary for the intended purpose and the deletion does not violate any statutory retention obligations. According to statutory specifications, storage takes place for 6 years in accordance with Article 257, Para. 1 of German Commercial Code (books of account, inventory, opening balance sheets, annual reports, commercial documents, vouchers, etc.) and 10 years in accordance with Article 147, Para. 1 of German Fiscal Code (accounts, records, status reports, accounting records, vouchers and business letters, documents relevant for controlling, etc.).

g) Your rights as the concerned party
You always have the right to receive information free of charge about your stored personal data (Article 15 of the GDPR) and reporting (Article 16 of the GDPR), deletion (Article 17 of the GDPR), limitation of processing (Art. 18 of the GDPR) and data transferability (Article 20 of the GDPR).

h) Right to objection
You can reject to future processing of your personal data according to statutory specifications. You can reject to processing for the purposes of direct advertising.

i) Right of appeal
You can appeal to the responsible supervisory authority about impermissible data processing.

j) Provision of personal data
TThe personal data provided by you is required for fulfilment of our contractual relationship.

k) Automated decision-making
We do not use automated decision-making.

l) SSoftware for customer behaviour analysis
We do not use software to analyse customer behaviour (e.g. Google Analytics).

m) Click sequence
We do not use software to track the individual click sequences in our WebShop and on our website.

n) Integration of YouTube videos
(1) We have integrated YouTube videos stored on https://www.youtube.com/ into our online offering, which can be played back directly from our website. They are included in the "extended data protection mode", so no data about you as a user is transferred to YouTube if you do not play the videos. The data indicated in paragraph 2 is not transferred unless you play the videos. We have not influence on this data transfer.
(2) By visiting the website, YouTube receives the information that you have opened corresponding sub-pages of our website. In addition, the data indicated under section 3 of this statement is transferred. This takes place depending on whether a YouTube provides a user account that you are logged into or if there is no user account. If you are logged into Google, your data is assigned directly to your account. If you do not desire assignment with your profile by YouTube, you must log out before activating the button. YouTube saves your data as a user profile and uses it for purposes of advertisement, market research and/or configuration of our website tailored to suit market needs. Such evaluation takes place, in particular, (even for users who are not logged in) for provision of advertising tailored to suit market needs and in order to inform other users of the social network about your activities on our website. You have the right to reject the creation of these user profiles, wherein you must contact YouTube to exercise said right.
(3) Additional information about the purpose and scope of the data collection and processing by YouTube is provided in the data privacy statement. You can also learn more about your rights and optional settings for protection of your private sphere: https://www.google.de/intl/de/policies/privacy. Google also processes your personal data in the USA and is subject to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

o) Integration of Google Maps
(1) We use the offering of Google Maps on our website. We can also display interactive maps directly on the website to enable convenient use of the map function.
(2) By visiting the website, Google receives the information that you have opened corresponding sub-pages of our website. In addition, the data indicated under section 3 of this statement is transferred. This takes place depending on whether a Google provides a user account that you are logged into or if there is no user account. If you are logged into Google, your data is assigned directly to your account. If you do not desire assignment with your profile by Google, you must log out before activating the button. Google saves your data as a user profile and uses it for purposes of advertisement, market research and/or configuration of our website tailored to suit market needs. Such evaluation takes place, in particular, (even for users who are not logged in) for provision of advertising tailored to suit market needs and in order to inform other users of the social network about your activities on our website. You have the right to reject the creation of these user profiles, wherein you must contact Google to exercise said right.
(3) Additional information about the purpose and scope of the data collection and processing by plug-in providers is provided in the data privacy statements of said providers. You can also learn more about your rights in this respect and optional settings for protection of your private sphere: http://www.google.de/intl/de/policies/privacy. Google also processes your personal data in the USA and is subject to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

p) Data protection, confidentiality
Gerd Bär GmbH undertakes to keep secret all data, knowledge and information (in short: confidential data) provided to it and to which it has access in the course of the cooperation. 

If you order deliveries or services from us, we process the data necessary for the provision of contractual services. This includes inventory data (names, business address and contact data) as well as contract, order and invoice information for the fulfilment of our contractual obligations. The legal basis for this is Art. 6 para. 1 lit. b) DS-GVO. This data is processed by our responsible internal departments for the performance of the contract. The data stored by us will be deleted as soon as it is no longer required for its intended purpose and there are no legal obligations to retain it. However, retention obligations arise for reasons of commercial and tax law. According to legal requirements, data is stored for 6 years in accordance with § 257 para. 1 HGB (e.g. accounting records) and for 10 years in accordance with § 147 para. 1 AO (e.g. accounting records, commercial and business letters, documents relevant for taxation).

If we wish to inform you about our products and services by telephone or e-mail, this is done in accordance with the provisions of § 7 UWG or with your consent pursuant to Art. 6 Para. 1 lit. a) DS-GVO.
Data is only passed on to third parties within the framework of legal requirements. We pass this on if, for example, this is necessary for contractual purposes in accordance with Art. 6 Para. 1 lit. b) DS-GVO, we are obliged to do so due to legal requirements in accordance with Art. 6 Para. 1 lit. c) DS-GVO or we have a legitimate interest in the economic and effective operation of our business operations in accordance with Art. 6 Para. 1 lit. f) DS-GVO. This includes the transfer of this data to companies affiliated with us. Within the scope of data protection-related commissioned processing pursuant to Art. 28 DS-GVO, we use service providers for the operation and maintenance of our information technology systems, who may obtain knowledge of your personal data in this context. We have therefore taken appropriate legal, technical and organisational measures with the service providers to ensure the protection of your personal data in accordance with the statutory provisions. Your personal data will not be transferred to a third country or to an international organisation.

If we process your personal data, you are a data subject within the meaning of the General Data Protection Regulation (GDPR) and have the following rights: right to information (Art. 15 GDPR), right to rectification (Art. 16 GDPR), right to erasure (Art. 17 GDPR), right to restriction of processing (Art. 18 GDPR), right to data portability (Art. 20 GDPR) and right to object to processing (Art. 21 GDPR). Furthermore, you have the right to complain to a data protection supervisory authority. In the case of a request for information that is not made in writing, we ask for your understanding that we may then require evidence from you that proves that you are the person you claim to be.

You can contact our data protection officer by e-mail at datenschutz(at)baer-cargolift.de or via our postal address with the addition of "The Data Protection Officer".