Privacy policy

The controller within the meaning of data protection laws, in particular the EU General Data Protection Regulation (GDPR), is:

Biebertaler Blutegelzucht GmbH
Talweg 31
D-35444 Biebertal
Germany

For the management, please refer to the Legal Notice.

YOUR RIGHTS AS A DATA SUBJECT

You may exercise the following rights at any time using the contact details provided for our Data Protection Officer:

• access to the data stored by us concerning you and to information about its processing (Art. 15 GDPR),
• rectification of inaccurate personal data (Art. 16 GDPR),
• erasure of the data stored by us concerning you (Art. 17 GDPR),
• restriction of data processing, provided that we are not yet permitted to erase your data due to statutory obligations (Art. 18 GDPR),
• objection to the processing of your data by us (Art. 21 GDPR), and
• data portability, provided that you have consented to the data processing or have entered into a contract with us (Art. 20 GDPR).

If you have given us your consent, you may withdraw it at any time with effect for the future.

You may lodge a complaint with a supervisory authority at any time, for example with the competent supervisory authority of the federal state in which you reside or with the authority responsible for us as the controller.

A list of supervisory authorities for the non-public sector, including their addresses, is available at:
https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.

COLLECTION OF GENERAL INFORMATION WHEN VISITING OUR WEBSITE

NATURE AND PURPOSE OF PROCESSING

As is customary with almost all websites, the server on which our webpages are hosted, hereinafter referred to as the “web server”, automatically collects information in web server logs when you visit us on the Internet. The web server automatically records certain non-personal data, such as your IP address, the date and time at which you access our website, the pages you visit on our website, the website you visited previously, the browser you use, for example Firefox or Chrome, the operating system you use, for example Windows 10 or Ubuntu, as well as the domain name and address of your Internet service provider, for example AOL.

If our website uses cookies, the web server also stores information in this regard. We regularly evaluate these server logs in order to determine which pages of our online presence are visited. This gives us a more accurate understanding of how our website is used and how we can further optimise our offering.

In addition, in the event of system misuse, we may use this information, in cooperation with your Internet service provider and/or local authorities, in order to identify the originator of such misuse.

No individual profile of your usage behaviour is created. No personal reference can be derived from this; the data is not disclosed to third parties, not even in excerpts. These data are not merged with other data sources.

Further personal information such as name, address, telephone number or email address is not collected unless you provide such information voluntarily, for example in the context of an enquiry or registration.

The data is processed in particular for the following purposes:

• ensuring trouble-free connection to the website,
• ensuring smooth use of our website,
• evaluating system security and stability, and
• optimising our website.

We do not use your data to draw conclusions about your person. Information of this kind is, where applicable, evaluated by us anonymously for statistical purposes in order to optimise our online presence and the underlying technology.

LEGAL BASIS AND LEGITIMATE INTEREST

Processing is carried out pursuant to Art. 6(1)(f) GDPR on the basis of our legitimate interest in improving the stability and functionality of our website.

Recipients:

The recipients of the data may include technical service providers who act as processors for the operation and maintenance of our website.

TRANSFER TO THIRD COUNTRIES

The collected data is NOT transferred to third countries

STORAGE PERIOD

The data is erased as soon as it is no longer required for the purpose for which it was collected. For data that serves the provision of the website, this is generally the case when the respective session has ended.

If the data is stored in log files, it is erased after no more than 14 days. Storage beyond this period is possible. In this case, users’ IP addresses are anonymised so that it is no longer possible to assign them to the accessing client.

PROVISION PRESCRIBED OR REQUIRED

The provision of the aforementioned personal data is neither legally nor contractually required. However, without the IP address, the service and functionality of our website cannot be guaranteed. In addition, individual services and features may be unavailable or restricted. For this reason, objection is excluded.

NEWSLETTER

NATURE AND PURPOSE OF PROCESSING

For the delivery of our newsletter, we collect personal data that is transmitted to us via an input form. For effective registration, we require a valid email address. In order to verify that the registration is actually made by the holder of an email address, we use the “double opt-in” procedure. For this purpose, we log the subscription to the newsletter, the dispatch of a confirmation email and receipt of the response requested by that email. No further data is collected.

LEGAL BASIS

On the basis of your expressly given consent pursuant to Art. 6(1)(a) GDPR, we regularly send you our newsletter or comparable information by email to the email address you have provided.

You may withdraw your consent to the storage of your personal data and its use for sending the newsletter at any time with effect for the future. Each newsletter contains a corresponding link for this purpose. You may also unsubscribe at any time directly on this website or inform us of your withdrawal of consent using the contact option provided at the end of this Data Protection Notice.

RECIPIENTS

The recipients of the data may include processors.

STORAGE PERIOD

In this context, the data is stored and processed only for as long as the corresponding consent exists. It is erased thereafter.

PROVISION PRESCRIBED OR REQUIRED

The provision of your personal data is voluntary and based solely on your consent. Without existing consent, we are unfortunately unable to send you our newsletter.

WITHDRAWAL OF CONSENT

You may withdraw your consent to the storage of your personal data and its use for sending the newsletter at any time with effect for the future. You may unsubscribe via the link contained in each email or by contacting the Data Protection Officer named below or the person responsible for data protection.

CONTACT

NATURE AND PURPOSE OF PROCESSING

The data you enter when contacting us is stored for the purpose of individual communication with you. For this purpose, the provision of a valid email address and your name is required. This serves to assign the enquiry and subsequently respond to it. The provision of further data is optional.

LEGAL BASIS

The data entered in your enquiry is processed on the basis of a legitimate interest pursuant to Art. 6(1)(f) GDPR.

By providing a contact address, we wish to enable you to contact us easily. The information you provide is stored for the purpose of processing the enquiry and for possible follow-up questions.

If you contact us in order to request an offer, the data entered in the contact form is processed for the performance of pre-contractual measures pursuant to Art. 6(1)(b) GDPR.

RECIPIENTS

The recipients of the data may include processors.

STORAGE PERIOD

Data is erased no later than six months after the enquiry has been processed.

If a contractual relationship is established, we are subject to the statutory retention periods under the German Commercial Code (Handelsgesetzbuch, HGB) and erase your data after these periods have expired.

PROVISION PRESCRIBED OR REQUIRED

The provision of your personal data is voluntary. However, we can process your enquiry only if you provide us with your name, your email address and the reason for your enquiry.

SSL ENCRYPTION

In order to protect the security of your data during transmission, we use encryption methods that correspond to the current state of the art, for example SSL via HTTPS.

INFORMATION ON YOUR RIGHT TO OBJECT PURSUANT TO ART. 21 GDPR

RIGHT TO OBJECT IN INDIVIDUAL CASES

You have the right, on grounds relating to your particular situation, to object at any time to the processing of personal data concerning you that is carried out on the basis of Art. 6(1)(f) GDPR, namely data processing based on a balancing of interests; this also applies to profiling based on that provision within the meaning of Art. 4 No. 4 GDPR.

If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or unless the processing serves the establishment, exercise or defence of legal claims.

RECIPIENT OF AN OBJECTION

Biebertaler Blutegelzucht GmbH
Talweg 31
D-35444 Biebertal
Germany
blutegel@blutegel.de

AMENDMENT OF OUR DATA PROTECTION PROVISIONS

We reserve the right to amend this Data Protection Notice so that it always complies with current legal requirements or in order to reflect changes to our services in the Data Protection Notice, for example when introducing new services. The new Data Protection Notice will then apply to your next visit.

QUESTIONS TO THE DATA PROTECTION OFFICER

If you have any questions about data protection, please send us an email or contact the person responsible for data protection in our organisation directly:

Biebertaler Blutegelzucht GmbH
Data Protection Officer
Talweg 31
D-35444 Biebertal
Germany
datenschutzbeauftragter@blutegel.de