Privacy policy

The data controller within the meaning of data protection legislation, especially the EU General Data Protection Regulation (GDPR) is:

Biebertaler Blutegelzucht GmbH
Talweg 31
35444 Biebertal, Germany

See imprint for Managing Director Legal notice

Your rights as a data subject

You can exercise the following rights at any time using the contact details for our data protection officer:

• Information about the data we have stored about you and how it is processed (Art. 15 GDPR)
• Correction of incorrect personal data (Art. 16 GDPR),
• Deletion of your data stored by us (Art. 17 GDPR),
• Restriction of data processing if we are not yet allowed to delete your data due to legal obligations (Art. 18 GDPR),
• Objection to the processing of your data by us (Art. 21 GDPR) and
• Data portability, provided you have consented to the data processing or have concluded a contract with us (Art. 20 GDPR).

If you have given us your consent, you may revoke it at any time with effect for the future. You can lodge a complaint with the relevant supervisory authority at any time, e.g. the supervisory authority in the federal state of your place of residence or the authority responsible for us as the data controllers.
A list of non-public-sector supervisory authorities can be found at: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.

Collection of general information when visiting our website

Type and purpose of processing

WEB SERVER LOGS

As is common with almost all Internet sites, the server on which our Internet pages are located (hereinafter referred to as the "web server") automatically collects information in the form of web server logs when you visit us on the Internet. The web server automatically recognises certain non-personal data such as your IP address, the date and time of your visit to our website, the pages you visit on our website, the website you were on previously, the browser you are using (e.g. Firefox, Chrome), the operating system you are using (e.g. Windows 10, Ubuntu) and the domain name and address of your internet provider (e.g. AOL). If our website uses cookies, the web server also stores information about this. We regularly analyse these server logs so that we can determine which pages on our website are visited. This gives us a more precise idea of how our website is used and how we can further optimise our offer. In addition, in the event of system abuse, we may use this information in cooperation with your Internet provider and/or local authorities to identify the perpetrator of such abuse. There is no individual profiling of your user behaviour. No reference to your person can be derived from this data; the data is not forwarded to third parties, not even in excerpts. Your personal data is not combined with data from other sources. Additional personal data, such as your name, address, telephone number or email address, is not collected unless you provide this information voluntarily (e.g. in the context of an enquiry or registration).

Data is processed in particular for the following purposes:

• To ensure a smooth connection to our website,
• To ensure the smooth use of our website,
• To evaluate system security and stability, and
• To optimise our website.

We do not use your data to draw conclusions about you as an individual. Where necessary, we may statistically evaluate information of this kind in anonymised format in order to optimise our website and the technology behind it.

Legal basis and legitimate interest:

Data processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in improving the stability and functionality of our website.

Recipients:

Recipients of the data may be technical service providers who act as order processors for the operation and maintenance of our website.

Third country transfer:

The collected data will NOT be transferred to third countries.

Storage period:

The data will be deleted as soon as it is no longer necessary for the purpose for which it was collected. For data used in the provision of the website, this is generally the case when the respective session has ended.
When data is stored in log files, this is the case after 14 days at the latest. Storage beyond this period is possible. In this case, users’ IP addresses are anonymised so that they can no longer be assigned to the requesting computer.

Data provision legally required or necessary:

The provision of your previously mentioned personal data is neither legally nor contractually required. However, without your IP address, the service and functionality of our website cannot be guaranteed. In addition, individual services and services may not be available or may be restricted. For this reason, an objection is excluded.

Newsletter

Type and purpose of processing:

In order to deliver our newsletter, we collect personal data that is transmitted to us via an input mask.
We require a valid email address for the registration to be carried out effectively. In order to verify that the owner of an email address actually wants to register for our newsletter, we use the "double opt-in" procedure. For this purpose, we log your registration for our newsletter, the sending of a confirmation email and the receipt of the response requested herewith. No further data is collected.

Legal basis:

Based on your express consent (Art. 6 para. 1 lit. a GDPR), we will regularly send you our newsletter or comparable information by email to the email address you have specified.
You can revoke your consent to the storage of your personal data and our use of it to send you our newsletter at any time with effect for the future. You will find a link to this effect in every newsletter. You can also unsubscribe directly on this website at any time or inform us of your revocation of consent using the contact details provided at the end of this privacy policy.

Recipients:

Recipients of the data are, if applicable, commissioned processors.

Storage period:

In this context, your data will only be stored and processed as long as you have expressly granted your consent. After this point, the data shall be deleted.

Data provision legally required or necessary:

The provision of your personal data is voluntary, based only on your consent. Unfortunately, we cannot send you our newsletter if you have not granted your consent.

Revocation of consent:

You can revoke your consent to the storage of your personal data and our use of it to send you our newsletter at any time with effect for the future. You can unsubscribe by clicking on the link contained in every email or by contacting the data protection officer or the person responsible for data protection listed below.

Contact

Type and purpose of processing

The data you enter when contacting us will be stored for the purpose of individual communication with you. For this purpose, it is necessary to provide a valid email address and your name. This is used for the assignment of the enquiry and the subsequent response to it. The provision of any further data is optional.

Legal basis:

The processing of the data entered in your enquiry is based on the existence of a legitimate interest (Art. 6 para. 1 lit. f GDPR).
By providing a contact address, we would like to enable you to contact us in a straightforward manner. The information you provide will be stored for the purpose of processing the enquiry and for possible follow-up questions.
If you contact us to request a quote, the data entered in the contact form will be processed to carry out pre-contractual measures (Art. 6 para. 1 lit. b GDPR).

Recipients:

Recipients of the data are, if applicable, commissioned processors.

Storage period:

Data shall be deleted at the latest 6 months after processing of the request. If a contractual relationship arises, we are subject to the statutory retention periods pursuant to the German Commercial Code (Handelsgesetzbuch, HGB) and shall delete your data after these periods have expired.

Data provision legally required or necessary:

The provision of your personal data is voluntary. However, we can only process your request if you tell us your name, email address and the reason for your request.

SSL encryption

In order to ensure the security of your data during transfer, we use encryption procedures that correspond to the current state of technology via HTTPS (for example SSL).

Information about your right of objection pursuant to Art. 21 GDPR

Right of objection on a case-by-case basis

You have the right, for reasons that arise from your particular situation, to object at any time to the processing of personal data relating to you, which is based on Art. 6 para. 1 lit. f GDPR (data processing based on a weighing of interests); this also applies to profiling based on this provision within the meaning of Art. 4 no. 4 GDPR. If you lodge an objection, the data controller shall no longer process the personal data that concerns you, unless we can prove compelling legitimate reasons for the processing which outweigh your interests, rights and freedoms, or the processing serves to assert, exercise, or defend legal claims.

Recipient of an objection

Biebertaler Blutegelzucht GmbH
Talweg 31
35444 Biebertal, Germany
blutegel@blutegel.de

Changes to our privacy policy

We reserve the right to adapt this privacy policy so that it always complies with the current legal requirements or in order to implement changes to our services in the privacy policy, e.g. when introducing new services. Any subsequent website access will then be subject to the terms of the new privacy policy.

Questions for the data protection officer

Should you have any questions relating to privacy or data protection, please send us an email or get in touch with our data protection officer directly:

Biebertaler Blutegelzucht GmbH
Datenschutzbeauftragter
Talweg 31
35444 Biebertal, Germany
datenschutzbeauftragter@blutegel.de