Data Protection

Privacy Policy

I. Name and address of the data controller

Böcker Maschinenwerke GmbH
Lippestraße 69–73
DE-59368 Werne

Tel.: 02389/7989-0
Email: info@boecker.de

II. Contact details of the Data Protection Officer

Tel.: 02389/7989-778
Email: datenschutz@boecker.de

III. General information on data processing

1. Scope of personal data processing

We generally process our users’ personal data only to the extent necessary to provide a fully functional website and our content and services. The processing of our users’ personal data is normally carried out only with the user’s consent. An exception applies in cases where it is not possible, for practical reasons, to obtain consent in advance and where the processing of the data is permitted by statutory provisions.

2. Legal basis for the processing of personal data

Where we obtain the data subject’s consent for the processing of personal data, Article 6(1)(a) of the EU General Data Protection Regulation (GDPR) serves as the legal basis.

Where the processing of personal data is necessary for the performance of a contract to which the data subject is a party, Article 6(1)(b) of the GDPR serves as the legal basis. This also applies to processing operations necessary for the implementation of pre-contractual measures.

Where the processing of personal data is necessary for compliance with a legal obligation to which our company is subject, Article 6(1)(c) of the GDPR serves as the legal basis.

Where the vital interests of the data subject or of another natural person necessitate the processing of personal data, Article 6(1)(d) of the GDPR serves as the legal basis.

Where processing is necessary to safeguard a legitimate interest of our company or of a third party, and the interests, fundamental rights and freedoms of the data subject do not override the former interest, Article 6(1)(f) of the GDPR serves as the legal basis for the processing.

3. Data erasure and retention period

The data subject’s personal data shall be erased or blocked as soon as the purpose for which it was stored no longer applies. Data may also be stored if this is provided for by European or national legislators in EU regulations, laws or other provisions to which the controller is subject. Data shall also be blocked or erased when a retention period prescribed by the aforementioned standards expires, unless there is a need to continue storing the data for the conclusion or performance of a contract.

IV. Provision of the website and creation of log files

1. Description and scope of data processing

Each time our website is accessed, our system automatically collects data and information from the computer system of the accessing device.

The following data is collected in this process:

Information about the browser type and version used
The user’s operating system
The user’s internet service provider
The user’s IP address (where applicable: in anonymised form)
Date and time of access
Websites from which the user’s system accesses our website
Websites accessed by the user’s system via our website

2. Legal basis for data processing

The legal basis for the temporary storage of data and log files is Article 6(1)(f) of the GDPR.

3. Purpose of data processing

The temporary storage of the IP address by the system is necessary to enable the website to be delivered to the user’s computer. To this end, the user’s IP address must remain stored for the duration of the session.

Data is stored in log files to ensure the website functions properly. Furthermore, we use the data to optimise the website and to ensure the security of our IT systems. The data is not analysed for marketing purposes in this context.

These purposes also constitute our legitimate interest in data processing pursuant to Article 6(1)(f) of the GDPR.

4. Duration of storage

The data is deleted as soon as it is no longer required to fulfil the purpose for which it was collected. Where data is collected for the purpose of providing the website, this is the case once the relevant session has ended.

Where data is stored in log files, this occurs after seven days at the latest. Storage for a longer period is possible. In this case, users’ IP addresses are deleted or anonymised so that it is no longer possible to identify the client from which the request originated.

5. Right to object and right to erasure

The collection of data for the purpose of providing the website and the storage of data in log files is strictly necessary for the operation of the website. Consequently, the user has no right to object.

V. Use of cookies

a) Description and scope of data processing

Our website uses cookies that enable an analysis of users’ browsing behaviour.

The user data collected in this way is pseudonymised by technical means. Consequently, it is no longer possible to link the data to the user accessing the site. The data is not stored together with any other personal data relating to the user.

When accessing our website, the user is informed about the use of cookies for analytical purposes and their consent is sought for the processing of personal data used in this context. In this context, reference is also made to this privacy policy.

b) Use of Google Analytics

This website uses Google Analytics, a web analytics service provided by Google Inc. (‘Google’). This is based on Article 6(1)(f) of the GDPR. Google Analytics uses so-called ‘cookies’, which are text files stored on your computer that enable an analysis of your use of the website. The information generated by the cookie regarding your use of the website, such as

browser type and version,
operating system used,
referrer URL (the previously visited page),
hostname of the accessing computer (IP address),
time of the server request,

are usually transmitted to a Google server in the USA and stored there. The IP address transmitted by your browser as part of Google Analytics is not merged with other data held by Google. We have also extended Google Analytics on this website to include the ‘anonymizeIP’ code. This ensures that your IP address is masked, so that all data is collected anonymously. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and truncated there.

On behalf of the operator of this website, Google will use this information to analyse your use of the website, to compile reports on website activity and to provide the website operator with other services relating to website and internet usage. You can prevent the storage of cookies by rejecting the relevant notification or by adjusting your browser settings accordingly; however, we would like to point out that, in this case, you may not be able to make full use of all the functions of this website.

You can also prevent the collection of data generated by the cookie and relating to your use of the website (including your IP address) by Google, as well as the processing of this data by Google, by downloading and installing the browser plug-in available via the following link: http://tools.google.com/dlpage/gaoptout?hl=de. As an alternative to the browser add-on, particularly for browsers on mobile devices, you can also prevent data collection by Google Analytics by clicking on this link. An opt-out cookie will be set to prevent the future collection of your data when you visit this website. The opt-out cookie applies only to this browser and only to our website, and is stored on your machine. If you delete the cookies in this browser, you will need to set the opt-out cookie again. [Note: Information on the implementation of the opt-out cookie can be found at: https://developers.google.com/analytics/devguides/collection/gajs/?hl=de#disable].

We also use Google Analytics to analyse data from DoubleClick cookies and AdWords for statistical purposes. If you do not wish this to happen, you can disable it via the Ad Settings Manager (https://adssettings.google.com/authenticated?hl=de).

Further information on data protection in connection with Google Analytics can be found, for example, in the Google Analytics Help Centre (https://support.google.com/analytics/answer/6004245?hl=de).

c) Google Ads (AdWords) remarketing/retargeting

We have integrated Google Ads into this website. The operator of the Google Ads services is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”).

We use this to advertise this website in Google search results and on third-party websites. For this purpose, Google places a cookie in your device’s browser, which automatically enables interest-based advertising using a pseudonymous cookie ID and based on the pages you have visited.

Any further data processing only takes place if you have given Google your consent to link your internet and app browsing history to your Google Account and to use information from your Google Account to personalise the adverts you see on the web. In this case, if you are logged in to Google whilst visiting our website, Google will use your data together with Google Analytics data to create and define audience lists for cross-device remarketing. To this end, your personal data is temporarily linked by Google with Google Analytics data to form target groups.

These processing operations take place exclusively upon the granting of explicit consent in accordance with Article 6(1)(a) of the GDPR.

The parent company, Google LLC, is a US company certified under the EU-US Data Privacy Framework. An adequacy decision pursuant to Article 45 of the GDPR is in place, meaning that personal data may be transferred even without further safeguards or additional measures.

You can view the privacy policy and further information from Google Ads at: www.google.com/policies/technologies/ads/

Google Ads with conversion tracking

Google Ads is an online advertising service that allows advertisers to place adverts both in Google’s search engine results and on the Google Display Network. Google Ads enables an advertiser to specify keywords in advance, so that an advert is displayed in Google’s search engine results only when a user enters a search query relevant to those keywords. Within the Google Display Network, adverts are distributed across thematically relevant websites using an automated algorithm and in accordance with the pre-defined keywords.

The purpose of Google Ads is to promote our website by displaying interest-based adverts on third-party websites and in Google’s search results, and to display third-party adverts on our website.

If you access our website via a Google advert, Google will place a so-called conversion cookie on your IT system. A conversion cookie expires after thirty days and is not used to identify you. Provided the cookie has not yet expired, the conversion cookie is used to track whether certain sub-pages – such as the shopping basket in an online shop system – have been accessed on our website. The conversion cookie enables both us and Google to track whether a user who arrived at our website via an AdWords advert generated a sale – that is, whether they completed or abandoned a purchase.

The data and information collected through the use of the conversion cookie are used by Google to compile visitor statistics for our website. We, in turn, use these visitor statistics to determine the total number of users who were referred to us via AdWords adverts, i.e. to assess the success or failure of the respective AdWords advert and to optimise our AdWords adverts for the future. Neither our company nor other Google Ads advertisers receive any information from Google that could be used to identify you.

The conversion cookie is used to store personal information, such as the web pages you have visited. Each time you visit our website, personal data – including the IP address of the internet connection you are using – is therefore transmitted to Google in the United States of America. This personal data is stored by Google in the United States of America. Google may, under certain circumstances, pass on this personal data, collected via technical means, to third parties.

These processing operations take place exclusively upon the granting of explicit consent in accordance with Article 6(1)(a) of the GDPR.

The parent company, Google LLC, is a US company certified under the EU-US Data Privacy Framework. An adequacy decision pursuant to Article 45 of the GDPR is therefore in place, meaning that personal data may be transferred even without further safeguards or additional measures.

You can view the privacy policy and further information regarding Google AdSense at: www.google.de/intl/de/policies/privacy/.

Google Ads with enhanced conversions

Google Ads is an online advertising service that enables advertisers to place adverts both in Google’s search results and on the Google Display Network. The purpose of Google Ads is to promote our website by displaying interest-based adverts on third-party websites and in Google’s search results, and to display third-party adverts on our website.

If you access our website via a Google advert, Google will place a so-called conversion cookie on your IT system. A conversion cookie expires after thirty days and is not used to identify you. Provided the cookie has not yet expired, the conversion cookie is used to track whether certain sub-pages – such as the shopping basket in an online shop system – have been accessed on our website. The conversion cookie enables both us and Google to track whether a user who arrived at our website via a Google Ads advertisement generated a sale – that is, whether they completed or abandoned a purchase.

We make use of Google Ads’ enhanced conversions feature. To this end, we transmit personal data collected by us, such as telephone numbers or email addresses, to Google. This data is matched with event data relating to Google Ads in order to record more conversions.

Consequently, every time you visit our website, personal data – including the IP address of the internet connection you are using – is transferred to Google in the United States of America. Google may, under certain circumstances, pass on this personal data, which is collected via technical means, to third parties.

These processing operations take place exclusively upon the granting of explicit consent in accordance with Article 6(1)(a) of the GDPR.

The parent company, Google LLC, is a US company certified under the EU-US Data Privacy Framework. An adequacy decision in accordance with Article 45 of the GDPR is therefore in place, meaning that personal data may be transferred even without further safeguards or additional measures.

You can view the privacy policy and further information from Google Ads at: www.google.de/intl/de/policies/privacy/ or support.google.com/adspolicy/answer/9755941.

Google Ads – Further information on Consent Mode, simple implementation

Under the Digital Markets Act, Google is obliged to obtain users’ consent before processing user data for personalised advertising. Google complies with this requirement through ‘Consent Mode’. Users are obliged to implement this and thereby demonstrate that they have obtained the consent of website visitors.

Google offers two implementation modes: the simple and the advanced implementation.

We use the simple implementation method of Google Consent Mode. Only if you give your consent to the use of Google Ads (see above) will a connection to Google be established, a Google script be executed and the processing described above take place. If you refuse to give your consent, Google will simply receive a notification that consent has not been given. The Google code will not be executed and no Google Ads cookies will be set.

Google Ads – Additional information on Consent Mode, extended implementation

Under the Digital Markets Act, Google is obliged to obtain users’ consent before processing user data for personalised advertising. Google complies with this requirement through ‘Consent Mode’. Website operators are obliged to implement this and thereby demonstrate that they have obtained consent from website visitors.

Google offers two implementation modes: the simple and the advanced implementation.

We use the advanced implementation method of Google Consent Mode. If you consent to data processing in connection with the use of Google Ads (see above), a connection to Google is established, Google Analytics cookies are set and the relevant processing operations are carried out. If you refuse to give your consent, no Google Ads cookies will be set. However, a unique ‘Ping ID’ is generated and transmitted to Google. The Google code is executed, whereby only limited user data is transmitted to Google, including, amongst other things, information such as:

l IP address

l Browser details

l URLs visited

A personalised user ID is not assigned.

If you have consented to the use of Google Ads, Consent Mode, extended implementation, the legal basis for the processing of personal data is Article 6(1)(a) of the GDPR. Furthermore, it is in our legitimate interest within the meaning of Article 6(1)(f) of the GDPR to use Google Analytics 4, Consent Mode, extended implementation, in order to obtain data on conversions without creating user profiles and thereby increase profitability.

d) Advertising via OpenAI / ChatGPT Ads

We use OpenAI’s advertising services to display adverts for our products and services within ChatGPT. To this end, we use the advertising services provided by OpenAI and, where applicable, the OpenAI Ads Manager.

As part of the placement, management and evaluation of our advertising campaigns, information relating in particular to our adverts, campaigns, target groups and ad interactions, as well as technical and statistical information, may be processed. As part of its advertising services, OpenAI provides us, in particular, with aggregated reporting and performance data relating to our campaigns, for example regarding the range, frequency or effectiveness of adverts.

Conversion tracking

To measure the effectiveness of our advertising campaigns, we use the conversion tools offered by OpenAI. In this context, following an interaction with an advert we have placed on our website, certain conversion events may be recorded and transmitted to OpenAI.

Depending on the technical configuration used, this may involve, in particular, the OpenAI Pixel provided by OpenAI, the Conversions API or similar technical integrations. Information that may be recorded includes, for example, website visits, registrations, enquiries, purchases or other conversion events defined by us.

In particular, technical information, online identifiers, and information about the actions carried out on our website and the associated conversion events may be processed. The specific processing depends on the technical implementation we use.

Where consent is required for the use of the relevant technologies, processing will only take place once the relevant consent has been given via our consent management system. Consent that has been given may be withdrawn at any time with future effect via the relevant settings.

OpenAI and we generally process personal data in connection with the conversion tools as separate data controllers, unless a different allocation of roles under data protection law is provided for a specific processing operation.

Customer data and Custom Audiences

We do not currently transfer our own lists of customers or prospective customers – in particular, no email addresses, telephone numbers or similar customer data – to OpenAI for the creation or use of Custom Audiences or target groups via the relevant audience tools.

Should we use these functions in future, we will adapt the associated data processing and, where necessary, the legal bases and consents accordingly.

No disclosure of ChatGPT conversations to us

According to OpenAI’s own statements, it does not pass on individual users’ ChatGPT conversations to advertisers in connection with the display of adverts in ChatGPT.We therefore do not, in particular, have access to the chat histories of individual ChatGPT users. The information made available to us as part of the advertising services relates, in principle, to the performance and evaluation of our own advertising campaigns.

Legal basis

Insofar as personal data is processed in connection with the use of the advertising services and conversion tools, such processing is carried out on the basis of the relevant data protection legislation.

Where consent is required for the use of cookies, pixels, similar technologies or the transfer of personal data to OpenAI, the relevant processing will only take place once consent has been given. Consent may be withdrawn at any time with future effect via our consent management system.

Further information on OpenAI

Further information on the processing of personal data by OpenAI can be found in the [OpenAI Privacy Policy].
Further information on the advertising services and the advertising tools used can be found in the [OpenAI Advertising Terms], the [OpenAI Ad Tools Terms] and the [OpenAI Ad Tools Data Processing Addendum].
The [OpenAI Conversion Terms] also apply to processing in connection with conversion tracking.

e) Meta Pixel, Custom Audiences and Facebook Conversion

Within our online service, the so-called “Meta Pixel” of the social network Facebook – operated by Meta Platforms Inc., 1 Hacker Way, Menlo Park, CA 94025, USA, or, if you are based in the EU, Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (“Facebook”).

With the help of the Meta Pixel, Facebook is able, on the one hand, to identify visitors to our online service as a target group for the display of adverts (so-called ‘Meta Ads’). Accordingly, we use the Meta Pixel to ensure that the Facebook adverts we place are shown only to those Facebook users who have demonstrated an interest in our online offering or who exhibit certain characteristics (e.g. interests in specific topics or products, determined on the basis of the web pages visited), which we transmit to Facebook (so-called “Custom Audiences”). We also use the Meta Pixel to ensure that our Facebook adverts correspond to users’ potential interests and do not come across as intrusive. Furthermore, using the Facebook Pixel, we can track the effectiveness of Facebook adverts for statistical and market research purposes by seeing whether users were redirected to our website after clicking on a Facebook advert (known as a ‘conversion’).

The Meta Pixel is integrated directly by Facebook when our online services are accessed and may store a so-called cookie – i.e. a small file – on users’ machines. If users subsequently log in to Facebook or visit Facebook whilst logged in, their visit to our online services is recorded in their profile. The data collected about users is anonymous to us; therefore, it does not allow us to identify individual users. However, the data is stored and processed by Facebook, enabling a link to be established with the respective user profile, and may be used by Facebook as well as for its own market research and advertising purposes. Should we transmit data to Facebook for matching purposes, this data is encrypted locally in the browser and only then sent to Facebook via a secure HTTPS connection. This is done solely for the purpose of matching the data with data that is likewise encrypted by Facebook.

Facebook processes the data in accordance with its Data Use Policy. General information on the display of Facebook adverts can be found in Facebook’s Data Use Policy: https://www.facebook.com/policy.php. Specific information and details about the Meta Pixel and how it works can be found in Facebook’s Help Centre: https://www.facebook.com/business/help/651294705016616.

You may object to the collection of data via the Meta Pixel and the use of your data for the display of Facebook adverts. To control the types of adverts shown to you on Facebook, you can visit the page set up by Facebook and follow the instructions there regarding the settings for usage-based advertising: https://www.facebook.com/settings?tab=ads. These settings apply across all platforms, i.e. they are applied to all machines, such as desktop computers or mobile machines.

You can also object to the use of cookies for audience measurement and advertising purposes via the Network Advertising Initiative’s opt-out page (http://optout.networkadvertising.org/) and, additionally, the US website (http://www.aboutads.info/choices) or the European website (http://www.youronlinechoices.com/uk/your-ad-choices/).

f) Legal basis for data processing

The legal basis for the processing of personal data using technically necessary cookies is Article 6(1)(f) of the GDPR.

The legal basis for the processing of personal data using cookies for analytical purposes is Article 6(1)(a) of the GDPR, provided the user has given their consent in this regard.

g) Purpose of data processing

The purpose of using technically necessary cookies is to simplify the use of websites for users. Some functions of our website cannot be provided without the use of cookies. For these, it is necessary for the browser to be recognised even after a page has been changed.

The user data collected by technically necessary cookies is not used to create user profiles.

Analytical cookies are used to improve the quality of our website and its content. These cookies enable us to understand how the website is used, allowing us to continuously optimise our offering.

These purposes also constitute our legitimate interest in the processing of personal data pursuant to Article 6(1)(f) of the GDPR.

h) Duration of storage, right to object and option to delete

Cookies are stored on the user’s computer and transmitted from there to our website. As a user, you therefore have full control over the use of cookies. By changing the settings in your web browser, you can disable or restrict the transmission of cookies. Cookies that have already been stored can be deleted at any time. This can also be done automatically. If cookies are disabled for our website, it may no longer be possible to make full use of all the website’s functions.

VI. Newsletter

1. Description and scope of data processing

On our website, you have the option to subscribe to a free newsletter. When you register for the newsletter, the data entered in the form is transmitted to us.

In addition, the following data is collected upon registration:

IP address of the accessing computer
Date and time of registration

Your consent to the processing of this data is obtained as part of the registration process, and reference is made to this privacy policy.

No data is passed on to third parties in connection with the data processing carried out for the purpose of sending newsletters. The data is used exclusively for the purpose of sending the newsletter.

2. Legal basis for data processing

The legal basis for processing the data following the user’s subscription to the newsletter is Article 6(1)(a) of the GDPR, provided the user has given their consent.

3. Purpose of data processing

The collection of the user’s email address serves the purpose of delivering the newsletter.

The collection of other personal data as part of the registration process serves to prevent misuse of the services or of the email address provided.

4. Duration of storage

The data will be deleted as soon as it is no longer required to fulfil the purpose for which it was collected. The user’s email address will therefore be stored for as long as the newsletter subscription remains active.

Other personal data collected as part of the registration process is generally deleted after a period of seven days.

5. Right to object and right to erasure

The user concerned may cancel their newsletter subscription at any time here. A link to this effect is also included in every newsletter.

This also allows the user to withdraw their consent to the storage of the personal data collected during the registration process.

VII. Contact form and email contact

1. Description and scope of data processing

Our website features a contact form which can be used to contact us electronically. If a user makes use of this option, the data entered into the form is transmitted to us and stored.

At the time the message is sent, the following data is also stored:

The user’s IP address
Date and time of registration

Your consent is sought for the processing of the data as part of the submission process, and reference is made to this privacy policy.

Alternatively, you may contact us via the email address provided. In this case, the user’s personal data transmitted with the email will be stored.

No data will be passed on to third parties in this context. The data will be used exclusively for the purpose of handling the correspondence.

2. Legal basis for data processing

Where the user has given their consent, the legal basis for data processing is Article 6(1)(a) of the GDPR.

The legal basis for the processing of data transmitted when sending an email is Article 6(1)(f) of the GDPR. If the purpose of the email contact is to conclude a contract, the additional legal basis for processing is Article 6(1)(b) of the GDPR.

3. Purpose of data processing

We process the personal data entered via the contact form solely for the purpose of handling your enquiry. Where contact is made by email, this also constitutes the necessary legitimate interest in the processing of the data.

The other personal data processed during the submission process serves to prevent misuse of the contact form and to ensure the security of our IT systems.

4. Duration of storage

The data will be deleted as soon as it is no longer required to fulfil the purpose for which it was collected. For personal data entered via the contact form and that sent by email, this is the case once the relevant conversation with the user has been concluded. The conversation is deemed to have ended when it is clear from the circumstances that the matter in question has been conclusively resolved.

Any additional personal data collected during the submission process will be deleted within seven days at the latest.

5. Right to object and right to erasure

The user may withdraw their consent to the processing of personal data at any time. If the user contacts us by email, they may object to the storage of their personal data at any time. In such a case, the conversation cannot be continued.

All personal data stored in the course of establishing contact will be deleted in this instance.

VIII. Social media and other matters

1. Use of social media plug-ins

1) We currently use the following social media plug-ins: Facebook, Instagram, Xing, LinkedIn. We use what is known as the ‘two-click’ solution. This means that when you visit our site, no personal data is initially passed on to the providers of the plug-ins. You can identify the plug-in provider by the label on the box showing its initial letter or logo. We provide you with the option to communicate directly with the plug-in provider via the button. Only when you click on the marked field and thereby activate it does the plug-in provider receive the information that you have accessed the relevant page of our website. In addition, the data specified in Section 3 of this policy is transmitted. In the case of Facebook and Xing, according to the respective providers, the IP address is anonymised immediately upon collection in Germany. Activating the plug-in therefore results in your personal data being transmitted to the respective plug-in provider and stored there (in the USA for US-based providers). As the plug-in provider collects data primarily via cookies, we recommend that you delete all cookies via your browser’s security settings before clicking on the greyed-out box.

2) We have no influence over the data collected or the data processing operations, nor are we aware of the full scope of data collection, the purposes of processing or the retention periods. Nor do we have any information regarding the deletion of the collected data by the plug-in provider.

3) The plug-in provider stores the data collected about you as user profiles and uses these for the purposes of advertising, market research and/or tailoring its website to users’ needs. Such analysis is carried out in particular (including for users who are not logged in) to display targeted advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles; to exercise this right, you must contact the relevant plug-in provider. Through the plug-ins, we offer you the opportunity to interact with social networks and other users, enabling us to improve our service and make it more interesting for you as a user. The legal basis for the use of the plug-ins is Article 6(1)(f) of the GDPR.

4) Data is transferred regardless of whether you have an account with the plug-in provider and are logged in there. If you are logged in to the plug-in provider’s service, the data we have collected about you will be directly linked to your existing account with the plug-in provider. If you click the activated button and, for example, share the page, the plug-in provider will also store this information in your user account and share it publicly with your contacts. We recommend that you log out regularly after using a social network, but particularly before clicking the button, as this will help you avoid your data being linked to your profile with the plug-in provider.

5) Further information on the purpose and scope of data collection and its processing by the plug-in provider can be found in the privacy policies of these providers, as set out below. There you will also find further information on your rights in this regard and the settings available to protect your privacy.

6) Addresses of the respective plug-in providers and URLs to their privacy policies:

a) Facebook Inc., 1601 S California Ave, Palo Alto, California 94304, USA; www.facebook.com/policy.php; further information on data collection: https://www.facebook.com/help/186325668085084, www.facebook.com/about/privacy/your-info-on-other and www.facebook.com/about/privacy/your-info. Facebook has opted into the EU-US Privacy Shield, www.privacyshield.gov/EU-US-Framework.

b) Our website uses so-called social plugins (‘plugins’) from Instagram, which is operated by Instagram LLC, 1601 Willow Road, Menlo Park, CA 94025, USA (‘Instagram’). The plugins are identified by an Instagram logo, for example in the form of an ‘Instagram camera’.

When you visit a page on our website that contains such a plugin, your browser establishes a direct connection to Instagram’s servers. The content of the plugin is transmitted directly from Instagram to your browser and integrated into the page. Through this integration, Instagram receives the information that your browser has accessed the relevant page of our website, even if you do not have an Instagram profile or are not currently logged in to Instagram. This information (including your IP address) is transmitted directly from your browser to an Instagram server in the USA and stored there.

If you are logged in to Instagram, Instagram can directly associate your visit to our website with your Instagram account. If you interact with the plugins – for example, by clicking the ‘Instagram’ button – this information is also transmitted directly to an Instagram server and stored there. The information is also published on your Instagram account and displayed there to your contacts.

For details of the purpose and scope of data collection, as well as the further processing and use of the data by Instagram, and your rights in this regard and the settings available to protect your privacy, please refer to Instagram’s privacy policy: help.instagram.com/155833707900388/

If you do not wish Instagram to link the data collected via our website directly to your Instagram account, you must log out of Instagram before visiting our website. You can also completely prevent the Instagram plugins from loading by using add-ons for your browser, e.g. the script blocker ‘NoScript’ (https://noscript.net/).

c) Xing AG, Gänsemarkt 43, 20354 Hamburg, Germany; www.xing.com/privacy.

d) LinkedIn Corporation, 2029 Stierlin Court, Mountain View, California 94043, USA; https://www.linkedin.com/legal/privacy-policy. LinkedIn has opted into the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

2. Embedding of YouTube videos

1) We have embedded YouTube videos in our online service which are stored at www.YouTube.com and can be played directly from our website. [These are all embedded in ‘enhanced privacy mode’, meaning that no data about you as a user is transmitted to YouTube unless you play the videos. Only when you play the videos is the data referred to in paragraph 2 transmitted. We have no control over this data transfer.]

2) When you visit the website, YouTube receives the information that you have accessed the relevant subpage of our website. In addition, the data specified in § 3 of this policy is transmitted. This occurs regardless of whether YouTube provides a user account through which you are logged in, or whether no user account exists. If you are logged in to Google, your data will be directly associated with your account. If you do not wish your data to be associated with your YouTube profile, you must log out before activating the button. YouTube stores your data as usage profiles and uses them for the purposes of advertising, market research and/or tailoring its website to users’ needs. Such analysis takes place in particular (even for users who are not logged in) to deliver personalised advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles; to exercise this right, you must contact YouTube.

3) Further information on the purpose and scope of data collection and its processing by YouTube can be found in the privacy policy. There you will also find further information on your rights and settings options for protecting your privacy: https://www.google.de/intl/de/policies/privacy. Google also processes your personal data in the USA and has opted into the EU-US Privacy Shield, www.privacyshield.gov/EU-US-Framework.

3. Integration of Google Maps

1) On this website, we use the Google Maps service. This enables us to display interactive maps directly on the website and allows you to use the map function conveniently.

2) When you visit the website, Google receives information indicating that you have accessed the relevant page of our website. In addition, the data specified in § 3 of this policy is transmitted. This occurs regardless of whether Google provides a user account through which you are logged in, or whether no user account exists. If you are logged in to Google, your data will be directly associated with your account. If you do not wish your data to be associated with your Google profile, you must log out before activating the button. Google stores your data as usage profiles and uses them for the purposes of advertising, market research and/or tailoring its website to users’ needs. Such analysis is carried out in particular (even for users who are not logged in) to deliver personalised advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles; to exercise this right, you must contact Google.

3) Further information on the purpose and scope of data collection and its processing by the plug-in provider can be found in the provider’s privacy policy. There you will also find further information on your rights in this regard and the settings available to protect your privacy: https://www.google.de/intl/de/policies/privacy. Google also processes your personal data in the USA and has opted into the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

4. Use of Yumpu

Our website incorporates an application provided by Yumpu, Gewerbestrasse 3, 9444 Diepoldsau, Switzerland (hereinafter: Yumpu). This enables you to view our catalogues as e-papers.

Yumpu uses cookies and functions that enable it to analyse your use of the website. Yumpu thereby collects and stores personal data such as your IP address and information about the time and duration of your use. This data is transmitted if you have JavaScript enabled in your browser.

Yumpu’s Terms of Use and Privacy Policy:
www.yumpu.com/de/info/privacy_policy

5. Validity

This privacy policy also applies to the following company websites:

As well as for other websites operated by the company under the domain “boecker.de”, provided that no separate or differing privacy policy is published there.

IX. Rights of the data subject

You have the following rights at any time with regard to your personal data:

Right of access, Art. 15 GDPR
Right to rectification or erasure, Articles 16 and 17 of the GDPR
Right to restriction of processing, Art. 18 GDPR
Right to data portability, Article 20 of the GDPR
Right to object to processing, Art. 21 GDPR

You also have the right to lodge a complaint with a data protection supervisory authority regarding our processing of your personal data.