protecting your privacy is important to us! The following information is intended to inform you about how we handle your data, which are collected when you use our website.
I. Name and Address of the Controller
Europahafen Bremen, Speicher 1
Telephone: +49 421 33961 0
Fax: +49 421 33916 99
II. Name and Address of the Data Protection Officer
Bertold Frick, Attorney
Baumwollbörse, Wachtstraße 17/24
I. Scope and Processing of Personal Data
We collect and use our users’ personal data only to the extent necessary for providing a functional website and to the extent necessary for providing content and services. If this is not the case, personal data will only be regularly used with the consent of the user. Exceptions to this apply in cases in which obtaining prior consent is not possible for practical reasons and the processing of the data is permitted by statutory regulations.
II. Legal Basis for Processing
To the extent that we obtain the consent of the data subject for the processing of personal data, Art. 6, Para. 1, Point (a) of the EU General Data Protection Regulation (GDPR) shall serve as the legal basis.
When processing personal data is required in order to fulfill a contract that the data subject is party to, Art. 6, Para. 1 Point (b), of the GDPR shall serve as the legal basis. This also applies to processing that is required in order to carry out precontractual measures.
To the extent that processing personal data is required to fulfill a legal obligation that our company is subject to, Art. 6, Para. 1, Point (c) of the GDPR shall serve as the legal basis.
In the event that vital interests of the data subject or any other natural person would necessitate the processing of personal data, Art. 6, Para. 1, Point (d) of the GDPR shall serve as the legal basis.
If processing is necessary to ensure the legitimate interests of our company or a third party – and the interests, fundamental rights, and fundamental freedoms of the data subject do not outweigh this interest – then Art. 6, Para. 1, Point (f) of the GDPR shall serve as the legal basis for the processing. The legitimate interest of our company lies in carrying out our business activities.
III. Routine Erasure and Restriction of Processing of Personal Data
We only process and store the personal data of the data subject for as long as this is required to achieve the purpose of storing them. Additionally, data may be stored beyond this period if this is provided for by the European or national legislature in EU regulations, laws, or other regulations to which the controller is subject. Once the purpose for the storage no longer applies or the storage period stipulated by the aforementioned regulations expires, the personal data shall be routinely erased or processing thereof shall be restricted.
IV. Security of Your Data
We utilize the widely used SSL (Secure Socket Layer) method during your site visit in conjunction with the highest level of encryption supported by your browser, respectively. In general, this means 256-bit encryption. If your browser does not support 256-bit encryption, we will instead use 128-bit v3 technology. You can see whether the individual pages of our website are encrypted during transfer by the graphic of the closed padlock or key icon in the lower status bar of your browser.
We also take appropriate technical and organizational security measures to protect your data against accidental or intentional manipulations, partial or total loss, destruction, or against unauthorized access by third parties. Our security measures are enhanced on an ongoing basis to reflect technological developments.
C. Usage Data
I. Log Files
1. Description and Scope of Data Collection
Every time the website is accessed, we or the site provider collect data and information through an automated system. These are stored in the server’s log files. The following data can be collected:
- Information about the type and version of the browser used
- The user’s operating system
- The user’s Internet service provider
- The user’s IP address
- The date and time the website was accessed
- Websites through which the user’s system accessed our website (referrer)
- Websites accessed by the user’s system through our website
2. Legal Basis for Data Processing
The legal basis for the temporary storage of log files is Art. 6, Para. 1, Point (f) of the GDPR.
3. Purpose of Data Processing
The temporary storage of the IP address by the system is necessary to enable the website to be delivered to the user’s computer. For this, the user’s IP address must be stored for the duration of the session.
This information is stored in log files to guarantee the website’s functionality. In addition, we use the data to optimize our website and to ensure the security of our information technology systems. No evaluation of the data is made for marketing purposes in this context.
For these purposes, our legitimate interest also lies in the processing of data according to Art. 6, Para. 1, Point (f) of the GDPR.
The data will be deleted as soon as they are no longer required for achieving the purpose for which they were collected. In the case of collecting data for the provision of the website, this is the case once the respective session has ended.
4. Duration of Storage
If data is stored in log files, this data will be deleted after a maximum of seven days. Data may be stored beyond this period. In this case, the IP addresses of users are deleted or modified so that associating them with the client who made the request is no longer possible.
5. Possibility to Object and Delete
The collection of data for the provision of the website and the storage of data in log files are required for the operation of the website. Consequently, there is no possibility for the user to object to this.
How can I prevent cookies from being stored on my computer?
You can change your browser’s settings so that the storage of cookies is only accepted if you agree. You can delete any cookies that are still present. However, deactivating cookies may limit the usability of our website. Information on how to disable cookies can be found via https://de.wikihow.com/Cookies-deaktivieren.
III. Google Universal Analytics
The information generated by the cookie about your use of this website is generally transmitted to and saved on a Google server located in the United States. We use IP address anonymization on our website. With this, your IP address will be truncated by Google within Member States of the European Union or in other states that are party to the European Economic Area Agreement. Your complete IP address will be transmitted to and truncated on a Google server located in the United States only in exceptional cases. Google is committed to complying with the Privacy Shield agreement published by the US Department of Commerce between the EU and the US regarding the collection, use, and storage of personal information from EU Member States and keeps a Privacy Shield certificate, accordingly.
Google uses this information on our behalf to evaluate your use of the website, to compile reports about website activities, and to provide additional services to the operator of the website that are related to your use of the website and your Internet usage. The data transmitted can be used to create user profiles of the visitors to our website. The IP address transmitted by your browser in the scope of Google Universal Analytics will not be combined with other data held by Google.
The evaluation of user behavior on the website is based on the legitimate interests of the provider. Through the evaluation of the anonymized usage data, the website is adjusted and optimized based on user behavior.
You can prevent cookies from being stored on your computer by adjusting your browser’s settings. Furthermore, you can prevent the data generated by the cookie and related to your use of the website from being collected and sent to Google and prevent Google from processing the data by downloading and installing the browser plug-in available at the following link: https://tools.google.com/dlpage/gaoptout?hl=en. You can also prevent usage and processing by clicking the following link. This will activate an opt-out cookie that will prevent future collection of your data when you visit this website: Disable Google Universal Analytics for this site.
The information obtained from the cookie about the usage of this website is not forwarded to third parties.
On our website, we employ the “Custom Audiences” remarketing function from Facebook Inc., 1601 Willow Road, Menlo Park, CA 94025, USA, or, if you are based in the EU, Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (“Facebook”). This allows us to present visitors to our website with interest-based ads (“Facebook Ads”) within the context of their visit to the Facebook social network. During the website visit, a direct link to the Facebook servers is created via the Facebook remarketing tag (cookie) deployed on our website, and the Facebook servers are informed that you have visited this website. Facebook assigns this information to your personal Facebook user account. You can find more detailed information on the collection and use of data by Facebook, your rights in this regard, and possibilities for protecting your privacy in Facebook’s Data Policy at https://www.facebook.com/about/privacy/.
You may refuse the right to use the cookie at any time and deactivate the “Custom Audiences” remarketing function via this link (opt out). In addition, you can adjust the settings in Facebook itself via the following link: https://www.facebook.com/settings/?tab=ads#_=_. To do this, you must be logged into Facebook.
V. Facebook “VisitorAction Pixel”
As part of our online offer, the so-called “visitor action pixel” from Facebook Inc., 1601 Willow Road, Menlo Park, CA 94025, USA, or, if you are based in the EU, Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, is employed due to our legitimate interest in the analysis, optimization, and commercial operation of our online offer, and for the purposes thereof. This facilitates the tracking of user behavior after users have been transferred to the vendor’s website by clicking on the Facebook ad. This procedure serves to evaluate the effectiveness of Facebook ads for statistical and market research purposes and can contribute to optimizing future advertising measures. The data collected remain anonymous to us and we are therefore unable to infer the identity of users. However, the data are stored and processed by Facebook such that a connection to the respective user profile is possible and Facebook can use the data for its own advertising purposes in accordance with the Facebook Data Policy (https://www.facebook.com/about/privacy/) https://www.facebook.com/about/privacy/). This only affects users who have an account with Facebook and are logged into the members’ section of Facebook. Users who are not Facebook members are unaffected by this data processing. You may refuse the right to use the cookie at any time and deactivate the function via this link (opt out). In addition, you can adjust the settings in Facebook itself via the following link: https://www.facebook.com/settings/?tab=ads#_=_. To do this, you must be logged into Facebook.
On our website, you have the option of subscribing to our newsletter. For this, we require your name as well as your e-mail address in order to send you the newsletter.
The legal basis for this is your consent (Art. 6, Para. 1, Sentence 1, Point (a) of the GDPR). When registering for the newsletter, you agree that we may send a newsletter to your e-mail address. During the registration, you agree to the following consent text:
You can withdraw this consent at any time for the future by unsubscribing from the newsletter. There is a link at the end of each newsletter sent that you can click in order to unsubscribe from the newsletter. Your entry will then be automatically deleted.
Registering for our newsletter is done via a so-called double-opt-in procedure. This means that you will receive an e-mail after registering that requests confirmation of your registration. As proof of your registration for the newsletter, your registration and confirmation times as well as your IP address are stored.
The statistical collection, analysis, and logging of the registration procedure is based on a legitimate interest (Art. 6, Para. 1, Sentence 1, Point (f) of the GDPR). Here, the legitimate interest lies in the proper and technically perfect execution of sending an e-mail.
We store your e-mail address, which you have provided in the context of requesting the newsletter, only as long as you have subscribed to the newsletter. As soon as you unsubscribe from the newsletter, we will delete your e-mail address. The newsletter is distributed via MailChimp, a newsletter distribution platform provided by US provider Rocket Science Group, LLC, 675 Ponce De Leon Ave NE #5000, Atlanta, GA 30308, United States.
The e-mail addresses of our newsletter recipients, as well as their further information described in the scope of this notification, are stored on the servers of MailChimp in the United States. MailChimp uses this information to send and evaluate the newsletters on our behalf. In addition, according to its own information, MailChimp may use these data to optimize or improve its own services, for example, for technically optimizing the dispatch and the presentation of the newsletter, or for economic purposes in order to determine which countries the recipients come from. However, MailChimp does not use the data of our newsletter recipients to write to them itself, nor does it pass this data on to third parties.
Otherwise, we do not forward the e-mail address you submitted to us to third parties.
On various places on our website, we have included links to our social media accounts. However, no data are transmitted to the respective operator of the pages and no personal data are processed in any other way.
Currently, this concerns an integrated link to our social media pages on Facebook, Instagram, E3 Network, LinkedIn, Xing, and Kununu. By integrating the links, we want to enable visitors to our website to stay in contact with us through social media. In addition, we incorporate the most recent photo with the appropriate text from our Facebook page into the home page of our website to draw attention to Bernstein GmbH.
Use of Facebook Page Insights
Facebook uses its “Page Insights” service on our website. Insofar as you have given your consent for tracking on our website by opting in to the service, your data will be recorded for our Facebook page. You may assert your rights as a data subject vis-à-vis Facebook Ireland and Bernstein GmbH. Pursuant to the GDPR, primary responsibility for the processing of Insights Data lies with Facebook. Facebook fulfills all obligations arising from the GDPR in respect of the processing of Insights Data and makes the essence of the Page Insights Addendum available to data subjects. Bernstein GmbH takes no decisions about the processing of Insights Data and other information arising from Article 13 of the GDPR, including the legal basis, the identity of the data controller, and the length of time for which cookies are stored on terminal devices.
More information on the Page Insights Addendum and the responsibilities of Facebook can be found via https://www.facebook.com/legal/terms/page_controller_addendum
VIII. Usage of Google Maps
We use Google Maps to show you interactive maps from Google Maps and thus to provide you with a better experience on our website. Our legitimate interest also lies in this.
You have a right to object to the creation of these user profiles. To do so, you need to contact Google.
Google has submitted to and is certified with the Privacy Shield agreement between the European Union and the United States. As a result, Google is obligated to comply with the standards and regulations of European data protection law. More information can be found at https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active.
IX. Usage of Google Fonts
External fonts, Google Fonts, are used on these web pages. This is used to display our content correctly and graphically appealing across devices. Google Fonts is a service of Google Inc (“Google”).
Google Fonts are hosted locally by us. This means that when you visit our website, no connection is established to a Google server to download fonts. No personal data is transmitted to Google via our local use of Google Fonts in this context.
The fonts stored locally by us are delivered to your browser as soon as you visit our website. By using the fonts, we ensure a uniform design of our website across all devices. This is also our legitimate interest, which justifies the processing of personal data pursuant to Art. 6 (1) lit. f DSGVO.
X. Usage of YouTube
We use YouTube to be able to display and offer you content and features of the YouTube social platform on our website, thereby improving our offering and the user experience and making it more interesting.
Our legitimate interest also lies in the processing of the above information.
If you would like to prevent the transfer of data, then you cannot use the features of YouTube. Regardless of this, we recommend you regularly log off social networks after using them – in particular, however, before activating content that has been incorporated on other websites, as this will prevent your profile with the respective provider from becoming associated with you.
Google has submitted to the Privacy Shield agreement between the European Union and the United States and is certified accordingly. As a result, Google is obligated to comply with the standards and regulations of European data protection law. More information can be found at https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active entnehmen.
XI. Usage of Google AdWords
In order to evaluate and optimize our online advertising, we use so-called conversion tracking as part of the online Google AdWords advertising program. This helps us recognize whether and how many people are visiting our pages through Google advertising. If you click a Google ad, Google places a so-called conversion cookie on your computer. This has a “life span” of 30 days. If a user visits one of our sites within these 30 days by one of our Google ads, we and Google will be able to recognize the ad that resulted in the visitor visiting our website. Personal data through which individual visitors can be identified are not collected. We only receive a statistical analysis of the total number of users who clicked on our ads and were led to our website.
More information about Google conversion tracking can be found at https://support.google.com/google-ads/answer/1722022?hl=en.
You can opt out of the usage of conversion cookies and thereby prevent conversion tracking by:
- configuring your browser to not accept cookies. However, using our website and services is then potentially only possible to a limited extent.
- deactivating interest-based ads from Google in the Google Ad Settings: https://adssettings.google.com/anonymous?hl=en&sig=ACi0TCiyU2KuXvO1PqgMQuuheTTflUkJXF5eXTue2K9Rcfwj7nFLktjlogrSoOEQSzVQiM1yHZ4eg3FaMue7lwzKDIAOw9VGVZ2gpEyj11_BBS5VUn4Zi0
D. Your Personal Data (Master Data)
I. What are personal data?
Personal data are information about you as an individual that allows conclusions to be drawn about your identity or that relate directly or indirectly to you as an individual, for example your name, address, or telephone number. Information that does not allow conclusions to be drawn about a particular or identifiable person is excluded.
A contact form is available on our website, https://bernstein.de/en/contact/, which can be used for electronic contact. In order to use the contact form, you are obligated to enter your name, your e-mail address, and your message so that we can process and answer your inquiry accordingly. Optionally, you can also enter the name of your company and your telephone number. The provision of a contact form will serve our legitimate interests since it gives us more opportunities to get in touch with you. If you voluntarily use the option of providing your company name and your telephone number, you thereby consent to us collecting and using the data in order to contact you. Alternatively, you can also contact us via the e-mail address provided, email@example.com, by clicking the “Send e-mail” button, which opens your e-mail program and inputs our e-mail address in the recipient field, or by telephone. If the data subject contacts the data controller using one of these channels, then the personal data transmitted by the data subject will be automatically stored. The storage is solely used for the purposes of processing the data or contacting the data subject. The data are not forwarded to third parties. The data you submit will only be stored for as long as is required for establishing contact.
III. Job Applications with Bernstein GmbH
You can access the currently advertised job openings of Bernstein GmbH online at https://bernstein.de/en/jobs/. Click the link indicated on the website in order to send an e-mail to us via your e-mail program. You can send your application documents as an attachment by e-mail. It is also possible to send applications to Bernstein GmbH by regular mail or e-mail (e-mail address: firstname.lastname@example.org). Providing these e-mail addresses for applications serves our legitimate interests by creating another way to submit applications and address a wider range of potential applicants. Alternatively, you can also submit your application to us via regular mail. The data collected is stored solely for the purposes of carrying out the application process. The storage lasts no more than six months as of the end of the application process. Unsolicited applications sent electronically (via e-mail) are regularly deleted immediately upon receipt. However, we reserve the right to save application documents for up to 12 months in order to potentially establish contact if our legitimate interests indicate that a position for the specific application may come into consideration within this period. By sending the unsolicited application, you also declare your consent to this storage. You are entitled to withdraw your consent to the storage at any time by sending an e-mail to email@example.com. Applications sent by regular mail to Bernstein GmbH will be sent back to the applicants at the end of the application process.
IV. Client Area
We provide our clients with a client area at https://login.bernstein.de. Here, you can log in to track the progress of your orders. To sign up for our client area, you will need to provide a valid e-mail address, and set a password. The data you enter will be transmitted securely and in encrypted form.
We will store and process your data in order to take steps prior to entering into a contract and to complete your order(s). Furthermore, processing is based on our legitimate interest in efficient client management and communication.
Your account can also be deleted at any time, which will also result in the stored data being erased. The deletion of your account has no effect on your current orders and the data stored in relation to them.
V. VRedirecting to Other Websites
In order to increase our service offering, you can find links on our website to other websites, which other providers are responsible for. The extent to which our advertising partners collect personal data can be found in their privacy policies. You can recognize that you are being redirected due to the fact that a new browser window opens and a new address is displayed in the browser line.
VI. Disclosure of Data to Third Parties
We only disclose your personal information to third parties if
- you have given your express consent to this, pursuant to Art. 6, Para. 1, Sentence 1, Point (a) of the GDPR
- the disclosure is required, pursuant to Art. 6, Para. 1, Sentence 1, Point (f) of the GDPR in order to safeguard our legitimate interests and there is no reason to assume that you have an overriding interest worthy of being protected for not disclosing your data
- there is a legal obligation to transfer them, pursuant to Art. 6, Para. 1, Sentence 1, Point (c) of the GDPR No data will be transferred to third parties for purposes of advertising.
VII. Processing of Data Outside the European Economic Area (EEA)
The usage of our website involves transferring data (including transferring data to the United States and other countries outside the EEA). Bernstein GmbH is entitled to process personal data in or transfer personal data to countries outside the EEA (including countries upon which the European Commission has not made a decision regarding the adequate protection of personal data) and, in particular, to the United States. The transfer of such data will comply with the local legislation regarding cross-border data transfer, where applicable. If you do not agree with this process, you may not use our services. By using our services, you consent to the transfer of your information to countries outside your own country and outside the EEA for the business purposes outlined above.
E. Rights of the Data Subject
You have the right:
- pursuant to Article 15 of the GDPR, to request information about your personal data processed by us. In particular, you can request information on the purposes of the processing; the category of personal data; the categories of recipients to whom your data has been or will be disclosed; the planned duration of the storage; the existence of a right to rectification, erasure, restriction of processing, or objection; the existence of a right of appeal, where your data originated if they were not collected by us; and the existence of an automated decision-making process – including profiling – pursuant to Article 22, Paragraphs 1 and 4 of the GDPR and, if applicable, meaningful information regarding the details thereof. You have the right to request information about whether the personal data concerning you are transmitted to a third country or to an international organization. In this context, you may request to be informed of the appropriate guarantees pursuant to Article 46 of the GDPR in connection with the transfer;
- pursuant to Article 16 of the GDPR, to immediately demand that any incorrect or incomplete personal data stored by us be rectified immediately;
- pursuant to Article 17 of the GDPR, to demand the erasure of your personal data stored by us, except where the processing is for the exercise of the right to freedom of expression and information; for the fulfillment of a legal obligation; for reasons of public interest; for the assertion, exercise, or defense of legal claims; for archival, scientific, or historical research purposes in the public interest or as is necessary for statistical purposes according to Article 89, Paragraph 1 of the GDPR, provided that the right indicated is likely to make the fulfillment of the objectives of that processing impossible or severely affect them;
- pursuant to Article 18 of the GDPR, to demand the restriction of processing of your personal data to the extent that the accuracy of the data is disputed by you; the processing is unlawful, yet you decline the deletion thereof, and we no longer require the data, yet you require this for the assertion, exercise, or defense of legal claims; or you have objected to the processing in accordance with Article 21 of the GDPR. If the processing of personal data concerning you has been restricted, these data may only be processed with your consent or in order to assert, exercise, or defend against legal claims; to protect the rights of another natural or legal person; or for reasons of significant public interest of the Union or of a Member State and you will be informed by the controller before the restriction is removed;
- pursuant to Article 20 of the GDPR, to receive your personal data, which you have provided to us, in a structured, established, and machine-readable format, or to request the transfer thereof to another controller, provided that the freedoms and rights of others are not adversely affected by this. This right of data portability does not apply to the processing of personal data that are required for the performance of a task in the public interest or in the exercise of official authority that has been delegated to the controller.
- pursuant to Article 7, Paragraph 3 of the GDPR, to withdraw your consent, previously granted to us, at any time. As a result, we are no longer permitted to continue the data processing based on this consent for the future;
- pursuant to Article 22 of the GDPR, to not be subjected to a decision based exclusively on automated processing – including profiling – that will have a legal effect or significantly adversely affect you in a similar manner as long as the decision is not required for the conclusion or performance of a contract between you and us due to the legislation of the Union or of the Member States, to which the controller is subject, is permissible, and this legislation contains reasonable measures to safeguard your rights and freedoms as well as your legitimate interests and in accordance with your express consent. These decisions may not be based on special categories of personal data pursuant to Article 9, Paragraph 1 of the GDPR, unless Article 9, Paragraph 2, Points (a) or (g) apply, and reasonable measures have been taken to protect the rights and freedoms and your legitimate interests.
- pursuant to Article 77 of the GDPR, to lodge a complaint with a supervisory authority. In general, you can contact the supervisory authority of your usual place of residence, workplace, or our headquarters for this. The supervisory authority with which the complaint has been lodged will inform the complainant of the status and outcome of the complaint, including the possibility of a judicial remedy, pursuant to Article 78 of the GDPR.
F. Right to Object
If your personal data are processed on the basis of legitimate interests in accordance with Article 6, Paragraph 1, Sentence 1, Point (f) of the GDPR, you have the right to submit an objection against the processing of your personal data in accordance with Article 21 of the GDPR, provided that there are reasons for this that result from your particular situation, or the objection is targeted towards direct mail. In the latter case, you have a general right of objection, which shall be implemented by us without specifying any particular situation.
If you would like to exercise your right of revocation or objection, sending an e-mail to firstname.lastname@example.org is sufficient.