Privacy Policy
1. Data Protection at a Glance
General Information
The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data includes all data that can be used to identify you personally. Detailed information on data protection can be found in the Privacy Policy set out below.
Data Collection on This Website
Who is responsible for data collection on this website?
Data processing on this website is carried out by the website operator. The operator’s contact details can be found in the section “Information on the Controller” in this Privacy Policy.
How do we collect your data?
Some data is collected when you provide it to us. This may include, for example, data that you enter into a contact form.
Other data is collected automatically or with your consent by our IT systems when you visit the website. This mainly includes technical data, such as your internet browser, operating system or the time at which the page was accessed. This data is collected automatically as soon as you enter this website.
What do we use your data for?
Some data is collected to ensure that the website is provided without errors. Other data may be used to analyse your user behaviour. Where contracts can be concluded or initiated through the website, the data transmitted will also be processed for contractual offers, orders or other enquiries.
What rights do you have regarding your data?
You have the right to obtain information, free of charge and at any time, about the origin, recipients and purpose of your stored personal data. You also have the right to request that this data be corrected or deleted.
If you have consented to data processing, you may withdraw this consent at any time with future effect. Under certain circumstances, you also have the right to request that the processing of your personal data be restricted.
Furthermore, you have the right to lodge a complaint with the competent supervisory authority.
You may contact us at any time regarding this or any other questions concerning data protection.
Analytics and Third-Party Tools
When you visit this website, your browsing behaviour may be statistically evaluated. This is primarily carried out using analytics tools.
Detailed information on these analytics tools can be found in the following Privacy Policy.
2. Hosting
We host the content of our website with the following provider:
WIX
The provider is Wix.com Ltd., 40 Namal Tel Aviv St., Tel Aviv 6350671, Israel, hereinafter referred to as “WIX”.
WIX is a tool for creating and hosting websites. When you visit our website, WIX may analyse user behaviour, visitor sources, the region of website visitors and visitor numbers. WIX stores cookies in your browser that are required to display the website and ensure its security.
The data collected through WIX may be stored on servers around the world. WIX servers are located, among other places, in the United States.
Further details can be found in the WIX Privacy Policy:
https://www.wix.com/about/privacy
According to WIX, data transfers to the United States and other third countries are based on the European Commission’s Standard Contractual Clauses or comparable safeguards pursuant to Article 46 GDPR. Further details can be found here:
https://www.wix.com/about/privacy-dpa-users
The use of WIX is based on Article 6(1)(f) GDPR. We have a legitimate interest in ensuring that our website is displayed as reliably as possible.
Where corresponding consent has been requested, processing is carried out exclusively on the basis of Article 6(1)(a) GDPR and Section 25(1) TDDDG, insofar as the consent covers the storage of cookies or access to information on the user’s device, such as device fingerprinting, within the meaning of the TDDDG. Consent may be withdrawn at any time.
The company is certified under the EU-US Data Privacy Framework, or DPF. The DPF is an agreement between the European Union and the United States intended to ensure compliance with European data protection standards when data is processed in the United States.
Every company certified under the DPF undertakes to comply with these data protection standards. Further information is available from the provider at:
https://www.dataprivacyframework.gov/participant/5626
Data Processing Agreement
We have concluded a data processing agreement with the provider named above. This is a contract required under data protection law that ensures that the provider processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.
3. General Information and Mandatory Information
Data Protection
The operators of this website take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the applicable data protection regulations and this Privacy Policy.
When you use this website, various items of personal data are collected. Personal data is data that can be used to identify you personally.
This Privacy Policy explains which data we collect, what we use it for, and how and for what purpose the processing takes place.
Please note that data transmission over the internet, such as communication by email, may be subject to security vulnerabilities. Complete protection of data against access by third parties is not possible.
Information on the Controller
The controller responsible for data processing on this website is:
Thomas Batsch
Bohleitenweg 11
92367 Pilsach
Germany
Email: info@borgodireno.com
The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data, such as names or email addresses.
Retention Period
Unless a more specific retention period is stated in this Privacy Policy, your personal data will remain with us until the purpose for processing the data no longer applies.
If you submit a legitimate request for deletion or withdraw your consent to data processing, your data will be deleted unless we have other legally permissible reasons for retaining your personal data, such as retention periods under tax or commercial law. In the latter case, the data will be deleted once these reasons no longer apply.
General Information on the Legal Bases for Data Processing on This Website
Where you have consented to data processing, we process your personal data on the basis of Article 6(1)(a) GDPR or Article 9(2)(a) GDPR where special categories of personal data within the meaning of Article 9(1) GDPR are processed.
Where explicit consent has been given to the transfer of personal data to third countries, processing is also carried out on the basis of Article 49(1)(a) GDPR.
Where you have consented to the storage of cookies or access to information on your device, such as through device fingerprinting, processing is additionally carried out on the basis of Section 25(1) TDDDG. Consent may be withdrawn at any time.
Where your data is required for the performance of a contract or for taking steps prior to entering into a contract, we process your data on the basis of Article 6(1)(b) GDPR.
We also process your data on the basis of Article 6(1)(c) GDPR where processing is required to comply with a legal obligation.
Processing may also be carried out on the basis of our legitimate interests pursuant to Article 6(1)(f) GDPR. Information on the applicable legal basis in each individual case is provided in the following sections of this Privacy Policy.
Recipients of Personal Data
As part of our business activities, we work with various external organisations. In some cases, it is necessary to transfer personal data to these external organisations.
We disclose personal data to external organisations only where this is necessary for the performance of a contract, where we are legally obliged to do so, for example when transferring data to tax authorities, where we have a legitimate interest in the disclosure pursuant to Article 6(1)(f) GDPR, or where another legal basis permits the disclosure.
Where we use processors, we disclose our customers’ personal data only on the basis of a valid data processing agreement. Where joint processing takes place, a joint-controller agreement is concluded.
Withdrawal of Your Consent to Data Processing
Many data processing operations are possible only with your explicit consent. You may withdraw consent that you have already given at any time.
The lawfulness of processing carried out before the withdrawal remains unaffected by the withdrawal.
Right to Object to Data Collection in Specific Cases and to Direct Marketing under Article 21 GDPR
WHERE DATA PROCESSING IS BASED ON ARTICLE 6(1)(E) OR (F) GDPR, YOU HAVE THE RIGHT, AT ANY TIME AND ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION, TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA. THIS ALSO APPLIES TO PROFILING BASED ON THESE PROVISIONS.
THE APPLICABLE LEGAL BASIS FOR PROCESSING CAN BE FOUND IN THIS PRIVACY POLICY.
WHERE YOU OBJECT, WE WILL NO LONGER PROCESS THE PERSONAL DATA CONCERNED UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING THAT OVERRIDE YOUR INTERESTS, RIGHTS AND FREEDOMS, OR UNLESS THE PROCESSING IS NECESSARY FOR THE ESTABLISHMENT, EXERCISE OR DEFENCE OF LEGAL CLAIMS. THIS IS AN OBJECTION UNDER ARTICLE 21(1) GDPR.
WHERE YOUR PERSONAL DATA IS PROCESSED FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR SUCH MARKETING. THIS ALSO APPLIES TO PROFILING WHERE IT IS RELATED TO SUCH DIRECT MARKETING.
WHERE YOU OBJECT, YOUR PERSONAL DATA WILL NO LONGER BE USED FOR DIRECT MARKETING PURPOSES. THIS IS AN OBJECTION UNDER ARTICLE 21(2) GDPR.
Right to Lodge a Complaint with the Competent Supervisory Authority
In the event of infringements of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, in particular in the Member State of their habitual residence, their place of work or the place of the alleged infringement.
This right is without prejudice to any other administrative or judicial remedies.
Right to Data Portability
You have the right to receive data that we process automatically on the basis of your consent or in performance of a contract, either yourself or through a third party, in a commonly used, machine-readable format.
Where you request the direct transfer of data to another controller, this will be carried out only where technically feasible.
Access, Rectification and Erasure
Within the framework of the applicable legal provisions, you have the right at any time to obtain information, free of charge, about your stored personal data, its origin and recipients, and the purpose of the processing.
Where applicable, you also have the right to have this data corrected or deleted. You may contact us at any time regarding this or any other questions concerning personal data.
Right to Restriction of Processing
You have the right to request that the processing of your personal data be restricted. You may contact us at any time for this purpose.
The right to restriction of processing applies in the following cases:
-
If you dispute the accuracy of your personal data stored by us, we will generally require time to verify its accuracy. For the duration of this verification, you have the right to request that the processing of your personal data be restricted.
-
If the processing of your personal data was or is unlawful, you may request that the processing be restricted instead of requesting that the data be deleted.
-
If we no longer require your personal data, but you need it for the establishment, exercise or defence of legal claims, you have the right to request that processing be restricted instead of requesting deletion.
-
If you have objected under Article 21(1) GDPR, a balancing of your interests and our interests must be carried out. Until it has been determined whose interests prevail, you have the right to request that the processing of your personal data be restricted.
Where you have restricted the processing of your personal data, that data may, apart from being stored, be processed only with your consent, for the establishment, exercise or defence of legal claims, for the protection of the rights of another natural or legal person, or for reasons of important public interest of the European Union or a Member State.
SSL or TLS Encryption
For security reasons and to protect the transmission of confidential content, such as orders or enquiries that you send to us as the website operator, this website uses SSL or TLS encryption.
You can recognise an encrypted connection by the fact that the browser address bar changes from “http://” to “https://” and by the padlock symbol displayed in your browser.
Where SSL or TLS encryption is activated, the data that you transmit to us cannot be read by third parties.
4. Data Collection on This Website
Cookies
Our website uses so-called “cookies”. Cookies are small data packages and do not cause any damage to your device.
They may be stored temporarily for the duration of a session, as session cookies, or permanently on your device, as persistent cookies. Session cookies are automatically deleted after your visit. Persistent cookies remain stored on your device until you delete them yourself or they are automatically deleted by your web browser.
Cookies may originate from us, as first-party cookies, or from third-party companies, as third-party cookies. Third-party cookies enable the integration of certain services provided by third parties into websites, such as cookies used to process payment services.
Cookies have various functions. Many cookies are technically necessary because certain website functions would not work without them, such as shopping basket functions or the display of videos. Other cookies may be used to analyse user behaviour or for advertising purposes.
Cookies that are necessary for carrying out electronic communications, providing specific functions requested by you, such as shopping basket functionality, or optimising the website, such as measuring website audiences, are stored on the basis of Article 6(1)(f) GDPR unless another legal basis is specified.
The website operator has a legitimate interest in storing necessary cookies to ensure the technically correct and optimised provision of its services.
Where consent to the storage of cookies and comparable recognition technologies has been requested, processing is carried out exclusively on the basis of this consent pursuant to Article 6(1)(a) GDPR and Section 25(1) TDDDG. Consent may be withdrawn at any time.
You can configure your browser to notify you when cookies are set, permit cookies only in individual cases, reject cookies in certain cases or generally, and automatically delete cookies when the browser is closed.
Disabling cookies may restrict the functionality of this website.
Where additional cookies and services are used on this website, information about them can be found in this Privacy Policy.
Contact Form
If you send us an enquiry using the contact form, the information entered in the form, including the contact details you provide, will be stored by us for the purpose of processing your enquiry and responding to any follow-up questions.
We will not disclose this data without your consent.
This data is processed on the basis of Article 6(1)(b) GDPR where your enquiry is related to the performance of a contract or is necessary for taking steps prior to entering into a contract.
In all other cases, processing is based on our legitimate interest in effectively handling the enquiries addressed to us pursuant to Article 6(1)(f) GDPR, or on your consent pursuant to Article 6(1)(a) GDPR where such consent has been requested. Consent may be withdrawn at any time.
The data you enter into the contact form will remain with us until you request its deletion, withdraw your consent to its storage or the purpose for storing the data no longer applies, for example once your enquiry has been fully processed.
Mandatory statutory provisions, in particular statutory retention periods, remain unaffected.
Enquiries by Email, Telephone or Fax
If you contact us by email, telephone or fax, your enquiry, including all personal data arising from it, such as your name and the content of the enquiry, will be stored and processed by us for the purpose of handling your request.
We will not disclose this data without your consent.
This data is processed on the basis of Article 6(1)(b) GDPR where your enquiry is related to the performance of a contract or is necessary for taking steps prior to entering into a contract.
In all other cases, processing is based on our legitimate interest in effectively handling the enquiries addressed to us pursuant to Article 6(1)(f) GDPR, or on your consent pursuant to Article 6(1)(a) GDPR where such consent has been requested. Consent may be withdrawn at any time.
The data sent to us in connection with your enquiry will remain with us until you request its deletion, withdraw your consent to its storage or the purpose for storing the data no longer applies, for example once your request has been fully processed.
Mandatory statutory provisions, in particular statutory retention periods, remain unaffected.
5. Plugins and Tools
Google Maps
This website uses the Google Maps mapping service. The provider is Google Ireland Limited, referred to as “Google”, Gordon House, Barrow Street, Dublin 4, Ireland.
This service enables us to integrate map content into our website.
To use the functions of Google Maps, it is necessary to store your IP address. This information is generally transferred to a Google server in the United States and stored there.
The provider of this website has no control over this data transfer.
Where Google Maps is activated, Google may use Google Fonts to ensure a consistent display of fonts. When Google Maps is accessed, your browser loads the required web fonts into its browser cache in order to display text and fonts correctly.
Google Maps is used in the interest of presenting our online services in an attractive manner and making it easier to locate the places specified on our website. This constitutes a legitimate interest within the meaning of Article 6(1)(f) GDPR.
Where corresponding consent has been requested, processing is carried out exclusively on the basis of Article 6(1)(a) GDPR and Section 25(1) TDDDG, insofar as the consent covers the storage of cookies or access to information on the user’s device, such as device fingerprinting, within the meaning of the TDDDG. Consent may be withdrawn at any time.
Data transfers to the United States are based on the European Commission’s Standard Contractual Clauses. Further details can be found here:
https://privacy.google.com/businesses/gdprcontrollerterms/
https://privacy.google.com/businesses/gdprcontrollerterms/sccs/
Further information on how Google handles user data can be found in Google’s Privacy Policy:
https://policies.google.com/privacy?hl=en
The company is certified under the EU-US Data Privacy Framework, or DPF. The DPF is an agreement between the European Union and the United States intended to ensure compliance with European data protection standards when data is processed in the United States.
Every company certified under the DPF undertakes to comply with these data protection standards.
Further information is available from the provider at:
https://www.dataprivacyframework.gov/participant/5780
Source: