Privacy / Data protection declaration

This data protection declaration (Version: GDPR 1.0 dated 5/14/2018) was produced by the:

German Data Protection Office, Data Protection Office Munich – www.deutsche-datenschutzkanzlei.de

We at Blaser Group GmbH are responsible for this online offer and, as the provider of a teleservice, we must inform you at the beginning of your visit to our online offer about the type, scope and purposes of the collection and use of personal data in a precise, transparent, comprehensible and easily accessible form in clear, straightforward language. The content of the information must be available to you at all times. Therefore, we are required to inform you which personal data is collected or used. Personal data is deemed to be all information which relates to an identified or identifiable natural person.

We place great importance on the security of your data and compliance with data protection regulations. The collection, processing and use of personal data is subject to the provisions of current European and national law.

With the following data protection declaration, we would like to show you how we handle your personal data and how you can contact us:

Blaser Group GmbH

Ziegelstadel 1

D-88316 Isny (Allgäu)

Commercial register No.: HRB 726822

Managing Directors: Dr. Jens Uwe Drowatzky

Telephone: +49 7562 702-0

E-mail: info@blaser-group.com

Our data protection officer

If you have any questions, please contact our data protection officer as follows:

DSB Muenster GmbH

Mr. Heiner Niehueser

Martin-Luther-King-Weg 42-44

D-48155 Muenster

For reasons of clarity, our data protection declaration does not differentiate between the genders. For the purpose of equal treatment, the corresponding terms shall apply for both genders.

The meaning of the terms used, such as “personal data” or its “processing” can be found in Art. 4 of the EU General Data Protection Regulation (GDPR).

The personal data of users processed within the scope of this online offer includes inventory data (e.g. names and addresses of customers), contractual data (e.g. services used, names of agents, payment information), usage data (websites visited in our online offer, interest in our products) and content data (e.g. entries in the contact form).

The term “user(s)” includes all categories of persons affected by data processing, such as our business partners, customers, interested parties and other visitors to our online offer.

Data protection declaration

We guarantee that we shall only collect, process, store and use your data in connection with the processing of your inquiries and for internal purposes, as well as to provide the requested services or content.

Bases for data processing

We process the personal data of users solely in compliance with the relevant data protection regulations. Users’ data is only processed in the following cases of legal permission:

To provide our contractual services (e.g. processing of orders) as well as online services;

the processing is required by law,

if you have given your consent, or

on the basis of our legitimate interests (i.e. interest in the analysis, optimization and cost-effective operation and security of our online offer within the meaning of Art. 6 Para. 1(f) GDPR, in particular for range measurement, the creation of profiles for advertising and marketing purposes as well as the collection of access data and use of third-party services)

We would like to point out where the aforementioned legal bases are regulated in the GDPR:

Consent: Art. 6 Para. 1(a) and Art. 7 GDPR

Processing to fulfill our services and carry out contractual measures: Art. 6 Para. 1(b) GDPR

Processing to fulfill our legal obligations: Art. 6 Para. 1(c) GDPR

Processing to safeguard our legitimate interests: Art. 6 Para. 1(f) GDPR

Data transmission to third parties

We would like to point out that data is transferred when using our online offer due to the use of Google Analytics.

Data transmission to a third country or an international organization

A third country is deemed to be one in which the GDPR is not a directly applicable law. In principal, this includes all countries outside the EU or the European Economic Area.

Data will be transmitted a third-party country or an international organization. In the process, care will be taken to ensure that suitable/appropriate guarantees exist there and that enforceable rights and effective remedies are available to you.

You can obtain a copy of the requisite guarantees at the following links:

Privacy Shield: https://www.privacyshield.gov/list

Standard contractual clauses: http://eur-lex.europa.eu/LexUriServ/LexUriServ.do?uri=OJ:L:2010:039:0005:0018:EN:PDF

Storage period of your personal data

We shall observe the principles of data economy and data avoidance. This means that we store the data that you provide to us only for as long as necessary to fulfill the aforementioned purposes or as long as the various storage periods prescribed by the legislator. If the respective purpose expires or after the expiry of the corresponding periods, your data shall be routinely blocked and deleted in accordance with the statutory guidelines.

For this purpose, we have developed an internal company concept to ensure this procedure.

Contacting Blaser GmbH

If you contact us by e-mail, by phone or via the contact form, you agree to the electronic communication. Personal data is collected when you contact us. The data that is collected in the case of a contact form can be seen from the respective contact form. Your data shall be transmitted securely (SSL encryption). The information that you provide shall be stored solely for the purpose of processing your inquiry as well as for possible follow-up questions.

We would like to mention the legal bases for this:

Processing to fulfill our services and carry out contractual measures: Art. 6 Para. 1(b) GDPR

Processing to safeguard our legitimate interests: Art. 6 Para. 1(f) GDPR

We use software to maintain customer data (CRM system) or similar software based on our legitimate interests (efficient and timely processing of user inquiries).

We have concluded a contract processing agreement with the provider in this regard in which the provider undertakes to process user data only in accordance with our instructions and to comply with the EU data protection level.

We would like to point out that e-mails may be read or changed during transmission without authorization and unnoticed. We would also like to point out that we use a software to filter out unwanted e-mails (spam filter). The spam filter can reject e-mails that have been incorrectly identified as spam due to certain features.

What are your rights?

a) Right to information

You have the right to obtain free-of-charge information about your stored data. Upon request, we shall inform you in writing about the nature of the personal data that we have stored about you in accordance with applicable law. This shall also include the origin and the recipients of your data as well as the purpose of the data processing.

b) Right to correction

You have the right to have your personal data stored with us corrected if it is incorrect. You can request a restriction of the processing, e.g. if you dispute the accuracy of your personal data.

c) Right to block

You can also have your data blocked. To ensure that your data can be blocked at any time, this data must be maintained in a lock file for control purposes.

d) Right to deletion

You may also request the deletion of your personal data as long as no statutory storage obligations exist. If such an obligation exists, we shall block your data upon request. If the relevant legal requirements exist, we shall delete your personal data even if you do not request it.

e) Right to data transferability

You are entitled to request that we provide the personal data transmitted to us in a form which allows it to be transmitted to another location.

f) Right of appeal to a supervisory authority

You have the opportunity to contact one of the data protection supervisory authorities with a complaint.

State representative for data protection and freedom of information Baden-Württemberg.

Postal address: P.O.Box 10 29 32, 70025 Stuttgart, Germany

Home address: Königstraße 10a, 70173 Stuttgart, Germany

Telephone +49 711 615541–0

Telefax: +49 711 615541–15

E-mail: poststelle(at)lfdi.bwl.de

Web: https://www.baden-wuerttemberg.datenschutz.de

You can open the complaint form via the following link: https://www.baden-wuerttemberg.datenschutz.de/online-beschwerde

g) Right to object

You may revoke the use of your data for internal purposes with effect for the future at any time. It is sufficient to send an e-mail todatenschutz@blaser.de in this regard. However, such a revocation shall not affect the legality of the processing procedures that we have carried out up to that point. This shall not affect data processing with regard to all other legal bases, such as the initiation of contracts (see above).

Protection of your personal data

We shall take contractual, organizational and technical security measures in accordance with the state of the art to ensure that the regulations of the data protection laws are observed, and also to protect the data processed by us against any accidental or intentional manipulation, loss, destruction or against access by unauthorized persons.

The security measures include in particular the encrypted transmission of data between your browser and our server. 256-bit-SSL (AES 256) encryption technology is used for this purpose.

Your personal data is protected in the following ways (excerpt):

a) Safeguarding the confidentiality of your personal data

We have taken different measures for entry, admission and access control to safeguard the confidentiality of your personal data stored with us.

b) Safeguarding the integrity of your personal data

We have taken different measures for transfer and input control to maintain the integrity of your data stored with us.

c) Maintaining the availability of your personal data

We have taken different measures for order and availability control to maintain the availability of your personal data stored us.

The security measures used are improved on an ongoing basis in line with technological developments. Despite these precautions, we cannot guarantee the security of your data transmission to our online offer due to the insecure nature of the Internet. Therefore, any data that you transmit to our online offer is at your own risk.

Protection of minors

Persons under the age of 16 may not transmit any personal data to us without the consent of their legal guardian(s). Personal information may only be made available to us by persons under the age of 16 if they have the express consent of their guardian(s), or by persons who are 16 years of age or older. Said data shall be processed in accordance with this data protection declaration.

Cookies

We use cookies. Cookies are small text files which are stored locally in the cache of your Internet browser. Cookies enable the recognition of the Internet browser. The files are used to help the browser navigate through the online offer and be able to use all functions fully.

Our online offer uses: Browser cookies

Control of cookies by the user

Browser cookies: You can set all browsers to only accept cookies on request. Furthermore, only cookies whose pages are currently being visited can be accepted. All browsers offer functions which enable the selective deletion of cookies. The acceptance of cookies can also be generally turned off; however, all restrictions on the user-friendliness of this online offer have to be accepted.

Using first-party cookies (Google Analytics cookies)

Log Google Analytics cookies:

Unique users – Google Analytics cookies collect and group your data. All activities during a visit are summarized. A distinction is made between users and unique users by setting Google Analytics cookies.

User activities – Google Analytics cookies also store data about the start and end time of a visit to the online offer and how many pages you have viewed. When the browser is closed or the user is inactive for a longer period (default 30 minutes), the user session is ended and the cookie records the visit as finished. The date and the time of the first visit are also recorded. The total number of visits per unique user is also logged. External link: https://marketingplatform.google.com/about/analytics/terms/us/

You can prevent Google from collecting the data generated by the cookie and relating to the use of the online offer (incl. your IP address) and from processing this data by downloading and installing the following link in the browser plug-in: External link: http://tools.google.com/dlpage/gaoptout?hl=en.

Further information is available under the point “Web analysis service Google Analytics/Universal Analytics”.

Cookies are managed by the web server of our online offer. This online offer uses:

Persistent cookies (permanent browser identification)

Lifetime: 2 years

Every web browser offers the option to restrict and delete cookies. Further information is available on the following websites:

Internet explorer: http://windows.microsoft.com/en-GB/windows7/How-to-manage-cookies-in-Internet-Explorer-9

Firefox: https://support.mozilla.org/en-US/kb/cookies-information-websites-store-on-your-computer?redirectlocale=en-US&redirectslug=Cookies

Google Chrome: https://support.google.com/chrome/answer/95647?hl=en

Safari: https://support.apple.com/en-gb/HT201265

Web analysis Google Analytics/Universal Analytics

We use Google Analytics, a web analysis service of Google Inc. (“Google”). Google Analytics uses “cookies”, which are text files placed on your computer to enable analysis of the use of the online offer. The information generated by the cookie about the use of this online offer is usually transmitted to a Google server in the USA and stored there. Thus, data is transmitted to a third country. In the process, care will be taken to ensure that suitable/appropriate guarantees exist there and that enforceable rights and effective remedies are available to you.

You can obtain a copy of the requisite guarantees at the following links:

Privacy Shield: https://www.privacyshield.gov/list

Standard contractual clauses: http://eur-lex.europa.eu/LexUriServ/LexUriServ.do?uri=OJ:L:2010:039:0005:0018:EN:PDF

If IP anonymization is activated in our online offer, your IP address will be truncated by Google within the area of the Member States of the European Union or in other countries which are party to the Agreement on the European Economic Area.

However, your full IP address will be transmitted to a Google server in the USA and truncated there only in exceptional cases. Google uses this information on our behalf to evaluate the use of our online offer, to compile reports on the activities of online offer and to provide further services to us associated with the use of the online offer and the Internet. The IP address that your browser conveys within the scope of Google Analytics will not be associated with any other data held by Google. You may prevent the storage of cookies by selecting the appropriate settings in your browser software. However, please note that you may not be able to use all the functions of this online offer as a result.

We would like to inform you that this online offer uses Google Analytics with the extension “_anonymizeIp()”, which only allows IP addresses to be processed in a truncated form to prevent them from being linked directly to persons.

Furthermore, we use Google Analytics reports to collect demographic features and interests.

The user names sent by us and with cookies (e.g. user ID) or data linked with advertising IDs shall be automatically deleted after 14 months. Data whose retention period has been reached shall be deleted automatically once a month. Further information on usage conditions and data protection is available at https://www.google.com/analytics/terms/de.html or at https://policies.google.com/?hl=de

Furthermore, you can prevent Google from collecting the data generated by the cookie and relating to the use of the online offer (incl. your IP address) and from processing this data by downloading and installing the following link in the browser plug-in: http://tools.google.com/dlpage/gaoptout?hl=de.

As an alternative to the browser plug-in or for browsers on mobile devices, please click on the following link to set an opt-out cookie which prevents Google Analytics from collecting data (this opt-out cookie only functions in this browser and only for this domain; if you delete the cookies in this browser, click on the link again):

Disable Google Analytics

We are using a Java-Script Plugin from uptain GmbH (‚uptain-Plugin‘ https://www.uptain.de) for the improvement of the interaction with our visitors. This allows us to analyse your use of the website and improve the customer approach (e.g. via a dialogue window). We collect information about your usage behaviour, including cursor movement, length of stay, clicked links and (if applicable) information provided. The legal basis for the processing is our legitimate interest in direct marketing and providing our website (Art. 6 Abs. 1 lit f GDPR). As a processor uptain GmbH is acting on our behalf and is strictly bound by our instructions. We will not transfer the information to third parties (unless we are obliged by applying law). If and to the extend the information collected by the uptain-Plugin contains personal data this data will be deleted immediately after your visit to our website.

You may deactivate uptain by clicking on the following link: https://www.shop.sauer.de/privacy-policy?__up_tracking_unsubscribe

We use MyFonts Counter, a web analysis service of MyFonts Inc.,500 Unicorn Park Drive, Woburn, MA 01801, USA. Based on the license terms, page-view tracking is carried out by counting the number of visits to our online offer for statistical purposes and transmitting them to MyFonts. MyFonts collects anonymized data in the process.

The data is passed on by activating JavaScript code in your browser. You can install a JavaScript blocker (e.g. www.noscript.net) to prevent MyFonts from activating JavaScript code.

Further information on data protection and on the cookies used is available in the Internet at: http://www.myfonts.com/info/terms-and-conditions/#Privacy

We use the online marketing tool DoubleClick by Google of the provider Goggle LLC., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“DoubleClick”).

DoubleClick uses cookies to turn on the relevant advertisements for users, to improve reporting on campaign performance or to prevent a user from seeing the same ads several times. Google does so by using a cookie ID to keep a record of which ads are shown in which browser.

With the help of cookie IDs, DoubleClick can also log conversions related to ad inquiries. For example, when a user views a DoubleClick ad and later uses the same browser to visit the advertiser’s website and buys something there. According to Google, DoubleClick cookies do not contain any personal information. On the basis of the marketing tools used, your browser automatically builds a direct connection with Google’s server. We have no influence over the scope and the further use of the data which is collected through Google’s use of this tool, so we shall inform you to the best of our knowledge: By embedding DoubleClick, Google receives information that you have called up the corresponding part of our website or have clicked on one of our ads. If you have registered with a service of Google, Google can assign the visit to your account. Even if you are not registered with Google or are not logged in, the provider may be able to determine your IP address and store it.

You can withdraw from this tracking procedure by deactivating cookies for conversion tracking. To do so, set your browser so that cookies from the domain www.googleleadservices.com are blocked, https://www.google.de/settings/ads; however, this setting will be deleted if you delete your cookies. Alternatively, you can gain information from Digital Advertising Alliance at the Internet address www.aboutads.info on the setting of cookies and the required settings required. Finally, you can set your browser so that informs you about the setting of cookies and you can decide on an in individual basis whether to accept them or refuse them in certain cases or in general. If you do not accept cookies, this may restrict the functionality of our online offer.

Google LLC with registered office in the USA is certified for the US-European data protection “Privacy Shield”, which guarantees compliance with the data protection level applicable in the EU. Further information on the data protection provisions of DoubleClick can be found at the following internet address at Google: www.google.de/policies/privacy.

If you register for our e-mail newsletter, personal data is collected. We use this data for our own advertising purposes in the form of your e-mail newsletter if you have given your prior consent as follows: “Yes, I would like to subscribe to the newsletter! I accept the data protection declaration”

You can unsubscribe from the newsletter at any time via the link provided in the newsletter. After registering, your e-mail address will be immediately deleted from our newsletter distributor and incorporated in a lock file to ensure the revocation takes place.

During newsletter tracking, user behavior is collected in a pseudonymised form. The following data is pseudonymised: Recipients, unique unsubscription rate, unique unsubscriptions, bounce rate, bounces (including hard and soft bounces), unique opening rate, unique openings, opening rate, openings, unique click rate, unique clicks, click rate, clicks, effective unique click rate, clicks to segment target groups.

We work together with an external provider, CleverReach GmbH & Co. KG Mühlenstr. 43, 26180 Rastede, Germany to dispatch the newsletter. After dispatching the newsletter, your personal data shall be passed on to CleverReach GmbH & Co. KG and processed by this company solely in accordance with our instructions.

Newsletter tracking: Newsletter tracking (also known as a web beacon or a tracking pixel) is used if you have given your express prior consent. If the newsletter is dispatched, the external server can then record particular data related to the recipient, e.g. the time that the newsletter is retrieved, the IP address or information on the e-mail program used (client). The name of the image file is individualized for every mail recipient by attaching a unique ID. In the process, the mail sender notices which ID belongs to which e-mail address and can thus determine which newspaper recipient has just opened the e-mail.

We use RSS feeds to provide you with information about current topics.

RSS stands for “Really Simple Syndication”. It is an electronic news format. You need an “RSS reader” to be able to use the feed. Different RSS readers are available for all operating systems. Some browsers enable the use of RSS feeds without requiring a further program installation.

We reserve the right to occasionally adjust our data protection declaration so that it always corresponds to the current legal requirements, or to implement changes in our services in the data protection declaration. This may affect the introduction of new services, for example. The new data protection declaration shall then apply for any further visits that you make to our online offer.

Every trade mark or logo shall be the property of the respective company. Trademarks and names are mentioned for purely informative purposes.

On our website we offer you the possibility to verify certain entries in address forms of our webshop in real time for input errors. This is intended to avoid problems with the delivery of the products you have ordered due to incorrect information. Furthermore, we want to ensure that your contact details are valid for sending information about your order or for any further inquiries that may be necessary.   For the providing these services, we use the service provider Endereco, Balthasar-Neumann-Straße 4b, 97236 Randersacker. The service provider processes the data exclusively according to our instructions. The legal basis for the transmission, processing and temporary storage of the data by the service provider is Art. 6 (1) lit. b DS-GVO. Some of the data entered by you in the input mask must be verified, as it is absolutely necessary for the fulfillment of the contract or for the implementation of pre-contractual measures. The following data is processed by the service provider: -        Address (Country, Locality, Postal code, Street and in some cases house number) -     E-Mail Address (please delete if not activated) -     Phone number (please delete if not activated) The data is processed separately at the service provider and not merged. The requests are deleted by the service provider as soon as the status of the entered data has been determined and stored in the webshop, however no later than after 30 days.

Version 28.10.2019