PRIVACY POLICY

The following privacy policy explains to you what personal data (as defined in Article 4, sentence 1 of the General Data Protection Regulation (GDPR)) of yours we process when you contact us, for example, when you use our offering or services.

Controller

The controller (as defined in Article 4, sentence 7 GDPR) of the collection, processing and use of your personal data for the purposes of the German Federal Data Protection Act (Bundesdatenschutzgesetz, BDSG) is:

Dethlefsen & Balk Import-Export GmbH
Hermann-Wüsthof-Ring 16
21035 Hamburg
Germany

Managing directors: Jens Meier, Marcus Clausen

Email: office@db-hh.de 

Definitions

Personal data refers to any information about the personal or material circumstances of an identified or identifiable person. This includes information and details such as your name, address or other postal address, phone number or also your email address.

Cookies are small files that your browser stores on your device in a record specially set aside for this purpose. Because cookies are merely simple files and not executable programs, they do not pose any risk to your computer. Cookies do not contain any personal data. These cookies can show, for example, if you have already visited a particular website. Most browsers accept cookies automatically, however, you can change your browser’s settings so that it does not store cookies or so that it asks for your explicit permission before storing a cookie. In addition, you can delete cookies that have already been set at any time. Please note that deactivating cookies may lead to limitations on the use of our website.

Purpose of data processing

The company only uses and stores personal data as part of the offered services for the following purposes and only if you explicitly agree to our terms and conditions and privacy policy: 

• when initiating business
• when ordering goods (data collected includes first name, surname, postal address, bank details, phone number and/or email address)
• when registering for online store access
• when contacting us
• when requesting a catalogue
• when listing partners
• when submitting job applications

Data is processed based on the provisions set out in Article 6, paragraph 1, point (a) (consent); point (b) (performance of a contract); point (c) (legal obligation); and point (f) (legitimate interests) GDPR.

The personal data is only used within our company and only shared with other companies if they are involved in the performance of the contracts entered into or in service delivery in some other way. Where necessary, we have entered into contracts for commissioned data processing with these companies so that you are provided with additional protection.

Data processing when using our website

Our website can also be used to a limited extent without entering personal data. Access data related to individual persons is stored where the website features an option to enter personal data (email addresses, names or addresses). Personal data is stored and processed exclusively on servers in Germany. Users provide this data solely on a voluntary basis. All data is encrypted using SSL technology. By entering your data, you give your consent to it being used and stored as part of the applications described below. 

Customer account

We process personal data if you voluntarily communicate it to us with your order, when contacting us (e.g. using our contact form or by email) or when opening a customer account. Each data entry form shows you what data is processed.
When registering for access to our online store, the data you enter is used to set up a customer account and processed for the purpose of using our offering. Users can see the data we store under ‘My Data’ in the online store after creating a customer account. This includes: name, email address, postal address and phone number. Users receive an email with their login data (username and password) after registering for access to the online store. Users can use their customer account to view placed orders and account data, for example, invoice and delivery addresses.

The following data must be processed in order to finalise orders and payment: first name, surname, postal address, email address and phone number. It is also possible for users to have their invoices sent to them by email if desired.

Data is processed based on the provisions of Article 6, paragraph 1, points (a), (b) and (f) GDPR. We only store your personal data for as long as it is necessary. When your personal data is no longer required or there are no longer legal grounds to keep it, it will be erased by no later than when tax and statutory retention periods expire (i.e. 10 years). If we cannot erase your personal data for technical reasons, it will be restricted from further processing. You have the option at any time to have your data restricted from processing at an earlier date.

Transfer to third parties

In order to have goods delivered by external contractors, Dethlefsen & Balk GmbH shares the details necessary for completing the order with these companies. The following data is transferred: company, postal address and products ordered, and, where necessary, also name of the contact person, email address and phone number. We never forward details concerning your payment method. All companies are contractually required to use the data only for finalising orders and not for any other purposes, including advertising. D&B does not carry out any direct marketing.

Partner listing

We do not publish any personal data on our list of partners if you have not explicitly asked us to. However, if you explicitly desire to be included in our list of partners and to have your entry contain personal data, we will publish your contact details on an indefinite basis under the ‘Our Partners’ heading on our website after reviewing those details.

The storage, publication and disclosure of the data is intended and forms the purpose for processing data. Data is processed based on the provisions of Article 6, paragraph 1, point (a) GDPR. Please be aware that we can modify or delete your entry on our list of partners at any time if you desire it.

Protection of job application data

We process personal data from applicants in order to conduct our recruitment procedure. This may include general information about you as a person (such as your name, address and contact details), details about your professional qualifications and education and training background or other details that you convey to us in connection with your application. The purpose for processing data is to fill the relevant vacancy. The legal grounds are provided in section 26, paragraph 1 BDSG (2018) in connection with paragraph 8, sentence 2 BDSG (2018) and Article 6, paragraph 1, point (a) GDPR.

If an applicant is given a contract of employment, his/her personal data is stored and processed further to administer the employment relationship. The legal regulations of section 26 BDSG; article 6, paragraph 1, point (c) and (f) and section 7, paragraph 7 of the German employment law(Arbeitsgesetz) are observed throughout this.

If an application is rejected, the associated documents will be retained for a maximum of six months. The legal grounds for this are our interest as per Article 6, paragraph 1, point (f) GDPR in being able to meet our burden of proof in case of a lawsuit based on the German General Act on Equal Treatment (Allgemeines Gleichbehandlungsgesetz, AGG).

We will obtain your prior written permission before keeping your application documents and your personal data associated with it in an applicant pool over the long term for the purpose of contacting you again in case of future vacancies. It is also possible for you to request that we keep your documents for a longer period of time. If you give your permission for us to use your data for an extended period of time, we will keep your application documents for a maximum of two years.

If the collection or processing of your personal data is based on your consent, you can withdraw this consent at any time with effect for the future. The processing of your data prior to the time you withdraw consent will remain lawful even if you do withdraw consent.

Email newsletter

Our regularly published newsletter informs you of our offers, current news and services.

We contract Newsletter2Go, Nürnberger Strasse 8, 10787 Berlin, Germany for the delivery of our newsletter.

The email address saved when registering or entering into the contract is transmitted to Newsletter2Go and processed. The legal grounds for processing the data are provided in Article 6, paragraph 1, points (a), (b) and (f) GDPR. The legal grounds for sending the newsletter following the sale of goods or services are provided in section 7, paragraph 3 of the German Act Against Unfair Competition (Gesetz gegen den unlauteren Wettbewerb, UWG). Newsletter2Go is prohibited from selling your data or using it for purposes other than sending the newsletters. Newsletter2Go is a certified German service provider selected based on the requirements of the General Data Protection Regulation and the German Federal Data Protection Act.
You can find more information here: https://www.newsletter2go.de/informationen-newsletter-empfaenger/

You can, at any time, withdraw consent to having your email address stored and used to send the newsletter. This will simultaneously void the consent you have given to receiving newsletters via Newsletter2Go and to statistical web analytics. You will find a link to unsubscribe from the newsletter at the bottom of each newsletter or you can send an email to unsubscribe@db-hh.de.

Receipt of information about similar products

If we receive your email address in connection with the sale of goods or services and you do not object, we reserve the option to send you offers via email pertaining to products similar to those you have already purchased from our range. You can, at any time, object to this use of your email address by sending a message using the given contact addresses (or also office@db-hh.de).

Cookies

Cookies are small text files. They are stored on the user's computer and transmitted to our site by the user. As a user, you have full control over the use of cookies. We require your consent in advance for the use of cookies that are not necessary. In addition, you have the option of rejecting cookies via your browser settings, deleting cookies from your computer, blocking cookies or being prompted to do so before a cookie is set. If cookies are completely deactivated for our website, all functions of the website can no longer be used to their full extent.

Types of Cookies used on this website:

Required Cookies

These cookies are necessary for carrying out the specific functions of a website. Some functions of our website cannot be offered without the use of cookies. Such cookies are used, for example, for the shopping cart function. For this it is necessary that the browser is recognized also after a page change. The shopping basket is not deleted even after closing a browser window.
The user data collected by technically necessary cookies are not used to create user profiles.
Your consent is not required for absolutely necessary cookies, as these are indispensable if you wish to use our services.

Useful Cookies

1. Functional cookies

Although these cookies are not absolutely necessary, they improve user friendliness. For example, user submitted form data, language settings, font size, font type or the like are saved. When the website is called up again, this information is already available (e.g. you remain logged in).

2. Statistics cookies

Statistics Cookies record information anonymously. This information helps us understand how our visitors use our website. For the evaluation we use Google Analytics. Further information about Google Analytics can be found here >

The legal basis for the processing of personal data using cookies is our legitimate interest, Art. 6 para. 1f GDPR.

Web analytics

Data that we collect through your visits to our website, for example, pages you are interested in, is only processed by us in pseudonymised form. We work with the Google Analytics service from Google Inc. You can object to the pseudonymous processing of your data.

You can use the deactivation add-on to prevent Google Analytics from being run on any website (only applies to desktop applications): 

    1. Link to deactivation add-on

You can also block Google Analytics from collecting data by clicking on the following link. An opt-out cookie will then be saved, preventing your data from being recorded when you visit this website in the future:

    2. Deactivate Google Analytics

The Bundesverband Digitale Wirtschaft (BVDW) e.V. offers a further option at the following address:

http://www.meine-cookies.org/cookies_verwalten/praeferenzmanager.html

Use of Google services

Information about Google Analytics

We use Google Analytics, a web analytics service provided by Google Inc. (‘Google’). Google Analytics uses cookies, that is, small text files that are saved on users’ computers to enable analysis of their use of this website. The information generated by cookies about the usage of this website is usually transmitted to a Google server in the United States and stored there.

However, if IP anonymisation is activated on this website, Google truncates users’ IP addresses within Member States of the European Union or European Economic Area before it is transmitted. Only in exceptional cases is the full IP address transmitted to a Google server in the United States and truncated there. IP anonymisation has been activated for this website. Google uses this information on behalf of the website operator to evaluate usage of the website, compile website activity reports and perform other services associated with website activity and Internet usage for the website operator.

The IP address transmitted from your browser in the context of Google Analytics will not be combined with other Google data. Users can prevent cookies from being stored using the relevant setting in their browser software, however, users should be aware that they may not be able to completely use all of this website’s functions in that case. Users can also prevent the logging of data generated through the cookie and their use of the website (including their IP address) by Google and the processing of this data through Google by downloading and installing the browser plug-in available via the following link:

http://tools.google.com/dlpage/gaoptout?hl=en

You can find out more about Google’s use of data for advertising purposes and your options for changing settings and objecting on Google’s website:

https://www.google.com/intl/en/policies/privacy/partners/ (‘How Google uses data from sites or apps that use our services’),

http://www.google.com/policies/technologies/ads (‘How Google uses cookies in advertising’),

http://www.google.com/settings/ads (‘Manage information that Google uses to show you ads’) and

http://www.google.com/ads/preferences/ (‘Ad personalisation’).

Integration of Google Maps (including Google Fonts)

This website uses the map service Google Maps from Google Ireland Limited.

By integrating Google Maps, a direct connection is established between Google's servers and your browser. This allows the Google Maps map to be displayed. By integrating and using the Google Maps map, the IP address as well as information on the use of the maps by your browser is transmitted to Google for independent data processing. In addition, Google processes the search criteria entered by you on the Google Maps map (e.g. city, postcode) as well as position data, provided that you have given your express consent via the Google Maps application.
Furthermore, the Google Maps map also integrates so-called Google Fonts. These are typefaces from Google. To display the Google Fonts on the Google Maps map, a connection is also established from your browser to the Google server and your IP address is transmitted by your browser to Google for independent data processing. Further information on data processing and possible transmission of personal data to third countries, in this case the USA, by Google can be found in Google's privacy policy. The additional terms of use of Google Maps/Google Earth also apply. Please note that you can revoke your consent to the integration of external content at any time in the future.

Right of access, rectification, erasure, restriction of processing, objection and data portability

Right of access (Article 15 GDPR)

If requested, we will, at any time, give you information free of charge about whether we process your personal data and, if so, what personal data of yours we process. A right of access does not apply if providing such information would disclose other information that, due to legislation or by nature, ought to be kept confidential, particularly due to the overriding legitimate interest of a third party.

Right to rectification (Article 16 GDPR)

You have the right to obtain rectification of incorrect personal data concerning you at any time from the controller.

Right to erasure (Article 17 GDPR)

You have the right to obtain from us the immediate erasure of your personal data or its blocking from further processing if erasure is not possible for technical reasons, provided one of the grounds specified in Article 17, paragraph 1, points (a) to (f) GDPR apply. If the data is required for the performance of the contract or to implement measures prior to the contract, early erasure of the data is only possible if contractual or legal obligations do not oppose erasure.

Right to restriction of processing (Article 18 GDPR)

You have the right to obtain from us the restriction of the processing of your personal data if one of the grounds specified in Article 18, paragraph 1, points (a) to (d) GDPR apply.

Right to object (Article 21 GDPR)

You have the right at any time to withdraw your consent to the processing of your personal data with effect for the future.

If you have given consent to your personal data being processed and withdraw that consent, the processing until the time of withdrawal of consent will not be affected by that withdrawal.


You can address your requests for information, rectification, erasure and restriction from processing, and withdrawal of consent and objection to further use of your personal data on the basis of any consent granted to us, to:

By post:

Dethlefsen & Balk Import-Export GmbH
Hermann-Wüsthof-Ring 16
21035 Hamburg
Germany

By phone:

+49 (0)40 7317 030

By email: 
 
office@db-hh.de

Right to data portability (Article 20 GDPR)

You have the right to obtain personal data concerning you, which you have supplied to our company, in a structured, commonly used and machine-readable format. You also have the right to transmit that data to another controller without hindrance from us where the processing is based on consent pursuant to Article 6, paragraph 1, point (a) GDPR; Article 9, paragraph 2, point (a) GDPR; or on a contract pursuant to Article 6, paragraph 1, point (b) GDPR, and the processing is carried out by automated means.

Dethlefsen & Balk GmbH Data Protection Officer

Dethlefsen & Balk GmbH has appointed a data protection officer:

Birgitt Conseil

You can contact Ms Conseil at:    b.conseil@db-hh.de

Subject to changes

We reserve the right to make changes to this privacy policy at any time while complying with legal specifications.

Updated May 2018