Data protection declaration

Data protection declaration for the website of Baumeister Herbert Maier Bau GmbH

Baumeister Herbert Maier Bau GmbH is pleased about your visit to our website and your interest in our company. The protection of personal data is important to us and is also required by law. When you use our services, this is done on the basis of our privacy policy (see description below). We give our users the opportunity to make settings regarding the data that we collect, use and share in accordance with this privacy policy and the cookie information. With the following information, we would like to give you an overview of the processing of your personal data by us and your rights under data protection law.

 

Name and contact details of the controller within the meaning of the General Data Protection Regulation:

Baumeister Herbert Maier Bau GmbH
Rudolph-Diesel-Straße 20
86825 Bad Wörishofen

Telephone: +49 (0) 8247 / 992 – 221
E-mail: info@baumeister-hm.de

Personal data

Personal data is individual information about personal or factual circumstances of a specific or identifiable natural person. This includes information such as your real name, your address, your e-mail address, company, address, telephone number and other information about you or your company. Personal information may also include data that is publicly available.

 

General information on data processing

In principle, we only collect and use personal data of our users to the extent necessary to provide a functional website as well as our content and services. The collection and use of personal data of our users takes place regularly only with the consent of the user. An exception applies in those cases in which it is not possible to obtain prior consent for factual reasons and the processing of the data is permitted by law.

 

Legal bases for the processing of your data:

If you have consented to the data processing, we will process your personal data on the basis of Art. 6 Para. 1 lit. a GDPR or Art. 9 Para. 2 lit. a GDPR, provided that special categories of data according to Art. 9 Para. 1 GDPR are processed. In the event of express consent to the transfer of personal data to third countries, the data processing is also based on Art. 49 Para. 1 lit. a GDPR. If you have consented to the storage of cookies or to access information in your terminal device (e.g. via device fingerprinting), the data processing is additionally based on § 25 Para. 1 TTDSG. The consent can be revoked at any time. If your data is required for the performance of a contract or for the implementation of pre-contractual measures, we process your data on the basis of Art. 6 Para. 1 lit. b GDPR. Furthermore, we process your data if this is necessary for the fulfillment of a legal obligation on the basis of Art. 6 Para. 1 lit. c GDPR. The data processing can also take place on the basis of our legitimate interest according to Art. 6 Para. 1 lit. f GDPR. Information on the legal bases applicable in each individual case is provided in the following paragraphs of this data protection declaration.

 

Collection and processing of personal data

When you visit our website, our web server temporarily stores the connection data of the requesting computer by default for the purpose of system security:

  • IP address of the terminal device from which the online offer is accessed;
  • The websites you visit on our site;
  • The date and duration of the visit;
  • The recognition data of the browser and operating system type used, as well as the website from which you visit us.
  • https status code (e.g. “request successful” or “requested file not found”).

Further personal information, such as your name, address, telephone number or e-mail address, will not be collected unless you provide this information voluntarily, e.g. as part of a registration.

 

Service provider

We commission service providers with tasks such as marketing services, programming and data hosting. We have carefully selected these service providers and monitor them regularly, in particular their careful handling and the protection of the data stored by you. All service providers are obliged by us to maintain confidentiality and to comply with the statutory provisions.

A transfer of personal data to third parties does not take place

We use the personal data provided by you exclusively for the purpose of fulfilling your wishes, i.e. usually for processing and answering your inquiry. We do not use this data for product-related surveys and marketing purposes. A transfer, sale or other transmission of your personal data to third parties does not take place.

A data transfer to a third country outside the European Union, which is also not a contracting state of the Agreement on the European Economic Area, only takes place if this data transfer is necessary for the fulfillment of a contract existing between you and us (for example, delivery to a third country).

Hosting

This website is hosted by an external service provider (host). The personal data collected on this website is stored on the host’s servers. This may include, in particular, IP addresses, contact requests, meta and communication data, contract data, contact details, names, website access and other data generated via a website.

The host is used for the purpose of fulfilling the contract with our potential and existing customers (Art. 6 Para. 1 lit. b GDPR) and in the interest of a secure, fast and efficient provision of our online offer by a professional provider (Art. 6 Para. 1 lit. f GDPR). If appropriate consent has been obtained, the processing is carried out exclusively on the basis of Art. 6 Para. 1 lit. a GDPR and § 25 Para. 1 TTDSG, insofar as the consent includes the storage of cookies or access to information in the user’s terminal device (e.g. device fingerprinting) within the meaning of the TTDSG. The consent can be revoked at any time.

Our host will only process your data to the extent necessary to fulfill its performance obligations and to follow our instructions with regard to this data.

We use the following host:

SICOR IT GmbH
Krumbacher Straße 20b
87719 Mindelheim

We have concluded a contract processing agreement (AVV) with the above-mentioned provider. This is a contract required by data protection law, which ensures that this processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.

Duration of storage; Retention periods

We store your data for as long as this is necessary for the provision of our online offer and the associated services, we have a legitimate interest in the further storage or until the purpose of the data processing ceases to apply. After that, we delete your personal data with the exception of such data that we have to continue to store for the fulfillment of legal obligations (e.g. we are obliged to keep documents such as contracts and invoices for a certain period due to tax and commercial law storage obligations).

 

Legal remedies

You have the right to request confirmation from the controller as to whether personal data relating to you is being processed; if this is the case, you have a right to information about this personal data and to the information listed in detail in Art. 15 GDPR (General Data Protection Regulation).

The data subject has the right to request from the controller without delay the correction of incorrect personal data concerning him or her and, if applicable, the completion of incomplete personal data (Art. 16 GDPR).

The data subject has the right to request from the controller that personal data concerning him or her be deleted without delay, provided that one of the reasons listed in detail in Art. 17 GDPR applies, e.g. if the data is no longer required for the purposes pursued (right to erasure).

The data subject has the right to request from the controller the restriction of processing if one of the conditions listed in Art. 18 GDPR is met, e.g. if the data subject has objected to the processing, for the duration of the review by the controller.

Without prejudice to any other administrative or judicial remedy, every data subject has the right to lodge a complaint with a supervisory authority if the data subject considers that the processing of personal data relating to him or her infringes the GDPR (Art. 77 GDPR). The data subject may exercise this right with a supervisory authority in the member state of his or her place of residence, place of work or place of the alleged infringement. A list of the competent supervisory authorities can be found under the following link:
BfDI – State authorities (bund.de)

You have the right to data portability. To have data that we process automatically on the basis of your consent or in fulfillment of a contract handed over to you or to a third party in a common, machine-readable format. If you request the direct transfer of the data to another controller, this will only take place if it is technically feasible.

 

Information about your right to object under Article 21 GDPR

Case-by-case right to object

You have the right to object, on grounds relating to your particular situation, at any time to the processing of personal data concerning you which is based on Article 6(1)(e) GDPR (data processing in the public interest) and Article 6(1)(f) GDPR (data processing on the basis of a balance of interests).

If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

 

Right to object to the processing of data for direct marketing purposes

In individual cases, we process your personal data to carry out direct advertising. You have the right to object at any time to the processing of personal data concerning you for the purpose of such advertising, insofar as it is related to such direct advertising.

If you object to the processing for direct marketing purposes, we will no longer process your personal data for these purposes.

Recipient of an objection

The objection can be made informally with the subject “Objection” stating your name and address and should be addressed to:

Baumeister Herbert Maier Bau Gmbh
Rudolf-Diesel-Straße 20
86825 Bad Wörishofen

E-mail: info@baumeiter-hm.de

 

Data security / encryption

We take all necessary technical and organizational security measures to protect your personal data from loss and misuse. Your data is stored in a secure operating environment that is not accessible to the public. If you wish to contact us by e-mail, we would like to point out that the confidentiality of the transmitted information cannot be completely guaranteed. The content of your e-mail can be viewed by third parties. We therefore recommend that you send us confidential information exclusively by post. The data will be deleted as soon as they are no longer necessary to achieve the purpose for which they were collected. If the user contacts us by e-mail, he can object to the storage of his personal data at any time. In such a case, the conversation cannot be continued. For security reasons and to protect the transmission of confidential content, this site uses SSL encryption. You can recognize an encrypted connection by the fact that the address line of the browser changes from “http://” to https:// and by the lock symbol in your browser line.

If SSL encryption is enabled, the data you transmit to us cannot be read by third parties.

 

External links

Our online offer may contain links to Internet pages of third parties. After clicking on these links, we no longer have any influence on the collection, processing and use of the personal data transmitted by clicking on the link. We do not assume any responsibility for the processing of such personal data by third parties. Among other things, you can protect yourself against further tracking by tracking pixels of these providers by deactivating the acceptance of third-party cookies in your browser settings.

 

Note on data transfer to the USA and other third countries

We use, among other things, tools from companies based in the USA or other third countries that are not safe in terms of data protection law. If these tools are active, your personal data may be transferred to these third countries and processed there. We would like to point out that in these countries a level of data protection comparable to that of the EU cannot be guaranteed. For example, US companies are obliged to hand over personal data to security authorities without you as the data subject being able to take legal action against this. It can therefore not be ruled out that US authorities (e.g. intelligence services) process, evaluate and permanently store your data located on US servers for monitoring purposes. We have no influence on these processing activities.

 

Use of cookies

In the context of the provision of our online offer, cookies and tracking mechanisms may be used. Cookies are small text files that are stored by the Internet browser on the computer system. If you call up this online offer again, your Internet browser sends the content of the cookies back to the respective provider and thus enables recognition of the terminal device. The reading of cookies enables us to optimally design our online offer for you and to make its use easier for you.

Technically necessary cookies

Our website uses essential cookies without which the technical provision of the online offer cannot be guaranteed. These include, for example, cookies that store data to ensure the trouble-free playback of video or audio content.

These cookies are deleted after the end of your visit.

Your consent is not required for the use of strictly necessary cookies. Cookies that are required to carry out the electronic communication process or to provide certain functions requested by you (e.g. shopping cart function) are stored on the basis of Art. 6 Para. 1 lit. f GDPR. The website operator has a legitimate interest in the storage of cookies for the technically error-free and optimized provision of its services. If consent to the storage of cookies and comparable recognition technologies has been requested, the processing is carried out exclusively on the basis of this consent (Art. 6 Para. 1 lit. a GDPR); the consent is revocable at any time. Insofar as other cookies (e.g. cookies for analyzing your surfing behavior) are stored, these are treated separately in this data protection declaration.

Technically unnecessary cookies and tracking mechanisms

The marketing cookies are used for the purpose of improving the quality of our website and its content. Through these analysis cookies, we learn how the website is used and can thus continuously optimize our offer. We only use these cookies and tracking mechanisms if you have given us your prior consent. An exception to this is the cookie that stores the current status of your privacy setting (selection cookie). This is set on the basis of Article 6 paragraph 1 lit. f GDPR.

Management of your settings regarding technically unnecessary cookies and tracking mechanisms

When you visit our websites, a cookie banner will ask you whether you consent to us using marketing cookies or tracking mechanisms. In the cookie information, we inform you about the purpose for which these cookies are used, who the providers are, and how long these cookies will remain active. In the privacy settings, you can revoke previously granted consents with effect for the future or grant your consent at a later time. Please note that when using these tools, your data may be transferred to recipients outside the GDPR, where an adequate level of data protection according to the GDPR does not exist. Details can be found in the description of the individual marketing tools.

Disable all cookies

You can deactivate cookies in your internet browser at any time. However, some areas of the website may then be restricted in their functionality. Through your internet browser, you can delete or reject all cookies, or accept only certain types of cookies. Please refer to the help functions of your internet browser for more information.

 

Cookie Consent with Borlabs Cookie

Our website uses the cookie consent technology from Borlabs Cookie to obtain your consent for storing certain cookies in your browser and to document this in compliance with data protection regulations. The provider of this technology is Borlabs – Benjamin A. Bornschein, Georg-Wilhelm-Str. 17, 21107 Hamburg (hereinafter referred to as Borlabs).

When you enter our website, a Borlabs cookie is stored in your browser, which saves the consents you have given or the revocation of these consents. This data is not passed on to the provider of Borlabs Cookie.

The collected data will be stored until you request its deletion, delete the Borlabs cookie yourself, or the purpose for data storage ceases to apply. Mandatory legal retention periods remain unaffected. Details on Borlabs Cookie’s data processing can be found at https://de.borlabs.io/kb/welche-daten-speichert-borlabs-cookie/

The Borlabs Cookie consent technology is used to obtain the legally required consents for the use of cookies. The legal basis for this is Art. 6 para. 1 sentence 1 lit. c GDPR.

We have concluded a data processing agreement (DPA) with the aforementioned provider. This is a contract required by data protection law, which ensures that this provider processes the personal data of our website visitors only according to our instructions and in compliance with the GDPR.

 

Inquiry by email, telephone, or fax

If you contact us by email, telephone, or fax, your inquiry, including all resulting personal data (name, inquiry), will be stored and processed by us for the purpose of handling your request. We will not share this data without your consent.
The processing of this data is based on Art. 6 para. 1 lit. b GDPR, provided that your inquiry is related to the fulfillment of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective processing of inquiries addressed to us (Art. 6 para. 1 lit. f GDPR) or on your consent (Art. 6 para. 1 lit. a GDPR) if this was requested; consent can be revoked at any time.
The data you send us via contact inquiries will remain with us until you request its deletion, revoke your consent for storage, or the purpose for data storage ceases to apply (e.g., after your request has been processed). Mandatory legal provisions – in particular statutory retention periods – remain unaffected.

 

Google Analytics

This website uses functions of the web analytics service Google Analytics. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics enables the website operator to analyze the behavior of website visitors. The website operator receives various usage data, such as page views, duration of stay, operating systems used, and user origin. This data may be summarized by Google in a profile assigned to the respective user or their device.

Google Analytics uses technologies that enable the recognition of the user for the purpose of analyzing user behavior (e.g., cookies or device fingerprinting). The information collected by Google about the use of this website is usually transferred to a Google server in the USA and stored there.

The use of this analysis tool is based on Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in analyzing user behavior to optimize both its web offering and its advertising. If corresponding consent has been requested (e.g., consent to store cookies), processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR; consent can be revoked at any time.

Data transfer to the USA is based on the EU Commission’s standard contractual clauses. Details can be found here: https://privacy.google.com/businesses/controllerterms/mccs/.

Browser Plugin
You can prevent Google from collecting and processing your data by downloading and installing the browser plugin available at the following link:
https://tools.google.com/dlpage/gaoptout?hl=de.

More information on how Google Analytics handles user data can be found in Google’s privacy policy: https://support.google.com/analytics/answer/6004245?hl=de.

We have concluded a data processing agreement (DPA) with the aforementioned provider. This is a contract required by data protection law, which ensures that this provider processes the personal data of our website visitors only according to our instructions and in compliance with the GDPR.

 

YouTube with extended data protection

This website embeds videos from the YouTube website. The operator of the pages is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland. We use YouTube in extended data protection mode. According to YouTube, this mode means that YouTube does not store any information about visitors to this website before they watch the video. However, the extended data protection mode does not necessarily exclude the transfer of data to YouTube partners. For example, YouTube establishes a connection to the Google DoubleClick network, regardless of whether you watch a video. As soon as you start a YouTube video on this website, a connection to YouTube’s servers is established. The YouTube server is informed which of our pages you have visited. If you are logged into your YouTube account, you enable YouTube to directly associate your surfing behavior with your personal profile. You can prevent this by logging out of your YouTube account. Furthermore, after starting a video, YouTube can store various cookies on your device or use comparable recognition technologies (e.g., device fingerprinting). In this way, YouTube can obtain information about visitors to this website. This information is used, among other things, to collect video statistics, improve user-friendliness, and prevent fraud attempts.

If a YouTube video is started, further data processing operations may be triggered over which we have no influence.

The use of YouTube is in the interest of an appealing presentation of our online offers. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR. If corresponding consent has been requested, processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR and Section 25 para. 1 TTDSG, insofar as the consent includes the storage of cookies or access to information in the user’s device (e.g., device fingerprinting) within the meaning of the TTDSG. Consent can be revoked at any time.

Further information on data protection at YouTube can be found in their privacy policy at: https://policies.google.com/privacy?hl=de.

We have concluded a data processing agreement (DPA) with the aforementioned provider. This is a contract required by data protection law, which ensures that this provider processes the personal data of our website visitors only according to our instructions and in compliance with the GDPR.

 

Further data protection notices from Baumeister Herbert Maier Bau GmbH

Data protection notices for applicants can be found in our applicant portal
Data protection declaration for the Glass Group’s whistleblower system
Data protection declaration for the processing of customer, supplier, and other business partner data
Data protection declaration for social media presences

 

Amendment to the Privacy Policy

We reserve the right to change our security and data protection measures as required by technical developments. In such cases, we will also adapt our data protection notices accordingly. Please therefore note the current version of our privacy policy.

 

As of 2022-09-30

Unsolicited application