PRIVACY POLICY
The protection and security of your personal data (pd) is our highest priority. Accordingly, BEGA North America complies with all legal requirements necessary to provide your data with the best possible protection. Below, we would like to inform you about the type, scope, and purpose of data processing:
BEGA North America, a wholly owned subsidiary of BEGA Gantenbrink-Leuchten KG (hereinafter “BEGA”), processes personal data within the meaning of Art. 4 No. 1 of the General Data Protection Regulation (GDPR) exclusively within the framework of the GDPR and—where applicable—data falling under Art. 95 GDPR in conjunction with Sections 11–15a of the German Telemedia Act (TMG) exclusively within the framework of those provisions.
This Privacy Policy provides information in accordance with Art. 13 GDPR.
1. Contact Details of the Controller (Art. 13 (1)(a) GDPR)
The party responsible for operating the website and thus for handling your personal data is: BEGA Gantenbrink-Leuchten KG P.O. Box 3160 58689 Menden
2. Contact Details of the Data Protection Officer (Art. 13 (1)(b) GDPR)
The Data Protection Officer responsible for BEGA is: Mr. M. Helling c/o BEGA Gantenbrink-Leuchten KG P.O. Box 3160 58689 Menden Email: [email protected]
3. General Information
a. BEGA offers a public section on its website. b. When using the public section of the website, the user’s IP address is stored in anonymized form. Because of this anonymization, it is generally not possible to link the data to a specific person, and tracking an anonymized user’s movements on the website does not allow any conclusions to be drawn about a specific user.
4. Types of Personal Data
The following data fall under Art. 4 No. 1 GDPR: a. Accessing the website/free downloads Each time the website is accessed or a file is downloaded in the publicly accessible area, the following log files are automatically collected:
Information about the browser type and version used
The user’s operating system
The address of the previously visited website
The anonymized IP address of the user
Each successful login to the user account
Date and time of access b.
Contact via email
If a user chooses to contact BEGA by email at
, the email address, including all technical data connected to the email, as well as the content of the message, will be stored. In particular, a personalized email address may constitute personal data within the meaning of Art. 4 No. 1 GDPR, as may the content of the message or parts of it.
5. Purposes of Processing Personal Data (Art. 13 (1)(c) GDPR)
a. Accessing the website/free downloads Processing of log files is carried out to ensure the functionality of the website. The data also helps optimize the website and ensure the security of IT systems. The data are not evaluated for marketing purposes. b. Contact Data provided by users when contacting BEGA are processed exclusively for handling the user’s inquiry.
6. Recipients/Third Parties/Transfer to Third Countries (Art. 13 (1)(e) and (f) GDPR)
Recipients of the data may include third parties who process data on behalf of BEGA or have access to data as part of their services to BEGA (e.g., IT service providers). Processing agreements in accordance with Art. 28 GDPR are in place with these providers. All data is stored on servers or computers within the European Union. Data is not transferred to third countries, and such transfer is not intended. Personal data are only transmitted to government authorities where required by law.
7. Cookies and Analytics Tools
(Section heading appears in the original but content is not included in the text provided.)
9. Legal Basis for Data Processing (Art. 13 (1)(c) GDPR)
a. Accessing the website/free downloads The legal basis for processing data in the public section using analytics tools and log files is Art. 6 (1)(f) GDPR. Our legitimate interest lies in providing a properly functioning and user-optimized website. For data processed in the closed section, the legal basis is Art. 6 (1)(b) GDPR. b. Contact via email The legal basis for processing data transmitted via email is Art. 6 (1)(f) GDPR if the sender is not yet a customer or otherwise in a business relationship with us. If a contractual relationship already exists or is directly initiated by the sender, the legal basis is Art. 6 (1)(b) GDPR.
10. Duration of Storage (Art. 13 (2)(a) GDPR)
Data is stored as long as necessary to achieve the purpose of their collection or until consent is withdrawn, subject to the limitations of Art. 17 (3) GDPR. Specifically:
Log files:
automatically deleted after 14 days.
Downloads:
upon completion of the download.
Emails:
deleted one year after the inquiry has been answered, unless further communication occurs before that time, or if the data are still required due to a contractual relationship (for contract execution) or must be retained under statutory retention obligations.
Cookies/analytics tools:
see above.
11. User Rights (Art. 13 (2)(b)–(e), Art. 7 (3) GDPR)
Users have the following rights, provided legal requirements are met:
Right of access
to personal data stored about them (Art. 15 GDPR)
Right to rectification
(Art. 16 GDPR)
Right to restriction of processing
(Art. 18 GDPR)
Right to erasure
(Art. 17 GDPR) If a user asserts the right to rectification, erasure, or restriction of processing, BEGA will inform all recipients to whom the personal data have been disclosed, unless this proves impossible or involves disproportionate effort. Users also have the right to withdraw consent previously granted (Art. 7, Art. 6 (1)(a) GDPR) at any time (Art. 7 (3) GDPR). The withdrawal does not affect the lawfulness of data processing carried out prior to the withdrawal. Furthermore, users have the right, for reasons relating to their particular situation, to object at any time to the processing of their personal data based on Art. 6 (1)(e) or (f) GDPR (Art. 21 GDPR). Additionally, users have the right to receive the personal data they have provided to BEGA in a structured, commonly used, and machine-readable format (right to data portability, Art. 20 GDPR). To exercise these rights, users may contact the parties listed under Sections 1 or 2 above. Finally, users also have the right to lodge a complaint with a supervisory authority if legal requirements are met (Art. 77 GDPR).