Stand: 10/2022
We process users' personal data (hereinafter referred to as "data") only insofar as this is necessary to provide a functional and convenient website and our content and services.
"Processing" refers to the collection, use, disclosure and/or storage of data. According to the General Data Protection Regulation (hereinafter referred to as "GDPR"), "personal data" generally refers to all data that can be used to identify a natural person. The precise definitions of the terms are set out in Art. 4 GDPR.
The following statements inform you in particular about the type, scope, purpose, duration and legal basis of the processing of personal data, the purposes and means of processing of which we decide alone or together with others, as well as about the third-party components we may use to optimise and improve the quality of use, which process data under their own responsibility:
_________________________________________
A) Information on the controller
B) Rights of the user
C) Information on data processing
_________________________________________
A) Information on the controller
The controller (hereinafter "provider") within the meaning of the GDPR and other national data protection laws of the member states as well as other data protection regulations is
batterium GmbH
Robert-Bosch-Straße 1
71691 Freiberg am Neckar
Phone: 07141 5609040
Fax: 07141 5609049
E-mail: datenschutz@batterium.de
The data protection officer of the controller is Mr Matthias Müller, contact by e-mail to datenschutz@batterium.de
B) Rights of the user
The user has the right with regard to the processing of their personal data as described below by the provider to
1. to obtain confirmation as to whether or not personal data concerning him or her are being processed, and to obtain precise information about these data and further information and copies of the data in accordance with Art. 15 GDPR
2. to demand the immediate correction of incorrect data concerning him/her or the completion of this data in accordance with Art. 16 GDPR
3. to demand that the data concerning him/her be deleted immediately in accordance with Art. 17 GDPR, alternatively, if, for example, further processing is necessary in accordance with Art. 17 para. 3 GDPR, to demand a restriction on the processing of the data in accordance with Art. 18 GDPR;
4. to receive the data concerning him/her and provided by him/her in accordance with Art. 20 GDPR and to request its transmission to other controllers
5. to lodge a complaint with the supervisory authority pursuant to Art. 77 GDPR if the user is of the opinion that the processing of his data by the provider violates the GDPR.
_________________________
6. the user may, in principle, object at any time to the future processing of data concerning him/her by a controller on the basis of Art. 6 para. 1 lit. f GDPR in accordance with Art. 21 GDPR. The objection may be made in particular against processing for direct marketing purposes.
_________________________
7. the provider is also obliged to inform all recipients of the data to whom the data has been disclosed of any rectification or erasure of personal data or restriction of processing carried out on the basis of Article 16 GDPR, Article 17(1) GDPR and Article 18 GDPR. The obligation does not apply in the event that this notification proves to be impossible or involves a disproportionate effort. The customer has the right to information about these recipients.
C) Information on data processing
Insofar as no detailed information is provided below on the individual data processing operations, the user's data processed by the provider will be deleted or blocked as soon as the purpose of the storage no longer applies and the deletion does not conflict with any statutory retention obligations.
Server data
For communication and security reasons, the following data, which the user's Internet browser transmits to the provider or its web space provider, is collected during the visit to the website (so-called server log files):
-
Browser type and version;
-
Operating system used;
-
Website from which the user has switched to the provider's website (referrer URL);
-
Website visited by the user;
-
Date and time of access;
-
Internet Protocol (IP) address of the user.
The data is also stored temporarily. This data is not stored together with other personal data of the user. The legal basis for the temporary storage is Art. 6 para. 1 lit. f GDPR based on the legitimate interest in improving the stability, functionality and security of the website.
The data is deleted after seven days at the latest. Data whose further storage is required for evidence purposes is excluded from deletion until the respective incident has been finally clarified.
Cookies
a) "Session" cookies / "Persistent" cookies
The provider uses so-called cookies on its website. Cookies are small text files or other storage technologies that the Internet browser used by the user stores and saves on the end device. These cookies process certain information of the user to an individual extent, such as browser and location data and IP address values.
The processing allows the provider to make its website more user-friendly, effective and secure. For example, the processing of "session" cookies may enable content to be displayed in different languages or the use of a shopping basket function.
Persistent cookies allow the website to recognise the user via their browser when they visit the website regularly.
If these cookies are used to process personal data for the purpose of initiating or executing a contract, the legal basis for the processing is Art. 6 para. 1 lit. b GDPR.
If the processing is not for the purpose of initiating or executing a contract, the processing serves the legitimate interest of the provider in improving the functionality of the website and is based on the legal basis of Art. 6 para. 1 lit. f GDPR.
The "session" cookies are deleted when the user closes their browser. The "persistent" cookies are automatically deleted after a period specified by the provider. This period varies depending on the cookie, but does not exceed one year.
b) Cookies from third-party providers
Third-party cookies may also be used on the provider's website. These third-party providers are partner companies with which the provider cooperates for the purpose of advertising, analysing or the functionalities of the website. If this is the case, the purposes and legal bases of the corresponding processing are set out below.
c) Removal option
The user can prevent or restrict the installation of cookies by changing the browser settings accordingly. Cookies that have already been saved can also be deleted at any time. The settings for this depend on the respective browser. In the case of Flash cookies, processing cannot be prevented via the browser settings, but by the corresponding setting of the Flash player. If the user prevents or restricts the installation of cookies, this may mean that not all functions of the website can be used to their full extent.
Making contact
If the user contacts the provider via contact form or e-mail, the personal data entered by the user on this occasion will be used to process the enquiry. The data is required to respond to the enquiry; without the provision of the data, a response is not possible or only possible to a limited extent.
If the contact request serves the fulfilment of a contract or the initiation of a contract, the legal basis is Art. 6 para. 1 lit. b GDPR.
The user's data will be deleted if the user's enquiry has been conclusively answered and there are no statutory retention obligations to the contrary, e.g. in the case of subsequent contract processing.
The legal basis may also be the user's consent in accordance with Art. 6 para. 1 lit. a GDPR. As part of the contact form, the user's consent to the above processing may be obtained and reference made to this privacy policy.
The user can revoke any consent given for contacting us at any time by notifying the provider in accordance with Art. 7 para. 3 GDPR. The data processed in this context will be deleted as soon as its processing is no longer necessary.
loyalty programme "Happy Grapes" or notepad function) are collected and stored. During registration, the IP address and the date and time of registration are also stored. These data are not passed on to third parties.
The legal basis is Art. 6 para. 1 lit. a GDPR if the user has given consent. As part of the registration process, the user's consent to the above processing is obtained and reference is made to this privacy policy. The data collected in this way will be used exclusively for the aforementioned purpose. It will not be passed on to third parties.
If the opening of the customer account serves the fulfilment of a contract or the implementation of pre-contractual measures, the additional legal basis is Art. 6 para. 1 lit. b GDPR.
The user can revoke consent given for the customer account at any time by notifying the provider in accordance with Art. 7 para. 3 GDPR. The data processed in this context will be deleted as soon as its processing is no longer necessary. If the data is required for the fulfilment of a contract or for the implementation of pre-contractual measures, the user's data will be deleted upon expiry of the retention periods under tax and commercial law.
Contributions
Users have the opportunity to publish their questions, answers or opinions on the website via the website's evaluation and comment function (contributions). The contribution, the time of submission of the contribution and the "pseudonym" specified by the user are processed and published by the provider.
The legal basis is Art. 6 para. 1 lit. a. GDPR. The user can revoke their consent to this for the future at any time by notifying the provider in accordance with Art. 7 para. 3 GDPR.
The provider also processes the user's IP address and email address. The IP address is processed on the basis of the provider's legitimate interest in the event that the user's contribution infringes the rights of third parties and/or illegal content is posted.
The legal basis for this is Art. 6 para. 1 lit. f GDPR. The legitimate interest of the provider consists of any necessary legal defence.
Google Analytics
This website uses Google Analytics, a web analytics service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA, hereinafter referred to as "Google".
Google is certified according to the "EU-US Privacy Shield" and thus guarantees compliance with EU data protection regulations when processing data in the USA.
https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active
Google Analytics is used by the provider to analyse the use of the website. The legal basis for this is Art. 6 para. 1 lit. f GDPR. The provider has a legitimate interest in the analysis, optimisation and economic operation of the website.
Information such as the time, place and frequency of the user's visits to the website, including their IP address, is transmitted to a Google server in the USA and stored there.
The provider uses Google Analytics with an anonymisation function. In this case, this addition means that the IP address is already truncated by Google within member states of the European Union or in other signatory states to the Agreement on the European Economic Area.
Google will use the data collected in this way to analyse the user's visit to the website and to compile reports on website activity for the provider. The data is also used to provide other services associated with the use of the website and the internet. Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google's behalf.
Google states that it will not associate the user's IP address with any other data held by Google. Google provides further information, in particular on the options for preventing the use of data, at the following link:
https://www.google.com/intl/de/policies/privacy/partners
Google also offers a deactivation add-on for the most common browsers, which gives the user more control over what data Google collects about the website accessed by the user. The add-on informs the JavaScript (ga.js) of Google Analytics that no information about the website visit should be transmitted to Google Analytics. However, the deactivation add-on for browsers from Google Analytics does not prevent information from being transmitted to the provider or to other web analysis services that may be used by the provider and listed in this privacy policy. Further information on installing the browser add-on can be found at the following link:
Browser add-on to deactivate Google Analytics
Alternatively, the future analysis of page visits by Google Analytics can be deactivated by clicking on the following link. By clicking on the link, a so-called "opt-out cookie" is set, which means that the analysis of the page visit on the provider's website will be prevented in the future:
Activate "opt-out cookie" for Google Analytics
Please note: If the user deletes the cookies in their browser settings, the opt-out cookie is usually also deleted and may have to be reactivated by the user.
Google AdWords with conversion tracking
The provider also uses the Google advertising component "Google AdWords" and in this context the so-called conversion tracking. Google Conversion Tracking is a service of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA, hereinafter referred to as "Google".
Google is certified according to the "EU-US Privacy Shield" and thus guarantees compliance with EU data protection regulations when processing data in the USA.
https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active
The provider uses conversion tracking to advertise its services in a targeted manner. The legal basis for this is Art. 6 para. 1 lit. f GDPR. The provider's legitimate interest lies in the analysis, optimisation and economic operation of the website.
If the user clicks on an advert placed by Google, a cookie is stored on the user's end device due to the integration of conversion tracking. These so-called "conversion cookies" lose their validity after 30 days and are not used to personally identify the user.
If the user visits certain pages of the provider's website and the cookie has not yet expired, both Google and the provider can recognise that the user has clicked on one of the ads placed by the provider on Google and has been redirected to the provider's website.
The information collected with the help of "conversion cookies" is used by Google to compile visit statistics for the provider. The provider thus receives information about the total number of users who have clicked on its advert and also which pages of its website were subsequently accessed by the respective user. However, the provider or other parties advertising via "Google AdWords" do not receive any information with which users can be personally identified.
The user can prevent or restrict the installation of cookies by changing the browser settings accordingly. Cookies that have already been saved can also be deleted at any time. The settings for this depend on the respective browser.
Google offers further information, in particular on the options for preventing the use of data, under the following links:
https://services.google.com/sitestats/de.html
http://www.google.com/policies/technologies/ads/
http://www.google.de/policies/privacy
Remarketing or "similar target groups" component from Google
The provider also uses the remarketing or "similar target groups" function of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA, hereinafter referred to as "Google".
Google is certified in accordance with the "EU-US Privacy Shield" and thus guarantees compliance with EU data protection regulations when processing data in the USA.
https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active
This component enables the provider to place personalised and interest-based advertising on third-party websites that participate in the Google advertising network.
The legal basis for this is Art. 6 para. 1 lit. f GDPR. The provider's legitimate interest lies in the analysis, optimisation and economic operation of the website.
In order to enable this targeted advertising, Google stores a cookie with a sequence of numbers via the user's browser when the provider's website is visited. This cookie is used to record visits to the website and anonymised data on the use of the website. No personal data is passed on in this process.
If the user subsequently visits another website in the Google advertising network, they may be shown adverts that may take into account the product and information areas previously accessed on the provider's website.
The user can permanently deactivate this function via Google for the browser they are using by following the link below and installing the plugin provided there:
https://www.google.com/settings/ads/plugin
Alternatively, the use of cookies by certain third-party providers can generally be deactivated by opting out. This can be done, for example, via:
http://www.networkadvertising.org/choices/
or
http://www.youronlinechoices.com/uk/your-ad-choices
In addition, Google may be able to track user behaviour across multiple devices through cross-device marketing and is therefore able to display personalised advertising across devices. However, the prerequisite for this is that the user has agreed to the linking of the browser history with their existing Google account.
Google offers further information on Google Remarketing under the following link:
http://www.google.com/privacy/ads/
Google reCAPTCHA
To ensure interactions on the website by persons and not by automated processing (e.g. by "bots"), the provider uses the "reCAPTCHA" component of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA, hereinafter referred to as "Google".
Google is certified according to the "EU-US Privacy Shield" and thus guarantees compliance with EU data protection regulations when processing data in the USA.
https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active
This function enables Google to recognise from which website a request is sent and with which IP address the "reCAPTCHA" input box is used. In addition to the IP address, Google may collect further information that is necessary for the functioning of the service.
The legal basis for this is Art. 6 para. 1 lit. f GDPR. The legitimate interest of the provider is to ensure the website can be accessed and to prevent spam.
Google provides further information on the general handling of user data at the following link: https://policies.google.com/privacy
Google Fonts
For the standardised presentation of content on our website, data (IP address, time of visit, device and browser information) is collected by the "Google Fonts" script code, transmitted to Google and then processed by Google. We have no influence on this subsequent data processing.
YouTube video plugin
To integrate third-party content, data (IP address, time of visit, device and browser information) is collected via the YouTube video plugin in the extended data protection mode used by us, transmitted to Google and then processed by Google only when you play a video.
Microsoft - Bing Ads
This website uses Bing Ads using Universal Event Tracking (UEN) to realise remarketing and completion tracking from Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA, hereinafter "Microsoft".
Microsoft is certified in accordance with the "EU-US Privacy Shield" and thereby guarantees compliance with EU data protection regulations when processing data in the USA.
https://www.privacyshield.gov/participant?id=a2zt0000000KzNaAAK&status=Active
The legal basis for this is Art. 6 para. 1 lit. f GDPR. The provider's legitimate interest lies in the analysis, optimisation and economic operation of the website.
If the user clicks on an advert placed by the provider on the Bing search engine, a cookie is stored on the user's end device due to the integration of Microsoft's tracking technology. These so-called "tracking cookies" lose their validity after 180 days and are not used to personally identify the user.
If the user visits certain pages of the provider's website and the cookie has not yet expired, both Microsoft and the provider can recognise that the user has clicked on one of the ads placed by the provider on Bing and has been redirected to the provider's website.
The information collected with the help of the "tracking cookie" is used by Microsoft to compile visit statistics for the provider. The provider thus receives information about the total number of users who have clicked on its advert and also which pages of its website were subsequently accessed by the respective user. However, the provider or other advertisers via "Bing ADs" do not receive any information that can be used to personally identify users.
In addition, Microsoft may be able to track user behaviour across multiple devices through cross-device tracking and is therefore able to display personalised advertising across devices.
If the user does not agree to this processing, it is possible to prevent the installation of cookies by setting the browser accordingly. More details on this can be found above under "Cookies".
The user can also change the personalised advertising in their Microsoft account, if available, at http://choice.microsoft.com/de-de/opt-out.
More information on Bing Ads: (https://help.bingads.microsoft.com/#apex/3/de/53056/2). Microsoft's privacy policy: (https://privacy.microsoft.com/de-de/privacystatement)
Web analysis and adverts via Criteo
The Criteo component is used on the website to analyse and display individual advertisements. Criteo is a product of Criteo SA, 32 Rue Blanche, 75009 Paris, hereinafter referred to as "Criteo".
The legal basis for this is Art. 6 para. 1 lit. f GDPR. The provider's legitimate interest lies in the analysis, optimisation and economic operation of the website.
Criteo uses tracking cookies and similar storage technologies, which are stored in the user's browser, to collect the following information about visitors to the websites connected to the Criteo network:
-
Information relating to the visitor's activity on the website of the respective advertising partner, in particular the number of subpages viewed, the products viewed on the website and the searches carried out on the website.
-
Information about your end device (device type, operating system, version)
-
Information about the visitor's location in order to only deliver adverts for products or services available regionally.
-
Information relating to the display of adverts by Criteo, for example the number of adverts shown to the visitor.
This information enables Criteo to determine the interests of the individual visitor. For this purpose, the visitor receives a technical ID from Criteo under which the products viewed or the search behaviour on the websites of the Criteo network is recorded.
According to Criteo, it is not possible to identify the user.
Criteo then uses the analysed information to place individual advertisements of the advertising customers on the provider's website or third-party websites. These third parties, so-called publishers, can use cookies, which are also stored in the visitor's browser, to determine whether an advert from the Criteo network should be placed based on the visitor's technical Criteo ID.
Criteo processes the user's full IP address exclusively for the following purposes:
-
To investigate and detect fraud, for example to detect visits that cannot be caused by human behaviour (e.g. very many clicks in a very short time);
-
Attribution of sales;
-
Marketing reports with aggregated data.
Users can find out more about Criteo's functions and analyses by clicking on the following link. At the same time, this link can be used to stop or prevent the analyses and advertisements being displayed by means of an "OPT-OUT" cookie:
https://www.criteo.com/de/privacy/
Please note: If the user deletes the cookies in their browser settings, the opt-out cookie is usually also deleted and may have to be reactivated by the user.
The user can generally prevent or restrict the installation of cookies by changing the browser settings accordingly. Cookies that have already been saved can also be deleted at any time. The settings for this depend on the respective browser.
YouTube
The provider uses a tool from YouTube LLC, 901 Cherry Ave, 94066 San Bruno, CA, USA, hereinafter referred to as "YouTube", on the website to display video sequences. YouTube is a company of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA.
As a subsidiary of Google, YouTube is certified under the "EU-US Privacy Shield" and thus guarantees compliance with EU data protection regulations when processing data in the USA.
https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active
The legal basis for this is Art. 6 para. 1 lit. f GDPR. The provider has a legitimate interest in improving the quality of use of the website. The provider uses YouTube with the "extended data protection mode" option offered by YouTube.
According to YouTube, in "extended data protection mode", the data shown below is only transmitted to the YouTube server when a video is started.
If the user visits a page that has an embedded video, a connection to the YouTube servers in the USA is established and the content is displayed on the website by notifying the user's browser. For this purpose, YouTube processes at least the IP address, the date, the time and the page visited by the user. This also leads to a connection being established with the Google Double-Click advertising network. If the user is logged in to YouTube at the same time, the connection information is assigned to the user's YouTube member account.
If the user wants to prevent YouTube from assigning the collected information directly to their user account, the user must log out of YouTube before visiting the website. It is also possible to configure the user account accordingly. YouTube also uses persistent cookies for functionality and analysis purposes.
If the user does not agree to this processing, it is possible to prevent the installation of cookies by setting the browser accordingly. More information on this can be found above under "Cookies".
Further information on the collection and use of data by Google as well as the rights and options for protecting the user's privacy in this regard can be found in Google's privacy policy:
https://policies.google.com/privacy