Privacy Policy
Information on Data Protection
With the following information, we would like to provide you with an overview of how we process your personal data and inform you about your rights under data protection law. The specific data processed and the manner in which they are used depend primarily on the services requested or agreed upon.
1. Who is responsible for data processing and who can I contact?
The responsible entity is:
Brander Landtechnik Vertriebsgesellschaft mbH
An der Zugspitze 1/2
09618 Brand-Erbisdorf
You can contact our Data Protection Officer at:
Brander Landtechnik Vertriebsgesellschaft mbH
Data Protection Officer, Ms. Annette Schäfer
An der Zugspitze 1/2
09618 Brand-Erbisdorf
Telephone: +49 (0)37322 862-0
Fax: +49 (0)37322 862-20
2. Which sources and data do we use?
We process personal data that we receive from our customers in the course of our business relationship. In addition, insofar as it is necessary for the provision of our services, we process personal data that we lawfully obtain from publicly accessible sources (e.g. debtor registers, land registers, commercial and association registers, press, internet) or that are legitimately transmitted to us by other third parties (e.g. a credit agency).
Relevant personal data include personal details (name, address and other contact details, date and place of birth, and nationality). In addition, this may also include order data (e.g. orders), data arising from the fulfillment of our contractual obligations (e.g. delivery notes), information about your financial situation (e.g. creditworthiness data, scoring/rating data), marketing and sales data, documentation data (e.g. inspection reports), as well as other data comparable to the categories mentioned above.
3. For what purposes do we process your data (purpose of processing) and on what legal basis?
We process personal data in accordance with the provisions of the General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG):
a. For the performance of contractual obligations (Art. 6(1)(b) GDPR)
Data processing is carried out for the delivery of goods, the performance of work contracts, and the provision of services in the context of fulfilling our contracts with customers or for the implementation of pre-contractual measures carried out at the customer's request. The purposes of data processing are determined primarily by the specific contractual requirements. Further details regarding the purposes of data processing can be found in the relevant contractual documents and terms and conditions.
b. Within the scope of balancing interests (Art. 6(1)(f) GDPR)
Where necessary, we process your data beyond the actual performance of the contract in order to safeguard our legitimate interests or those of third parties.
c. On the basis of your consent (Art. 6(1)(a) GDPR)
If you have given us your consent to process personal data for specific purposes (e.g. disclosure of data to a tax advisor, analysis of payment transaction data for marketing purposes), the lawfulness of this processing is based on your consent. Consent given may be revoked at any time. This also applies to the revocation of declarations of consent granted to us before the GDPR came into force, i.e. before 25 May 2018. The revocation of consent does not affect the lawfulness of the data processed prior to the revocation.
4. Who receives my data?
Within our company, those departments have access to your data that require it to fulfill our contractual and legal obligations. Service providers and agents engaged by us may also receive data for these purposes. These include companies in the categories of IT services, logistics, printing services, telecommunications, debt collection, consulting and advisory services, as well as sales and marketing.
Further data recipients may be those entities to whom you have given your consent for the transfer of data.
5. Is data transferred to a third country or to an international organization?
Data is not transferred to entities in countries outside the European Union (so-called third countries).
6. How long is my data stored?
We process and store your personal data for as long as this is necessary to fulfill our contractual and legal obligations. Please note that our business relationship is a continuing obligation that is designed to last for several years.
If the data is no longer required for the fulfillment of contractual or legal obligations, it will be regularly deleted, unless its temporary further processing is necessary for the following purposes:
- Fulfillment of commercial and tax law retention obligations:
These include, in particular, the German Commercial Code (HGB), the Fiscal Code (AO), the German Banking Act (KWG), the Anti-Money Laundering Act (GwG), and the Securities Trading Act (WpHG). The retention and documentation periods specified therein range from two to ten years. - Preservation of evidence within the scope of statutory limitation periods.
Pursuant to Sections 195 et seq. of the German Civil Code (BGB), these limitation periods may be up to 30 years, with the regular limitation period being three years.
7. What data protection rights do I have?
Every data subject has the right of access pursuant to Article 15 GDPR, the right to rectification pursuant to Article 16 GDPR, the right to erasure pursuant to Article 17 GDPR, the right to restriction of processing pursuant to Article 18 GDPR, the right to object pursuant to Article 21 GDPR, as well as the right to data portability pursuant to Article 20 GDPR.
Restrictions apply to the right of access and the right to erasure in accordance with Sections 34 and 35 of the German Federal Data Protection Act (BDSG). In addition, you have the right to lodge a complaint with a competent data protection supervisory authority (Article 77 GDPR in conjunction with Section 19 BDSG).
You may revoke any consent you have given for the processing of personal data at any time. This also applies to the revocation of declarations of consent granted to us before the General Data Protection Regulation came into force, i.e. before 25 May 2018. Please note that the revocation only takes effect for the future. Processing carried out before the revocation remains unaffected.
8. Am I required to provide data?
Within the scope of our business relationship, you must provide those personal data that are necessary for the establishment and execution of a business relationship and for the fulfillment of the associated contractual obligations, or which we are legally required to collect. Without this data, we will generally not be able to conclude or perform a contract with you.
In particular, we are obligated under anti-money laundering regulations to identify you before establishing a business relationship on the basis of your identification document and to collect and record your name, place and date of birth, nationality, address, and identification data. In order to comply with these legal obligations, you must provide us with the necessary information and documents in accordance with the German Anti-Money Laundering Act and notify us immediately of any changes that arise during the course of the business relationship. If you do not provide the required information and documents, we may not establish or continue the business relationship requested by you.
9. To what extent is there automated decision-making?
As a rule, we do not use fully automated decision-making within the meaning of Article 22 GDPR for the establishment and execution of the business relationship. Should we use such procedures in individual cases, we will inform you separately, provided this is required by law.
10. Does profiling take place?
In some cases, we process your data automatically with the aim of evaluating certain personal aspects (profiling). We use profiling, for example, in the following cases:
- In order to be able to inform and advise you about products in a targeted manner, we use evaluation tools. These enable needs-based communication and advertising, including market and opinion research.
- We use creditworthiness information provided by Bürgel.
11. Information on your right to object pursuant to Article 21 of the General Data Protection Regulation (GDPR)
1. Case-by-case right to object
You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is carried out on the basis of Article 6(1)(e) GDPR (processing in the public interest) or Article 6(1)(f) GDPR (processing based on a balancing of interests). This also applies to profiling based on these provisions within the meaning of Article 4(4) GDPR.
If you lodge an objection, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms, or the processing serves the establishment, exercise, or defense of legal claims.
2. Right to object to data processing for direct marketing purposes
In individual cases, we process your personal data for the purpose of direct marketing. You have the right to object at any time to the processing of personal data concerning you for such marketing purposes; this also applies to profiling insofar as it is related to such direct marketing.
If you object to processing for direct marketing purposes, we will no longer process your personal data for these purposes.
The objection may be submitted in any form and should preferably be addressed to:
Brander Landtechnik Vertriebsgesellschaft mbH
Data Protection Officer
An der Zugspitze 1/2
09618 Brand-Erbisdorf
12. Privacy Policy for the Use of Google Analytics
We use the technologies described below provided by Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). The information automatically collected by Google technologies about your use of our website is generally transmitted to and stored on a server of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
There is no adequacy decision by the European Commission for the United States. Our cooperation with Google is based on the Standard Contractual Clauses of the European Commission. If your IP address is collected via Google technologies, it is shortened by activating IP anonymization before being stored on Google servers. Only in exceptional cases is the full IP address transmitted to a Google server and shortened there.
Unless otherwise stated for the individual technologies, data processing is carried out on the basis of an agreement between joint controllers in accordance with Article 26 GDPR. Further information on data processing by Google can be found in Google’s privacy policy.
Google Analytics
For the purpose of website analysis, Google Analytics automatically collects and stores data (IP address, time of visit, device and browser information, as well as information on your use of our website), from which user profiles are created using pseudonyms. Cookies may be used for this purpose. Your IP address is generally not merged with other data held by Google. Data processing is carried out on the basis of a data processing agreement with Google.
For the purpose of optimizing the marketing of our website, we have activated the data sharing settings for “Google products and services.” This allows Google to access the data collected and processed by Google Analytics and subsequently use it to improve Google services. The data sharing with Google within the scope of these settings is based on an additional agreement between joint controllers. We have no influence on the subsequent data processing by Google.
For the purpose of optimizing the marketing of our website, we use the so-called User ID feature. With the help of this feature, we can assign a unique, permanent ID to your interaction data from one or more sessions on our online platforms and thus analyze your user behavior across devices and sessions.
13. Data Protection Officer – Brander Landtechnik Vertriebsgesellschaft mbH:
Ms. Annette Schäfer