Data Protection

August Brötje GmbH respects the fact that the protection of your personal data is important to you. We have created this privacy policy, in order to let you know what types of personal information we collect about you via our website and how your personal information is managed and used.

This privacy policy applies to the website – www.broetje.de. As regards the websites of other providers that you may reach from our own, the respective privacy policies of those providers apply.

1. Name and address of data controller

The data controller within the meaning of the GDPR and other national data protection laws of the member states as well as other data protection regulations is

August Brötje GmbH
August-Brötje-Str. 17
D-26180 Rastede
Germany
Telefon: +49 (4402) 80 0
Telefax: +49 (4402) 80 583 
E-Mail: info@broetje.de
Website: www.broetje.de

August Brötje GmbH is part of the BDR Thermea Group (https://www.bdrthermeagroup.com)

2. Data Protection Officer

August Brötje GmbH
Data Protection Officer
August-Brötje-Str. 17
D-26180 Rastede
Germany
E-Mail: datenschutz@broetje.de

3. General information about data processing

3.1. Extent to which personal data is processed

We process personal data in accordance with the provisions of the General Data Protection Regulation (GDPR), the Federal Data Protection Act (BDSG) and other data protection regulations that must be complied with, doing so only to the extent necessary to provide a functioning website as well as our content and services.

3.2. Legal basis for the processing of personal data

  • Insofar as we obtain the consent of the data subject to the processing of personal data, Art. 6 para. 1 lit. a EU General Data Protection Regulation (GDPR) serves as the legal basis.
  • As regards the processing of personal data necessary for the performance of a contract to which the user is a party, Art. 6 para. 1 lit. b GDPR serves as the legal basis. This also applies to processing operations required to carry out any pre-contractual measures.
  • Insofar as the processing of personal data is required to fulfil a legal obligation to which our company is subject, Art. 6 para. 1 lit. c GDPR as the legal basis.
  • If any processing is necessary to safeguard the legitimate interests of our company or of a third party, and if the interest, fundamental rights and fundamental freedoms of the data subject do not outweigh the former interest, Art. 6 para. 1 lit. f GDPR serves as legal basis for processing. In this case, you have a right of objection under Art. 21 GDPR.

3.3. Data erasure and storage duration

Personal data will be deleted as soon as the purpose for its storage no longer applies. In addition, it may be stored if such storage is provided for by the European or national legislature within EU regulations, laws or other regulations to which the data controller is subject.

4. Provision of the website

4.1. Use of hosting service providers

Our website is hosted on servers of a hosting service provider located within the EU and based on order processing pursuant to Art. 28 GDPR. As part of its services, the hosting service provider may have access to personal data of our users, in particular to technical data that arises as part of the technical communication between you and our website (e.g. server log files). It is not permitted to use this data for its own purposes. The use of a hosting service provider serves our legitimate interest in making our online offer secure, available and highly efficient. The legal basis in this regard is Art. 6 para. 1 lit. f. GDPR.

4.2. Server log files

Every time you visit our website, your computer system automatically transmits data and information to our web server. This data is required so that you can use our website with your computer system. This data consists of:

  • The type and version of the browser you are using,
  • The type and version of the operating system you are using,
  • The URL of the page where you came to us,
  • The date and time of retrieval of our website,
  • The names of any subpages you have retrieved.
  • the IP address of your computer system
  • the amount of data transmitted in each case

This data is stored temporarily by us in so-called ‘server log files’. No storage of this data in conjunction with any other personal data of users is carried out.

This storage is carried out in order to ensure the security of our web server and, if necessary, to assert, exercise or defend legal rights (e.g. in the event of misuse of our offer) based on Art. 6 para. 1 f GDPR.

The IP addresses stored are deleted after seven days at the latest, unless this data is required for a longer period in order to assert, exercise or defend legal rights.

4.3. Use of cookies

Our website uses cookies. Cookies are text files that are stored in the Internet browser or by the Internet browser on your computer system. Whenever a user visits a website, a cookie may be stored on the user's computer system. Cookies serve the purpose of making our offer more user-friendly, effective and secure. Some features of our website cannot be implemented without the use of cookies.

We make use of so-called "functional cookies" that render surfing and browsing on our website more convenient for you. Thus, for example, website settings, login status or language settings are saved. These cookies are either deleted immediately after browser is closed or else they are stored on your computer system for a specified period of time. After that period expires, they are then deleted automatically. The length of the relevant storage periods may differ, depending on the cookie.

In addition, we use cookies on our website that permit the analysis of user behaviour (analysis cookies, conversion cookies). Further explanations follow below. Analysis cookies are used in order to improve the quality of our website and its content. By using analysis cookies, we learn how the website is used and this enables us to constantly optimize our offer.

The legal basis for the processing of personal data using cookies is Article 6 (1) lit. f GDPR. Our legitimate interest arises from the data collection purposes outlined above. In no case do we use the data collected in order to draw any conclusions about you.

If you disagree with the use of cookies, you can deactivate or limit the storage of cookies via the settings in your Internet browser. Cookies that have already been saved can be deleted at any time. This can also be done automatically. If cookies are generally disabled for our website, it may not be possible to use all of the website's functions to the fullest extent. In case you object to the use of the analysis cookies we use, we do offer you corresponding specific opt-out functions.

4.4. Links to the websites of other operators

In some places our website contains links to other websites. If you click on such a link, you will be redirected to the linked website. The data protection/privacy statements of the data controller of the website to which you have been referred would then apply.

5. Analysis tools and advertising

The analysis measures listed below and used by us are based on Art. 6 para. 1 sentence 1 lit. f GDPR. We use these analysis measures in order to ensure that our website's design is tailored to the relevant requirements and also in order to optimise it on an ongoing basis. We use analysis tools to record in a pseudonymised way the use made of our website and we then evaluate this use, for the purpose of optimizing our offer. These interests must be regarded as justified within the meaning of the above-stated provision.

The respective opportunities to submit an objection are shown in the corresponding analysis tools themselves.

5.1. Google Tag Manager

We use Google Tag Manager. Although Google Tag Manager does not collect personally identifiable information, whenever it is embedded, it will transfer the IP address of a site visitor to Google's servers. Tag Manager only activates other Google components, such as Google Analytics and scripts, and does not access any data from these activated components. The components activated in each case are named separately below; and for each of these, you can set individual privacy settings, e.g. by disabling cookies for them.

5.2. Google Universal Analytics (with IP anonymization)

We use Google Analytics, a web analytics service provided by Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA. ("Google"), to analyze the use of our website and to regularly improve our website for users. Google Analytics uses "Cookies", text files that are stored on your computer system and that allow an analysis of your use of the website. The information generated by the analysis cookie about your use of this website (including your IP address) is usually transmitted to and stored by Google on servers in the United States.

On this website, however, the IP anonymization (code extension "_anonymizeIP ()") has been activated, so that the IP address of the Google user's computer system within member states of the European Union or in other contracting states of the European Agreement is shortened, before being transferred to the United States, so that there is no direct personal reference contained in the analysis data. Only in exceptional cases will the full IP address be sent to a Google server in the US and shortened there. Google will use this data on our behalf, to evaluate the use of the website, to compile reports on website activities and to provide us with other services related to the use of the website and the Internet. The analysis data collected will be deleted after 14 months.

We use Google Analytics in its current implementation as "Universal Analytics". When using "Universal Analytics", the user behaviour recorded may be based on a pseudonymous user ID and thus a pseudonymous profile of the user may be created, consisting of data derived from the use of different devices ( "Cross-device tracking"). The recording of user behaviour by means of a user ID is deactivated on this website. This website does not use Google Analytics for cross-device analysis of visitor behaviour by means of a user ID.

You can prevent the storage of the analysis cookies by means of a corresponding setting in your browser software, which would disables the automatic setting of cookies in general; however, we would point out that in this case you may not then be able to use all of the functions of this website to the fullest extent.

You may also prevent Google from collecting the data generated by the analysis cookie and relating to your use of the website (including your IP address) as well as from processing this data; this is achieved by downloading and installing the browser plug-in, which is available via the following link: : http://tools.google.com/dlpage/gaoptout?hl=en.

As an alternative to the browser plug-in, especially for browsers on mobile devices, you can prevent this type of data collection by Google Analytics by clicking on this link. An opt-out cookie will then be set, which would prevent future collection of your data whenever you visit this website. The opt-out cookie is only valid in this browser and only for our website and is stored on your device. If you delete the cookies in this browser, you will then need to set the opt-out cookie again.
Additional information and Google's privacy policy can be found at https://policies.google.com/privacy?hl=en and https://www.google.com/analytics/terms/us.html.

Google has submitted to the EU-US Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active/.

5.3. Google AdWords

This website uses Google AdWords. AdWords is an online advertising programme of Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, United States ("Google").

As part of Google AdWords, we use what is known as "conversion tracking". If you click on an ad served by Google, a cookie will be set for the purpose of conversion tracking. These conversion cookies lose their validity after 30 days and are not used to identify users personally. If the user visits particular pages on this website and the conversion cookie has not yet expired, Google and ourselves are able to identify that the user clicked on the ad and was redirected to this page.

Each Google AdWords customer receives a different cookie. These cookies cannot be tracked via the websites of advertisers. The information gathered using the conversion cookie is used to generate conversion statistics for those AdWords advertisers who have opted for conversion tracking. We learn the total number of users who clicked on our ad and were redirected to a conversion tracking tag page. However, we do not receive any data that identifies users personally.

The storage of cookies for conversion tracking is based on Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in analysing user behaviour, in order to optimize both its website and its advertising.

If you do not wish to participate in this tracking, you can object to this type of use by configuring a browser setting to exclude the acceptance of cookies generally. You will not then be included in the conversion tracking statistics. However, you may not be able to use all of the functionality of our website.

You can also disable cookies used for conversion tracking by setting your browser to block cookies from the domain "www.googleadservices.com".

For more information about Google AdWords and Google Conversion Tracking, see the Google Privacy Policy: https://www.google.com/policies/privacy/.

Google is certified under the EU-US Privacy Shield https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active/, thereby guaranteeing compliance with EU privacy standards.

5.4. Google Maps

This site uses the map service, Google Maps, to display maps. The provider of this is Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA. The use of Google Maps is a way of creating an appealing presentation of our online offers and making the places we refer to on the website easy to find. The legal basis for the use of Google Maps is Art. 6 para. 1 sentence 1 lit. f GDPR.

Whenever you click on a map from Google Maps on our website, data about your use of this website and your IP address will be transmitted to a Google server based in the United States. This is done regardless of whether Google provides a user account that you are logged in to, or whether there is no user account at all. Whenever you're logged in to Google, your data will be assigned to your account directly. If you do not wish to be associated with your profile on Google, you must log out before activating the button. The provider of this page has no influence over this data transfer.

For more information on the purpose and scope of Google's data collection and processing, please visit https://policies.google.com/privacy?hl=en.

By means of EU-US Privacy Shield certification https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active/, Google warrants that EU data protection standards will be met including whenever data is processed in the United States.

5.5. YouTube Video Player

This website incorporates a "YouTube plug-in" from YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. This enables videos stored on http://www.YouTube.com to be played directly from our website. Our legitimate interest is to offer our users comfortable and reliable features, enabling them to play our YouTube videos.

We use embedded YouTube videos in enhanced privacy mode. This means: YouTube does not store any cookies for a user who is viewing a website using an embedded YouTube video player but does not click the video to start playback. Only once the YouTube video player is clicked, will it be connected to YouTube and YouTube may then be able to place cookies on the user's computer system, which can then be used to use send data to YouTube. However, no personal cookie data is stored for playbacks of embedded videos. (Source: YouTube "Enabling Enhanced Privacy Mode for Embedded Videos"). If you are logged in to Google, your information will be directly associated with your account. If you do not wish to be associated with your profile when using YouTube, you must first log out before clicking the button.

For more information on the purpose and scope of Google's data collection and its processing by YouTube, please refer to our privacy policy https://policies.google.com/privacy?hl=en. There you will also find more information on your rights and the settings options needed to protect your privacy. 

5.6. sharethis.com

We may allow third-party companies, including ad networks, to serve advertisements, providing other advertising services and/or collect certain information when you visit our website.  Third-party companies may use pseudonymised personal data (e.g., click stream information, browser type, time and date, subject of advertisements clicked or scrolled over) during your visit to this website in order to provide advertisements about goods and services likely to be of interest to you. To learn more about Interest-Based Advertising or to opt-out of this type of advertising, you can visit AboutAds.info/choices or www.networkadvertising.org/choices/.

Some third-party companies may also use non-cookie technologies, such as statistical IDs. Please keep in mind that your web browser may not permit you to block the use of these non-cookie technologies, and those browser settings that block cookies may have no effect on such techniques.  If the third-party company uses the non-cookie technologies for interest-based advertising, you can opt out at www.networkadvertising.org/choices.  Please note the industry opt out only applies to use for interest-based advertising and may not apply to use for analytics or attribution.

7. Contact form and e-mail contact

On our website, we offer you a contact form, which you can use to get in touch with us electronically. Whenever you make use of this option, the data entered into the input mask will be transmitted to us and then saved. The data required is marked in the input mask. Additional data can be added to the required data voluntarily, using the form.

So that this data can be processed, your consent to further processing is obtained during the transmission process.

Alternatively, it is possible to get in touch via the e-mail address provided. In this case, any personal data transmitted by e-mail will be stored.

The purpose of such processing is to deal with your request. The legal basis for processing data derived from the contact form is, pursuant to Art. 6 para. 1 lit. a GDPR, your consent to the processing of personal data sent by e-mail and our legitimate interest in processing and answering your queries pursuant to Art. 6 para. 1 lit. f GDPR.

Depending on your request, the data you have input may be processed further in a specific way. In certain cases, data is passed on to third parties (service providers, e.g. Brötje Customer Service GmbH, logistics service provider) if this is necessary to processed the query / order. If and as long as you do not consent to any other use, the data will be processed exclusively for the purpose of processing queries / orders.

The data will be deleted from our server as soon as it is no longer necessary for the purpose for which it was collected. This will be the case once your request has been finally dealt with.

At any time, you still have the option to revoke your consent to the processing of personal data or to object to the processing of data sent by e-mail. Please contact our Data Protection Officer.

If you make use of this option, communication with you cannot then be continued. All personal data stored in the course of getting in touch with us will be deleted.

8. Partner Registration

Only commercially interested parties and customers can apply on our website for registration as a Brötje Partner. An application for registration is made via a registration form. The data required is marked in the input mask. Additional data can be added to the required data voluntarily, using the form.

We process data, in order to enable traders and their employees to register as Brötje partners. Whenever personal data of an applicant are processed, this is carried out based on Art. 6 para. 1 lit. b GDPR.

The data collected is required, in order to enable us to verify registration as a Brötje Partner, whether or not the request for registration was made by an authorised employee, and also to manage access permissions in the event of registration.

Based on the data submitted, we check whether registration as a Brötje Partner can take place. In the event of rejection, you will receive a corresponding message via e-mail. All data transmitted will be deleted thereafter.

In the event of successful registration, the registration data will be stored for as long as the registration is active. After deactivation of the registration, personal data will be deleted, unless it is necessary to store it for longer for commercial or tax reasons pursuant to Art. 6 para. 1 lit. c GDPR.

Registered customers have the option of cancelling their registration at any time. You can always change or have the data saved in this way changed yourself. Simply send us a message via the contact form or send an e-mail to partnerlogin@broetje.de.

8.1 Publication of reference installations:

The data you provide in the registration form will be processed based on your consent (in accordance with Art. 6 (1) (a) of the EU GDPR) to represent our company as part of reference investments. Providing your data is voluntary.

Your consent (in accordance with Art. 6 para. 1 lit. a EU DS-GVO) for producing and publishing photo and video recordings is for the purpose of representing the company. Publication refers to our corporate communications in the press, on our website and on our own social media pages as well as in print media (flyers, brochures, etc.). Dissemination takes place within the company, to commissioned printing service providers and agencies as well as publication on the Internet.

Your data is deleted if you revoke your consent.

9. Closed area (partner login)

For our registered commercial partners, we have a closed area (partner login) on our website. Access will only be granted to registered partners or their employees.

10. Applications

You can send us any applications by e-mail.

The data and files you provide are processed and used exclusively for the purpose of processing your e-mail application. The legal basis for processing in this regard is Art. 6 (1) (b) GDPR in conjunction with Art. 26 (1) BDSG.

Your personal application data will not be transferred to third parties without your prior, express consent.

If your application is successful, the data and files provided by you may be processed further and used in an employment relationship by us for employment purposes. Otherwise, your personal application data will normally be deleted automatically six months after the application process is complete. This does not apply if statutory provisions preclude deletion, if further storage is necessary for the purpose of providing evidence or if you have expressly consented to a longer storage period.

If we are unable to provide you with a vacancy but your profile suggests that your application may be of interest for future job postings, we will store your personal application data for a period of 12 months, provided you consent expressly to such storage and use.

You can withdraw your application at any time. Please contact us informally at bewerbung@broetje.de. Any personal data of yours stored previously will then be deleted immediately.

11. Online Training Center

The mere fact of using the training portal makes the collection, processing and use of personal data by August Brötje GmbH unavoidable. First and foremost, data processing is used to create, implement and terminate contracts with customers. The primary legal basis for this is Art. 6 (1)(b) EU GDPR. The length of time data that is stored is determined by the statutory retention periods. Within August Brötje GmbH, the only people who are granted access to users’ personal data of users are those who need it in order to perform their contractual and statutory obligations.

12. Affected rights

If your personal data is processed, you are a data subject within the meaning of the GDPR and you have the following rights towards the data controller.

Right to information

You have the right, at any time upon request, to obtain information from us about personal data concerning you within the scope of Art. 15 GDPR.

Right to rectification

Pursuant to Art. 16 GDPR you have the right to demand immediate rectification and/or completion of your personal data from us if the personal data processed concerning you is incorrect or incomplete.

Right to delete

Pursuant to Art. 17 GDPR you have the right to demand that the personal data concerning you be deleted without delay.

Right to restriction of processing

Pursuant to Art. 18 GDPR you have the right to demand that the processing of the personal data concerning you be restricted.

Right to information

If you have the right to rectify, delete or restrict the processing in relation to us, we will notify all recipients to whom the personal data concerning you has been disclosed of such rectification or deletion of the data or restriction of processing, unless to do so proves to be impossible or would be associated with a disproportionate amount of effort. Pursuant to Art. 19 GDPR, you have the right to ask us to be informed by us about these recipients.

Right to data portability

Pursuant to Art. 20 GDPR, you have the right to receive the personal data concerning you that you supplied to us in a structured, common and machine-readable format and to transmit this data to other data controllers. You also have the right to have the personal data concerning you transmitted directly by us to another data controller, insofar as technically feasible.

Right to object

Pursuant to Art. 21 GDPR, you have the right at any time, for reasons arising from your particular situation, to lodge an objection to the processing of any personal data concerning you that is taking place based on Art. 6 para. 1 lit. f GDPR.

If the personal data concerning you is processed for the purpose of direct marketing, you have the right to object at any time to the processing of your personal data for the purposes of such marketing. If you object to processing for direct marketing purposes, the personal data concerning you will no longer be processed for these purposes.

Exercise of your rights

If you wish to exercise one or more of the above rights, please contact our data protection officer.

Right to revoke the data protection consent declaration

Pursuant to Art. 7 para. 3 GDPR, you have the right to revoke any data privacy declarations of consent issued by you at any time. The revocation of consent does not affect the legality of the processing carried out based on the consent until the revocation.

Right to complain to a supervisory authoritye

Pursuant to Art. 77 GDPR you have the right to complain to a supervisory authority if you believe that the processing of personal data concerning you breaches the GDPR.

13. Timeliness of this Privacy Policy

This privacy policy is valid as of May 2018.