Please update your Edge browser to the latest version, otherwise the website will not be shown correctly!
Data-protection notice and declaration of consent
Welcome to our website and thank you for your interest. The protection of your personal data (hereinafter: "Data") and your privacy during your visit to our website is very important to us. For this reason, we would like to inform you about how we deal with your data below. We reserve the right to occasionally modify the content of this data-protection notice. It is therefore advisable to review our data-protection notice on a regular basis.
1. Data controller
The data controller for the data processing in terms of the data-protection law is:
HANS BRÜGMANN GmbH & Co. KG (hereinafter referred to as: “We”, “Us”)
Auf der Heide 8, D-21514 Büchen
2. Contact data of the data-protection officer
The data controller’s data-protection officer for the processing of data can be reached at:
3. Personal data
Personal data includes any information relating to an identified or identifiable natural person (“data subject”). A data subject who can be identified directly or indirectly, in particular, by means of assignment to an identifier, is regarded as identifiable. For example, a name, an ID number, location data, an online identifier or other special features, the expression of physical, physiological, genetic, psychological, economic, cultural or social identity of this data subject are considered identifiers.
4. Purpose and legal basis of the processing of personal data
We are committed to comply with all data-protection provisions in handling website visitor data. We will process data only to the extent this is necessary and allowed under data-protection law, for example, to make visiting our website possible in order to fulfill contractual purposes or to the extent grant you consent for the processing of data. In particular:
a) Informational use of our website
You can visit our website without having to provide information about yourself. When you use our website solely for informational purposes and do not register, login or transmit personal information in any other way, we do not collect any personal data. An exception entails data that your browser transmits in order for it make it possible for you to visit our website, as well as information that is transmitted via the cookies used by us.
For the purpose of the providing our website on a technical level, it is necessary for us to process automatically transferred personal information so that your browser can display our website and you can use the website. This information is automatically collected each time our website is accessed and saved in our server log files. Here, we collect the following information: Browser type / version, operating system, referrer URL (the previously visited page), host name of the accessing computer (IP address), date and time of the server request.
These data are deleted after 30 days at the latest. These data are not combined with data from other sources.
We process your personal data for the provision of our website on a technical level in order to protect our legitimate interests in accordance with Article 6 (1) letter f of the GDPR. Our legitimate interest entails being able to provide you with an attractive, technically functional and use-friendly website.
b) When making a request via our contact form
If you have questions of any kind, on the basis of Article 6 (1) letter f of the GDPR, we offer you the possibility to contact our customer service. If you provide us with your personal data, this is done voluntarily. When using our contact form, it is necessary that you share the personal data requested in the respective mandatory fields (e.g. first and last name, company, e-mail address) so that we can process your request. The purpose of collecting personal information is to identify you and to be able to respond to your request. Our legitimate interest lies in our economic interest in being able to establish contact with new potential customers.
The personal data transmitted during requests via the contact form are stored up to the time your request is answered and then deleted unless we are obligated to store the data for a longer period of time due to retention periods.
c) When placing an order
For a product order via our website, your personal data is mandatory required as follows:
- E-mail address
- Phone number
- Sales tax identification number
- Billing address (and, if necessary, an alternative delivery address)
o Payment data depending on the payment method selected by you (for example, credit card information, bank information or PayPal account information).
We process your data from your order, the course of the contract or data collected during and after the conclusion of contract for the purpose of verifying your order, for justification, processing and possibly modifying your contract of sale, to settle any possible warranty claims, as well as to assert any claims against you, for possible services and for marketing purposes and, within this context, also transmit them to order processors and service providers (these include, for example, service providers from the branches: Transport, logistics and payment services) to the extent
- this is required for fulfilling the contract (Art. 6 (1) letter b of the GDPR). Data processing is, in particular, required to ensure the completeness and accuracy of the data and to perform the contract;
- this is required to fulfill a legal obligation (Art. 6 (1) letter c of the GDPR). The data processing is, particular, required to ensure of the completeness and accuracy of tax data according to fiscal code;
- this is within the scope of your provided voluntarily consent (Article 6 (1) letter a of the GDPR);
- is necessary to protect legitimate interests of the data controller or a third party (Art. 6 (1) letter f of the GDPR; a legitimate interest is, in particular, our interest in customer loyalty.)
The personal data collected by us for the order are stored up to the expiration of the legal warranty obligations and deleted automatically afterwards, unless we are obligated to store the data for a longer period of time due to retention periods.
Because it is necessary to provide your personal data mentioned above for the conclusion of the contract, not providing this data will result in the contract of sale not materializing.
d) During the creation of a customer account
For each customer who registers, we set up a password-protected direct access to his/her personal data (user account). Here, you can view your completed order data as well as the address data you have specified. You commit to treat the personal access data confidentially and not to make it accessible to any third parties. We shall accept no liability for the misuse of passwords, unless we are responsible for said misuse.
We process your information during your registration base on the following legal grounds:
Within the scope of fulfilling a contract you are a party to or to carry out pre-contractual measures in accordance with Art. 6 (1) letter b of the GDPR;
For the fulfillment of a legal obligation, which we are subject to in accordance with Art. 6 (1) letter c of the GDPR in connection with the commercial, trade or tax law provided that we are obligated to record and store your data.
e) When registering for our newsletter
If you have consented to the sending of the newsletter, we use your personal information (e.g. name and e-mail address) to send you our newsletter on a regular basis.
You are entitled, at any time, to unsubscribe from the marketing messages that we send to you. You may exert this right by clicking on the link “Opt out” or “Unsubscribe” in the promotional emails we send to you. Registered users can manage their account settings, as well as the settings for promotional emails under “Your personal information” and deselect the subscription to the newsletter. If you are not a registered user or want to log off from other marketing channels (for example, from postal advertising or telemarketing), then you can contact us using the contact details given here. Similarly, if we have collected and processed your personal data with your consent, then you can withdraw your consent at any time. Withdrawing your consent neither has an effect on the lawfulness of the processing carried out by us prior to your cancellation nor on the processing of your personal data, which was carried out in reliance on other legal grounds than consent.
We process your data for the sending newsletters and the personalization of the form of address used in communicating with you based on the following legal grounds:
5. Declarations of consent
You give us the following declarations of consent in accordance with Art. 6 (1) letter a of the GDPR, which we will keep record of for you and which you can call up in this document (data-protection declaration and consent to the processing of data).
“Yes, I would like to be informed about products and services of Hans Brügmann GmbH & Co. KG by e-mail. This consent can be withdrawn at any time”.
6. Right of withdrawal and objection
You can all withdraw all of the declarations of consent to use your personal data that you have granted us and that you can read at point 5 (including the declarations of consent that you have not granted to us if applicable) in their entirety or for individual processing free of charge. The legality of the processing carried out on the basis of the consent up until the withdrawal shall not be affected by the withdrawal.
You have the right, in accordance with Art. 21 of the GDPR, to object to the processing of your personal data, which takes place due to our legitimate interest or the legitimate interest of a third party, provided that reasons exist, which arise from your special situation or the objection is directed against general direct advertising or direct advertising which is customized for you. In the latter case, you have a general right to objection, which is implemented without us having to indicate a special situation.
7. Disclosure of data to third parties /recipient of the data
Your personal information will only be disclosed to third parties or otherwise transferred if this is required for the purpose of providing our services on the website, to perform the contract, or billing. Within the scope of order processing, for example, the service providers here used by us (transport specialist, logistics specialist, banks, etc.) obtain the necessary data for ordering and order processing. The data shared in this way may only be used by our service providers to fulfill their respective task. Any other use of the information is not permitted and also does not occur in the case of any of the service providers appointed by us.
When paying by credit card your data is forwarded to Concardis GmbH. This forwarding is obligatory for payment processing. Please note the data protection policy by Concardis when paying an order in our Onlineshop: https://www.concardis.com/de-en/protecting-your-data
8. Evaluation visiting activities
We use Google Conversion Tracking, an analysis service of Google LLC based on Art. 6 (1) letter f of the GDPR. (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland). Our legitimate interest entails the analysis, optimization and economic operation of our website. Google AdWords places a cookie on your computer ("conversion cookie"), provided that you arrived at our website via a Google ad. After 30 days, these cookies expire and are not used for personal identification. Should you visit certain pages from our website and the cookie has not yet expired, we and Google will be able to tell that someone clicked on the ad and proceeded to our page. Each Google AdWords customer has a different cookie. This means that cookies cannot be tracked via the website of an AdWords customer. The information obtained using the conversion cookie is used to create conversion statistics for AdWords customers who have opted into conversion tracking. AdWords customers can find out the total number of users who have clicked on their ad and been redirected to the page with a conversion tracking tag. However, advertisers do not obtain any information that can be used to personally identify users. Should you not wish to participate in the tracking process, you can also reject the placement of a cookie in this instance by using the browser setting which generally disables the automatic placement of cookies. You can also disable cookies for conversion tracking by setting your browser to block cookies originating from the domain "googleadservices.com".
9. YouTube components
On our website, we use components (videos) from YouTube, a company of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland. We use the option "privacy enhanced mode" provided by YouTube, here. When you visit a page that has an embedded video, a connection to the YouTube servers is established, and the content is displayed on the Internet page by notifying your browser. According to the information provided by YouTube, in "privacy enhanced mode", data is only transmitted to the YouTube server when you watch the video, in particular, which of our Internet sites you have visited. If you are logged in to YouTube at the same time, this information will be associated with your YouTube account. You can prevent this by logging out of your member account before visiting our website.
For more information provided by Google about YouTube's data protection,, visit the following link:
10. Use of Google Analytics
On the basis of Art. 6 (1) letter f of the GDPR, this website uses Google Analytics, a web analytics service provided by Google Inc. (“Google”). Google Analytics uses so-called “cookies”, text files stored on your computer which enable your website usage to be analyzed. The information generated by the cookie about your use of this website is usually transferred to a Google server in the US and stored there. This website uses IP anonymization. Your IP address will be truncated by Google within the member states of the European Union or in other parties to the Agreement on the European Economic Area. In exceptional cases only, the complete IP address may be transmitted to a Google server in the USA and truncated there. On behalf of the provider, Google will use this information for the purpose of evaluating your use of the website, for compiling reports on website activity, and for providing the provider with other services relating to website activity and Internet usage.
Alternatively, the browser plugin or within browsers on mobile devices, please click on this link to place an opt-out cookie, the acquisition by Google Analytics on this website are prevented in the future (this opt-out cookie only works for this browser and only for this domain, provided you delete your cookies in this browser, you must click the following link again): deactivate Google Analytics
12. General duration of data retention
General duration of retention of your data depends on the contract concluded.
Different deletion times for each data category are pointed out, where applicable, within this data-protection information at the end of the respective category.
13. Rights of the data subject
You are entitled to the following rights regarding the data processed by us:
- the right to information regarding your personal data stored by us in accordance with Art. 15 of the GDPR;
- If required, the right to rectify your personal data stored by us, which is incomplete or incorrect in accordance with Art. 16 of the GDPR;
- The right to deletion and be forgotten with regard to your personal data stored by us in accordance with Art. 17 of the GDPR;
- Right to restrict or block the processing of your personal data in accordance with Art. 18 GDPR;
- if applicable, the right to data portability in accordance with Art. 20 of the GDPR;
- The right to object against the processing of your personal data in accordance with Art. 21 GDPR;
- Right to withdraw consent, if applicable, pursuant to Art. 7 (3) of the GDPR;
- Right to complain to a regulator body in accordance with Art. 77 of the GDPR.
In the case of further questions concerning the processing of your personal data or taking advantage of one of the rights available to you, please send us an e-mail to firstname.lastname@example.org
14. Data security
We have set up technical and organizational security precautions to protect your data. In particular against loss, manipulation or unauthorized access. We adjust our security measures regularly in keeping with continuous technical development.
Data protection on social media
In the following, you will find information about the handling of your data that are collected during your use of our social media sites on social networks and platforms. Your data are processed on the basis of statutory regulations.
2. Other social media providers
If your personal data are processed by one of the providers listed below, this provider is the controller of your data processing within the sense of the GDPR. In the event you wish to exercise your rights as a data subject, we point out that this can be done most effectively by contacting the relevant providers. They are the only parties with access to the data collected from you. If you nevertheless require help, please do not hesitate to contact us at any time.
We have online sites on the social media platforms of the following providers:
− Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07 Ireland
− Instagram Inc., Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland
− YouTube, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
− LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland
− XING SE, Dammtorstrasse 29-32, 20354 Hamburg, Germany
2.2 Data protection officer
You will find information for contacting the data protection officer of the other social media providers here:
− Twitter Inc.: https://twitter.ethicspointvp.com/custom/twitter/forms/data/form_data.asp
− Instagram Inc.: https://www.facebook.com/help/contact/540977946302970
− LinkedIn Ireland Unlimited Company: https://www.linkedin.com/help/linkedin/ask/TSO-DPO
− XING SE: Datenschutzbeauftragter@xing.com
If you wish to contact the data protection officer for Google+ and YouTube, please get in touch with Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
III. General information on social media platforms from Hans Brügmann GmbH & Co. KG
1. Responsible authority
Controller for data processing within the sense of the GDPR is the following party insofar as we ourselves process data you have communicated to us via one of the social media platforms:
Hans Brügmann GmbH & Co. KG
Auf der Heide 8
21514 Büchen, Germany
+494155 81 41 0
2. Our data protection officer
You can reach our data protection officer by using the following contact data if you have any concerns about data processing that we as the controller carry out:
PROLIANCE GmbH / datenschutzexperte.de
Data protection officer
3. General data processing on the social media platforms
3.1 Data processing for marketing research and advertising
As a rule, personal data are processed on the company’s part for market research and advertising purposes. This is achieved by the placement of a cookie on your browser; this makes it possible for the provider to recognize you when you visit a website. User profiles can be created with the help of the collected data. Such profiles are used to place advertisements that presumably align with your interests both within and outside of the platform. Moreover, data may be stored in the use profiles independently of the devices you are using. This is regularly the case if you are a member of the platform and are logged in to the platform.
3.2 Data processing during the establishment of contact
We collect personal data ourselves if you establish contact to us, e.g., by using the contact form or a messenger service such as Facebook Messenger. What data we collect are dependent on the information you provide as well as the contact data you provide or release. We store this information for the purpose of processing your query and of handling any subsequent questions you have. We will not transfer your data to third parties without your consent under any circumstances. Legal grounds for the processing of the data are our legitimate interest in answering your query in accordance with point (f) of Art. 6 (1) GDPR and, if your query includes the intent to enter a contract, point (b) of Art. 6 (1) GDPR. When your query has been finally processed, your data will be erased, provided that the erasure is not prohibited by legal retention obligations. We will assume the query has been finally processed when it is evident from the circumstances that the related matter has been finally clarified.
3.3 Data processing for contract performance
If you have contacted us via a social network or other platform with the intent of entering a contract for the delivery of goods or the performance of services with us, we will process your data for the performance of the contract or for the taking of steps prior to entering a contract and/or performance of the desired services. Legal grounds for the processing of your data are set forth in point (b) of Art. 6 (1) GDPR). Your data will be erased when they are no longer required for performance of the contract or when it is determined that the steps taken prior to entering a contract will not lead to the conclusion of a contract corresponding to the purpose of the establishment of the contact. Please note, however, that it may be necessary after the conclusion of the contract to store personal data of our contract partners so that we can fulfill contractual or legal obligations.
3.4 Data processing based on consent
If the providers of the platforms request your consent for the processing for a specific purpose, the legal grounds for the processing are found in point (1) of Art. 6 (1) and Art. 7 GDPR. Declarations of consent can be withdrawn at any time with effect for the future.
IV. Transfer of data and recipients
Please note that the use of social media platforms may lead to data processing outside of the EU and the European Economic Area with the consequence that the European level of data protection cannot be absolutely guaranteed. The social media providers listed here with headquarters in the USA are certified for the US-European data protection treaty “Privacy Shield”, which guarantees compliance with the data protection level found in the EU.
We do not have any control over the processing and handling of your personal data by the various providers, nor do we have any information about their activities in this respect. For additional information, please review the privacy policies of the various providers.
V. Your rights
Below, you will find information regarding what rights of a data subject with respect to the controller have been granted to you by applicable data protection laws. You have the right to request information about your personal data that we process (Art. 15 GDPR). In particular, you can request information about the purposes of the processing, the category of the personal data, the categories of recipients to whom your data have been or are disclosed, the scheduled storage period; you have a right to rectification, erasure, restriction of the processing, or objection; the right to lodge a complaint; the right to obtain information about the origin of your data insofar as we did not collect them, and about the existence of automated decision-making, including profiling, and, where applicable, meaningful information about its details.
To request rectification of inaccurate data or completion of your data we have stored without delay (Art. 16 GDPR).
To request the erasure of your personal data that is stored by us, provided that the processing is not necessary for exercising the right of freedom of expression and information, for performance of a legal obligation, for reasons of public interest, or for the establishment, exercise, or defense of legal claims (Art. 17 GDPR).
To request the restriction of the processing of your personal data insofar as you have contested the accuracy of the data; the processing is unlawful, but you oppose their erasure and we no longer need the data, but you need them for the establishment, exercise, or defense of legal claims; or you have objected to the processing pursuant to Art. 21 GDPR (Art. 18 GDPR).
To receive your personal data that you have provided to us in a structured, commonly used, and machine-readable format, or to request the transmission of the data to another controller (Art. 20 GDPR).
To lodge a complaint with a supervisory authority pursuant to Art. 77 GDPR. As a rule, you may contact the supervisory authority of the German state where our aforementioned headquarters are located or at your habitual residence or place of work.
To withdraw at any time any consent you have previously granted for the processing of the data, effective for the future (Art. 7 (3) GDPR). If you withdraw your consent, we will erase the relevant data without delay insofar as further processing cannot be legitimized on legal grounds allowing processing without consenting. Withdrawal of consent does not affect the lawfulness of consent-based processing carried out up to the point of withdrawal.
Right to object
Insofar as we process your personal data for the purposes of legitimate interests pursuant to point (f) of Art. 6 (1) GDPR, you have the right pursuant to Art. 21 GDPR to object to the processing of your personal data on grounds relating to your particular situation. Insofar as the objection is to the processing of personal data for direct marketing purposes, you have a general right to object without pleading grounds relating to your particular situation.
If you wish to exercise your right to right to withdrawal or objection, you can do so simply by sending an email to email@example.com
VI. Duration of storage
Your personal data we have collected will be erased from our system if and when they are no longer required for the purposes determined at the time of their collection or if and when you have exercised your right of withdrawal or objection. The above provisions are without prejudice to legal retention periods. We do not have any control over the duration of the storage of your data that have been stored by social media providers for their own purposes. Please contact these providers directly for details.