Data-protection notice and declaration of consent

Welcome to our website and thank you for your interest. The protection of your personal data (hereinafter: "Data") and your privacy during your visit to our website is very important to us. For this reason, we would like to inform you about how we deal with your data below. We reserve the right to occasionally modify the content of this data-protection notice. It is therefore advisable to review our data-protection notice on a regular basis.


1. Data controller

The data controller for the data processing in terms of the data-protection law is:

HANS BRÜGMANN GmbH & Co. KG (hereinafter referred to as: “We”, “Us”)

Auf der Heide 8, D-21514 Büchen

Telephone: +49-4155-8141-0

Fax: +49-4155-8141-80,




2. Contact data of the data-protection officer

The data controller’s data-protection officer for the processing of data can be reached at:

Dominik Fünkner


Leopoldstraße 21
80802 München

Telephone: +49-89-217685173


3. Personal data

Personal data includes any information relating to an identified or identifiable natural person (“data subject”). A data subject who can be identified directly or indirectly, in particular, by means of assignment to an identifier, is regarded as identifiable. For example, a name, an ID number, location data, an online identifier or other special features, the expression of physical, physiological, genetic, psychological, economic, cultural or social identity of this data subject are considered identifiers.

4. Purpose and legal basis of the processing of personal data

We are committed to comply with all data-protection provisions in handling website visitor data. We will process data only to the extent this is necessary and allowed under data-protection law, for example, to make visiting our website possible in order to fulfill contractual purposes or to the extent grant you consent for the processing of data. In particular:

      a) Informational use of our website

You can visit our website without having to provide information about yourself. When you use our website solely for informational purposes and do not register, login or transmit personal information in any other way, we do not collect any personal data. An exception entails data that your browser transmits in order for it make it possible for you to visit our website, as well as information that is transmitted via the cookies used by us.

For the purpose of the providing our website on a technical level, it is necessary for us to process automatically transferred personal information so that your browser can display our website and you can use the website. This information is automatically collected each time our website is accessed and saved in our server log files. Here, we collect the following information: Browser type / version, operating system, referrer URL (the previously visited page), host name of the accessing computer (IP address), date and time of the server request.

These data are deleted after 30 days at the latest. These data are not combined with data from other sources.

In addition, we use cookies to make our website available for use. Cookies are text files that are stored in the Internet browser or saved on your computer by the Internet browser when accessing a website. A cookie contains a characteristic string that enables a clear identification of the browser when you access the website again. We only use these cookies to provide our website along with its technical functions to you. Within the scope of Prestahop, system cookies are used as so-called session cookies or temporary cookies for language, sub-shop, session, shopping cart, login status, cookie opt-out and are automatically deleted after 30 days. Within the scope of Wordpress, system cookies are used as session cookies or temporary cookies for language and cookie- opt-out and are automatically deleted after 30 days.

Almost all browsers make it possible to block cookies in their entirety, to remove existing cookies or warn against cookies in order to prevent that these are placed on your device. For more information concerning this, please consult the documentation or the help file of your browser. Please note that blocking cookies can significantly impair the use of our website. In addition, some features of our website cannot be offered without the use of cookies. Your information that we have collected via the aforementioned cookies necessary on a technical level are not used by us to create a user profile or evaluate your surfing behavior.

We process your personal data for the provision of our website on a technical level in order to protect our legitimate interests in accordance with Article 6 (1) letter f of the GDPR. Our legitimate interest entails being able to provide you with an attractive, technically functional and use-friendly website.

     b) When making a request via our contact form

 If you have questions of any kind, on the basis of Article 6 (1) letter f of the GDPR, we offer you the possibility to contact our customer service. If you provide us with your personal data, this is done voluntarily. When using our contact form, it is necessary that you share the personal data requested in the respective mandatory fields (e.g. first and last name, company, e-mail address) so that we can process your request. The purpose of collecting personal information is to identify you and to be able to respond to your request. Our legitimate interest lies in our economic interest in being able to establish contact with new potential customers.


The personal data transmitted during requests via the contact form are stored up to the time your request is answered and then deleted unless we are obligated to store the data for a longer period of time due to retention periods.

    c) When placing an order

For a product order via our website, your personal data is mandatory required as follows:


- Name

- E-mail address

- Phone number

- Website

- Sales tax identification number

- Billing address (and, if necessary, an alternative delivery address)

o   Payment data depending on the payment method selected by you (for example, credit card information, bank information or PayPal account information).


We process your data from your order, the course of the contract or data collected during and after the conclusion of contract for the purpose of verifying your order, for justification, processing and possibly modifying your contract of sale, to settle any possible warranty claims, as well as to assert any claims against you, for possible services and for marketing purposes and, within this context, also transmit them to order processors and service providers (these include, for example, service providers from the branches: Transport, logistics and payment services) to the extent


- this is required for fulfilling the contract (Art. 6 (1) letter b of the GDPR). Data processing is, in particular, required to ensure the completeness and accuracy of the data and to perform the contract;

- this is required to fulfill a legal obligation (Art. 6 (1) letter c of the GDPR). The data processing is, particular, required to ensure of the completeness and accuracy of tax data according to fiscal code;

- this is within the scope of your provided voluntarily consent (Article 6 (1) letter a of the GDPR);

- is necessary to protect legitimate interests of the data controller or a third party (Art. 6 (1) letter f of the GDPR; a legitimate interest is, in particular, our interest in customer loyalty.)


The personal data collected by us for the order are stored up to the expiration of the legal warranty obligations and deleted automatically afterwards, unless we are obligated to store the data for a longer period of time due to retention periods.


Because it is necessary to provide your personal data mentioned above for the conclusion of the contract, not providing this data will result in the contract of sale not materializing.

     d) During the creation of a customer account

For each customer who registers, we set up a password-protected direct access to his/her personal data (user account). Here, you can view your completed order data as well as the address data you have specified. You commit to treat the personal access data confidentially and not to make it accessible to any third parties. We shall accept no liability for the misuse of passwords, unless we are responsible for said misuse.

We process your information during your registration base on the following legal grounds:

Within the scope of fulfilling a contract you are a party to or to carry out pre-contractual measures in accordance with Art. 6 (1) letter b of the GDPR;

For the fulfillment of a legal obligation, which we are subject to in accordance with Art. 6 (1) letter c of the GDPR in connection with the commercial, trade or tax law provided that we are obligated to record and store your data.


   e) When registering for our newsletter

If you have consented to the sending of the newsletter, we use your personal information (e.g. name and e-mail address) to send you our newsletter on a regular basis.


You are entitled, at any time, to unsubscribe from the marketing messages that we send to you. You may exert this right by clicking on the link “Opt out” or “Unsubscribe” in the promotional emails we send to you. Registered users can manage their account settings, as well as the settings for promotional emails under “Your personal information” and deselect the subscription to the newsletter. If you are not a registered user or want to log off from other marketing channels (for example, from postal advertising or telemarketing), then you can contact us using the contact details given here. Similarly, if we have collected and processed your personal data with your consent, then you can withdraw your consent at any time. Withdrawing your consent neither has an effect on the lawfulness of the processing carried out by us prior to your cancellation nor on the processing of your personal data, which was carried out in reliance on other legal grounds than consent.

We process your data for the sending newsletters and the personalization of the form of address used in communicating with you based on the following legal grounds:

  • Provided that you have granted your consent in accordance with Art. 6 (1) letter a of the GDPR;
  • Unless you have given us your e-mail address in connection with the purchase of goods or services, or we send you personalized advertising to protect our legitimate interests in accordance with Article 6 (1) letter. f of the GDPR in connection with Art. 15 (3) of the Telecommunication Act in connection with Art. 7 (3) of the Law Against Unfair Competition [UWG]; our legitimate interest is based on our economic interests in the implementation of promotional measures and target-group-oriented advertising.


5. Declarations of consent

You give us the following declarations of consent in accordance with Art. 6 (1) letter a of the GDPR, which we will keep record of for you and which you can call up in this document (data-protection declaration and consent to the processing of data).


“Yes, I would like to be informed about products and services of Hans Brügmann GmbH & Co. KG by e-mail. This consent can be withdrawn at any time”.


6. Right of withdrawal and objection

You can all withdraw all of the declarations of consent to use your personal data that you have granted us and that you can read at point 5 (including the declarations of consent that you have not granted to us if applicable) in their entirety or for individual processing free of charge. The legality of the processing carried out on the basis of the consent up until the withdrawal shall not be affected by the withdrawal.


You have the right, in accordance with Art. 21 of the GDPR, to object to the processing of your personal data, which takes place due to our legitimate interest or the legitimate interest of a third party, provided that reasons exist, which arise from your special situation or the objection is directed against general direct advertising or direct advertising which is customized for you. In the latter case, you have a general right to objection, which is implemented without us having to indicate a special situation.


If you would like to take advantage of your right to withdraw or object, please send us an e-mail to or contact the data controller in another way. (cf. point 1).


7. Disclosure of data to third parties /recipient of the data

 Your personal information will only be disclosed to third parties or otherwise transferred if this is required for the purpose of providing our services on the website, to perform the contract, or billing. Within the scope of order processing, for example, the service providers here used by us (transport specialist, logistics specialist, banks, etc.) obtain the necessary data for ordering and order processing. The data shared in this way may only be used by our service providers to fulfill their respective task. Any other use of the information is not permitted and also does not occur in the case of any of the service providers appointed by us.

When paying by credit card your data is forwarded to Concardis GmbH. This forwarding is obligatory for payment processing. Please note the data protection policy by Concardis when paying an order in our Onlineshop:


8. Evaluation visiting activities

We use Google Conversion Tracking, an analysis service of Google LLC based on Art. 6 (1) letter f of the GDPR. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; "Google"). Our legitimate interest entails the analysis, optimization and economic operation of our website. Google AdWords places a cookie on your computer ("conversion cookie"), provided that you arrived at our website via a Google ad. After 30 days, these cookies expire and are not used for personal identification. Should you visit certain pages from our website and the cookie has not yet expired, we and Google will be able to tell that someone clicked on the ad and proceeded to our page. Each Google AdWords customer has a different cookie. This means that cookies cannot be tracked via the website of an AdWords customer. The information obtained using the conversion cookie is used to create conversion statistics for AdWords customers who have opted into conversion tracking. AdWords customers can find out the total number of users who have clicked on their ad and been redirected to the page with a conversion tracking tag. However, advertisers do not obtain any information that can be used to personally identify users. Should you not wish to participate in the tracking process, you can also reject the placement of a cookie in this instance by using the browser setting which generally disables the automatic placement of cookies. You can also disable cookies for conversion tracking by setting your browser to block cookies originating from the domain "".


9. YouTube components

On our website, we use components (videos) from YouTube, LLC 901 Cherry Ave, 94066 San Bruno, CA, USA, a company of Google LLC, Amphitheatre Parkway, Mountain View, CA 94043, USA, USA. We use the option "privacy enhanced mode" provided by YouTube, here. When you visit a page that has an embedded video, a connection to the YouTube servers is established, and the content is displayed on the Internet page by notifying your browser. According to the information provided by YouTube, in "privacy enhanced mode", data is only transmitted to the YouTube server when you watch the video, in particular, which of our Internet sites you have visited. If you are logged in to YouTube at the same time, this information will be associated with your YouTube account. You can prevent this by logging out of your member account before visiting our website.

For more information provided by Google about YouTube's data protection,, visit the following link:

10. Use of Google Analytics

On the basis of Art. 6 (1) letter f of the GDPR, this website uses Google Analytics, a web analytics service provided by Google Inc. (“Google”). Google Analytics uses so-called “cookies”, text files stored on your computer which enable your website usage to be analyzed. The information generated by the cookie about your use of this website is usually transferred to a Google server in the US and stored there. This website uses IP anonymization. Your IP address will be truncated by Google within the member states of the European Union or in other parties to the Agreement on the European Economic Area. In exceptional cases only, the complete IP address may be transmitted to a Google server in the USA and truncated there. On behalf of the provider, Google will use this information for the purpose of evaluating your use of the website, for compiling reports on website activity, and for providing the provider with other services relating to website activity and Internet usage.

The IP address transmitted by your browser as part of Google Analytics will not be merged with any other data held by Google. You may refuse the use of cookies by selecting the appropriate settings on your browser. However, please be advised that if you opt out of using cookies, you may not be able to use all the features of this website. You can additionally prevent the collection of data produced by the cookie and associated with your use of the website (including your IP address), its transmission to, and its processing by Google, by downloading and installing the browser plugin available at the following link:

Alternatively, the browser plugin or within browsers on mobile devices, please click on this link to place an opt-out cookie, the acquisition by Google Analytics on this website are prevented in the future (this opt-out cookie only works for this browser and only for this domain, provided you delete your cookies in this browser, you must click the following link again): deactivate Google Analytics


11. General duration of data retention

General duration of retention of your data depends on the contract concluded.


  • Should you not conclude a contract with us, your personal data are deleted 10 years after the last contact between you and the data controller.
  • Your personal data related to a contract, in particular, data relevant to tax law shall be deleted after expiration of the legal retention periods, at the latest, 10 years after termination of the contract.

Different deletion times for each data category are pointed out, where applicable, within this data-protection information at the end of the respective category.


12. Rights of the data subject

You are entitled to the following rights regarding the data processed by us:


- the right to information regarding your personal data stored by us in accordance with Art. 15 of the GDPR;

- If required, the right to rectify your personal data stored by us, which is incomplete or incorrect in accordance with Art. 16 of the GDPR;

- The right to deletion and be forgotten with regard to your personal data stored by us in accordance with Art. 17 of the GDPR;

- Right to restrict or block the processing of your personal data in accordance with Art. 18 GDPR;

- if applicable, the right to data portability in accordance with Art. 20 of the GDPR;

- The right to object against the processing of your personal data in accordance with Art. 21 GDPR;

- Right to withdraw consent, if applicable, pursuant to Art. 7 (3) of the GDPR;

- Right to complain to a regulator body in accordance with Art. 77 of the GDPR.


In the case of further questions concerning the processing of your personal data or taking advantage of one of the rights available to you, please send us an e-mail to


13. Data security

We have set up technical and organizational security precautions to protect your data. In particular against loss, manipulation or unauthorized access. We adjust our security measures regularly in keeping with continuous technical development.

Note: The offers are aimed at commercial interested parties. Therefore, all prices are, unless otherwise indicated, net plus applicable taxes.