Privacy policy

Thank you for visiting our website. The secure handling of your data is particularly important to us. We would therefore like to inform you in detail about the use of your data when visiting our website.

The responsible party in terms of data protection laws, in particular the EU General Data Protection Regulation (DSGVO), is:

Bilduin GmbH
Managing Director: Vahit Tas
Wilhelmstr. 92
13593 Berlin

Legal basis

Art. 6 para. 1 sentence 1 lit. a DSGVO serves our company as the legal basis for processing operations in which we obtain consent for a specific processing purpose. If the processing of personal data is necessary for the performance of a contract to which the data subject is a party, as is the case, for example, with processing operations that are necessary for the delivery of goods or the provision of another service or consideration, the processing is based on Art. 6 (1) sentence 1 lit. b DSGVO. The same applies to processing operations that are necessary for the implementation of pre-contractual measures, for example in the case of enquiries about our products or services. If our company is subject to a legal obligation by which the processing of personal data becomes necessary, such as for the fulfilment of tax obligations, the processing is based on Art. 6 para. 1 lit. c DSGVO. In rare cases, the processing of personal data might become necessary in order to protect the vital interests of the data subject or another natural person, Article 6(1)(d) of the GDPR. Finally, processing operations could also be based on Article 6(1)(f) of the GDPR. Processing operations that are not covered by any of the aforementioned legal bases are based on this legal basis if the processing is necessary to protect a legitimate interest of our company or a third party, provided that the interests, fundamental rights and freedoms of the data subject are not overridden.

Transfer of data

We do not transfer your personal data to third parties for purposes other than those listed below. We only pass on your personal data to third parties if:

• you have given your express consent to this in accordance with Art. 6 Para. 1 S. 1 lit. a DSGVO,
• the disclosure is necessary in accordance with Art. 6 para. 1 p. 1 lit. f DSGVO for the assertion, exercise or defence of legal claims and there is no reason to assume that you have an overriding interest worthy of protection in the non-disclosure of your data,
• in the event that there is a legal obligation for disclosure in accordance with Art. 6 Para. 1 Sentence 1 lit. c DSGVO, as well as
• this is legally permissible and necessary for the processing of contractual relationships with you according to Art. 6 para. 1 p. 1 lit. b DSGVO.

Your data subject rights

You have the right

• to request information about your personal data processed by us in accordance with Art. 15 DSGVO. In particular, you can request information about the processing purposes, the category of personal data, the recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right of complaint, the origin of your data if it has not been collected by us, as well as the existence of automated decision-making including profiling and, if applicable, meaningful information about its details.
• in accordance with Art. 16 DSGVO, to request the correction of incorrect or incomplete personal data stored by us without delay
• in accordance with Article 17 of the Regulation, to request the erasure of your personal data stored by us, unless the processing is necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise or defence of legal claims
• to request the restriction of the processing of your personal data in accordance with Art. 18 DSGVO, insofar as the accuracy of the data is disputed by you, the processing is unlawful, but you object to its erasure and we no longer require the data, but you need it for the assertion, exercise or defence of legal claims or you have objected to the processing in accordance with Art. 21 DSGVO
• pursuant to Art. 20 DSGVO, to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request that it be transferred to another controller
• revoke your consent at any time in accordance with Art. 7 (3) DSGVO. This has the consequence that we may no longer continue the data processing based on this consent for the future, and
• pursuant to Article 77 of the GDPR, you have the right to complain to a supervisory authority, without prejudice to any other administrative or judicial remedy. As a rule, you can contact the supervisory authority of your usual place of residence or place of work or the place of the alleged infringement for this purpose if the data subject believes that the processing of personal data concerning him or her violates the EU's General Data Protection Regulation (GDPR). Information about the data we hold about you and how we process it (Art. 15 DSGVO)
• Correction of incorrect personal data (Art. 16 DSGVO)
• Deletion of your data stored by us (Art. 17 DSGVO),
• Restriction of data processing if we are not yet allowed to delete your data due to legal obligations (Art. 18 DSGVO)
• objection to the processing of your data by us (Art. 21 DSGVO) and
• Data portability, insofar as you have consented to the data processing or have concluded a contract with us (Art. 20 DSGVO).

Right to information, right to correction, blocking, deletion, objection

Upon written request, we will inform you about the personal data we have stored about you. You also have the right to correct, block, object to or delete this data. The request should be sent to our address given in the imprint of the website.

Right of revocation

If your personal data is processed on the basis of legitimate interests, you have the right to object to the processing of your personal data in accordance with Art. 21 DSGVO, insofar as there are grounds for doing so that arise from your particular situation or the objection is directed against direct advertising. In the latter case, you have a general right of objection, which is implemented without specifying a particular situation. If you would like to make use of your right of revocation or objection, it is sufficient to send an e-mail to our address given in the imprint of the website.

General collection of data

When you access our website or retrieve a file, data about this process is stored in a log file on our web server. In detail, the following data may be stored:

• IP address (if possible, this is stored anonymously)
• Domain name of the website you came from
• Names of the files retrieved
• Date and time of a retrieval
• Name of your internet service provider
• as well as operating system and browser version of your terminal device, if applicable.

We only store IP addresses for data security reasons in order to ensure the stability and security of our system (legal basis: Art. 6 para. 1 lit. f DSGVO). We reserve the right to statistically evaluate anonymised data records.

Provision of chargeable services

Type and purpose of processing

For the provision of chargeable services, we request additional data, such as payment details, in order to be able to execute your order.

Legal basis

The processing of the data required for the conclusion of the contract is based on Art. 6 para. 1 lit. b DSGVO.

Recipients

Recipients of the data are, if applicable, order processors.

Recipients in particular: PayPal

If you have used the payment service provider PayPal for a payment, we do not process any data that is necessary for communication between you and PayPal. As the payment recipient, we only receive information about the status of a payment.
Furthermore, we do not transmit any data from you to PayPal that goes beyond the necessary payment information.

Storage period

We store this data in our systems until the legal retention periods have expired. These are generally 6 or 10 years for reasons of proper accounting and tax law requirements.

Provision mandatory or required

The provision of your personal data is voluntary. Without the provision of your personal data, we cannot grant you access to our offered contents and services.

Newsletter

We send newsletters with promotional information only with the consent of the recipients or on the basis of a legal permission. Registration for our newsletter takes place via a double opt-in procedure: After registering, you will receive an e-mail in which you are asked to confirm your registration. This confirmation is necessary to verify you as the owner of the e-mail. Likewise, further data that you provided when registering for the newsletter will be saved. We only use your information apart from the e-mail address to personalise the newsletter, this includes for example your name. You can unsubscribe from the newsletter at any time. You will find a link to cancel the newsletter in every newsletter e-mail.

Contact forms

If you send us enquiries via the contact form, your details from the enquiry form, including the contact details you have provided there, will be stored and processed by us for the purpose of processing the enquiry and in the event of follow-up enquiries. Your data will be used exclusively for the purpose of answering and processing your question. The data processing is carried out here in accordance with Art. 6 para. 1 p. 1 lit. a DSGVO on the basis of your voluntarily given consent. You can object to this at any time (right of revocation).

Links to other websites

Our website/app may from time to time contain links to third-party websites or to other websites of ours. If you follow a link to one of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for these policies. Please check these privacy policies before submitting any personal data to these websites.

Right to complain to a supervisory authority

Without prejudice to any other administrative or judicial remedy, any data subject shall have the right to lodge a complaint with a supervisory authority, in particular in the Member State of his or her residence, place of work or the place of the alleged infringement, if the data subject considers that the processing of personal data relating to him or her infringes the EU General Data Protection Regulation (GDPR).

Confidentiality of your customer access

If you have been given access to a restricted area on our website that is secured by a password, you are responsible for keeping that password confidential. We ask that you do not share the password with anyone.

SSL encryption

This website uses Secure Socket Layer (SSL) encryption for the transmission of data from your browser to our server and to servers that provide files that we embed on our website. SSL is used to transmit data in an encrypted form. The data cannot be changed and the sender can be identified. You can recognise the presence of SSL encryption by the preceding text "https" in front of the address of the website you are calling up in your browser.

Links to third party websites

On this website, references to third-party websites are offered in the form of so-called links. Only when you click on such a link will data be transmitted to the link destination. This is technically necessary. The transmitted data are in particular: Your IP address, the time at which you clicked on the link, the page on which you clicked on the link, information about your Internet browser. If you do not want this data to be transmitted to the link destination, do not click on the link.

Security notice

We protect our website and other IT systems against loss, destruction, unauthorised access, unauthorised alteration or unauthorised disclosure of your data by means of appropriate technical and organisational measures. However, despite all due care, complete protection against all dangers is not possible in every case. Because we cannot guarantee complete data security when communicating by e-mail, we recommend sending confidential information by post.

Cookies

Like many other websites, we also use so-called "cookies". Cookies are data records that are stored on your end device (laptop, tablet, smartphone or similar) when you visit our website.

We use "session cookies" on our website. These are essential for the correct functioning of the website. They are automatically deleted at the end of your visit.

You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or generally and activate the automatic deletion of cookies when closing the browser. If you deactivate cookies, the functionality of this website may be limited.

We use the open source software Matomo for anonymised analysis of surfing behaviour. The software saves a cookie on the end devices of the users. This helps us to continuously improve our website and its user-friendliness. We offer you the option of opting out of the storage of this cookie. You can find the corresponding settings here .

Changes to this privacy policy

We reserve the right to change this data protection declaration if the legal situation or this online offer or the type of data collection changes. However, this only applies to declarations regarding data processing. If the user's consent is required or components of the data protection declaration contain a regulation of the contractual relationship with users, the data protection declaration will only be changed with the user's consent.

Therefore, please refer to this data protection declaration whenever necessary, especially if you provide personal data.

Status of this data protection declaration: 18.01.2023