DATA PRIVACY

DATA PROTECTION AT A GLANCE
The following information provides you with a clear overview of what happens to your personal data when you visit our website. Personal data is all data that can be used to identify you personally. You can find detailed information on the topic of data protection in our data protection declaration, which you will find after this text.

ACQUISITION OF DATA ON OUR WEBSITE WHO IS RESPONSIBLE FOR THE ACQUISITION OF DATA ON THIS WEBSITE?
Data processing on this website is carried out by the website operator:
Barl Maschinenbau GmbH
St.-Vitus-Straße 33, D-86672 Thierhaupten-Neukirchen
Germany
Managing Director: Helmut Barl, Gabriele Barl
Tel: +49 (0)82765843-0, email: info(at)barl-mb.de

HOW DO WE ACQUIRE YOUR DATA?
Your data is acquired when you provide us with it. This could be data that you enter in a contact form or send to us by email, for example. Other data is automatically acquired by our IT systems when you visit the website. This principally concerns technical data (e.g. web browser, operating system or time of web page access). The acquisition of this data takes place automatically, as soon as you enter our website.

FOR WHAT PURPOSE DO WE USE YOUR DATA?
Part of your data is acquired in order to ensure faultless presentation of the website. Other data may be used to analyse your user behaviour.

WHAT RIGHTS DO YOU HAVE IN RELATION TO YOUR DATA?
You have the right at any time to request information free of charge concerning the origin, recipients and purpose of your stored personal data. You also have the right to demand that this data be corrected, blocked or deleted. You can contact us at any time in this regard, and with any other questions on the topic of data protection, at the address provided in the legal note. Furthermore, you have the right to appeal to the regulatory authority responsible.

ANALYSIS TOOLS AND TOOLS FROM THIRD PARTY PROVIDERS
When you visit our website, your browsing behaviour can be statistically evaluated. This takes place in particular through the use of cookies and so-called analysis programs. The analysis of your browsing behaviour generally takes place anonymously. The browsing behaviour cannot be traced back to you personally. You can object to this analysis, or you can prevent it by avoiding the use of certain tools. You can find more detailed information on this in the following data protection declaration. You can object to this analysis. We will inform you of the objection procedures in this data protection declaration.

 

INFORMATION AND MANDATORY INFORMATION


DATA PROTECTION
The operators of these pages take the protection of your personal data very seriously. We treat your personal data in confidence and in compliance with the legal data protection regulations as well as this data protection declaration. Various personal data is acquired when you use this website. Personal data is data that can be used to identify you personally. This data protection declaration explains what data we acquire and how we use it. It also explains how and for what purpose this takes place. Please note that the transmission of data via the internet (e.g. by way of email communication) may be at risk of security breaches. It is impossible to completely protect data against access by third parties.

INFORMATION ON THE RESPONSIBLE BODY
Barl Maschinenbau GmbH
St.-Vitus-Straße 33, D-86672 Thierhaupten-Neukirchen
Germany
Managing Director: Helmut Barl, Gabriele Barl
Tel: +49 (0)82765843-0, email: info(at)barl-mb.de

The responsible body is the natural or legal entity that decides, autonomously or with others, on the purposes and means of processing personal data (e.g. names, email addresses, etc.).

PURPOSES FOR WHICH THE PERSONAL DATA IS PROCESSED AND THE LEGAL BASIS FOR THIS PROCESSING 
"Personal data" is defined as personal or factual information about a natural person. In the following cases, we process personal data from you within the scope of your use of our internet site for the purposes cited hereafter:

• If you send us inquiries via the contact form, your details from the inquiry form, including the contact details you provided there, will be stored in order to process the request and in case of follow-up questions. We will not pass on this data without your consent. The processing of data entered in the contact form therefore takes place exclusively on the basis of your consent (article 6, section 1, point a of the GDPR). You can withdraw this consent at any time. Notifying us informally by email is sufficient for this (info(at)barl-mb.de). The legality of any data processing procedures that took place prior to consent being revoked remains unaffected. The data entered in the contact form by you is kept by us until you demand that it be deleted, or you withdraw your consent to its storage, or the purpose of the data storage no longer applies (e.g. once your inquiry has been fully processed). Mandatory legal regulations - in particular storage periods - remain unaffected.

• Processing of personal usage data: Personal usage data, i.e. your IP address as well as the time that you accessed our internet site, is processed by the website to detect and track faults or misuse of our website or telecommunications services and systems. Legal basis for the processing of your personal data: Justified interest of the responsible party per § 28 sect. 1 no. 2 of the federal data protection act (from 25.05.2018: Art. 6 sect. 1, point f of the European general data protection regulation).

The provision of your personal data within the scope of your use of our website is not legally prescribed and is only required for the completion of a contract insofar as this has been cited above in the respective purposes for the processing of personal data. There is no automated decision-making incl. profiling by means of your personal data, which is processed by our website.

RECIPIENTS OR CATEGORIES OF RECIPIENTS OF YOUR PERSONAL DATA 
We only pass on your personal data, which is processed by our website, to further recipients or grant further recipients access to this personal data insofar as the processing of this personal data is required for the respective purposes or insofar as we have entrusted further recipients with the fulfilment of individual tasks or services and this has resulted in a requirement for them to have access to this personal data, or that such a requirement cannot be ruled out. The recipients or categories of recipients of your personal data, which is processed by our website, are:
• Internal departments at Barl Maschinenbau GmbH, who are tasked with the implementation of the respective business processes (for example, accounting, administration)
• Service provider for the design and administration of our internet site (current recipient: MIEHLICH DESIGN, 86850 Fischach/Aretsried)
• Service provider for the hosting of our internet site (current recipient: 1und1 Ionos, Montabaur)

The transfer of your personal data, which is processed by our website, to the aforementioned recipients is carried out in accordance with § 4 sect. 1 of the federal data protection act (from 25.05.2018: Article 6 sect. 1 point a of the European general data protection regulation, on the basis of your consent), § 28 sect. 1 no. 1 of the federal data protection act (from 25.05.2018: Article 6 sect. 1 point b of the European general data protection regulation, on the basis of the fulfilment of a contract or for the implementation of pre-contractual measures with you), § 28 sect. 1 no. 2 of the federal data protection act (from 25.05.2018: Article 6 sect. 1 point f of the European general data protection regulation, on the basis of the justifiable interests of the responsible party) or § 11 of the federal data protection act (from 25.05.2018: Article 28 sect. 1 of the European general data protection regulation, order processing).

In addition, your personal data, which is processed by our website, is transmitted to state institutions or authorities insofar as we are obligated to do so within the scope of potential duties of disclosure or due to official or court decisions for information, for the prosecution of criminal offences in accordance with the instructions of state institutions or authorities, for the prosecution of criminal offences against us as the damaged party as well as for the tracking of faults or misuse of our website or telecommunications services and systems.

TRANSMISSION OF YOUR DATA TO RECIPIENTS IN A THIRD COUNTRY OR TO AN INTERNATIONAL ORGANISATION 
Your personal data, which is processed by our website, will not be transmitted to recipients in a third country or to an international organisation.

DURATION OF THE STORAGE OF YOUR PERSONAL DATA
The personal data of the affected person will be deleted or blocked as soon as the purpose for it being saved has ceased to exist. The data may additionally be saved if provision is made for this through the European or national legislature in European legal ordinances, laws or other regulations responsible for this. The data is then also blocked or deleted if a retention period stipulated by the standards cited expires, unless there is a requirement for further retention of the data to conclude or fulfil a contract. 

INFORMATION ABOUT YOUR RIGHTS AS AN AFFECTED PERSON
• Right to information per Art. 15 of the European general data protection regulation: You have the right to demand information from the responsible party about the personal data pertaining to you and saved by us and additional information with regard to this personal data.
• Right to rectification per Art. 16 of the European general data protection regulation: You have the right to demand that the responsible party immediately corrects incorrect personal data pertaining to yourself.
• Right to deletion per Art. 17 of the European general data protection regulation: You have the right to demand that the responsible party immediately deletes personal data pertaining to yourself.
• Right to restriction of processing per Art. 18 of the European general data protection regulation: You have the right to demand that the responsible party restricts the processing of personal data pertaining to yourself.
• Right to withdraw per Art. 7 sect. 3 of the European general data protection regulation and objection per Art. 21 of the European general data protection regulation: You have the right to withdraw any consent issued per § 4 sect. 1 of the federal data protection act (from 25.05.2018: Article 6 sect. 1 point a of the European general data protection regulation) regarding the processing of your personal data, which is processed by our website, at any time and thus also the processing of the affected personal data, which would be processed by our website and on the basis of § 4 sect. 1 of the federal data protection act (from 25.05.2018: Article 6 sect. 1 point a of the European general data protection regulation). The legality of any processing of your personal data that took place on the basis of your consent and prior to consent being revoked remains unaffected by this.

• Right to data portability per Art. 15 of the European general data protection regulation: You have the right to receive your personal data. which is processed by our website, from the responsible party in a structured, current and machine-readable format.

RIGHT TO APPEAL TO THE REGULATORY AUTHORITY RESPONSIBLE
The exercising of your right to deletion, restriction of processing, withdrawal or objection may have the result that you may not be able to use the full functionality of our website. You can address your rights above directly to the responsible party cited under "Name and contact details for the responsible party" in this data protection information.

Right of appeal to a regulatory authority per Art. 77 of the European general data protection regulation: If you, as the affected person, are of the opinion that the processing of your personal data, which is processed by our website, infringes the European general data protection regulation, you have the right of appeal to a regulatory authority, in particular in the member state of your domicile, your workplace or the place of the suspected infringement. Responsible regulatory authority: Bayerisches Landesamt für Datenschutzaufsicht [Bavarian data protection authority], Promenade 27 (Schloss), 91522 Ansbach, Tel: +49 (0) 981 53 1300, Fax: +49 (0) 981 53 98 1300, email: poststelle@lda.bayern.de.

CONTACT FORM AND EMAIL CONTACT 

1. Description and scope of data processing
You can contact us via our contact form and our email address info(at)barl-mb.de. In this case, the personal data of the sender, i.e. the user, which have been submitted during the request, are retained. Concerning the contact form, it is mandatory for the user to enter his first name, last name and his or her email address. All other information that you enter in the form is optional.

2. Legal basis for the data processing
The legal basis for the processing of these data which are transferred during the submission of a request is Article 6, Paragraph 1, point (f) GDPR (legitimate interests of us as the controller). If the request aims at the conclusion of a contract, then the additional legal basis for the processing is Article 6, Paragraph 1, point (b) GDPR (performance of a contract). 

3. Purpose of the data processing
The processing of these personal data serves exclusively to make sure that we can deal with your request in an appropriate way. 

4. Duration of data retention
The above named data are deleted as soon as they are not needed anymore to achieve the purpose of their collection. The personal data which has been submitted via email or via the contact form are erased as soon as the respective conversation with the user has ended. The conversation can be defined as “ended“ when it can be deduced from the circumstances that the subject of request has been dealt with in a satisfactory and concluding way.

5. Possibility of objection
At any time, the user has the possibility to object to the processing of his or her data. The objection has to be sent to the following email address: info(at)barl-mb.de. All personal data which have been retained during the establishment of the contact are deleted in this case.

OBJECTION TO ADVERTISING EMAILS
Use of the contact details, published within the framework of the statutory legal notice, for the purpose of sending unsolicited advertising material and information is hereby prohibited. The operators of these web pages reserve the explicit right to take legal steps in the event of receiving unsolicited advertising information, for example through spam emails, etc.

USE AND APPLICATION OF COOKIES
The internet pages partly use so-called cookies. Cookies do no damage to your computer and do not contain viruses. Cookies serve to make our website more user-friendly, effective and secure. Cookies are small text files that are stored on your computer and by your internet browser.

Most of the cookies that we use are so-called "session cookies". These are automatically deleted after your visit. Other cookies remain saved on your end device until you delete them. These cookies enable us to recognise your browser again when you visit next. You can set your browser such that you are informed when cookies are set, cookies are only permitted in individual cases, cookies are only accepted for certain cases or generally excluded, and you can also set the browser to automatically delete the cookies when the browser is closed. The deactivation of cookies can limit the functionality of this website. Cookies that are required for the electronic communication process or for the provision of certain functions desired by you (e.g. shopping basket function) are stored on the basis of article 6, section 1, point f of the GDPR. The website operator has a justified interest in the storage of cookies for the technically faultless and optimised provision of their services. Insofar as other cookies (e.g. cookies for the analysis of your browsing behaviour) are stored, these are dealt with separately in this data protection declaration.



SSL OR TLS ENCRYPTION
This site uses SSL or TLS encryption for reasons of security and to protect the transmission of confidential contents, for example orders or inquiries sent by you to us as the site operator. You can identify an encrypted connection because the address line in the browser changes from "http://" to "https://" and the padlock symbol is displayed in your browser line. If SSL or TLS encryption is active, the data that you transmit to us cannot be read by third parties.

SERVER LOG FILES
When calling up our website www.miehlichdesign.de, our system automatically collects data and information from the computer accessing the website. This information is time-limited and is stored in a so-called log file. The following information will be collected without any action on your part and will be saved until it is automatically deleted:
• Browser type and browser version
• Operating system used
• Referrer URL
• Host name of the accessing computer
• Time of server request
• IP address

The log files do not contain IP addresses or other data that would enable assignment to a user. The data is likewise saved in the log files in our system. The IP addresses of the user or other data that would enable assignment to a user are not affected by this. This data is not saved together with other personal data of the user.

The data cited is processed by us for the following purposes:
• To guarantee smooth establishment of the connection to the website
• To guarantee convenient use of our website
• To assess the system security and stability, as well as
• For further administrative purposes

The legal basis for the temporary storage of the data and log files is Art. 6, sect. 1, page 1, point f of the GDPR. Our justified interest arises out of the aforementioned purposes for data collection. We will not use the data collected to identify you under any circumstances.

TRACKING THROUGH GOOGLE ANALYTICS

1. Description and scope of the data processing

On our website we use the tracking tool Google Analytics. With the help of Google Analytics, interactions of the user with our website are primarily recorded by means of cookies and are systematically analysed. If certain details of our website are called up, the following data will be saved: 

• three bytes of the IP address of the user’s calling system (anonymized IP address),
• the called website,
• the website which the user visited before our own website
• the subpages which are visited from a specific web page 
• how long the user stayed on the specific website,
• how often the user visited the specific website

The software is set that the IP addresses are not completely retained but that the last octet of the IP address is hidden (Bsp.: 192.168.79.***). In this way, it is not possible any more to link the shortened IP address with the user’s calling computer or terminal. 

2. Legal basis for the data processing
The legal basis for the processing of the user’s personal data is Article 6, Paragraph 1, point (a) GDPR (consent). 

3. Purpose of the data processing
The processing of the user’s personal data employing Google Analytics makes it possible for us to analyse the surf behaviour of our users. The evaluation of the hereby obtained data enables us to collect information about the usage of the individual components of our website. This helps us to improve our website and its user-friendliness constantly. 

4. Duration of data retention
The data obtained through tracking are deleted as soon as they are not necessary anymore for our purposes of recording. In our case, this happens after 12 months. The processing of the user’s personal data employing Google Analytics makes it possible for us to analyse the surf behaviour of our users. The evaluation of the hereby obtained data enables us to collect information about the usage of the individual components of our website. This helps us to improve our website and its user-friendliness constantly. 

5. Possibility of objection
The user can prevent Google Analytics from using his or her data on our website by employing a browser add-on for deactivating the java scripts of Google Analytics (ga.js, analytics.js, dc.js). If the user wishes to deactivate Google Analytics, he can download and install the add-on for his or her own web browser. The add-on for activating Google Analytics is compatible with the current versions of Chrome, Internet Explorer, Safari, Firefox and Opera. You have to correctly load and execute the add-on in the browser in order to make sure that it works properly. To use Internet Explorer, you additionally have to activate cookies of third-party providers. Interested users can find more information here: https://tools.google.com/dlpage/gaoptout?hl=de

GOOGLE RECAPTCHA
We use "Google reCAPTCHA" (hereinafter "reCAPTCHA") on our websites. The provider is Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA ("Google").

ReCAPTCHA is intended to check whether the data entry on our websites (e.g. in a contact form) is carried out by a person or by an automated program. For this purpose, reCAPTCHA analyzes the behavior of the website visitor based on various characteristics. This analysis begins automatically as soon as the website visitor enters the website. For analysis, reCAPTCHA evaluates various information (e.g. IP address, length of time the website visitor stays on the website or mouse movements made by the user). The data collected during the analysis are forwarded to Google.

The reCAPTCHA analyzes run completely in the background. Website visitors are not advised that an analysis is taking place.

Data processing is based on Art. 6 Para. 1 lit. f GDPR. The website operator has a legitimate interest in protecting his website from abusive automated spying and from SPAM.

Further information on Google reCAPTCHA and Google's privacy policy can be found at the following links: https://www.google.de/intl/de/policies/privacy/ and https://www.google.com/recaptcha/intro/android.html.

INTEGRATION OF FACEBOOK
a) Data collected via Facebook
Barl Maschinenbau GmbH does not save any data about your activities outside of the Facebook fan page of Barl Maschinenbau GmbH. We record your activities on this fan page in order to be able to react to your wishes and requests. We only store personal data about you in the context of business processes and delete it if the purpose or legal regulations do not conflict with this.

b) Data collected by Facebook:
Facebook collects personal data and usage data from you when you visit this page. Facebook's data protection regulations apply to these processes, which you can find under the following link: https://de-de.facebook.com/policy.php

SOCIAL PLUGINS
We offer you the option of using so-called “social media buttons” on our website. To protect your data, we use buttons during implementation that are only included as graphics on the website and that contain a link to the corresponding website of the button provider. By clicking on the graphic you will be forwarded to the services of the respective provider. Only then will your data be sent to the respective provider. If you do not click on the graphic, there will be no exchange between you and the providers of the social media buttons. Information on the collection and use of your data on social networks can be found in the respective terms of use of the respective providers.

We have integrated social media buttons from the following companies on our website:
• Facebook button from Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA ("Facebook"). Facebook's data protection information can be found at: https://www.facebook.com/policy.php.

FURTHER QUESTIONS
If you still have questions regarding your personal data, which is processed by our website, that were not answered by this data protection information, you can address your questions directly to the responsible party cited under "Name and contact details for the responsible party" in this data protection information.

Version: May 2020