Privacy Policy

1. Introduction

We attach great importance to the protection of your data and the preservation of your privacy.

The purpose of this Privacy Policy (“Policy”) is to inform you about the practices regarding the collection, treatment, control, and security with your personal data, respecting your rights as a holder, meeting the principles of objectivity and good faith. This privacy policy complies with Regulation (EU) 2016/679 (General Data Protection Regulation - GDPR)

Personal Data (“Data”) is any information related to an identified or identifiable individual. The LGPD provides for the right to easy access to information about the handling of your data, which shall be made available clearly, adequately, and ostensibly, according to the principle of free access to your personal data.

When we mention in this Policy “you”, “yours” “your”, we are referring to you the Data Subject who may be a: (i) visitor, (ii) customer or potential customer, (iii) supplier or potential supplier, (iv) job or trainee applicant, (v) third parties in general who contact us through our service channels or physical offices, and when we mention “Burkhardt+Weber”, “Company”, “we”, “our”, or “us”, we are referring to BURKHARDT+WEBER Fertigungssysteme GmbH and its controlled companies in the European Union.

1.1 Controller

The controller for data processing on this website is:

BURKHARDT+WEBER Fertigungssysteme GmbH
Burkhardt+Weber-Straße 57
72760 Reutlingen
Phone +49 7121 315-0
E-mail: info(at)burkhardt-weber(dot)de

The controller decides alone or jointly with others on the purposes and means of the processing of personal data (e.g. names, contact details or similar).

With this privacy policy, users receive information about the type, scope and purpose of the collection and use of their data by the controller.

1.2 Data protection coordinator

For general questions regarding data protection, you can contact the data protection coordinators at BURKHARDT+WEBER Fertigungssysteme GmbH. You can contact them in the following ways:

by mail                 at the above address with the addition of "Data Protection Coordinator".

by e-mail             to datenschutz(at)burkhardt-weber(dot)de

1.3 Data protection officer

We have appointed a data protection officer:

Tercenum AG
Mr. Thomas Kowoll
External Tercenum AG
Thomas.Kowoll(at)Tercenum(dot)de

Or by mail to the above address with the addition of "The Data Protection Officer".

2. Processing of your personal data

2.1 Use of the website

Scope of processing
When you visit our website, the browser used on your device automatically sends information to the server of our website. This information is temporarily stored in a so-called log file. The following information is collected without your intervention and stored until automated deletion: 

• IP address of the requesting computer,
• Date and time of access,
• Name and URL of the retrieved file,
• Website from which the access is made (referrer URL),
• The browser used and, if applicable, the operating system of your computer as well as the name of your access provider.
   

Purposes of processing
The aforementioned data will be processed by us for the following purposes: 

• Ensuring a smooth delivery of the website,
• Ensuring a comfortable use of our website,
• Optimization of our website,
• Evaluation and improvement of system security and stability as well as
• Sharing data with law enforcement in the event of a cyberattack or other crime.
   

Receiver
Recipients can be

• IT, data protection and marketing department
• Service providers and processors within the scope of our website management
   

Transfer to third countries
Due to the structure of the Internet, it cannot be ruled out that the information exchanged between our web server and your terminal device is routed through nodes in a third country.
 

Storage duration
The resulting log files are automatically deleted after seven days.
 

Legal basis and legitimate interests
The legal basis for data processing is Art. 6 para. 1 p. 1 lit. f DSGVO ("legitimate interest").
Our legitimate interest follows from the data collection purposes listed above.
 

Necessity of data provision
The provision of personal data is neither legally or contractually required nor necessary for the conclusion of a contract. You are not obliged to provide the personal data. However, if you do not provide us with your data, we may not be able to access all or parts of our website.

2.2 Contact form

Scope of processing
Contact forms are located in certain areas of our website. You can enter your data there to automatically send us a message, the transmission of which is protected by the transport encryption used on our website.

For this we need the following information from you:

• First name
• Name
• E-mail address
• Phone number

Furthermore, you can provide additional, voluntary information:

• Company
• Comments
   

Processing purposes
Your data will be processed for the purpose of answering your request in the best possible way.

For contact forms associated with our products, this typically includes responding to technical or general inquiries about the product or initiating a sale or consultation.

Receiver
Your inquiries are collected at a central point in our company and forwarded to the office responsible for your inquiry.

Legal basis and legitimate interests
The legal basis for this processing is Art. 6 para. 1 lit. f DSGVO ("legitimate interest"). If your contact aims at the conclusion of a contract, the additional legal basis for the processing is Art. 6 para. 1 lit. b DSGVO ("performance of contract or pre-contractual measure").

Our legitimate interest follows from the data collection purposes listed above.

Necessity of data provision
The provision of personal data is neither legally or contractually required nor necessary for the conclusion of a contract. You are not obliged to provide the personal data. However, if you do not provide us with your data, we may not be able to respond to your inquiry.

2.3 Dvinci

Scope of processing
For BURKHARDT+WEBER, the protection of your data starts even before we get to know you: That is why we use the technology of our processor d.vinci HR-Systems GmbH, Hamburg, in order to protect your data in the best possible way already during the application process.

If you send us your application documents via the Careers section of this website, these are transmitted directly to the servers of this processor via an encrypted connection. There, your application documents are kept in a separate area to make it easier for us to select a suitable applicant and to ensure that the high requirements for handling application documents are met in the best possible way.

Processing purposes

• Conducting the application procedure, initiating the conclusion of an employment contract
• Selection of the most suitable candidates

Receiver
In addition to our processor d.vinci, our HR department and the line managers of the respective position may also have access to your application.

Click here to read the privacy policy of the service provider.
https://www.dvinci.de/datenschutz/

Storage duration
We will store your application documents for the duration of the application process and for a further 6 months after the decision on filling the position and then delete them permanently. If you give us your consent for inclusion in the applicant pool, we will store your data for up to 2 years.

Legal basis
The legal basis for the processing of your data is Art. 6 Para. 1 lit. b DSGVO (pre-contractual measure). If you give us your consent to include you in the applicant pool, this consent is also the legal basis for further storage (Art. 6 para. 1 lit. a DSGVO in conjunction with §25 TTDSG).

Necessity of data provision
The provision of this data is neither legally nor contractually required; however, the provision is necessary for the conclusion of an employment contract. However, if you do not send us your application documents, we will not be able to consider you in the selection process.

You can also send us your application documents by another means, for example by mail.

2.4 Google Analytics

Insofar as you have given your consent, Google Analytics, a web analytics service provided by Google LLC, is used on this website. The responsible service provider in the EU is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google").

Scope of processing
Google Analytics uses cookies that enable an analysis of your use of our websites. The information collected about your use of this website by means of the cookies is usually transferred to a Google server in the USA and stored there.

We use the function 'anonymizeIP' (so-called IP masking): Due to the activation of IP anonymization on this website, your IP address will be shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. The IP address transmitted by your browser as part of Google Analytics will not be merged with other data from Google.

During your visit to the website, the following data is collected, among others:

• the pages you have called up, your "click path"
• Achievement of "website goals" (conversions, e.g. newsletter sign-ups, downloads, purchases)
• Your user behavior (for example, clicks, dwell time, bounce rates)
• Your approximate location (region)
• Your IP address (in shortened form)
• technical information about your browser and the end devices you use (e.g. language setting, screen resolution)
• Your Internet provider
• the referrer URL (via which website/advertising medium you came to this website)

Purposes of processing
On behalf of the operator of this website, Google will use this information for the purpose of evaluating your pseudonymous use of the website and compiling reports on website activity. The reports provided by Google Analytics are used to analyze the performance of our website and the success of our marketing campaigns.

Recipient
The recipient of the data is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland as processor.

We have concluded an processing agreement with Google for this purpose. Google LLC, based in Mountain View, California, USA, as well as its parent company Alphabet Inc., Mountain View, California, USA, and, if applicable, US authorities may access the data stored by Google.

Click here to read the privacy policy of the service provider.
https://policies.google.com/privacy?hl=de

Click here to read the service provider's cookie policy.
https://policies.google.com/technologies/cookies?hl=de

Click here to edit your privacy settings for all services of the processing company.
https://safety.google/privacy/privacy-controls/

Data protection officer of the service provider https://support.google.com/policies/contact/general_privacy_form
 

Transfer to third countries
A transfer of data to the USA cannot be excluded.

Storage period
The data sent by us and linked to cookies are automatically deleted after 14 months. The deletion of data whose retention period has been reached takes place automatically once a month.

You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by
a. not giving your consent to the cookie setting or
b. downloading and installing the browser add-on to disable Google Analytics HERE.

You can also prevent the storage of cookies by configuring your browser software accordingly. However, if you configure your browser to refuse all cookies, you may experience limitations in functionality on this and other websites.

Legal basis and revocation option
for this data processing is your consent, Art.6 Abs.1 lit. a DSGVO in conjunction with §25 TTDSG. You can revoke your consent at any time with effect for the future by changing the cookie settings (the storage period can be found in our Consent Tool, which you can find by clicking on "Consent Manager" at the bottom of the website).

For more information on Google Analytics' terms of use and Google's privacy policy, please visit https://marketingplatform.google.com/about/analytics/terms/de/ and policies.google.com.

2.5 Klaro!

Scope of processing
In order to give you full control at all times over which cookies we may store on your device and to document your consent to the setting of cookies in a legally secure manner, we use the Consent Manager from Klaro! Through a cookie set on your terminal device, this tool manages which of the other cookies we would like to use may be set on your device.

Processing purposes

• Individual management of the cookies used by our website
• Legally compliant operation of this website

Receiver
The information about which cookies you allow remains solely on your terminal device.           


Storage duration
The storage period can be found in our Consent Tool by clicking on "Consent Manager" at the bottom of the web page.


Legal basis and legitimate interests
The legal basis for this is Art. 6 para. 1 lit. f DSGVO ("legitimate interest"), in cases where you give us your consent to use a cookie in conjunction with Art. 6 para. 1 lit. a DSGVO and §25 TTDSG ("consent").

Our legitimate interest follows from the data collection purposes listed above.


Necessity of data provision
This data processing is neither legally nor contractually required, but is necessary for the proper technical operation of this website. If you suppress the use of this tool, e.g. by blocking all cookies in your browser, you will not be able to make individual settings regarding the use of our website and may not be able to use parts of our online content.

2.6 YouTube

Scope of processing
YouTube is a video player service operated by YouTube LLC (headquartered at 901 Cherry Avenue, San Bruno, CA 94066, USA; "YouTube"; a subsidiary of Google LLC. The responsible service provider in the EU is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google").). By means of this service, we can also embed videos that we or third parties have published on Youtube.de or Youtube.com on this website.

The following data is transferred to YouTube or Google:

• Device information
• IP address
• Referrer URL
• Viewed videos
• Video settings

Processing purposes

• Video display

Receiver

• YouTube LLC, San Bruno, California, USA
• Google LLC, Mountain View, California, USA
• Google Ireland Limited, Dublin, Ireland
• Alphabet Inc, Mountain View, California, USA

Click here to read the privacy policy of the service provider.
https://policies.google.com/privacy?hl=de

Click here to read the service provider's cookie policy.
https://policies.google.com/technologies/cookies?hl=de

Click here to edit your privacy settings for all services of the processing company.
https://safety.google/privacy/privacy-controls/

Data protection officer of the service provider support.google.com/policies/contact/general_privacy_form

Transfer to third countries
This service may transfer personal data to other countries, including third countries. This may include countries that do not offer an adequate level of data protection. If your data is transferred to the USA, there is a risk that this data may be processed by US authorities for control and monitoring purposes. In this case, you may not have any effective legal remedies.

Storage duration
We store your personal data only for as long as is necessary to achieve the purposes stated in each case, insofar as this does not conflict with any statutory retention periods.

Legal basis
The legal basis for this processing is your consent according to Art. 6 para. 1 lit. a DSGVO in conjunction with §25 TTDSG.

Necessity of data provision
The provision of personal data is neither legally or contractually required nor necessary for the conclusion of a contract. You are not obliged to provide the personal data. However, if you do not provide us with your data, you will not be able to view the videos embedded on our website.

2.7 OpenStreetMap

Scope of processing
This site uses the OpenStreetMap ("OSM") mapping software.
When using OpenStreetMap, your IP address, as well as the content of your map request, is transmitted to a server of OSM and possibly stored there.

Processing purposes

• Inclusion of an interactive map showing our location

Receiver
OpenStreetMap Foundation,132 Maney Hill Road, Sutton Coldfield, West Midlands, B72 1JU, United Kingdom

Click here to read the privacy policy of the service provider.
https://wiki.osmfoundation.org/wiki/Privacy_Policy

We will be happy to provide you with a German version of this document upon request.

Transfer to third countries
This service forwards your data to the third country United Kingdom (UK). There is an adequacy decision of the EU Commission for this.

Storage duration
We store your personal data only for as long as is necessary to achieve the purposes stated in each case, insofar as this does not conflict with any statutory retention periods.

Legal basis
The use of OpenStreetMap takes place within the scope of our legitimate interest according to Art. 6 para. 1 lit. f DSGVO. Pursued interests are the delivery of the website and dynamic display of our location.

Necessity of data provision
The provision of personal data is neither legally or contractually required nor necessary for the conclusion of a contract. You are not obliged to provide the personal data. However, if you do not provide us with your data, you will not be able to use the map embedded on our website.

2.8  Cookies

In order to make the visit to our website user-friendly and in compliance with data protection laws, as well as to enable certain functions, we use so-called cookies on certain parts of our website. A cookie is a record stored on your computer by a website. Cookies are used by website and technology providers to temporarily or permanently store information on your terminal device in connection with your website use, for example, to recognize you during a subsequent visit or to store your usage preferences.

As part of our consent management, you will be informed when you first visit our website which services we would like to use as part of your visit. These services (mostly) use cookies to perform their functions. You can freely decide which services (and cookies) you would like to allow, and change this decision at any time - by clicking on "Consent Manager" at the bottom of the website.

In this Consent Manager you will also find general information about the Services and more detailed information about cookies. For more information about the Services, please see this Privacy Policy.

Scope and purposes of data processing, recipients, data transfer to third countries and storage period
Please refer to the "Consent Manager" for this.
 

Legal basis
The legal basis for technically necessary cookies is Art. 6 (1) lit. f DSGVO ("legitimate interest"), whereby our interest is to provide you with an optimal experience when visiting our website and to make it easier for us to manage the website; or your consent if you have given it to us for a corresponding service (Art. 6 (1) lit. a DSGVO in conjunction with §25 TTDSG, consent).
 

Necessity of data provision
The provision of personal data is neither legally or contractually required nor necessary for the conclusion of a contract. You are not obliged to provide the personal data. However, if you do not provide us with your data, you will not be able to use certain functions of this website, or only to a limited extent.

If you want to generally prevent the use of cookies, you can do this through local settings in your Internet browser, (e.g. Internet Explorer, Mozilla Firefox, Opera or Safari).

3. Information about your rights as a data subject

The General Data Protection Regulation contains a comprehensive catalog of rights that you, as a data subject, can assert against data controllers. If you wish to assert one or more of these rights against us, you may in principle contact any employee of BURKHARDT+WEBER Fertigungssysteme GmbH, for example the contact person responsible for you. However, in order to simplify the processing of your inquiries, we kindly ask you to contact the data protection officer using the contact details provided in the section "General information and mandatory information", if you wish to do so confidentially by mail. In the following we would like to inform you about these rights.

3.1 Right to information

Pursuant to Article 15 of the GDPR, you have the right to obtain from the controller confirmation as to whether personal data concerning you are being processed and, where applicable, more detailed information about those data and your rights, as well as a copy of those data

3.2 Right to rectification

Pursuant to Article 16 DSGVO, you have the right to request correction of inaccurate personal data or completion of incomplete personal data.

3.3 Right to deletion

Pursuant to Article 17 of the GDPR, you have the right to request that your data be deleted under certain circumstances, as well as that a controller that has published your data make efforts to inform other controllers of your request for deletion.

3.4 Right to restriction of processing

Pursuant to Article 18 GDPR, you have the right, under certain circumstances, to request that your personal data be blocked from most forms of further processing.

3.5 Right to data portability

According to Article 20 of the GDPR, you have the right, under certain circumstances, to receive your data in a machine-readable format (e.g. as a PDF) and to request that your data be transferred to another controller.

3.6 Right of objection

According to Article 21 of the GDPR, you have the right to object to the processing of your personal data under certain circumstances, in particular if such processing is based on the so-called "legitimate interest of the controller" pursuant to Article 6(1)(F) of the GDPR or for direct marketing purposes.

3. 7 Automated decision making incl. profiling

According to Article 22 GDPR, you have the right not to be subject to a decision based solely on automated processing - including profiling - which produces legal effects concerning you or similarly significantly affects you, unless one of the exceptions defined by law applies.

3.8 Right to complain to a supervisory authority

According to Article 77 DSGVO, you have the right to lodge a complaint with a data protection supervisory authority. The following supervisory authority is responsible for us, but you are not limited to filing a complaint with this authority:

Landesbeauftragter für Datenschutz und Informationsfreiheit Baden-Württemberg
Address: Lautenschlagerstraße 20, 70173 Stuttgart, Germany
Postal address: P.O. Box 10 29 32, 70025 Stuttgart, Germany

Central contact
Phone: 0711/61 55 41 - 0
Fax: 0711/61 55 - 15
E-mail: poststelle(at)lfdi.bwl(dot)de

4. Further information

4.1 Security of processing

4.1.1 Information security and confidentiality

Burkhardt+Weber maintains state-of-the-art measures to ensure the integrity and protection of your data through policies, hardware and software security solutions, monitoring reports and internal audits that help identify and mitigate potential risks in the process. In addition, we regularly train our employees on our internal compliance program policies to ensure the security and confidentiality of their data through administrative measures.

4.1.2 Notification of security incidents

If Burkhardt+Weber becomes aware of a security incident that may lead to a breach of security of personal data, including data leaks, we will notify without undue delay and if possible within 72h the competent data protection supervisory authority and, if applicable, within the prescribed period also the data subjects with information about the data concerned and the technical and security measures used for data protection, in accordance with the provisions of Articles 33, 34 DSGVO.

4.1.3 SSL encryption

This website uses Secure Socket Layer (SSL) encryption for the transmission of data from your browser to our server and to servers that provide files that we embed on our website. With SSL, data is transmitted in encrypted form. The data cannot be changed and the sender can be identified. You can recognize the presence of SSL encryption by the prefixed text "https" in front of the address of the web page they call in the browser.

4.2 Storage duration

Unless otherwise specified in individual cases, we store your personal data only for as long as is necessary to achieve the purposes stated in each case, insofar as this does not conflict with any statutory retention periods.

4.3 Data transfer to third countries and international organizations

Unless otherwise stated in individual cases, we do not transfer your data to third countries or international organizations.

4.4 Automated decision making including profiling

Unless otherwise stated in individual cases, as a responsible company we do not use automated decision-making or profiling.

Our website/app may from time to time contain links to third party websites or to other websites of ours. If you follow a link to one of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for these policies. The operator of the target website is responsible for the processing of your data there. Please check these privacy policies before you provide personal data to these websites.

4.5 Updating the privacy policy

This policy has been approved by management as of Aug. 31, 2022 and will remain in effect from the same date for an indefinite period of time until an updated version is approved and published.

This Policy may be updated by the Company to reflect the data handling performed on our platforms. Any updates to this Policy will be made according to the European legislation. Therefore, we recommend that you access this policy periodically.