We, BITZER Kühlmaschinenbau GmbH (hereinafter referred to as “we”), thank you for your interest in our company and our products and we appreciate your visit to the website of www.bitzer.de (hereinafter referred to as “website”).

The protection of your personal data is a major concern for us. Your personal data is processed exclusively in accordance with the statutory data protection regulations, especially the European General Data Protection Regulation (hereinafter referred to as “GDPR”) and the German Federal Data Protection Act (hereinafter referred to as “BDSG”), both as amended from 25 May 2018.

Below we will inform you about how your personal data is processed and which rights you shall have as a data subject under the data protection law.

Where we link to third-party websites, please note that these websites are not operated by us and we are not responsible for the content on such websites. We have no influence on the data processing operations on third-party websites.

1. CONTROLLER AND DATA PROTECTION OFFICER

The controller is:

BITZER Kühlmaschinenbau GmbH
Peter-Schaufler-Platz 1
71065 Sindelfingen
Germany
Tel.: +49 7031 932-0
Fax: +49 7031 932-147
E-mail: bitzer@bitzer.de

Data protection officer:

BITZER Kühlmaschinenbau GmbH
-Data protection officer-
Peter-Schaufler-Platz 1
71065 Sindelfingen
Germany

Tel.: +49 7031 932-0
Fax: +49 7031 932-147
E-mail: datenschutz@bitzer.de

If you have any questions or suggestions regarding data protection please contact our data protection officer.

2. COLLECTION, PROCESSING AND PROVISION OF PERSONAL DATA

We only collect, process and use your personal data where legally admissible or if you have provided your express consent, e.g. if you register for our customer portal myBITZER (for more information, see section 5), if you subscribe to our newsletter (for more information, see section 6) or if you contact us using our contact form.

Personal data means any information relating to an identified or identifiable natural person. The personal data includes for example your name, your phone number and your postal and e-mail address, as these data is an expression of your personal identity.

Processing of personal data means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

2.1. DATA CATEGORIES

We process communication data. Communication data is data such as your name, address, e-mail address and IP address.

The processing of personal data is exclusively for the purposes described below and is limited to the necessary personal data in the legal sense of data economy.

2.2. PURPOSES OF THE PROCESSING AND LEGAL GROUNDS

We and the service providers we engage process your personal data exclusively for the following purposes:

Consent for processing, Article 6 (1) (a) GDPR
If you have given consent to the processing of your personal data, we will process your personal data for the purpose specified.

Compliance with a legal obligations, Article 6 (1) (c) GDPR
Personal data is also collected and processed in order to comply with our legal obligations such as our control and reporting obligations.

Legitimate interests pursued by us or by a third party, Article 6 (1) (f) GDPR
We also process personal data if it is necessary to pursue our legitimate interests or the legitimate interests of third parties.

For example:

• Enforcement of legal claims and defence in legal disputes
• Prevention and investigation of criminal acts
• Preservation of IT security and IT operations
• Marketing
• Advertising

Processing of your personal data for a different purpose
If we intend to process your personal data for another purpose than the purpose for which the data was collected, you will be provided with all further relevant information before we process your personal data.

2.3. TRANSMISSION OF DATA TO THIRD PARTIES

Your personal data will only be transmitted to third parties within the European Union (hereinafter referred to as “EU”) or in third countries only occurs to affiliated companies of BITZER SE in the sense of Section 15 ff. of the German Stock Corporation Act (AktG), if this is necessary to process your request or is required by law or you have given us consent. We can also share your personal data with our service providers within the EU insofar as the service providers support us in accordance with our instructions when processing your request (e.g. IT service providers).

When personal data is transferred to a third country, please note that not all third countries have an adequate level of protection. However, before transferring your personal data to a third country, we ensure that either the recipient of the data maintains an adequate level of protection or you have given consent to the transfer of data.

2.4. DURATION OF STORAGE OF YOUR PERSONAL DATA

Your personal data will only be processed and stored for as long as necessary to comply with our legal and contractual obligations. When processing of the personal data is no longer necessary, we shall have the obligation to erase personal data without undue delay.

In particular, processing of the personal data is necessary for the execution of the contract as well as for the defence and enforcement of civil law claims within the applicable limitation periods. Furthermore, we have to comply with duties to retain under commercial law, tax law or other legal duties to retain which may require the storage of your personal data. For these reasons, we reserve the right to only erase the personal data after expiry of the relevant storage periods.

3. COOKIES

We use cookies in order to optimise and improve the use of our website. Cookies are small text files that are stored on your device (e.g. your computer or mobile device such as a tablet or smartphone) by your Internet browser. Among other thing, cookies are used to analyse the user behaviour when visiting our website. The information obtained in this way enables us to make it easier for you to use our website and to optimise our website for you.

When you visit our website, a cookie banner will notify you of the use of cookies. By clicking on the ‘Close’ button, you consent to the use of cookies.

The legal grounds for the use of cookies are provided by Article 6 (1) (a), (f) GDPR.

3.1. COOKIE CATEGORIES

Cookies are split into various categories. There are technically required and technically not required cookies.

Technically required cookies are needed for the operation and functionality of a website, which also entails necessary data storage. Consent to the use of technically necessary cookies is not required.

Technically not required cookies collect other – sometimes personal – data in order to optimise and improve our website. Technically not required cookies include, for example, tracking cookies that analyse the user behaviour or cookies from third-parties such as social networks. The use of technically not required cookies requires your consent.

3.2. MANAGEMENT, SETTINGS AND ERASURE OF COOKIES

You can visit our Website without using cookies. However, in this case please not that you might not be able to make full use of all of the features of this website.

Management of cookies
You can manage the use of cookies in your browser settings. You can decide which cookies may be used by the website and which may not. If you would like to deactivate all cookies, please change your browser settings.

Erasure
If cookies were installed when you visited our website and you subsequently decide to deactivate cookies, you can erase the cookies that have already been installed. You can erase cookies in your browser settings. You can also consult the help menu in your browser for more information on how to do so.

Withdrawal of consent to the use of cookies
If you have given consent to the use of cookies, you can withdraw the given consent at any time with effect for the future (“opt out”). By clicking the opt-out link, we set an opt-out cookie for the browser you use, which prevents further use of the cookies affected by the withdrawal. Please note that if you erase all cookies in your browser settings, the opt-out cookie will be erased as well. In this case, you will have to withdraw your consent again.

4. ANALYTICS TOOLS

We use analytics tools. These tools help us to adapt our website optimally to your interests and to improve our internet presence for you. Analytics tools record your user behaviour by collecting and analysing your device specific data using cookies. The device specific data include, for example, information about how you get to our website, which area of our website you visit and how often and how long you view these areas.

Depending on the analytics tool, the information relating to your use of our website might be transmitted to a server located in the USA and processed there. The GDPR imposes strict requirements on transmitting and processing in a third country such as the USA in terms of the adequacy of the level of protection for the processing of personal data. This includes the EU–US Privacy Shield certification which serves as a basis for transmitting personal data from Europe to U.S. companies.

If you do not want your usage behaviour to be analysed, you can object to the use of analytics tools at any time and with future effect by clicking on the specific opt-out link. If you object, we will set an opt-out cookie for your browser you use which will prevent further use of the analytics tools affected by the objection. Please note that if you erase all cookies in your browser settings, the opt-out cookie will be erased as well. In this case, you will have to object again.

The analytics tools we use are described in detail below.

4.1. GOOGLE ANALYTICS

Google Analytics is a web analytics service provided by Google LLC, 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA (hereinafter referred to as “Google”). Google is certified under the EU–US Privacy Shield.

We only use the services of Google Analytics with the extension ‘_anonymizeIp()’. Only your shortened IP address will be processed, which means that it cannot be associated with you specifically.

Furthermore, please note that Google will not merge the IP address transmitted by the browser you use with any other data by using Google Analytics.

In addition for clicking on this opt-out link, you can deactivate the collection of data by Google Analytics.

4.2. GOOGLE ADS

Google Ads is an online advertisement service provided by Google. Google is certified under the EU–US Privacy Shield.

We also use the remarketing tool provided by Google Ads. This service enables us to display personalised and interest-based advertisements.

If you do not want to receive any personalised advertisements from Google Ads remarketing, you can click on this opt-out link or deactivate the service here: https://support.google.com/ads/answer/7395996?hl=us

4.3. GOOGLE TAG MANAGER

Google Tag Manager is a service provided by Google. Google is certified under the EU–US Privacy Shield. This service enables us the management of website tags with an user interface. As it is a cookie-free domain, Google Tag Manager itself does not collect any personal data. However, other tags are activated which might collect and send data to Google Analytics or Google Ads. Google Tag Manager has no access to such data. If you have deactivated cookies on a domain or cookie level, the deactivation will also apply to the tracking tags implemented with Google Tag Manager.

4.4. HOTJAR

Hotjar is a web analytics service provided by Hotjar Ltd., 3 Lyons Range, 20 Bisazza Street, Sliema SLM 1640, Malta, Europe (hereinafter referred to as “Hotjar”). The data collected by Hotjar is stored in a data processing centre in Ireland.

Further information on data protection at Hotjar you can find here

In addition to clicking on this opt-out link, you can deactivate the collection of data by Hotjar here:https://www.hotjar.com/legal/compliance/opt-out

5. REGISTERING FOR MYBITZER

We provide a digital customer portal (hereinafter referred to as “myBITZER”). When you register, myBITZER provides you with access to various customer-specific content such as access to our product documentation and/or ePARTS, as well as our free spare parts configuration software.

The following personal data is required to register for myBITZER:

• Title
• First name and surname
• E-mail address
• Your chosen password

The following data is also stored

• IP address
• Date and time of registration

6. SUBSCRIBING TO OUR NEWSLETTER

If you subscribe to the newsletter offered on our website, the data you provide in your subscription will only be used to send the newsletter unless you have consented to further use.

To subscribe to our newsletter, you will be required to provide us with your e-mail address.

You can unsubscribe from the newsletter at any time by sending an e-mail to bitzer@bitzer.de .

7. CONTACT THROUGH THE WEBSITE

If you contact us by e-mail or use our contact form, you provide us your personal data. We will process your data and potentially forward it to third parties if necessary in order to process your request.

The following personal data is required to use the contact form

• Title
• First name and surname
• E-mail address
• Company

The following personal data can be provided voluntarily when you use the contact form

• Address

8. PROVISION OF YOUR PERSONAL DATA

As described in section 2.2, your personal data is also collected in order to comply with statutory obligations. In this context, the provision of your personal data is required by law. In particular, Article 33 (1) GDPR requires infringements of data protection to be reported to the relevant supervisory authority.

The provision of your personal data is required to subscribe to our newsletter, register for myBITZER or use our contact form. If you do not provide your personal data, we cannot provide you with these services.

9. SOCIAL MEDIA AND NETWORKS

We are represented on social media and networks. We might link to this privacy policy on our various profiles. Therefore, please note that the following provisions only apply in so far as we actually have control over the processing of data in connection with these profiles. We have no control over the processing of data by the social media and networks themselves. For more information regarding data protection, please refer to the information provided by each social media channel and network.

Below you will find a list of the social media channels and networks on which we are represented.

9.1. FACEBOOK

Facebook is operated by Facebook, 1601 South California Avenue, Palo Alto, CA 94304, USA.
Information on data protection at Facebook you can find here.

9.2. TWITTER

Twitter is operated by Twitter Inc., 795 Folsom St., Suite 600, San Francisco, CA 94107, USA.
Information on data protection at Twitter you can find here.

9.3. GOOGLE+

Google+ is operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043,USA.
Information on data protection at Google+ you can find here.

9.4. LINKEDIN

LinkedIn is operated by LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA. Information on data protection at LinkedIn you can find here.

9.5. XING

XING is operated by XING SE, Dammtorstrasse 30, 20354 Hamburg, Germany.
Information on data protection at XING you can find here.

10. YOUTUBE

We use YouTube. YouTube is an online video platform that enables to play audio and video files. On our website, you can view or listen to video or audio files relating to our company. In order to play the files, the YouTube player on our website connects to YouTube using plugins, which transmit data to YouTube.

Please note that we have no control over the processing of data by YouTube.
Information on data protection at YouTube you can find here.

YouTube is operated by YouTube LLC, 901 Cherry Ave, San Bruno, CA 94066, USA, represented by: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
Information on data protection at YouTube you can find here.

11. APPLICATIONS AND DATA PROTECTION

If you apply for a job in our company, our recruitment portal will provide you with information on how your personal data is handled as part of the application process. If you would like to receive information on data protection as part of the application process in advance, do not hesitate to contact us at any time. To do so, please use the contact details above.

12. YOUR RIGHTS AS A DATA SUBJECT

As a data subject, you have various rights with regard to the processing of your personal data. If you would like to exercise these rights, please use the contact details provided in section 1.

As a data subject, you have the following rights:

• You shall have the right to obtain from us confirmation as to whether or not personal data concerning you is being processed by us, and, where that is the case, access to the personal data, Article 15 GDPR;
• You shall have the right to obtain from us the rectification of inaccurate personal data or the completion of incomplete personal data, Article 16 GDPR;
• You shall have the right t obtain from us the erasure (‘right to be forgotten’) of your personal data without undue delay, Article 17 GDPR;
• You shall have the right to obtain the restriction of the processing of your personal data, Article 18 GDPR;
• You shall have the right to data portability, i.e. you shall have the right to receive the personal data concerning you or have the personal data transmitted directly to another controller, Article 20 GDPR.

Furthermore, you shall have the right to object to the processing of your personal data, Article 21 GDPR.

You shall have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on point (e) or (f) of Article 6 (1) GDPR.

We shall no longer process the personal data concerning you unless we demonstrates compelling legitimate grounds for the processing which override your interests, rights and freedoms of you or for the establishment, exercise or defence of legal claims.

Where personal data are processed for direct marketing purpose, you shall have the right to object at any time. We shall no longer process the personal data for such purpose.

You shall have the right to withdraw your consent at any time, Article 7(3) GDPR. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

If you consider that the processing of your personal data infringes the regulations of the GDPR, you shall have the right to lodge a complaint with the supervisory authority that has jurisdiction over us, Article 77 GDPR. The supervisory authority that has jurisdiction over us is the State Commissioner for Data Protection and Freedom of Information for Baden-Wuerttemberg.

13. AUTOMATED DECISION-MAKING AND PROFILING

We consciously refrain from automated decision-making or profiling.

14. SECURITY

Taking into account the state of the art, the costs of implementation and the nature, scope, context and purposes of processing as well as the risk of varying likelihood and severity for the rights and freedoms of natural persons, we and our processors have implemented appropriate technical and organisational measures to ensure a level of security appropriate to the risk, Article 32(1) GDPR.

15. VERSION AND MODIFICATION OF THIS PRIVACY POLICY

This privacy policy was last revised in december 2018.

It might become necessary to amend or adapt this privacy policy in case technological developments and or/ canges to statutory and/or official regulations are given.

The latest version of this privacy policy shall apply.