Privacy information for visitors to the website

We, Hermann Bock GmbH – Nickelstrasse 12, 33415 Verl, Germany, +49 (0) 5246 9205-0, info@bock.net – would like to explain to you below what data of yours we process. If you have any questions about data protection, please contact our Data Protection Officer at thomas-2018@werning.com.

Purpose, legal basis, categories of recipients, storage duration of data processing

Hermann Bock GmbH is a leading manufacturer of furniture and nursing care beds. For home care as well as for day care, rehabilitation facilities and retirement homes. Accordingly, our business is based on the marketing of high-quality products and services for health and elderly care. Personal as well as potentially personal data is in part required for this purpose. It is not part of our business model to collect, process or use data beyond the required extent or even to sell it to third parties. The protection of personal data is our top priority.

The purpose of the data processing on this website is to provide information about the products and services of our company, combined with the user being able to communicate with the contact persons in our company in a targeted manner. In addition, we process personal data pursuant to the following legal bases:

  • Art. 6 para. 1 a GDPR for the processing of personal data with the consent of the data subject.
  • Art. 6 para. 1 b GDPR for the necessary processing of personal data in order to fulfil a contract with the data subject as well as for performing corresponding pre-contractual measures.
  • Art. 6 para. 1 c GDPR for the necessary processing of personal data in order to fulfil a legal obligation to which we are subject in accordance with applicable EU or national law regarding which the GDPR is fully or partially applicable.
  • Art. 6 para. 1 f GDPR for the necessary processing of personal data in order to protect the legitimate interests of us or third parties, unless the fundamental freedoms and fundamental rights and interests of the person concerned prevail. Eligible interests are, particularly, our business interest in being able to provide our website, information security, the enforcement of our own legal claims as well as compliance with further legal provisions.

To this end, as part of our service provision, we use service companies that are specially obliged to secrecy and data protection. A transfer to authorities only takes place in the case of priority legislation.

Server log files

When you visit the website, a connection is made with your browser. The information collected as a result will be temporarily stored in system files and automatically recorded: the IP address of your device, the date and time of access, the name and URL of any retrieved files, the website from which access occurred or from which you were transferred to our website (referrer URL), the browser used and, if applicable, the operating system of your device as well as the name of your provider.

The data mentioned is processed by us for the purpose of establishing a smooth connection as well as for system security, particularly for securing our server against attacks (Art. 6 para. 1 f GDPR). The resulting connection data is automatically deleted, usually after a maximum of 60 days. If the website is misused, log data that has to be retained for reasons of further evidence will be removed until the incident is resolved.

Cookies

In part, we use so-called cookies: small text files that are stored on your device. These are, first of all, session cookies, which remain until you close all of your browser windows.  We need these session cookies so that we can process your request on our website and can steer you to the various subpages. We have a legitimate interest in using such cookies, since we otherwise would not be able to offer our website in the current manner, and they serve to make our offer technically free of errors (Art. 6 para. 1 f GDPR). If you do not wish for cookies to be used, you can block the use of cookies in your browser settings. You will still be able to visit our website, but you will not be able to use it to the full extent.

You can set your browser to delete cookies as soon as you close the browser or such that your browser does not accept cookies either in certain cases or in general. By deactivating cookies, the function of our site may be restricted. If cookies are stored by external providers, such as for analysis services, they are treated separately in this Data Privacy Statement.

Contact form

If you send us inquiries via the contact form, we will save the provided information for the purpose of processing your request as well as in the event of follow-up questions. We are justified in doing so due to our legitimate interest (Art. 6 para. 1 f GDPR), particularly since you contact us voluntarily.

In addition to your e-mail address, we also record your first and last name and, if you approach us as a company employee, your company and position there. This information is necessary for the processing of your inquiry, in order to be able to identify you as well as to have available the information that is necessary for a possible contract initiation. This is in our predominant legitimate interest and is also regularly necessary for a contract initiation (Art. 6 para. 1 b, f GDPR). You can object to the processing of your data due to a legitimate interest at any time if there is a particular reason in that regard (when used for advertising purposes, even without a respective reason).

We will not transfer this data without your consent (Art. 6 para. 1 a GDPR). You can revoke your consent for future use at any time by sending an informal e-mail to the address stated in the legal notice.

The information you provide in the contact form will remain with us until you ask us to delete it, until you revoke your consent to the storage or until the purpose of the data storage no longer applies, which is regularly the case after the processing of your request has been completed. Legal provisions (particularly retention periods) remain unaffected thereby.

Newsletter

If you wish to receive the newsletter which is offered on the website, we will need to receive an e-mail address from you. You can also voluntarily provide your first name, last name and company if you would like to be contacted personally. We will send you a registration e-mail and ask for your confirmation in order to receive the information that will allow us to verify that you are the owner of the provided e-mail address and that you agree to receive the newsletter (Art. 6 para. 1 a GDPR). No further data is required. We will use this data exclusively for the delivery of the requested information and will not transfer it to third parties.

You can revoke the given consent to the storage of the data, the e-mail address as well as their use for the sending of the newsletter at any time, such as via the "Unsubscribe" link in the newsletter.

Newsletter dispatch by mailingwork GmbH

In order to send our newsletter, we use the services of mailingwork (Birkenweg 7, 09569 Oederan, Germany), which we have carefully selected, regularly inspect and have committed to the observance of data protection on the basis of an order processing contract pursuant to Art. 28 GDPR. If you subscribe to our newsletter, your data will be stored on the servers of mailingwork. With the help of mailingwork, we can analyse our newsletter campaigns. If you open a newsletter sent via mailingwork or click on a link in the newsletter, this information will be sent to mailingwork. As a result, we can determine whether a newsletter message has been opened and on which links have been clicked. In addition, technical information is collected (e.g., time of retrieval, IP address, browser type and operating system). This information is anonymised and cannot be assigned to the individual newsletter recipient. This data is only used for anonymous, statistical analysis so as to more effectively tailor future newsletters to the interests of our recipients. We have a legitimate interest in making our newsletter as attractive as possible for you (Art. 6 I 1 f GDPR). 

Google Analytics

In order to determine the number of visitors to our website and to improve our website (Art. 6 para. 1 f GDPR), we use a privacy-compliant form of Google Analytics. The IP addresses of all users are anonymised, so the identification of the individual visitor is not possible and the IP address is not merged with other data from Google. The anonymisation is usually performed in Europe before the IP address is transferred to Google in the USA. Only in exceptional cases will the full IP address be sent to a Google server in the USA and shortened there.

We have concluded a data processing agreement with Google. Google Inc. (1600 Amphitheater Parkway, Mountain View, CA 94043, USA) compiles statistical reports for us concerning the use of our website and the related activities. Google Analytics uses so-called cookies, which are small text files that are stored on your device.

You can prevent the storage of cookies by setting your browser accordingly. However, you may not be able to use all features of our site in this case. If you wish to object to any collection of usage data by Google Analytics, please use Google's Opt-Out add-on: https://tools.google.com/dlpage/gaoptout?hl=en 

Alternatively, click here to disable Google Analytics on this website – but please keep in mind that the visitor statistics of Google Analytics help us to improve this website.

Google is certified pursuant to the "EU-US Privacy Shield", an agreement between the European Union (EU) and the USA concerning compliance with European data protection standards in the USA. For information about how user data is handled by Google Analytics, please refer to the Google Data Privacy Statement: https://support.google.com/analytics/answer/6004245?hl=en.

YouTube

We use videos that are hosted by the Google subsidiary YouTube LLC (901 Cherry Ave., San Bruno, CA 94066, USA) for an appealing presentation of the information that we offer (Art. 6 para. 1 f GDPR). When you visit one of our pages that are equipped with YouTube, you will be connected to the servers of YouTube. As a result, YouTube is informed of which of our sites you visit. If you are logged into your YouTube account, YouTube will allow you to associate your browsing behaviour directly with your personal profile. You can prevent this by logging out of your YouTube account. Google is certified pursuant to the "EU-US Privacy Shield", an agreement between the European Union (EU) and the USA concerning compliance with European data protection standards in the USA. For more information about how user data is handled in this regard, please refer to the YouTube Data Privacy Statement at: https://www.google.com/policies/privacy/.

Google Web Fonts

We use Web Fonts from Google to ensure a consistent presentation of our website (Art. 6 para. 1 f GDPR). To do this, your browser connects to Google's servers, which inform Google that our website has been accessed via your IP address. If your browser does not support Web Fonts, a default font will be used by your computer. Google is certified pursuant to the "EU-US Privacy Shield", an agreement between the European Union (EU) and the USA concerning compliance with European data protection standards in the USA. More information about Google Web Fonts can be found at https://developers.google.com/fonts/faq as well as in Google's Data Privacy Statement: https://www.google.com/policies/privacy.

Google Maps

We use the Google Maps mapping service provided by Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) in order to make the locations we specify easy to find (Art. 6 para. 1 f GDPR). When you visit one of our pages that are equipped with a mapping service of Google Maps, you will be connected to the servers of Google. As a result, Google is informed of which of our sites you visit and usually stores your IP address on servers in the USA. Google is certified pursuant to the "EU-US Privacy Shield", an agreement between the European Union (EU) and the USA concerning compliance with European data protection standards in the USA. For more information about how user data is handled in this regard, please refer to the Google Data Privacy Statement: https://www.google.com/policies/privacy.

Your right to information, correction, deletion, objection and data portability

If personal data is used that relates to you as a natural person, you are entitled to various data protection claims in relation to us.  You may exercise your right at any time to information, the correction and deletion of data as well as the limitation of the processing of this data. In addition, in accordance with Art. 20 EU-GDPR, you can request the transfer of the data to another responsible body.

As long as the respective requirements for these rights exist, we will act to uphold your rights free of charge and without delay. Just contact us in the manners described above. If you want data to be deleted when we are still legally obliged to keep the data, access to your data will be restricted (blocked). The same applies to an objection. You can exercise your right to data portability as long as we and the recipient possess the technical capabilities that are necessary in this regard.

In addition, you may object to the further processing of your data if we process your data on the basis of a legitimate interest (Art. 6 para. 1 f GDPR). If we do not process your data for advertising purposes, this shall require a reason that arises from your particular situation. In the event of an objection, we will no longer process your personal data as of the receipt during the subsequent review and – as long as the objection is justified – will delete said data after the review has been completed.

You may withdraw your consent to data processing (Art. 6 para. 1 a EU GDPR) at any time; we then will no longer process your personal data further unless there is legal permission to do so.

An objection or revocation will not have an impact upon the admissibility of the data processing in the past.

Right of complaint

You have the option at any time to file a complaint with a data protection supervisory authority.

Data security / encryption

This website uses "hypertext transfer protocol secure" (https). The connection between your browser and our server is encrypted.

Updating and changing this Data Privacy Statement

We reserve the right to modify the content of this Data Privacy Statement at any time. This is usually done in the case of further development or an adaptation of the services used. The current Data Privacy Statement can be viewed on our website.

Date of this Data Privacy Statement: 22 May 2018

This website uses cookies

We use cookies to improve the user-friendlyness of our website and to be able to develop it accordingly.