Privacy notice

Thank you very much for visiting our website. The protection of your personal data and your privacy is important to us and we would like you to feel safe when you use our website. We process your personal data in accordance with the contents of this privacy notice, the relevant national data protection regulations, and the EU General Data Protection Regulations („GDPR“).

With the information below, we would like to give you an overview of which information is collected and used during your visit at our website.

Baier & Schneider GmbH & Co. KG, Wollhausstraße 60-62, 74072 Heilbronn (“we”), in our capacity as the operator of the websites www.brunnen.com, www.brunnen.de, www.heyda.de, www.knorrprandell.com, www.schneidergruppe.com, www.almanacksforlaget.se (“Website”), shall be the controller as defined in the GDPR and in other national data protection regulations.

In the event that you have any concerns with respect to data protection or privacy issues, please contact our data protection officer, Raphael Künzig, at datenschutz@brunnen.de or at +49 (0) 7131/886-364.

Personal data means any information relating to an identified or identifiable natural person; an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

Personal data also include information about your use of our website: such information is usually collected by the use of log files or cookies. You will find more information about log files and cookies below.

Scope and type of the collection, processing, and use of your data depend on whether you visit our web presence only to obtain generally available information or make use of any services beyond that.

a) Use for information only
If you use our website for information only, it is generally not necessary that you enter any personal data.
In that case, we only collect the data that are automatically transmitted by your internet browser, as the case may be, when you visit our website, for example:
- Referrer (website visited before)
- Requested web page or file
- Browser type and version
- Used operating system
- Used device type
- Time of access
- IP address in an anonymized form (will only be used to determine the location of access)
For this, your computer’s IP address is only stored for the time of your use of the website, in so-called log files, and is deleted immediately thereafter, or anonymized by truncation. All other data is only stored for a limited period of time. We use these data to operate our website, in particular to identify and remove faults from our website, to determine our website's utilization, and to make adjustments or improvements.

b) Use of other services
To the extent that you use other services through our website, it may be required that you enter personal data for this. In that case, your data is only processed for the purpose of delivering the services requested by you.

At our website, you can contact us via our contact form or by E-mail. The personal data that you enter in the course of contacting us is only used to handle your enquiry and is then immediately deleted from the web server. Please note that we may be obligated to store your messages to comply with any statutory retention obligations. Subject to the statements below, we shall not disclose your data to third parties.

a) Use of cookies
We use cookies to track the preferences of our visitors and to optimize our web pages. Cookies are small text files that are saved on your computer when you visit our website. You are free to delete cookies at any time. However, this may result in individual functions not being available any longer. Please see the help function of your browser on how to delete cookies.

b) Google Analytics
This website uses Google Analytics, the web analytics service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland (“Google”). Google Analytics uses “Cookies”, i.e. text files that are stored on your computer and allow an analysis of your use of this website. The information about your usage of this website that is generated by the Cookie is usually transferred to one of Google’s servers in the USA and stored there. In the event that IP anonymization was activated for this website, your IP address is truncated first by Google within the member states of the European Union or in other member states of the European Economic Area. Only in exceptional cases, the full IP address is transmitted to one of Google’s servers in the USA and truncated there.
Google will use this information on our behalf to analyze the use of this website, to create reports about website activities, and to perform other services in connection with the use of our website and the internet. The IP address that is transmitted by your browser through Google Analytics is not combined with other data from Google. You can prevent the saving of Cookies in the settings of your browser software; however, please note that in that case you may not be able to use any functions of this website to your full benefit. Moreover, you can prevent the transmission of the data generated by the Cookie with respect to the use of the website (including your IP address) to Google and their processing by Google by clicking on the link (http://tools.google.com/dlpage/gaoptout?hl=de) below and download and install the browser plug-in that is available there.
As an alternative to the browser plug-in, you can prevent the collection of your data by Google Universal Analytics by clicking on the link below:
Disable the collection of data by Google Analytics for this website
This will activate an opt-out cookie that prevents the future collection of your data when you visit this website. For more information, see http://tools.google.com/dlpage/gaoptout?hl=de or http://www.google.com/intl/de/analytics/privacyoverview.html (general information about Google Analytics and data privacy).
Please note that on this website Google Analytics was extended by the code »gat._anonymizeIp();« to ensure an anonymized collection of IP addresses (referred to as IP masking).

c) Google Maps
This website uses the Google Maps service via an API which is operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland To use the functionalities of Google Maps it is necessary to store your IP address. This information is usually transmitted to one of Google’s servers in the USA and stored there. We don’t have any influence on the transmission of this data. For Google’s data privacy statement, see https://policies.google.com/privacy?hl=en&gl=en.

d) YouTube
This website uses plugins from YouTube which is operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland (“Google”). For Google’s data privacy statement, see https://policies.google.com/privacy?hl=en&gl=en.

We operate social media accounts (Facebook, Instagram, XING) to inform customers, potential customers, and users about our products and services. In this connection, your data may be processed outside of the European Union which may possibly complicate the enforcement of the protection of your privacy rights. Providers in the USA who are certified under the EU-US Privacy Shield framework have committed themselves to maintain levels of protection that are comparable with those in the EU.
The operators of these social media platforms process the data of their users for advertising purposes or for market research purposes. The collected data can be used for user profiling to place advertisements that correspond to the presumed interests of the users. For this, they also use cookies that collect data about and analyze your usage behaviour.
We process personal data on the basis of our legitimate interest in effective information of users and in communicating with them.
To exercise your privacy rights, you can contact us or the respective operators of a platforms. If you contact us, we will forward your request to the respective provider because only providers can access their data to provide access or take measures.

We operate accounts on the following social media platforms:

Facebook (Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland) based on an agreement on the joint processing of personal data. You will find Facebook’s data privacy statement at https://www.facebook.com/about/privacy/ and specific information on pages at https://www.facebook.com/legal/terms/information_about_page_insights_data. Facebook is certified under the EU-US Privacy Shield framwork. For more information, see: https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active. As a Facebook user, you have an “Opt-out” option: https://www.facebook.com/settings?tab=ads

Instagram (Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA). A data privacy statement and instructions on how to opt out are available at http://instagram.com/about/legal/privacy/.

XING (XING AG, Dammtorstraße 29-32, 20354 Hamburg, Germany) A data privacy statement and instructions on how to opt out are available at https://privacy.xing.com/de/datenschutzerklaerung

We do not disclose your personal data to third parties, unless you have consented to the transfer of your data or we are entitled or obligated to disclose your data based on statutory provisions and/or official or court orders. Including but not limited to, this may involve the provision of information for the purpose of law enforcement, to prevent threats or to enforce intellectual property rights.

Within our group of companies, your data is transmitted to certain companies if your request requires this or if these companies process the data centrally for the companies affiliated with the group.

Any information that you submit to us is stored on servers that are located in the European Union. We secure our website and other systems through technical and organizational measures against loss, destruction, access, modification, or dissemination of your data through unauthorized persons.

You are entitled to:
- Obtain information free of charge about the personal data we retain about you (right of access);
- Demand confirmation whether we process personal data relating to you (right to confirmation);
- Demand from us to immediately delete the personal data relating to you to the extent that their processing is no longer required and that any further requirements of the GDPR with respect to erasure are fulfilled (right to erasure);
- Demand immediate correction and completion of incorrect personal data relating to you (right to correction);
- Demand the restriction of processing of your personal data (right to restriction of processing);
- Obtain the personal data relating to you in a structured, customary, and machine-readable format (right to data portability);
- Object to the processing of your personal data (right to objection);
- Not being subjected to a decision that is exclusively based on automated processes – including profiling – that legally affects you or significantly impairs you in a similar way (right to decisions on a case-by-case basis);
- Withdraw your consent to the processing of your personal data in the future at any time;
- Lodge a complaint with the supervisory authority in charge of data protection if you are of the opinion that the processing of the personal data relating to you violates the GDPR (right to lodge a complaint).
For any further information on your rights, please contact our data protection officer.

We process and store personal data only until their purpose is fulfilled, and in no event longer than the statutory retention and storage periods. After their purpose is fulfilled or the statutory retention and storage periods have expired, the personal data are deleted or made unavailable in accordance with the data privacy requirements.

You will find this information at Information pursuant to Art. 13 / Art. 14 GDPR about the processing of your data and your rights in accordance with the EU General Data Protection Regulations