Privacy policy

Data protection information from Boll & Kirch Filterbau GmbH

With this privacy statement, Boll & Kirch Filterbau GmbH (hereinafter: “We”) informs the user (hereinafter: “You”) about the personal data that is collected on our websites and how we use this data. You will also find out which information and control rights you have regarding your personal data.

This data protection information applies to the following websites: www.bollfilter.com and www.bollbrane.com

They also include information about our external online presence, such as social media profiles.

1. Responsible entity and data protection officer

The operator of the website is responsible for data protection:

Boll & Kirch Filterbau GmbH
Siemensstraße 10 – 14
50170 Kerpen
Tel.:+49 (0)2273-562-0
Fax: +49 (0)2273-562-223
Email: info@bollfilter.com
Internet: www.bollfilter.com

You can reach our data protection officer at the following email address: datenschutz@bollfilter.com

2. Provision of the website and log files

2.1. Description and scope of the data processing

Each time our website is accessed, our web server automatically collects information from the system of the accessing computer or end device.

The following data is collected:

  • User IP address
  • Operating system of the end device and browser type and version used
  • Date and time of access
  • Address of retrieved data (URL)
  • Website from which the access is made (referrer)

The abbreviated IP address, date and time of access and the accessed URL are stored as log files on our web server.

To provide our websites, we use the services of Hetzner Online GmbH (Industriestraße 25, 91710 Gunzenhausen, Germany). The service provider provides infrastructure services, computing capacity, storage space and database services, maintenance services and security services for this purpose. Insofar as it is necessary to process personal data, the hosting provider processes all data that arises as part of the use of our websites under the framework of an order processing contract.

2.2. Purpose and legal basis of the processing

The temporary storage of the IP address by our system is necessary in order to be able to deliver the website to your computer. Additional data is stored in the log files in order to ensure the operation and functionality of the website.

It is also used to optimise the website and to ensure the security of our information technology systems (e.g. attack detection).

The legal basis for the temporary storage in log files and the use of this data is Art. 6 Para. 1 f GDPR. Our interest here is to guarantee the integrity, confidentiality and availability of the data that is processed via this website.

2.3. Duration of storage

The above data will be deleted as soon as it is no longer necessary for the purpose for which it was collected. If data is collected for provision of the website, this is the case when the respective session has ended.

Log files are deleted automatically after 14 days.

3. Use of cookies and related technologies

3.1. Description and scope of the data processing

Cookies are used on our websites to enable the use of certain functions and in order to analyse the use of our website. Cookies are data sets or other storage notes that store information on end devices and read information from the end devices. We explain which information is stored and read by the cookies in each case below in connection with the corresponding functions.

3.2. Purpose and legal basis of the processing

Cookies and related technologies perform different functions. Cookies and related technologies are used by us for the following purposes:

  • Strictly necessary: Strictly necessary cookies help to make a website usable by enabling basic functions such as site navigation and access to secure areas of the website. This processing is necessary according to Section 25 (2) of the German Telecommunications and Telemedia Data Protection Act (TTDSG) in order to provide the website or to provide a telemedia service expressly requested by the user.
  • Functionality: Functionality cookies allow a website to remember information that affects how a website behaves or looks, such as your preferred language or the region you are in.
  • Performance: Performance cookies help is to understand how visitors interact with websites by collecting information and evaluating it as statistics, usually in aggregate form.
  • Marketing: Marketing cookies are used to track visitors on websites or on several websites. The aim is to show ads that are relevant and engaging to the individual user and therefore more valuable to publishers and third-party advertisers.

If cookies are not required for technical reasons, we only use them with the user's consent. We obtain consent the first time you visit our website using the consent management tool. If cookies also store or read personal data, the consent regarding the setting and reading of cookies also includes the consent according to Art. 6 Para. 1 b GDPR. You can revoke your consent at any time with effect for the future by accessing the consent management tool (banner under “Cookies”) again and adjusting your data protection settings.

3.3. Duration of storage

Cookies are stored on your end device either temporarily for the duration of a session (session cookies) or for a specific period or permanently (persistent cookies). The expiry of a cookie reflects the period in which a cookie stores data and makes it available for retrieval. Session cookies are automatically deleted when the browser is closed. You can also set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies in specific cases or in general and activate the automatic deletion of cookies when the browser is closed.

4. Consent Management (Usercentrics)

4.1. Description and scope of the data processing

Our websites use the Cookiebot consent management tool to obtain your consent for the storage of certain cookies in your browser or for the use of certain technologies and to document this in accordance with data protection regulations (referred to as “Consent Dialogue”). The provider of this technology is Usercentrics A/S (Havnegade 39, 1058 Kopenhagen, Denmark) When you access our website, the “CookieConsent” cookie is stored in your browser, which stores the consent you have given or the withdrawal of this consent. The following data is processed:

  • Consent/settings (consent ID, date and time of the selection, consent status, user agent)
  • Operating system of the end device and browser type and version used
  • IP address
  • Browser language setting
  • Approximate location

We use the geolocation options of the provider (CMP European CDN solution) so that no personal data is transmitted to so-called third countries.

4.2. Purpose and legal basis of the processing

The use of consent management is technically necessary and takes place in order to obtain the legally required consent for the use of cookies. The legal basis for this is Art. 6 Para. 1 c GDPR.

4.3. Duration of storage

The CookieConsent has an expiry time of one year from the granting or change of consent. If you delete the cookie earlier, the consent dialogue will appear again when you visit our websites.

5. Contact forms and customer contacts

5.1. Description and scope of the data processing

You can contact us via various contact forms and the email addresses and telephone numbers we have provided. In this case, the personal data provided with the request will be stored. The fields marked with an asterisk in the contact forms are mandatory. When making contact, the following personal data is usually processed:

  • Name and surname
  • Company
  • Position or activity
  • Company address
  • Professional contact details (email address, telephone number)
  • Communication content (messages)
  • Date and time of request
  • Anonymised IP address (Friendly Captcha)
  • Browser and operating system data (Friendly Captcha)
  • Anonymised counter per IP address (Friendly Captcha)
  • Website URL (Friendly Captcha)

In terms of our contact forms, we use the captcha technology from Friendly Captcha GmbH (Am Anger 3-5, 82237 Wörthsee, Germany) to prevent the use of our websites by automated scripts and programs. Friendly Captcha is both data protection- and also user-friendly, as it runs automatically without cookies and without user interaction. An arithmetical task is sent to the end device. IP addresses to which the arithmetical task is sent are only stored in hashed (one-way encrypted) form and do not allow us or Friendly Captcha to draw any conclusions regarding individuals.

5.2. Purpose and legal basis of the processing

The data will be collected and used to process your request and to contact you.

If data collection is necessary to initiate or execute a contract (e.g. registering for events), the legal basis is Art. 6 Para. 1 b GDPR. The same applies to the data processing required to provide and send content. If you contact us as part of an application, the legal basis is Art. 26 Para. 1 of the German Data Protection Act (BDSG). In this context, we would also like to inform you of the option of applying via our job portal and the data protection information that applies to this: 

https://recruitingapp-5608.de.umantis.com/Vacancies/367/DataProtection/1

If we contact you by email as part of an existing customer relationship regarding satisfaction surveys or for information about events by email, this is based on our legitimate interest in maintaining customer contact in accordance with Art. 6 Para. 1 f GDPR.

You have the right to object to the sending of further emails for these purposes at any time, without incurring any costs other than the transmission costs according to the basic rate, by using the unsubscribe link in the emails or by informing us of your objection using the contact details given above.

In addition, the data can be evaluated by us statistically in order to improve the content and its presentation on our website. This type of evaluation does not occur in relation to specific users, but rather in aggregated form. If the purpose is the improvement of our website and no separate consent is required from those affected, this processing is based on Art. 6 Para 1 f GDPR.

The legal basis for the processing within the framework of Friendly Captcha is our legitimate interest in protecting our website from improper access by bots, and thus protection from spam and attacks (e.g. DDoS) according to Art. 6 Para. 1 f GDPR.

5.3. Duration of storage

Personal data will be deleted as soon as it is no longer necessary for the purpose for which it was collected. For personal data sent via contact forms, this is the case when the respective conversation has ended. The conversation has ended when it can be inferred from the circumstances that the matter has been fully clarified. This may also include contacting you after processing regarding your satisfaction with our service or if you have a further interest in related services and products (e.g. invitations or information about upcoming trade fairs and other events).

You have the right to object to further contact by us at any time.

Data collected to process a contract will remain stored for the duration of the contract and until the statutory and contractual warranty and guarantee rights have expired. After this period has expired, we keep the information required under commercial and tax law for the legally specified periods (usually 6 to 10 years).

6. Statistical analysis (Google Analytics)

6.1.Description and scope of the data processing

We use the Google Analytics 4 analysis service on our websites, which is provided in the European Economic Area by Google Ireland Ltd. (Gordon House, Barrow Street, Dublin 4, Ireland). Various technologies such as cookies, beacons and pixels are used. You can find out more about this in the detailed view of the consent management tool.

We only use Google Analytics with activated IP anonymisation. This means that user IP addresses are shortened in European Union member states or in other states which are party to the Agreement on the European Economic Area. IP addresses will not be merged with other Google data.

Google processes website usage data on our behalf and contractually undertakes to take measures to ensure the security and confidentiality of the processed data.

During your visit to the website, the following data, among others, may be recorded:

  • Click path
  • Date and time of visit, duration of visit
  • IP address (shortened)
  • Pages visited
  • Referrer URL
  • Browser information, internet service provider
  • Hostname
  • Browser language
  • Screen resolution
  • Operating system
  • Interaction data
  • Mouse movements
  • Bounce rates
  • User behaviour
  • Visited URL

This data can also be transferred to Google LLC servers in the US. We would like to point out that the US does not have the same level of data protection as the EU. The legal basis for the data transfer to the US by Google Ireland Ltd. to Google LLC is formed by the EU standard contractual clauses, as suitable guarantees according to Art. 46 Para. 2 c GDPR, which are agreed for the transfer of personal data for the Google Analytics service between Google Ireland Ltd. and Google LLC:

https://business.safety.google/adsprocessorterms/sccs/p2p-intra-group/

More information on data protection in regards to Google Analytics can be found at https://support.google.com/analytics/answer/6004245. Information on data use by Google can be found at https://policies.google.com/privacy?hl=de.

6.2. Purpose and legal basis of the processing

The web analysis with Google Analytics 4 gives us a more detailed insight into the use of our website; for example, whether visitors come to our website via online advertisements or other advertising measures and whether we achieve certain goals (e.g. contacting us or watching a video). In addition to improving our website, we also want to improve our advertising and marketing measures. Google Analytics 4 also enables statistics to be generated with statements about the age, gender and interests of website users based on an evaluation of interest-related advertising and using third-party information. However, data collected via the "demographic characteristics" cannot be assigned to a specific person and therefore not to you personally.

The processing described, in particular the setting of Google Analytics cookies for the storage and reading of information from the end device you use in order to use the website, only occurs if you have granted your express consent for this according to Art. 6 Para. 1 a GDPR. We obtain this consent via the consent management tool. You can revoke your consent at any time for the future by accessing the consent management tool via the banner (“Cookies”) again and adjusting your cookie preferences.

6.3. Duration of storage

The data collected as part of the use of Google Analytics 4 is kept for 14 months and then deleted. Other non-personal or non-personally identifiable data may be stored in aggregate form indefinitely.

7. Social media (LinkedIn, Instagram, YouTube)

7.1.Description and scope of the data processing

We do not use any social media plugins on our websites. If our websites contain symbols from social media providers, we only use them to link to our presences on the social media networks of the respective providers. We may receive statistics about the use of our social media appearances. We cannot assign these so-called page insights to specific people. Data entered, in particular your user name and the content published under your account, will be processed by us insofar as we may reply to your publications and comments.

Social networks can usually analyse your user behaviour comprehensively when you visit their websites or a website with integrated social media content. Visiting our social media presences can therefore trigger numerous data protection-related processing operations by the social network. The data of users within social networks are usually processed for market research and advertising purposes and, if necessary, merged into profiles. We have no influence on the type and scope of the data processed for the purposes of the networks, the type of processing and the use or disclosure of this data to third parties.

We would like to point out that user data may be processed by networks outside the European Union. This can result in risks for users, as it may be more difficult to enforce user rights, for example.

7.2. Purpose and legal basis of the processing

Our social media appearances are intended to ensure that we have a presence on the internet that encompasses as many interest groups as possible. This is a legitimate interest according to Art. 6 Para. 1 f GDPR. You have the option of obtaining comprehensive information about our company on our own websites or of contacting us via alternative contact options if you do not wish your personal data to be processed by the networks.

The analysis processes initiated by the social networks may be based on different legal bases and terms of use, which must be specified by the social network operators. The data protection notice and further information are linked below.

7.3. Storage duration

We have no influence on the storage period of your data, which is stored by the operators of the social networks for their own purposes. Also, in the case of requests for information and the enforcement of data subject rights, we would like to point out that they can be enforced most effectively with the providers. Only the providers have access to user data and are able to take the appropriate measures and provide information directly.

7.4. Further information on social media presences

LinkedIn (LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland):

Instagram (Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland):

YouTube (Google Ireland Limited, Gordon House, 4 Barrow Street, Dublin, Ireland):

8. Your rights

You can assert your rights as a data subject with regards to your processed personal data at any time using the contact details given above. As a data subject, you have the right:

  • to request information about your data processed by us according to Art. 15 GDPR. In particular, you can obtain information about the processing purposes, the data category, the categories of recipients to whom your data was or will be disclosed, the planned storage period, the existence of a right to correction, deletion, restriction of processing or objection, the existence of a right of appeal, the origin of your data, if it was not collected from us, as well as the existence of automated decision-making including profiling and, if necessary, meaningful information about the details;
  • to immediately request the correction of incorrect data or the completion of your data stored by us according to Art. 16 GDPR;
  • request the deletion of your data stored by us according to Art. 17 GDPR, unless the processing is required in order to exercise the right to freedom of expression and information, to fulfil a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims;
  • to request the restriction of the processing of your data according to Art. 18 GDPR, if you dispute the accuracy of the data or the processing is unlawful;
  • to receive the data that you have provided to us in a structured, common and machine-readable format or to request transmission to another person responsible ("data portability"), according to Art. 20 GDPR;
  • to object to the processing according to Art. 21 GDPR if the processing is based on Art. 6 Para. 1 Clause 1 e or f GDPR. This is particularly the case when the processing is not required for the fulfilment of a contract with you. Unless it is an objection to direct advertising, we ask that you explain the reasons why we should not process your data as we have done when exercising such an objection. In the event of your justified objection, we will examine the situation and will either stop or adjust the data processing or show you our compelling legitimate reasons for continuing the processing;
  • according to Art. 7 Para. 3 GDPR, your consent once given - i.e. your voluntary, informed and unequivocally made clear by a declaration or other clear affirmative action, that you consent to the processing of the personal data concerned for one or more specific purposes - can be revoked at any time, if such consent has been given. As a result, we are no longer allowed to continue the data processing based on this consent in the future and
  • in accordance with Art. 77 GDPR, you have the right to complain to a data protection supervisory authority about the processing of your personal data by our company.

9. Wistleblower System

To the information on Data Protection in the Whistleblower system of Boll & Kirch Filterbau GmbH.

To the wistleblower System: https://boll.online-hinweisgeber.de/en

 10. Changes to the privacy statement

As part of the further development of data protection law and technological or organisational changes, our data protection notice is checked regularly for any need for adjustment or supplementation. You will be informed of changes in particular on this website.

This data protection notice is dated 12/05/2023.

Contact