Data Protection Statement
1. Data Protection at a Glance
General Information
The following information gives a simple overview of what happens to your personal data when you visit our website. Personal data is any data that would allow you to be identified personally. Detailed information about data protection can be found in our data protection statement below.
Data collection on our Website
Who is responsible for data collection on this website?
Data processing on this website is carried out by the website operator. The website operator’s contact details can be found in the legal notice on this website.
How do we collect your data?
Some of the data we collect about you will be data that you provide us with yourself. This may, for example, involve data that you enter in a contact form.
Other data shall be collected automatically by our IT systems when you visit the website. This is technical data in particular (e.g. about your internet browser, operating system or time that you access our website). This data shall be collected automatically as soon as you go on to our website.
What do we use your data for?
Some of the data will be collected so that we can ensure that you do not encounter any problems during your time on the website. Other data may be used to analyse your behaviour as a user of the website.
What rights do you have regarding your data?
You have the right to obtain, free of charge and whenever you choose, information about the source of the personal data kept about you, the recipient of the data and the reason why your personal data has been processed. You also have the right to request that incorrect data is rectified, that access to your data is blocked or that your data is erased. You can contact us at any time about this and any other questions regarding personal data at the address given in the legal notice. You also have a right of appeal to the competent supervisory authority regarding anything to do with your personal data.
Analysis tools and tools belonging to third-party providers
When you visit our website, your browsing behaviour may be statistically analysed. This will mostly be done by cookies and so-called analytics programs. Your browsing behaviour will usually be analysed anonymously; there will be no way of tracing it back to you. You can object to your browsing behaviour being analysed or you can prevent it happening by not using certain tools. You can find detailed information about this in the following data protection statement.
You can object to analysis of your browsing behaviour. You will be informed about the opportunities to object in this data protection statement.
2. General Information and Mandatory Information
Data protection
The operators of these pages take the protection of your personal data very seriously. We will process your personal data in confidentiality and in accordance with statutory data protection requirements and this data protection statement.
When you use this website, a variety of personal data will be collected. Personal data is any data that would allow you to be identified personally. This data protection statement explains what data we collect and what we use it for. It also explains how and for what purpose we do this.
Please note that data transfer over the internet (e.g. through email communication) may feature vulnerabilities. It is not possible to protect data completely against third party access.
Information about the data controller
The controller responsible for data processing on this website is:
Ferdinand Bilstein GmbH + Co. KG
Wilhelmstr. 47
58256 Ennepetal
Phone: 02333 911-0
E-Mail: info@bilsteingroup.com
The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data (such as names, email addresses, etc.).
Withdrawing your consent to data processing
A lot of data processing operations can only take place with your express consent. You can withdraw your consent at any time. All you have to do is send us a simple email. The legality of any data processing carried out before you withdraw your consent will not be affected by withdrawal of your consent.
Right to lodge a complaint with the competent supervisory authority
The data subject has the right to lodge a complaint with a supervisory authority regarding any infringement of
data protection legislation. The responsible supervisory authority in data protection matters is the state data
protection officer of the federal state in which our company has its registered office. A list of data
protection officers and their contact details can be found at the following link:
https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html
Right to data portability
You have the right to have data that we process by automated means with your consent or for the performance of a contract to be transmitted to you or to a third party in a commonly used, machine-readable format. If you require the data to be transferred directly to another controller, this will only be done if it is technically feasible.
Access, blocking and erasure
You have the right to be given, free of charge and whenever you choose, information about any personal data kept about you, the source of the data, the recipient of the data, and the reason why your personal data was processed, and you have the right to ask for the data to be rectified or erased, and access to it blocked. If you have any questions about this or any other matters relating to personal data, you can contact us at the address given in the legal notice.
3. Data Protection Officer
Legally prescribed data protection officer
We have appointed a data protection officer for our company
Sascha Hasselbach
c/o EDV-Fortress
Kronprinzstr. 47-49
40764 Langenfeld
www.datenschutz-extern-nrw.de
Phone: 02333911-0
E-Mail: support@bilsteingroup.com
4. Data Collection on our Website
Cookies
The websites may use so-called cookies. Cookies do not cause any damage to your computer and do not contain any viruses. The aim of cookies is to make our content more user-friendly, more effective and more secure. Cookies are small text files that are saved by your browser onto your computer.
Most of the cookies used by us are so-called “session cookies”. They are automatically deleted after the end of your visit. Other cookies may be saved on your end device until you delete them. These cookies enable us to recognise your browser the next time you visit.
You can configure your browser in order to be informed of the usage of cookies and only accept cookies on a case-by-case basis, to block acceptance of cookies in specific cases or in general and to enable the automatic deletion of cookies when the browser is closed. The functionality of this website may be impaired if cookies are deactivated.
Cookies that are needed to carry out electronic communication processes or to provide certain functions that you wish to use (such as the shopping cart function) are stored on the basis of Article 6(1)(f) of the GDPR. The website operator has a legitimate interest in storing cookies on your computer to allow it to provide you with a technically flawless, streamlined service. If other cookies (such as cookies for analysing your browsing behaviour) are stored on your computer, they will be treated separately in this protection statement.
Server Log Files
The site provider automatically collects and stores information in so-called “server log files”, which your browser sends to us automatically. This information includes:
- browser type and version
- operating system used
- referrer URL
- time of the server enquiry
- IP address
This data will not be cross-referenced with other data sources.
The legal basis for processing the data is Article 6(1)(f) GDPR. Our legitimate interest follows from the data collection purposes listed below: System security and stability.
Contact Form
If you submit queries to us using the contact form, the information you provide in the query form, including the contact data indicated by you therein, will be stored by us in order to process the query and for any follow-up questions. We shall not pass on this data without your consent.
The data entered into the contact form will therefore be processed solely with your consent (Article 6(1)(a) of the GDPR). You may withdraw your consent at any time. All you have to do is send us a simple email. The legality of any data processing operations already carried out before you withdraw your consent will not be affected by withdrawal of your consent.
The data you provide in the contact form will remain with us until you ask us to erase it, until you withdraw your consent to your data being stored or until the data no longer needs to be stored (once your enquiry has been processed, for example). Mandatory legal regulations - particularly concerning retention periods - will not affected.
Customer Enquiries
We use the ticketing system, Salesforce Marketing Cloud, represented in Germany by: Salesforce.com Germany GmbH, Erika-Mann-Str. 31, 80636 Munich, Germany, to process customer enquiries. To this end, essential data such as first name, surname, postal address, phone number, email address, are collected on our website, in order to be able to respond to your need for information.
The use of Salesforce Marketing Cloud takes place on the basis of Art. 6(1)(f) GDPR. The website operator has a legitimate interest on the most efficient customer management and customer communication possible. If appropriate consent has been obtained, the processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR and § 25 (1) TTDSG, insofar the consent includes the storage of cookies or the access to information in the user’s end device (e.g., device fingerprinting) within the meaning of the TTDSG. This consent can be revoked at any time.
Salesforce has Binding Corporate Rules (BCR) approved by the French data protection authority. These are binding corporate rules that legitimize the transfer of data from companies to third countries outside the EU and EEA. Details can be found here: https://compliance.salesforce.com/en/salesforce-bcrs .
For details, see the Salesforce Privacy Policy: https://www.salesforce.com/company/privacy/ .
The company is certified in accordance with the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the US, which is intended to ensure compliance with European data protection standards for data processing in the US. Every company certified under the DPF is obliged to comply with these data protection standards. For more information, please contact the provider under the following link: https://www.dataprivacyframework.gov/s/participant-search/participant-detail?contact=true&id=a2zt0000000KzLyAAK&status=Active
If you contact us by email or via the form on the website, we shall use the data transmitted by you only for processing your specific enquiry. The data provided shall be treated confidentially. The data provided and the message history with our service desk is stored for follow-up questions and contacting.
Use is optional and serves to improve and speed up our customer service. If you do not agree to data collection and data storage in Salesforce’s external system, we shall offer you alternative contact options for submitting service requests. You can find direct contact options via phone and post under the menu item “Contact” at the end of this page.
Data Processing
We have concluded a data processing agreement (DPA) for the use of the above-mentioned service. This is a contract mandated by data privacy laws that guarantees that they process personal data of our website visitors only based on our instructions and in compliance with the GDPR.
Registering on this Website
You can register on our website to use additional features on the site. We will only use the data you enter for the product or service that you register for.
The mandatory information requested during registration must be provided in full. Otherwise, we will reject your registration.
We will use the email address provided during registration to inform you about important changes, such as changes to our products and services or technical changes we need to make.
The data entered during registration shall be processed with your consent (Article 6(1)(a) GDPR). You can withdraw your consent at any time. All you have to do is send us a simple email. The lawfulness of any data processing already carried out will not be affected by withdrawal.
The data collected during registration will be stored while you are registered on our website and will then be deleted. Statutory retention periods will not be affected.
Registration with Facebook Connect
Instead of direct registration on our website, you can register with Facebook Connect. The provider of this service is Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland.
If you decide to register with Facebook Connect and click on the “Login with Facebook” / “Connect with Facebook” button, you will be forwarded automatically to the Facebook platform. There you can log in with your user information. This will link your Facebook profile with our website or our services. This linking will grant us access to your data stored on Facebook. This particularly includes:
- Facebook name
- Facebook profile and cover picture
- Facebook profile picture
- Email addresses stored on Facebook
- Facebook ID
- Facebook friends list
- Facebook likes (“Like” information)
- Birthday
- Sex
- Country
- Language
These data shall only be used to establish, provide and personalise your account.
You can find additional information in the Facebook Terms of Service and Facebook Data Policy. You can find these at https://de-de.facebook.com/about/privacy/ and https://www.facebook.com/legal/terms/.
5. Social Media
Twitter plug-in
Functions of the Twitter service are incorporated on our website. These functions are offered by Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA. By using Twitter and the "Retweet" function, the websites you visit are linked with your Twitter account and are made public to other users. Data is also transferred to Twitter as a result. We would like to point out that we, as the providers of this website, do not have any knowledge of the content of the data transferred or of its use by Twitter. You can find further information about this in Twitter’s Privacy Policy at: http://twitter.com/privacy.
You can change your privacy settings for Twitter in account settings at https://twitter.com/settings/account.
6. Analytics Tools and Advertising
Ferdinand Bilstein GmbH + Co. KG Tracking
This website uses functions from the web analysis services of Ferdinand Bilstein GmbH + Co..
Ferdinand Bilstein GmbH + Co uses so-called “cookies”. These are text files saved on your computer which make it possible to analyse how you use this website. The basis for storing Ferdinand Bilstein GmbH + Co. KG Tracking cookies and the usage of the this analyse-tool is Article 6(1)(f) of the GDPR. The website operator has a legitimate interest in analysing user behaviour in order to optimise its web content.
We store the following information:
- Local and country information
- Browser type and browser version
- Access time and duration
- Click and search behavior
- Favorite articles and vehicles
We store all information anonymously, ie. we have no possibility to match this information to a natural person.
Refusal of consent to data collection
You can prevent your data from being collected by Ferdinand Bilstein GmbH + Co. KG Tracking by clicking on the following link. This will enable an opt-out cookie, which will prevent your data from being collected in the event of future visits to this website: Disable partsfinder tracking.
Facebook Pixel
This website uses the Facebook visitor action pixel for conversion measurement. The provider of this service is Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. According to Facebook, however, the recorded data are also transmitted to the USA and to other third countries.
This makes it possible to track the behaviour of the page visitors after they have been redirected to the provider’s website by clicking on a Facebook ad. This way, the effectiveness of the Facebook ads can be evaluated for statistical and market research purposes and optimised for future advertising measures.
The collected data are anonymous for us as providers of this website. We cannot draw any conclusions as to the identity of the users. However, the data will be stored and processed by Facebook so that connection to the respective user profile is possible and Facebook may use the data for its own purposes of marketing according to the Facebook directive on the use of data (https://www.facebook.com/about/privacy/). This way, Facebook can allow placement of ads on Facebook pages and outside of Facebook. We as the page operator cannot influence this use of the data.
Facebook-Pixel is used based on your consent under point (a) of article 6 (1) GDPR; you may withdraw your consent at any time.
Data transmission to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here:https://www.facebook.com/legal/EU_data_transfer_addendum and https://de-de.facebook.com/help/566994660333381.
If the tool described here collects any personal data on our website and forwards them to Facebook, we and Facebook Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, are joint controllers for this processing activity (article 26 GDPR). The joint controllership is limited exclusively to collection of the data and their forwarding to Facebook. Further processing by Facebook after forwarding is not part of the joint controllership. Our joint obligations have been recorded in an agreement on joint processing activities. The wording of the agreement can be found at: https://www.facebook.com/legal/controller_addendum
In accordance with this agreement, we are responsible for issuing the data protection information when using the Facebook tool for safe implementation of the tool on our website under data protection law. Facebook is responsible for data security of the Facebook products. You can assert your rights as a data subject (e.g. request for access) regarding the data processed by Facebook with Facebook directly. If you assert any data subject rights with us, we are obligated to forward this request to Facebook. The privacy notice of Facebook contains further information on protection of your privacy: https://de-de.facebook.com/about/privacy/
In addition to this, you may deactivate the remarketing function “Custom Audiences” in the settings for advertisements under https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen. You need to be logged on at Facebook for this.
If you do not have any Facebook account, you may deactivate usage-based marketing of Facebook on the website of the European Interactive Digital Advertising Alliance: https://www.youronlinechoices.com/pt/your-ad-choices
Google Analytics
This website uses functions from the web analysis service Google Analytics. The provider is Google Inc., 1600 Amphitheatre Parkway Mountain View, CA 94043, USA.
Google Analytics uses so-called “cookies”. These are text files saved on your computer which make it possible to analyse how you use this website. The information generated by the cookie concerning your use of this website will as a rule be passed on to a Google server in the USA and saved at that location.
The basis for storing Google Analytics cookies is Article 6(1)(f) of the GDPR. The website operator has a legitimate interest in analysing user behaviour in order to optimise both its web content and the advertising shown with it.
IP anonymisation
We have activated the IP anonymisation function on this website. Google uses this to shorten your IP address within member states of the European Union or in other signatories to the Agreement on the European Economic Area before sending it to the USA. In exceptional cases only, the full IP address will be transmitted to a Google server in the USA and abbreviated at that location. Acting on behalf of the operator of this website, Google will use this information to analyse your use of the website, to compile reports on website activity and to provide other services associated with website usage and internet usage to the website operator. The IP address of your browser transmitted in relation to Google Analytics will not be cross-referenced with other data held by Google.
Browser plugin
You can prevent a cookie from being saved by selecting the appropriate setting in your browser software. However, please note that you will not be able to use all the functions of this website to their full extent in this case. In addition, you can prevent the data generated by the cookie relating to your usage of the website (including your IP address) from being by collected and processed by Google by downloading and installing the available browser plugin from the following link: https://tools.google.com/dlpage/gaoptout?hl=en.
Refusal of consent to data collection
You can prevent your data from being collected by Google Analytics by clicking on the following link. This will enable an opt-out cookie, which will prevent your data from being collected in the event of future visits to this website: Disable Google Analytics.
Further information on how user data is handled by Google Analytics may be found in the Google Privacy Policy: https://support.google.com/analytics/answer/6004245?hl=en.
Google reCAPTCHA
We use “Google reCAPTCHA” (hereinafter “reCAPTCHA”) on our website. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”).
reCAPTCHA is used to check whether data is being entered into our website (e.g. on a contact form) by a person or by an automated program. reCAPTCHA does so by analysing the website visitor’s behaviour based on various characteristics. This analysis begins automatically as soon as the website visitor accesses the website. reCAPTCHA uses various information for the analysis (e.g. IP address, length of the visitor’s stay on the website or mouse movements made by the user). The data collected during the analysis is shared with Google.
The reCAPTCHA analyses run entirely in the background. Visitors to the website are not informed that an analysis is being performed.
The data is processed on the basis of Article 6(1)(f) GDPR. The website operator has a legitimate interest in protecting its website against abusive automated data spying and spam.
You can find more information on Google reCAPTCHA and Google’s Privacy Policy at the following links: https://www.google.com/intl/de/policies/privacy/ and https://www.google.com/recaptcha/intro/android.html.
7. Newsletter
Newsletter data
If you would like to receive the newsletter offered on the website, we will require your email address as well as information allowing us to verify that you are the owner of the specified email address and that you have agreed to receive the newsletter. Additional data shall only be collected on a voluntary basis or not at all. This data is used exclusively to send the requested information and will not be shared with third parties.
The data entered into the newsletter subscription form is processed solely with your consent (Article 6(1)(a) GDPR). You may withdraw your consent to the storage of data, your email address and use thereof for sending of the newsletter by following the “unsubscribe” link in the newsletter. The lawfulness of any data processing operations already carried out will not be affected by withdrawal.
We will store the data you provide us in order to receive the newsletter until you cancel your subscription, and we will erase the data when you unsubscribe from the newsletter. Data that we have stored for other purposes (e.g. email addresses for the members area) will not be affected.
8. Plugins and Tools
YouTube
Our website uses plug-ins from the Google-operated site YouTube. The site operator is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA.
If you visit any of our pages featuring a YouTube plugin, a connection will be established with the YouTube servers. The YouTube server will thus be informed which of our pages you have visited.
If you are logged in to your YouTube account, you will allow YouTube to allocate your browsing history directly to your personal profile. You can prevent this by logging out of your YouTube account.
We use YouTube in the interests of presenting our online services in an appealing fashion. This represents a legitimate interest within the meaning of Article 6(1)(f) GDPR.
You can find further information on how user data is handled in YouTube’s privacy policy at: https://www.google.de/intl/de/policies/privacy.