Data protection statement

1. Basic information

You can print out or save this document using the standard functionality in your browser (generally by clicking "File" > "Save as") or the website's implemented print function.

If we use contracted service providers for individual functions on our website, or would like to use your data for marketing purposes, we will inform you of the details of the relevant procedures below. This also includes the stipulated criteria for the duration of storage.

Unless otherwise described in the following sections, the legal basis for processing personal data arises from the necessity of processing for the provision of the functionalities requested by you on this website (Article 6(1)(b) General Data Protection Regulation, GDPR).

2. Controller / Data Protection Officer

The controller pursuant to Article 4(7) GDPR is

Busch Dienste GmbH
Schauinslandstrasse 1
D-79689 Maulburg

hereinafter referred to as "Busch", "we" or "us".
Additional information is available in our site notice.

You can contact the Busch data protection officer as follows: dpo@buschvacuum.com or using our postal address and adding "Attn: Data Protection Officer".

3. Categories of processed data and data subjects

Category of processed data

• Master data (e.g. master data for customers, such as names, addresses)
• Contact data (e.g. e-mail, phone numbers)
• Content-related data (e.g. input text, photographs, videos)
• Contractual data (e.g. object of a contact, term, customer category)
• Payment data (e.g. bank details, payment history)
• Usage data (e.g. pages visited, content-related interests, times of access)
• Meta/communication data (e.g. device information, IP addresses)

Categories of data subjects

• Visitors and users of the website and other online presence
• Customers, potential customers and business partners
• Newsletter subscribers and direct marketing in existing customer relationships

In the following, these data subjects are referred to collectively as "users".

4. Purpose of data processing

We use your personal data

• To make our website and online presence available, including their functions and content.
• To create and manage your personal customer account.
• To identify you as a contract party.
• To process your online purchases from us. This includes your purchase orders and purchases returned via our online store, the processing of payments, delivery status notifications and any delivery problems. Furthermore, your personal data can be used to process complaints or deal with cases related to your defect warranty rights.
• To respond to contact requests and to communicate with users.
• To assert, enforce, exercise or defend ourselves against any legal claims and legal disputes, and to uncover, investigate and prevent criminal activity.
• To implement security measures.
• To measure our reach.
• To employ direct marketing strategies, e.g. in the form of an e-mail newsletter or postal advertising.
• To conduct surveys on satisfaction with our products and services, and to analyze their results.

5. Provision of the website and log files

When our website is used purely for informational purposes, (i.e. if you do not register or otherwise provide us with information), we only collect the personal data that your browser automatically transmits to our server. When you access our website, we collect the following data that are technically necessary for us to display our website to you and guarantee its stability and security (the legal basis for this is Article 6(1)(f) GDPR):

• IP address
• Date and time of request
• The time difference in relation to Greenwich Mean Time (GMT)
• Content of request (specific page)
• Access status / HTTP status code
• Data volume transferred in each case
• Website from which the request is received
• Browser name
• Operating system and its interface
• Browser language and version.

User IP addresses are erased or anonymized after their use has ended. In the case of anonymization, IP addresses are changed in such a way that individual information regarding personal or material circumstances can no longer be allocated to an identifiable natural person, or identifying it with a natural person would involve a disproportionate amount of time, costs, and personnel.

6. Cookies

This website uses cookies. We use cookies to personalise content and ads, to provide social media features and to analyse our traffic. We also share information about your use of our site with our social media, advertising and analytics partners who may combine it with other information that you’ve provided to them or that they’ve collected from your use of their services. You consent to our cookies if you continue to use our website.

Cookies are small text files that can be used by websites to make a user's experience more efficient.

The law states that we can store cookies on your device if they are strictly necessary for the operation of this site. For all other types of cookies we need your permission.

This site uses different types of cookies. Some cookies are placed by third party services that appear on our pages.

You can at any time change or withdraw your consent from the Cookie Declaration on our website.

Learn more about who we are, how you can contact us and how we process personal data in our Privacy Policy.

Please state your consent ID and date when you contact us regarding your consent.

Your consent applies to the following domains: www.buschvacuum.com

Your current state: Allow all cookies.
Your consent ID: alPjVxlZip4J+hwbFKWGzilS0UV6GEnAe58x098XUztoZ0hOLJBKIA==
Consent date: Saturday, June 5, 2021, 10:18:47 AM GMT+5:30
Change your consent | Withdraw your consent

Cookie declaration last updated on 6/2/21 by Cookiebot:

Necessary (27)
Necessary cookies help make a website usable by enabling basic functions like page navigation and access to secure areas of the website. The website cannot function properly without these cookies.

Preferences (11)
Preference cookies enable a website to remember information that changes the way the website behaves or looks, like your preferred language or the region that you are in.

Statistics (18)
Statistic cookies help website owners to understand how visitors interact with websites by collecting and reporting information anonymously.

Marketing (29)
Marketing cookies are used to track visitors across websites. The intention is to display ads that are relevant and engaging for the individual user and thereby more valuable for publishers and third party advertisers.

Unclassified (26)
Unclassified cookies are cookies that we are in the process of classifying, together with the providers of individual cookies.

7. Use of the online shop

If you would like to place an order in our online shop, you will be required to provide the personal data that we need for processing your order so that the contract can be concluded. You will be required to register in order to enable this. The information required for this can be found in the online form. The mandatory information for processing contracts is marked separately; additional information is voluntary. Following our checks, the account (customer login) will be activated. We will process the data you have provided for the purposes of dealing with your order. To this end, we may transfer your payment details to our banks. The legal basis for this is Article 6(1)(b) GDPR.

We may also process the information you have provided for the purposes of informing you of additional interesting products from our portfolio, or to send you e-mails with technical information. The legal basis for this is Article 6(1)(f) GDPR.

Due to specifications under commercial and tax law, we are required to store your address, payment, and order data for a duration of ten years. However, after the expiry of the statutory period of limitation we undertake a restriction of processing, meaning your data is only used for compliance with statutory retention obligations.

The order process is encrypted using TLS technology in order to prevent unauthorized access to your personal data by third parties.

8. Newsletter, direct marketing

Newsletter subscriptions

• For the sending of newsletters, we ask for your explicit consent and approval in relation to this data protection statement. With your consent, you can subscribe to our newsletter via which we inform you of current offers from our portfolio. We collect the following data in this process:
  • Your e-mail address
  • Country
  • Language
• We use the double-opt-in procedure for our newsletter registration. This means that after you register, we send an e-mail to the address provided, asking for confirmation that you would like to receive the newsletter. If you do not confirm your registration, your information will be blocked, and erased after one month. In addition, we store the addresses used in each case, and the times of registration and confirmation. The purpose of this procedure is to verify your registration and where applicable to be able to clarify possible misuse of your personal data.
• After you have confirmed, we store your e-mail address for the purpose of sending you the newsletter. The legal basis for this is Article 6(1)(a) GDPR.
• You may at any time withdraw your consent to receiving the newsletter, and unsubscribe from the newsletter. You can declare your withdrawal of consent by sending an e-mail to newsletter@news.buschvacuum.com or by messaging the contact details stated in the site notice.
• Your personal data will be erased. Your e-mail address will be stored for technical reasons in order to prevent you from receiving further newsletters from us in the future.

Sending of newsletters following a product purchase

• If you have purchased products from our online shop, we will send you our newsletter, even if you have not previously signed up to our newsletter subscription. In this case, the newsletter will be sent to the e-mail address you specified for your purchase. These newsletters are used to advertise products similar to the one you purchased in our online shop and to conduct customer satisfaction surveys. For these personalized product recommendations, we select products in line with legal requirements based on your previous purchasing experience and areas of interests, which we identify by taking into account the interests, preferences, and product-related interests that you have shared with us.
• Your e-mail address is stored in our newsletter address database for this purpose. To verify the legitimacy of our newsletter, we also save the IP address you used for your purchase and the time of your purchase.
• The legal basis for the aforementioned processing procedures related to the sending of our newsletter after a purchase is Article 6(1)(f) GDPR. Our legitimate interest in the processing of data is the direct marketing of our products to our customers and their interest in offers and deals.
• You are able to object to receiving the newsletter at any time. You can withdraw your consent by clicking on the link provided in every newsletter e-mail or by sending a message to the contact details provided at the beginning of this data protection statement.

Newsletter tracking

• Please note that we assess your user behavior when we send the newsletter. For this assessment, the sent e-mails contain web beacons and/or tracking pixels, which are single-pixel image files that are stored on our website. To perform the assessment, we link the data listed under the Provision of the website and log files section of this data protection statement and web beacons to your e-mail address and individual ID.
• Any links included in the newsletter also contain this ID. Using the data collected from this process, we create a user profile so that the newsletter can be better tailored to our customers' interests. In doing so, we record when you read our newsletter, which links you click on in the newsletter, and use the results to deduce your personal interests. In certain circumstances, we link this data to your activities on our website.
• The legal basis for the tracking processes described above is your consent according to Article 6(1)(a) GDPR, provided you have signed up to our newsletter subscription.
• If our newsletter is sent after a purchase without you registering for the newsletter separately and providing your express consent, the legal basis for the tracking processes described above is Article 6(1)(f) GDPR. Our legitimate interest in the processing of data for tracking is our need to be able to better tailor our newsletter to our customers' interests. We only record statistical data regarding the use of our online presence. Usage data is anonymized and pseudonymized. For the latter, the IP address is anonymized immediately after being processed and before being saved. The legal basis for the processing of data is our legitimate interest (in the EU: Article 6(1)(f) GDPR).
• You can object to the aforementioned tracking process at any time by unsubscribing from our newsletter; you can unsubscribe by clicking on the link provided in every newsletter e-mail or by sending a message to the contact data provided in this data protection statement. The information collected through tracking will be stored for as long as you are subscribed to the newsletter. Once you have unsubscribed, we store anonymous data for statistical purposes only.
• Furthermore, tracking is not possible if you have disabled the image display function in our e-mail program by default. In this case, you will not see our newsletter in full and may not be able to use all the functions in the newsletter. The aforementioned tracking process will be carried out if you display the images manually.

Print advertising

• We also use the data that you provide for a purchase to send print media.
• The aforementioned processing procedures, in particular the process to send out print media, are performed using services and IT systems from various service providers, who we have commissioned as our processors.
• Legality is ensured by concluding contracts in accordance with Article 28 GDPR and the EU model clauses.
• The legal basis for the aforementioned processing procedures is our legitimate interest after a purchase according to Article 6(1)(f) GDPR. Our legitimate interest in the processing of data is the marketing of our products and services and the improvement of customer relationships.

9. Contact form, complaint form and e-mail contact

There is a contact form on our website that can be used for making contact with us electronically. First, please use the drop-down menu to select your country and therefore the correct local point of contact for your enquiry. Your request will automatically be sent to the locally relevant sales company within Busch Group. Our website also contains a complaint form, which can be used to report complaints to us. To do this, fill out the complaint form under the link and send it off. Your request will automatically be sent to the responsible Service department within Busch Group. If a user chooses one of these options, the data entered in the online form shall be transferred to us and stored. The mandatory information required for the contact request is marked separately; additional information is voluntary.

In addition, the following data is stored at the time of sending:

• User's IP address
• Date and time the form was sent

To enable your data to be processed, your consent is collected and reference is made to this data protection statement in the context of the send procedure. Alternatively, you may contact us using the e-mail address provided. In this case, the user's personal data transferred with the e-mail is stored. The data is used exclusively for processing the conversation.

The legal basis for processing the data is the presence of the user's consent; Article 6(1)(a) GDPR. The legal basis for processing the data that is transferred in the course of sending an e-mail is Article 6(1)(f) GDPR. If the request is geared towards concluding a contract, the additional legal basis for processing is Article 6(1)(b) GDPR. In the event of complaints, the legal basis is Article 6(1)(b) GDPR regarding the proper handling of purchase orders and also a legitimate interest in accordance with Article 6(1)(f) GDPR. Our legitimate interest is based on the ongoing improvement and advancement of quality management and customer support.

The processing of personal data from the input screen exclusively serves our processing of the contact or handling of the complaint. In the event of users contacting us by e-mail, there is also a necessary legitimate interest in the processing of data. The other personal data processed during the sending procedure are used to prevent misuse of the contact form and to ensure the security of our information systems. In the case of the complaint form, the other personal data processed serve to implement the complaint process as best as possible.

The data are deleted as soon as they are no longer necessary for achieving the purpose for which they were captured. This is the case for personal data entered on the contact form or complaint form and data that has been sent by e-mail if the respective conversation with the user has ended. The conversation has ended if, based on the relevant circumstances, it can be seen that the relevant matters have been finally clarified. The IP address additionally collected during the sending procedure is anonymized directly after the sending procedure (see the section Web analytics services of this data protection statement).

We use the service JotForm Inc. to create and manage our forms. Information regarding the third-party provider: JotForm Inc. 111 Pine St. Suite 1815, San Francisco, CA 9411 https://eu.jotform.com/. The processing of data is explained in JotForm Inc.'s privacy statement under the section PRIVACY FOR FORM RESPONDENTS ( https://www.jotform.com/privacy/). The processed data are encrypted for transport. The data are transmitted to the USA on the basis of the EU-US Privacy Shield. JotForm participates in the EU-US Privacy Shield and is certified accordingly. Further information is available in JotForm's privacy statement under the section "Privacy Shield (relevant to our EU users)".

10. Live Chat

Our websites use live chat software from LiveChat, Inc., which is designed to enable the user to have a personal conversation with us in real time. LiveChat uses cookies (see above), which enable the use of our websites to be analyzed. By participating in the chat, you consent to the processing of your personal data on the basis of this data protection statement. In this context, data processing is carried out on the basis of Art. 6(1)(a) GDPR. The website user is able to technically prevent web analysis by deactivating JavaScript and cookies in their web browser. Details of the required settings can be found in the instructions for the various browsers. For more information about LiveChat's terms of use and data protection, please visit https://www.livechatinc.com/privacy-policy.

LiveChat, Inc. has signed up to and follows the EU-U.S. Privacy Shield framework agreement and the Swiss-U.S. Privacy Shield framework agreement in accordance with the decree by the U.S. Department of Commerce regarding the collection, use, and retention of personal information transferred from the European Union and Switzerland to the United States. LiveChat, Inc. has certified to the Department of Commerce that it adheres to the Privacy Shield Principles.

Information regarding the third-party provider: LiveChat, Inc. Attn: Privacy Officer, One International Place, Suite 1400, Boston, MA 02110-2619, USA, support@livechatinc.com

11. Hotjar

We use Hotjar in order to better understand our users' needs and to optimize this service and experience. Hotjar is a technology service that helps us better understand our users' experience (such as how much time they spend on which pages, which links they choose to click, what users do and don't like, etc.) and this enables us to build and maintain our service with user feedback. Hotjar uses cookies and other technologies to collect data on our users' behavior and their devices (in particular device's IP address (captured and stored only in anonymized form), device screen size, device type (unique device identifiers), browser information, geographic location (country only), preferred language used to display our website). Hotjar stores this information in a pseudonymized user profile. Neither Hotjar nor we will ever use this information to identify individual users or to match it with further data on an individual user. For further details, please see Hotjar's privacy policy. To access it, please click this link.

You can opt out of the creation of a user profile, Hotjar's storing of data about your usage of our site and Hotjar's use of tracking cookies on other websites. To do this, please click on this link.

Hotjar Limited, is a private limited liability company registered under the Laws of Malta with company number C 65490, having its registered address situated at Level 2, St Julian's Business Centre, 3, Elia Zammit Street, St Julian's STJ 1000, Malta. https://www.hotjar.com ("Hotjar")

Further information on Hotjar Privacy Policy ( https://www.hotjar.com/legal/policies/privacy) and Hotjar Commitment to GDPR ( https://www.hotjar.com/legal/compliance/gdpr-commitment).

Processing of your personal data is necessary for the purposes of legitimate interests (Article 6(1)(f) GDPR).

12. LinkedIn

We use the LinkedIn Conversion Tracking and Retargeting functionality of LinkedIn Ireland, Wilton Plaza, Wilton Place, Dublin 2, Ireland ("LinkedIn") to measure the results of our advertising campaigns on LinkedIn, make them more relevant, and re-target visitors of our website with personalized ads on LinkedIn or other websites.

For this purpose, we have integrated a tracking pixel (LinkedIn Insight tag) on our website. The LinkedIn Insight tag enables LinkedIn to store a third-party cookie in your browser and to collect and store the following information: Your IP address and usage patterns on our website and other websites that contain a LinkedIn tracking pixel. If you sign into your LinkedIn account, LinkedIn may combine the collected data with your account and serve you targeted advertising on behalf of us or other advertisers. You might see those advertisements on LinkedIn or on third party websites.

The collected information may also be transferred to LinkedIn's servers in the USA (LinkedIn Corporation, 2029 Stierlin Court, Mountain View, California 94043, USA). As LinkedIn adheres to the principles of the the EU-US Privacy Shield this transfer is based on Art. 45 GDPR ( https://www.privacyshield.gov/EU-US-Framework).

Website visitors remain anonymous to us since we only receive access to tracking data in an aggregated form.

You can find further information on how to disable interest-based and targeted advertising with LinkedIn here: Advertising Preferences of LinkedIn account holders and guests. Please refer to LinkedIn's privacy policy ( https://www.linkedin.com/legal/privacy-policy ) for more information about LinkedIn's use of personal data.

Processing of your personal data is necessary for the purposes of legitimate interests (Article 6(1)(f) GDPR).

13. YouTube

Our website uses the YouTube embed function in conjunction with the "Privacy Enhanced Mode" function to play videos from the provider YouTube. YouTube is a service provided by Google LLC., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA ("Google").

To allow an embedded video to be played, our website establishes a connection to YouTube's server. YouTube videos are embedded on our website using the "Privacy Enhanced Mode" function. This "Privacy Enhanced Mode" function is provided by YouTube and YouTube thereby ensures that no cookies containing personal data are stored on your device. However, your IP address and the website you visited is recorded and processed by YouTube when you play a video. Nevertheless, this information cannot be allocated to you personally provided that you are not logged into YouTube or any other Google service when you accessed the video. If you are logged into YouTube or Google, however, YouTube will assign the connection information to your YouTube account and only cookies that do not contain personal data will be stored on your device. If you wish to prevent this from happening, you either have to log out of YouTube before visiting our website or change the relevant settings in your user account.

Furthermore, a connection to the Google "DoubleClick" network will be established each time you visit this website, regardless of whether you play a video or not. Connecting to the Google network will trigger further data handling processes, over which we have no influence.

According to its certification under the EU-U.S. Privacy Shield data protection agreement, Google LLC (which is based in the USA) and its subsidiary YouTube guarantee that they adhere to the EU's data protection requirements.

Further information about YouTube's privacy policy is available at: https://policies.google.com/privacy?en&hl=en

14. Web analytics services

Busch uses the following third party web analytics and tracking services as described in detail below. The legal basis for this is Article 6(1)(f) GDPR.

Google Analytics

• This website uses Google Analytics, a web analytics service provided by Google, Inc. ("Google"). Google Analytics uses cookies, which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of the website will generally be transmitted to and stored by Google on servers in the United States. If IP anonymization is activated on this website, the IP address will however be truncated by Google in advance within member states of the European Union or in other states that are party to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the United States and be truncated there. Google will use this information on behalf of the operator of this website in order to assess the use of the website, collect reports of our website activities, and to provide additional services associated with website and Internet usage with respect to the website operator.
• The IP address transmitted by your browser in the context of Google Analytics will not be associated with other Google data.
• You can prevent the storage of cookies by selecting the appropriate settings in your browser; however, please note that if you do this you may not be able to use all functions on this website to their full extent. In addition, you can prevent data created by the cookie and related to your use of the website (including your IP address) from being transmitted to Google, and prevent this data being processed by Google by downloading and installing the browser plugin provided by Google: http://tools.google.com/dlpage/gaoptout?hl=en.
• This website uses Google Analytics with the "_anonymizeIp()" extension. This means that the IP addresses are processed in truncated form, which means that it is not possible to relate them to an individual. If a link to an individual is associated with the data collected concerning you, this will be immediately excluded and the personal data will therefore be immediately erased.
• Demographic features of Google Analytics
  This website uses the "demographic features" function of Google Analytics to create reports containing information about age, gender and interests of visitors. This data comes from interest-based advertising by Google and from visitor data from third-party providers, including Google Accounts, Gmail, YouTube and Google Display Network. The data cannot be assigned to a specific person. You may opt out of this functionality at any time by using the ad settings in your Google Account or opt out of the collection of your information by Google Analytics as described in this section.
• We use Google Analytics to analyze the use of our website and improve it on an ongoing basis. We can use the statistics we obtain to improve our offering, and to make it more interesting for you as a user. For the exceptional cases in which personal data is transferred to the USA, Google has committed to the EU-U.S. Privacy Shield ( https://www.privacyshield.gov/EU-US-Framework). The legal basis for the use of Google Analytics is Article 6(1)(f) GDPR.
• Information regarding the third-party provider: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001. Terms of use: https://www.google.com/analytics/terms/, data protection overview: https://support.google.com/analytics/answer/6004245?hl=en, as well as the data protection statement: https://policies.google.com/privacy?hl=en.

Google AdWords Conversion Tracking

This website uses Google AdWords Conversion Tracking. The Conversion Tracking cookie is activated in the user's browser by Google AdWords when you click one of the adverts transmitted by Google. These cookies expire after 30 days. They are not used to collect personal identification data. If the user visits a certain page on this website and the cookie has not yet expired, Google and Busch will know that the user has clicked on the ad and has been directed to that page. Every Google AdWords customer receives a different cookie. As a result, cookies cannot be traced via the AdWords customer's website. Conversion statistics are generated from the data collected by the conversion cookies for AdWords customers who have selected conversion tracking. AdWords customers are notified of the total number of users who have clicked on the ad and have been redirected to a conversion tracking page. However, they do not receive any information that they can use to personally identify users. If you do not wish to participate in the tracking program, you can easily refuse to use this program by disabling the Google conversion tracking cookie in the personal settings of your Internet browser. You can also deactivate conversion tracking cookies at any time by setting your browser to block cookies from "googleadservices.com".

Google Tag Manager

• This website uses the Google Tag Manager as part of Google Analytics. Tags are small code elements on our website which are used, among other things, to measure traffic and visitor behaviour, capture the impact of online advertising and social media, use remarketing and targeting, and to test and optimize the website. Google Tag Manager is a solution that allows Busch to manage website tags via an interface. The Tag Manager tool itself (which implements the tags) is a cookie-free domain. The tool triggers other tags, which in turn may collect data. Google Tag Manager does not access this data. If deactivation has been implemented at domain or cookie level, it will remain in effect for all tracking tags implemented with Google Tag Manager.
• Further information on Google Tag Manager is available online at: https://www.google.com/analytics/tag-manager/use-policy/.

Google Analytics Remarketing

• Our website uses the functions of Google Analytics Remarketing together with the cross-device functions of Google AdWords and Google DoubleClick. The provider is Google Inc. 1600 Amphitheatre Parkway Mountain View, CA 94043, USA.
• This function enables the advertising target groups created with Google Analytics Remarketing to be linked with the cross-device functions of Google AdWords and Google DoubleClick. In this way, interest-related, personalized advertising messages that have been adapted to you depending on your previous usage and surfing behavior on one device (e.g. mobile phone) can also be displayed on another of your devices (e.g. tablet or PC).
  Once you give your permission, Google will link your web and app browsing history to your Google Account for that purpose. This way, the same personalized advertising messages can be delivered to every device you sign in with your Google Account.
• To support this feature, Google Analytics collects Google-authenticated ID's of users that are temporarily linked to our Google Analytics data to define and create cross-device ad targeting.
  You can permanently object to cross-device remarketing/targeting by disabling personalized advertising in your Google Account by following this link: https://www.google.com/settings/ads/onweb/
  Further information and the data protection regulations can be found in Google's data protection declaration at: https://policies.google.com/technologies/ads?hl=en-GB
  You can prevent the storage of cookies as further described in section Web analytics services in this data protection statement.

Bing Ads Conversion Tracking

• The online advertising program Bing Ads ( https://secure.bingads.microsoft.com/ -> English) uses Bing conversion tracking, an analysis service from Bing. When clicking an ad delivered by Bing, a cookie for conversion tracking (UET) is stored on your computer.
• UET (Universal Event Tracking) collects the following data described in the Microsoft Privacy Statement https://privacy.microsoft.com/en-us/privacystatement and Bing Ads retains it for 180 days. UET will also collect the IP address and the Microsoft cookie (with an expiration date of 13 months). This cookie contains a GUID assigned to the user's browser, and/or an ID assigned to a user if they logged in through their Microsoft account. In general, the cookie in the relevant domain and IP address are always passed with every http request and not just via UET. Bing Ads doesn't resell this data to third parties or share it with other advertisers.
• For the exceptional cases in which personal data is transferred to the USA, Microsoft has committed to the EU-U.S. Privacy Shield https://www.privacyshield.gov/welcome. The legal basis for the use of Bing Ads is Article 6(1)(f) GDPR.
• Information regarding the third-party provider: Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA. https://privacy.microsoft.com/en-us/privacystatement

15. Your rights

If personal data concerning you is processed, you are the data subject as defined by GDPR and you are due the following rights with respect to us as the controller:

• Rights in accordance with Article 15 et seqq. GDPR
  The data subject has the right to obtain from the controller confirmation as to whether personal data relating to him or her will be processed; if this is the case, he or she has right of access to such personal data and to the information specified in Art. 15 GDPR. Under certain circumstances, you have the right to rectification in accordance with Article 16 GDPR, the right to restriction of processing in accordance with Article 18 GDPR and the right to erasure ("right to be forgotten") in accordance with Article 17 GDPR. In addition, you have the right to the data you have provided being disclosed in a structured, commonly used and machine-readable format (right to data portability) in accordance with Article 20 GDPR, in as far as processing takes place with the aid of automated procedures, and is based on consent in accordance with point (1) of Article 6(1) or point (a) of Article 9(2) GDPR, or a contract pursuant to point (b) of Article 6(1) GDPR. With regard to the right to access and the right to erasure, the restrictions in accordance with sections 34 and 35 of the BDSG apply.
• Right to revoke consent according to Article 7 (3) GDPR
  You can revoke your consent to the processing of personal data at any time. This also applies to the revocation of declarations of consent that were given to us before the EU General Data Protection Regulation came into effect, i.e. before 25 May 2018. Please note that the revocation will only take effect in the future. Processing that took place before the revocation is not affected by this.
• Right to lodge complaints
  You have the option of contacting us or a supervisory authority for data protection to lodge a complaint, in particular in the member state of your place of residence, your place of work, or the place of the suspected breach.
• Right to object
  In addition to the rights specified above, you are also entitled to a right to object in accordance with Article 21 GDPR as follows:
  • Case-specific right to object
    You have the right to at any time submit an objection to the processing – that takes place based on Article 6(1)(e) GDPR (data processing in the public interest) and Article 6(1)(f) GDPR (data processing on the basis of a balancing of interests) – of personal data concerning you, for reasons that arise from your particular situation; this also applies for profiling based on this provision as defined by Article 4(4) GDPR.
    If you submit an objection, we will not process your personal data unless we are able to prove binding legitimate grounds for such processing that override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.
  • Right to object to processing of data for marketing purposes
    In individual cases we process your personal data for direct marketing purposes. You have the right to object at any time to the processing of personal data concerning you for the purposes of such marketing; this also applies to profiling insofar as this is associated with direct marketing. If you object to processing for the purposes of direct marketing, we will no longer process your personal data for this purpose.
    The objection may be submitted in any format to the body detailed under the section Basic information in this data protection statement.

16. Supervisory authority

The supervisory authority relevant for Busch, which is headquartered in Maulburg, Germany, can be contacted as follows:

Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit
Postfach 10 29 32
D-70025 Stuttgart
Phone: +33 (0)1 69 89 89 89
Fax: +49 711 615541-15
E-mail: poststelle@lfdi.bwl.de

17. Automated decision-making

As a general rule, we do not use any automated decision-making pursuant to Article 22 GDPR to establish and implement business relationships.

18. Profiling

In order to provide you with targeted information and advice regarding products, we – or service providers on our behalf – may use web analytics tools, and in particular tracking technology. These enable demand-oriented communication and advertising. In reference to this matter, we refer to the section Web analytics services of this data protection statement.