Privacy policy
Status: 10/2022
We only process personal data (hereinafter "data") of users to the extent that this is necessary to provide a functional and comfortable website as well as our content and services.
“Processing” means collection, use, disclosure and/or storage. According to the General Data Protection Regulation (hereinafter "GDPR"), "personal data" is basically all data with which a natural person can be identified. The precise definitions of the terms are set out in Art. 4 GDPR.
The following statements inform you in particular about the type, scope, purpose, duration and legal basis of the processing of personal data, the purposes and means of processing which we decide alone or together with others, as well as about the optimization and quality of use we may have Components used by third parties who process data on their own responsibility:
__________________________________________
A) Information on the person responsible
B) User's rights
C) Information on data processing
__________________________________________
A) Information on the person responsible
The person responsible (hereinafter "provider") within the meaning of the GDPR and other national data protection laws of the member states as well as other data protection regulations is:
battery GmbH
Robert-Bosch-Strasse 1
71691 Freiberg am Neckar
Phone: 07141 5609040
Fax: 07141 5609049
Email: datenschutz@batterium.de
The data protection officer of the person responsible is Mr. Matthias Müller, contact via e-mail to datenschutz@batterium.de
B) User's rights
With regard to the processing of his personal data set out below by the provider, the user has the right
1. To request confirmation as to whether the data concerning him/her is being processed and for precise information about this data as well as further information and copies of the data in accordance with Art. 15 GDPR;
2. to demand the immediate correction of incorrect data concerning him or the completion of this data in accordance with Art. 16 GDPR;
3. To demand that the data concerning him be deleted immediately in accordance with Art. 17 GDPR, alternatively, if, for example, further processing is required in accordance with Art. 17 Para. 3 GDPR, a restriction of the processing of the data in accordance with Art. 18 GDPR to demand;
4. that he receives the data relating to him and provided by him in accordance with Art. 20 GDPR and to request their transmission to other responsible parties;
5. to lodge a complaint with the supervisory authority in accordance with Art. 77 GDPR if the user believes that the processing of his data by the provider violates the GDPR.
__________________________
6. In principle, the user can object to the future processing of data concerning him, which is carried out by a person responsible on the basis of Article 6 (1) (f) GDPR, at any time in accordance with Article 21 GDPR. The objection can be made in particular against processing for direct advertising purposes.
__________________________
7. The provider is also obliged to notify all recipients of the data to whom the data of him were disclosed. The obligation does not exist in the event that this notification proves impossible or involves a disproportionate effort. The customer has the right to information about these recipients.
C) Information on data processing
If no detailed information is given below about the individual data processing, the user data processed by the provider will be deleted or blocked as soon as the purpose of storage no longer applies and the deletion does not conflict with any statutory storage obligations.
server data
For communication and security reasons, the following data, which the user's Internet browser transmits to the provider or his web space provider, is collected during the visit to the website (so-called server log files):
– browser type and version;
– operating system used;
– Website from which the user switched to the provider's website (referrer URL);
– Website visited by the user;
– date and time of access;
– Internet protocol (IP) address of the user.
The data is also stored temporarily. This data is not stored together with other personal data of the user. The legal basis for the temporary storage is Article 6 Paragraph 1 Letter f GDPR based on the legitimate interest in improving the stability, functionality and security of the website.
The data will be deleted after seven days at the latest. Data whose further storage is required for evidence purposes are excluded from deletion until the respective incident has been finally clarified.
cookies
a) “Session” cookies/ “Persistent” cookies
The provider uses so-called cookies on its website. Cookies are small text files or other storage technologies that the Internet browser used by the user stores and saves on the end device. These cookies process certain user information, such as browser and location data and IP address values, on an individual basis.
The processing allows the provider to make its website more user-friendly, effective and secure. For example, the processing of the "session" cookies may enable the content to be reproduced in different languages or, if applicable, the use of a shopping cart function.
The "persistent" cookies allow the website to recognize the user via his browser when he visits the website regularly.
If personal data is processed by these cookies for the purpose of contract initiation or contract execution, the legal basis for processing is Article 6 Paragraph 1 Letter b GDPR.
If the processing is not intended to initiate or process a contract, the processing serves the legitimate interest of the provider in improving the functionality of the website and is based on the legal basis of Article 6 (1) (f) GDPR.
The "session" cookies are deleted when the user closes their browser. The "persistent" cookies are automatically deleted after a period specified by the provider. This period varies depending on the cookie, but does not exceed a period of one year.
b) Third party cookies
Third-party cookies may also be used on the provider's website. These third-party providers are partner companies with which the provider works together for the purpose of advertising, analysis or the functionalities of the website. If this is the case, the purposes and legal basis of the corresponding processing are set out below.
c) Possibility of disposal
The user can prevent or restrict the installation of cookies by setting the browser accordingly. Cookies that have already been saved can also be deleted at any time. The settings for this depend on the respective browser. In the case of Flash cookies, the processing cannot be prevented via the browser settings, but by the corresponding setting of the Flash player. If the user prevents or restricts the installation of cookies, this may result in not all functions of the website being fully usable.
contact
If the user contacts the provider - via contact form or e-mail - the personal data entered by the user on this occasion will be used to process the request. The details of the data are required to answer the request, without the provision of the data an answer is not possible or only possible to a limited extent.
If the contact request serves to fulfill a contract or to initiate a contract, the legal basis is Article 6 Paragraph 1 Letter b GDPR.
The user's data will be deleted if the user's request has been finally answered and there are no legal storage requirements, such as in the case of subsequent contract processing.
The legal basis can also be the consent of the user in accordance with Article 6 (1) (a) GDPR. As part of the contact form, the user's consent to the above processing may be obtained and reference is made to this data protection declaration.
The user can revoke a given consent for the establishment of contact according to Art. 7 Para. 3 GDPR at any time by notifying the provider. The data processed in this context will be deleted as soon as their processing is no longer required.
customer account
If the user registers for a customer account with the provider, the data entered during this registration (e.g. name, address, e-mail address) will only be used to fulfill a contract or to carry out pre-contractual measures and for general administration of the customer relationship ( e.g. retrieval of previous orders, loyalty program "Happy Grapes" or notepad function) is collected and stored. With the registration, the IP address and the date and time of the registration are also saved. A transfer to third parties does not take place.
If the user has consented, the legal basis is Article 6 (1) (a) GDPR. As part of the registration process, the user's consent to the above processing is obtained and reference is made to this data protection declaration. The data collected in this way will only be used for the aforementioned purpose. A transfer to third parties does not take place.
If the opening of the customer account serves to fulfill a contract or to carry out pre-contractual measures, the additional legal basis is Article 6 (1) (b) GDPR.
The user can revoke consent given for the customer account at any time in accordance with Article 7 (3) GDPR by notifying the provider. The data processed in this context will be deleted as soon as their processing is no longer required. If the data is required to fulfill a contract or to carry out pre-contractual measures, the user's data will be deleted upon expiry of the retention periods under tax and commercial law.
posts
The user has the opportunity to publish his questions, answers or opinions on the website via the rating or comment function (posts). The contribution, the time of submission of the contribution and the "pseudonym" provided by the user are processed and published by the provider.
The legal basis is Article 6 Paragraph 1 Letter a. GDPR. The user can revoke their consent to this in accordance with Art. 7 Para. 3 GDPR at any time by notifying the provider for the future.
In addition, the IP address and the e-mail address of the user are also processed by the provider. The IP address is processed on the basis of the legitimate interest of the provider in the event that the user's contribution infringes on the rights of third parties and/or unlawful content is posted.
The legal basis for this is Art. 6 (1) (f) GDPR. The legitimate interest of the provider is the legal defense that may be necessary.
Google Analytics
This website uses Google Analytics, a web analytics service provided by Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043 USA, hereinafter "Google".
Google is certified according to the "EU-US Privacy Shield" and thus guarantees compliance with the data protection regulations of the EU when processing data in the USA.
https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active
Google Analytics is used by the provider to analyze the use of the website. The legal basis for this is Art. 6 (1) (f) GDPR. The legitimate interest of the provider consists in the analysis, optimization and economic operation of the website.
Information such as the time, place and frequency of the user's website visit, including their IP address, is transmitted to a Google server in the USA and stored there.
The provider uses Google Analytics with an anonymization function. As a result of this addition, Google will already shorten the IP address within member states of the European Union or in other contracting states of the Agreement on the European Economic Area.
Google will use the data collected in this way to evaluate the user's visit to the website and to compile reports on website activity for the provider. In addition, the data is used to provide other services related to website and internet use. Google may also transfer this information to third parties if required to do so by law or if third parties process this data on Google's behalf.
According to their own statements, Google will under no circumstances associate the IP address of the user with other Google data. Google offers further information, in particular on the possibilities of preventing the use of data, under the following link:
https://www.google.com/intl/de/policies/privacy/partners
Google also offers a deactivation add-on for the most common browsers, which gives the user more control over which data Google collects on the website accessed by the user. The add-on tells the Google Analytics JavaScript (ga.js) that no information about the website visit should be sent to Google Analytics. However, the deactivation add-on for browsers from Google Analytics does not prevent information from being transmitted to the provider or to other web analysis services used by the provider and listed in this data protection declaration. Further information on installing the browser add-on is available under the following link:
Browser add-on to disable Google Analytics
Alternatively, the future analysis of the page visit by Google Analytics can be deactivated by clicking on the following link. By "clicking" on the link, a so-called "opt-out cookie" is set, with the result that the analysis of the page visit to the provider's website is prevented in the future:
Activate "opt-out cookie" for Google Analytics
Please note: If the user deletes the cookies in their browser settings, the opt-out cookie is usually also deleted and may have to be reactivated by the user.
Google AdWords with conversion tracking
The provider also uses the Google advertising component "Google AdWords" and in this context the so-called conversion tracking. Google conversion tracking is a service provided by Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043 USA, hereinafter "Google".
Google is certified according to the "EU-US Privacy Shield" and thus guarantees compliance with the data protection regulations of the EU when processing data in the USA.
https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active
The use of conversion tracking enables the provider to advertise its services in a targeted manner. The legal basis for this is Art. 6 (1) (f) GDPR. The legitimate interest of the provider consists in the analysis, optimization and economic operation of the website.
If the user clicks on an ad placed by Google, a cookie is stored on the user's end device due to the integration of conversion tracking. These so-called "conversion cookies" lose their validity after 30 days and are not used to personally identify the user.
If the user visits certain pages of the provider's website and the cookie has not yet expired, both Google and the provider can recognize that the user clicked on one of the ads placed by the provider on Google and was forwarded to the provider's website.
The information obtained with the help of the "conversion cookies" is used by Google to create visit statistics for the provider. This gives the provider information about the total number of users who clicked on their ad and which pages on their website were subsequently accessed by the respective user. However, the provider or other advertisers via "Google AdWords" do not receive any information with which users can be personally identified.
The user can prevent or restrict the installation of cookies by setting the browser accordingly. Cookies that have already been saved can also be deleted at any time. The settings for this depend on the respective browser.
Google offers further information, in particular on the possibilities of preventing the use of data, under the following links:
https://services.google.com/sitestats/de.html
http://www.google.com/policies/technologies/ads/
http://www.google.de/policies/privacy/
Google's remarketing or "Similar Audiences" component
The provider also uses the remarketing or "similar target groups" function of Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043 USA, hereinafter referred to as "Google".
Google is certified according to the "EU-US Privacy Shield" and thus guarantees compliance with the data protection regulations of the EU when processing data in the USA.
https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active
This component enables the provider to place personalized and interest-based advertising on third-party websites that participate in the Google advertising network.
The legal basis for this is Art. 6 (1) (f) GDPR. The legitimate interest of the provider consists in the analysis, optimization and economic operation of the website.
To enable this targeted advertising, a cookie with a sequence of numbers is stored in the user's browser when Google visits the provider's website. Visits to the website and anonymous data about the use of the website are recorded via this cookie. There is no transfer of personal data.
If the user subsequently visits another website in the Google advertising network, advertisements may be displayed that may take into account the product and information areas previously accessed on the provider's website.
The user can permanently deactivate this function via Google for the browser he is using by following the following link and installing the plugin provided there:
https://www.google.com/settings/ads/plugin
Alternatively, the use of cookies by certain third-party providers can be generally deactivated by opting out. This, for example, via:
http://www.networkadvertising.org/choices/
or
http://www.youronlinechoices.com/uk/your-ad-choices
In addition, Google may be able to track usage behavior across multiple devices through so-called "cross-device marketing" and is thus able to display personalized advertising across devices. The prerequisite for this, however, is that the user has consented to the browser history being linked to his existing Google account.
Google offers further information on Google Remarketing under the following link:
http://www.google.com/privacy/ads/
Google reCAPTCHA
To ensure interactions on the website by people and not by automated processing (e.g. by "bots"), the provider uses the "reCAPTCHA" component from Google LLC., 1600 Amphitheater Parkway, Mountain View, CA 94043 USA, hereinafter "Google ", a.
Google is certified according to the "EU-US Privacy Shield" and thus guarantees compliance with the data protection regulations of the EU when processing data in the USA.
https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active
The function allows Google to recognize from which website a request is sent and with which IP address the "reCAPTCHA" input box is used. In addition to the IP address, Google may collect additional information that is necessary for the service to function.
The legal basis for this is Art. 6 (1) (f) GDPR. The legitimate interest of the provider is to ensure that the website can be accessed and to protect against spam.
Google offers further information on the general handling of user data under the following link: https://policies.google.com/privacy
Google Fonts
For the uniform presentation of the content on our website, data (IP address, time of visit, device and browser information) is collected by the script code "Google Fonts", transmitted to Google and then processed by Google. We have no influence on this subsequent data processing.
YouTube Video Plugin
To integrate third-party content, data (IP address, time of visit, device and browser information) is collected via the YouTube video plugin in the extended data protection mode we use, transmitted to Google and then processed by Google, only if you Play video.
Microsoft-Bing Ads
This website uses Bing Ads using Universal Event Tracking (UEN) to implement remarketing and transaction tracking from Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA, hereinafter "Microsoft".
Microsoft is certified according to the "EU-US Privacy Shield" and thus guarantees compliance with the data protection regulations of the EU when processing data in the USA.
https://www.privacyshield.gov/participant?id=a2zt0000000KzNaAAK&status=Active
The legal basis for this is Art. 6 (1) (f) GDPR. The legitimate interest of the provider consists in the analysis, optimization and economic operation of the website.
If the user clicks on an ad placed by the provider on the Bing search engine, a cookie is stored on the user's device due to the integration of Microsoft's tracking technology. These so-called "tracking cookies" lose their validity after 180 days and are not used to identify the user personally.
If the user visits certain pages of the provider's website and the cookie has not yet expired, both Microsoft and the provider can recognize that the user clicked on one of the ads placed by the provider on Bing and was redirected to the provider's website.
The information obtained with the help of the "tracking cookie" is used by Microsoft to create visit statistics for the provider. This gives the provider information about the total number of users who clicked on their ad and which pages on their website were subsequently accessed by the respective user. However, the provider or other advertisers via "Bing ADs" do not receive any information with which users can be personally identified.
In addition, Microsoft may be able to use so-called cross-device tracking to track user behavior across multiple devices and is therefore able to display personalized advertising across devices.
If the user does not agree to this processing, it is possible to prevent the installation of cookies by setting the browser accordingly. For more information, see “Cookies” above.
In addition, the user can view personalized advertising in their Microsoft account, if available, under http://choice.microsoft.com/de-de/opt-out change.
Learn more about Bing Ads: (https://help.bingads.microsoft.com/#apex/3/de/53056/2). Microsoft Privacy Policy: (https://privacy.microsoft.com/de-de/privacystatement)
Web analysis and advertisements via Criteo
The Criteo component is used on the website for analysis and individual advertising. Criteo is a product of Criteo SA, 32 Rue Blanche, 75009 Paris, hereinafter "Criteo".
The legal basis for this is Art. 6 (1) (f) GDPR. The legitimate interest of the provider consists in the analysis, optimization and economic operation of the website.
Criteo collects the following information about visitors to websites connected to the Criteo network using tracking cookies and similar storage techniques that are stored in the user's browser:
• Information related to the visitor's activity on the website of the respective advertising partner, in particular the number of sub-pages viewed, the products viewed on the website and those on the searches performed on the site.
• Information about your device (device type, operating system, version)
• Information about the location of the visitor to deliver only advertisements for products or services are available regionally.
• Information related to the display of ads by Criteo, for example the number of ads shown to the visitor.
This information enables Criteo to determine the interests of the individual visitor. For this purpose, the visitor receives a technical ID from Criteo under which the products viewed or the search behavior on the websites of the Criteo network is recorded.
According to Criteo, it is not possible to identify the user.
Based on the evaluated information, Criteo then places individual advertisements from the advertisers on the provider's website or on third-party websites. These third parties, so-called publishers, can use cookies, which are also stored in the visitor's browser, to determine whether an advertisement from the Criteo network should be placed based on the visitor's technical Criteo ID.
Criteo processes the user's full IP address for the following purposes only:
• To investigate and detect fraud, for example to detect visits that cannot be caused by human behavior (eg a large number of clicks in a very short time);
• attribution of sales;
• Marketing reports with aggregated data.
The user can find out more about the functions and analyzes of Criteo from the following link. At the same time, the analysis and advertisements can be terminated or prevented via this link using the "OPT-OUT" cookie:
https://www.criteo.com/de/privacy/
Please note: If the user deletes the cookies in their browser settings, the opt-out cookie is usually also deleted and may have to be reactivated by the user.
The user can generally prevent or restrict the installation of cookies by setting the browser accordingly. Cookies that have already been saved can also be deleted at any time. The settings for this depend on the respective browser.
YouTube
The provider uses a tool from YouTube LLC., 901 Cherry Ave., 94066 San Bruno, CA, USA, hereinafter “YouTube” to display video sequences on the website. YouTube is a company of Google LLC., 1600 Amphitheater Parkway, Mountain View, CA 94043 USA.
As a subsidiary of Google, YouTube is certified according to the "EU-US Privacy Shield" and thus guarantees compliance with the data protection regulations of the EU when processing data in the USA.
https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active
The legal basis for this is Art. 6 (1) (f) GDPR. The legitimate interest of the provider is to improve the quality of use of the website. The provider uses YouTube with the "extended data protection mode" option offered by YouTube.
According to YouTube, in "extended data protection mode" the data shown below is only transmitted to the YouTube server when a video is started.
If the user visits a page that has an embedded video, a connection to the YouTube servers in the USA is established and the content is displayed on the website by notifying the user's browser. For this purpose, YouTube processes at least the IP address, the date, the time and the page visited by the user. This also leads to a connection to the Google Double-Click advertising network. If the user is logged in to YouTube at the same time, the connection information is assigned to the user's YouTube account.
If the user wants to prevent YouTube from directly assigning the information collected to his user account, the user must log out of YouTube before visiting the website. It is also possible to configure the user account accordingly.
YouTube also uses permanent cookies for functionality and analysis.
If the user does not agree to this processing, it is possible to prevent the installation of cookies by setting the browser accordingly. For more information, see “Cookies” above.
More information on the collection and use of data by Google and the related rights and options for protecting the privacy of the user can be found in Google's data protection information: