Brühler Stahlhandel GmbH welcomes you to its homepage and appreciates your interest in the site and the products presented. In the following we give you information about the processing of personal data in connection with our Internet pages.

As a rule, our website can be used without providing personal data. Insofar as personal data (e.g. name, address or e-mail addresses) is collected on our pages, this is always done on a voluntary basis as far as possible. This data will not be passed on to third parties without your express consent.

We would like to point out that data transmission on the Internet (e.g. communication by e-mail) can be subject to security gaps. A complete protection of the data against access by third parties is not possible.

In principle, you can visit all areas of our website without providing us with any personal data. If you wish to contact us, request information from us or order goods, we must collect and process personal data (e.g. your full name and postal address and/or e-mail address) for processing. For the processing of orders, further information is required, e.g. the delivery address, your preferred method of payment and, if applicable, your bank or credit card details.

In the case of important changes, for example in the scope of the offer or in the case of technically necessary changes, we will use the e-mail address provided when contacting us to inform you in this way.

Pursuant to Art. 14 para. 1 letter d) EU DS-GVO, the person responsible is obliged to inform the data subjects of the parties involved and the categories of personal data processed.

You can get information by phone and send us messages via a contact form on the website or by fax. In order to enable us to respond when using the web form or other contact options, it is necessary to provide basic data. These are marked with an asterisk in the contact form. The data processing is carried out exclusively for the purpose of telephone consultation or the processing and answering of enquiries via the contact form and other related communication.

All data that you send via the form on our website is transmitted in encrypted form in order to protect it against misuse by third parties.

By voluntarily transmitting the data to us, you consent to the processing of your personal data.

The processing takes place on the basis of a voluntarily given consent according to Art. 6 Para. 1 Sentence 1 Letter a) EU DS-GVO. The personal data collected for the use of the contact form are automatically deleted as soon as the request or the reason for the communication has been dealt with and there are no reasons for further storage.

When you access our website, certain data is automatically transferred from your system to our web server, unless you have made other settings in the settings of your web browser. The following data will be stored until deleted:

- The IP address of the requesting computer
- A time stamp of the accesses (date, time, time shift)
- Name, URL, and amount of data transferred for the pages and data retrieved.
- The quantity of data transmitted
- The status of the accesses (successfully transmitted, not found etc.)
- Identification data of the browser and operating system used
- The address from which the visit was made (e.g. search engines with the search words used)

The processing is carried out for this purpose,

- to enable the connection to the website,
- to enable an optimized presentation of the website,
- to test and ensure the security and stability of the systems,
- to enable and improve the administration of the website,
- if necessary to prevent the misuse of our site and unauthorized to track accesses.

The stored data will not be merged with other data sources. As a rule, we cannot assign the data to any particular person. The processing does not take place for the purpose of obtaining further information about the respective visitors to the website. After this evaluation, the logged data is automatically deleted.

We reserve the right to subsequently check this data if we become aware of concrete indications of illegal use.

Pursuant to Art. 6 Para. 1 Sentence 1 Letter f) EU DS-GVO, we have a legitimate interest in data processing for the purpose of system maintenance and optimisation of our websites.

By voluntarily disclosing your data to us, you consent to us passing on your data to the third parties involved to the extent necessary to process the transactions you have requested. As a matter of principle, we process your orders in-house. In addition, your financial service provider and our house bank are involved in the financial processing of your booking.

We will not sell, rent or otherwise pass on your data to other companies without your express consent, unless this is necessary for the orders placed with us or is exceptionally required by law.

As a matter of principle, personal data will only be transmitted to third parties if

- has been expressly consented to by the data subject pursuant to Art. 6 para. 1 sentence 1 letter a) EU DS-GVO,
- the disclosure pursuant to Art. 6 para. 1 sentence 1 letter f) EU DS Block Exemption Regulation is necessary for the assertion, exercise or defence of legal claims and there is no reason to assume that the data subject has an overriding legitimate interest in not disclosing his/her data,
- for the transmission of data in accordance with Art. 6 Para. 1 Sentence 1 Letter. c) EU DS-GVO there is a legal obligation, and/or
- this is necessary pursuant to Art. 6 (1) sentence 1 letter b) EU DS Block Exemption Regulation for the performance of a contractual relationship with the data subject.

5.1 Right to information

You can request information from us as to whether your personal data will be processed by us. A right to information does not exist if the data may not be deleted due to legal or statutory retention periods or serve exclusively purposes of data backup or data protection control, provided that the provision of information would require a disproportionately high effort and processing for other purposes by appropriate technical and organizational measures is excluded.

If necessary, you can request information about:

- The purposes of the processing,
- the categories of personal data processed by you,
- the recipients or categories of recipients to whom your personal data will be disclosed, in particular recipients in third countries,
- if possible, the planned duration for which your personal data will be stored or, if that is not possible, the criteria for determining the duration of storage,
- the existence of a right to correction or deletion or limitation of the processing of personal data concerning you, or of a right to object to such processing,
- the existence of a right of appeal to a data protection supervisory authority,
- if the personal data has not been collected from you as the data subject, the available information about the origin of the data,
- where appropriate, the existence of automated decision making, including profiling and meaningful information on the logic involved and the scope and intended impact of automated decision making,
- in the case of transmission to recipients in third countries, in the absence of a decision by the EU Commission on the adequacy of the level of protection pursuant to Art. 45 para. 3 EU DS-GVO, information on which suitable guarantees are provided pursuant to Art. 46 para. 2 EU DS-GVO for the protection of personal data.

You have a right to cancellation ("right to be forgotten") if one of the following reasons applies:

- The personal data are no longer necessary for the purposes for which they were processed,
- You have withdrawn your consent to the processing,
- You have objected to the processing of your personal data, which we have made public,
- You have objected to the processing of personal data not made public by us and there are no prior legitimate reasons for the processing,
- Your personal data has been processed unlawfully,
- The deletion of personal data is necessary to fulfil a legal obligation to which we are subject.

The right to deletion does not exist if the deletion is not possible or only possible with disproportionately high effort in the case of lawful non-automated data processing due to the special type of storage and your interest in the deletion is low. In this case, the restriction of processing takes the place of deletion. A right to deletion also does not exist if the data have to be stored due to legal regulations (e.g. due to tax regulations).

You can demand that we restrict the processing if one of the following reasons applies:

- You dispute the accuracy of the personal data. In this case, the limitation may be requested for the time necessary to verify the accuracy of the data.

- The processing is unlawful and you request the restriction of the use of your personal data instead of deletion.

- We will no longer need your personal data for processing purposes, but you will need the data to assert, exercise or defend legal claims.

- You have filed an objection pursuant to Art. 21 para. 1 EU DS-GVO. The restriction of the processing can be demanded as long as it is not yet certain whether our justified reasons outweigh your reasons.

Restriction of processing means that personal data will only be processed with your consent or for the assertion, exercise or defence of legal claims or to protect the rights of another natural or legal person or for reasons of an important public interest. Before we remove the restriction, we have a duty to inform you of this.

You have a right to data transfer if the processing is based on your consent in accordance with Art. 6 para. 1 sentence 1 letter a) or Art. 9 para. 2 letter a) EU DS-GVO or on a contract to which you are a party and the processing is carried out using automated procedures. In this case, the right to data transfer includes the following rights, provided that the rights and freedoms of other persons are not impaired:

You may request that we keep the personal data you have provided to us in a structured, common and machine-readable format. You have the right to transfer this data to another responsible person without any hindrance on our part. As far as technically feasible, you can demand that we transfer your personal data directly to another responsible person.

Brühler Stahlhandel

Data protection

Data protection regulation

1. Name and contact data of the responsible person

2. Contact details of the data protection officer

3. Scope and purpose of the processing of personal data

3.1 Personal Data

3.2 Contact (telephone consultation, contact form)

3.3 Server statistics

3.4 Cookies

4. Disclosure of data

5. Your rights as a data subject

5.1 Right to information

5.2 Correction and completion

5.3 Deletion

5.4 Restriction of processing

5.5 Data Transferability

5.6 Beschwerderecht

5.7 Right of objection

6. Data Transfer to a Third Country

7. Duration of data storage

8. contradiction advertising mails

Brühler Stahlhandel