Data protection notice



Data Controller 
Borbet GmbH
Hauptstr. 5
59969 Hallenberg-Hesborn, Germany
Tel: +49 2984 301 0
Fax: +49 2984 301 110
Email: info@borbet.de 

Data Protection Officer 
Personal/Confidential
To the Data Protection Officer
Borbet GmbH
Hauptstrasse 5
59959 Hallenberg-Hesborn, Germany
Email: datenschutz@borbet.de 

Purpose of Data Processing 
Purpose A: Logging visits to the website on the basis of the IP address to evaluate the number of visitors and the pages accessed.
Purpose B: Logging system events with IP address for troubleshooting.
Purpose C: Contact form specifying Subject, surname, first name, email address and optional telephone number for the purpose of contacting visitors at their request.
Purpose D: Google Maps for better location and visualisation of our premises.
Purpose E: Youtube makes videos available which visualise content. These are inserted using iframe.
Purpose F: Google reCAPTCHA ensures that our contact forms are not used by automated programs.
Purpose G: The configurator enables precise identification of your vehicle.
Purpose H: Contact form with first and last name, telephone number and email address to send your product enquiry directly to a dealer you have selected.
Purpose I: Contact form for online job applications

Legal basis of processing 
Processing for purposes A, B, D, and F is carried out on the basis of legitimate interests pursuant to Art. 6(1)(f) of the EU GDPR.
Processing for purposes C, E and H is carried out on the basis of voluntary consent through submitting the form, or the deliberate activation of the content in accordance with Art. 6(1)(a) of the EU GDPR.
Under purpose G, processing is undertaken in relation to pre-contractual measures in accordance with Article 6(1)(b) EU GDPR.
Under purpose I, data is processed for the purpose of establishing an employment relationship in accordance with Section 26 (1) BDSG (the German Federal Data Protection Act).

Legitimate interests of the processor 
For purpose A: The website is used for the acquisition of new contractual partners and the transmission of information to interested parties. Data relating to purpose A is collected in order to measure the effectiveness of this website and to optimise it accordingly.
For purpose B: System events are stored and evaluated in order to be able to guarantee the technical availability of the website on a continuous basis. All events are stored along with their IP addresses so that events caused intentionally can be recognised and prevented.
For purpose D: In order to provide you with a map service whilst at the same time running a cost-effective website, we make use of the free Google Maps service.
For purpose F: To ensure that your contact requests are processed quickly, this function prevents automated programs from accessing the website and flooding it with false requests. We use reCAPTCHA in order to be as confident as possible that our contact forms are used by real people.

Data Recipients 
Our processors for the purpose of developing this website can access the data at any time. They are Ralf Wenske, Fotografie & Webdesign, Löbauer Strasse 37, 04347 Leipzig and Websoftware Lange, Platzweg 11, 34497 Korbach.

For the purpose of hosting this website, our data processors can also access the data at any time. They are Domainfactory GmbH, Oskar-Messter-Str. 33, 85737 Ismaning.
The configurator is provided by BMF Media Information Technology GmbH, Augsburg.

The online application function is through our service provider softgarden e-recruiting GmbH, Tauentzienstrasse 14, 10789 Berlin.

On submitting the form, enquiries are forwarded to relevant selected specialists.

In addition, data is forwarded to the following companies:
Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94943, USA
YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, USA

Duration of data retention
Purpose A: 3 days
Purpose B: 3 days
Purpose C: 6 months
Purpose D: permanent
Purpose E: permanent
Purpose F: permanent
Purpose G: permanent
Purpose H: 6 months
Purpose I: 6 months

Rights of data subjects (for more information, please see further explanation of specific rights at the end of this text) 
As a data subject, you are entitled to the following protective rights free of charge:
a) you can withdraw your voluntary consent at any time (right of revocation)
b) you can request an overview of all the data stored by us at any time (right to information)
c) for data that is not subject to any legal or contractual retention obligation, you can request its deletion at any time free of charge (right to deletion)
d) you can limit your consent to data processing to certain areas at any time (right to restriction of processing)
e) you can object to data processing that serves the public interest or legitimate interests of the processor at any time, if there are reasons for this in your particular situation (right of objection)
f) in the case of data that you have entered by mistake or that is inaccurate, you have the right to correct this data at any time (right of correction)
g) you have the right to request and receive the personal data concerning you in a structured, commonly used and machine-readable format or to have it transmitted to another location (right to data portability).

Right to object 
The individual data subject has the right, for reasons specific to his/her situation, to object to data processing that serves the purposes of public interest or the processor’s legitimate interests.

Right of appeal 
Each data subject has a right to appeal to the data protection supervisory authority of their country or to the supervisory authority responsible for the operator of this website. For us, this is:

Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen [State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia]
Postfach 20 04 44
40102 Düsseldorf, Germany
Email: poststelle@ldi.nrw.de


Google Maps & YouTube 
This page uses the Google Maps service via an API. Videos are hosted on YouTube and integrated into our website from there. The provider is Google LLC (see recipient). In order for you to be able to use the functions of Google Maps and YouTube, it is necessary to store your IP address. This information is usually transferred to a Google server in the US and stored there. As the provider of this page, we have no influence on this data transmission.
More information about the handling of user data on Google is available in Google’s privacy policy:
https://policies.google.com/privacy?hl=en 

Wheel configuration tool 
The configurator service for accurate capture of your vehicle model is provided by BMF Media Information Technology GmbH, Bgm.-Fischer-Str. 9-11, 86150 Augsburg. We have no influence on this data processing. Further information on data protection at BMF Media Information Technology GmbH can be found in their privacy policy:
https://bmfgroup.de/en/privacy-policy/ 

Cookies 
At the start of your visit to our website, you will be asked whether you agree to the use of cookies. A cookie is a text file in which a small amount of data is stored. As this is a plain text file, it is not possible for other content such as viruses to be present in it.
The text file often contains a unique identification number which allows the provider (e.g. Google) to recognise you as a user on various pages. This can work to your advantage, since it means you will see content tailored specifically to you and your interests; but at the same time, the provider can of course track your movements through the Internet.
In addition to the cookies for which we request your consent, there are also so-called ‘essential’ cookies. These are necessary to operate the website and will always be set. For example, they store your decision to accept other cookies, as well as a unique session number. This allows recognition over the duration of your visit to our website without having to enter your password repeatedly.

If you wish to change or withdraw your cookie consent, you can do so directly through this link:https://www.borbet.de/en/datenschutz/cookie

We use only the following cookies and, for voluntary cookies, we limit ourselves to Google Inc. as a partner:
Name – Reason for use – Duration of storage – Provider
Session cookies (essential) – for the duration of the browser session
YouTube – Viewing videos – 12 hours – Google INC.
reCaptcha – Securing the contact form against spam – 12 hours – Google INC.
Google Maps – Display of maps – 12 hours – Google INC.


The rights of data subjects – further explanation 


The General Data Protection Regulation applicable in the EU since 2018 grants you, the data subject, several rights vis-à-vis the controller with respect to processing personal data. The ‘controller’ means the person/company who uses and processes your personal data.
As a data subject, you can invoke these rights at any time free of charge.
The rights of data subjects are listed and briefly explained below.

Right of revocation – You can withdraw your voluntary consent at any time. 

Within the field of data protection, you are often asked to agree or consent to the use of certain personal data. An example of this is visiting a website on the Internet, where you are asked to consent to the use of certain cookies. Consent is also required, however, for the publication of a photograph in a newspaper. In such cases, you sign a document beforehand giving your consent in writing to the use of the photograph.
In this particular case, however, consent cannot be withdrawn and you can no longer stop data processing.
The data subject’s right of withdrawal means that you can at any time revoke the consent you have given to the processing of your data.
Data processing is thus stopped from the time you withdraw your consent.
However, your right of withdrawal applies only to the processing of personal data to which you have voluntarily consented. Data processing that takes place to fulfil a contract, or processing on the basis of a legal obligation, cannot simply be revoked.

Right of access – You can at any time request an overview of all data stored by you with a specific user. 


You may want to find out what items of your personal data are used by processors.
If you do not know which data a controller processes, or you wish to consider withdrawing consent or simply check whether the data concerning you correspond to the truth, you can seek access at any time.
You should receive a detailed overview of which of your data is being processed, where it comes from and whether and how it might be forwarded.
For example, you have the right at any time to access your customer file, or your personal file kept by your employer.

Right to erasure – For data that is not subject to a legal or contractual retention period, you can request erasure at any time. 

You may at any time request the erasure of personal data concerning you that is processed and stored by controllers.
However, this is not always possible, since there are legal/contractual exceptions. The deletion of specific categories of personal data is not possible, since these must be retained for a pre-determined period of time in connection with a contract, or for legal reasons. These categories are subject to so-called retention obligations.
Personal data that is not affected by these retention obligations must be deleted by the processor immediately upon your request.

Right to restriction of processing – You can at any time restrict your consent to data processing to certain areas. 

Consent that you have given to the processing of certain personal data can often include several categories of data. However, you can at any time impose restrictions on this consent.
For example, if you have initially consented to the use of all cookies on a website, you can at any point restrict your consent to essential cookies only.
The use of the other cookies will be terminated.
A further example might be your consent to the broadcast of a TV interview with both image and sound, which will be broadcast, say in two weeks’ time. You can decide, with a reasonable notice period, to withdraw your consent to the broadcast of your image. Your consent can thereby be restricted to the sound recording only.
 
Right to object – you can object to data processing that serves the public interest or legitimate interests of the processor at any time, if there are reasons for this in your particular circumstances. 

The data subject’s right of objection entitles you to object to the processing of certain data concerning you.
The right to object in this respect is valid in relation to data processing carried out on the basis of a legitimate or public interest.

In principle, all data processing requires a legal basis in order for it to be permissible. This basis is often consent, a contract or a law. However, if the legal basis is not consent, contract or law, the controller may process your data on the basis of their own legitimate or necessary interest in your data.

Examples of data processing based on a legitimate interest include:
-the transfer of your data within a company for administrative purposes
-market research purposes
-scientific, historical and statistical purposes
-the access of data by IT operators to maintain IT security.

If data processing is carried out on the basis of such a legitimate or public interest, you can lodge an objection. This can result in the use or collection of your data being discontinued, despite the legitimate interest of the processor.

Right to rectification – in the case of data you have entered by mistake, or inaccurate data, you have the right to rectification at any time.

If you notice that processed data about you contain errors or have changed, the right to rectification allows you at any time to request that the data be rectified by the controller.


Right to data portability – you have the right to request and receive the personal data concerning you in a structured, commonly used and machine-readable format or to have it transmitted to another location. 


The right to data portability allows you to request and receive all personal data concerning you that has been collected by a controller.
You should also be able to transfer all relevant data to another location or to have it transferred to another location.
For example, you could deliver to another organisation all the data a company has received digitally from you, or have it transferred to another company of your choice.
The controller is obligated to provide you with the corresponding data in a suitable format, i.e. in a commonly used, structured and machine-readable format, not handwritten or otherwise encrypted.

Last updated 15/03/2021