Privacy policy of Bonial
We are very pleased about your interest in Bonial. With this Privacy Policy, we aim to inform you about how, why and to what extent we process personal data, and what your rights are as a Data Subject. 
 
 
1. Data Controller
Unless otherwise stated in this Privacy Policy, the Data Controller in accordance with Art. 4 no. 7 GDPR is Bonial International GmbH, Hussitenstraße 32-33, 13355 Berlin, Germany, E-Mail: datenschutz@Bonial.de (hereinafter also “we” or “us”).
 
For the information collected subject to your privacy consent via so-called Facebook Business Tools of Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland ("Facebook"), we are jointly responsible with Facebook. Further information on data processing can be found at the appropriate place in this privacy policy or within the Consent Management Tool (CMP). Information about Facebook and the contact details of the data protection officer, as well as further information about how Facebook processes personal data, including the legal basis and the options for exercising your rights as a data subject vis-à-vis Facebook, can be found in Facebook's Data Policy (https://de-de.facebook.com/policy.php). We have entered into a Joint controller Agreement (Art. 26 GDPR) with Facebook, in which we have defined the respective responsibilities for fulfilling the obligations under the GDPR with respect to joint processing. Thereafter, we are required to provide the above information and Facebook has assumed responsibility for the other data subject rights under Art. 15-20 of the GDPR.
 
 
2. Accessing the website
When you use our service, we will automatically collect and process various data items. These in-clude for example:
  • Information about the end device accessing the site and the software used
  • Date and time of the access
  • Cookies and pseudonym IDs (essential)
  • Websites from which the user has accessed our website or which the user accesses through our website
  • IP address  
This IP address must be stored for technical reasons, even if only temporarily, in order to enable the website to be downloaded to the user’s end device. The legal basis for data processing is pro-vided by Art. 6 para. 1 point b GDPR.
 
 
3. Newsletter
If you have subscribed to one of our notification services or newsletters, we will use your e-mail address to send you the newsletter that you have subscribed to. In doing so, this data is transmitted to us when you register for this service: 

Email address as provided
Further voluntary information, if given
IP address of the calling computer
Date and time of registration

For the processing of the data, your consent is obtained during the registration process and reference is made to this privacy policy. You will first receive an e-mail with a request to confirm your registration (so-called double-opt-in procedure).

The legal basis for the data processing is Art. 6 para. 1 lit. a DSGVO.

You can revoke your consent at any time with effect for the future or unsubscribe from the ordered newsletter, e.g. by clicking on the unsubscribe link provided for this purpose in each newsletter.

We would like to point out that we measure the use of the email newsletter. In doing so, we record the information when you read our newsletter, which links you click on in it, etc..

So-called tracking pixels are integrated into the emails for the purpose and in our interest of being able to optimize our newsletter. This provides us with information about which browser and operating system is being used, which IP address is currently being accessed and, at the same time, who the provider is. Furthermore, it is recognized whether the e-mail was read and whether the link integrated in the e-mail was subsequently clicked and the respective website was visited via this IP address. In addition, the number of times the website is accessed is counted and the corresponding time of day when the e-mail was retrieved and the access was made is recorded. The approximate location of the user is also transmitted. If you do not wish this, you can unsubscribe from the newsletter at any time as described above. The legal basis for the data processing is Art. 6 para. 1 lit. a and f DSGVO.

We use the service of HUBSPOT, which is obligated as a processor, for sending the email notification and newsletter and for usage measurement. HUBSPOT is a software company from the USA with a branch office in Ireland (HUBSPOT European Headquarters, Ground Floor, Two Dockland Central, Guild Street, Dublin 1, Ireland).

HUBSPOT is a service platform. As there is a transfer of personal data to the USA, further protection mechanisms are required to ensure the level of data protection of the GDPR. To ensure this, we have agreed standard data protection clauses with the provider in accordance with Art. 46 (2) lit. c DSGVO. These oblige the recipient of the data in the USA to process the data in accordance with the level of protection in Europe.
Further information on how HUBSPOT works can be found in the privacy policy of HubSpot Inc at: https://legal.hubspot.com/privacy-policy
 
 
4. Your contact / registration forms
When you contact us, e.g. via one of our contact or registration forms or by e-mail, the data you provide (your e-mail address, your name and telephone number, etc.) will be processed by us in order to deal with your inquiry. We delete the data accruing in this context when they are no longer required for the aforementioned purpose, provided that the deletion does not conflict with any statutory retention obligations. The legal basis for the data processing is Art. 6 para. 1 sentence 1 lit. f DSGVO.
 
 
5. Applicants / Career
If you have transmitted data to us for the purpose of applying elsewhere on our career pages, we also process the following personal data with us:

- Applicant data (name, address and communication data, application-relevant data).

In all other respects, our data protection information for applicants applies.
 
 
6. Place of processing
We also process personal data in countries outside the European Economic Area ("EEA"), including the USA. To ensure an adequate level of data protection, we make use of the EU Commission's standard contractual clauses pursuant to Art. 46 (2) lit. c DSGVO when structuring contractual relationships with the services used in third countries, unless an adequacy decision of the European Commission exists for the respective third country: 
Until 26.09.2021  

Standard contractual clauses with processors
https://eur-lex.europa.eu/legal-content/DE/TXT/PDF/?uri=CELEX:32010D0087&from=DE

Standard contractual clauses with data controllers
https://eur-lex.europa.eu/legal-content/DE/TXT/PDF/?uri=CELEX:32004D0915&from=DE

From 27.09.2021 
Standard contractual clauses for transfers of personal data to third countries:
https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?uri=CELEX:32021D0914&locale=de

In addition, if you give your consent in privacy to all or part of the processing described therein, your consent also includes the transfer of certain personal data to third countries, including the USA, in accordance with Art. 49 (1) (a) GDPR. Please keep in mind: The third countries, especially the USA, do not have the level of data protection that you enjoy under the GDPR. This can mean disadvantages such as more difficult enforcement of data subject rights, a lack of control over the further processing and transfer of the data or access to the data by government bodies, in particular authorities in the USA, for control and monitoring purposes, without you being entitled to legal remedies against this. 
 
 
7. Transmission of Data
Unless otherwise stated in this Privacy Policy, we will only transmit your personal data to third par-ties if transmission is required to comply with our contractual obligations to you and this evidently needs to be done through or jointly with another provider, if we are permitted or required by law to transmit the data on other grounds, or if you have provided us with the relevant consent.
 
 
8. Cookies and similar Technologies
In order to provide our service, eliminate errors and provide content, the use of cookies and similar technologies is necessary (essential). Furthermore, the settings you have made in the privacy or consents and objections granted are stored in cookies on your terminal device. The use of these cookies is necessary so that we can provide the service you have requested. Further information on the aforementioned cookies can be found in the privacy.

Cookies are small files that your browser places in a folder designated for this purpose on your device. This makes it possible, for instance, to determine whether you have visited a website be-fore. Many cookies contain what is known as a “cookie ID”. A cookie ID is a unique cookie identifier. It consists of a string of characters which websites and servers can associate with the specific web browser where the cookie has been stored. This enables visited websites and servers to differenti-ate between the specific browser of the Data Subject and other web browsers containing different cookies. A specific web browser can be recognised and identified using the unique cookie ID. With-out additional information, cookies cannot be used to identify you personally.

Unless otherwise agreed, we and our partners will only employ other cookies and similar technolo-gies with your consent expressed through corresponding Privacy Settings. These cookies are used by ourselves and our partners to store and process data on your end device for the purposes listed below in this Privacy Policy. If consent is not granted for the setting of cookies, it may not be possi-ble to fully use all functions of our website.

More information on the cookies used and equivalent technologies and our partners is provided in the relevant parts of this Privacy Policy and your Privacy Settings, where you can withdrawal your consent with future effect at any time.
Previously created cookies can also be deleted by you at any time using your web browser or another software solution. This is possible in all standard web browsers. Please note that this will also delete any settings you have made in your Privacy Settings, such that these will need to be reconfigured when you visit our website again. The duration of the cookies is limited to a maximum of one year unless otherwise stated. In our Consent Management Tool as well as Privacy the tools we use are listed according to categories of processing purposes, informing you in particular about the providers of the tools, the storage period of the cookies and the transfer of the data to third parties.
 
 
9. Fanpages/Companywebsites
We use online presences in social networks in order to communicate with interested parties and to provide information about our company and our services, among other things.

The users' data may be processed by the social networks concerned for market research and advertising purposes. Furthermore, usage profiles can be created based on the interests of the users. For this purpose, cookies and other identifiers are stored on the users' computers.

As part of the operation of our online presences, it is possible that we can access information such as statistics on the use of our online presences, which are provided by the social networks. These statistics are aggregated and may include, in particular, demographic information and data on interaction with our online presences and the posts and content distributed through them. For details and links to the data of the social networks that we as operators of the online presences can access, please refer to the list below.

The legal basis for the data processing is Art. 6 para. 1 p. 1 lit. f DSGVO, based on our legitimate interest in effectively informing users and communicating with users, or Art. 6 para. 1 p. 1 lit. b DSGVO, in order to stay in contact with and inform interested parties.

For the legal basis of the data processing carried out by the social networks on their own responsibility, please refer to the data protection notices of the respective social network. The links below also provide you with further information on the respective data processing as well as the options to object.
 
We would like to point out that data protection requests can be asserted most efficiently with the respective provider of the social network, as only these providers have access to the data and can take appropriate measures directly. Below is a list with information on the social networks on which we operate online presences:
 
 
9.1. Facebook Fanpages 
We use Facebook Fanpages under the following links, for which we are jointly responsible with Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland: https://www.facebook.com/bonial.com.group/ . 
You can obtain the information required under the GDPR regarding data processing in the context of Page Insights from Facebook; currently in Facebook's privacy notices at https://www.facebook.com/legal/terms/information_about_page_insights_data . 
Facebook also provides you with the relevant content of the joint responsibility processing agreement concluded between Facebook and us pursuant to Article 26 of the GDPR; currently at the following link: https://www.facebook.com/legal/terms/page_controller_addendum.  You may exercise your right to complain and seek redress from any supervisory authority having jurisdiction over you. 
 
 
9.2. Instagram Company Pages 
We use Instagram company pages at the following links, for which we are jointly responsible with Facebook Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland: 
https://www.instagram.com/Bonial.de/?hl=de
You can obtain the information required under the GDPR regarding data processing as part of page insights from Instagram; currently in Facebook's and Instagram's privacy notices at https://www.facebook.com/privacy/explanation and https://help.instagram.com/519522125107875 . 
Facebook also provides you with the relevant content of the joint responsibility processing agreement concluded between Facebook and us pursuant to Article 26 of the GDPR; currently at the following link:   https://www.facebook.com/legal/terms/page_controller_addendum
You may exercise your right to complain and seek redress from any supervisory authority having jurisdiction over you. 
 
9.3. Pinterest Company Pages 
We use Pinterest company pages under the following links, for which we are jointly responsible with Pinterest Inc, 635 High Street, Palo Alto, CA, USA: 
https://www.pinterest.de/Bonialprospekte/
You can obtain the information required under the GDPR regarding data processing in the context of page insights from Pinterest; currently in Pinterest's privacy notices at https://policy.pinterest.com/de/privacy-policy .  
Pinterest also provides you with the relevant content of the joint responsibility processing agreement concluded between Pinterest and us pursuant to Article 26 of the GDPR; currently at the following link: https://business.pinterest.com/en-gb/pinterest-advertising-services-agreement/ You may exercise your right to lodge a complaint and seek redress with any supervisory authority having jurisdiction over you.
 
 
9.4. Twitter
We use company pages at the following link provided by Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07 Ireland:
https://twitter.com/Bonial_de
The information required under the GDPR regarding data processing in the context of Page Insights can be obtained from Twitter; currently in Twitter's privacy notice at:
https://twitter.com/de/privacy
You may exercise your right to complain to and seek redress from any supervisory authority having jurisdiction over you.
 
 
9.5. Youtube
We use the following link Youtube/Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland company pages:
https://www.youtube.com/user/Bonialgroup
You can obtain the information required by the GDPR regarding data processing in the context of page insights from Google/Youtube; currently in the privacy notices of Goole/Youtube at: https://policies.google.com/privacy
You may exercise your right of appeal to any supervisory authority responsible for you and seek redress there.
 
 
9.6. LinkedIn
We use LinkedIn company pages at the following link, for which we are jointly responsible with Linkedin Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland:
https://de.linkedin.com/company/bonial-international
You can obtain the information required under the GDPR regarding data processing in the context of page insights from LinkedIn ; currently in LinkedIn's privacy notice at:
https://www.linkedin.com/legal/privacy-policy
LinkedIn will also provide you with the relevant information of the Joint Responsibility Processing Agreement pursuant to Article 26 of the GDPR ; currently available at the following link: https://legal.linkedin.com/pages-joint-controller-addendum
You may exercise your right to lodge a complaint and seek redress with any supervisory authority having jurisdiction over you.
 
 
9.7. Xing
We use the following link Xing SE Dammtorstraße 30, 20354 Hamburg company pages:
https://www.xing.com/pages/kaufda-bonialinternationalgmbh
The information required under the GDPR regarding data processing in the context of page insights can be obtained from Xing ; currently in the privacy notices of Xing at:
https://privacy.xing.com/de/datenschutzerklaerung .
You may exercise your right of appeal to any supervisory authority responsible for you and file an appeal there.
 
 
10. social plugins
For the purpose of enhancing the user experience in our offer, we also embed social media plugins of the third-party provider listed below, each of which is responsible for data processing pursuant to Art. 4 No. 7 DSGVO. Subject to your consent, your browser establishes a direct connection to the server of the respective third-party provider, which directly loads data from the servers of the relevant social media providers. In this process, the third-party provider always processes your IP address, which is required to establish the connection to the third-party provider's server and to play out the content. The legal basis for the integration of these services is Art. 6 para. 1 lit. a DSGVO. You can revoke your consent at any time with effect for the future in your privacy settings. Information on data processing by the respective third-party provider can be found at:

Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07 Ireland https://twitter.com/de/privacy
 
 
11. Storage Duration
We will only process personal data as long as it is necessary for the relevant purpose stated above. Personal data will then be deleted unless data erasure is prohibited by a statutory retention period.
 
 
12. contact details and your rights as a data subject
Please contact our data protection officer at any time with questions and suggestions regarding data protection as well as to enforce your rights as a data subject: 

Bonial International GmbH 
Data Protection 
Hussitenstrasse 32-33 
13355 Berlin 
E-mail: datenschutzbeauftragter@Bonial.de  

As far as data processing in connection with Page Insights on our Facebook Fanpage (https://www.facebook.com/bonial.com.group/ ) is concerned, Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland acts as a common point of contact and processes all requests to assert the aforementioned rights. 

Information and rectification 
You can obtain information from us at any time and free of charge as to whether personal data relating to you is being processed by us and also specifically which data about you is being stored, as well as request a copy of the stored data. You can also have incorrect data corrected and completed. 

Deletion, restriction and the right to be forgotten 
You can request the deletion and restriction of your personal data. If deletion of your personal data is contrary to legal retention obligations, your data will be marked with the aim of restricting its future processing. 

Data portability 
Where applicable, you also have the right to have the personal data concerning you transferred to you or to another controller in a structured, commonly used and machine-readable format, provided that the processing is based on consent or a contract and is carried out with the help of automated processes. However, this does not apply if the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller. Furthermore, you have the right to obtain that the personal data be transferred directly from one controller to another controller, insofar as this is technically feasible and insofar as this does not adversely affect the rights and freedoms of other persons. 

Revocation / objection 
You can revoke the consent you have given at any time with effect for the future at the above contact address. In particular, you can object to the use of your e-mail address for the purpose of sending newsletters at any time with effect for the future to datenschutz@Bonial.de or Bonial International GmbH, Hussitenstraße 32-33, 13355 Berlin, without incurring any costs other than the transmission costs according to the basic rates.

Furthermore, you have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is carried out on the basis of a legitimate interest. This also applies to profiling based on these provisions. We shall no longer process the personal data in the event of the objection, unless we can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or for the assertion, exercise or defense of legal claims.

If we process personal data for the purposes of direct marketing, you have the right to object at any time to processing of personal data for such marketing by using the contact address specified above. This also applies to profiling, insofar as it is related to such direct marketing. In addition, you have the right to object on grounds relating to your particular situation to the processing of personal data concerning you which is carried out by us for scientific or historical research purposes or for statistical purposes, unless such processing is necessary for the performance of a task carried out in the public interest.

Right of complaint 
Furthermore, you have the right to lodge a complaint with the competent supervisory authority as well as the possibility to seek legal remedy. The supervisory authority to which the complaint has been submitted will inform the complainant of the status and outcome of the complaint, including the possibility of a judicial remedy.