Data policy

Data privacy statement for the Bizerba SE & Co. KG Website (www.bizerba.com)

1. Information about collecting personal data 

(1) In the following we would like to provide information about collecting personal data when using our website. Personal data include all data that reference you personally, e.g. your name, address, email addresses, phone numbers, user names, user behavior. 

(2) As per Art. 4 para. 7 EU-General Data Protection Regulation (GDPR) Bizerba SE & Co. KG, Wilhelm-Kraut-Straße 65, 72336 Balingen, Germany is responsible (see our Company Information (legal notice)). You can contact our data protection officer at dataprotection@bizerba.com via the postal address of our head office, to the attention of "Datenschutzbeauftragter". 

(3) We have appointed a data protection officer. 

DEUDAT GmbH, Zehntenhofstraße 5b, 65201 Wiesbaden 
info@deudat.de  

(4) If we need to contact commissioned service providers or want to access your data for commercial purposes for individual functions of our offer, we will notify you below as to the respective processes. When we do this, we specify defined criteria as to the storage time. 

2. External Hosting 

This website is hosted externally. Personal data collected on this website are stored on the servers of the host. These may include, but are not limited to, IP addresses, contact requests, metadata and communications, contract information, contact information, names, web page access, and other data generated through a web site. 

The external hosting serves the purpose of fulfilling the contract with our potential and existing customers (Art. 6(1)(b) GDPR) and in the interest of secure, fast, and efficient provision of our online services by a professional provider (Art. 6(1)(f) GDPR). If appropriate consent has been obtained, the processing is carried out exclusively on the basis of Art. 6 (1)(a) GDPR and § 25 (1) TDDDG, insofar the consent includes the storage of cookies or the access to information in the user's end device (e.g., device fingerprinting) within the meaning of the TDDDG. This consent can be revoked at any time. 

Our host(s) will only process your data to the extent necessary to fulfil its performance obligations and to follow our instructions with respect to such data. 

We have concluded a data processing agreement (DPA) for the use of the above-mentioned service. This is a contract mandated by data privacy laws that guarantees that they process personal data of our website visitors only based on our instructions and in compliance with the GDPR. 

3. Your rights 

(1) Information about, rectification and eradication of data 

a) Within the scope of the applicable statutory provisions, you have the right to demand information about your archived personal data, their source and recipients as well as the purpose of the processing of your data at any time. You may also have a right to have your data rectified or eradicated. If you have questions about this subject matter or any other questions about personal data, please do not hesitate to contact us at any time. 

(2) Right to data portability 

You have the right to have data that we process automatically on the basis of your consent or in fulfillment of a contract handed over to you or to a third party in a common, machine-readable format. If you should demand the direct transfer of the data to another controller, this will be done only if it is technically feasible. 

(3) Right to log a complaint with the competent supervisory agency 

In the event of violations of the GDPR, data subjects are entitled to log a complaint with a supervisory agency, in particular in the member state where they usually maintain their domicile, place of work or at the place where the alleged violation occurred. The right to log a complaint is in effect regardless of any other administrative or court proceedings available as legal recourses. 

(4) Right to demand processing restrictions 

You have the right to demand the imposition of restrictions as far as the processing of your personal data is concerned. To do so, you may contact us at any time. The right to demand restriction of processing applies in the following cases: 

  • In the event that you should dispute the correctness of your data archived by us, we will usually need some time to verify this claim. During the time that this investigation is ongoing, you have the right to demand that we restrict the processing of your personal data. 

  • If the processing of your personal data was/is conducted in an unlawful manner, you have the option to demand the restriction of the processing of your data instead of demanding the eradication of this data. 

  • If we do not need your personal data any longer and you need it to exercise, defend or claim legal entitlements, you have the right to demand the restriction of the processing of your personal data instead of its eradication. 

  • If you have raised an objection pursuant to Art. 21(1) GDPR, your rights and our rights will have to be weighed against each other. As long as it has not been determined whose interests prevail, you have the right to demand a restriction of the processing of your personal data. 

If you have restricted the processing of your personal data, these data – with the exception of their archiving – may be processed only subject to your consent or to claim, exercise or defend legal entitlements or to protect the rights of other natural persons or legal entities or for important public interest reasons cited by the European Union or a member state of the EU. 

4. The collection of personal data when visiting our website 

(1) When you are simply using the website for information purposes, when you are not registered or if you are otherwise communicating information, we will only collect the personal data that are provided to our server by your browser. If you want to visit our website, we collect the following data that we need technically in order to show you our website and to insure stability and safety (legal basis is Art. 6 para. 1 sentence 1, letter f GDPR): 

  • IP address 

  • Date and time of request 

  • Time zone difference to Greenwich Mean Time (GMT) 

  • Content of the request (specific website) 

  • Access status/HTTP status code 

  • Port number 

  • The respectively transferred quantity of data 

  • The website from which the request has come 

  • Browser 

  • Operating system and its interface 

  • Language and version of the browser software. 

  (2) In addition to the previously mentioned data, cookies are also saved to your computer when you use our website. Cookies are small text files which are stored on your hard disk assigned to the browser you use. They are used to provide information to the agent (in our case, us) who has placed the cookie. Cookies cannot execute programs or transfer viruses to your computer. Their function is to make the internet offering more user friendly and more effective. Some cookies are necessary so that our website can function smoothly. 

(3) Application of cookies: 

(a) This website uses the following types of cookies. We describe the extent and functionality below: 

  • Transient cookies (see also (b)), 

  • Permanent cookies (see also (c)). 

(b) Transient cookies are deleted automatically when you close your browser. In particular, these include session cookies. These cookies save a so-called session ID which can be used to assign different requests from your browser during the same session. This means that your computer can be recognized when you return to our website. Session cookies are deleted when you log out or close your browser. 

(c) Permanent cookies are deleted automatically after a specific time, which varies depending on the cookie. These cookies store specific settings, for example language settings you've made, in a safe manner. You can delete cookies at any time in the safety settings of your browser. 

(d) You can configure your browser to suit your requirements and, for example, refuse to accept third-party cookies or all types of cookies. We would like to point out that if you do you might not be able to use all of the functionality of this website. 

(e) We use cookies to identify you if you visit the website again, in case you are a registered user of our website and would like to gain access. During login, a cookie is placed to register the last time you logged in (time, date and IP address). 

(4) Server log files 

The provider of this website and its pages automatically collects and stores information in so-called server log files, which your browser communicates to us automatically. The information comprises: 

  • The type and version of browser used 

  • The used operating system 

  • Referrer URL 

  • The hostname of the accessing computer 

  • The time of the server inquiry 

  • The IP address 

This data is not merged with other data sources. 

This data is recorded on the basis of Art. 6(1)(f) GDPR. The operator of the website has a legitimate interest in the technically error free depiction and the optimization of the operator’s website. In order to achieve this, server log files must be recorded. 

5. Further functions and offerings of our website 

(1) In addition to the use of our website for purely informational purposes, we offer different services you can use if interested. You will usually need to specify further personal data, which we would use to provide the prospective service and which are subject to the previously specified data processing principles. 

(2) In order to process your data we do, to some extent, draw on the services of external service providers. These have been carefully selected and commissioned by us. They are obliged to comply with our directives and are checked regularly. 

(3) Furthermore we can forward your personal data to third parties if contracts exist or other services are provided by us together with partners. More information on this topic is provided when you specify your personal data, or can be found at the bottom of the offer description. 

(4) If our service provide or partner is based in a state outside of the European Economic Area (EEA), we will notify you about the consequences of this situation in the description of the offer. 

6. Opposition to or revocation of the processing of your data 

(1) If you have given us the permission to process your data you are entitled to revoke this at any time. Revocation has an impact on the admissibility of processing your personal data once you have pronounced the revocation. 

(2) If processing your personal data is based on the balancing of interests, you can oppose such processing. This is the case if processing is not required in order to fulfill a contract with you, which is reflected in each respective description of the functions, below. In the event that opposition is exercised, we ask you to provide the reasons why we should not process your personal data in the way we do. In the event of a justified opposition, we will review the situation and either discontinue processing the data or show you our compelling legitimate grounds for continuing the processing. 

(3) You can, of course, oppose the processing of our personal data for the purposes of advertising and data analysis at any time. You can inform us about your opposition to advertising via the following contact data: marketing@bizerba.com or by post using the address specified above in section 1 (2) to the attention of "Marketing". 

7. Using a contact form or request by e-mail, telephone or fax 

(1) If you contact us by e-mail, telephone or fax, your request, including all resulting personal data (name, request) will be stored and processed by us for the purpose of processing your request. We do not pass these data on without your consent. 

(2) These data are processed on the basis of Art. 6(1)(b) GDPR if your inquiry is related to the fulfillment of a contract or is required for the performance of pre-contractual measures. In all other cases, the data are processed on the basis of our legitimate interest in the effective handling of inquiries submitted to us (Art. 6(1)(f) GDPR) or on the basis of your consent (Art. 6(1)(a) GDPR) if it has been obtained; the consent can be revoked at any time. 

(3) The data sent by you to us via contact requests remain with us until you request us to delete, revoke your consent to the storage or the purpose for the data storage lapses (e.g. after completion of your request). Mandatory statutory provisions - in particular statutory retention periods - remain unaffected. 

8. Our social media appearances 

(1) This privacy policy applies to the following social media presence 

b) Data processing through social networks 

We maintain publicly available profiles in social networks. The individual social networks we use can be found below. 

Social networks such as Facebook, X etc. can generally analyze your user behavior comprehensively if you visit their website or a website with integrated social media content (e.g., like buttons or banner ads). When you visit our social media pages, numerous data protection-relevant processing operations are triggered. In detail: 

If you are logged in to your social media account and visit our social media page, the operator of the social media portal can assign this visit to your user account. Under certain circumstances, your personal data may also be recorded if you are not logged in or do not have an account with the respective social media portal. In this case, this data is collected, for example, via cookies stored on your device or by recording your IP address. 

Using the data collected in this way, the operators of the social media portals can create user profiles in which their preferences and interests are stored. This way you can see interest-based advertising inside and outside of your social media presence. If you have an account with the social network, interest-based advertising can be displayed on any device you are logged in to or have logged in to. 

Please also note that we cannot retrace all processing operations on the social media portals. Depending on the provider, additional processing operations may therefore be carried out by the operators of the social media portals. Details can be found in the terms of use and privacy policy of the respective social media portals. 

c) Legal basis 

Our social media appearances should ensure the widest possible presence on the Internet. This is a legitimate interest within the meaning of Art. 6 (1) lit. f GDPR. The analysis processes initiated by the social networks may be based on divergent legal bases to be specified by the operators of the social networks (e.g., consent within the meaning of Art. 6 (1) (a) GDPR). 

d) Responsibility and assertion of rights 

If you visit one of our social media sites (e.g., Facebook), we, together with the operator of the social media platform, are responsible for the data processing operations triggered during this visit. You can in principle protect your rights (information, correction, deletion, limitation of processing, data portability and complaint) vis-à-vis us as well as vis-à-vis the operator of the respective social media portal (e.g., Facebook). 

Please note that despite the shared responsibility with the social media portal operators, we do not have full influence on the data processing operations of the social media portals. Our options are determined by the company policy of the respective provider. 

e) Storage time 

The data collected directly from us via the social media presence will be deleted from our systems as soon as you ask us to delete it, you revoke your consent to the storage or the purpose for the data storage lapses. Stored cookies remain on your device until you delete them. Mandatory statutory provisions - in particular, retention periods - remain unaffected. 

We have no control over the storage duration of your data that are stored by the social network operators for their own purposes. For details, please contact the social network operators directly (e.g., in their privacy policy, see below). 

f) Your rights 

You have the right to receive information about the origin, recipient and purpose of your stored personal data at any time and free of charge. You also have the right to object, the right to data portability and the right to file a complaint with the responsible regulatory agency. Furthermore, you can request the correction, blocking, deletion and, under certain circumstances, the restriction of the processing of your personal data. 

g) Individual social networks 

Facebook 

We have a profile on Facebook. The provider of this service is Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland (hereinafter Meta). According to Meta’s statement the collected data will also be transferred to the USA and to other third-party countries. 

We have signed an agreement with Meta on shared responsibility for the processing of data (Controller Addendum). This agreement determines which data processing operations we or Meta are responsible for when you visit our Facebook Fanpage. This agreement can be viewed at the following link: https://www.facebook.com/legal/terms/page_controller_addendum

You can customize your advertising settings independently in your user account. Click on the following link and log in: https://www.facebook.com/settings?tab=ads

Data transmission to the US is based on the Standard Contractual Clauses (SCC) of the European Commission. Details can be found here: https://www.facebook.com/legal/EU_data_transfer_addendum and https://de-de.facebook.com/help/566994660333381

Details can be found in the Facebook privacy policy: https://www.facebook.com/about/privacy/

The company is certified in accordance with the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the US, which is intended to ensure compliance with European data protection standards for data processing in the US. Every company certified under the DPF is obliged to comply with these data protection standards. For more information, please contact the provider under the following link: https://www.dataprivacyframework.gov/participant/4452 

Instagram 

We have a profile on Instagram. The provider of this service is Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Irland. 

Data transmission to the US is based on the Standard Contractual Clauses (SCC) of the European Commission. Details can be found here: https://www.facebook.com/legal/EU_data_transfer_addendum and https://de-de.facebook.com/help/566994660333381

For details on how they handle your personal information, see the Instagram Privacy Policy: https://privacycenter.instagram.com/policy/

The company is certified in accordance with the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the US, which is intended to ensure compliance with European data protection standards for data processing in the US. Every company certified under the DPF is obliged to comply with these data protection standards. For more information, please contact the provider under the following link: https://www.dataprivacyframework.gov/participant/4452 

LinkedIn 

We have a LinkedIn profile. The provider is the LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland. LinkedIn uses advertising cookies. 

If you want to disable LinkedIn advertising cookies, please use the following link: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out

Data transmission to the US is based on the Standard Contractual Clauses (SCC) of the European Commission. Details can be found here: https://www.linkedin.com/legal/l/dpa and https://www.linkedin.com/legal/l/eu-sccs

For details on how they handle your personal information, please refer to LinkedIn's privacy policy: https://www.linkedin.com/legal/privacy-policy

The company is certified in accordance with the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the US, which is intended to ensure compliance with European data protection standards for data processing in the US. Every company certified under the DPF is obliged to comply with these data protection standards. For more information, please contact the provider under the following link: https://www.dataprivacyframework.gov/participant/5448 

YouTube 

We have a profile on YouTube. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Details on how they handle your personal data can be found in the YouTube privacy policy: https://policies.google.com/privacy?hl=en

The company is certified in accordance with the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the US, which is intended to ensure compliance with European data protection standards for data processing in the US. Every company certified under the DPF is obliged to comply with these data protection standards. For more information, please contact the provider under the following link: https://www.dataprivacyframework.gov/participant/5780 

9. Changes in the data privacy statement 

We can change and / or amend this data privacy statement to make sure that amendments and changes in law and regulations are adhered to or that updates are taken into account.